{"id":378460,"url":"https://github.com/go-yaml/yaml","last_synced_at":"2026-09-07T23:35:05.192Z","repository":{"id":14730402,"uuid":"17451182","full_name":"go-yaml/yaml","owner":"go-yaml","description":"YAML support for the Go language.","archived":true,"fork":false,"pushed_at":"2025-04-01T17:00:11.000Z","size":1587,"stargazers_count":7018,"open_issues_count":422,"forks_count":1117,"subscribers_count":3,"default_branch":"v3","last_synced_at":"2026-09-02T19:07:29.914Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":null,"language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"other","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/go-yaml.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null}},"created_at":"2014-03-05T18:54:57.000Z","updated_at":"2026-09-02T18:56:31.000Z","dependencies_parsed_at":"2023-02-16T14:45:46.186Z","dependency_job_id":"c3f4f6d2-0694-43c1-a700-724512e371e7","html_url":"https://github.com/go-yaml/yaml","commit_stats":{"total_commits":302,"total_committers":48,"mean_commits":6.291666666666667,"dds":0.2814569536423841,"last_synced_commit":"f6f7691b1fdeb513f56608cd2c32c51f8194bf51"},"previous_names":["go-yaml/go-yaml-v1"],"tags_count":16,"template":false,"template_full_name":null,"purl":"pkg:github/go-yaml/yaml","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/go-yaml","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/refs/heads/v3","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/sbom","scorecard":{"id":432677,"data":{"date":"2025-08-11","repo":{"name":"github.com/go-yaml/yaml","commit":"944c86a7d29391925ed6ac33bee98a0516f1287a"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":4.4,"checks":[{"name":"Code-Review","score":2,"reason":"Found 6/27 approved changesets -- score normalized to 2","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Warn: no topLevel permission defined: .github/workflows/go.yaml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Maintained","score":0,"reason":"project is archived","details":["Warn: Repository is archived."],"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Pinned-Dependencies","score":3,"reason":"dependency not pinned by hash detected -- score normalized to 3","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/go.yaml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/go-yaml/yaml/go.yaml/v3?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/go.yaml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/go-yaml/yaml/go.yaml/v3?enable=pin","Info: 0 out of 2 GitHub-owned GitHubAction dependencies pinned","Info: 1 out of 1 goCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Security-Policy","score":0,"reason":"security policy file not detected","details":["Warn: no security policy file detected","Warn: no security file to analyze","Warn: no security file to analyze","Warn: no security file to analyze"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"License","score":9,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Warn: project license file does not contain an FSF or OSI license."],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Fuzzing","score":10,"reason":"project is fuzzed","details":["Info: OSSFuzz integration found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Branch-Protection","score":0,"reason":"branch protection not enabled on development/release branches","details":["Warn: branch protection not enabled for branch 'v3'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 9 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-19T03:43:53.386Z","repository_id":14730402,"created_at":"2025-08-19T03:43:53.386Z","updated_at":"2025-08-19T03:43:53.386Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":37019155,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-08-22T15:14:58.755Z","status":"online","status_checked_at":"2026-09-02T02:00:06.194Z","response_time":106,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"owner":{"login":"go-yaml","name":"go-yaml","uuid":"6823640","kind":"organization","description":null,"email":null,"website":null,"location":null,"twitter":null,"company":null,"icon_url":"https://avatars.githubusercontent.com/u/6823640?v=4","repositories_count":1,"last_synced_at":"2026-09-06T00:54:23.710Z","metadata":{"has_sponsors_listing":false,"funding":null},"html_url":"https://github.com/go-yaml","funding_links":[],"total_stars":7018,"followers":17,"following":0,"created_at":"2022-11-07T11:53:36.392Z","updated_at":"2026-09-06T00:54:23.738Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/go-yaml","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/go-yaml/repositories"},"packages":[{"id":13963548,"name":"go-github-com-go-yaml-yaml","ecosystem":"guix","description":"YAML support for the Go language","homepage":"https://github.com/go-yaml/yaml","licenses":"asl2.0","normalized_licenses":["CERN-OHL-P-2.0"],"repository_url":"https://github.com/go-yaml/yaml","keywords_array":[],"namespace":null,"versions_count":1,"first_release_published_at":"2026-03-02T22:54:46.134Z","latest_release_published_at":"2026-03-02T22:54:46.134Z","latest_release_number":"0.0.0-20220527083530-f6f7691b1fde","last_synced_at":"2026-04-27T18:11:30.503Z","created_at":"2026-03-02T22:54:45.957Z","updated_at":"2026-08-20T08:34:47.882Z","registry_url":"https://packages.guix.gnu.org/packages/go-github-com-go-yaml-yaml/0.0.0-20220527083530-f6f7691b1fde/","install_command":"guix install go-github-com-go-yaml-yaml","documentation_url":"https://git.savannah.gnu.org/cgit/guix.git/tree/gnu/packages/golang-xyz.scm#n11287","metadata":{"location":"gnu/packages/golang-xyz.scm:11287","variable_name":"go-github-com-go-yaml-yaml"},"repo_metadata":{"id":14730402,"uuid":"17451182","full_name":"go-yaml/yaml","owner":"go-yaml","description":"YAML support for the Go language.","archived":true,"fork":false,"pushed_at":"2025-04-01T17:00:11.000Z","size":1587,"stargazers_count":7020,"open_issues_count":422,"forks_count":1114,"subscribers_count":3,"default_branch":"v3","last_synced_at":"2026-08-20T07:37:33.652Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":null,"language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"other","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/go-yaml.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null}},"created_at":"2014-03-05T18:54:57.000Z","updated_at":"2026-08-16T08:13:17.000Z","dependencies_parsed_at":"2023-02-16T14:45:46.186Z","dependency_job_id":"c3f4f6d2-0694-43c1-a700-724512e371e7","html_url":"https://github.com/go-yaml/yaml","commit_stats":{"total_commits":302,"total_committers":48,"mean_commits":6.291666666666667,"dds":0.2814569536423841,"last_synced_commit":"f6f7691b1fdeb513f56608cd2c32c51f8194bf51"},"previous_names":["go-yaml/go-yaml-v1"],"tags_count":16,"template":false,"template_full_name":null,"purl":"pkg:github/go-yaml/yaml","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/go-yaml","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/refs/heads/v3","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/sbom","scorecard":{"id":432677,"data":{"date":"2025-08-11","repo":{"name":"github.com/go-yaml/yaml","commit":"944c86a7d29391925ed6ac33bee98a0516f1287a"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":4.4,"checks":[{"name":"Code-Review","score":2,"reason":"Found 6/27 approved changesets -- score normalized to 2","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Warn: no topLevel permission defined: .github/workflows/go.yaml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Maintained","score":0,"reason":"project is archived","details":["Warn: Repository is archived."],"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Pinned-Dependencies","score":3,"reason":"dependency not pinned by hash detected -- score normalized to 3","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/go.yaml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/go-yaml/yaml/go.yaml/v3?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/go.yaml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/go-yaml/yaml/go.yaml/v3?enable=pin","Info: 0 out of 2 GitHub-owned GitHubAction dependencies pinned","Info: 1 out of 1 goCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Security-Policy","score":0,"reason":"security policy file not detected","details":["Warn: no security policy file detected","Warn: no security file to analyze","Warn: no security file to analyze","Warn: no security file to analyze"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"License","score":9,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Warn: project license file does not contain an FSF or OSI license."],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Fuzzing","score":10,"reason":"project is fuzzed","details":["Info: OSSFuzz integration found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Branch-Protection","score":0,"reason":"branch protection not enabled on development/release branches","details":["Warn: branch protection not enabled for branch 'v3'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 9 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-19T03:43:53.386Z","repository_id":14730402,"created_at":"2025-08-19T03:43:53.386Z","updated_at":"2025-08-19T03:43:53.386Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":36790094,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-08-06T04:43:03.162Z","status":"online","status_checked_at":"2026-08-20T02:00:06.210Z","response_time":54,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"go-yaml","name":"go-yaml","uuid":"6823640","kind":"organization","description":null,"email":null,"website":null,"location":null,"twitter":null,"company":null,"icon_url":"https://avatars.githubusercontent.com/u/6823640?v=4","repositories_count":1,"last_synced_at":"2026-08-14T04:51:04.725Z","metadata":{"has_sponsors_listing":false,"funding":null},"html_url":"https://github.com/go-yaml","funding_links":[],"total_stars":7023,"followers":17,"following":0,"created_at":"2022-11-07T11:53:36.392Z","updated_at":"2026-08-14T04:51:04.742Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/go-yaml","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/go-yaml/repositories"},"tags":[{"name":"v3.0.1","sha":"f6f7691b1fdeb513f56608cd2c32c51f8194bf51","kind":"commit","published_at":"2022-05-27T08:35:30.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v3.0.1","html_url":"https://github.com/go-yaml/yaml/releases/tag/v3.0.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v3.0.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v3.0.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v3.0.1/manifests"},{"name":"v3.0.0","sha":"00bbc0947ae889b9e480044dbc3bc3e3216a6a89","kind":"commit","published_at":"2022-05-21T10:33:21.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v3.0.0","html_url":"https://github.com/go-yaml/yaml/releases/tag/v3.0.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v3.0.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v3.0.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v3.0.0/manifests"},{"name":"v2.4.0","sha":"7649d4548cb53a614db133b2a8ac1f31859dda8c","kind":"commit","published_at":"2020-11-17T15:46:20.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.4.0","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.4.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.4.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.4.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.4.0/manifests"},{"name":"v2.3.0","sha":"0b1645d91e851e735d3e23330303ce81f70adbe3","kind":"commit","published_at":"2020-05-06T23:08:38.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.3.0","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.3.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.3.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.3.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.3.0/manifests"},{"name":"v2.2.8","sha":"53403b58ad1b561927d19068c655246f2db79d48","kind":"commit","published_at":"2020-01-21T17:19:40.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.2.8","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.2.8","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.2.8","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.8","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.8/manifests"},{"name":"v2.2.7","sha":"1f64d6156d11335c3f22d9330b0ad14fc1e789ce","kind":"commit","published_at":"2019-11-19T21:27:36.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.2.7","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.2.7","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.2.7","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.7","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.7/manifests"},{"name":"v2.2.6","sha":"a95acef3719e5e9f7614cc90a119dee4699291eb","kind":"commit","published_at":"2019-11-19T11:51:43.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.2.6","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.2.6","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.2.6","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.6","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.6/manifests"},{"name":"v2.2.5","sha":"f90ceb4f409096b60e2e9076b38b304b8246e5fa","kind":"commit","published_at":"2019-11-04T18:03:43.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.2.5","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.2.5","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.2.5","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.5","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.5/manifests"},{"name":"v2.2.4","sha":"f221b8435cfb71e54062f6c6e99e9ade30b124d5","kind":"commit","published_at":"2019-10-02T18:33:36.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.2.4","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.2.4","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.2.4","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.4/manifests"},{"name":"v2.2.3","sha":"bb4e33bf68bf89cad44d386192cbed201f35b241","kind":"commit","published_at":"2019-09-30T19:09:21.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.2.3","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.2.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.2.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.3/manifests"},{"name":"v2.2.2","sha":"51d6538a90f86fe93ac480b35f37b2be17fef232","kind":"commit","published_at":"2018-11-15T11:05:04.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.2.2","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.2.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.2.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.2/manifests"},{"name":"v2.2.1","sha":"5420a8b6744d3b0345ab293f6fcba19c978f1183","kind":"commit","published_at":"2018-03-28T19:50:20.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.2.1","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.2.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.2.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.1/manifests"},{"name":"v2.2.0","sha":"86f5ed62f8a0ee96bd888d2efdfd6d4fb100a4eb","kind":"commit","published_at":"2018-03-26T05:07:29.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.2.0","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.2.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.2.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.0/manifests"},{"name":"v2.1.1","sha":"7f97868eec74b32b0982dd158a51a446d1da7eb5","kind":"tag","published_at":"2018-02-23T19:13:14.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.1.1","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.1.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.1.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.1.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.1.1/manifests"},{"name":"v2.1.0","sha":"3e6d767784b037b90a14701b6c9f0643f05db963","kind":"tag","published_at":"2018-02-23T19:02:00.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.1.0","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.1.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.1.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.1.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.1.0/manifests"},{"name":"v2.0.0","sha":"d670f9405373e636a5a2765eea47fac0c9bc91a4","kind":"tag","published_at":"2018-02-23T18:53:08.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.0.0","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.0.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.0.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.0.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.0.0/manifests"}]},"repo_metadata_updated_at":"2026-08-20T08:34:47.882Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":0.0,"dependent_packages_count":0.0,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":100},"purl":"pkg:guix/go-github-com-go-yaml-yaml","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/guix/go-github-com-go-yaml-yaml","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/guix/go-github-com-go-yaml-yaml","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/guix/go-github-com-go-yaml-yaml/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-08-20T00:59:53.265Z","issues_count":179,"pull_requests_count":117,"avg_time_to_close_issue":27337742.275,"avg_time_to_close_pull_request":54605651.71428572,"issues_closed_count":40,"pull_requests_closed_count":42,"pull_request_authors_count":78,"issue_authors_count":167,"avg_comments_per_issue":3.11731843575419,"avg_comments_per_pull_request":1.4700854700854702,"merged_pull_requests_count":3,"bot_issues_count":0,"bot_pull_requests_count":0,"past_year_issues_count":0,"past_year_pull_requests_count":0,"past_year_avg_time_to_close_issue":null,"past_year_avg_time_to_close_pull_request":null,"past_year_issues_closed_count":0,"past_year_pull_requests_closed_count":0,"past_year_pull_request_authors_count":0,"past_year_issue_authors_count":0,"past_year_avg_comments_per_issue":null,"past_year_avg_comments_per_pull_request":null,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":0,"past_year_merged_pull_requests_count":0,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/issues","maintainers":[],"active_maintainers":[]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/guix/packages/go-github-com-go-yaml-yaml/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/guix/packages/go-github-com-go-yaml-yaml/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/guix/packages/go-github-com-go-yaml-yaml/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/guix/packages/go-github-com-go-yaml-yaml/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/guix/packages/go-github-com-go-yaml-yaml/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/guix/packages/go-github-com-go-yaml-yaml/codemeta","maintainers":[],"registry":{"name":"guix","url":"https://guix.gnu.org","ecosystem":"guix","default":true,"packages_count":32455,"maintainers_count":0,"namespaces_count":0,"keywords_count":1654,"github":"guix-mirror","metadata":{"funded_packages_count":1354},"icon_url":"https://github.com/guix-mirror.png","created_at":"2026-03-02T16:23:46.981Z","updated_at":"2026-09-04T05:05:30.543Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/guix/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/guix/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/guix/namespaces"}},{"id":13758178,"name":"golang-yaml.v2","ecosystem":"ubuntu","description":null,"homepage":"https://github.com/go-yaml/yaml/tree/v2","licenses":"other","normalized_licenses":[],"repository_url":"https://github.com/go-yaml/yaml","keywords_array":["universe/devel"],"namespace":"universe","versions_count":1,"first_release_published_at":"2026-02-13T09:18:26.568Z","latest_release_published_at":"2026-02-13T09:18:26.568Z","latest_release_number":"2.4.0-4","last_synced_at":"2026-03-13T10:14:07.278Z","created_at":"2026-02-13T09:18:25.997Z","updated_at":"2026-09-04T15:19:51.622Z","registry_url":"https://launchpad.net/ubuntu/+source/golang-yaml.v2","install_command":"apt-get install golang-yaml.v2","documentation_url":null,"metadata":{"component":"universe","architecture":"all","priority":"extra","binary":"golang-gopkg-yaml.v2-dev","standards_version":"4.6.0","maintainer":"Debian Go Packaging Team \u003cteam+pkg-go@tracker.debian.org\u003e","build_depends":"debhelper-compat (= 13), dh-golang, golang-any, golang-gopkg-check.v1-dev","build_depends_indep":null,"build_depends_arch":null},"repo_metadata":{"id":14730402,"uuid":"17451182","full_name":"go-yaml/yaml","owner":"go-yaml","description":"YAML support for the Go language.","archived":true,"fork":false,"pushed_at":"2025-04-01T17:00:11.000Z","size":1587,"stargazers_count":7018,"open_issues_count":422,"forks_count":1117,"subscribers_count":3,"default_branch":"v3","last_synced_at":"2026-09-02T19:07:29.914Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":null,"language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"other","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/go-yaml.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null}},"created_at":"2014-03-05T18:54:57.000Z","updated_at":"2026-09-02T18:56:31.000Z","dependencies_parsed_at":"2023-02-16T14:45:46.186Z","dependency_job_id":"c3f4f6d2-0694-43c1-a700-724512e371e7","html_url":"https://github.com/go-yaml/yaml","commit_stats":{"total_commits":302,"total_committers":48,"mean_commits":6.291666666666667,"dds":0.2814569536423841,"last_synced_commit":"f6f7691b1fdeb513f56608cd2c32c51f8194bf51"},"previous_names":["go-yaml/go-yaml-v1"],"tags_count":16,"template":false,"template_full_name":null,"purl":"pkg:github/go-yaml/yaml","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/go-yaml","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/refs/heads/v3","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/sbom","scorecard":{"id":432677,"data":{"date":"2025-08-11","repo":{"name":"github.com/go-yaml/yaml","commit":"944c86a7d29391925ed6ac33bee98a0516f1287a"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":4.4,"checks":[{"name":"Code-Review","score":2,"reason":"Found 6/27 approved changesets -- score normalized to 2","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Warn: no topLevel permission defined: .github/workflows/go.yaml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Maintained","score":0,"reason":"project is archived","details":["Warn: Repository is archived."],"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Pinned-Dependencies","score":3,"reason":"dependency not pinned by hash detected -- score normalized to 3","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/go.yaml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/go-yaml/yaml/go.yaml/v3?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/go.yaml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/go-yaml/yaml/go.yaml/v3?enable=pin","Info: 0 out of 2 GitHub-owned GitHubAction dependencies pinned","Info: 1 out of 1 goCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Security-Policy","score":0,"reason":"security policy file not detected","details":["Warn: no security policy file detected","Warn: no security file to analyze","Warn: no security file to analyze","Warn: no security file to analyze"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"License","score":9,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Warn: project license file does not contain an FSF or OSI license."],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Fuzzing","score":10,"reason":"project is fuzzed","details":["Info: OSSFuzz integration found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Branch-Protection","score":0,"reason":"branch protection not enabled on development/release branches","details":["Warn: branch protection not enabled for branch 'v3'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 9 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-19T03:43:53.386Z","repository_id":14730402,"created_at":"2025-08-19T03:43:53.386Z","updated_at":"2025-08-19T03:43:53.386Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":37019155,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-08-22T15:14:58.755Z","status":"online","status_checked_at":"2026-09-02T02:00:06.194Z","response_time":106,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"go-yaml","name":"go-yaml","uuid":"6823640","kind":"organization","description":null,"email":null,"website":null,"location":null,"twitter":null,"company":null,"icon_url":"https://avatars.githubusercontent.com/u/6823640?v=4","repositories_count":1,"last_synced_at":"2026-08-29T00:59:16.798Z","metadata":{"has_sponsors_listing":false,"funding":null},"html_url":"https://github.com/go-yaml","funding_links":[],"total_stars":7019,"followers":17,"following":0,"created_at":"2022-11-07T11:53:36.392Z","updated_at":"2026-08-29T00:59:16.811Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/go-yaml","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/go-yaml/repositories"},"tags":[{"name":"v3.0.1","sha":"f6f7691b1fdeb513f56608cd2c32c51f8194bf51","kind":"commit","published_at":"2022-05-27T08:35:30.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v3.0.1","html_url":"https://github.com/go-yaml/yaml/releases/tag/v3.0.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v3.0.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v3.0.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v3.0.1/manifests"},{"name":"v3.0.0","sha":"00bbc0947ae889b9e480044dbc3bc3e3216a6a89","kind":"commit","published_at":"2022-05-21T10:33:21.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v3.0.0","html_url":"https://github.com/go-yaml/yaml/releases/tag/v3.0.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v3.0.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v3.0.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v3.0.0/manifests"},{"name":"v2.4.0","sha":"7649d4548cb53a614db133b2a8ac1f31859dda8c","kind":"commit","published_at":"2020-11-17T15:46:20.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.4.0","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.4.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.4.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.4.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.4.0/manifests"},{"name":"v2.3.0","sha":"0b1645d91e851e735d3e23330303ce81f70adbe3","kind":"commit","published_at":"2020-05-06T23:08:38.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.3.0","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.3.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.3.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.3.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.3.0/manifests"},{"name":"v2.2.8","sha":"53403b58ad1b561927d19068c655246f2db79d48","kind":"commit","published_at":"2020-01-21T17:19:40.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.2.8","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.2.8","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.2.8","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.8","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.8/manifests"},{"name":"v2.2.7","sha":"1f64d6156d11335c3f22d9330b0ad14fc1e789ce","kind":"commit","published_at":"2019-11-19T21:27:36.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.2.7","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.2.7","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.2.7","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.7","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.7/manifests"},{"name":"v2.2.6","sha":"a95acef3719e5e9f7614cc90a119dee4699291eb","kind":"commit","published_at":"2019-11-19T11:51:43.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.2.6","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.2.6","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.2.6","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.6","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.6/manifests"},{"name":"v2.2.5","sha":"f90ceb4f409096b60e2e9076b38b304b8246e5fa","kind":"commit","published_at":"2019-11-04T18:03:43.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.2.5","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.2.5","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.2.5","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.5","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.5/manifests"},{"name":"v2.2.4","sha":"f221b8435cfb71e54062f6c6e99e9ade30b124d5","kind":"commit","published_at":"2019-10-02T18:33:36.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.2.4","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.2.4","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.2.4","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.4/manifests"},{"name":"v2.2.3","sha":"bb4e33bf68bf89cad44d386192cbed201f35b241","kind":"commit","published_at":"2019-09-30T19:09:21.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.2.3","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.2.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.2.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.3/manifests"},{"name":"v2.2.2","sha":"51d6538a90f86fe93ac480b35f37b2be17fef232","kind":"commit","published_at":"2018-11-15T11:05:04.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.2.2","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.2.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.2.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.2/manifests"},{"name":"v2.2.1","sha":"5420a8b6744d3b0345ab293f6fcba19c978f1183","kind":"commit","published_at":"2018-03-28T19:50:20.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.2.1","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.2.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.2.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.1/manifests"},{"name":"v2.2.0","sha":"86f5ed62f8a0ee96bd888d2efdfd6d4fb100a4eb","kind":"commit","published_at":"2018-03-26T05:07:29.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.2.0","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.2.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.2.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.0/manifests"},{"name":"v2.1.1","sha":"7f97868eec74b32b0982dd158a51a446d1da7eb5","kind":"tag","published_at":"2018-02-23T19:13:14.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.1.1","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.1.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.1.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.1.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.1.1/manifests"},{"name":"v2.1.0","sha":"3e6d767784b037b90a14701b6c9f0643f05db963","kind":"tag","published_at":"2018-02-23T19:02:00.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.1.0","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.1.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.1.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.1.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.1.0/manifests"},{"name":"v2.0.0","sha":"d670f9405373e636a5a2765eea47fac0c9bc91a4","kind":"tag","published_at":"2018-02-23T18:53:08.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.0.0","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.0.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.0.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.0.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.0.0/manifests"}]},"repo_metadata_updated_at":"2026-09-04T15:19:51.622Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":0.0,"dependent_packages_count":0.0,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":100},"purl":"pkg:deb/ubuntu/golang-yaml.v2?arch=source\u0026distro=ubuntu-24.10\u0026repository_url=https://launchpad.net/ubuntu/oracular","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/ubuntu/golang-yaml.v2","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/ubuntu/golang-yaml.v2","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/ubuntu/golang-yaml.v2/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-09-03T21:36:28.384Z","issues_count":179,"pull_requests_count":117,"avg_time_to_close_issue":27337742.275,"avg_time_to_close_pull_request":54605651.71428572,"issues_closed_count":40,"pull_requests_closed_count":42,"pull_request_authors_count":78,"issue_authors_count":167,"avg_comments_per_issue":3.11731843575419,"avg_comments_per_pull_request":1.4700854700854702,"merged_pull_requests_count":3,"bot_issues_count":0,"bot_pull_requests_count":0,"past_year_issues_count":0,"past_year_pull_requests_count":0,"past_year_avg_time_to_close_issue":null,"past_year_avg_time_to_close_pull_request":null,"past_year_issues_closed_count":0,"past_year_pull_requests_closed_count":0,"past_year_pull_request_authors_count":0,"past_year_issue_authors_count":0,"past_year_avg_comments_per_issue":null,"past_year_avg_comments_per_pull_request":null,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":0,"past_year_merged_pull_requests_count":0,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/issues","maintainers":[],"active_maintainers":[]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-24.10/packages/golang-yaml.v2/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-24.10/packages/golang-yaml.v2/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-24.10/packages/golang-yaml.v2/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-24.10/packages/golang-yaml.v2/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-24.10/packages/golang-yaml.v2/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-24.10/packages/golang-yaml.v2/codemeta","maintainers":[],"registry":{"name":"ubuntu-24.10","url":"https://launchpad.net/ubuntu/oracular","ecosystem":"ubuntu","default":false,"packages_count":38437,"maintainers_count":0,"namespaces_count":4,"keywords_count":1440,"github":"ubuntu","metadata":{"codename":"oracular","mirror":"http://old-releases.ubuntu.com/ubuntu","funded_packages_count":1473},"icon_url":"https://github.com/ubuntu.png","created_at":"2026-02-04T11:01:48.028Z","updated_at":"2026-09-04T05:05:26.863Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-24.10/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-24.10/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-24.10/namespaces"}},{"id":13418706,"name":"golang-yaml.v2","ecosystem":"ubuntu","description":null,"homepage":"https://github.com/go-yaml/yaml/tree/v2","licenses":"other","normalized_licenses":[],"repository_url":"https://github.com/go-yaml/yaml","keywords_array":["universe/devel"],"namespace":"universe","versions_count":1,"first_release_published_at":"2026-02-07T04:36:45.495Z","latest_release_published_at":"2026-02-07T04:36:45.495Z","latest_release_number":"2.4.0-2","last_synced_at":"2026-03-07T04:42:53.953Z","created_at":"2026-02-07T04:36:45.221Z","updated_at":"2026-08-20T10:42:07.316Z","registry_url":"https://launchpad.net/ubuntu/+source/golang-yaml.v2","install_command":"apt-get install golang-yaml.v2","documentation_url":null,"metadata":{"component":"universe","architecture":"all","priority":"extra","binary":"golang-gopkg-yaml.v2-dev","standards_version":"4.6.0","maintainer":"Debian Go Packaging Team \u003cteam+pkg-go@tracker.debian.org\u003e","build_depends":"debhelper-compat (= 13), dh-golang (\u003e= 1.10), golang-any, golang-gopkg-check.v1-dev","build_depends_indep":null,"build_depends_arch":null},"repo_metadata":{"id":14730402,"uuid":"17451182","full_name":"go-yaml/yaml","owner":"go-yaml","description":"YAML support for the Go language.","archived":true,"fork":false,"pushed_at":"2025-04-01T17:00:11.000Z","size":1587,"stargazers_count":7020,"open_issues_count":422,"forks_count":1114,"subscribers_count":3,"default_branch":"v3","last_synced_at":"2026-08-20T07:37:33.652Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":null,"language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"other","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/go-yaml.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null}},"created_at":"2014-03-05T18:54:57.000Z","updated_at":"2026-08-16T08:13:17.000Z","dependencies_parsed_at":"2023-02-16T14:45:46.186Z","dependency_job_id":"c3f4f6d2-0694-43c1-a700-724512e371e7","html_url":"https://github.com/go-yaml/yaml","commit_stats":{"total_commits":302,"total_committers":48,"mean_commits":6.291666666666667,"dds":0.2814569536423841,"last_synced_commit":"f6f7691b1fdeb513f56608cd2c32c51f8194bf51"},"previous_names":["go-yaml/go-yaml-v1"],"tags_count":16,"template":false,"template_full_name":null,"purl":"pkg:github/go-yaml/yaml","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/go-yaml","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/refs/heads/v3","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/sbom","scorecard":{"id":432677,"data":{"date":"2025-08-11","repo":{"name":"github.com/go-yaml/yaml","commit":"944c86a7d29391925ed6ac33bee98a0516f1287a"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":4.4,"checks":[{"name":"Code-Review","score":2,"reason":"Found 6/27 approved changesets -- score normalized to 2","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Warn: no topLevel permission defined: .github/workflows/go.yaml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Maintained","score":0,"reason":"project is archived","details":["Warn: Repository is archived."],"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Pinned-Dependencies","score":3,"reason":"dependency not pinned by hash detected -- score normalized to 3","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/go.yaml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/go-yaml/yaml/go.yaml/v3?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/go.yaml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/go-yaml/yaml/go.yaml/v3?enable=pin","Info: 0 out of 2 GitHub-owned GitHubAction dependencies pinned","Info: 1 out of 1 goCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Security-Policy","score":0,"reason":"security policy file not detected","details":["Warn: no security policy file detected","Warn: no security file to analyze","Warn: no security file to analyze","Warn: no security file to analyze"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"License","score":9,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Warn: project license file does not contain an FSF or OSI license."],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Fuzzing","score":10,"reason":"project is fuzzed","details":["Info: OSSFuzz integration found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Branch-Protection","score":0,"reason":"branch protection not enabled on development/release branches","details":["Warn: branch protection not enabled for branch 'v3'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 9 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-19T03:43:53.386Z","repository_id":14730402,"created_at":"2025-08-19T03:43:53.386Z","updated_at":"2025-08-19T03:43:53.386Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":36790094,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-08-06T04:43:03.162Z","status":"online","status_checked_at":"2026-08-20T02:00:06.210Z","response_time":54,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"go-yaml","name":"go-yaml","uuid":"6823640","kind":"organization","description":null,"email":null,"website":null,"location":null,"twitter":null,"company":null,"icon_url":"https://avatars.githubusercontent.com/u/6823640?v=4","repositories_count":1,"last_synced_at":"2026-08-14T04:51:04.725Z","metadata":{"has_sponsors_listing":false,"funding":null},"html_url":"https://github.com/go-yaml","funding_links":[],"total_stars":7023,"followers":17,"following":0,"created_at":"2022-11-07T11:53:36.392Z","updated_at":"2026-08-14T04:51:04.742Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/go-yaml","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/go-yaml/repositories"},"tags":[{"name":"v3.0.1","sha":"f6f7691b1fdeb513f56608cd2c32c51f8194bf51","kind":"commit","published_at":"2022-05-27T08:35:30.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v3.0.1","html_url":"https://github.com/go-yaml/yaml/releases/tag/v3.0.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v3.0.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v3.0.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v3.0.1/manifests"},{"name":"v3.0.0","sha":"00bbc0947ae889b9e480044dbc3bc3e3216a6a89","kind":"commit","published_at":"2022-05-21T10:33:21.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v3.0.0","html_url":"https://github.com/go-yaml/yaml/releases/tag/v3.0.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v3.0.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v3.0.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v3.0.0/manifests"},{"name":"v2.4.0","sha":"7649d4548cb53a614db133b2a8ac1f31859dda8c","kind":"commit","published_at":"2020-11-17T15:46:20.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.4.0","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.4.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.4.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.4.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.4.0/manifests"},{"name":"v2.3.0","sha":"0b1645d91e851e735d3e23330303ce81f70adbe3","kind":"commit","published_at":"2020-05-06T23:08:38.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.3.0","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.3.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.3.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.3.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.3.0/manifests"},{"name":"v2.2.8","sha":"53403b58ad1b561927d19068c655246f2db79d48","kind":"commit","published_at":"2020-01-21T17:19:40.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.2.8","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.2.8","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.2.8","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.8","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.8/manifests"},{"name":"v2.2.7","sha":"1f64d6156d11335c3f22d9330b0ad14fc1e789ce","kind":"commit","published_at":"2019-11-19T21:27:36.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.2.7","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.2.7","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.2.7","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.7","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.7/manifests"},{"name":"v2.2.6","sha":"a95acef3719e5e9f7614cc90a119dee4699291eb","kind":"commit","published_at":"2019-11-19T11:51:43.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.2.6","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.2.6","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.2.6","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.6","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.6/manifests"},{"name":"v2.2.5","sha":"f90ceb4f409096b60e2e9076b38b304b8246e5fa","kind":"commit","published_at":"2019-11-04T18:03:43.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.2.5","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.2.5","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.2.5","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.5","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.5/manifests"},{"name":"v2.2.4","sha":"f221b8435cfb71e54062f6c6e99e9ade30b124d5","kind":"commit","published_at":"2019-10-02T18:33:36.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.2.4","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.2.4","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.2.4","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.4/manifests"},{"name":"v2.2.3","sha":"bb4e33bf68bf89cad44d386192cbed201f35b241","kind":"commit","published_at":"2019-09-30T19:09:21.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.2.3","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.2.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.2.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.3/manifests"},{"name":"v2.2.2","sha":"51d6538a90f86fe93ac480b35f37b2be17fef232","kind":"commit","published_at":"2018-11-15T11:05:04.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.2.2","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.2.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.2.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.2/manifests"},{"name":"v2.2.1","sha":"5420a8b6744d3b0345ab293f6fcba19c978f1183","kind":"commit","published_at":"2018-03-28T19:50:20.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.2.1","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.2.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.2.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.1/manifests"},{"name":"v2.2.0","sha":"86f5ed62f8a0ee96bd888d2efdfd6d4fb100a4eb","kind":"commit","published_at":"2018-03-26T05:07:29.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.2.0","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.2.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.2.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.0/manifests"},{"name":"v2.1.1","sha":"7f97868eec74b32b0982dd158a51a446d1da7eb5","kind":"tag","published_at":"2018-02-23T19:13:14.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.1.1","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.1.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.1.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.1.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.1.1/manifests"},{"name":"v2.1.0","sha":"3e6d767784b037b90a14701b6c9f0643f05db963","kind":"tag","published_at":"2018-02-23T19:02:00.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.1.0","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.1.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.1.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.1.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.1.0/manifests"},{"name":"v2.0.0","sha":"d670f9405373e636a5a2765eea47fac0c9bc91a4","kind":"tag","published_at":"2018-02-23T18:53:08.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.0.0","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.0.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.0.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.0.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.0.0/manifests"}]},"repo_metadata_updated_at":"2026-08-20T10:42:07.315Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":0.0,"dependent_packages_count":0.0,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":100},"purl":"pkg:deb/ubuntu/golang-yaml.v2?arch=source\u0026distro=ubuntu-22.04\u0026repository_url=https://launchpad.net/ubuntu/jammy","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/ubuntu/golang-yaml.v2","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/ubuntu/golang-yaml.v2","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/ubuntu/golang-yaml.v2/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-08-20T00:59:53.265Z","issues_count":179,"pull_requests_count":117,"avg_time_to_close_issue":27337742.275,"avg_time_to_close_pull_request":54605651.71428572,"issues_closed_count":40,"pull_requests_closed_count":42,"pull_request_authors_count":78,"issue_authors_count":167,"avg_comments_per_issue":3.11731843575419,"avg_comments_per_pull_request":1.4700854700854702,"merged_pull_requests_count":3,"bot_issues_count":0,"bot_pull_requests_count":0,"past_year_issues_count":0,"past_year_pull_requests_count":0,"past_year_avg_time_to_close_issue":null,"past_year_avg_time_to_close_pull_request":null,"past_year_issues_closed_count":0,"past_year_pull_requests_closed_count":0,"past_year_pull_request_authors_count":0,"past_year_issue_authors_count":0,"past_year_avg_comments_per_issue":null,"past_year_avg_comments_per_pull_request":null,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":0,"past_year_merged_pull_requests_count":0,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/issues","maintainers":[],"active_maintainers":[]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-22.04/packages/golang-yaml.v2/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-22.04/packages/golang-yaml.v2/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-22.04/packages/golang-yaml.v2/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-22.04/packages/golang-yaml.v2/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-22.04/packages/golang-yaml.v2/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-22.04/packages/golang-yaml.v2/codemeta","maintainers":[],"registry":{"name":"ubuntu-22.04","url":"https://launchpad.net/ubuntu/jammy","ecosystem":"ubuntu","default":false,"packages_count":34289,"maintainers_count":0,"namespaces_count":4,"keywords_count":1498,"github":"ubuntu","metadata":{"codename":"jammy","funded_packages_count":1095},"icon_url":"https://github.com/ubuntu.png","created_at":"2026-02-04T11:01:46.486Z","updated_at":"2026-09-04T05:05:57.638Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-22.04/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-22.04/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-22.04/namespaces"}},{"id":4539366,"name":"gopkg.in/mikefarah/yaml.v3","ecosystem":"go","description":"Package yaml implements YAML support for the Go language.\n\nSource code and other details for the project are available at GitHub:","homepage":"https://github.com/go-yaml/yaml","licenses":"Apache-2.0, MIT","normalized_licenses":["Apache-2.0","MIT"],"repository_url":"https://github.com/go-yaml/yaml","keywords_array":[],"namespace":"gopkg.in/mikefarah","versions_count":0,"first_release_published_at":null,"latest_release_published_at":"2026-05-18T05:21:32.049Z","latest_release_number":null,"last_synced_at":"2026-09-07T00:58:46.448Z","created_at":"2022-07-08T03:01:51.939Z","updated_at":"2026-09-07T00:58:46.448Z","registry_url":"https://pkg.go.dev/gopkg.in/mikefarah/yaml.v3","install_command":"go get gopkg.in/mikefarah/yaml.v3","documentation_url":"https://pkg.go.dev/gopkg.in/mikefarah/yaml.v3#section-documentation","metadata":{},"repo_metadata":{"id":14730402,"uuid":"17451182","full_name":"go-yaml/yaml","owner":"go-yaml","description":"YAML support for the Go language.","archived":true,"fork":false,"pushed_at":"2025-04-01T17:00:11.000Z","size":1587,"stargazers_count":7023,"open_issues_count":422,"forks_count":1112,"subscribers_count":3,"default_branch":"v3","last_synced_at":"2026-08-13T04:16:31.004Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":null,"language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"other","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/go-yaml.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null}},"created_at":"2014-03-05T18:54:57.000Z","updated_at":"2026-08-11T12:38:33.000Z","dependencies_parsed_at":"2023-02-16T14:45:46.186Z","dependency_job_id":"c3f4f6d2-0694-43c1-a700-724512e371e7","html_url":"https://github.com/go-yaml/yaml","commit_stats":{"total_commits":302,"total_committers":48,"mean_commits":6.291666666666667,"dds":0.2814569536423841,"last_synced_commit":"f6f7691b1fdeb513f56608cd2c32c51f8194bf51"},"previous_names":["go-yaml/go-yaml-v1"],"tags_count":16,"template":false,"template_full_name":null,"purl":"pkg:github/go-yaml/yaml","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/go-yaml","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/refs/heads/v3","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/sbom","scorecard":{"id":432677,"data":{"date":"2025-08-11","repo":{"name":"github.com/go-yaml/yaml","commit":"944c86a7d29391925ed6ac33bee98a0516f1287a"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":4.4,"checks":[{"name":"Code-Review","score":2,"reason":"Found 6/27 approved changesets -- score normalized to 2","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Warn: no topLevel permission defined: .github/workflows/go.yaml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Maintained","score":0,"reason":"project is archived","details":["Warn: Repository is archived."],"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Pinned-Dependencies","score":3,"reason":"dependency not pinned by hash detected -- score normalized to 3","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/go.yaml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/go-yaml/yaml/go.yaml/v3?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/go.yaml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/go-yaml/yaml/go.yaml/v3?enable=pin","Info: 0 out of 2 GitHub-owned GitHubAction dependencies pinned","Info: 1 out of 1 goCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Security-Policy","score":0,"reason":"security policy file not detected","details":["Warn: no security policy file detected","Warn: no security file to analyze","Warn: no security file to analyze","Warn: no security file to analyze"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"License","score":9,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Warn: project license file does not contain an FSF or OSI license."],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Fuzzing","score":10,"reason":"project is fuzzed","details":["Info: OSSFuzz integration found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Branch-Protection","score":0,"reason":"branch protection not enabled on development/release branches","details":["Warn: branch protection not enabled for branch 'v3'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 9 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-19T03:43:53.386Z","repository_id":14730402,"created_at":"2025-08-19T03:43:53.386Z","updated_at":"2025-08-19T03:43:53.386Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":36629978,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-08-06T04:43:03.162Z","status":"online","status_checked_at":"2026-08-14T02:00:06.934Z","response_time":54,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"go-yaml","name":"go-yaml","uuid":"6823640","kind":"organization","description":null,"email":null,"website":null,"location":null,"twitter":null,"company":null,"icon_url":"https://avatars.githubusercontent.com/u/6823640?v=4","repositories_count":1,"last_synced_at":"2026-08-14T04:51:04.725Z","metadata":{"has_sponsors_listing":false,"funding":null},"html_url":"https://github.com/go-yaml","funding_links":[],"total_stars":7023,"followers":17,"following":0,"created_at":"2022-11-07T11:53:36.392Z","updated_at":"2026-08-14T04:51:04.742Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/go-yaml","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/go-yaml/repositories"},"tags":[{"name":"v3.0.1","sha":"f6f7691b1fdeb513f56608cd2c32c51f8194bf51","kind":"commit","published_at":"2022-05-27T08:35:30.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v3.0.1","html_url":"https://github.com/go-yaml/yaml/releases/tag/v3.0.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v3.0.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v3.0.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v3.0.1/manifests"},{"name":"v3.0.0","sha":"00bbc0947ae889b9e480044dbc3bc3e3216a6a89","kind":"commit","published_at":"2022-05-21T10:33:21.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v3.0.0","html_url":"https://github.com/go-yaml/yaml/releases/tag/v3.0.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v3.0.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v3.0.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v3.0.0/manifests"},{"name":"v2.4.0","sha":"7649d4548cb53a614db133b2a8ac1f31859dda8c","kind":"commit","published_at":"2020-11-17T15:46:20.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.4.0","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.4.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.4.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.4.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.4.0/manifests"},{"name":"v2.3.0","sha":"0b1645d91e851e735d3e23330303ce81f70adbe3","kind":"commit","published_at":"2020-05-06T23:08:38.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.3.0","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.3.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.3.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.3.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.3.0/manifests"},{"name":"v2.2.8","sha":"53403b58ad1b561927d19068c655246f2db79d48","kind":"commit","published_at":"2020-01-21T17:19:40.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.2.8","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.2.8","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.2.8","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.8","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.8/manifests"},{"name":"v2.2.7","sha":"1f64d6156d11335c3f22d9330b0ad14fc1e789ce","kind":"commit","published_at":"2019-11-19T21:27:36.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.2.7","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.2.7","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.2.7","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.7","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.7/manifests"},{"name":"v2.2.6","sha":"a95acef3719e5e9f7614cc90a119dee4699291eb","kind":"commit","published_at":"2019-11-19T11:51:43.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.2.6","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.2.6","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.2.6","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.6","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.6/manifests"},{"name":"v2.2.5","sha":"f90ceb4f409096b60e2e9076b38b304b8246e5fa","kind":"commit","published_at":"2019-11-04T18:03:43.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.2.5","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.2.5","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.2.5","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.5","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.5/manifests"},{"name":"v2.2.4","sha":"f221b8435cfb71e54062f6c6e99e9ade30b124d5","kind":"commit","published_at":"2019-10-02T18:33:36.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.2.4","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.2.4","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.2.4","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.4/manifests"},{"name":"v2.2.3","sha":"bb4e33bf68bf89cad44d386192cbed201f35b241","kind":"commit","published_at":"2019-09-30T19:09:21.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.2.3","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.2.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.2.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.3/manifests"},{"name":"v2.2.2","sha":"51d6538a90f86fe93ac480b35f37b2be17fef232","kind":"commit","published_at":"2018-11-15T11:05:04.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.2.2","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.2.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.2.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.2/manifests"},{"name":"v2.2.1","sha":"5420a8b6744d3b0345ab293f6fcba19c978f1183","kind":"commit","published_at":"2018-03-28T19:50:20.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.2.1","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.2.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.2.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.1/manifests"},{"name":"v2.2.0","sha":"86f5ed62f8a0ee96bd888d2efdfd6d4fb100a4eb","kind":"commit","published_at":"2018-03-26T05:07:29.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.2.0","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.2.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.2.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.0/manifests"},{"name":"v2.1.1","sha":"7f97868eec74b32b0982dd158a51a446d1da7eb5","kind":"tag","published_at":"2018-02-23T19:13:14.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.1.1","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.1.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.1.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.1.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.1.1/manifests"},{"name":"v2.1.0","sha":"3e6d767784b037b90a14701b6c9f0643f05db963","kind":"tag","published_at":"2018-02-23T19:02:00.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.1.0","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.1.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.1.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.1.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.1.0/manifests"},{"name":"v2.0.0","sha":"d670f9405373e636a5a2765eea47fac0c9bc91a4","kind":"tag","published_at":"2018-02-23T18:53:08.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.0.0","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.0.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.0.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.0.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.0.0/manifests"}]},"repo_metadata_updated_at":"2026-08-20T07:47:54.183Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":9.345852080216646,"dependent_packages_count":6.999148183520997,"stargazers_count":0.5404938291002506,"forks_count":0.7637168826883732,"average":4.4123027438815665},"purl":"pkg:golang/gopkg.in/mikefarah/yaml.v3","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/go/gopkg.in/mikefarah/yaml.v3","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/go/gopkg.in/mikefarah/yaml.v3","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/go/gopkg.in/mikefarah/yaml.v3/dependencies","status":"removed","funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-08-20T00:59:53.265Z","issues_count":179,"pull_requests_count":117,"avg_time_to_close_issue":27337742.275,"avg_time_to_close_pull_request":54605651.71428572,"issues_closed_count":40,"pull_requests_closed_count":42,"pull_request_authors_count":78,"issue_authors_count":167,"avg_comments_per_issue":3.11731843575419,"avg_comments_per_pull_request":1.4700854700854702,"merged_pull_requests_count":3,"bot_issues_count":0,"bot_pull_requests_count":0,"past_year_issues_count":0,"past_year_pull_requests_count":0,"past_year_avg_time_to_close_issue":null,"past_year_avg_time_to_close_pull_request":null,"past_year_issues_closed_count":0,"past_year_pull_requests_closed_count":0,"past_year_pull_request_authors_count":0,"past_year_issue_authors_count":0,"past_year_avg_comments_per_issue":null,"past_year_avg_comments_per_pull_request":null,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":0,"past_year_merged_pull_requests_count":0,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/issues","maintainers":[],"active_maintainers":[]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/gopkg.in%2Fmikefarah%2Fyaml.v3/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/gopkg.in%2Fmikefarah%2Fyaml.v3/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/gopkg.in%2Fmikefarah%2Fyaml.v3/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/gopkg.in%2Fmikefarah%2Fyaml.v3/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/gopkg.in%2Fmikefarah%2Fyaml.v3/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/gopkg.in%2Fmikefarah%2Fyaml.v3/codemeta","maintainers":[],"registry":{"name":"proxy.golang.org","url":"https://proxy.golang.org","ecosystem":"go","default":true,"packages_count":2287853,"maintainers_count":0,"namespaces_count":839605,"keywords_count":126639,"github":"golang","metadata":{"funded_packages_count":74445,"sync_missing_packages_cursor":{"timestamp":"2026-09-07T00:07:19.468853Z","path":"github.com/herodotusdev/accumulators","version":"v4.2.0-alpha.1+incompatible"},"rate_limit":1},"icon_url":"https://github.com/golang.png","created_at":"2022-04-04T15:19:22.939Z","updated_at":"2026-09-07T00:08:13.518Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/namespaces"}},{"id":13439211,"name":"golang-yaml.v2","ecosystem":"ubuntu","description":null,"homepage":"https://github.com/go-yaml/yaml/tree/v2","licenses":"other","normalized_licenses":[],"repository_url":"https://github.com/go-yaml/yaml","keywords_array":["universe/devel"],"namespace":"universe","versions_count":1,"first_release_published_at":"2026-02-08T02:14:28.828Z","latest_release_published_at":"2026-02-08T02:14:28.828Z","latest_release_number":"2.2.2-1","last_synced_at":"2026-03-08T04:57:23.973Z","created_at":"2026-02-08T02:14:28.517Z","updated_at":"2026-08-28T04:02:04.541Z","registry_url":"https://launchpad.net/ubuntu/+source/golang-yaml.v2","install_command":"apt-get install golang-yaml.v2","documentation_url":null,"metadata":{"component":"universe","architecture":"all","priority":"extra","binary":"golang-gopkg-yaml.v2-dev, golang-yaml.v2-dev","standards_version":"4.2.1","maintainer":"Debian Go Packaging Team \u003cteam+pkg-go@tracker.debian.org\u003e","build_depends":"debhelper (\u003e= 11), dh-golang (\u003e= 1.10), golang-any, golang-gopkg-check.v1-dev","build_depends_indep":null,"build_depends_arch":null},"repo_metadata":{"id":14730402,"uuid":"17451182","full_name":"go-yaml/yaml","owner":"go-yaml","description":"YAML support for the Go language.","archived":true,"fork":false,"pushed_at":"2025-04-01T17:00:11.000Z","size":1587,"stargazers_count":7019,"open_issues_count":422,"forks_count":1115,"subscribers_count":3,"default_branch":"v3","last_synced_at":"2026-08-27T09:55:02.448Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":null,"language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"other","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/go-yaml.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null}},"created_at":"2014-03-05T18:54:57.000Z","updated_at":"2026-08-22T06:16:14.000Z","dependencies_parsed_at":"2023-02-16T14:45:46.186Z","dependency_job_id":"c3f4f6d2-0694-43c1-a700-724512e371e7","html_url":"https://github.com/go-yaml/yaml","commit_stats":{"total_commits":302,"total_committers":48,"mean_commits":6.291666666666667,"dds":0.2814569536423841,"last_synced_commit":"f6f7691b1fdeb513f56608cd2c32c51f8194bf51"},"previous_names":["go-yaml/go-yaml-v1"],"tags_count":16,"template":false,"template_full_name":null,"purl":"pkg:github/go-yaml/yaml","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/go-yaml","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/refs/heads/v3","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/sbom","scorecard":{"id":432677,"data":{"date":"2025-08-11","repo":{"name":"github.com/go-yaml/yaml","commit":"944c86a7d29391925ed6ac33bee98a0516f1287a"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":4.4,"checks":[{"name":"Code-Review","score":2,"reason":"Found 6/27 approved changesets -- score normalized to 2","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Warn: no topLevel permission defined: .github/workflows/go.yaml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Maintained","score":0,"reason":"project is archived","details":["Warn: Repository is archived."],"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Pinned-Dependencies","score":3,"reason":"dependency not pinned by hash detected -- score normalized to 3","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/go.yaml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/go-yaml/yaml/go.yaml/v3?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/go.yaml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/go-yaml/yaml/go.yaml/v3?enable=pin","Info: 0 out of 2 GitHub-owned GitHubAction dependencies pinned","Info: 1 out of 1 goCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Security-Policy","score":0,"reason":"security policy file not detected","details":["Warn: no security policy file detected","Warn: no security file to analyze","Warn: no security file to analyze","Warn: no security file to analyze"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"License","score":9,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Warn: project license file does not contain an FSF or OSI license."],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Fuzzing","score":10,"reason":"project is fuzzed","details":["Info: OSSFuzz integration found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Branch-Protection","score":0,"reason":"branch protection not enabled on development/release branches","details":["Warn: branch protection not enabled for branch 'v3'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 9 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-19T03:43:53.386Z","repository_id":14730402,"created_at":"2025-08-19T03:43:53.386Z","updated_at":"2025-08-19T03:43:53.386Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":36941331,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-08-22T15:14:58.755Z","status":"online","status_checked_at":"2026-08-27T02:00:07.166Z","response_time":96,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"go-yaml","name":"go-yaml","uuid":"6823640","kind":"organization","description":null,"email":null,"website":null,"location":null,"twitter":null,"company":null,"icon_url":"https://avatars.githubusercontent.com/u/6823640?v=4","repositories_count":1,"last_synced_at":"2026-08-22T00:54:17.902Z","metadata":{"has_sponsors_listing":false,"funding":null},"html_url":"https://github.com/go-yaml","funding_links":[],"total_stars":7020,"followers":17,"following":0,"created_at":"2022-11-07T11:53:36.392Z","updated_at":"2026-08-22T00:54:17.916Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/go-yaml","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/go-yaml/repositories"},"tags":[{"name":"v3.0.1","sha":"f6f7691b1fdeb513f56608cd2c32c51f8194bf51","kind":"commit","published_at":"2022-05-27T08:35:30.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v3.0.1","html_url":"https://github.com/go-yaml/yaml/releases/tag/v3.0.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v3.0.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v3.0.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v3.0.1/manifests"},{"name":"v3.0.0","sha":"00bbc0947ae889b9e480044dbc3bc3e3216a6a89","kind":"commit","published_at":"2022-05-21T10:33:21.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v3.0.0","html_url":"https://github.com/go-yaml/yaml/releases/tag/v3.0.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v3.0.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v3.0.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v3.0.0/manifests"},{"name":"v2.4.0","sha":"7649d4548cb53a614db133b2a8ac1f31859dda8c","kind":"commit","published_at":"2020-11-17T15:46:20.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.4.0","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.4.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.4.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.4.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.4.0/manifests"},{"name":"v2.3.0","sha":"0b1645d91e851e735d3e23330303ce81f70adbe3","kind":"commit","published_at":"2020-05-06T23:08:38.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.3.0","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.3.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.3.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.3.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.3.0/manifests"},{"name":"v2.2.8","sha":"53403b58ad1b561927d19068c655246f2db79d48","kind":"commit","published_at":"2020-01-21T17:19:40.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.2.8","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.2.8","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.2.8","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.8","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.8/manifests"},{"name":"v2.2.7","sha":"1f64d6156d11335c3f22d9330b0ad14fc1e789ce","kind":"commit","published_at":"2019-11-19T21:27:36.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.2.7","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.2.7","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.2.7","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.7","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.7/manifests"},{"name":"v2.2.6","sha":"a95acef3719e5e9f7614cc90a119dee4699291eb","kind":"commit","published_at":"2019-11-19T11:51:43.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.2.6","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.2.6","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.2.6","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.6","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.6/manifests"},{"name":"v2.2.5","sha":"f90ceb4f409096b60e2e9076b38b304b8246e5fa","kind":"commit","published_at":"2019-11-04T18:03:43.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.2.5","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.2.5","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.2.5","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.5","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.5/manifests"},{"name":"v2.2.4","sha":"f221b8435cfb71e54062f6c6e99e9ade30b124d5","kind":"commit","published_at":"2019-10-02T18:33:36.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.2.4","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.2.4","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.2.4","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.4/manifests"},{"name":"v2.2.3","sha":"bb4e33bf68bf89cad44d386192cbed201f35b241","kind":"commit","published_at":"2019-09-30T19:09:21.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.2.3","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.2.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.2.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.3/manifests"},{"name":"v2.2.2","sha":"51d6538a90f86fe93ac480b35f37b2be17fef232","kind":"commit","published_at":"2018-11-15T11:05:04.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.2.2","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.2.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.2.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.2/manifests"},{"name":"v2.2.1","sha":"5420a8b6744d3b0345ab293f6fcba19c978f1183","kind":"commit","published_at":"2018-03-28T19:50:20.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.2.1","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.2.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.2.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.1/manifests"},{"name":"v2.2.0","sha":"86f5ed62f8a0ee96bd888d2efdfd6d4fb100a4eb","kind":"commit","published_at":"2018-03-26T05:07:29.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.2.0","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.2.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.2.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.0/manifests"},{"name":"v2.1.1","sha":"7f97868eec74b32b0982dd158a51a446d1da7eb5","kind":"tag","published_at":"2018-02-23T19:13:14.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.1.1","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.1.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.1.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.1.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.1.1/manifests"},{"name":"v2.1.0","sha":"3e6d767784b037b90a14701b6c9f0643f05db963","kind":"tag","published_at":"2018-02-23T19:02:00.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.1.0","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.1.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.1.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.1.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.1.0/manifests"},{"name":"v2.0.0","sha":"d670f9405373e636a5a2765eea47fac0c9bc91a4","kind":"tag","published_at":"2018-02-23T18:53:08.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.0.0","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.0.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.0.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.0.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.0.0/manifests"}]},"repo_metadata_updated_at":"2026-08-28T04:02:04.541Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":0.0,"dependent_packages_count":0.0,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":100},"purl":"pkg:deb/ubuntu/golang-yaml.v2?arch=source\u0026distro=ubuntu-20.04\u0026repository_url=https://launchpad.net/ubuntu/focal","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/ubuntu/golang-yaml.v2","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/ubuntu/golang-yaml.v2","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/ubuntu/golang-yaml.v2/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-08-27T11:13:54.652Z","issues_count":179,"pull_requests_count":117,"avg_time_to_close_issue":27337742.275,"avg_time_to_close_pull_request":54605651.71428572,"issues_closed_count":40,"pull_requests_closed_count":42,"pull_request_authors_count":78,"issue_authors_count":167,"avg_comments_per_issue":3.11731843575419,"avg_comments_per_pull_request":1.4700854700854702,"merged_pull_requests_count":3,"bot_issues_count":0,"bot_pull_requests_count":0,"past_year_issues_count":0,"past_year_pull_requests_count":0,"past_year_avg_time_to_close_issue":null,"past_year_avg_time_to_close_pull_request":null,"past_year_issues_closed_count":0,"past_year_pull_requests_closed_count":0,"past_year_pull_request_authors_count":0,"past_year_issue_authors_count":0,"past_year_avg_comments_per_issue":null,"past_year_avg_comments_per_pull_request":null,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":0,"past_year_merged_pull_requests_count":0,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/issues","maintainers":[],"active_maintainers":[]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-20.04/packages/golang-yaml.v2/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-20.04/packages/golang-yaml.v2/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-20.04/packages/golang-yaml.v2/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-20.04/packages/golang-yaml.v2/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-20.04/packages/golang-yaml.v2/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-20.04/packages/golang-yaml.v2/codemeta","maintainers":[],"registry":{"name":"ubuntu-20.04","url":"https://launchpad.net/ubuntu/focal","ecosystem":"ubuntu","default":false,"packages_count":30789,"maintainers_count":0,"namespaces_count":4,"keywords_count":1425,"github":"ubuntu","metadata":{"codename":"focal","funded_packages_count":832},"icon_url":"https://github.com/ubuntu.png","created_at":"2026-02-04T11:01:47.233Z","updated_at":"2026-09-04T05:06:04.436Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-20.04/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-20.04/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-20.04/namespaces"}},{"id":11710215,"name":"gopkg.in/yaml","ecosystem":"go","description":"Package yaml implements YAML support for the Go language.\n\nSource code and other details for the project are available at GitHub:","homepage":"https://github.com/go-yaml/yaml","licenses":"Apache-2.0, MIT","normalized_licenses":["Apache-2.0","MIT"],"repository_url":"https://github.com/go-yaml/yaml","keywords_array":[],"namespace":"gopkg.in","versions_count":0,"first_release_published_at":null,"latest_release_published_at":"2026-05-18T05:21:27.886Z","latest_release_number":null,"last_synced_at":"2026-09-06T23:17:33.356Z","created_at":"2025-05-30T12:07:05.099Z","updated_at":"2026-09-06T23:17:33.356Z","registry_url":"https://pkg.go.dev/gopkg.in/yaml","install_command":"go get gopkg.in/yaml","documentation_url":"https://pkg.go.dev/gopkg.in/yaml#section-documentation","metadata":{},"repo_metadata":{"id":14730402,"uuid":"17451182","full_name":"go-yaml/yaml","owner":"go-yaml","description":"YAML support for the Go language.","archived":true,"fork":false,"pushed_at":"2025-04-01T17:00:11.000Z","size":1587,"stargazers_count":7023,"open_issues_count":422,"forks_count":1112,"subscribers_count":3,"default_branch":"v3","last_synced_at":"2026-08-13T04:16:31.004Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":null,"language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"other","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/go-yaml.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null}},"created_at":"2014-03-05T18:54:57.000Z","updated_at":"2026-08-11T12:38:33.000Z","dependencies_parsed_at":"2023-02-16T14:45:46.186Z","dependency_job_id":"c3f4f6d2-0694-43c1-a700-724512e371e7","html_url":"https://github.com/go-yaml/yaml","commit_stats":{"total_commits":302,"total_committers":48,"mean_commits":6.291666666666667,"dds":0.2814569536423841,"last_synced_commit":"f6f7691b1fdeb513f56608cd2c32c51f8194bf51"},"previous_names":["go-yaml/go-yaml-v1"],"tags_count":16,"template":false,"template_full_name":null,"purl":"pkg:github/go-yaml/yaml","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/go-yaml","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/refs/heads/v3","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/sbom","scorecard":{"id":432677,"data":{"date":"2025-08-11","repo":{"name":"github.com/go-yaml/yaml","commit":"944c86a7d29391925ed6ac33bee98a0516f1287a"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":4.4,"checks":[{"name":"Code-Review","score":2,"reason":"Found 6/27 approved changesets -- score normalized to 2","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Warn: no topLevel permission defined: .github/workflows/go.yaml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Maintained","score":0,"reason":"project is archived","details":["Warn: Repository is archived."],"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Pinned-Dependencies","score":3,"reason":"dependency not pinned by hash detected -- score normalized to 3","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/go.yaml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/go-yaml/yaml/go.yaml/v3?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/go.yaml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/go-yaml/yaml/go.yaml/v3?enable=pin","Info: 0 out of 2 GitHub-owned GitHubAction dependencies pinned","Info: 1 out of 1 goCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Security-Policy","score":0,"reason":"security policy file not detected","details":["Warn: no security policy file detected","Warn: no security file to analyze","Warn: no security file to analyze","Warn: no security file to analyze"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"License","score":9,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Warn: project license file does not contain an FSF or OSI license."],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Fuzzing","score":10,"reason":"project is fuzzed","details":["Info: OSSFuzz integration found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Branch-Protection","score":0,"reason":"branch protection not enabled on development/release branches","details":["Warn: branch protection not enabled for branch 'v3'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 9 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-19T03:43:53.386Z","repository_id":14730402,"created_at":"2025-08-19T03:43:53.386Z","updated_at":"2025-08-19T03:43:53.386Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":36629978,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-08-06T04:43:03.162Z","status":"online","status_checked_at":"2026-08-14T02:00:06.934Z","response_time":54,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"go-yaml","name":"go-yaml","uuid":"6823640","kind":"organization","description":null,"email":null,"website":null,"location":null,"twitter":null,"company":null,"icon_url":"https://avatars.githubusercontent.com/u/6823640?v=4","repositories_count":1,"last_synced_at":"2026-08-14T04:51:04.725Z","metadata":{"has_sponsors_listing":false,"funding":null},"html_url":"https://github.com/go-yaml","funding_links":[],"total_stars":7023,"followers":17,"following":0,"created_at":"2022-11-07T11:53:36.392Z","updated_at":"2026-08-14T04:51:04.742Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/go-yaml","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/go-yaml/repositories"},"tags":[{"name":"v3.0.1","sha":"f6f7691b1fdeb513f56608cd2c32c51f8194bf51","kind":"commit","published_at":"2022-05-27T08:35:30.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v3.0.1","html_url":"https://github.com/go-yaml/yaml/releases/tag/v3.0.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v3.0.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v3.0.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v3.0.1/manifests"},{"name":"v3.0.0","sha":"00bbc0947ae889b9e480044dbc3bc3e3216a6a89","kind":"commit","published_at":"2022-05-21T10:33:21.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v3.0.0","html_url":"https://github.com/go-yaml/yaml/releases/tag/v3.0.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v3.0.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v3.0.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v3.0.0/manifests"},{"name":"v2.4.0","sha":"7649d4548cb53a614db133b2a8ac1f31859dda8c","kind":"commit","published_at":"2020-11-17T15:46:20.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.4.0","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.4.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.4.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.4.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.4.0/manifests"},{"name":"v2.3.0","sha":"0b1645d91e851e735d3e23330303ce81f70adbe3","kind":"commit","published_at":"2020-05-06T23:08:38.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.3.0","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.3.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.3.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.3.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.3.0/manifests"},{"name":"v2.2.8","sha":"53403b58ad1b561927d19068c655246f2db79d48","kind":"commit","published_at":"2020-01-21T17:19:40.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.2.8","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.2.8","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.2.8","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.8","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.8/manifests"},{"name":"v2.2.7","sha":"1f64d6156d11335c3f22d9330b0ad14fc1e789ce","kind":"commit","published_at":"2019-11-19T21:27:36.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.2.7","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.2.7","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.2.7","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.7","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.7/manifests"},{"name":"v2.2.6","sha":"a95acef3719e5e9f7614cc90a119dee4699291eb","kind":"commit","published_at":"2019-11-19T11:51:43.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.2.6","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.2.6","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.2.6","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.6","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.6/manifests"},{"name":"v2.2.5","sha":"f90ceb4f409096b60e2e9076b38b304b8246e5fa","kind":"commit","published_at":"2019-11-04T18:03:43.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.2.5","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.2.5","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.2.5","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.5","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.5/manifests"},{"name":"v2.2.4","sha":"f221b8435cfb71e54062f6c6e99e9ade30b124d5","kind":"commit","published_at":"2019-10-02T18:33:36.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.2.4","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.2.4","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.2.4","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.4/manifests"},{"name":"v2.2.3","sha":"bb4e33bf68bf89cad44d386192cbed201f35b241","kind":"commit","published_at":"2019-09-30T19:09:21.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.2.3","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.2.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.2.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.3/manifests"},{"name":"v2.2.2","sha":"51d6538a90f86fe93ac480b35f37b2be17fef232","kind":"commit","published_at":"2018-11-15T11:05:04.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.2.2","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.2.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.2.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.2/manifests"},{"name":"v2.2.1","sha":"5420a8b6744d3b0345ab293f6fcba19c978f1183","kind":"commit","published_at":"2018-03-28T19:50:20.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.2.1","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.2.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.2.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.1/manifests"},{"name":"v2.2.0","sha":"86f5ed62f8a0ee96bd888d2efdfd6d4fb100a4eb","kind":"commit","published_at":"2018-03-26T05:07:29.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.2.0","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.2.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.2.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.0/manifests"},{"name":"v2.1.1","sha":"7f97868eec74b32b0982dd158a51a446d1da7eb5","kind":"tag","published_at":"2018-02-23T19:13:14.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.1.1","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.1.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.1.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.1.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.1.1/manifests"},{"name":"v2.1.0","sha":"3e6d767784b037b90a14701b6c9f0643f05db963","kind":"tag","published_at":"2018-02-23T19:02:00.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.1.0","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.1.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.1.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.1.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.1.0/manifests"},{"name":"v2.0.0","sha":"d670f9405373e636a5a2765eea47fac0c9bc91a4","kind":"tag","published_at":"2018-02-23T18:53:08.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.0.0","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.0.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.0.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.0.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.0.0/manifests"}]},"repo_metadata_updated_at":"2026-08-20T08:34:47.599Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":5.784814001734242,"dependent_packages_count":5.420815499828766,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":5.602814750781504},"purl":"pkg:golang/gopkg.in/yaml","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/go/gopkg.in/yaml","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/go/gopkg.in/yaml","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/go/gopkg.in/yaml/dependencies","status":"removed","funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-08-20T00:59:53.265Z","issues_count":179,"pull_requests_count":117,"avg_time_to_close_issue":27337742.275,"avg_time_to_close_pull_request":54605651.71428572,"issues_closed_count":40,"pull_requests_closed_count":42,"pull_request_authors_count":78,"issue_authors_count":167,"avg_comments_per_issue":3.11731843575419,"avg_comments_per_pull_request":1.4700854700854702,"merged_pull_requests_count":3,"bot_issues_count":0,"bot_pull_requests_count":0,"past_year_issues_count":0,"past_year_pull_requests_count":0,"past_year_avg_time_to_close_issue":null,"past_year_avg_time_to_close_pull_request":null,"past_year_issues_closed_count":0,"past_year_pull_requests_closed_count":0,"past_year_pull_request_authors_count":0,"past_year_issue_authors_count":0,"past_year_avg_comments_per_issue":null,"past_year_avg_comments_per_pull_request":null,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":0,"past_year_merged_pull_requests_count":0,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/issues","maintainers":[],"active_maintainers":[]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/gopkg.in%2Fyaml/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/gopkg.in%2Fyaml/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/gopkg.in%2Fyaml/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/gopkg.in%2Fyaml/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/gopkg.in%2Fyaml/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/gopkg.in%2Fyaml/codemeta","maintainers":[],"registry":{"name":"proxy.golang.org","url":"https://proxy.golang.org","ecosystem":"go","default":true,"packages_count":2287853,"maintainers_count":0,"namespaces_count":839605,"keywords_count":126639,"github":"golang","metadata":{"funded_packages_count":74445,"sync_missing_packages_cursor":{"timestamp":"2026-09-07T00:07:19.468853Z","path":"github.com/herodotusdev/accumulators","version":"v4.2.0-alpha.1+incompatible"},"rate_limit":1},"icon_url":"https://github.com/golang.png","created_at":"2022-04-04T15:19:22.939Z","updated_at":"2026-09-07T00:08:13.518Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/namespaces"}},{"id":4016386,"name":"s3-eu-west-1.amazonaws.com/oh.no.ms/cool2/gopkg2.html","ecosystem":"go","description":"Package yaml implements YAML support for the Go language.","homepage":"https://github.com/go-yaml/yaml","licenses":"Apache-2.0","normalized_licenses":["Apache-2.0"],"repository_url":"https://github.com/go-yaml/yaml","keywords_array":[],"namespace":"s3-eu-west-1.amazonaws.com/oh.no.ms/cool2","versions_count":2,"first_release_published_at":"2018-01-09T11:43:31.000Z","latest_release_published_at":"2018-02-23T19:01:16.000Z","latest_release_number":"v2.1.0+incompatible","last_synced_at":"2026-09-06T23:37:46.540Z","created_at":"2022-04-12T08:42:36.290Z","updated_at":"2026-09-07T19:12:36.885Z","registry_url":"https://pkg.go.dev/s3-eu-west-1.amazonaws.com/oh.no.ms/cool2/gopkg2.html","install_command":"go get s3-eu-west-1.amazonaws.com/oh.no.ms/cool2/gopkg2.html","documentation_url":"https://pkg.go.dev/s3-eu-west-1.amazonaws.com/oh.no.ms/cool2/gopkg2.html#section-documentation","metadata":{},"repo_metadata":{"id":14730402,"uuid":"17451182","full_name":"go-yaml/yaml","owner":"go-yaml","description":"YAML support for the Go language.","archived":true,"fork":false,"pushed_at":"2025-04-01T17:00:11.000Z","size":1587,"stargazers_count":7018,"open_issues_count":422,"forks_count":1117,"subscribers_count":3,"default_branch":"v3","last_synced_at":"2026-09-02T19:07:29.914Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":null,"language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"other","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/go-yaml.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null}},"created_at":"2014-03-05T18:54:57.000Z","updated_at":"2026-09-02T18:56:31.000Z","dependencies_parsed_at":"2023-02-16T14:45:46.186Z","dependency_job_id":"c3f4f6d2-0694-43c1-a700-724512e371e7","html_url":"https://github.com/go-yaml/yaml","commit_stats":{"total_commits":302,"total_committers":48,"mean_commits":6.291666666666667,"dds":0.2814569536423841,"last_synced_commit":"f6f7691b1fdeb513f56608cd2c32c51f8194bf51"},"previous_names":["go-yaml/go-yaml-v1"],"tags_count":16,"template":false,"template_full_name":null,"purl":"pkg:github/go-yaml/yaml","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/go-yaml","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/refs/heads/v3","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/sbom","scorecard":{"id":432677,"data":{"date":"2025-08-11","repo":{"name":"github.com/go-yaml/yaml","commit":"944c86a7d29391925ed6ac33bee98a0516f1287a"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":4.4,"checks":[{"name":"Code-Review","score":2,"reason":"Found 6/27 approved changesets -- score normalized to 2","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Warn: no topLevel permission defined: .github/workflows/go.yaml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Maintained","score":0,"reason":"project is archived","details":["Warn: Repository is archived."],"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Pinned-Dependencies","score":3,"reason":"dependency not pinned by hash detected -- score normalized to 3","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/go.yaml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/go-yaml/yaml/go.yaml/v3?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/go.yaml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/go-yaml/yaml/go.yaml/v3?enable=pin","Info: 0 out of 2 GitHub-owned GitHubAction dependencies pinned","Info: 1 out of 1 goCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Security-Policy","score":0,"reason":"security policy file not detected","details":["Warn: no security policy file detected","Warn: no security file to analyze","Warn: no security file to analyze","Warn: no security file to analyze"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"License","score":9,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Warn: project license file does not contain an FSF or OSI license."],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Fuzzing","score":10,"reason":"project is fuzzed","details":["Info: OSSFuzz integration found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Branch-Protection","score":0,"reason":"branch protection not enabled on development/release branches","details":["Warn: branch protection not enabled for branch 'v3'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 9 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-19T03:43:53.386Z","repository_id":14730402,"created_at":"2025-08-19T03:43:53.386Z","updated_at":"2025-08-19T03:43:53.386Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":37019155,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-08-22T15:14:58.755Z","status":"online","status_checked_at":"2026-09-02T02:00:06.194Z","response_time":106,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"go-yaml","name":"go-yaml","uuid":"6823640","kind":"organization","description":null,"email":null,"website":null,"location":null,"twitter":null,"company":null,"icon_url":"https://avatars.githubusercontent.com/u/6823640?v=4","repositories_count":1,"last_synced_at":"2026-09-06T00:54:23.710Z","metadata":{"has_sponsors_listing":false,"funding":null},"html_url":"https://github.com/go-yaml","funding_links":[],"total_stars":7018,"followers":17,"following":0,"created_at":"2022-11-07T11:53:36.392Z","updated_at":"2026-09-06T00:54:23.738Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/go-yaml","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/go-yaml/repositories"},"tags":[{"name":"v3.0.1","sha":"f6f7691b1fdeb513f56608cd2c32c51f8194bf51","kind":"commit","published_at":"2022-05-27T08:35:30.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v3.0.1","html_url":"https://github.com/go-yaml/yaml/releases/tag/v3.0.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v3.0.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v3.0.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v3.0.1/manifests"},{"name":"v3.0.0","sha":"00bbc0947ae889b9e480044dbc3bc3e3216a6a89","kind":"commit","published_at":"2022-05-21T10:33:21.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v3.0.0","html_url":"https://github.com/go-yaml/yaml/releases/tag/v3.0.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v3.0.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v3.0.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v3.0.0/manifests"},{"name":"v2.4.0","sha":"7649d4548cb53a614db133b2a8ac1f31859dda8c","kind":"commit","published_at":"2020-11-17T15:46:20.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.4.0","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.4.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.4.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.4.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.4.0/manifests"},{"name":"v2.3.0","sha":"0b1645d91e851e735d3e23330303ce81f70adbe3","kind":"commit","published_at":"2020-05-06T23:08:38.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.3.0","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.3.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.3.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.3.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.3.0/manifests"},{"name":"v2.2.8","sha":"53403b58ad1b561927d19068c655246f2db79d48","kind":"commit","published_at":"2020-01-21T17:19:40.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.2.8","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.2.8","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.2.8","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.8","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.8/manifests"},{"name":"v2.2.7","sha":"1f64d6156d11335c3f22d9330b0ad14fc1e789ce","kind":"commit","published_at":"2019-11-19T21:27:36.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.2.7","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.2.7","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.2.7","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.7","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.7/manifests"},{"name":"v2.2.6","sha":"a95acef3719e5e9f7614cc90a119dee4699291eb","kind":"commit","published_at":"2019-11-19T11:51:43.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.2.6","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.2.6","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.2.6","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.6","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.6/manifests"},{"name":"v2.2.5","sha":"f90ceb4f409096b60e2e9076b38b304b8246e5fa","kind":"commit","published_at":"2019-11-04T18:03:43.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.2.5","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.2.5","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.2.5","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.5","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.5/manifests"},{"name":"v2.2.4","sha":"f221b8435cfb71e54062f6c6e99e9ade30b124d5","kind":"commit","published_at":"2019-10-02T18:33:36.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.2.4","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.2.4","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.2.4","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.4/manifests"},{"name":"v2.2.3","sha":"bb4e33bf68bf89cad44d386192cbed201f35b241","kind":"commit","published_at":"2019-09-30T19:09:21.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.2.3","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.2.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.2.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.3/manifests"},{"name":"v2.2.2","sha":"51d6538a90f86fe93ac480b35f37b2be17fef232","kind":"commit","published_at":"2018-11-15T11:05:04.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.2.2","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.2.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.2.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.2/manifests"},{"name":"v2.2.1","sha":"5420a8b6744d3b0345ab293f6fcba19c978f1183","kind":"commit","published_at":"2018-03-28T19:50:20.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.2.1","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.2.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.2.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.1/manifests"},{"name":"v2.2.0","sha":"86f5ed62f8a0ee96bd888d2efdfd6d4fb100a4eb","kind":"commit","published_at":"2018-03-26T05:07:29.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.2.0","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.2.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.2.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.0/manifests"},{"name":"v2.1.1","sha":"7f97868eec74b32b0982dd158a51a446d1da7eb5","kind":"tag","published_at":"2018-02-23T19:13:14.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.1.1","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.1.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.1.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.1.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.1.1/manifests"},{"name":"v2.1.0","sha":"3e6d767784b037b90a14701b6c9f0643f05db963","kind":"tag","published_at":"2018-02-23T19:02:00.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.1.0","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.1.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.1.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.1.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.1.0/manifests"},{"name":"v2.0.0","sha":"d670f9405373e636a5a2765eea47fac0c9bc91a4","kind":"tag","published_at":"2018-02-23T18:53:08.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.0.0","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.0.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.0.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.0.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.0.0/manifests"}]},"repo_metadata_updated_at":"2026-09-07T19:12:36.885Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":9.345852080216646,"dependent_packages_count":6.999148183520997,"stargazers_count":null,"forks_count":null,"average":8.172500131868823},"purl":"pkg:golang/s3-eu-west-1.amazonaws.com/oh.no.ms/cool2/gopkg2.html","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/go/s3-eu-west-1.amazonaws.com/oh.no.ms/cool2/gopkg2.html","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/go/s3-eu-west-1.amazonaws.com/oh.no.ms/cool2/gopkg2.html","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/go/s3-eu-west-1.amazonaws.com/oh.no.ms/cool2/gopkg2.html/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-09-06T23:09:36.074Z","issues_count":179,"pull_requests_count":117,"avg_time_to_close_issue":27337742.275,"avg_time_to_close_pull_request":54605651.71428572,"issues_closed_count":40,"pull_requests_closed_count":42,"pull_request_authors_count":78,"issue_authors_count":167,"avg_comments_per_issue":3.11731843575419,"avg_comments_per_pull_request":1.4700854700854702,"merged_pull_requests_count":3,"bot_issues_count":0,"bot_pull_requests_count":0,"past_year_issues_count":0,"past_year_pull_requests_count":0,"past_year_avg_time_to_close_issue":null,"past_year_avg_time_to_close_pull_request":null,"past_year_issues_closed_count":0,"past_year_pull_requests_closed_count":0,"past_year_pull_request_authors_count":0,"past_year_issue_authors_count":0,"past_year_avg_comments_per_issue":null,"past_year_avg_comments_per_pull_request":null,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":0,"past_year_merged_pull_requests_count":0,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/issues","maintainers":[],"active_maintainers":[]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/s3-eu-west-1.amazonaws.com%2Foh.no.ms%2Fcool2%2Fgopkg2.html/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/s3-eu-west-1.amazonaws.com%2Foh.no.ms%2Fcool2%2Fgopkg2.html/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/s3-eu-west-1.amazonaws.com%2Foh.no.ms%2Fcool2%2Fgopkg2.html/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/s3-eu-west-1.amazonaws.com%2Foh.no.ms%2Fcool2%2Fgopkg2.html/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/s3-eu-west-1.amazonaws.com%2Foh.no.ms%2Fcool2%2Fgopkg2.html/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/s3-eu-west-1.amazonaws.com%2Foh.no.ms%2Fcool2%2Fgopkg2.html/codemeta","maintainers":[],"registry":{"name":"proxy.golang.org","url":"https://proxy.golang.org","ecosystem":"go","default":true,"packages_count":2287853,"maintainers_count":0,"namespaces_count":839605,"keywords_count":126639,"github":"golang","metadata":{"funded_packages_count":74445,"sync_missing_packages_cursor":{"timestamp":"2026-09-07T00:07:19.468853Z","path":"github.com/herodotusdev/accumulators","version":"v4.2.0-alpha.1+incompatible"},"rate_limit":1},"icon_url":"https://github.com/golang.png","created_at":"2022-04-04T15:19:22.939Z","updated_at":"2026-09-07T00:08:13.518Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/namespaces"}},{"id":13546974,"name":"golang-yaml.v2","ecosystem":"ubuntu","description":null,"homepage":"https://github.com/go-yaml/yaml/tree/v2","licenses":"other","normalized_licenses":[],"repository_url":"https://github.com/go-yaml/yaml","keywords_array":["universe/devel"],"namespace":"universe","versions_count":1,"first_release_published_at":"2026-02-11T02:18:42.264Z","latest_release_published_at":"2026-02-11T02:18:42.264Z","latest_release_number":"2.4.0-4","last_synced_at":"2026-03-11T08:08:59.968Z","created_at":"2026-02-11T02:18:42.083Z","updated_at":"2026-08-30T18:24:47.445Z","registry_url":"https://launchpad.net/ubuntu/+source/golang-yaml.v2","install_command":"apt-get install golang-yaml.v2","documentation_url":null,"metadata":{"component":"universe","architecture":"all","priority":"extra","binary":"golang-gopkg-yaml.v2-dev","standards_version":"4.6.0","maintainer":"Debian Go Packaging Team \u003cteam+pkg-go@tracker.debian.org\u003e","build_depends":"debhelper-compat (= 13), dh-golang, golang-any, golang-gopkg-check.v1-dev","build_depends_indep":null,"build_depends_arch":null},"repo_metadata":{"id":14730402,"uuid":"17451182","full_name":"go-yaml/yaml","owner":"go-yaml","description":"YAML support for the Go language.","archived":true,"fork":false,"pushed_at":"2025-04-01T17:00:11.000Z","size":1587,"stargazers_count":7019,"open_issues_count":422,"forks_count":1115,"subscribers_count":3,"default_branch":"v3","last_synced_at":"2026-08-27T09:55:02.448Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":null,"language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"other","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/go-yaml.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null}},"created_at":"2014-03-05T18:54:57.000Z","updated_at":"2026-08-22T06:16:14.000Z","dependencies_parsed_at":"2023-02-16T14:45:46.186Z","dependency_job_id":"c3f4f6d2-0694-43c1-a700-724512e371e7","html_url":"https://github.com/go-yaml/yaml","commit_stats":{"total_commits":302,"total_committers":48,"mean_commits":6.291666666666667,"dds":0.2814569536423841,"last_synced_commit":"f6f7691b1fdeb513f56608cd2c32c51f8194bf51"},"previous_names":["go-yaml/go-yaml-v1"],"tags_count":16,"template":false,"template_full_name":null,"purl":"pkg:github/go-yaml/yaml","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/go-yaml","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/refs/heads/v3","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/sbom","scorecard":{"id":432677,"data":{"date":"2025-08-11","repo":{"name":"github.com/go-yaml/yaml","commit":"944c86a7d29391925ed6ac33bee98a0516f1287a"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":4.4,"checks":[{"name":"Code-Review","score":2,"reason":"Found 6/27 approved changesets -- score normalized to 2","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Warn: no topLevel permission defined: .github/workflows/go.yaml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Maintained","score":0,"reason":"project is archived","details":["Warn: Repository is archived."],"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Pinned-Dependencies","score":3,"reason":"dependency not pinned by hash detected -- score normalized to 3","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/go.yaml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/go-yaml/yaml/go.yaml/v3?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/go.yaml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/go-yaml/yaml/go.yaml/v3?enable=pin","Info: 0 out of 2 GitHub-owned GitHubAction dependencies pinned","Info: 1 out of 1 goCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Security-Policy","score":0,"reason":"security policy file not detected","details":["Warn: no security policy file detected","Warn: no security file to analyze","Warn: no security file to analyze","Warn: no security file to analyze"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"License","score":9,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Warn: project license file does not contain an FSF or OSI license."],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Fuzzing","score":10,"reason":"project is fuzzed","details":["Info: OSSFuzz integration found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Branch-Protection","score":0,"reason":"branch protection not enabled on development/release branches","details":["Warn: branch protection not enabled for branch 'v3'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 9 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-19T03:43:53.386Z","repository_id":14730402,"created_at":"2025-08-19T03:43:53.386Z","updated_at":"2025-08-19T03:43:53.386Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":36941331,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-08-22T15:14:58.755Z","status":"online","status_checked_at":"2026-08-27T02:00:07.166Z","response_time":96,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"go-yaml","name":"go-yaml","uuid":"6823640","kind":"organization","description":null,"email":null,"website":null,"location":null,"twitter":null,"company":null,"icon_url":"https://avatars.githubusercontent.com/u/6823640?v=4","repositories_count":1,"last_synced_at":"2026-08-29T00:59:16.798Z","metadata":{"has_sponsors_listing":false,"funding":null},"html_url":"https://github.com/go-yaml","funding_links":[],"total_stars":7019,"followers":17,"following":0,"created_at":"2022-11-07T11:53:36.392Z","updated_at":"2026-08-29T00:59:16.811Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/go-yaml","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/go-yaml/repositories"},"tags":[{"name":"v3.0.1","sha":"f6f7691b1fdeb513f56608cd2c32c51f8194bf51","kind":"commit","published_at":"2022-05-27T08:35:30.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v3.0.1","html_url":"https://github.com/go-yaml/yaml/releases/tag/v3.0.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v3.0.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v3.0.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v3.0.1/manifests"},{"name":"v3.0.0","sha":"00bbc0947ae889b9e480044dbc3bc3e3216a6a89","kind":"commit","published_at":"2022-05-21T10:33:21.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v3.0.0","html_url":"https://github.com/go-yaml/yaml/releases/tag/v3.0.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v3.0.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v3.0.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v3.0.0/manifests"},{"name":"v2.4.0","sha":"7649d4548cb53a614db133b2a8ac1f31859dda8c","kind":"commit","published_at":"2020-11-17T15:46:20.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.4.0","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.4.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.4.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.4.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.4.0/manifests"},{"name":"v2.3.0","sha":"0b1645d91e851e735d3e23330303ce81f70adbe3","kind":"commit","published_at":"2020-05-06T23:08:38.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.3.0","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.3.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.3.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.3.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.3.0/manifests"},{"name":"v2.2.8","sha":"53403b58ad1b561927d19068c655246f2db79d48","kind":"commit","published_at":"2020-01-21T17:19:40.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.2.8","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.2.8","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.2.8","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.8","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.8/manifests"},{"name":"v2.2.7","sha":"1f64d6156d11335c3f22d9330b0ad14fc1e789ce","kind":"commit","published_at":"2019-11-19T21:27:36.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.2.7","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.2.7","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.2.7","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.7","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.7/manifests"},{"name":"v2.2.6","sha":"a95acef3719e5e9f7614cc90a119dee4699291eb","kind":"commit","published_at":"2019-11-19T11:51:43.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.2.6","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.2.6","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.2.6","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.6","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.6/manifests"},{"name":"v2.2.5","sha":"f90ceb4f409096b60e2e9076b38b304b8246e5fa","kind":"commit","published_at":"2019-11-04T18:03:43.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.2.5","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.2.5","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.2.5","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.5","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.5/manifests"},{"name":"v2.2.4","sha":"f221b8435cfb71e54062f6c6e99e9ade30b124d5","kind":"commit","published_at":"2019-10-02T18:33:36.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.2.4","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.2.4","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.2.4","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.4/manifests"},{"name":"v2.2.3","sha":"bb4e33bf68bf89cad44d386192cbed201f35b241","kind":"commit","published_at":"2019-09-30T19:09:21.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.2.3","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.2.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.2.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.3/manifests"},{"name":"v2.2.2","sha":"51d6538a90f86fe93ac480b35f37b2be17fef232","kind":"commit","published_at":"2018-11-15T11:05:04.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.2.2","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.2.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.2.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.2/manifests"},{"name":"v2.2.1","sha":"5420a8b6744d3b0345ab293f6fcba19c978f1183","kind":"commit","published_at":"2018-03-28T19:50:20.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.2.1","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.2.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.2.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.1/manifests"},{"name":"v2.2.0","sha":"86f5ed62f8a0ee96bd888d2efdfd6d4fb100a4eb","kind":"commit","published_at":"2018-03-26T05:07:29.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.2.0","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.2.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.2.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.0/manifests"},{"name":"v2.1.1","sha":"7f97868eec74b32b0982dd158a51a446d1da7eb5","kind":"tag","published_at":"2018-02-23T19:13:14.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.1.1","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.1.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.1.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.1.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.1.1/manifests"},{"name":"v2.1.0","sha":"3e6d767784b037b90a14701b6c9f0643f05db963","kind":"tag","published_at":"2018-02-23T19:02:00.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.1.0","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.1.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.1.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.1.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.1.0/manifests"},{"name":"v2.0.0","sha":"d670f9405373e636a5a2765eea47fac0c9bc91a4","kind":"tag","published_at":"2018-02-23T18:53:08.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.0.0","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.0.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.0.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.0.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.0.0/manifests"}]},"repo_metadata_updated_at":"2026-08-30T18:24:47.444Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":0.0,"dependent_packages_count":0.0,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":100},"purl":"pkg:deb/ubuntu/golang-yaml.v2?arch=source\u0026distro=ubuntu-23.04\u0026repository_url=https://launchpad.net/ubuntu/lunar","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/ubuntu/golang-yaml.v2","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/ubuntu/golang-yaml.v2","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/ubuntu/golang-yaml.v2/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-08-30T12:37:47.976Z","issues_count":179,"pull_requests_count":117,"avg_time_to_close_issue":27337742.275,"avg_time_to_close_pull_request":54605651.71428572,"issues_closed_count":40,"pull_requests_closed_count":42,"pull_request_authors_count":78,"issue_authors_count":167,"avg_comments_per_issue":3.11731843575419,"avg_comments_per_pull_request":1.4700854700854702,"merged_pull_requests_count":3,"bot_issues_count":0,"bot_pull_requests_count":0,"past_year_issues_count":0,"past_year_pull_requests_count":0,"past_year_avg_time_to_close_issue":null,"past_year_avg_time_to_close_pull_request":null,"past_year_issues_closed_count":0,"past_year_pull_requests_closed_count":0,"past_year_pull_request_authors_count":0,"past_year_issue_authors_count":0,"past_year_avg_comments_per_issue":null,"past_year_avg_comments_per_pull_request":null,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":0,"past_year_merged_pull_requests_count":0,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/issues","maintainers":[],"active_maintainers":[]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-23.04/packages/golang-yaml.v2/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-23.04/packages/golang-yaml.v2/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-23.04/packages/golang-yaml.v2/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-23.04/packages/golang-yaml.v2/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-23.04/packages/golang-yaml.v2/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-23.04/packages/golang-yaml.v2/codemeta","maintainers":[],"registry":{"name":"ubuntu-23.04","url":"https://launchpad.net/ubuntu/lunar","ecosystem":"ubuntu","default":false,"packages_count":36116,"maintainers_count":0,"namespaces_count":4,"keywords_count":999,"github":"ubuntu","metadata":{"codename":"lunar","mirror":"http://old-releases.ubuntu.com/ubuntu","funded_packages_count":1245},"icon_url":"https://github.com/ubuntu.png","created_at":"2026-02-04T11:01:49.117Z","updated_at":"2026-09-04T05:06:02.954Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-23.04/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-23.04/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-23.04/namespaces"}},{"id":3492705,"name":"gopkg.in/yaml.v2","ecosystem":"go","description":"Package yaml implements YAML support for the Go language.","homepage":"https://github.com/go-yaml/yaml","licenses":"Apache-2.0","normalized_licenses":["Apache-2.0"],"repository_url":"https://github.com/go-yaml/yaml","keywords_array":[],"namespace":"gopkg.in","versions_count":14,"first_release_published_at":"2018-01-09T11:43:31.000Z","latest_release_published_at":"2020-11-17T15:46:20.000Z","latest_release_number":"v2.4.0","last_synced_at":"2026-09-07T20:27:29.149Z","created_at":"2022-04-10T19:11:46.498Z","updated_at":"2026-09-07T23:15:52.139Z","registry_url":"https://pkg.go.dev/gopkg.in/yaml.v2","install_command":"go get gopkg.in/yaml.v2","documentation_url":"https://pkg.go.dev/gopkg.in/yaml.v2#section-documentation","metadata":{},"repo_metadata":{"id":14730402,"uuid":"17451182","full_name":"go-yaml/yaml","owner":"go-yaml","description":"YAML support for the Go language.","archived":true,"fork":false,"pushed_at":"2025-04-01T17:00:11.000Z","size":1587,"stargazers_count":7018,"open_issues_count":422,"forks_count":1117,"subscribers_count":3,"default_branch":"v3","last_synced_at":"2026-09-02T19:07:29.914Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":null,"language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"other","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/go-yaml.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null}},"created_at":"2014-03-05T18:54:57.000Z","updated_at":"2026-09-02T18:56:31.000Z","dependencies_parsed_at":"2023-02-16T14:45:46.186Z","dependency_job_id":"c3f4f6d2-0694-43c1-a700-724512e371e7","html_url":"https://github.com/go-yaml/yaml","commit_stats":{"total_commits":302,"total_committers":48,"mean_commits":6.291666666666667,"dds":0.2814569536423841,"last_synced_commit":"f6f7691b1fdeb513f56608cd2c32c51f8194bf51"},"previous_names":["go-yaml/go-yaml-v1"],"tags_count":16,"template":false,"template_full_name":null,"purl":"pkg:github/go-yaml/yaml","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/go-yaml","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/refs/heads/v3","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/sbom","scorecard":{"id":432677,"data":{"date":"2025-08-11","repo":{"name":"github.com/go-yaml/yaml","commit":"944c86a7d29391925ed6ac33bee98a0516f1287a"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":4.4,"checks":[{"name":"Code-Review","score":2,"reason":"Found 6/27 approved changesets -- score normalized to 2","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Warn: no topLevel permission defined: .github/workflows/go.yaml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Maintained","score":0,"reason":"project is archived","details":["Warn: Repository is archived."],"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Pinned-Dependencies","score":3,"reason":"dependency not pinned by hash detected -- score normalized to 3","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/go.yaml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/go-yaml/yaml/go.yaml/v3?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/go.yaml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/go-yaml/yaml/go.yaml/v3?enable=pin","Info: 0 out of 2 GitHub-owned GitHubAction dependencies pinned","Info: 1 out of 1 goCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Security-Policy","score":0,"reason":"security policy file not detected","details":["Warn: no security policy file detected","Warn: no security file to analyze","Warn: no security file to analyze","Warn: no security file to analyze"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"License","score":9,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Warn: project license file does not contain an FSF or OSI license."],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Fuzzing","score":10,"reason":"project is fuzzed","details":["Info: OSSFuzz integration found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Branch-Protection","score":0,"reason":"branch protection not enabled on development/release branches","details":["Warn: branch protection not enabled for branch 'v3'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 9 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-19T03:43:53.386Z","repository_id":14730402,"created_at":"2025-08-19T03:43:53.386Z","updated_at":"2025-08-19T03:43:53.386Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":37019155,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-08-22T15:14:58.755Z","status":"online","status_checked_at":"2026-09-02T02:00:06.194Z","response_time":106,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"go-yaml","name":"go-yaml","uuid":"6823640","kind":"organization","description":null,"email":null,"website":null,"location":null,"twitter":null,"company":null,"icon_url":"https://avatars.githubusercontent.com/u/6823640?v=4","repositories_count":1,"last_synced_at":"2026-08-29T00:59:16.798Z","metadata":{"has_sponsors_listing":false,"funding":null},"html_url":"https://github.com/go-yaml","funding_links":[],"total_stars":7019,"followers":17,"following":0,"created_at":"2022-11-07T11:53:36.392Z","updated_at":"2026-08-29T00:59:16.811Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/go-yaml","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/go-yaml/repositories"},"tags":[{"name":"v3.0.1","sha":"f6f7691b1fdeb513f56608cd2c32c51f8194bf51","kind":"commit","published_at":"2022-05-27T08:35:30.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v3.0.1","html_url":"https://github.com/go-yaml/yaml/releases/tag/v3.0.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v3.0.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v3.0.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v3.0.1/manifests"},{"name":"v3.0.0","sha":"00bbc0947ae889b9e480044dbc3bc3e3216a6a89","kind":"commit","published_at":"2022-05-21T10:33:21.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v3.0.0","html_url":"https://github.com/go-yaml/yaml/releases/tag/v3.0.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v3.0.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v3.0.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v3.0.0/manifests"},{"name":"v2.4.0","sha":"7649d4548cb53a614db133b2a8ac1f31859dda8c","kind":"commit","published_at":"2020-11-17T15:46:20.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.4.0","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.4.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.4.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.4.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.4.0/manifests"},{"name":"v2.3.0","sha":"0b1645d91e851e735d3e23330303ce81f70adbe3","kind":"commit","published_at":"2020-05-06T23:08:38.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.3.0","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.3.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.3.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.3.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.3.0/manifests"},{"name":"v2.2.8","sha":"53403b58ad1b561927d19068c655246f2db79d48","kind":"commit","published_at":"2020-01-21T17:19:40.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.2.8","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.2.8","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.2.8","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.8","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.8/manifests"},{"name":"v2.2.7","sha":"1f64d6156d11335c3f22d9330b0ad14fc1e789ce","kind":"commit","published_at":"2019-11-19T21:27:36.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.2.7","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.2.7","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.2.7","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.7","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.7/manifests"},{"name":"v2.2.6","sha":"a95acef3719e5e9f7614cc90a119dee4699291eb","kind":"commit","published_at":"2019-11-19T11:51:43.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.2.6","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.2.6","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.2.6","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.6","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.6/manifests"},{"name":"v2.2.5","sha":"f90ceb4f409096b60e2e9076b38b304b8246e5fa","kind":"commit","published_at":"2019-11-04T18:03:43.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.2.5","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.2.5","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.2.5","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.5","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.5/manifests"},{"name":"v2.2.4","sha":"f221b8435cfb71e54062f6c6e99e9ade30b124d5","kind":"commit","published_at":"2019-10-02T18:33:36.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.2.4","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.2.4","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.2.4","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.4/manifests"},{"name":"v2.2.3","sha":"bb4e33bf68bf89cad44d386192cbed201f35b241","kind":"commit","published_at":"2019-09-30T19:09:21.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.2.3","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.2.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.2.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.3/manifests"},{"name":"v2.2.2","sha":"51d6538a90f86fe93ac480b35f37b2be17fef232","kind":"commit","published_at":"2018-11-15T11:05:04.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.2.2","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.2.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.2.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.2/manifests"},{"name":"v2.2.1","sha":"5420a8b6744d3b0345ab293f6fcba19c978f1183","kind":"commit","published_at":"2018-03-28T19:50:20.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.2.1","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.2.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.2.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.1/manifests"},{"name":"v2.2.0","sha":"86f5ed62f8a0ee96bd888d2efdfd6d4fb100a4eb","kind":"commit","published_at":"2018-03-26T05:07:29.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.2.0","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.2.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.2.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.0/manifests"},{"name":"v2.1.1","sha":"7f97868eec74b32b0982dd158a51a446d1da7eb5","kind":"tag","published_at":"2018-02-23T19:13:14.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.1.1","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.1.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.1.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.1.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.1.1/manifests"},{"name":"v2.1.0","sha":"3e6d767784b037b90a14701b6c9f0643f05db963","kind":"tag","published_at":"2018-02-23T19:02:00.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.1.0","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.1.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.1.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.1.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.1.0/manifests"},{"name":"v2.0.0","sha":"d670f9405373e636a5a2765eea47fac0c9bc91a4","kind":"tag","published_at":"2018-02-23T18:53:08.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.0.0","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.0.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.0.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.0.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.0.0/manifests"}]},"repo_metadata_updated_at":"2026-09-03T04:34:02.390Z","dependent_packages_count":89653,"downloads":null,"downloads_period":null,"dependent_repos_count":247600,"rankings":{"downloads":null,"dependent_repos_count":0.001036998015185799,"dependent_packages_count":0.0007258986106300592,"stargazers_count":0.8346797024230496,"forks_count":0.8659970424816607,"docker_downloads_count":0.0007258986106300592,"average":0.3406331080282312},"purl":"pkg:golang/gopkg.in/yaml.v2","advisories":[{"uuid":"GSA_kwCzR0hTQS1yODhyLWdtcmgtN2o4M84AAwoS","url":"https://github.com/advisories/GHSA-r88r-gmrh-7j83","title":"YAML Go package vulnerable to denial of service","description":"Due to unbounded alias chasing, a maliciously crafted YAML file can cause the system to consume significant system resources. If parsing user input, this may be used as a denial of service vector.","origin":"UNSPECIFIED","severity":"MODERATE","published_at":"2022-12-28T00:30:23.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":5.5,"cvss_vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","references":["https://nvd.nist.gov/vuln/detail/CVE-2021-4235","https://github.com/go-yaml/yaml/pull/375","https://github.com/go-yaml/yaml/commit/bb4e33bf68bf89cad44d386192cbed201f35b241","https://pkg.go.dev/vuln/GO-2021-0061","https://lists.debian.org/debian-lts-announce/2023/07/msg00001.html","https://github.com/advisories/GHSA-r88r-gmrh-7j83"],"source_kind":"github","identifiers":["GHSA-r88r-gmrh-7j83","CVE-2021-4235"],"repository_url":"https://github.com/go-yaml/yaml","blast_radius":0.0,"created_at":"2022-12-30T20:03:01.471Z","updated_at":"2026-09-07T22:11:05.616Z","epss_percentage":0.00415,"epss_percentile":0.34564,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS1yODhyLWdtcmgtN2o4M84AAwoS","html_url":"https://advisories.ecosyste.ms/advisories/GSA_kwCzR0hTQS1yODhyLWdtcmgtN2o4M84AAwoS","packages":[{"ecosystem":"go","package_name":"gopkg.in/yaml.v2","versions":[{"first_patched_version":"2.2.3","vulnerable_version_range":"\u003c 2.2.3"}],"purl":"pkg:go/gopkg.in%2Fyaml.v2"}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS1yODhyLWdtcmgtN2o4M84AAwoS/related_packages","related_advisories":[]},{"uuid":"GSA_kwCzR0hTQS02cTZxLTg4eHAtNmYycs4AAwoj","url":"https://github.com/advisories/GHSA-6q6q-88xp-6f2r","title":"yaml package for Go can consume excessive amounts of CPU or memory","description":"Parsing malicious or large YAML documents can consume excessive amounts of CPU or memory","origin":"UNSPECIFIED","severity":"HIGH","published_at":"2022-12-28T00:30:22.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":7.5,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","references":["https://nvd.nist.gov/vuln/detail/CVE-2022-3064","https://github.com/go-yaml/yaml/commit/f221b8435cfb71e54062f6c6e99e9ade30b124d5","https://github.com/go-yaml/yaml/releases/tag/v2.2.4","https://pkg.go.dev/vuln/GO-2022-0956","https://lists.debian.org/debian-lts-announce/2023/07/msg00001.html","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4SBIUECMLNC572P23DDOKJNKPJVX26SP","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ANIOPUXWIHVRA6CEWXCGOMX3YYS6KFHG","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/LYZOKMMVX4SIEHPJW3SJUQGMO5YZCPHC","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PW3XC47AUW5J5M2ULJX7WCCL3B2ETLMT","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XNF4OLYZRQE75EB5TW5N42FSXHBXGWFE","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZTE4ITXXPIWZEQ4HYQCB6N6GZIMWXDAI","https://github.com/advisories/GHSA-6q6q-88xp-6f2r"],"source_kind":"github","identifiers":["GHSA-6q6q-88xp-6f2r","CVE-2022-3064"],"repository_url":"https://github.com/go-yaml/yaml","blast_radius":0.0,"created_at":"2022-12-30T19:03:06.884Z","updated_at":"2026-09-07T22:11:05.617Z","epss_percentage":0.017,"epss_percentile":0.75683,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS02cTZxLTg4eHAtNmYycs4AAwoj","html_url":"https://advisories.ecosyste.ms/advisories/GSA_kwCzR0hTQS02cTZxLTg4eHAtNmYycs4AAwoj","packages":[{"ecosystem":"go","package_name":"gopkg.in/yaml.v2","versions":[{"first_patched_version":"2.2.4","vulnerable_version_range":"\u003c 2.2.4"}],"purl":"pkg:go/gopkg.in%2Fyaml.v2"}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS02cTZxLTg4eHAtNmYycs4AAwoj/related_packages","related_advisories":[]},{"uuid":"MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLXd4YzQtZjRtNi13d3F2","url":"https://github.com/advisories/GHSA-wxc4-f4m6-wwqv","title":"Excessive Platform Resource Consumption within a Loop in Kubernetes","description":"The Kubernetes API Server component in versions 1.1-1.14, and versions prior to 1.15.10, 1.16.7 and 1.17.3 allows an authorized user who sends malicious YAML payloads to cause the kube-apiserver to consume excessive CPU cycles while parsing YAML.","origin":"UNSPECIFIED","severity":"MODERATE","published_at":"2021-12-20T16:55:06.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":6.5,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","references":["https://nvd.nist.gov/vuln/detail/CVE-2019-11254","https://github.com/kubernetes/kubernetes/issues/89535","https://github.com/kubernetes/kubernetes/pull/87467/commits/b86df2bec4f377afc0ca03482ffad2f0a49a83b8","https://github.com/go-yaml/yaml/commit/53403b58ad1b561927d19068c655246f2db79d48","https://groups.google.com/d/msg/kubernetes-announce/ALL9s73E5ck/4yHe8J-PBAAJ","https://security.netapp.com/advisory/ntap-20200413-0003/","https://github.com/go-yaml/yaml/pull/555","https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=18496","https://pkg.go.dev/vuln/GO-2020-0036","https://github.com/advisories/GHSA-wxc4-f4m6-wwqv"],"source_kind":"github","identifiers":["GHSA-wxc4-f4m6-wwqv","CVE-2019-11254"],"repository_url":"https://github.com/kubernetes/kubernetes","blast_radius":0.0,"created_at":"2022-12-21T16:13:04.796Z","updated_at":"2026-09-07T22:13:00.851Z","epss_percentage":0.03072,"epss_percentile":0.86507,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLXd4YzQtZjRtNi13d3F2","html_url":"https://advisories.ecosyste.ms/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLXd4YzQtZjRtNi13d3F2","packages":[{"ecosystem":"go","package_name":"gopkg.in/yaml.v2","versions":[{"first_patched_version":"2.2.8","vulnerable_version_range":"\u003c 2.2.8"}],"purl":"pkg:go/gopkg.in%2Fyaml.v2"}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLXd4YzQtZjRtNi13d3F2/related_packages","related_advisories":[]}],"docker_usage_url":"https://docker.ecosyste.ms/usage/go/gopkg.in/yaml.v2","docker_dependents_count":27132,"docker_downloads_count":74843201454,"usage_url":"https://repos.ecosyste.ms/usage/go/gopkg.in/yaml.v2","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/go/gopkg.in/yaml.v2/dependencies","status":null,"funding_links":[],"critical":true,"issue_metadata":{"last_synced_at":"2026-09-02T21:28:34.859Z","issues_count":179,"pull_requests_count":117,"avg_time_to_close_issue":27337742.275,"avg_time_to_close_pull_request":54605651.71428572,"issues_closed_count":40,"pull_requests_closed_count":42,"pull_request_authors_count":78,"issue_authors_count":167,"avg_comments_per_issue":3.11731843575419,"avg_comments_per_pull_request":1.4700854700854702,"merged_pull_requests_count":3,"bot_issues_count":0,"bot_pull_requests_count":0,"past_year_issues_count":0,"past_year_pull_requests_count":0,"past_year_avg_time_to_close_issue":null,"past_year_avg_time_to_close_pull_request":null,"past_year_issues_closed_count":0,"past_year_pull_requests_closed_count":0,"past_year_pull_request_authors_count":0,"past_year_issue_authors_count":0,"past_year_avg_comments_per_issue":null,"past_year_avg_comments_per_pull_request":null,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":0,"past_year_merged_pull_requests_count":0,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/issues","maintainers":[],"active_maintainers":[]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/gopkg.in%2Fyaml.v2/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/gopkg.in%2Fyaml.v2/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/gopkg.in%2Fyaml.v2/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/gopkg.in%2Fyaml.v2/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/gopkg.in%2Fyaml.v2/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/gopkg.in%2Fyaml.v2/codemeta","maintainers":[],"registry":{"name":"proxy.golang.org","url":"https://proxy.golang.org","ecosystem":"go","default":true,"packages_count":2287853,"maintainers_count":0,"namespaces_count":839605,"keywords_count":126639,"github":"golang","metadata":{"funded_packages_count":74445,"sync_missing_packages_cursor":{"timestamp":"2026-09-07T00:07:19.468853Z","path":"github.com/herodotusdev/accumulators","version":"v4.2.0-alpha.1+incompatible"},"rate_limit":1},"icon_url":"https://github.com/golang.png","created_at":"2022-04-04T15:19:22.939Z","updated_at":"2026-09-07T00:08:13.518Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/namespaces"}},{"id":13686337,"name":"golang-yaml.v2","ecosystem":"debian","description":null,"homepage":"https://github.com/go-yaml/yaml/tree/v2","licenses":"other","normalized_licenses":["Other"],"repository_url":"https://github.com/go-yaml/yaml","keywords_array":["golang"],"namespace":"main","versions_count":1,"first_release_published_at":"2026-02-12T18:08:55.088Z","latest_release_published_at":"2026-02-12T18:08:55.088Z","latest_release_number":"2.4.0-4","last_synced_at":"2026-03-13T10:31:31.799Z","created_at":"2026-02-12T18:08:48.147Z","updated_at":"2026-09-05T15:19:57.012Z","registry_url":"https://tracker.debian.org/pkg/golang-yaml.v2","install_command":"apt-get install golang-yaml.v2","documentation_url":"https://packages.debian.org/bookworm/golang-yaml.v2","metadata":{"component":"main","architecture":"all","priority":"extra","binary":"golang-gopkg-yaml.v2-dev","standards_version":"4.6.0","maintainer":"Debian Go Packaging Team \u003cteam+pkg-go@tracker.debian.org\u003e","build_depends":"debhelper-compat (= 13), dh-golang, golang-any, golang-gopkg-check.v1-dev","build_depends_indep":null,"build_depends_arch":null},"repo_metadata":{"id":14730402,"uuid":"17451182","full_name":"go-yaml/yaml","owner":"go-yaml","description":"YAML support for the Go language.","archived":true,"fork":false,"pushed_at":"2025-04-01T17:00:11.000Z","size":1587,"stargazers_count":7018,"open_issues_count":422,"forks_count":1117,"subscribers_count":3,"default_branch":"v3","last_synced_at":"2026-09-02T19:07:29.914Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":null,"language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"other","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/go-yaml.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null}},"created_at":"2014-03-05T18:54:57.000Z","updated_at":"2026-09-02T18:56:31.000Z","dependencies_parsed_at":"2023-02-16T14:45:46.186Z","dependency_job_id":"c3f4f6d2-0694-43c1-a700-724512e371e7","html_url":"https://github.com/go-yaml/yaml","commit_stats":{"total_commits":302,"total_committers":48,"mean_commits":6.291666666666667,"dds":0.2814569536423841,"last_synced_commit":"f6f7691b1fdeb513f56608cd2c32c51f8194bf51"},"previous_names":["go-yaml/go-yaml-v1"],"tags_count":16,"template":false,"template_full_name":null,"purl":"pkg:github/go-yaml/yaml","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/go-yaml","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/refs/heads/v3","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/sbom","scorecard":{"id":432677,"data":{"date":"2025-08-11","repo":{"name":"github.com/go-yaml/yaml","commit":"944c86a7d29391925ed6ac33bee98a0516f1287a"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":4.4,"checks":[{"name":"Code-Review","score":2,"reason":"Found 6/27 approved changesets -- score normalized to 2","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Warn: no topLevel permission defined: .github/workflows/go.yaml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Maintained","score":0,"reason":"project is archived","details":["Warn: Repository is archived."],"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Pinned-Dependencies","score":3,"reason":"dependency not pinned by hash detected -- score normalized to 3","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/go.yaml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/go-yaml/yaml/go.yaml/v3?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/go.yaml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/go-yaml/yaml/go.yaml/v3?enable=pin","Info: 0 out of 2 GitHub-owned GitHubAction dependencies pinned","Info: 1 out of 1 goCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Security-Policy","score":0,"reason":"security policy file not detected","details":["Warn: no security policy file detected","Warn: no security file to analyze","Warn: no security file to analyze","Warn: no security file to analyze"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"License","score":9,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Warn: project license file does not contain an FSF or OSI license."],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Fuzzing","score":10,"reason":"project is fuzzed","details":["Info: OSSFuzz integration found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Branch-Protection","score":0,"reason":"branch protection not enabled on development/release branches","details":["Warn: branch protection not enabled for branch 'v3'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 9 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-19T03:43:53.386Z","repository_id":14730402,"created_at":"2025-08-19T03:43:53.386Z","updated_at":"2025-08-19T03:43:53.386Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":37019155,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-08-22T15:14:58.755Z","status":"online","status_checked_at":"2026-09-02T02:00:06.194Z","response_time":106,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"go-yaml","name":"go-yaml","uuid":"6823640","kind":"organization","description":null,"email":null,"website":null,"location":null,"twitter":null,"company":null,"icon_url":"https://avatars.githubusercontent.com/u/6823640?v=4","repositories_count":1,"last_synced_at":"2026-08-29T00:59:16.798Z","metadata":{"has_sponsors_listing":false,"funding":null},"html_url":"https://github.com/go-yaml","funding_links":[],"total_stars":7019,"followers":17,"following":0,"created_at":"2022-11-07T11:53:36.392Z","updated_at":"2026-08-29T00:59:16.811Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/go-yaml","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/go-yaml/repositories"},"tags":[{"name":"v3.0.1","sha":"f6f7691b1fdeb513f56608cd2c32c51f8194bf51","kind":"commit","published_at":"2022-05-27T08:35:30.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v3.0.1","html_url":"https://github.com/go-yaml/yaml/releases/tag/v3.0.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v3.0.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v3.0.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v3.0.1/manifests"},{"name":"v3.0.0","sha":"00bbc0947ae889b9e480044dbc3bc3e3216a6a89","kind":"commit","published_at":"2022-05-21T10:33:21.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v3.0.0","html_url":"https://github.com/go-yaml/yaml/releases/tag/v3.0.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v3.0.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v3.0.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v3.0.0/manifests"},{"name":"v2.4.0","sha":"7649d4548cb53a614db133b2a8ac1f31859dda8c","kind":"commit","published_at":"2020-11-17T15:46:20.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.4.0","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.4.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.4.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.4.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.4.0/manifests"},{"name":"v2.3.0","sha":"0b1645d91e851e735d3e23330303ce81f70adbe3","kind":"commit","published_at":"2020-05-06T23:08:38.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.3.0","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.3.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.3.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.3.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.3.0/manifests"},{"name":"v2.2.8","sha":"53403b58ad1b561927d19068c655246f2db79d48","kind":"commit","published_at":"2020-01-21T17:19:40.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.2.8","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.2.8","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.2.8","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.8","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.8/manifests"},{"name":"v2.2.7","sha":"1f64d6156d11335c3f22d9330b0ad14fc1e789ce","kind":"commit","published_at":"2019-11-19T21:27:36.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.2.7","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.2.7","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.2.7","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.7","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.7/manifests"},{"name":"v2.2.6","sha":"a95acef3719e5e9f7614cc90a119dee4699291eb","kind":"commit","published_at":"2019-11-19T11:51:43.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.2.6","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.2.6","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.2.6","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.6","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.6/manifests"},{"name":"v2.2.5","sha":"f90ceb4f409096b60e2e9076b38b304b8246e5fa","kind":"commit","published_at":"2019-11-04T18:03:43.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.2.5","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.2.5","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.2.5","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.5","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.5/manifests"},{"name":"v2.2.4","sha":"f221b8435cfb71e54062f6c6e99e9ade30b124d5","kind":"commit","published_at":"2019-10-02T18:33:36.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.2.4","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.2.4","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.2.4","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.4/manifests"},{"name":"v2.2.3","sha":"bb4e33bf68bf89cad44d386192cbed201f35b241","kind":"commit","published_at":"2019-09-30T19:09:21.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.2.3","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.2.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.2.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.3/manifests"},{"name":"v2.2.2","sha":"51d6538a90f86fe93ac480b35f37b2be17fef232","kind":"commit","published_at":"2018-11-15T11:05:04.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.2.2","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.2.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.2.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.2/manifests"},{"name":"v2.2.1","sha":"5420a8b6744d3b0345ab293f6fcba19c978f1183","kind":"commit","published_at":"2018-03-28T19:50:20.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.2.1","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.2.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.2.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.1/manifests"},{"name":"v2.2.0","sha":"86f5ed62f8a0ee96bd888d2efdfd6d4fb100a4eb","kind":"commit","published_at":"2018-03-26T05:07:29.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.2.0","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.2.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.2.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.0/manifests"},{"name":"v2.1.1","sha":"7f97868eec74b32b0982dd158a51a446d1da7eb5","kind":"tag","published_at":"2018-02-23T19:13:14.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.1.1","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.1.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.1.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.1.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.1.1/manifests"},{"name":"v2.1.0","sha":"3e6d767784b037b90a14701b6c9f0643f05db963","kind":"tag","published_at":"2018-02-23T19:02:00.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.1.0","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.1.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.1.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.1.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.1.0/manifests"},{"name":"v2.0.0","sha":"d670f9405373e636a5a2765eea47fac0c9bc91a4","kind":"tag","published_at":"2018-02-23T18:53:08.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.0.0","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.0.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.0.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.0.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.0.0/manifests"}]},"repo_metadata_updated_at":"2026-09-05T15:19:57.012Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":0.0,"dependent_packages_count":0.0,"stargazers_count":0.3525641025641026,"forks_count":0.2884615384615385,"docker_downloads_count":null,"average":0.16025641025641027},"purl":"pkg:deb/debian/golang-yaml.v2?arch=source\u0026distro=debian-12","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/debian/golang-yaml.v2","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/debian/golang-yaml.v2","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/debian/golang-yaml.v2/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-09-04T22:05:44.168Z","issues_count":179,"pull_requests_count":117,"avg_time_to_close_issue":27337742.275,"avg_time_to_close_pull_request":54605651.71428572,"issues_closed_count":40,"pull_requests_closed_count":42,"pull_request_authors_count":78,"issue_authors_count":167,"avg_comments_per_issue":3.11731843575419,"avg_comments_per_pull_request":1.4700854700854702,"merged_pull_requests_count":3,"bot_issues_count":0,"bot_pull_requests_count":0,"past_year_issues_count":0,"past_year_pull_requests_count":0,"past_year_avg_time_to_close_issue":null,"past_year_avg_time_to_close_pull_request":null,"past_year_issues_closed_count":0,"past_year_pull_requests_closed_count":0,"past_year_pull_request_authors_count":0,"past_year_issue_authors_count":0,"past_year_avg_comments_per_issue":null,"past_year_avg_comments_per_pull_request":null,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":0,"past_year_merged_pull_requests_count":0,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/issues","maintainers":[],"active_maintainers":[]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/debian-12/packages/golang-yaml.v2/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/debian-12/packages/golang-yaml.v2/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/debian-12/packages/golang-yaml.v2/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/debian-12/packages/golang-yaml.v2/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/debian-12/packages/golang-yaml.v2/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/debian-12/packages/golang-yaml.v2/codemeta","maintainers":[],"registry":{"name":"debian-12","url":"https://packages.debian.org/bookworm","ecosystem":"debian","default":true,"packages_count":34734,"maintainers_count":0,"namespaces_count":4,"keywords_count":2638,"github":"debian","metadata":{"codename":"bookworm","funded_packages_count":1347},"icon_url":"https://github.com/debian.png","created_at":"2026-02-04T11:01:49.459Z","updated_at":"2026-09-04T05:05:54.591Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/debian-12/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/debian-12/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/debian-12/namespaces"}},{"id":3802032,"name":"github.com/go-yaml/yamL","ecosystem":"go","description":"","homepage":"https://github.com/go-yaml/yamL","licenses":"other","normalized_licenses":["Other"],"repository_url":"https://github.com/go-yaml/yamL","keywords_array":[],"namespace":"github.com/go-yaml","versions_count":1,"first_release_published_at":"2014-09-22T21:32:25.000Z","latest_release_published_at":"2014-09-22T21:32:25.000Z","latest_release_number":"v0.0.0-20140922213225-bec87e4332ae","last_synced_at":"2026-09-06T01:11:30.850Z","created_at":"2022-04-11T18:28:54.635Z","updated_at":"2026-09-06T01:11:30.850Z","registry_url":"https://pkg.go.dev/github.com/go-yaml/yamL","install_command":"go get github.com/go-yaml/yamL","documentation_url":"https://pkg.go.dev/github.com/go-yaml/yamL#section-documentation","metadata":{},"repo_metadata":{"id":14730402,"uuid":"17451182","full_name":"go-yaml/yaml","owner":"go-yaml","description":"YAML support for the Go language.","archived":true,"fork":false,"pushed_at":"2025-04-01T17:00:11.000Z","size":1587,"stargazers_count":7019,"open_issues_count":422,"forks_count":1115,"subscribers_count":3,"default_branch":"v3","last_synced_at":"2026-08-27T09:55:02.448Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":null,"language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"other","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/go-yaml.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null}},"created_at":"2014-03-05T18:54:57.000Z","updated_at":"2026-08-22T06:16:14.000Z","dependencies_parsed_at":"2023-02-16T14:45:46.186Z","dependency_job_id":"c3f4f6d2-0694-43c1-a700-724512e371e7","html_url":"https://github.com/go-yaml/yaml","commit_stats":{"total_commits":302,"total_committers":48,"mean_commits":6.291666666666667,"dds":0.2814569536423841,"last_synced_commit":"f6f7691b1fdeb513f56608cd2c32c51f8194bf51"},"previous_names":["go-yaml/go-yaml-v1"],"tags_count":16,"template":false,"template_full_name":null,"purl":"pkg:github/go-yaml/yaml","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/go-yaml","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/refs/heads/v3","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/sbom","scorecard":{"id":432677,"data":{"date":"2025-08-11","repo":{"name":"github.com/go-yaml/yaml","commit":"944c86a7d29391925ed6ac33bee98a0516f1287a"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":4.4,"checks":[{"name":"Code-Review","score":2,"reason":"Found 6/27 approved changesets -- score normalized to 2","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Warn: no topLevel permission defined: .github/workflows/go.yaml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Maintained","score":0,"reason":"project is archived","details":["Warn: Repository is archived."],"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Pinned-Dependencies","score":3,"reason":"dependency not pinned by hash detected -- score normalized to 3","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/go.yaml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/go-yaml/yaml/go.yaml/v3?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/go.yaml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/go-yaml/yaml/go.yaml/v3?enable=pin","Info: 0 out of 2 GitHub-owned GitHubAction dependencies pinned","Info: 1 out of 1 goCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Security-Policy","score":0,"reason":"security policy file not detected","details":["Warn: no security policy file detected","Warn: no security file to analyze","Warn: no security file to analyze","Warn: no security file to analyze"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"License","score":9,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Warn: project license file does not contain an FSF or OSI license."],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Fuzzing","score":10,"reason":"project is fuzzed","details":["Info: OSSFuzz integration found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Branch-Protection","score":0,"reason":"branch protection not enabled on development/release branches","details":["Warn: branch protection not enabled for branch 'v3'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 9 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-19T03:43:53.386Z","repository_id":14730402,"created_at":"2025-08-19T03:43:53.386Z","updated_at":"2025-08-19T03:43:53.386Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":36948027,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-08-22T15:14:58.755Z","status":"online","status_checked_at":"2026-08-27T02:00:07.166Z","response_time":96,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"go-yaml","name":"go-yaml","uuid":"6823640","kind":"organization","description":null,"email":null,"website":null,"location":null,"twitter":null,"company":null,"icon_url":"https://avatars.githubusercontent.com/u/6823640?v=4","repositories_count":1,"last_synced_at":"2026-08-22T00:54:17.902Z","metadata":{"has_sponsors_listing":false,"funding":null},"html_url":"https://github.com/go-yaml","funding_links":[],"total_stars":7020,"followers":17,"following":0,"created_at":"2022-11-07T11:53:36.392Z","updated_at":"2026-08-22T00:54:17.916Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/go-yaml","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/go-yaml/repositories"},"tags":[{"name":"v3.0.1","sha":"f6f7691b1fdeb513f56608cd2c32c51f8194bf51","kind":"commit","published_at":"2022-05-27T08:35:30.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v3.0.1","html_url":"https://github.com/go-yaml/yaml/releases/tag/v3.0.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v3.0.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v3.0.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v3.0.1/manifests"},{"name":"v3.0.0","sha":"00bbc0947ae889b9e480044dbc3bc3e3216a6a89","kind":"commit","published_at":"2022-05-21T10:33:21.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v3.0.0","html_url":"https://github.com/go-yaml/yaml/releases/tag/v3.0.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v3.0.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v3.0.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v3.0.0/manifests"},{"name":"v2.4.0","sha":"7649d4548cb53a614db133b2a8ac1f31859dda8c","kind":"commit","published_at":"2020-11-17T15:46:20.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.4.0","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.4.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.4.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.4.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.4.0/manifests"},{"name":"v2.3.0","sha":"0b1645d91e851e735d3e23330303ce81f70adbe3","kind":"commit","published_at":"2020-05-06T23:08:38.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.3.0","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.3.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.3.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.3.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.3.0/manifests"},{"name":"v2.2.8","sha":"53403b58ad1b561927d19068c655246f2db79d48","kind":"commit","published_at":"2020-01-21T17:19:40.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.2.8","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.2.8","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.2.8","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.8","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.8/manifests"},{"name":"v2.2.7","sha":"1f64d6156d11335c3f22d9330b0ad14fc1e789ce","kind":"commit","published_at":"2019-11-19T21:27:36.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.2.7","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.2.7","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.2.7","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.7","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.7/manifests"},{"name":"v2.2.6","sha":"a95acef3719e5e9f7614cc90a119dee4699291eb","kind":"commit","published_at":"2019-11-19T11:51:43.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.2.6","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.2.6","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.2.6","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.6","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.6/manifests"},{"name":"v2.2.5","sha":"f90ceb4f409096b60e2e9076b38b304b8246e5fa","kind":"commit","published_at":"2019-11-04T18:03:43.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.2.5","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.2.5","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.2.5","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.5","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.5/manifests"},{"name":"v2.2.4","sha":"f221b8435cfb71e54062f6c6e99e9ade30b124d5","kind":"commit","published_at":"2019-10-02T18:33:36.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.2.4","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.2.4","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.2.4","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.4/manifests"},{"name":"v2.2.3","sha":"bb4e33bf68bf89cad44d386192cbed201f35b241","kind":"commit","published_at":"2019-09-30T19:09:21.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.2.3","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.2.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.2.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.3/manifests"},{"name":"v2.2.2","sha":"51d6538a90f86fe93ac480b35f37b2be17fef232","kind":"commit","published_at":"2018-11-15T11:05:04.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.2.2","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.2.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.2.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.2/manifests"},{"name":"v2.2.1","sha":"5420a8b6744d3b0345ab293f6fcba19c978f1183","kind":"commit","published_at":"2018-03-28T19:50:20.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.2.1","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.2.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.2.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.1/manifests"},{"name":"v2.2.0","sha":"86f5ed62f8a0ee96bd888d2efdfd6d4fb100a4eb","kind":"commit","published_at":"2018-03-26T05:07:29.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.2.0","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.2.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.2.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.0/manifests"},{"name":"v2.1.1","sha":"7f97868eec74b32b0982dd158a51a446d1da7eb5","kind":"tag","published_at":"2018-02-23T19:13:14.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.1.1","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.1.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.1.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.1.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.1.1/manifests"},{"name":"v2.1.0","sha":"3e6d767784b037b90a14701b6c9f0643f05db963","kind":"tag","published_at":"2018-02-23T19:02:00.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.1.0","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.1.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.1.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.1.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.1.0/manifests"},{"name":"v2.0.0","sha":"d670f9405373e636a5a2765eea47fac0c9bc91a4","kind":"tag","published_at":"2018-02-23T18:53:08.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.0.0","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.0.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.0.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.0.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.0.0/manifests"}]},"repo_metadata_updated_at":"2026-08-28T01:25:36.560Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":9.345852080216646,"dependent_packages_count":6.999148183520997,"stargazers_count":0.5486865304134396,"forks_count":0.6032297199779583,"average":4.37422912853226},"purl":"pkg:golang/github.com/go-yaml/yam%21l","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/go/github.com/go-yaml/yamL","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/go/github.com/go-yaml/yamL","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/go/github.com/go-yaml/yamL/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-08-27T11:13:54.652Z","issues_count":179,"pull_requests_count":117,"avg_time_to_close_issue":27337742.275,"avg_time_to_close_pull_request":54605651.71428572,"issues_closed_count":40,"pull_requests_closed_count":42,"pull_request_authors_count":78,"issue_authors_count":167,"avg_comments_per_issue":3.11731843575419,"avg_comments_per_pull_request":1.4700854700854702,"merged_pull_requests_count":3,"bot_issues_count":0,"bot_pull_requests_count":0,"past_year_issues_count":0,"past_year_pull_requests_count":0,"past_year_avg_time_to_close_issue":null,"past_year_avg_time_to_close_pull_request":null,"past_year_issues_closed_count":0,"past_year_pull_requests_closed_count":0,"past_year_pull_request_authors_count":0,"past_year_issue_authors_count":0,"past_year_avg_comments_per_issue":null,"past_year_avg_comments_per_pull_request":null,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":0,"past_year_merged_pull_requests_count":0,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/issues","maintainers":[],"active_maintainers":[]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fgo-yaml%2FyamL/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fgo-yaml%2FyamL/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fgo-yaml%2FyamL/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fgo-yaml%2FyamL/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fgo-yaml%2FyamL/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fgo-yaml%2FyamL/codemeta","maintainers":[],"registry":{"name":"proxy.golang.org","url":"https://proxy.golang.org","ecosystem":"go","default":true,"packages_count":2287853,"maintainers_count":0,"namespaces_count":839605,"keywords_count":126639,"github":"golang","metadata":{"funded_packages_count":74445,"sync_missing_packages_cursor":{"timestamp":"2026-09-07T00:07:19.468853Z","path":"github.com/herodotusdev/accumulators","version":"v4.2.0-alpha.1+incompatible"},"rate_limit":1},"icon_url":"https://github.com/golang.png","created_at":"2022-04-04T15:19:22.939Z","updated_at":"2026-09-07T00:08:13.518Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/namespaces"}},{"id":13581986,"name":"golang-yaml.v2","ecosystem":"debian","description":null,"homepage":"https://github.com/go-yaml/yaml/tree/v2","licenses":"other","normalized_licenses":[],"repository_url":"https://github.com/go-yaml/yaml","keywords_array":["misc"],"namespace":"main","versions_count":1,"first_release_published_at":"2026-02-11T08:57:35.124Z","latest_release_published_at":"2026-02-11T08:57:35.124Z","latest_release_number":"2.2.2-1","last_synced_at":"2026-03-14T00:02:22.074Z","created_at":"2026-02-11T08:57:34.940Z","updated_at":"2026-09-06T01:19:46.322Z","registry_url":"https://tracker.debian.org/pkg/golang-yaml.v2","install_command":"apt-get install golang-yaml.v2","documentation_url":"https://packages.debian.org/buster/golang-yaml.v2","metadata":{"component":"main","architecture":"all","priority":"optional","binary":"golang-gopkg-yaml.v2-dev, golang-yaml.v2-dev","standards_version":"4.2.1","maintainer":"Debian Go Packaging Team \u003cteam+pkg-go@tracker.debian.org\u003e","build_depends":"debhelper (\u003e= 11), dh-golang (\u003e= 1.10), golang-any, golang-gopkg-check.v1-dev","build_depends_indep":null,"build_depends_arch":null},"repo_metadata":{"id":14730402,"uuid":"17451182","full_name":"go-yaml/yaml","owner":"go-yaml","description":"YAML support for the Go language.","archived":true,"fork":false,"pushed_at":"2025-04-01T17:00:11.000Z","size":1587,"stargazers_count":7018,"open_issues_count":422,"forks_count":1117,"subscribers_count":3,"default_branch":"v3","last_synced_at":"2026-09-02T19:07:29.914Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":null,"language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"other","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/go-yaml.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null}},"created_at":"2014-03-05T18:54:57.000Z","updated_at":"2026-09-02T18:56:31.000Z","dependencies_parsed_at":"2023-02-16T14:45:46.186Z","dependency_job_id":"c3f4f6d2-0694-43c1-a700-724512e371e7","html_url":"https://github.com/go-yaml/yaml","commit_stats":{"total_commits":302,"total_committers":48,"mean_commits":6.291666666666667,"dds":0.2814569536423841,"last_synced_commit":"f6f7691b1fdeb513f56608cd2c32c51f8194bf51"},"previous_names":["go-yaml/go-yaml-v1"],"tags_count":16,"template":false,"template_full_name":null,"purl":"pkg:github/go-yaml/yaml","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/go-yaml","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/refs/heads/v3","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/sbom","scorecard":{"id":432677,"data":{"date":"2025-08-11","repo":{"name":"github.com/go-yaml/yaml","commit":"944c86a7d29391925ed6ac33bee98a0516f1287a"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":4.4,"checks":[{"name":"Code-Review","score":2,"reason":"Found 6/27 approved changesets -- score normalized to 2","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Warn: no topLevel permission defined: .github/workflows/go.yaml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Maintained","score":0,"reason":"project is archived","details":["Warn: Repository is archived."],"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Pinned-Dependencies","score":3,"reason":"dependency not pinned by hash detected -- score normalized to 3","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/go.yaml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/go-yaml/yaml/go.yaml/v3?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/go.yaml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/go-yaml/yaml/go.yaml/v3?enable=pin","Info: 0 out of 2 GitHub-owned GitHubAction dependencies pinned","Info: 1 out of 1 goCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Security-Policy","score":0,"reason":"security policy file not detected","details":["Warn: no security policy file detected","Warn: no security file to analyze","Warn: no security file to analyze","Warn: no security file to analyze"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"License","score":9,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Warn: project license file does not contain an FSF or OSI license."],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Fuzzing","score":10,"reason":"project is fuzzed","details":["Info: OSSFuzz integration found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Branch-Protection","score":0,"reason":"branch protection not enabled on development/release branches","details":["Warn: branch protection not enabled for branch 'v3'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 9 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-19T03:43:53.386Z","repository_id":14730402,"created_at":"2025-08-19T03:43:53.386Z","updated_at":"2025-08-19T03:43:53.386Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":37019155,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-08-22T15:14:58.755Z","status":"online","status_checked_at":"2026-09-02T02:00:06.194Z","response_time":106,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"go-yaml","name":"go-yaml","uuid":"6823640","kind":"organization","description":null,"email":null,"website":null,"location":null,"twitter":null,"company":null,"icon_url":"https://avatars.githubusercontent.com/u/6823640?v=4","repositories_count":1,"last_synced_at":"2026-08-29T00:59:16.798Z","metadata":{"has_sponsors_listing":false,"funding":null},"html_url":"https://github.com/go-yaml","funding_links":[],"total_stars":7019,"followers":17,"following":0,"created_at":"2022-11-07T11:53:36.392Z","updated_at":"2026-08-29T00:59:16.811Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/go-yaml","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/go-yaml/repositories"},"tags":[{"name":"v3.0.1","sha":"f6f7691b1fdeb513f56608cd2c32c51f8194bf51","kind":"commit","published_at":"2022-05-27T08:35:30.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v3.0.1","html_url":"https://github.com/go-yaml/yaml/releases/tag/v3.0.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v3.0.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v3.0.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v3.0.1/manifests"},{"name":"v3.0.0","sha":"00bbc0947ae889b9e480044dbc3bc3e3216a6a89","kind":"commit","published_at":"2022-05-21T10:33:21.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v3.0.0","html_url":"https://github.com/go-yaml/yaml/releases/tag/v3.0.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v3.0.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v3.0.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v3.0.0/manifests"},{"name":"v2.4.0","sha":"7649d4548cb53a614db133b2a8ac1f31859dda8c","kind":"commit","published_at":"2020-11-17T15:46:20.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.4.0","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.4.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.4.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.4.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.4.0/manifests"},{"name":"v2.3.0","sha":"0b1645d91e851e735d3e23330303ce81f70adbe3","kind":"commit","published_at":"2020-05-06T23:08:38.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.3.0","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.3.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.3.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.3.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.3.0/manifests"},{"name":"v2.2.8","sha":"53403b58ad1b561927d19068c655246f2db79d48","kind":"commit","published_at":"2020-01-21T17:19:40.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.2.8","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.2.8","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.2.8","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.8","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.8/manifests"},{"name":"v2.2.7","sha":"1f64d6156d11335c3f22d9330b0ad14fc1e789ce","kind":"commit","published_at":"2019-11-19T21:27:36.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.2.7","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.2.7","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.2.7","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.7","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.7/manifests"},{"name":"v2.2.6","sha":"a95acef3719e5e9f7614cc90a119dee4699291eb","kind":"commit","published_at":"2019-11-19T11:51:43.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.2.6","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.2.6","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.2.6","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.6","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.6/manifests"},{"name":"v2.2.5","sha":"f90ceb4f409096b60e2e9076b38b304b8246e5fa","kind":"commit","published_at":"2019-11-04T18:03:43.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.2.5","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.2.5","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.2.5","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.5","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.5/manifests"},{"name":"v2.2.4","sha":"f221b8435cfb71e54062f6c6e99e9ade30b124d5","kind":"commit","published_at":"2019-10-02T18:33:36.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.2.4","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.2.4","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.2.4","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.4/manifests"},{"name":"v2.2.3","sha":"bb4e33bf68bf89cad44d386192cbed201f35b241","kind":"commit","published_at":"2019-09-30T19:09:21.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.2.3","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.2.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.2.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.3/manifests"},{"name":"v2.2.2","sha":"51d6538a90f86fe93ac480b35f37b2be17fef232","kind":"commit","published_at":"2018-11-15T11:05:04.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.2.2","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.2.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.2.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.2/manifests"},{"name":"v2.2.1","sha":"5420a8b6744d3b0345ab293f6fcba19c978f1183","kind":"commit","published_at":"2018-03-28T19:50:20.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.2.1","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.2.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.2.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.1/manifests"},{"name":"v2.2.0","sha":"86f5ed62f8a0ee96bd888d2efdfd6d4fb100a4eb","kind":"commit","published_at":"2018-03-26T05:07:29.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.2.0","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.2.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.2.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.0/manifests"},{"name":"v2.1.1","sha":"7f97868eec74b32b0982dd158a51a446d1da7eb5","kind":"tag","published_at":"2018-02-23T19:13:14.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.1.1","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.1.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.1.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.1.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.1.1/manifests"},{"name":"v2.1.0","sha":"3e6d767784b037b90a14701b6c9f0643f05db963","kind":"tag","published_at":"2018-02-23T19:02:00.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.1.0","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.1.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.1.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.1.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.1.0/manifests"},{"name":"v2.0.0","sha":"d670f9405373e636a5a2765eea47fac0c9bc91a4","kind":"tag","published_at":"2018-02-23T18:53:08.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.0.0","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.0.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.0.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.0.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.0.0/manifests"}]},"repo_metadata_updated_at":"2026-09-06T01:19:46.322Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":0.0,"dependent_packages_count":0.0,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":100},"purl":"pkg:deb/debian/golang-yaml.v2?arch=source\u0026distro=debian-10\u0026repository_url=https://packages.debian.org/buster","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/debian/golang-yaml.v2","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/debian/golang-yaml.v2","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/debian/golang-yaml.v2/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-09-05T22:36:50.593Z","issues_count":179,"pull_requests_count":117,"avg_time_to_close_issue":27337742.275,"avg_time_to_close_pull_request":54605651.71428572,"issues_closed_count":40,"pull_requests_closed_count":42,"pull_request_authors_count":78,"issue_authors_count":167,"avg_comments_per_issue":3.11731843575419,"avg_comments_per_pull_request":1.4700854700854702,"merged_pull_requests_count":3,"bot_issues_count":0,"bot_pull_requests_count":0,"past_year_issues_count":0,"past_year_pull_requests_count":0,"past_year_avg_time_to_close_issue":null,"past_year_avg_time_to_close_pull_request":null,"past_year_issues_closed_count":0,"past_year_pull_requests_closed_count":0,"past_year_pull_request_authors_count":0,"past_year_issue_authors_count":0,"past_year_avg_comments_per_issue":null,"past_year_avg_comments_per_pull_request":null,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":0,"past_year_merged_pull_requests_count":0,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/issues","maintainers":[],"active_maintainers":[]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/debian-10/packages/golang-yaml.v2/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/debian-10/packages/golang-yaml.v2/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/debian-10/packages/golang-yaml.v2/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/debian-10/packages/golang-yaml.v2/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/debian-10/packages/golang-yaml.v2/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/debian-10/packages/golang-yaml.v2/codemeta","maintainers":[],"registry":{"name":"debian-10","url":"https://packages.debian.org/buster","ecosystem":"debian","default":false,"packages_count":28836,"maintainers_count":0,"namespaces_count":3,"keywords_count":903,"github":"debian","metadata":{"codename":"buster","mirror":"http://archive.debian.org/debian","funded_packages_count":681},"icon_url":"https://github.com/debian.png","created_at":"2026-02-04T11:01:50.156Z","updated_at":"2026-09-07T05:00:21.395Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/debian-10/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/debian-10/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/debian-10/namespaces"}},{"id":3507878,"name":"gopkg.in/go-yaml/yaml.v2","ecosystem":"go","description":"Package yaml implements YAML support for the Go language.","homepage":"https://github.com/go-yaml/yaml","licenses":"Apache-2.0","normalized_licenses":["Apache-2.0"],"repository_url":"https://github.com/go-yaml/yaml","keywords_array":[],"namespace":"gopkg.in/go-yaml","versions_count":14,"first_release_published_at":"2018-01-09T11:43:31.000Z","latest_release_published_at":"2020-11-17T15:46:20.000Z","latest_release_number":"v2.4.0","last_synced_at":"2026-09-06T01:25:09.447Z","created_at":"2022-04-10T20:50:01.774Z","updated_at":"2026-09-06T01:25:09.448Z","registry_url":"https://pkg.go.dev/gopkg.in/go-yaml/yaml.v2","install_command":"go get gopkg.in/go-yaml/yaml.v2","documentation_url":"https://pkg.go.dev/gopkg.in/go-yaml/yaml.v2#section-documentation","metadata":{},"repo_metadata":{"id":14730402,"uuid":"17451182","full_name":"go-yaml/yaml","owner":"go-yaml","description":"YAML support for the Go language.","archived":true,"fork":false,"pushed_at":"2025-04-01T17:00:11.000Z","size":1587,"stargazers_count":7018,"open_issues_count":422,"forks_count":1117,"subscribers_count":3,"default_branch":"v3","last_synced_at":"2026-09-02T19:07:29.914Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":null,"language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"other","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/go-yaml.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null}},"created_at":"2014-03-05T18:54:57.000Z","updated_at":"2026-09-02T18:56:31.000Z","dependencies_parsed_at":"2023-02-16T14:45:46.186Z","dependency_job_id":"c3f4f6d2-0694-43c1-a700-724512e371e7","html_url":"https://github.com/go-yaml/yaml","commit_stats":{"total_commits":302,"total_committers":48,"mean_commits":6.291666666666667,"dds":0.2814569536423841,"last_synced_commit":"f6f7691b1fdeb513f56608cd2c32c51f8194bf51"},"previous_names":["go-yaml/go-yaml-v1"],"tags_count":16,"template":false,"template_full_name":null,"purl":"pkg:github/go-yaml/yaml","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/go-yaml","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/refs/heads/v3","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/sbom","scorecard":{"id":432677,"data":{"date":"2025-08-11","repo":{"name":"github.com/go-yaml/yaml","commit":"944c86a7d29391925ed6ac33bee98a0516f1287a"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":4.4,"checks":[{"name":"Code-Review","score":2,"reason":"Found 6/27 approved changesets -- score normalized to 2","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Warn: no topLevel permission defined: .github/workflows/go.yaml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Maintained","score":0,"reason":"project is archived","details":["Warn: Repository is archived."],"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Pinned-Dependencies","score":3,"reason":"dependency not pinned by hash detected -- score normalized to 3","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/go.yaml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/go-yaml/yaml/go.yaml/v3?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/go.yaml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/go-yaml/yaml/go.yaml/v3?enable=pin","Info: 0 out of 2 GitHub-owned GitHubAction dependencies pinned","Info: 1 out of 1 goCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Security-Policy","score":0,"reason":"security policy file not detected","details":["Warn: no security policy file detected","Warn: no security file to analyze","Warn: no security file to analyze","Warn: no security file to analyze"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"License","score":9,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Warn: project license file does not contain an FSF or OSI license."],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Fuzzing","score":10,"reason":"project is fuzzed","details":["Info: OSSFuzz integration found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Branch-Protection","score":0,"reason":"branch protection not enabled on development/release branches","details":["Warn: branch protection not enabled for branch 'v3'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 9 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-19T03:43:53.386Z","repository_id":14730402,"created_at":"2025-08-19T03:43:53.386Z","updated_at":"2025-08-19T03:43:53.386Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":37019155,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-08-22T15:14:58.755Z","status":"online","status_checked_at":"2026-09-02T02:00:06.194Z","response_time":106,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"go-yaml","name":"go-yaml","uuid":"6823640","kind":"organization","description":null,"email":null,"website":null,"location":null,"twitter":null,"company":null,"icon_url":"https://avatars.githubusercontent.com/u/6823640?v=4","repositories_count":1,"last_synced_at":"2026-08-29T00:59:16.798Z","metadata":{"has_sponsors_listing":false,"funding":null},"html_url":"https://github.com/go-yaml","funding_links":[],"total_stars":7019,"followers":17,"following":0,"created_at":"2022-11-07T11:53:36.392Z","updated_at":"2026-08-29T00:59:16.811Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/go-yaml","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/go-yaml/repositories"},"tags":[{"name":"v3.0.1","sha":"f6f7691b1fdeb513f56608cd2c32c51f8194bf51","kind":"commit","published_at":"2022-05-27T08:35:30.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v3.0.1","html_url":"https://github.com/go-yaml/yaml/releases/tag/v3.0.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v3.0.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v3.0.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v3.0.1/manifests"},{"name":"v3.0.0","sha":"00bbc0947ae889b9e480044dbc3bc3e3216a6a89","kind":"commit","published_at":"2022-05-21T10:33:21.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v3.0.0","html_url":"https://github.com/go-yaml/yaml/releases/tag/v3.0.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v3.0.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v3.0.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v3.0.0/manifests"},{"name":"v2.4.0","sha":"7649d4548cb53a614db133b2a8ac1f31859dda8c","kind":"commit","published_at":"2020-11-17T15:46:20.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.4.0","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.4.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.4.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.4.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.4.0/manifests"},{"name":"v2.3.0","sha":"0b1645d91e851e735d3e23330303ce81f70adbe3","kind":"commit","published_at":"2020-05-06T23:08:38.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.3.0","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.3.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.3.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.3.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.3.0/manifests"},{"name":"v2.2.8","sha":"53403b58ad1b561927d19068c655246f2db79d48","kind":"commit","published_at":"2020-01-21T17:19:40.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.2.8","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.2.8","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.2.8","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.8","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.8/manifests"},{"name":"v2.2.7","sha":"1f64d6156d11335c3f22d9330b0ad14fc1e789ce","kind":"commit","published_at":"2019-11-19T21:27:36.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.2.7","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.2.7","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.2.7","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.7","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.7/manifests"},{"name":"v2.2.6","sha":"a95acef3719e5e9f7614cc90a119dee4699291eb","kind":"commit","published_at":"2019-11-19T11:51:43.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.2.6","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.2.6","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.2.6","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.6","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.6/manifests"},{"name":"v2.2.5","sha":"f90ceb4f409096b60e2e9076b38b304b8246e5fa","kind":"commit","published_at":"2019-11-04T18:03:43.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.2.5","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.2.5","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.2.5","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.5","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.5/manifests"},{"name":"v2.2.4","sha":"f221b8435cfb71e54062f6c6e99e9ade30b124d5","kind":"commit","published_at":"2019-10-02T18:33:36.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.2.4","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.2.4","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.2.4","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.4/manifests"},{"name":"v2.2.3","sha":"bb4e33bf68bf89cad44d386192cbed201f35b241","kind":"commit","published_at":"2019-09-30T19:09:21.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.2.3","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.2.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.2.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.3/manifests"},{"name":"v2.2.2","sha":"51d6538a90f86fe93ac480b35f37b2be17fef232","kind":"commit","published_at":"2018-11-15T11:05:04.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.2.2","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.2.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.2.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.2/manifests"},{"name":"v2.2.1","sha":"5420a8b6744d3b0345ab293f6fcba19c978f1183","kind":"commit","published_at":"2018-03-28T19:50:20.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.2.1","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.2.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.2.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.1/manifests"},{"name":"v2.2.0","sha":"86f5ed62f8a0ee96bd888d2efdfd6d4fb100a4eb","kind":"commit","published_at":"2018-03-26T05:07:29.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.2.0","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.2.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.2.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.0/manifests"},{"name":"v2.1.1","sha":"7f97868eec74b32b0982dd158a51a446d1da7eb5","kind":"tag","published_at":"2018-02-23T19:13:14.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.1.1","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.1.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.1.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.1.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.1.1/manifests"},{"name":"v2.1.0","sha":"3e6d767784b037b90a14701b6c9f0643f05db963","kind":"tag","published_at":"2018-02-23T19:02:00.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.1.0","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.1.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.1.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.1.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.1.0/manifests"},{"name":"v2.0.0","sha":"d670f9405373e636a5a2765eea47fac0c9bc91a4","kind":"tag","published_at":"2018-02-23T18:53:08.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.0.0","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.0.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.0.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.0.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.0.0/manifests"}]},"repo_metadata_updated_at":"2026-09-06T01:19:46.323Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":9.345852080216646,"dependent_packages_count":6.999148183520997,"stargazers_count":0.5504821909752344,"forks_count":0.60435200782908,"average":4.37495861563549},"purl":"pkg:golang/gopkg.in/go-yaml/yaml.v2","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/go/gopkg.in/go-yaml/yaml.v2","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/go/gopkg.in/go-yaml/yaml.v2","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/go/gopkg.in/go-yaml/yaml.v2/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-09-05T22:36:50.593Z","issues_count":179,"pull_requests_count":117,"avg_time_to_close_issue":27337742.275,"avg_time_to_close_pull_request":54605651.71428572,"issues_closed_count":40,"pull_requests_closed_count":42,"pull_request_authors_count":78,"issue_authors_count":167,"avg_comments_per_issue":3.11731843575419,"avg_comments_per_pull_request":1.4700854700854702,"merged_pull_requests_count":3,"bot_issues_count":0,"bot_pull_requests_count":0,"past_year_issues_count":0,"past_year_pull_requests_count":0,"past_year_avg_time_to_close_issue":null,"past_year_avg_time_to_close_pull_request":null,"past_year_issues_closed_count":0,"past_year_pull_requests_closed_count":0,"past_year_pull_request_authors_count":0,"past_year_issue_authors_count":0,"past_year_avg_comments_per_issue":null,"past_year_avg_comments_per_pull_request":null,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":0,"past_year_merged_pull_requests_count":0,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/issues","maintainers":[],"active_maintainers":[]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/gopkg.in%2Fgo-yaml%2Fyaml.v2/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/gopkg.in%2Fgo-yaml%2Fyaml.v2/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/gopkg.in%2Fgo-yaml%2Fyaml.v2/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/gopkg.in%2Fgo-yaml%2Fyaml.v2/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/gopkg.in%2Fgo-yaml%2Fyaml.v2/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/gopkg.in%2Fgo-yaml%2Fyaml.v2/codemeta","maintainers":[],"registry":{"name":"proxy.golang.org","url":"https://proxy.golang.org","ecosystem":"go","default":true,"packages_count":2287853,"maintainers_count":0,"namespaces_count":839605,"keywords_count":126639,"github":"golang","metadata":{"funded_packages_count":74445,"sync_missing_packages_cursor":{"timestamp":"2026-09-07T00:07:19.468853Z","path":"github.com/herodotusdev/accumulators","version":"v4.2.0-alpha.1+incompatible"},"rate_limit":1},"icon_url":"https://github.com/golang.png","created_at":"2022-04-04T15:19:22.939Z","updated_at":"2026-09-07T00:08:13.518Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/namespaces"}},{"id":13476757,"name":"golang-yaml.v2","ecosystem":"ubuntu","description":null,"homepage":"https://github.com/go-yaml/yaml/tree/v2","licenses":"other","normalized_licenses":[],"repository_url":"https://github.com/go-yaml/yaml","keywords_array":["universe/devel"],"namespace":"universe","versions_count":1,"first_release_published_at":"2026-02-10T05:18:00.976Z","latest_release_published_at":"2026-02-10T05:18:00.976Z","latest_release_number":"2.4.0-4","last_synced_at":"2026-03-10T06:04:24.898Z","created_at":"2026-02-10T05:18:00.686Z","updated_at":"2026-09-03T01:07:14.746Z","registry_url":"https://launchpad.net/ubuntu/+source/golang-yaml.v2","install_command":"apt-get install golang-yaml.v2","documentation_url":null,"metadata":{"component":"universe","architecture":"all","priority":"extra","binary":"golang-gopkg-yaml.v2-dev","standards_version":"4.6.0","maintainer":"Debian Go Packaging Team \u003cteam+pkg-go@tracker.debian.org\u003e","build_depends":"debhelper-compat (= 13), dh-golang, golang-any, golang-gopkg-check.v1-dev","build_depends_indep":null,"build_depends_arch":null},"repo_metadata":{"id":14730402,"uuid":"17451182","full_name":"go-yaml/yaml","owner":"go-yaml","description":"YAML support for the Go language.","archived":true,"fork":false,"pushed_at":"2025-04-01T17:00:11.000Z","size":1587,"stargazers_count":7018,"open_issues_count":422,"forks_count":1117,"subscribers_count":3,"default_branch":"v3","last_synced_at":"2026-09-02T19:07:29.914Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":null,"language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"other","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/go-yaml.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null}},"created_at":"2014-03-05T18:54:57.000Z","updated_at":"2026-09-02T18:56:31.000Z","dependencies_parsed_at":"2023-02-16T14:45:46.186Z","dependency_job_id":"c3f4f6d2-0694-43c1-a700-724512e371e7","html_url":"https://github.com/go-yaml/yaml","commit_stats":{"total_commits":302,"total_committers":48,"mean_commits":6.291666666666667,"dds":0.2814569536423841,"last_synced_commit":"f6f7691b1fdeb513f56608cd2c32c51f8194bf51"},"previous_names":["go-yaml/go-yaml-v1"],"tags_count":16,"template":false,"template_full_name":null,"purl":"pkg:github/go-yaml/yaml","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/go-yaml","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/refs/heads/v3","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/sbom","scorecard":{"id":432677,"data":{"date":"2025-08-11","repo":{"name":"github.com/go-yaml/yaml","commit":"944c86a7d29391925ed6ac33bee98a0516f1287a"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":4.4,"checks":[{"name":"Code-Review","score":2,"reason":"Found 6/27 approved changesets -- score normalized to 2","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Warn: no topLevel permission defined: .github/workflows/go.yaml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Maintained","score":0,"reason":"project is archived","details":["Warn: Repository is archived."],"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Pinned-Dependencies","score":3,"reason":"dependency not pinned by hash detected -- score normalized to 3","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/go.yaml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/go-yaml/yaml/go.yaml/v3?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/go.yaml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/go-yaml/yaml/go.yaml/v3?enable=pin","Info: 0 out of 2 GitHub-owned GitHubAction dependencies pinned","Info: 1 out of 1 goCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Security-Policy","score":0,"reason":"security policy file not detected","details":["Warn: no security policy file detected","Warn: no security file to analyze","Warn: no security file to analyze","Warn: no security file to analyze"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"License","score":9,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Warn: project license file does not contain an FSF or OSI license."],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Fuzzing","score":10,"reason":"project is fuzzed","details":["Info: OSSFuzz integration found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Branch-Protection","score":0,"reason":"branch protection not enabled on development/release branches","details":["Warn: branch protection not enabled for branch 'v3'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 9 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-19T03:43:53.386Z","repository_id":14730402,"created_at":"2025-08-19T03:43:53.386Z","updated_at":"2025-08-19T03:43:53.386Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":37019155,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-08-22T15:14:58.755Z","status":"online","status_checked_at":"2026-09-02T02:00:06.194Z","response_time":106,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"go-yaml","name":"go-yaml","uuid":"6823640","kind":"organization","description":null,"email":null,"website":null,"location":null,"twitter":null,"company":null,"icon_url":"https://avatars.githubusercontent.com/u/6823640?v=4","repositories_count":1,"last_synced_at":"2026-08-29T00:59:16.798Z","metadata":{"has_sponsors_listing":false,"funding":null},"html_url":"https://github.com/go-yaml","funding_links":[],"total_stars":7019,"followers":17,"following":0,"created_at":"2022-11-07T11:53:36.392Z","updated_at":"2026-08-29T00:59:16.811Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/go-yaml","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/go-yaml/repositories"},"tags":[{"name":"v3.0.1","sha":"f6f7691b1fdeb513f56608cd2c32c51f8194bf51","kind":"commit","published_at":"2022-05-27T08:35:30.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v3.0.1","html_url":"https://github.com/go-yaml/yaml/releases/tag/v3.0.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v3.0.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v3.0.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v3.0.1/manifests"},{"name":"v3.0.0","sha":"00bbc0947ae889b9e480044dbc3bc3e3216a6a89","kind":"commit","published_at":"2022-05-21T10:33:21.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v3.0.0","html_url":"https://github.com/go-yaml/yaml/releases/tag/v3.0.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v3.0.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v3.0.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v3.0.0/manifests"},{"name":"v2.4.0","sha":"7649d4548cb53a614db133b2a8ac1f31859dda8c","kind":"commit","published_at":"2020-11-17T15:46:20.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.4.0","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.4.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.4.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.4.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.4.0/manifests"},{"name":"v2.3.0","sha":"0b1645d91e851e735d3e23330303ce81f70adbe3","kind":"commit","published_at":"2020-05-06T23:08:38.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.3.0","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.3.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.3.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.3.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.3.0/manifests"},{"name":"v2.2.8","sha":"53403b58ad1b561927d19068c655246f2db79d48","kind":"commit","published_at":"2020-01-21T17:19:40.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.2.8","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.2.8","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.2.8","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.8","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.8/manifests"},{"name":"v2.2.7","sha":"1f64d6156d11335c3f22d9330b0ad14fc1e789ce","kind":"commit","published_at":"2019-11-19T21:27:36.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.2.7","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.2.7","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.2.7","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.7","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.7/manifests"},{"name":"v2.2.6","sha":"a95acef3719e5e9f7614cc90a119dee4699291eb","kind":"commit","published_at":"2019-11-19T11:51:43.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.2.6","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.2.6","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.2.6","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.6","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.6/manifests"},{"name":"v2.2.5","sha":"f90ceb4f409096b60e2e9076b38b304b8246e5fa","kind":"commit","published_at":"2019-11-04T18:03:43.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.2.5","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.2.5","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.2.5","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.5","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.5/manifests"},{"name":"v2.2.4","sha":"f221b8435cfb71e54062f6c6e99e9ade30b124d5","kind":"commit","published_at":"2019-10-02T18:33:36.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.2.4","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.2.4","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.2.4","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.4/manifests"},{"name":"v2.2.3","sha":"bb4e33bf68bf89cad44d386192cbed201f35b241","kind":"commit","published_at":"2019-09-30T19:09:21.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.2.3","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.2.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.2.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.3/manifests"},{"name":"v2.2.2","sha":"51d6538a90f86fe93ac480b35f37b2be17fef232","kind":"commit","published_at":"2018-11-15T11:05:04.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.2.2","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.2.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.2.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.2/manifests"},{"name":"v2.2.1","sha":"5420a8b6744d3b0345ab293f6fcba19c978f1183","kind":"commit","published_at":"2018-03-28T19:50:20.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.2.1","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.2.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.2.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.1/manifests"},{"name":"v2.2.0","sha":"86f5ed62f8a0ee96bd888d2efdfd6d4fb100a4eb","kind":"commit","published_at":"2018-03-26T05:07:29.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.2.0","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.2.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.2.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.0/manifests"},{"name":"v2.1.1","sha":"7f97868eec74b32b0982dd158a51a446d1da7eb5","kind":"tag","published_at":"2018-02-23T19:13:14.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.1.1","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.1.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.1.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.1.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.1.1/manifests"},{"name":"v2.1.0","sha":"3e6d767784b037b90a14701b6c9f0643f05db963","kind":"tag","published_at":"2018-02-23T19:02:00.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.1.0","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.1.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.1.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.1.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.1.0/manifests"},{"name":"v2.0.0","sha":"d670f9405373e636a5a2765eea47fac0c9bc91a4","kind":"tag","published_at":"2018-02-23T18:53:08.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.0.0","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.0.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.0.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.0.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.0.0/manifests"}]},"repo_metadata_updated_at":"2026-09-03T01:07:14.745Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":0.0,"dependent_packages_count":0.0,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":100},"purl":"pkg:deb/ubuntu/golang-yaml.v2?arch=source\u0026distro=ubuntu-23.10\u0026repository_url=https://launchpad.net/ubuntu/mantic","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/ubuntu/golang-yaml.v2","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/ubuntu/golang-yaml.v2","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/ubuntu/golang-yaml.v2/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-09-02T21:28:34.859Z","issues_count":179,"pull_requests_count":117,"avg_time_to_close_issue":27337742.275,"avg_time_to_close_pull_request":54605651.71428572,"issues_closed_count":40,"pull_requests_closed_count":42,"pull_request_authors_count":78,"issue_authors_count":167,"avg_comments_per_issue":3.11731843575419,"avg_comments_per_pull_request":1.4700854700854702,"merged_pull_requests_count":3,"bot_issues_count":0,"bot_pull_requests_count":0,"past_year_issues_count":0,"past_year_pull_requests_count":0,"past_year_avg_time_to_close_issue":null,"past_year_avg_time_to_close_pull_request":null,"past_year_issues_closed_count":0,"past_year_pull_requests_closed_count":0,"past_year_pull_request_authors_count":0,"past_year_issue_authors_count":0,"past_year_avg_comments_per_issue":null,"past_year_avg_comments_per_pull_request":null,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":0,"past_year_merged_pull_requests_count":0,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/issues","maintainers":[],"active_maintainers":[]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-23.10/packages/golang-yaml.v2/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-23.10/packages/golang-yaml.v2/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-23.10/packages/golang-yaml.v2/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-23.10/packages/golang-yaml.v2/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-23.10/packages/golang-yaml.v2/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-23.10/packages/golang-yaml.v2/codemeta","maintainers":[],"registry":{"name":"ubuntu-23.10","url":"https://launchpad.net/ubuntu/mantic","ecosystem":"ubuntu","default":false,"packages_count":36642,"maintainers_count":0,"namespaces_count":4,"keywords_count":2211,"github":"ubuntu","metadata":{"codename":"mantic","mirror":"http://old-releases.ubuntu.com/ubuntu","funded_packages_count":1474},"icon_url":"https://github.com/ubuntu.png","created_at":"2026-02-04T11:01:48.636Z","updated_at":"2026-09-04T05:06:01.231Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-23.10/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-23.10/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-23.10/namespaces"}},{"id":13389165,"name":"golang-yaml.v2","ecosystem":"ubuntu","description":null,"homepage":"https://github.com/go-yaml/yaml/tree/v2","licenses":"other","normalized_licenses":[],"repository_url":"https://github.com/go-yaml/yaml","keywords_array":["universe/devel"],"namespace":"universe","versions_count":1,"first_release_published_at":"2026-02-05T17:26:54.580Z","latest_release_published_at":"2026-02-05T17:26:54.580Z","latest_release_number":"2.4.0-4","last_synced_at":"2026-08-04T05:06:03.674Z","created_at":"2026-02-05T17:26:54.336Z","updated_at":"2026-09-03T12:35:45.183Z","registry_url":"https://launchpad.net/ubuntu/+source/golang-yaml.v2","install_command":"apt-get install golang-yaml.v2","documentation_url":null,"metadata":{"component":"universe","architecture":"all","priority":"extra","binary":"golang-gopkg-yaml.v2-dev","standards_version":"4.6.0","maintainer":"Debian Go Packaging Team \u003cteam+pkg-go@tracker.debian.org\u003e","build_depends":"debhelper-compat (= 13), dh-golang, golang-any, golang-gopkg-check.v1-dev","build_depends_indep":null,"build_depends_arch":null},"repo_metadata":{"id":14730402,"uuid":"17451182","full_name":"go-yaml/yaml","owner":"go-yaml","description":"YAML support for the Go language.","archived":true,"fork":false,"pushed_at":"2025-04-01T17:00:11.000Z","size":1587,"stargazers_count":7018,"open_issues_count":422,"forks_count":1117,"subscribers_count":3,"default_branch":"v3","last_synced_at":"2026-09-02T19:07:29.914Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":null,"language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"other","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/go-yaml.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null}},"created_at":"2014-03-05T18:54:57.000Z","updated_at":"2026-09-02T18:56:31.000Z","dependencies_parsed_at":"2023-02-16T14:45:46.186Z","dependency_job_id":"c3f4f6d2-0694-43c1-a700-724512e371e7","html_url":"https://github.com/go-yaml/yaml","commit_stats":{"total_commits":302,"total_committers":48,"mean_commits":6.291666666666667,"dds":0.2814569536423841,"last_synced_commit":"f6f7691b1fdeb513f56608cd2c32c51f8194bf51"},"previous_names":["go-yaml/go-yaml-v1"],"tags_count":16,"template":false,"template_full_name":null,"purl":"pkg:github/go-yaml/yaml","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/go-yaml","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/refs/heads/v3","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/sbom","scorecard":{"id":432677,"data":{"date":"2025-08-11","repo":{"name":"github.com/go-yaml/yaml","commit":"944c86a7d29391925ed6ac33bee98a0516f1287a"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":4.4,"checks":[{"name":"Code-Review","score":2,"reason":"Found 6/27 approved changesets -- score normalized to 2","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Warn: no topLevel permission defined: .github/workflows/go.yaml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Maintained","score":0,"reason":"project is archived","details":["Warn: Repository is archived."],"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Pinned-Dependencies","score":3,"reason":"dependency not pinned by hash detected -- score normalized to 3","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/go.yaml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/go-yaml/yaml/go.yaml/v3?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/go.yaml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/go-yaml/yaml/go.yaml/v3?enable=pin","Info: 0 out of 2 GitHub-owned GitHubAction dependencies pinned","Info: 1 out of 1 goCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Security-Policy","score":0,"reason":"security policy file not detected","details":["Warn: no security policy file detected","Warn: no security file to analyze","Warn: no security file to analyze","Warn: no security file to analyze"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"License","score":9,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Warn: project license file does not contain an FSF or OSI license."],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Fuzzing","score":10,"reason":"project is fuzzed","details":["Info: OSSFuzz integration found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Branch-Protection","score":0,"reason":"branch protection not enabled on development/release branches","details":["Warn: branch protection not enabled for branch 'v3'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 9 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-19T03:43:53.386Z","repository_id":14730402,"created_at":"2025-08-19T03:43:53.386Z","updated_at":"2025-08-19T03:43:53.386Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":37019155,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-08-22T15:14:58.755Z","status":"online","status_checked_at":"2026-09-02T02:00:06.194Z","response_time":106,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"go-yaml","name":"go-yaml","uuid":"6823640","kind":"organization","description":null,"email":null,"website":null,"location":null,"twitter":null,"company":null,"icon_url":"https://avatars.githubusercontent.com/u/6823640?v=4","repositories_count":1,"last_synced_at":"2026-08-29T00:59:16.798Z","metadata":{"has_sponsors_listing":false,"funding":null},"html_url":"https://github.com/go-yaml","funding_links":[],"total_stars":7019,"followers":17,"following":0,"created_at":"2022-11-07T11:53:36.392Z","updated_at":"2026-08-29T00:59:16.811Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/go-yaml","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/go-yaml/repositories"},"tags":[{"name":"v3.0.1","sha":"f6f7691b1fdeb513f56608cd2c32c51f8194bf51","kind":"commit","published_at":"2022-05-27T08:35:30.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v3.0.1","html_url":"https://github.com/go-yaml/yaml/releases/tag/v3.0.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v3.0.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v3.0.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v3.0.1/manifests"},{"name":"v3.0.0","sha":"00bbc0947ae889b9e480044dbc3bc3e3216a6a89","kind":"commit","published_at":"2022-05-21T10:33:21.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v3.0.0","html_url":"https://github.com/go-yaml/yaml/releases/tag/v3.0.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v3.0.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v3.0.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v3.0.0/manifests"},{"name":"v2.4.0","sha":"7649d4548cb53a614db133b2a8ac1f31859dda8c","kind":"commit","published_at":"2020-11-17T15:46:20.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.4.0","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.4.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.4.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.4.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.4.0/manifests"},{"name":"v2.3.0","sha":"0b1645d91e851e735d3e23330303ce81f70adbe3","kind":"commit","published_at":"2020-05-06T23:08:38.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.3.0","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.3.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.3.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.3.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.3.0/manifests"},{"name":"v2.2.8","sha":"53403b58ad1b561927d19068c655246f2db79d48","kind":"commit","published_at":"2020-01-21T17:19:40.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.2.8","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.2.8","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.2.8","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.8","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.8/manifests"},{"name":"v2.2.7","sha":"1f64d6156d11335c3f22d9330b0ad14fc1e789ce","kind":"commit","published_at":"2019-11-19T21:27:36.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.2.7","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.2.7","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.2.7","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.7","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.7/manifests"},{"name":"v2.2.6","sha":"a95acef3719e5e9f7614cc90a119dee4699291eb","kind":"commit","published_at":"2019-11-19T11:51:43.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.2.6","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.2.6","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.2.6","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.6","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.6/manifests"},{"name":"v2.2.5","sha":"f90ceb4f409096b60e2e9076b38b304b8246e5fa","kind":"commit","published_at":"2019-11-04T18:03:43.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.2.5","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.2.5","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.2.5","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.5","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.5/manifests"},{"name":"v2.2.4","sha":"f221b8435cfb71e54062f6c6e99e9ade30b124d5","kind":"commit","published_at":"2019-10-02T18:33:36.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.2.4","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.2.4","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.2.4","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.4/manifests"},{"name":"v2.2.3","sha":"bb4e33bf68bf89cad44d386192cbed201f35b241","kind":"commit","published_at":"2019-09-30T19:09:21.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.2.3","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.2.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.2.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.3/manifests"},{"name":"v2.2.2","sha":"51d6538a90f86fe93ac480b35f37b2be17fef232","kind":"commit","published_at":"2018-11-15T11:05:04.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.2.2","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.2.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.2.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.2/manifests"},{"name":"v2.2.1","sha":"5420a8b6744d3b0345ab293f6fcba19c978f1183","kind":"commit","published_at":"2018-03-28T19:50:20.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.2.1","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.2.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.2.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.1/manifests"},{"name":"v2.2.0","sha":"86f5ed62f8a0ee96bd888d2efdfd6d4fb100a4eb","kind":"commit","published_at":"2018-03-26T05:07:29.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.2.0","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.2.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.2.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.0/manifests"},{"name":"v2.1.1","sha":"7f97868eec74b32b0982dd158a51a446d1da7eb5","kind":"tag","published_at":"2018-02-23T19:13:14.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.1.1","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.1.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.1.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.1.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.1.1/manifests"},{"name":"v2.1.0","sha":"3e6d767784b037b90a14701b6c9f0643f05db963","kind":"tag","published_at":"2018-02-23T19:02:00.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.1.0","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.1.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.1.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.1.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.1.0/manifests"},{"name":"v2.0.0","sha":"d670f9405373e636a5a2765eea47fac0c9bc91a4","kind":"tag","published_at":"2018-02-23T18:53:08.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.0.0","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.0.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.0.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.0.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.0.0/manifests"}]},"repo_metadata_updated_at":"2026-09-03T12:35:45.183Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":0.0,"dependent_packages_count":0.0,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":100},"purl":"pkg:deb/ubuntu/golang-yaml.v2?arch=source\u0026distro=ubuntu-24.04","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/ubuntu/golang-yaml.v2","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/ubuntu/golang-yaml.v2","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/ubuntu/golang-yaml.v2/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-09-02T21:28:34.859Z","issues_count":179,"pull_requests_count":117,"avg_time_to_close_issue":27337742.275,"avg_time_to_close_pull_request":54605651.71428572,"issues_closed_count":40,"pull_requests_closed_count":42,"pull_request_authors_count":78,"issue_authors_count":167,"avg_comments_per_issue":3.11731843575419,"avg_comments_per_pull_request":1.4700854700854702,"merged_pull_requests_count":3,"bot_issues_count":0,"bot_pull_requests_count":0,"past_year_issues_count":0,"past_year_pull_requests_count":0,"past_year_avg_time_to_close_issue":null,"past_year_avg_time_to_close_pull_request":null,"past_year_issues_closed_count":0,"past_year_pull_requests_closed_count":0,"past_year_pull_request_authors_count":0,"past_year_issue_authors_count":0,"past_year_avg_comments_per_issue":null,"past_year_avg_comments_per_pull_request":null,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":0,"past_year_merged_pull_requests_count":0,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/issues","maintainers":[],"active_maintainers":[]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-24.04/packages/golang-yaml.v2/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-24.04/packages/golang-yaml.v2/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-24.04/packages/golang-yaml.v2/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-24.04/packages/golang-yaml.v2/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-24.04/packages/golang-yaml.v2/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-24.04/packages/golang-yaml.v2/codemeta","maintainers":[],"registry":{"name":"ubuntu-24.04","url":"https://launchpad.net/ubuntu/noble","ecosystem":"ubuntu","default":true,"packages_count":37306,"maintainers_count":0,"namespaces_count":4,"keywords_count":1697,"github":"ubuntu","metadata":{"codename":"noble","funded_packages_count":1390},"icon_url":"https://github.com/ubuntu.png","created_at":"2026-02-04T11:01:45.928Z","updated_at":"2026-09-04T05:05:59.442Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-24.04/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-24.04/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-24.04/namespaces"}},{"id":13647188,"name":"golang-yaml.v2","ecosystem":"debian","description":null,"homepage":"https://github.com/go-yaml/yaml/tree/v2","licenses":"other","normalized_licenses":[],"repository_url":"https://github.com/go-yaml/yaml","keywords_array":["golang"],"namespace":"main","versions_count":1,"first_release_published_at":"2026-02-12T03:46:18.765Z","latest_release_published_at":"2026-02-12T03:46:18.765Z","latest_release_number":"2.4.0-5","last_synced_at":"2026-07-24T20:28:53.647Z","created_at":"2026-02-12T03:46:18.555Z","updated_at":"2026-09-03T19:32:53.742Z","registry_url":"https://tracker.debian.org/pkg/golang-yaml.v2","install_command":"apt-get install golang-yaml.v2","documentation_url":"https://packages.debian.org/trixie/golang-yaml.v2","metadata":{"component":"main","architecture":"all","priority":"extra","binary":"golang-gopkg-yaml.v2-dev","standards_version":"4.7.0","maintainer":"Debian Go Packaging Team \u003cteam+pkg-go@tracker.debian.org\u003e","build_depends":"debhelper-compat (= 13), dh-golang, golang-any, golang-gopkg-check.v1-dev","build_depends_indep":null,"build_depends_arch":null},"repo_metadata":{"id":14730402,"uuid":"17451182","full_name":"go-yaml/yaml","owner":"go-yaml","description":"YAML support for the Go language.","archived":true,"fork":false,"pushed_at":"2025-04-01T17:00:11.000Z","size":1587,"stargazers_count":7018,"open_issues_count":422,"forks_count":1117,"subscribers_count":3,"default_branch":"v3","last_synced_at":"2026-09-02T19:07:29.914Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":null,"language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"other","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/go-yaml.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null}},"created_at":"2014-03-05T18:54:57.000Z","updated_at":"2026-09-02T18:56:31.000Z","dependencies_parsed_at":"2023-02-16T14:45:46.186Z","dependency_job_id":"c3f4f6d2-0694-43c1-a700-724512e371e7","html_url":"https://github.com/go-yaml/yaml","commit_stats":{"total_commits":302,"total_committers":48,"mean_commits":6.291666666666667,"dds":0.2814569536423841,"last_synced_commit":"f6f7691b1fdeb513f56608cd2c32c51f8194bf51"},"previous_names":["go-yaml/go-yaml-v1"],"tags_count":16,"template":false,"template_full_name":null,"purl":"pkg:github/go-yaml/yaml","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/go-yaml","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/refs/heads/v3","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/sbom","scorecard":{"id":432677,"data":{"date":"2025-08-11","repo":{"name":"github.com/go-yaml/yaml","commit":"944c86a7d29391925ed6ac33bee98a0516f1287a"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":4.4,"checks":[{"name":"Code-Review","score":2,"reason":"Found 6/27 approved changesets -- score normalized to 2","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Warn: no topLevel permission defined: .github/workflows/go.yaml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Maintained","score":0,"reason":"project is archived","details":["Warn: Repository is archived."],"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Pinned-Dependencies","score":3,"reason":"dependency not pinned by hash detected -- score normalized to 3","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/go.yaml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/go-yaml/yaml/go.yaml/v3?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/go.yaml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/go-yaml/yaml/go.yaml/v3?enable=pin","Info: 0 out of 2 GitHub-owned GitHubAction dependencies pinned","Info: 1 out of 1 goCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Security-Policy","score":0,"reason":"security policy file not detected","details":["Warn: no security policy file detected","Warn: no security file to analyze","Warn: no security file to analyze","Warn: no security file to analyze"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"License","score":9,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Warn: project license file does not contain an FSF or OSI license."],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Fuzzing","score":10,"reason":"project is fuzzed","details":["Info: OSSFuzz integration found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Branch-Protection","score":0,"reason":"branch protection not enabled on development/release branches","details":["Warn: branch protection not enabled for branch 'v3'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 9 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-19T03:43:53.386Z","repository_id":14730402,"created_at":"2025-08-19T03:43:53.386Z","updated_at":"2025-08-19T03:43:53.386Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":37019155,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-08-22T15:14:58.755Z","status":"online","status_checked_at":"2026-09-02T02:00:06.194Z","response_time":106,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"go-yaml","name":"go-yaml","uuid":"6823640","kind":"organization","description":null,"email":null,"website":null,"location":null,"twitter":null,"company":null,"icon_url":"https://avatars.githubusercontent.com/u/6823640?v=4","repositories_count":1,"last_synced_at":"2026-08-29T00:59:16.798Z","metadata":{"has_sponsors_listing":false,"funding":null},"html_url":"https://github.com/go-yaml","funding_links":[],"total_stars":7019,"followers":17,"following":0,"created_at":"2022-11-07T11:53:36.392Z","updated_at":"2026-08-29T00:59:16.811Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/go-yaml","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/go-yaml/repositories"},"tags":[{"name":"v3.0.1","sha":"f6f7691b1fdeb513f56608cd2c32c51f8194bf51","kind":"commit","published_at":"2022-05-27T08:35:30.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v3.0.1","html_url":"https://github.com/go-yaml/yaml/releases/tag/v3.0.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v3.0.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v3.0.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v3.0.1/manifests"},{"name":"v3.0.0","sha":"00bbc0947ae889b9e480044dbc3bc3e3216a6a89","kind":"commit","published_at":"2022-05-21T10:33:21.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v3.0.0","html_url":"https://github.com/go-yaml/yaml/releases/tag/v3.0.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v3.0.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v3.0.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v3.0.0/manifests"},{"name":"v2.4.0","sha":"7649d4548cb53a614db133b2a8ac1f31859dda8c","kind":"commit","published_at":"2020-11-17T15:46:20.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.4.0","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.4.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.4.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.4.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.4.0/manifests"},{"name":"v2.3.0","sha":"0b1645d91e851e735d3e23330303ce81f70adbe3","kind":"commit","published_at":"2020-05-06T23:08:38.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.3.0","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.3.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.3.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.3.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.3.0/manifests"},{"name":"v2.2.8","sha":"53403b58ad1b561927d19068c655246f2db79d48","kind":"commit","published_at":"2020-01-21T17:19:40.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.2.8","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.2.8","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.2.8","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.8","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.8/manifests"},{"name":"v2.2.7","sha":"1f64d6156d11335c3f22d9330b0ad14fc1e789ce","kind":"commit","published_at":"2019-11-19T21:27:36.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.2.7","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.2.7","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.2.7","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.7","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.7/manifests"},{"name":"v2.2.6","sha":"a95acef3719e5e9f7614cc90a119dee4699291eb","kind":"commit","published_at":"2019-11-19T11:51:43.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.2.6","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.2.6","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.2.6","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.6","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.6/manifests"},{"name":"v2.2.5","sha":"f90ceb4f409096b60e2e9076b38b304b8246e5fa","kind":"commit","published_at":"2019-11-04T18:03:43.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.2.5","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.2.5","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.2.5","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.5","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.5/manifests"},{"name":"v2.2.4","sha":"f221b8435cfb71e54062f6c6e99e9ade30b124d5","kind":"commit","published_at":"2019-10-02T18:33:36.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.2.4","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.2.4","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.2.4","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.4/manifests"},{"name":"v2.2.3","sha":"bb4e33bf68bf89cad44d386192cbed201f35b241","kind":"commit","published_at":"2019-09-30T19:09:21.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.2.3","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.2.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.2.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.3/manifests"},{"name":"v2.2.2","sha":"51d6538a90f86fe93ac480b35f37b2be17fef232","kind":"commit","published_at":"2018-11-15T11:05:04.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.2.2","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.2.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.2.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.2/manifests"},{"name":"v2.2.1","sha":"5420a8b6744d3b0345ab293f6fcba19c978f1183","kind":"commit","published_at":"2018-03-28T19:50:20.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.2.1","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.2.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.2.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.1/manifests"},{"name":"v2.2.0","sha":"86f5ed62f8a0ee96bd888d2efdfd6d4fb100a4eb","kind":"commit","published_at":"2018-03-26T05:07:29.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.2.0","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.2.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.2.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.0/manifests"},{"name":"v2.1.1","sha":"7f97868eec74b32b0982dd158a51a446d1da7eb5","kind":"tag","published_at":"2018-02-23T19:13:14.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.1.1","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.1.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.1.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.1.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.1.1/manifests"},{"name":"v2.1.0","sha":"3e6d767784b037b90a14701b6c9f0643f05db963","kind":"tag","published_at":"2018-02-23T19:02:00.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.1.0","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.1.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.1.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.1.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.1.0/manifests"},{"name":"v2.0.0","sha":"d670f9405373e636a5a2765eea47fac0c9bc91a4","kind":"tag","published_at":"2018-02-23T18:53:08.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.0.0","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.0.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.0.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.0.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.0.0/manifests"}]},"repo_metadata_updated_at":"2026-09-03T19:32:53.742Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":0.0,"dependent_packages_count":0.0,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":100},"purl":"pkg:deb/debian/golang-yaml.v2?arch=source\u0026distro=debian-13\u0026repository_url=https://packages.debian.org/trixie","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/debian/golang-yaml.v2","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/debian/golang-yaml.v2","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/debian/golang-yaml.v2/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-09-02T21:28:34.859Z","issues_count":179,"pull_requests_count":117,"avg_time_to_close_issue":27337742.275,"avg_time_to_close_pull_request":54605651.71428572,"issues_closed_count":40,"pull_requests_closed_count":42,"pull_request_authors_count":78,"issue_authors_count":167,"avg_comments_per_issue":3.11731843575419,"avg_comments_per_pull_request":1.4700854700854702,"merged_pull_requests_count":3,"bot_issues_count":0,"bot_pull_requests_count":0,"past_year_issues_count":0,"past_year_pull_requests_count":0,"past_year_avg_time_to_close_issue":null,"past_year_avg_time_to_close_pull_request":null,"past_year_issues_closed_count":0,"past_year_pull_requests_closed_count":0,"past_year_pull_request_authors_count":0,"past_year_issue_authors_count":0,"past_year_avg_comments_per_issue":null,"past_year_avg_comments_per_pull_request":null,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":0,"past_year_merged_pull_requests_count":0,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/issues","maintainers":[],"active_maintainers":[]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/debian-13/packages/golang-yaml.v2/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/debian-13/packages/golang-yaml.v2/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/debian-13/packages/golang-yaml.v2/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/debian-13/packages/golang-yaml.v2/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/debian-13/packages/golang-yaml.v2/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/debian-13/packages/golang-yaml.v2/codemeta","maintainers":[],"registry":{"name":"debian-13","url":"https://packages.debian.org/trixie","ecosystem":"debian","default":false,"packages_count":38024,"maintainers_count":0,"namespaces_count":4,"keywords_count":1985,"github":"debian","metadata":{"codename":"trixie","funded_packages_count":1856},"icon_url":"https://github.com/debian.png","created_at":"2026-02-04T11:01:50.448Z","updated_at":"2026-09-04T05:05:24.507Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/debian-13/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/debian-13/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/debian-13/namespaces"}},{"id":3799347,"name":"pkg.re/yaml.v2","ecosystem":"go","description":"Package yaml implements YAML support for the Go language.","homepage":"https://github.com/go-yaml/yaml","licenses":"Apache-2.0","normalized_licenses":["Apache-2.0"],"repository_url":"https://github.com/go-yaml/yaml","keywords_array":[],"namespace":"pkg.re","versions_count":2,"first_release_published_at":"2018-01-09T11:43:31.000Z","latest_release_published_at":"2018-02-23T19:01:16.000Z","latest_release_number":"v2.1.0+incompatible","last_synced_at":"2026-09-06T23:19:11.682Z","created_at":"2022-04-11T18:18:40.298Z","updated_at":"2026-09-06T23:19:11.682Z","registry_url":"https://pkg.go.dev/pkg.re/yaml.v2","install_command":"go get pkg.re/yaml.v2","documentation_url":"https://pkg.go.dev/pkg.re/yaml.v2#section-documentation","metadata":{},"repo_metadata":{"id":14730402,"uuid":"17451182","full_name":"go-yaml/yaml","owner":"go-yaml","description":"YAML support for the Go language.","archived":true,"fork":false,"pushed_at":"2025-04-01T17:00:11.000Z","size":1587,"stargazers_count":7018,"open_issues_count":422,"forks_count":1117,"subscribers_count":3,"default_branch":"v3","last_synced_at":"2026-09-02T19:07:29.914Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":null,"language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"other","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/go-yaml.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null}},"created_at":"2014-03-05T18:54:57.000Z","updated_at":"2026-09-02T18:56:31.000Z","dependencies_parsed_at":"2023-02-16T14:45:46.186Z","dependency_job_id":"c3f4f6d2-0694-43c1-a700-724512e371e7","html_url":"https://github.com/go-yaml/yaml","commit_stats":{"total_commits":302,"total_committers":48,"mean_commits":6.291666666666667,"dds":0.2814569536423841,"last_synced_commit":"f6f7691b1fdeb513f56608cd2c32c51f8194bf51"},"previous_names":["go-yaml/go-yaml-v1"],"tags_count":16,"template":false,"template_full_name":null,"purl":"pkg:github/go-yaml/yaml","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/go-yaml","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/refs/heads/v3","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/sbom","scorecard":{"id":432677,"data":{"date":"2025-08-11","repo":{"name":"github.com/go-yaml/yaml","commit":"944c86a7d29391925ed6ac33bee98a0516f1287a"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":4.4,"checks":[{"name":"Code-Review","score":2,"reason":"Found 6/27 approved changesets -- score normalized to 2","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Warn: no topLevel permission defined: .github/workflows/go.yaml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Maintained","score":0,"reason":"project is archived","details":["Warn: Repository is archived."],"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Pinned-Dependencies","score":3,"reason":"dependency not pinned by hash detected -- score normalized to 3","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/go.yaml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/go-yaml/yaml/go.yaml/v3?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/go.yaml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/go-yaml/yaml/go.yaml/v3?enable=pin","Info: 0 out of 2 GitHub-owned GitHubAction dependencies pinned","Info: 1 out of 1 goCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Security-Policy","score":0,"reason":"security policy file not detected","details":["Warn: no security policy file detected","Warn: no security file to analyze","Warn: no security file to analyze","Warn: no security file to analyze"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"License","score":9,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Warn: project license file does not contain an FSF or OSI license."],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Fuzzing","score":10,"reason":"project is fuzzed","details":["Info: OSSFuzz integration found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Branch-Protection","score":0,"reason":"branch protection not enabled on development/release branches","details":["Warn: branch protection not enabled for branch 'v3'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 9 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-19T03:43:53.386Z","repository_id":14730402,"created_at":"2025-08-19T03:43:53.386Z","updated_at":"2025-08-19T03:43:53.386Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":37019155,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-08-22T15:14:58.755Z","status":"online","status_checked_at":"2026-09-02T02:00:06.194Z","response_time":106,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"go-yaml","name":"go-yaml","uuid":"6823640","kind":"organization","description":null,"email":null,"website":null,"location":null,"twitter":null,"company":null,"icon_url":"https://avatars.githubusercontent.com/u/6823640?v=4","repositories_count":1,"last_synced_at":"2026-09-06T00:54:23.710Z","metadata":{"has_sponsors_listing":false,"funding":null},"html_url":"https://github.com/go-yaml","funding_links":[],"total_stars":7018,"followers":17,"following":0,"created_at":"2022-11-07T11:53:36.392Z","updated_at":"2026-09-06T00:54:23.738Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/go-yaml","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/go-yaml/repositories"},"tags":[{"name":"v3.0.1","sha":"f6f7691b1fdeb513f56608cd2c32c51f8194bf51","kind":"commit","published_at":"2022-05-27T08:35:30.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v3.0.1","html_url":"https://github.com/go-yaml/yaml/releases/tag/v3.0.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v3.0.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v3.0.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v3.0.1/manifests"},{"name":"v3.0.0","sha":"00bbc0947ae889b9e480044dbc3bc3e3216a6a89","kind":"commit","published_at":"2022-05-21T10:33:21.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v3.0.0","html_url":"https://github.com/go-yaml/yaml/releases/tag/v3.0.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v3.0.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v3.0.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v3.0.0/manifests"},{"name":"v2.4.0","sha":"7649d4548cb53a614db133b2a8ac1f31859dda8c","kind":"commit","published_at":"2020-11-17T15:46:20.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.4.0","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.4.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.4.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.4.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.4.0/manifests"},{"name":"v2.3.0","sha":"0b1645d91e851e735d3e23330303ce81f70adbe3","kind":"commit","published_at":"2020-05-06T23:08:38.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.3.0","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.3.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.3.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.3.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.3.0/manifests"},{"name":"v2.2.8","sha":"53403b58ad1b561927d19068c655246f2db79d48","kind":"commit","published_at":"2020-01-21T17:19:40.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.2.8","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.2.8","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.2.8","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.8","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.8/manifests"},{"name":"v2.2.7","sha":"1f64d6156d11335c3f22d9330b0ad14fc1e789ce","kind":"commit","published_at":"2019-11-19T21:27:36.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.2.7","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.2.7","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.2.7","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.7","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.7/manifests"},{"name":"v2.2.6","sha":"a95acef3719e5e9f7614cc90a119dee4699291eb","kind":"commit","published_at":"2019-11-19T11:51:43.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.2.6","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.2.6","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.2.6","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.6","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.6/manifests"},{"name":"v2.2.5","sha":"f90ceb4f409096b60e2e9076b38b304b8246e5fa","kind":"commit","published_at":"2019-11-04T18:03:43.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.2.5","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.2.5","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.2.5","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.5","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.5/manifests"},{"name":"v2.2.4","sha":"f221b8435cfb71e54062f6c6e99e9ade30b124d5","kind":"commit","published_at":"2019-10-02T18:33:36.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.2.4","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.2.4","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.2.4","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.4/manifests"},{"name":"v2.2.3","sha":"bb4e33bf68bf89cad44d386192cbed201f35b241","kind":"commit","published_at":"2019-09-30T19:09:21.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.2.3","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.2.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.2.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.3/manifests"},{"name":"v2.2.2","sha":"51d6538a90f86fe93ac480b35f37b2be17fef232","kind":"commit","published_at":"2018-11-15T11:05:04.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.2.2","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.2.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.2.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.2/manifests"},{"name":"v2.2.1","sha":"5420a8b6744d3b0345ab293f6fcba19c978f1183","kind":"commit","published_at":"2018-03-28T19:50:20.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.2.1","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.2.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.2.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.1/manifests"},{"name":"v2.2.0","sha":"86f5ed62f8a0ee96bd888d2efdfd6d4fb100a4eb","kind":"commit","published_at":"2018-03-26T05:07:29.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.2.0","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.2.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.2.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.0/manifests"},{"name":"v2.1.1","sha":"7f97868eec74b32b0982dd158a51a446d1da7eb5","kind":"tag","published_at":"2018-02-23T19:13:14.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.1.1","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.1.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.1.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.1.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.1.1/manifests"},{"name":"v2.1.0","sha":"3e6d767784b037b90a14701b6c9f0643f05db963","kind":"tag","published_at":"2018-02-23T19:02:00.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.1.0","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.1.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.1.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.1.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.1.0/manifests"},{"name":"v2.0.0","sha":"d670f9405373e636a5a2765eea47fac0c9bc91a4","kind":"tag","published_at":"2018-02-23T18:53:08.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.0.0","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.0.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.0.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.0.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.0.0/manifests"}]},"repo_metadata_updated_at":"2026-09-06T17:02:19.297Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":9.345852080216646,"dependent_packages_count":6.999148183520997,"stargazers_count":null,"forks_count":null,"average":8.172500131868823},"purl":"pkg:golang/pkg.re/yaml.v2","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/go/pkg.re/yaml.v2","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/go/pkg.re/yaml.v2","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/go/pkg.re/yaml.v2/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-09-05T22:36:50.593Z","issues_count":179,"pull_requests_count":117,"avg_time_to_close_issue":27337742.275,"avg_time_to_close_pull_request":54605651.71428572,"issues_closed_count":40,"pull_requests_closed_count":42,"pull_request_authors_count":78,"issue_authors_count":167,"avg_comments_per_issue":3.11731843575419,"avg_comments_per_pull_request":1.4700854700854702,"merged_pull_requests_count":3,"bot_issues_count":0,"bot_pull_requests_count":0,"past_year_issues_count":0,"past_year_pull_requests_count":0,"past_year_avg_time_to_close_issue":null,"past_year_avg_time_to_close_pull_request":null,"past_year_issues_closed_count":0,"past_year_pull_requests_closed_count":0,"past_year_pull_request_authors_count":0,"past_year_issue_authors_count":0,"past_year_avg_comments_per_issue":null,"past_year_avg_comments_per_pull_request":null,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":0,"past_year_merged_pull_requests_count":0,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/issues","maintainers":[],"active_maintainers":[]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/pkg.re%2Fyaml.v2/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/pkg.re%2Fyaml.v2/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/pkg.re%2Fyaml.v2/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/pkg.re%2Fyaml.v2/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/pkg.re%2Fyaml.v2/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/pkg.re%2Fyaml.v2/codemeta","maintainers":[],"registry":{"name":"proxy.golang.org","url":"https://proxy.golang.org","ecosystem":"go","default":true,"packages_count":2287853,"maintainers_count":0,"namespaces_count":839605,"keywords_count":126639,"github":"golang","metadata":{"funded_packages_count":74445,"sync_missing_packages_cursor":{"timestamp":"2026-09-07T00:07:19.468853Z","path":"github.com/herodotusdev/accumulators","version":"v4.2.0-alpha.1+incompatible"},"rate_limit":1},"icon_url":"https://github.com/golang.png","created_at":"2022-04-04T15:19:22.939Z","updated_at":"2026-09-07T00:08:13.518Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/namespaces"}},{"id":10826337,"name":"gopkg.in/yAML.v2","ecosystem":"go","description":"Package yaml implements YAML support for the Go language.","homepage":"https://github.com/go-yAML/yAML","licenses":"Apache-2.0","normalized_licenses":["Apache-2.0"],"repository_url":"https://github.com/go-yAML/yAML","keywords_array":[],"namespace":"gopkg.in","versions_count":14,"first_release_published_at":"2018-01-09T11:43:31.000Z","latest_release_published_at":"2020-11-17T15:46:20.000Z","latest_release_number":"v2.4.0","last_synced_at":"2026-09-06T00:58:00.086Z","created_at":"2024-08-21T07:49:32.748Z","updated_at":"2026-09-06T00:58:00.086Z","registry_url":"https://pkg.go.dev/gopkg.in/yAML.v2","install_command":"go get gopkg.in/yAML.v2","documentation_url":"https://pkg.go.dev/gopkg.in/yAML.v2#section-documentation","metadata":{},"repo_metadata":{"id":14730402,"uuid":"17451182","full_name":"go-yaml/yaml","owner":"go-yaml","description":"YAML support for the Go language.","archived":true,"fork":false,"pushed_at":"2025-04-01T17:00:11.000Z","size":1587,"stargazers_count":7018,"open_issues_count":422,"forks_count":1117,"subscribers_count":3,"default_branch":"v3","last_synced_at":"2026-09-02T19:07:29.914Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":null,"language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"other","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/go-yaml.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null}},"created_at":"2014-03-05T18:54:57.000Z","updated_at":"2026-09-02T18:56:31.000Z","dependencies_parsed_at":"2023-02-16T14:45:46.186Z","dependency_job_id":"c3f4f6d2-0694-43c1-a700-724512e371e7","html_url":"https://github.com/go-yaml/yaml","commit_stats":{"total_commits":302,"total_committers":48,"mean_commits":6.291666666666667,"dds":0.2814569536423841,"last_synced_commit":"f6f7691b1fdeb513f56608cd2c32c51f8194bf51"},"previous_names":["go-yaml/go-yaml-v1"],"tags_count":16,"template":false,"template_full_name":null,"purl":"pkg:github/go-yaml/yaml","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/go-yaml","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/refs/heads/v3","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/sbom","scorecard":{"id":432677,"data":{"date":"2025-08-11","repo":{"name":"github.com/go-yaml/yaml","commit":"944c86a7d29391925ed6ac33bee98a0516f1287a"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":4.4,"checks":[{"name":"Code-Review","score":2,"reason":"Found 6/27 approved changesets -- score normalized to 2","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Warn: no topLevel permission defined: .github/workflows/go.yaml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Maintained","score":0,"reason":"project is archived","details":["Warn: Repository is archived."],"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Pinned-Dependencies","score":3,"reason":"dependency not pinned by hash detected -- score normalized to 3","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/go.yaml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/go-yaml/yaml/go.yaml/v3?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/go.yaml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/go-yaml/yaml/go.yaml/v3?enable=pin","Info: 0 out of 2 GitHub-owned GitHubAction dependencies pinned","Info: 1 out of 1 goCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Security-Policy","score":0,"reason":"security policy file not detected","details":["Warn: no security policy file detected","Warn: no security file to analyze","Warn: no security file to analyze","Warn: no security file to analyze"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"License","score":9,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Warn: project license file does not contain an FSF or OSI license."],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Fuzzing","score":10,"reason":"project is fuzzed","details":["Info: OSSFuzz integration found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Branch-Protection","score":0,"reason":"branch protection not enabled on development/release branches","details":["Warn: branch protection not enabled for branch 'v3'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 9 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-19T03:43:53.386Z","repository_id":14730402,"created_at":"2025-08-19T03:43:53.386Z","updated_at":"2025-08-19T03:43:53.386Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":341189360,"owners_count":37038455,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-08-22T15:14:58.755Z","status":"online","status_checked_at":"2026-09-05T02:00:06.064Z","response_time":108,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"go-yaml","name":"go-yaml","uuid":"6823640","kind":"organization","description":null,"email":null,"website":null,"location":null,"twitter":null,"company":null,"icon_url":"https://avatars.githubusercontent.com/u/6823640?v=4","repositories_count":1,"last_synced_at":"2026-08-29T00:59:16.798Z","metadata":{"has_sponsors_listing":false,"funding":null},"html_url":"https://github.com/go-yaml","funding_links":[],"total_stars":7019,"followers":17,"following":0,"created_at":"2022-11-07T11:53:36.392Z","updated_at":"2026-08-29T00:59:16.811Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/go-yaml","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/go-yaml/repositories"},"tags":[{"name":"v3.0.1","sha":"f6f7691b1fdeb513f56608cd2c32c51f8194bf51","kind":"commit","published_at":"2022-05-27T08:35:30.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v3.0.1","html_url":"https://github.com/go-yaml/yaml/releases/tag/v3.0.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v3.0.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v3.0.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v3.0.1/manifests"},{"name":"v3.0.0","sha":"00bbc0947ae889b9e480044dbc3bc3e3216a6a89","kind":"commit","published_at":"2022-05-21T10:33:21.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v3.0.0","html_url":"https://github.com/go-yaml/yaml/releases/tag/v3.0.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v3.0.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v3.0.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v3.0.0/manifests"},{"name":"v2.4.0","sha":"7649d4548cb53a614db133b2a8ac1f31859dda8c","kind":"commit","published_at":"2020-11-17T15:46:20.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.4.0","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.4.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.4.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.4.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.4.0/manifests"},{"name":"v2.3.0","sha":"0b1645d91e851e735d3e23330303ce81f70adbe3","kind":"commit","published_at":"2020-05-06T23:08:38.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.3.0","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.3.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.3.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.3.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.3.0/manifests"},{"name":"v2.2.8","sha":"53403b58ad1b561927d19068c655246f2db79d48","kind":"commit","published_at":"2020-01-21T17:19:40.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.2.8","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.2.8","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.2.8","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.8","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.8/manifests"},{"name":"v2.2.7","sha":"1f64d6156d11335c3f22d9330b0ad14fc1e789ce","kind":"commit","published_at":"2019-11-19T21:27:36.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.2.7","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.2.7","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.2.7","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.7","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.7/manifests"},{"name":"v2.2.6","sha":"a95acef3719e5e9f7614cc90a119dee4699291eb","kind":"commit","published_at":"2019-11-19T11:51:43.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.2.6","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.2.6","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.2.6","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.6","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.6/manifests"},{"name":"v2.2.5","sha":"f90ceb4f409096b60e2e9076b38b304b8246e5fa","kind":"commit","published_at":"2019-11-04T18:03:43.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.2.5","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.2.5","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.2.5","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.5","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.5/manifests"},{"name":"v2.2.4","sha":"f221b8435cfb71e54062f6c6e99e9ade30b124d5","kind":"commit","published_at":"2019-10-02T18:33:36.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.2.4","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.2.4","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.2.4","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.4/manifests"},{"name":"v2.2.3","sha":"bb4e33bf68bf89cad44d386192cbed201f35b241","kind":"commit","published_at":"2019-09-30T19:09:21.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.2.3","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.2.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.2.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.3/manifests"},{"name":"v2.2.2","sha":"51d6538a90f86fe93ac480b35f37b2be17fef232","kind":"commit","published_at":"2018-11-15T11:05:04.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.2.2","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.2.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.2.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.2/manifests"},{"name":"v2.2.1","sha":"5420a8b6744d3b0345ab293f6fcba19c978f1183","kind":"commit","published_at":"2018-03-28T19:50:20.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.2.1","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.2.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.2.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.1/manifests"},{"name":"v2.2.0","sha":"86f5ed62f8a0ee96bd888d2efdfd6d4fb100a4eb","kind":"commit","published_at":"2018-03-26T05:07:29.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.2.0","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.2.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.2.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.0/manifests"},{"name":"v2.1.1","sha":"7f97868eec74b32b0982dd158a51a446d1da7eb5","kind":"tag","published_at":"2018-02-23T19:13:14.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.1.1","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.1.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.1.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.1.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.1.1/manifests"},{"name":"v2.1.0","sha":"3e6d767784b037b90a14701b6c9f0643f05db963","kind":"tag","published_at":"2018-02-23T19:02:00.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.1.0","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.1.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.1.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.1.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.1.0/manifests"},{"name":"v2.0.0","sha":"d670f9405373e636a5a2765eea47fac0c9bc91a4","kind":"tag","published_at":"2018-02-23T18:53:08.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.0.0","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.0.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.0.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.0.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.0.0/manifests"}]},"repo_metadata_updated_at":"2026-09-05T23:36:43.379Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":6.705416368290247,"dependent_packages_count":6.284860483729091,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":6.495138426009669},"purl":"pkg:golang/gopkg.in/y%21a%21m%21l.v2","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/go/gopkg.in/yAML.v2","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/go/gopkg.in/yAML.v2","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/go/gopkg.in/yAML.v2/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-09-04T22:05:44.168Z","issues_count":179,"pull_requests_count":117,"avg_time_to_close_issue":27337742.275,"avg_time_to_close_pull_request":54605651.71428572,"issues_closed_count":40,"pull_requests_closed_count":42,"pull_request_authors_count":78,"issue_authors_count":167,"avg_comments_per_issue":3.11731843575419,"avg_comments_per_pull_request":1.4700854700854702,"merged_pull_requests_count":3,"bot_issues_count":0,"bot_pull_requests_count":0,"past_year_issues_count":0,"past_year_pull_requests_count":0,"past_year_avg_time_to_close_issue":null,"past_year_avg_time_to_close_pull_request":null,"past_year_issues_closed_count":0,"past_year_pull_requests_closed_count":0,"past_year_pull_request_authors_count":0,"past_year_issue_authors_count":0,"past_year_avg_comments_per_issue":null,"past_year_avg_comments_per_pull_request":null,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":0,"past_year_merged_pull_requests_count":0,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/issues","maintainers":[],"active_maintainers":[]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/gopkg.in%2FyAML.v2/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/gopkg.in%2FyAML.v2/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/gopkg.in%2FyAML.v2/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/gopkg.in%2FyAML.v2/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/gopkg.in%2FyAML.v2/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/gopkg.in%2FyAML.v2/codemeta","maintainers":[],"registry":{"name":"proxy.golang.org","url":"https://proxy.golang.org","ecosystem":"go","default":true,"packages_count":2287853,"maintainers_count":0,"namespaces_count":839605,"keywords_count":126639,"github":"golang","metadata":{"funded_packages_count":74445,"sync_missing_packages_cursor":{"timestamp":"2026-09-07T00:07:19.468853Z","path":"github.com/herodotusdev/accumulators","version":"v4.2.0-alpha.1+incompatible"},"rate_limit":1},"icon_url":"https://github.com/golang.png","created_at":"2022-04-04T15:19:22.939Z","updated_at":"2026-09-07T00:08:13.518Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/namespaces"}},{"id":11851575,"name":"github.com/go-YAML/YAML/v3","ecosystem":"go","description":null,"homepage":null,"licenses":"other","normalized_licenses":["Other"],"repository_url":"https://github.com/go-YAML/YAML","keywords_array":[],"namespace":null,"versions_count":2,"first_release_published_at":"2022-05-21T10:33:21.000Z","latest_release_published_at":"2022-05-27T08:35:30.000Z","latest_release_number":"v3.0.1","last_synced_at":"2026-09-06T01:14:00.391Z","created_at":"2025-06-29T11:52:32.411Z","updated_at":"2026-09-06T01:14:00.391Z","registry_url":"https://pkg.go.dev/github.com/go-YAML/YAML/v3","install_command":"go get github.com/go-YAML/YAML/v3","documentation_url":"https://pkg.go.dev/github.com/go-YAML/YAML/v3#section-documentation","metadata":{},"repo_metadata":{"id":14730402,"uuid":"17451182","full_name":"go-yaml/yaml","owner":"go-yaml","description":"YAML support for the Go language.","archived":true,"fork":false,"pushed_at":"2025-04-01T17:00:11.000Z","size":1587,"stargazers_count":7019,"open_issues_count":422,"forks_count":1115,"subscribers_count":3,"default_branch":"v3","last_synced_at":"2026-08-27T09:55:02.448Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":null,"language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"other","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/go-yaml.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null}},"created_at":"2014-03-05T18:54:57.000Z","updated_at":"2026-08-22T06:16:14.000Z","dependencies_parsed_at":"2023-02-16T14:45:46.186Z","dependency_job_id":"c3f4f6d2-0694-43c1-a700-724512e371e7","html_url":"https://github.com/go-yaml/yaml","commit_stats":{"total_commits":302,"total_committers":48,"mean_commits":6.291666666666667,"dds":0.2814569536423841,"last_synced_commit":"f6f7691b1fdeb513f56608cd2c32c51f8194bf51"},"previous_names":["go-yaml/go-yaml-v1"],"tags_count":16,"template":false,"template_full_name":null,"purl":"pkg:github/go-yaml/yaml","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/go-yaml","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/refs/heads/v3","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/sbom","scorecard":{"id":432677,"data":{"date":"2025-08-11","repo":{"name":"github.com/go-yaml/yaml","commit":"944c86a7d29391925ed6ac33bee98a0516f1287a"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":4.4,"checks":[{"name":"Code-Review","score":2,"reason":"Found 6/27 approved changesets -- score normalized to 2","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Warn: no topLevel permission defined: .github/workflows/go.yaml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Maintained","score":0,"reason":"project is archived","details":["Warn: Repository is archived."],"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Pinned-Dependencies","score":3,"reason":"dependency not pinned by hash detected -- score normalized to 3","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/go.yaml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/go-yaml/yaml/go.yaml/v3?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/go.yaml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/go-yaml/yaml/go.yaml/v3?enable=pin","Info: 0 out of 2 GitHub-owned GitHubAction dependencies pinned","Info: 1 out of 1 goCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Security-Policy","score":0,"reason":"security policy file not detected","details":["Warn: no security policy file detected","Warn: no security file to analyze","Warn: no security file to analyze","Warn: no security file to analyze"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"License","score":9,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Warn: project license file does not contain an FSF or OSI license."],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Fuzzing","score":10,"reason":"project is fuzzed","details":["Info: OSSFuzz integration found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Branch-Protection","score":0,"reason":"branch protection not enabled on development/release branches","details":["Warn: branch protection not enabled for branch 'v3'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 9 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-19T03:43:53.386Z","repository_id":14730402,"created_at":"2025-08-19T03:43:53.386Z","updated_at":"2025-08-19T03:43:53.386Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":36944060,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-08-22T15:14:58.755Z","status":"online","status_checked_at":"2026-08-27T02:00:07.166Z","response_time":96,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"go-yaml","name":"go-yaml","uuid":"6823640","kind":"organization","description":null,"email":null,"website":null,"location":null,"twitter":null,"company":null,"icon_url":"https://avatars.githubusercontent.com/u/6823640?v=4","repositories_count":1,"last_synced_at":"2026-08-22T00:54:17.902Z","metadata":{"has_sponsors_listing":false,"funding":null},"html_url":"https://github.com/go-yaml","funding_links":[],"total_stars":7020,"followers":17,"following":0,"created_at":"2022-11-07T11:53:36.392Z","updated_at":"2026-08-22T00:54:17.916Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/go-yaml","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/go-yaml/repositories"},"tags":[{"name":"v3.0.1","sha":"f6f7691b1fdeb513f56608cd2c32c51f8194bf51","kind":"commit","published_at":"2022-05-27T08:35:30.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v3.0.1","html_url":"https://github.com/go-yaml/yaml/releases/tag/v3.0.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v3.0.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v3.0.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v3.0.1/manifests"},{"name":"v3.0.0","sha":"00bbc0947ae889b9e480044dbc3bc3e3216a6a89","kind":"commit","published_at":"2022-05-21T10:33:21.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v3.0.0","html_url":"https://github.com/go-yaml/yaml/releases/tag/v3.0.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v3.0.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v3.0.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v3.0.0/manifests"},{"name":"v2.4.0","sha":"7649d4548cb53a614db133b2a8ac1f31859dda8c","kind":"commit","published_at":"2020-11-17T15:46:20.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.4.0","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.4.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.4.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.4.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.4.0/manifests"},{"name":"v2.3.0","sha":"0b1645d91e851e735d3e23330303ce81f70adbe3","kind":"commit","published_at":"2020-05-06T23:08:38.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.3.0","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.3.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.3.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.3.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.3.0/manifests"},{"name":"v2.2.8","sha":"53403b58ad1b561927d19068c655246f2db79d48","kind":"commit","published_at":"2020-01-21T17:19:40.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.2.8","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.2.8","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.2.8","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.8","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.8/manifests"},{"name":"v2.2.7","sha":"1f64d6156d11335c3f22d9330b0ad14fc1e789ce","kind":"commit","published_at":"2019-11-19T21:27:36.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.2.7","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.2.7","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.2.7","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.7","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.7/manifests"},{"name":"v2.2.6","sha":"a95acef3719e5e9f7614cc90a119dee4699291eb","kind":"commit","published_at":"2019-11-19T11:51:43.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.2.6","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.2.6","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.2.6","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.6","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.6/manifests"},{"name":"v2.2.5","sha":"f90ceb4f409096b60e2e9076b38b304b8246e5fa","kind":"commit","published_at":"2019-11-04T18:03:43.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.2.5","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.2.5","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.2.5","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.5","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.5/manifests"},{"name":"v2.2.4","sha":"f221b8435cfb71e54062f6c6e99e9ade30b124d5","kind":"commit","published_at":"2019-10-02T18:33:36.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.2.4","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.2.4","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.2.4","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.4/manifests"},{"name":"v2.2.3","sha":"bb4e33bf68bf89cad44d386192cbed201f35b241","kind":"commit","published_at":"2019-09-30T19:09:21.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.2.3","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.2.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.2.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.3/manifests"},{"name":"v2.2.2","sha":"51d6538a90f86fe93ac480b35f37b2be17fef232","kind":"commit","published_at":"2018-11-15T11:05:04.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.2.2","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.2.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.2.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.2/manifests"},{"name":"v2.2.1","sha":"5420a8b6744d3b0345ab293f6fcba19c978f1183","kind":"commit","published_at":"2018-03-28T19:50:20.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.2.1","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.2.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.2.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.1/manifests"},{"name":"v2.2.0","sha":"86f5ed62f8a0ee96bd888d2efdfd6d4fb100a4eb","kind":"commit","published_at":"2018-03-26T05:07:29.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.2.0","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.2.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.2.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.0/manifests"},{"name":"v2.1.1","sha":"7f97868eec74b32b0982dd158a51a446d1da7eb5","kind":"tag","published_at":"2018-02-23T19:13:14.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.1.1","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.1.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.1.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.1.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.1.1/manifests"},{"name":"v2.1.0","sha":"3e6d767784b037b90a14701b6c9f0643f05db963","kind":"tag","published_at":"2018-02-23T19:02:00.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.1.0","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.1.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.1.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.1.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.1.0/manifests"},{"name":"v2.0.0","sha":"d670f9405373e636a5a2765eea47fac0c9bc91a4","kind":"tag","published_at":"2018-02-23T18:53:08.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.0.0","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.0.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.0.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.0.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.0.0/manifests"}]},"repo_metadata_updated_at":"2026-08-27T15:35:50.820Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":5.676441968929302,"dependent_packages_count":5.319305103513069,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":5.497873536221185},"purl":"pkg:golang/github.com/go-%21y%21a%21m%21l/%21y%21a%21m%21l/v3","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/go/github.com/go-YAML/YAML/v3","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/go/github.com/go-YAML/YAML/v3","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/go/github.com/go-YAML/YAML/v3/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-08-27T11:13:54.652Z","issues_count":179,"pull_requests_count":117,"avg_time_to_close_issue":27337742.275,"avg_time_to_close_pull_request":54605651.71428572,"issues_closed_count":40,"pull_requests_closed_count":42,"pull_request_authors_count":78,"issue_authors_count":167,"avg_comments_per_issue":3.11731843575419,"avg_comments_per_pull_request":1.4700854700854702,"merged_pull_requests_count":3,"bot_issues_count":0,"bot_pull_requests_count":0,"past_year_issues_count":0,"past_year_pull_requests_count":0,"past_year_avg_time_to_close_issue":null,"past_year_avg_time_to_close_pull_request":null,"past_year_issues_closed_count":0,"past_year_pull_requests_closed_count":0,"past_year_pull_request_authors_count":0,"past_year_issue_authors_count":0,"past_year_avg_comments_per_issue":null,"past_year_avg_comments_per_pull_request":null,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":0,"past_year_merged_pull_requests_count":0,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/issues","maintainers":[],"active_maintainers":[]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fgo-YAML%2FYAML%2Fv3/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fgo-YAML%2FYAML%2Fv3/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fgo-YAML%2FYAML%2Fv3/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fgo-YAML%2FYAML%2Fv3/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fgo-YAML%2FYAML%2Fv3/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fgo-YAML%2FYAML%2Fv3/codemeta","maintainers":[],"registry":{"name":"proxy.golang.org","url":"https://proxy.golang.org","ecosystem":"go","default":true,"packages_count":2287853,"maintainers_count":0,"namespaces_count":839605,"keywords_count":126639,"github":"golang","metadata":{"funded_packages_count":74445,"sync_missing_packages_cursor":{"timestamp":"2026-09-07T00:07:19.468853Z","path":"github.com/herodotusdev/accumulators","version":"v4.2.0-alpha.1+incompatible"},"rate_limit":1},"icon_url":"https://github.com/golang.png","created_at":"2022-04-04T15:19:22.939Z","updated_at":"2026-09-07T00:08:13.518Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/namespaces"}},{"id":3685982,"name":"github.com/sylr/go-yaml","ecosystem":"go","description":"Package yaml implements YAML support for the Go language.\n\nSource code and other details for the project are available at GitHub:","homepage":"https://github.com/go-yaml/yaml","licenses":"Apache-2.0, MIT","normalized_licenses":["Apache-2.0","MIT"],"repository_url":"https://github.com/go-yaml/yaml","keywords_array":[],"namespace":"github.com/sylr","versions_count":0,"first_release_published_at":null,"latest_release_published_at":"2026-05-18T05:21:29.122Z","latest_release_number":null,"last_synced_at":"2026-09-06T23:14:43.000Z","created_at":"2022-04-11T11:12:24.331Z","updated_at":"2026-09-06T23:14:43.000Z","registry_url":"https://pkg.go.dev/github.com/sylr/go-yaml","install_command":"go get github.com/sylr/go-yaml","documentation_url":"https://pkg.go.dev/github.com/sylr/go-yaml#section-documentation","metadata":{},"repo_metadata":{"id":14730402,"uuid":"17451182","full_name":"go-yaml/yaml","owner":"go-yaml","description":"YAML support for the Go language.","archived":true,"fork":false,"pushed_at":"2025-04-01T17:00:11.000Z","size":1587,"stargazers_count":7018,"open_issues_count":422,"forks_count":1117,"subscribers_count":3,"default_branch":"v3","last_synced_at":"2026-09-02T19:07:29.914Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":null,"language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"other","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/go-yaml.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null}},"created_at":"2014-03-05T18:54:57.000Z","updated_at":"2026-09-02T18:56:31.000Z","dependencies_parsed_at":"2023-02-16T14:45:46.186Z","dependency_job_id":"c3f4f6d2-0694-43c1-a700-724512e371e7","html_url":"https://github.com/go-yaml/yaml","commit_stats":{"total_commits":302,"total_committers":48,"mean_commits":6.291666666666667,"dds":0.2814569536423841,"last_synced_commit":"f6f7691b1fdeb513f56608cd2c32c51f8194bf51"},"previous_names":["go-yaml/go-yaml-v1"],"tags_count":16,"template":false,"template_full_name":null,"purl":"pkg:github/go-yaml/yaml","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/go-yaml","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/refs/heads/v3","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/sbom","scorecard":{"id":432677,"data":{"date":"2025-08-11","repo":{"name":"github.com/go-yaml/yaml","commit":"944c86a7d29391925ed6ac33bee98a0516f1287a"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":4.4,"checks":[{"name":"Code-Review","score":2,"reason":"Found 6/27 approved changesets -- score normalized to 2","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Warn: no topLevel permission defined: .github/workflows/go.yaml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Maintained","score":0,"reason":"project is archived","details":["Warn: Repository is archived."],"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Pinned-Dependencies","score":3,"reason":"dependency not pinned by hash detected -- score normalized to 3","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/go.yaml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/go-yaml/yaml/go.yaml/v3?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/go.yaml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/go-yaml/yaml/go.yaml/v3?enable=pin","Info: 0 out of 2 GitHub-owned GitHubAction dependencies pinned","Info: 1 out of 1 goCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Security-Policy","score":0,"reason":"security policy file not detected","details":["Warn: no security policy file detected","Warn: no security file to analyze","Warn: no security file to analyze","Warn: no security file to analyze"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"License","score":9,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Warn: project license file does not contain an FSF or OSI license."],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Fuzzing","score":10,"reason":"project is fuzzed","details":["Info: OSSFuzz integration found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Branch-Protection","score":0,"reason":"branch protection not enabled on development/release branches","details":["Warn: branch protection not enabled for branch 'v3'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 9 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-19T03:43:53.386Z","repository_id":14730402,"created_at":"2025-08-19T03:43:53.386Z","updated_at":"2025-08-19T03:43:53.386Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":37019155,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-08-22T15:14:58.755Z","status":"online","status_checked_at":"2026-09-02T02:00:06.194Z","response_time":106,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"go-yaml","name":"go-yaml","uuid":"6823640","kind":"organization","description":null,"email":null,"website":null,"location":null,"twitter":null,"company":null,"icon_url":"https://avatars.githubusercontent.com/u/6823640?v=4","repositories_count":1,"last_synced_at":"2026-08-29T00:59:16.798Z","metadata":{"has_sponsors_listing":false,"funding":null},"html_url":"https://github.com/go-yaml","funding_links":[],"total_stars":7019,"followers":17,"following":0,"created_at":"2022-11-07T11:53:36.392Z","updated_at":"2026-08-29T00:59:16.811Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/go-yaml","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/go-yaml/repositories"},"tags":[{"name":"v3.0.1","sha":"f6f7691b1fdeb513f56608cd2c32c51f8194bf51","kind":"commit","published_at":"2022-05-27T08:35:30.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v3.0.1","html_url":"https://github.com/go-yaml/yaml/releases/tag/v3.0.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v3.0.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v3.0.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v3.0.1/manifests"},{"name":"v3.0.0","sha":"00bbc0947ae889b9e480044dbc3bc3e3216a6a89","kind":"commit","published_at":"2022-05-21T10:33:21.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v3.0.0","html_url":"https://github.com/go-yaml/yaml/releases/tag/v3.0.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v3.0.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v3.0.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v3.0.0/manifests"},{"name":"v2.4.0","sha":"7649d4548cb53a614db133b2a8ac1f31859dda8c","kind":"commit","published_at":"2020-11-17T15:46:20.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.4.0","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.4.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.4.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.4.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.4.0/manifests"},{"name":"v2.3.0","sha":"0b1645d91e851e735d3e23330303ce81f70adbe3","kind":"commit","published_at":"2020-05-06T23:08:38.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.3.0","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.3.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.3.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.3.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.3.0/manifests"},{"name":"v2.2.8","sha":"53403b58ad1b561927d19068c655246f2db79d48","kind":"commit","published_at":"2020-01-21T17:19:40.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.2.8","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.2.8","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.2.8","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.8","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.8/manifests"},{"name":"v2.2.7","sha":"1f64d6156d11335c3f22d9330b0ad14fc1e789ce","kind":"commit","published_at":"2019-11-19T21:27:36.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.2.7","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.2.7","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.2.7","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.7","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.7/manifests"},{"name":"v2.2.6","sha":"a95acef3719e5e9f7614cc90a119dee4699291eb","kind":"commit","published_at":"2019-11-19T11:51:43.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.2.6","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.2.6","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.2.6","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.6","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.6/manifests"},{"name":"v2.2.5","sha":"f90ceb4f409096b60e2e9076b38b304b8246e5fa","kind":"commit","published_at":"2019-11-04T18:03:43.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.2.5","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.2.5","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.2.5","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.5","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.5/manifests"},{"name":"v2.2.4","sha":"f221b8435cfb71e54062f6c6e99e9ade30b124d5","kind":"commit","published_at":"2019-10-02T18:33:36.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.2.4","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.2.4","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.2.4","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.4/manifests"},{"name":"v2.2.3","sha":"bb4e33bf68bf89cad44d386192cbed201f35b241","kind":"commit","published_at":"2019-09-30T19:09:21.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.2.3","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.2.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.2.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.3/manifests"},{"name":"v2.2.2","sha":"51d6538a90f86fe93ac480b35f37b2be17fef232","kind":"commit","published_at":"2018-11-15T11:05:04.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.2.2","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.2.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.2.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.2/manifests"},{"name":"v2.2.1","sha":"5420a8b6744d3b0345ab293f6fcba19c978f1183","kind":"commit","published_at":"2018-03-28T19:50:20.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.2.1","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.2.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.2.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.1/manifests"},{"name":"v2.2.0","sha":"86f5ed62f8a0ee96bd888d2efdfd6d4fb100a4eb","kind":"commit","published_at":"2018-03-26T05:07:29.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.2.0","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.2.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.2.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.0/manifests"},{"name":"v2.1.1","sha":"7f97868eec74b32b0982dd158a51a446d1da7eb5","kind":"tag","published_at":"2018-02-23T19:13:14.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.1.1","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.1.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.1.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.1.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.1.1/manifests"},{"name":"v2.1.0","sha":"3e6d767784b037b90a14701b6c9f0643f05db963","kind":"tag","published_at":"2018-02-23T19:02:00.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.1.0","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.1.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.1.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.1.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.1.0/manifests"},{"name":"v2.0.0","sha":"d670f9405373e636a5a2765eea47fac0c9bc91a4","kind":"tag","published_at":"2018-02-23T18:53:08.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.0.0","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.0.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.0.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.0.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.0.0/manifests"}]},"repo_metadata_updated_at":"2026-09-03T00:21:24.734Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":1,"rankings":{"downloads":null,"dependent_repos_count":4.793834424600911,"dependent_packages_count":8.452778221382484,"stargazers_count":0.8346797024230496,"forks_count":0.8659970424816607,"docker_downloads_count":null,"average":3.7368223477220264},"purl":"pkg:golang/github.com/sylr/go-yaml","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/go/github.com/sylr/go-yaml","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/go/github.com/sylr/go-yaml","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/go/github.com/sylr/go-yaml/dependencies","status":"removed","funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-09-02T21:28:34.859Z","issues_count":179,"pull_requests_count":117,"avg_time_to_close_issue":27337742.275,"avg_time_to_close_pull_request":54605651.71428572,"issues_closed_count":40,"pull_requests_closed_count":42,"pull_request_authors_count":78,"issue_authors_count":167,"avg_comments_per_issue":3.11731843575419,"avg_comments_per_pull_request":1.4700854700854702,"merged_pull_requests_count":3,"bot_issues_count":0,"bot_pull_requests_count":0,"past_year_issues_count":0,"past_year_pull_requests_count":0,"past_year_avg_time_to_close_issue":null,"past_year_avg_time_to_close_pull_request":null,"past_year_issues_closed_count":0,"past_year_pull_requests_closed_count":0,"past_year_pull_request_authors_count":0,"past_year_issue_authors_count":0,"past_year_avg_comments_per_issue":null,"past_year_avg_comments_per_pull_request":null,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":0,"past_year_merged_pull_requests_count":0,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/issues","maintainers":[],"active_maintainers":[]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fsylr%2Fgo-yaml/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fsylr%2Fgo-yaml/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fsylr%2Fgo-yaml/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fsylr%2Fgo-yaml/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fsylr%2Fgo-yaml/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fsylr%2Fgo-yaml/codemeta","maintainers":[],"registry":{"name":"proxy.golang.org","url":"https://proxy.golang.org","ecosystem":"go","default":true,"packages_count":2287853,"maintainers_count":0,"namespaces_count":839605,"keywords_count":126639,"github":"golang","metadata":{"funded_packages_count":74445,"sync_missing_packages_cursor":{"timestamp":"2026-09-07T00:07:19.468853Z","path":"github.com/herodotusdev/accumulators","version":"v4.2.0-alpha.1+incompatible"},"rate_limit":1},"icon_url":"https://github.com/golang.png","created_at":"2022-04-04T15:19:22.939Z","updated_at":"2026-09-07T00:08:13.518Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/namespaces"}},{"id":3498463,"name":"gopkg.in/yaml.v3","ecosystem":"go","description":"Package yaml implements YAML support for the Go language.","homepage":"https://github.com/go-yaml/yaml","licenses":"Apache-2.0,MIT","normalized_licenses":["Apache-2.0","MIT"],"repository_url":"https://github.com/go-yaml/yaml","keywords_array":[],"namespace":"gopkg.in","versions_count":2,"first_release_published_at":"2022-05-21T10:33:21.000Z","latest_release_published_at":"2022-05-27T08:35:30.000Z","latest_release_number":"v3.0.1","last_synced_at":"2026-09-06T23:15:58.235Z","created_at":"2022-04-10T19:51:43.649Z","updated_at":"2026-09-06T23:15:58.235Z","registry_url":"https://pkg.go.dev/gopkg.in/yaml.v3","install_command":"go get gopkg.in/yaml.v3","documentation_url":"https://pkg.go.dev/gopkg.in/yaml.v3#section-documentation","metadata":{},"repo_metadata":{"id":14730402,"uuid":"17451182","full_name":"go-yaml/yaml","owner":"go-yaml","description":"YAML support for the Go language.","archived":true,"fork":false,"pushed_at":"2025-04-01T17:00:11.000Z","size":1587,"stargazers_count":7020,"open_issues_count":422,"forks_count":1114,"subscribers_count":3,"default_branch":"v3","last_synced_at":"2026-08-20T07:37:33.652Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":null,"language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"other","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/go-yaml.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null}},"created_at":"2014-03-05T18:54:57.000Z","updated_at":"2026-08-16T08:13:17.000Z","dependencies_parsed_at":"2023-02-16T14:45:46.186Z","dependency_job_id":"c3f4f6d2-0694-43c1-a700-724512e371e7","html_url":"https://github.com/go-yaml/yaml","commit_stats":{"total_commits":302,"total_committers":48,"mean_commits":6.291666666666667,"dds":0.2814569536423841,"last_synced_commit":"f6f7691b1fdeb513f56608cd2c32c51f8194bf51"},"previous_names":["go-yaml/go-yaml-v1"],"tags_count":16,"template":false,"template_full_name":null,"purl":"pkg:github/go-yaml/yaml","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/go-yaml","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/refs/heads/v3","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/sbom","scorecard":{"id":432677,"data":{"date":"2025-08-11","repo":{"name":"github.com/go-yaml/yaml","commit":"944c86a7d29391925ed6ac33bee98a0516f1287a"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":4.4,"checks":[{"name":"Code-Review","score":2,"reason":"Found 6/27 approved changesets -- score normalized to 2","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Warn: no topLevel permission defined: .github/workflows/go.yaml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Maintained","score":0,"reason":"project is archived","details":["Warn: Repository is archived."],"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Pinned-Dependencies","score":3,"reason":"dependency not pinned by hash detected -- score normalized to 3","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/go.yaml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/go-yaml/yaml/go.yaml/v3?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/go.yaml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/go-yaml/yaml/go.yaml/v3?enable=pin","Info: 0 out of 2 GitHub-owned GitHubAction dependencies pinned","Info: 1 out of 1 goCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Security-Policy","score":0,"reason":"security policy file not detected","details":["Warn: no security policy file detected","Warn: no security file to analyze","Warn: no security file to analyze","Warn: no security file to analyze"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"License","score":9,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Warn: project license file does not contain an FSF or OSI license."],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Fuzzing","score":10,"reason":"project is fuzzed","details":["Info: OSSFuzz integration found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Branch-Protection","score":0,"reason":"branch protection not enabled on development/release branches","details":["Warn: branch protection not enabled for branch 'v3'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 9 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-19T03:43:53.386Z","repository_id":14730402,"created_at":"2025-08-19T03:43:53.386Z","updated_at":"2025-08-19T03:43:53.386Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":36790094,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-08-06T04:43:03.162Z","status":"online","status_checked_at":"2026-08-20T02:00:06.210Z","response_time":54,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"go-yaml","name":"go-yaml","uuid":"6823640","kind":"organization","description":null,"email":null,"website":null,"location":null,"twitter":null,"company":null,"icon_url":"https://avatars.githubusercontent.com/u/6823640?v=4","repositories_count":1,"last_synced_at":"2026-08-14T04:51:04.725Z","metadata":{"has_sponsors_listing":false,"funding":null},"html_url":"https://github.com/go-yaml","funding_links":[],"total_stars":7023,"followers":17,"following":0,"created_at":"2022-11-07T11:53:36.392Z","updated_at":"2026-08-14T04:51:04.742Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/go-yaml","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/go-yaml/repositories"},"tags":[{"name":"v3.0.1","sha":"f6f7691b1fdeb513f56608cd2c32c51f8194bf51","kind":"commit","published_at":"2022-05-27T08:35:30.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v3.0.1","html_url":"https://github.com/go-yaml/yaml/releases/tag/v3.0.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v3.0.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v3.0.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v3.0.1/manifests"},{"name":"v3.0.0","sha":"00bbc0947ae889b9e480044dbc3bc3e3216a6a89","kind":"commit","published_at":"2022-05-21T10:33:21.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v3.0.0","html_url":"https://github.com/go-yaml/yaml/releases/tag/v3.0.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v3.0.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v3.0.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v3.0.0/manifests"},{"name":"v2.4.0","sha":"7649d4548cb53a614db133b2a8ac1f31859dda8c","kind":"commit","published_at":"2020-11-17T15:46:20.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.4.0","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.4.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.4.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.4.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.4.0/manifests"},{"name":"v2.3.0","sha":"0b1645d91e851e735d3e23330303ce81f70adbe3","kind":"commit","published_at":"2020-05-06T23:08:38.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.3.0","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.3.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.3.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.3.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.3.0/manifests"},{"name":"v2.2.8","sha":"53403b58ad1b561927d19068c655246f2db79d48","kind":"commit","published_at":"2020-01-21T17:19:40.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.2.8","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.2.8","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.2.8","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.8","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.8/manifests"},{"name":"v2.2.7","sha":"1f64d6156d11335c3f22d9330b0ad14fc1e789ce","kind":"commit","published_at":"2019-11-19T21:27:36.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.2.7","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.2.7","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.2.7","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.7","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.7/manifests"},{"name":"v2.2.6","sha":"a95acef3719e5e9f7614cc90a119dee4699291eb","kind":"commit","published_at":"2019-11-19T11:51:43.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.2.6","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.2.6","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.2.6","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.6","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.6/manifests"},{"name":"v2.2.5","sha":"f90ceb4f409096b60e2e9076b38b304b8246e5fa","kind":"commit","published_at":"2019-11-04T18:03:43.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.2.5","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.2.5","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.2.5","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.5","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.5/manifests"},{"name":"v2.2.4","sha":"f221b8435cfb71e54062f6c6e99e9ade30b124d5","kind":"commit","published_at":"2019-10-02T18:33:36.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.2.4","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.2.4","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.2.4","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.4/manifests"},{"name":"v2.2.3","sha":"bb4e33bf68bf89cad44d386192cbed201f35b241","kind":"commit","published_at":"2019-09-30T19:09:21.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.2.3","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.2.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.2.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.3/manifests"},{"name":"v2.2.2","sha":"51d6538a90f86fe93ac480b35f37b2be17fef232","kind":"commit","published_at":"2018-11-15T11:05:04.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.2.2","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.2.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.2.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.2/manifests"},{"name":"v2.2.1","sha":"5420a8b6744d3b0345ab293f6fcba19c978f1183","kind":"commit","published_at":"2018-03-28T19:50:20.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.2.1","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.2.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.2.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.1/manifests"},{"name":"v2.2.0","sha":"86f5ed62f8a0ee96bd888d2efdfd6d4fb100a4eb","kind":"commit","published_at":"2018-03-26T05:07:29.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.2.0","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.2.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.2.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.0/manifests"},{"name":"v2.1.1","sha":"7f97868eec74b32b0982dd158a51a446d1da7eb5","kind":"tag","published_at":"2018-02-23T19:13:14.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.1.1","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.1.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.1.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.1.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.1.1/manifests"},{"name":"v2.1.0","sha":"3e6d767784b037b90a14701b6c9f0643f05db963","kind":"tag","published_at":"2018-02-23T19:02:00.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.1.0","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.1.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.1.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.1.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.1.0/manifests"},{"name":"v2.0.0","sha":"d670f9405373e636a5a2765eea47fac0c9bc91a4","kind":"tag","published_at":"2018-02-23T18:53:08.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.0.0","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.0.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.0.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.0.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.0.0/manifests"}]},"repo_metadata_updated_at":"2026-08-20T09:55:12.595Z","dependent_packages_count":91103,"downloads":null,"downloads_period":null,"dependent_repos_count":192576,"rankings":{"downloads":null,"dependent_repos_count":0.001970296228853018,"dependent_packages_count":0.001036998015185799,"stargazers_count":0.8346797024230496,"forks_count":0.8659970424816607,"docker_downloads_count":0.0018665964273344381,"average":0.3411101271152167},"purl":"pkg:golang/gopkg.in/yaml.v3","advisories":[{"uuid":"GSA_kwCzR0hTQS1ocDg3LXA0Z3ctajRncc4AAgbD","url":"https://github.com/advisories/GHSA-hp87-p4gw-j4gq","title":"gopkg.in/yaml.v3 Denial of Service","description":"An issue in the Unmarshal function in Go-Yaml v3 can cause a program to panic when attempting to deserialize invalid input.","origin":"UNSPECIFIED","severity":"HIGH","published_at":"2022-05-20T00:00:17.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":7.5,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","references":["https://nvd.nist.gov/vuln/detail/CVE-2022-28948","https://github.com/go-yaml/yaml/issues/666","https://github.com/go-yaml/yaml/commit/8f96da9f5d5eff988554c1aae1784627c4bf6754","https://security.netapp.com/advisory/ntap-20220923-0006","https://github.com/go-yaml/yaml/issues/665","https://github.com/go-yaml/yaml/commit/f6f7691b1fdeb513f56608cd2c32c51f8194bf51","https://github.com/advisories/GHSA-hp87-p4gw-j4gq"],"source_kind":"github","identifiers":["GHSA-hp87-p4gw-j4gq","CVE-2022-28948"],"repository_url":"https://github.com/go-yaml/yaml","blast_radius":0.0,"created_at":"2022-12-21T16:12:22.159Z","updated_at":"2026-08-14T00:08:04.203Z","epss_percentage":0.03965,"epss_percentile":0.89513,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS1ocDg3LXA0Z3ctajRncc4AAgbD","html_url":"https://advisories.ecosyste.ms/advisories/GSA_kwCzR0hTQS1ocDg3LXA0Z3ctajRncc4AAgbD","packages":[{"ecosystem":"go","package_name":"gopkg.in/yaml.v3","versions":[{"first_patched_version":"3.0.1","vulnerable_version_range":"\u003c 3.0.1"}],"purl":"pkg:go/gopkg.in%2Fyaml.v3"}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS1ocDg3LXA0Z3ctajRncc4AAgbD/related_packages","related_advisories":[]}],"docker_usage_url":"https://docker.ecosyste.ms/usage/go/gopkg.in/yaml.v3","docker_dependents_count":23196,"docker_downloads_count":72221770082,"usage_url":"https://repos.ecosyste.ms/usage/go/gopkg.in/yaml.v3","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/go/gopkg.in/yaml.v3/dependencies","status":null,"funding_links":[],"critical":true,"issue_metadata":{"last_synced_at":"2026-08-20T00:59:53.265Z","issues_count":179,"pull_requests_count":117,"avg_time_to_close_issue":27337742.275,"avg_time_to_close_pull_request":54605651.71428572,"issues_closed_count":40,"pull_requests_closed_count":42,"pull_request_authors_count":78,"issue_authors_count":167,"avg_comments_per_issue":3.11731843575419,"avg_comments_per_pull_request":1.4700854700854702,"merged_pull_requests_count":3,"bot_issues_count":0,"bot_pull_requests_count":0,"past_year_issues_count":0,"past_year_pull_requests_count":0,"past_year_avg_time_to_close_issue":null,"past_year_avg_time_to_close_pull_request":null,"past_year_issues_closed_count":0,"past_year_pull_requests_closed_count":0,"past_year_pull_request_authors_count":0,"past_year_issue_authors_count":0,"past_year_avg_comments_per_issue":null,"past_year_avg_comments_per_pull_request":null,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":0,"past_year_merged_pull_requests_count":0,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/issues","maintainers":[],"active_maintainers":[]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/gopkg.in%2Fyaml.v3/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/gopkg.in%2Fyaml.v3/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/gopkg.in%2Fyaml.v3/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/gopkg.in%2Fyaml.v3/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/gopkg.in%2Fyaml.v3/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/gopkg.in%2Fyaml.v3/codemeta","maintainers":[],"registry":{"name":"proxy.golang.org","url":"https://proxy.golang.org","ecosystem":"go","default":true,"packages_count":2287853,"maintainers_count":0,"namespaces_count":839605,"keywords_count":126639,"github":"golang","metadata":{"funded_packages_count":74445,"sync_missing_packages_cursor":{"timestamp":"2026-09-07T00:07:19.468853Z","path":"github.com/herodotusdev/accumulators","version":"v4.2.0-alpha.1+incompatible"},"rate_limit":1},"icon_url":"https://github.com/golang.png","created_at":"2022-04-04T15:19:22.939Z","updated_at":"2026-09-07T00:08:13.518Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/namespaces"}},{"id":3493020,"name":"gopkg.in/yaml.v1","ecosystem":"go","description":"Package yaml implements YAML support for the Go language.","homepage":"https://github.com/go-yaml/yaml","licenses":"LGPL-3.0","normalized_licenses":["LGPL-3.0"],"repository_url":"https://github.com/go-yaml/yaml","keywords_array":[],"namespace":"gopkg.in","versions_count":0,"first_release_published_at":null,"latest_release_published_at":"2026-09-06T23:19:27.111Z","latest_release_number":null,"last_synced_at":"2026-09-06T23:19:27.724Z","created_at":"2022-04-10T19:14:05.287Z","updated_at":"2026-09-06T23:19:27.725Z","registry_url":"https://pkg.go.dev/gopkg.in/yaml.v1","install_command":"go get gopkg.in/yaml.v1","documentation_url":"https://pkg.go.dev/gopkg.in/yaml.v1#section-documentation","metadata":{},"repo_metadata":{"id":14730402,"uuid":"17451182","full_name":"go-yaml/yaml","owner":"go-yaml","description":"YAML support for the Go language.","archived":true,"fork":false,"pushed_at":"2025-04-01T17:00:11.000Z","size":1587,"stargazers_count":7019,"open_issues_count":422,"forks_count":1115,"subscribers_count":3,"default_branch":"v3","last_synced_at":"2026-08-27T09:55:02.448Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":null,"language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"other","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/go-yaml.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null}},"created_at":"2014-03-05T18:54:57.000Z","updated_at":"2026-08-22T06:16:14.000Z","dependencies_parsed_at":"2023-02-16T14:45:46.186Z","dependency_job_id":"c3f4f6d2-0694-43c1-a700-724512e371e7","html_url":"https://github.com/go-yaml/yaml","commit_stats":{"total_commits":302,"total_committers":48,"mean_commits":6.291666666666667,"dds":0.2814569536423841,"last_synced_commit":"f6f7691b1fdeb513f56608cd2c32c51f8194bf51"},"previous_names":["go-yaml/go-yaml-v1"],"tags_count":16,"template":false,"template_full_name":null,"purl":"pkg:github/go-yaml/yaml","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/go-yaml","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/refs/heads/v3","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/sbom","scorecard":{"id":432677,"data":{"date":"2025-08-11","repo":{"name":"github.com/go-yaml/yaml","commit":"944c86a7d29391925ed6ac33bee98a0516f1287a"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":4.4,"checks":[{"name":"Code-Review","score":2,"reason":"Found 6/27 approved changesets -- score normalized to 2","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Warn: no topLevel permission defined: .github/workflows/go.yaml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Maintained","score":0,"reason":"project is archived","details":["Warn: Repository is archived."],"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Pinned-Dependencies","score":3,"reason":"dependency not pinned by hash detected -- score normalized to 3","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/go.yaml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/go-yaml/yaml/go.yaml/v3?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/go.yaml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/go-yaml/yaml/go.yaml/v3?enable=pin","Info: 0 out of 2 GitHub-owned GitHubAction dependencies pinned","Info: 1 out of 1 goCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Security-Policy","score":0,"reason":"security policy file not detected","details":["Warn: no security policy file detected","Warn: no security file to analyze","Warn: no security file to analyze","Warn: no security file to analyze"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"License","score":9,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Warn: project license file does not contain an FSF or OSI license."],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Fuzzing","score":10,"reason":"project is fuzzed","details":["Info: OSSFuzz integration found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Branch-Protection","score":0,"reason":"branch protection not enabled on development/release branches","details":["Warn: branch protection not enabled for branch 'v3'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 9 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-19T03:43:53.386Z","repository_id":14730402,"created_at":"2025-08-19T03:43:53.386Z","updated_at":"2025-08-19T03:43:53.386Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":36941331,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-08-22T15:14:58.755Z","status":"online","status_checked_at":"2026-08-27T02:00:07.166Z","response_time":96,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"go-yaml","name":"go-yaml","uuid":"6823640","kind":"organization","description":null,"email":null,"website":null,"location":null,"twitter":null,"company":null,"icon_url":"https://avatars.githubusercontent.com/u/6823640?v=4","repositories_count":1,"last_synced_at":"2026-08-29T00:59:16.798Z","metadata":{"has_sponsors_listing":false,"funding":null},"html_url":"https://github.com/go-yaml","funding_links":[],"total_stars":7019,"followers":17,"following":0,"created_at":"2022-11-07T11:53:36.392Z","updated_at":"2026-08-29T00:59:16.811Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/go-yaml","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/go-yaml/repositories"},"tags":[{"name":"v3.0.1","sha":"f6f7691b1fdeb513f56608cd2c32c51f8194bf51","kind":"commit","published_at":"2022-05-27T08:35:30.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v3.0.1","html_url":"https://github.com/go-yaml/yaml/releases/tag/v3.0.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v3.0.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v3.0.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v3.0.1/manifests"},{"name":"v3.0.0","sha":"00bbc0947ae889b9e480044dbc3bc3e3216a6a89","kind":"commit","published_at":"2022-05-21T10:33:21.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v3.0.0","html_url":"https://github.com/go-yaml/yaml/releases/tag/v3.0.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v3.0.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v3.0.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v3.0.0/manifests"},{"name":"v2.4.0","sha":"7649d4548cb53a614db133b2a8ac1f31859dda8c","kind":"commit","published_at":"2020-11-17T15:46:20.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.4.0","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.4.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.4.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.4.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.4.0/manifests"},{"name":"v2.3.0","sha":"0b1645d91e851e735d3e23330303ce81f70adbe3","kind":"commit","published_at":"2020-05-06T23:08:38.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.3.0","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.3.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.3.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.3.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.3.0/manifests"},{"name":"v2.2.8","sha":"53403b58ad1b561927d19068c655246f2db79d48","kind":"commit","published_at":"2020-01-21T17:19:40.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.2.8","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.2.8","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.2.8","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.8","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.8/manifests"},{"name":"v2.2.7","sha":"1f64d6156d11335c3f22d9330b0ad14fc1e789ce","kind":"commit","published_at":"2019-11-19T21:27:36.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.2.7","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.2.7","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.2.7","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.7","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.7/manifests"},{"name":"v2.2.6","sha":"a95acef3719e5e9f7614cc90a119dee4699291eb","kind":"commit","published_at":"2019-11-19T11:51:43.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.2.6","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.2.6","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.2.6","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.6","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.6/manifests"},{"name":"v2.2.5","sha":"f90ceb4f409096b60e2e9076b38b304b8246e5fa","kind":"commit","published_at":"2019-11-04T18:03:43.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.2.5","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.2.5","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.2.5","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.5","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.5/manifests"},{"name":"v2.2.4","sha":"f221b8435cfb71e54062f6c6e99e9ade30b124d5","kind":"commit","published_at":"2019-10-02T18:33:36.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.2.4","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.2.4","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.2.4","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.4/manifests"},{"name":"v2.2.3","sha":"bb4e33bf68bf89cad44d386192cbed201f35b241","kind":"commit","published_at":"2019-09-30T19:09:21.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.2.3","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.2.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.2.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.3/manifests"},{"name":"v2.2.2","sha":"51d6538a90f86fe93ac480b35f37b2be17fef232","kind":"commit","published_at":"2018-11-15T11:05:04.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.2.2","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.2.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.2.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.2/manifests"},{"name":"v2.2.1","sha":"5420a8b6744d3b0345ab293f6fcba19c978f1183","kind":"commit","published_at":"2018-03-28T19:50:20.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.2.1","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.2.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.2.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.1/manifests"},{"name":"v2.2.0","sha":"86f5ed62f8a0ee96bd888d2efdfd6d4fb100a4eb","kind":"commit","published_at":"2018-03-26T05:07:29.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.2.0","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.2.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.2.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.0/manifests"},{"name":"v2.1.1","sha":"7f97868eec74b32b0982dd158a51a446d1da7eb5","kind":"tag","published_at":"2018-02-23T19:13:14.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.1.1","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.1.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.1.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.1.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.1.1/manifests"},{"name":"v2.1.0","sha":"3e6d767784b037b90a14701b6c9f0643f05db963","kind":"tag","published_at":"2018-02-23T19:02:00.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.1.0","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.1.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.1.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.1.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.1.0/manifests"},{"name":"v2.0.0","sha":"d670f9405373e636a5a2765eea47fac0c9bc91a4","kind":"tag","published_at":"2018-02-23T18:53:08.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.0.0","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.0.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.0.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.0.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.0.0/manifests"}]},"repo_metadata_updated_at":"2026-08-30T00:40:50.616Z","dependent_packages_count":497,"downloads":null,"downloads_period":null,"dependent_repos_count":2296,"rankings":{"downloads":null,"dependent_repos_count":0.17027507409350817,"dependent_packages_count":0.17245276992539837,"stargazers_count":0.8346797024230496,"forks_count":0.8659970424816607,"docker_downloads_count":0.4057773233422031,"average":0.489836382453164},"purl":"pkg:golang/gopkg.in/yaml.v1","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/go/gopkg.in/yaml.v1","docker_dependents_count":156,"docker_downloads_count":12241109,"usage_url":"https://repos.ecosyste.ms/usage/go/gopkg.in/yaml.v1","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/go/gopkg.in/yaml.v1/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-08-29T12:02:46.523Z","issues_count":179,"pull_requests_count":117,"avg_time_to_close_issue":27337742.275,"avg_time_to_close_pull_request":54605651.71428572,"issues_closed_count":40,"pull_requests_closed_count":42,"pull_request_authors_count":78,"issue_authors_count":167,"avg_comments_per_issue":3.11731843575419,"avg_comments_per_pull_request":1.4700854700854702,"merged_pull_requests_count":3,"bot_issues_count":0,"bot_pull_requests_count":0,"past_year_issues_count":0,"past_year_pull_requests_count":0,"past_year_avg_time_to_close_issue":null,"past_year_avg_time_to_close_pull_request":null,"past_year_issues_closed_count":0,"past_year_pull_requests_closed_count":0,"past_year_pull_request_authors_count":0,"past_year_issue_authors_count":0,"past_year_avg_comments_per_issue":null,"past_year_avg_comments_per_pull_request":null,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":0,"past_year_merged_pull_requests_count":0,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/issues","maintainers":[],"active_maintainers":[]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/gopkg.in%2Fyaml.v1/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/gopkg.in%2Fyaml.v1/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/gopkg.in%2Fyaml.v1/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/gopkg.in%2Fyaml.v1/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/gopkg.in%2Fyaml.v1/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/gopkg.in%2Fyaml.v1/codemeta","maintainers":[],"registry":{"name":"proxy.golang.org","url":"https://proxy.golang.org","ecosystem":"go","default":true,"packages_count":2287853,"maintainers_count":0,"namespaces_count":839605,"keywords_count":126639,"github":"golang","metadata":{"funded_packages_count":74445,"sync_missing_packages_cursor":{"timestamp":"2026-09-07T00:07:19.468853Z","path":"github.com/herodotusdev/accumulators","version":"v4.2.0-alpha.1+incompatible"},"rate_limit":1},"icon_url":"https://github.com/golang.png","created_at":"2022-04-04T15:19:22.939Z","updated_at":"2026-09-07T00:08:13.518Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/namespaces"}},{"id":3925138,"name":"gopkg.net/yaml.v1","ecosystem":"go","description":"Package yaml implements YAML support for the Go language.","homepage":"https://github.com/go-yaml/yaml","licenses":"Apache-2.0","normalized_licenses":["Apache-2.0"],"repository_url":"https://github.com/go-yaml/yaml","keywords_array":[],"namespace":"gopkg.net","versions_count":2,"first_release_published_at":"2018-01-09T11:43:31.000Z","latest_release_published_at":"2018-02-23T19:01:16.000Z","latest_release_number":"v2.1.0+incompatible","last_synced_at":"2026-09-06T23:20:44.128Z","created_at":"2022-04-12T02:21:07.573Z","updated_at":"2026-09-06T23:20:44.129Z","registry_url":"https://pkg.go.dev/gopkg.net/yaml.v1","install_command":"go get gopkg.net/yaml.v1","documentation_url":"https://pkg.go.dev/gopkg.net/yaml.v1#section-documentation","metadata":{},"repo_metadata":{"id":14730402,"uuid":"17451182","full_name":"go-yaml/yaml","owner":"go-yaml","description":"YAML support for the Go language.","archived":true,"fork":false,"pushed_at":"2025-04-01T17:00:11.000Z","size":1587,"stargazers_count":7018,"open_issues_count":422,"forks_count":1117,"subscribers_count":3,"default_branch":"v3","last_synced_at":"2026-09-02T19:07:29.914Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":null,"language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"other","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/go-yaml.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null}},"created_at":"2014-03-05T18:54:57.000Z","updated_at":"2026-09-02T18:56:31.000Z","dependencies_parsed_at":"2023-02-16T14:45:46.186Z","dependency_job_id":"c3f4f6d2-0694-43c1-a700-724512e371e7","html_url":"https://github.com/go-yaml/yaml","commit_stats":{"total_commits":302,"total_committers":48,"mean_commits":6.291666666666667,"dds":0.2814569536423841,"last_synced_commit":"f6f7691b1fdeb513f56608cd2c32c51f8194bf51"},"previous_names":["go-yaml/go-yaml-v1"],"tags_count":16,"template":false,"template_full_name":null,"purl":"pkg:github/go-yaml/yaml","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/go-yaml","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/refs/heads/v3","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/sbom","scorecard":{"id":432677,"data":{"date":"2025-08-11","repo":{"name":"github.com/go-yaml/yaml","commit":"944c86a7d29391925ed6ac33bee98a0516f1287a"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":4.4,"checks":[{"name":"Code-Review","score":2,"reason":"Found 6/27 approved changesets -- score normalized to 2","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Warn: no topLevel permission defined: .github/workflows/go.yaml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Maintained","score":0,"reason":"project is archived","details":["Warn: Repository is archived."],"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Pinned-Dependencies","score":3,"reason":"dependency not pinned by hash detected -- score normalized to 3","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/go.yaml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/go-yaml/yaml/go.yaml/v3?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/go.yaml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/go-yaml/yaml/go.yaml/v3?enable=pin","Info: 0 out of 2 GitHub-owned GitHubAction dependencies pinned","Info: 1 out of 1 goCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Security-Policy","score":0,"reason":"security policy file not detected","details":["Warn: no security policy file detected","Warn: no security file to analyze","Warn: no security file to analyze","Warn: no security file to analyze"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"License","score":9,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Warn: project license file does not contain an FSF or OSI license."],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Fuzzing","score":10,"reason":"project is fuzzed","details":["Info: OSSFuzz integration found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Branch-Protection","score":0,"reason":"branch protection not enabled on development/release branches","details":["Warn: branch protection not enabled for branch 'v3'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 9 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-19T03:43:53.386Z","repository_id":14730402,"created_at":"2025-08-19T03:43:53.386Z","updated_at":"2025-08-19T03:43:53.386Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":37019155,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-08-22T15:14:58.755Z","status":"online","status_checked_at":"2026-09-02T02:00:06.194Z","response_time":106,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"go-yaml","name":"go-yaml","uuid":"6823640","kind":"organization","description":null,"email":null,"website":null,"location":null,"twitter":null,"company":null,"icon_url":"https://avatars.githubusercontent.com/u/6823640?v=4","repositories_count":1,"last_synced_at":"2026-08-29T00:59:16.798Z","metadata":{"has_sponsors_listing":false,"funding":null},"html_url":"https://github.com/go-yaml","funding_links":[],"total_stars":7019,"followers":17,"following":0,"created_at":"2022-11-07T11:53:36.392Z","updated_at":"2026-08-29T00:59:16.811Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/go-yaml","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/go-yaml/repositories"},"tags":[{"name":"v3.0.1","sha":"f6f7691b1fdeb513f56608cd2c32c51f8194bf51","kind":"commit","published_at":"2022-05-27T08:35:30.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v3.0.1","html_url":"https://github.com/go-yaml/yaml/releases/tag/v3.0.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v3.0.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v3.0.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v3.0.1/manifests"},{"name":"v3.0.0","sha":"00bbc0947ae889b9e480044dbc3bc3e3216a6a89","kind":"commit","published_at":"2022-05-21T10:33:21.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v3.0.0","html_url":"https://github.com/go-yaml/yaml/releases/tag/v3.0.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v3.0.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v3.0.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v3.0.0/manifests"},{"name":"v2.4.0","sha":"7649d4548cb53a614db133b2a8ac1f31859dda8c","kind":"commit","published_at":"2020-11-17T15:46:20.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.4.0","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.4.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.4.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.4.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.4.0/manifests"},{"name":"v2.3.0","sha":"0b1645d91e851e735d3e23330303ce81f70adbe3","kind":"commit","published_at":"2020-05-06T23:08:38.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.3.0","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.3.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.3.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.3.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.3.0/manifests"},{"name":"v2.2.8","sha":"53403b58ad1b561927d19068c655246f2db79d48","kind":"commit","published_at":"2020-01-21T17:19:40.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.2.8","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.2.8","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.2.8","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.8","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.8/manifests"},{"name":"v2.2.7","sha":"1f64d6156d11335c3f22d9330b0ad14fc1e789ce","kind":"commit","published_at":"2019-11-19T21:27:36.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.2.7","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.2.7","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.2.7","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.7","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.7/manifests"},{"name":"v2.2.6","sha":"a95acef3719e5e9f7614cc90a119dee4699291eb","kind":"commit","published_at":"2019-11-19T11:51:43.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.2.6","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.2.6","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.2.6","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.6","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.6/manifests"},{"name":"v2.2.5","sha":"f90ceb4f409096b60e2e9076b38b304b8246e5fa","kind":"commit","published_at":"2019-11-04T18:03:43.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.2.5","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.2.5","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.2.5","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.5","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.5/manifests"},{"name":"v2.2.4","sha":"f221b8435cfb71e54062f6c6e99e9ade30b124d5","kind":"commit","published_at":"2019-10-02T18:33:36.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.2.4","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.2.4","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.2.4","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.4/manifests"},{"name":"v2.2.3","sha":"bb4e33bf68bf89cad44d386192cbed201f35b241","kind":"commit","published_at":"2019-09-30T19:09:21.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.2.3","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.2.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.2.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.3/manifests"},{"name":"v2.2.2","sha":"51d6538a90f86fe93ac480b35f37b2be17fef232","kind":"commit","published_at":"2018-11-15T11:05:04.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.2.2","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.2.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.2.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.2/manifests"},{"name":"v2.2.1","sha":"5420a8b6744d3b0345ab293f6fcba19c978f1183","kind":"commit","published_at":"2018-03-28T19:50:20.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.2.1","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.2.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.2.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.1/manifests"},{"name":"v2.2.0","sha":"86f5ed62f8a0ee96bd888d2efdfd6d4fb100a4eb","kind":"commit","published_at":"2018-03-26T05:07:29.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.2.0","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.2.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.2.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.0/manifests"},{"name":"v2.1.1","sha":"7f97868eec74b32b0982dd158a51a446d1da7eb5","kind":"tag","published_at":"2018-02-23T19:13:14.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.1.1","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.1.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.1.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.1.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.1.1/manifests"},{"name":"v2.1.0","sha":"3e6d767784b037b90a14701b6c9f0643f05db963","kind":"tag","published_at":"2018-02-23T19:02:00.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.1.0","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.1.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.1.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.1.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.1.0/manifests"},{"name":"v2.0.0","sha":"d670f9405373e636a5a2765eea47fac0c9bc91a4","kind":"tag","published_at":"2018-02-23T18:53:08.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.0.0","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.0.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.0.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.0.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.0.0/manifests"}]},"repo_metadata_updated_at":"2026-09-05T17:41:04.756Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":9.345852080216646,"dependent_packages_count":6.999148183520997,"stargazers_count":null,"forks_count":null,"average":8.172500131868823},"purl":"pkg:golang/gopkg.net/yaml.v1","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/go/gopkg.net/yaml.v1","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/go/gopkg.net/yaml.v1","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/go/gopkg.net/yaml.v1/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-09-04T22:05:44.168Z","issues_count":179,"pull_requests_count":117,"avg_time_to_close_issue":27337742.275,"avg_time_to_close_pull_request":54605651.71428572,"issues_closed_count":40,"pull_requests_closed_count":42,"pull_request_authors_count":78,"issue_authors_count":167,"avg_comments_per_issue":3.11731843575419,"avg_comments_per_pull_request":1.4700854700854702,"merged_pull_requests_count":3,"bot_issues_count":0,"bot_pull_requests_count":0,"past_year_issues_count":0,"past_year_pull_requests_count":0,"past_year_avg_time_to_close_issue":null,"past_year_avg_time_to_close_pull_request":null,"past_year_issues_closed_count":0,"past_year_pull_requests_closed_count":0,"past_year_pull_request_authors_count":0,"past_year_issue_authors_count":0,"past_year_avg_comments_per_issue":null,"past_year_avg_comments_per_pull_request":null,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":0,"past_year_merged_pull_requests_count":0,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/issues","maintainers":[],"active_maintainers":[]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/gopkg.net%2Fyaml.v1/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/gopkg.net%2Fyaml.v1/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/gopkg.net%2Fyaml.v1/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/gopkg.net%2Fyaml.v1/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/gopkg.net%2Fyaml.v1/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/gopkg.net%2Fyaml.v1/codemeta","maintainers":[],"registry":{"name":"proxy.golang.org","url":"https://proxy.golang.org","ecosystem":"go","default":true,"packages_count":2287853,"maintainers_count":0,"namespaces_count":839605,"keywords_count":126639,"github":"golang","metadata":{"funded_packages_count":74445,"sync_missing_packages_cursor":{"timestamp":"2026-09-07T00:07:19.468853Z","path":"github.com/herodotusdev/accumulators","version":"v4.2.0-alpha.1+incompatible"},"rate_limit":1},"icon_url":"https://github.com/golang.png","created_at":"2022-04-04T15:19:22.939Z","updated_at":"2026-09-07T00:08:13.518Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/namespaces"}},{"id":3632010,"name":"github.com/go-yaml/yaml/v2","ecosystem":"go","description":"Package yaml implements YAML support for the Go language.\n\nSource code and other details for the project are available at GitHub:","homepage":"https://github.com/go-yaml/yaml","licenses":"Apache-2.0","normalized_licenses":["Apache-2.0"],"repository_url":"https://github.com/go-yaml/yaml","keywords_array":[],"namespace":"github.com/go-yaml/yaml","versions_count":14,"first_release_published_at":"2022-11-18T21:43:04.198Z","latest_release_published_at":"2020-11-17T15:46:20.000Z","latest_release_number":"v2.4.0","last_synced_at":"2026-09-06T23:20:45.498Z","created_at":"2022-04-11T08:29:55.187Z","updated_at":"2026-09-06T23:20:45.499Z","registry_url":"https://pkg.go.dev/github.com/go-yaml/yaml/v2","install_command":"go get github.com/go-yaml/yaml/v2","documentation_url":"https://pkg.go.dev/github.com/go-yaml/yaml/v2#section-documentation","metadata":{},"repo_metadata":{"id":14730402,"uuid":"17451182","full_name":"go-yaml/yaml","owner":"go-yaml","description":"YAML support for the Go language.","archived":true,"fork":false,"pushed_at":"2025-04-01T17:00:11.000Z","size":1587,"stargazers_count":7020,"open_issues_count":422,"forks_count":1114,"subscribers_count":3,"default_branch":"v3","last_synced_at":"2026-08-20T07:37:33.652Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":null,"language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"other","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/go-yaml.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null}},"created_at":"2014-03-05T18:54:57.000Z","updated_at":"2026-08-16T08:13:17.000Z","dependencies_parsed_at":"2023-02-16T14:45:46.186Z","dependency_job_id":"c3f4f6d2-0694-43c1-a700-724512e371e7","html_url":"https://github.com/go-yaml/yaml","commit_stats":{"total_commits":302,"total_committers":48,"mean_commits":6.291666666666667,"dds":0.2814569536423841,"last_synced_commit":"f6f7691b1fdeb513f56608cd2c32c51f8194bf51"},"previous_names":["go-yaml/go-yaml-v1"],"tags_count":16,"template":false,"template_full_name":null,"purl":"pkg:github/go-yaml/yaml","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/go-yaml","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/refs/heads/v3","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/sbom","scorecard":{"id":432677,"data":{"date":"2025-08-11","repo":{"name":"github.com/go-yaml/yaml","commit":"944c86a7d29391925ed6ac33bee98a0516f1287a"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":4.4,"checks":[{"name":"Code-Review","score":2,"reason":"Found 6/27 approved changesets -- score normalized to 2","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Warn: no topLevel permission defined: .github/workflows/go.yaml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Maintained","score":0,"reason":"project is archived","details":["Warn: Repository is archived."],"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Pinned-Dependencies","score":3,"reason":"dependency not pinned by hash detected -- score normalized to 3","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/go.yaml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/go-yaml/yaml/go.yaml/v3?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/go.yaml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/go-yaml/yaml/go.yaml/v3?enable=pin","Info: 0 out of 2 GitHub-owned GitHubAction dependencies pinned","Info: 1 out of 1 goCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Security-Policy","score":0,"reason":"security policy file not detected","details":["Warn: no security policy file detected","Warn: no security file to analyze","Warn: no security file to analyze","Warn: no security file to analyze"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"License","score":9,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Warn: project license file does not contain an FSF or OSI license."],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Fuzzing","score":10,"reason":"project is fuzzed","details":["Info: OSSFuzz integration found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Branch-Protection","score":0,"reason":"branch protection not enabled on development/release branches","details":["Warn: branch protection not enabled for branch 'v3'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 9 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-19T03:43:53.386Z","repository_id":14730402,"created_at":"2025-08-19T03:43:53.386Z","updated_at":"2025-08-19T03:43:53.386Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":36790094,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-08-06T04:43:03.162Z","status":"online","status_checked_at":"2026-08-20T02:00:06.210Z","response_time":54,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"go-yaml","name":"go-yaml","uuid":"6823640","kind":"organization","description":null,"email":null,"website":null,"location":null,"twitter":null,"company":null,"icon_url":"https://avatars.githubusercontent.com/u/6823640?v=4","repositories_count":1,"last_synced_at":"2026-08-14T04:51:04.725Z","metadata":{"has_sponsors_listing":false,"funding":null},"html_url":"https://github.com/go-yaml","funding_links":[],"total_stars":7023,"followers":17,"following":0,"created_at":"2022-11-07T11:53:36.392Z","updated_at":"2026-08-14T04:51:04.742Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/go-yaml","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/go-yaml/repositories"},"tags":[{"name":"v3.0.1","sha":"f6f7691b1fdeb513f56608cd2c32c51f8194bf51","kind":"commit","published_at":"2022-05-27T08:35:30.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v3.0.1","html_url":"https://github.com/go-yaml/yaml/releases/tag/v3.0.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v3.0.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v3.0.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v3.0.1/manifests"},{"name":"v3.0.0","sha":"00bbc0947ae889b9e480044dbc3bc3e3216a6a89","kind":"commit","published_at":"2022-05-21T10:33:21.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v3.0.0","html_url":"https://github.com/go-yaml/yaml/releases/tag/v3.0.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v3.0.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v3.0.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v3.0.0/manifests"},{"name":"v2.4.0","sha":"7649d4548cb53a614db133b2a8ac1f31859dda8c","kind":"commit","published_at":"2020-11-17T15:46:20.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.4.0","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.4.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.4.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.4.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.4.0/manifests"},{"name":"v2.3.0","sha":"0b1645d91e851e735d3e23330303ce81f70adbe3","kind":"commit","published_at":"2020-05-06T23:08:38.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.3.0","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.3.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.3.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.3.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.3.0/manifests"},{"name":"v2.2.8","sha":"53403b58ad1b561927d19068c655246f2db79d48","kind":"commit","published_at":"2020-01-21T17:19:40.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.2.8","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.2.8","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.2.8","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.8","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.8/manifests"},{"name":"v2.2.7","sha":"1f64d6156d11335c3f22d9330b0ad14fc1e789ce","kind":"commit","published_at":"2019-11-19T21:27:36.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.2.7","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.2.7","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.2.7","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.7","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.7/manifests"},{"name":"v2.2.6","sha":"a95acef3719e5e9f7614cc90a119dee4699291eb","kind":"commit","published_at":"2019-11-19T11:51:43.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.2.6","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.2.6","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.2.6","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.6","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.6/manifests"},{"name":"v2.2.5","sha":"f90ceb4f409096b60e2e9076b38b304b8246e5fa","kind":"commit","published_at":"2019-11-04T18:03:43.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.2.5","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.2.5","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.2.5","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.5","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.5/manifests"},{"name":"v2.2.4","sha":"f221b8435cfb71e54062f6c6e99e9ade30b124d5","kind":"commit","published_at":"2019-10-02T18:33:36.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.2.4","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.2.4","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.2.4","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.4/manifests"},{"name":"v2.2.3","sha":"bb4e33bf68bf89cad44d386192cbed201f35b241","kind":"commit","published_at":"2019-09-30T19:09:21.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.2.3","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.2.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.2.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.3/manifests"},{"name":"v2.2.2","sha":"51d6538a90f86fe93ac480b35f37b2be17fef232","kind":"commit","published_at":"2018-11-15T11:05:04.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.2.2","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.2.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.2.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.2/manifests"},{"name":"v2.2.1","sha":"5420a8b6744d3b0345ab293f6fcba19c978f1183","kind":"commit","published_at":"2018-03-28T19:50:20.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.2.1","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.2.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.2.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.1/manifests"},{"name":"v2.2.0","sha":"86f5ed62f8a0ee96bd888d2efdfd6d4fb100a4eb","kind":"commit","published_at":"2018-03-26T05:07:29.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.2.0","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.2.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.2.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.0/manifests"},{"name":"v2.1.1","sha":"7f97868eec74b32b0982dd158a51a446d1da7eb5","kind":"tag","published_at":"2018-02-23T19:13:14.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.1.1","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.1.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.1.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.1.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.1.1/manifests"},{"name":"v2.1.0","sha":"3e6d767784b037b90a14701b6c9f0643f05db963","kind":"tag","published_at":"2018-02-23T19:02:00.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.1.0","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.1.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.1.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.1.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.1.0/manifests"},{"name":"v2.0.0","sha":"d670f9405373e636a5a2765eea47fac0c9bc91a4","kind":"tag","published_at":"2018-02-23T18:53:08.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.0.0","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.0.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.0.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.0.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.0.0/manifests"}]},"repo_metadata_updated_at":"2026-08-20T09:57:49.821Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":5,"rankings":{"downloads":null,"dependent_repos_count":2.3199405749950204,"dependent_packages_count":8.452778221382484,"stargazers_count":0.8346797024230496,"forks_count":0.8659970424816607,"docker_downloads_count":null,"average":3.118348885320554},"purl":"pkg:golang/github.com/go-yaml/yaml/v2","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/go/github.com/go-yaml/yaml/v2","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/go/github.com/go-yaml/yaml/v2","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/go/github.com/go-yaml/yaml/v2/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-08-20T00:59:53.265Z","issues_count":179,"pull_requests_count":117,"avg_time_to_close_issue":27337742.275,"avg_time_to_close_pull_request":54605651.71428572,"issues_closed_count":40,"pull_requests_closed_count":42,"pull_request_authors_count":78,"issue_authors_count":167,"avg_comments_per_issue":3.11731843575419,"avg_comments_per_pull_request":1.4700854700854702,"merged_pull_requests_count":3,"bot_issues_count":0,"bot_pull_requests_count":0,"past_year_issues_count":0,"past_year_pull_requests_count":0,"past_year_avg_time_to_close_issue":null,"past_year_avg_time_to_close_pull_request":null,"past_year_issues_closed_count":0,"past_year_pull_requests_closed_count":0,"past_year_pull_request_authors_count":0,"past_year_issue_authors_count":0,"past_year_avg_comments_per_issue":null,"past_year_avg_comments_per_pull_request":null,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":0,"past_year_merged_pull_requests_count":0,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/issues","maintainers":[],"active_maintainers":[]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fgo-yaml%2Fyaml%2Fv2/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fgo-yaml%2Fyaml%2Fv2/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fgo-yaml%2Fyaml%2Fv2/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fgo-yaml%2Fyaml%2Fv2/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fgo-yaml%2Fyaml%2Fv2/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fgo-yaml%2Fyaml%2Fv2/codemeta","maintainers":[],"registry":{"name":"proxy.golang.org","url":"https://proxy.golang.org","ecosystem":"go","default":true,"packages_count":2287853,"maintainers_count":0,"namespaces_count":839605,"keywords_count":126639,"github":"golang","metadata":{"funded_packages_count":74445,"sync_missing_packages_cursor":{"timestamp":"2026-09-07T00:07:19.468853Z","path":"github.com/herodotusdev/accumulators","version":"v4.2.0-alpha.1+incompatible"},"rate_limit":1},"icon_url":"https://github.com/golang.png","created_at":"2022-04-04T15:19:22.939Z","updated_at":"2026-09-07T00:08:13.518Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/namespaces"}},{"id":14644944,"name":"github.com/go-YAML/yaml","ecosystem":"go","description":"","homepage":"https://github.com/go-YAML/yaml","licenses":"other","normalized_licenses":["Other"],"repository_url":"https://github.com/go-YAML/yaml","keywords_array":[],"namespace":"github.com/go-YAML","versions_count":1,"first_release_published_at":"2014-09-22T21:32:25.000Z","latest_release_published_at":"2014-09-22T21:32:25.000Z","latest_release_number":"v0.0.0-20140922213225-bec87e4332ae","last_synced_at":"2026-09-06T23:25:27.694Z","created_at":"2026-06-17T13:30:32.294Z","updated_at":"2026-09-06T23:25:27.695Z","registry_url":"https://pkg.go.dev/github.com/go-YAML/yaml","install_command":"go get github.com/go-YAML/yaml","documentation_url":"https://pkg.go.dev/github.com/go-YAML/yaml#section-documentation","metadata":{},"repo_metadata":{"id":14730402,"uuid":"17451182","full_name":"go-yaml/yaml","owner":"go-yaml","description":"YAML support for the Go language.","archived":true,"fork":false,"pushed_at":"2025-04-01T17:00:11.000Z","size":1587,"stargazers_count":7018,"open_issues_count":422,"forks_count":1117,"subscribers_count":3,"default_branch":"v3","last_synced_at":"2026-09-02T19:07:29.914Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":null,"language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"other","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/go-yaml.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null}},"created_at":"2014-03-05T18:54:57.000Z","updated_at":"2026-09-02T18:56:31.000Z","dependencies_parsed_at":"2023-02-16T14:45:46.186Z","dependency_job_id":"c3f4f6d2-0694-43c1-a700-724512e371e7","html_url":"https://github.com/go-yaml/yaml","commit_stats":{"total_commits":302,"total_committers":48,"mean_commits":6.291666666666667,"dds":0.2814569536423841,"last_synced_commit":"f6f7691b1fdeb513f56608cd2c32c51f8194bf51"},"previous_names":["go-yaml/go-yaml-v1"],"tags_count":16,"template":false,"template_full_name":null,"purl":"pkg:github/go-yaml/yaml","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/go-yaml","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/refs/heads/v3","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/sbom","scorecard":{"id":432677,"data":{"date":"2025-08-11","repo":{"name":"github.com/go-yaml/yaml","commit":"944c86a7d29391925ed6ac33bee98a0516f1287a"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":4.4,"checks":[{"name":"Code-Review","score":2,"reason":"Found 6/27 approved changesets -- score normalized to 2","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Warn: no topLevel permission defined: .github/workflows/go.yaml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Maintained","score":0,"reason":"project is archived","details":["Warn: Repository is archived."],"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Pinned-Dependencies","score":3,"reason":"dependency not pinned by hash detected -- score normalized to 3","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/go.yaml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/go-yaml/yaml/go.yaml/v3?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/go.yaml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/go-yaml/yaml/go.yaml/v3?enable=pin","Info: 0 out of 2 GitHub-owned GitHubAction dependencies pinned","Info: 1 out of 1 goCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Security-Policy","score":0,"reason":"security policy file not detected","details":["Warn: no security policy file detected","Warn: no security file to analyze","Warn: no security file to analyze","Warn: no security file to analyze"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"License","score":9,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Warn: project license file does not contain an FSF or OSI license."],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Fuzzing","score":10,"reason":"project is fuzzed","details":["Info: OSSFuzz integration found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Branch-Protection","score":0,"reason":"branch protection not enabled on development/release branches","details":["Warn: branch protection not enabled for branch 'v3'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 9 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-19T03:43:53.386Z","repository_id":14730402,"created_at":"2025-08-19T03:43:53.386Z","updated_at":"2025-08-19T03:43:53.386Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":336071963,"owners_count":37022173,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-08-22T15:14:58.755Z","status":"online","status_checked_at":"2026-09-04T02:00:06.169Z","response_time":115,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"go-yaml","name":"go-yaml","uuid":"6823640","kind":"organization","description":null,"email":null,"website":null,"location":null,"twitter":null,"company":null,"icon_url":"https://avatars.githubusercontent.com/u/6823640?v=4","repositories_count":1,"last_synced_at":"2026-08-29T00:59:16.798Z","metadata":{"has_sponsors_listing":false,"funding":null},"html_url":"https://github.com/go-yaml","funding_links":[],"total_stars":7019,"followers":17,"following":0,"created_at":"2022-11-07T11:53:36.392Z","updated_at":"2026-08-29T00:59:16.811Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/go-yaml","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/go-yaml/repositories"},"tags":[{"name":"v3.0.1","sha":"f6f7691b1fdeb513f56608cd2c32c51f8194bf51","kind":"commit","published_at":"2022-05-27T08:35:30.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v3.0.1","html_url":"https://github.com/go-yaml/yaml/releases/tag/v3.0.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v3.0.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v3.0.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v3.0.1/manifests"},{"name":"v3.0.0","sha":"00bbc0947ae889b9e480044dbc3bc3e3216a6a89","kind":"commit","published_at":"2022-05-21T10:33:21.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v3.0.0","html_url":"https://github.com/go-yaml/yaml/releases/tag/v3.0.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v3.0.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v3.0.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v3.0.0/manifests"},{"name":"v2.4.0","sha":"7649d4548cb53a614db133b2a8ac1f31859dda8c","kind":"commit","published_at":"2020-11-17T15:46:20.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.4.0","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.4.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.4.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.4.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.4.0/manifests"},{"name":"v2.3.0","sha":"0b1645d91e851e735d3e23330303ce81f70adbe3","kind":"commit","published_at":"2020-05-06T23:08:38.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.3.0","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.3.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.3.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.3.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.3.0/manifests"},{"name":"v2.2.8","sha":"53403b58ad1b561927d19068c655246f2db79d48","kind":"commit","published_at":"2020-01-21T17:19:40.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.2.8","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.2.8","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.2.8","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.8","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.8/manifests"},{"name":"v2.2.7","sha":"1f64d6156d11335c3f22d9330b0ad14fc1e789ce","kind":"commit","published_at":"2019-11-19T21:27:36.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.2.7","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.2.7","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.2.7","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.7","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.7/manifests"},{"name":"v2.2.6","sha":"a95acef3719e5e9f7614cc90a119dee4699291eb","kind":"commit","published_at":"2019-11-19T11:51:43.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.2.6","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.2.6","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.2.6","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.6","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.6/manifests"},{"name":"v2.2.5","sha":"f90ceb4f409096b60e2e9076b38b304b8246e5fa","kind":"commit","published_at":"2019-11-04T18:03:43.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.2.5","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.2.5","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.2.5","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.5","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.5/manifests"},{"name":"v2.2.4","sha":"f221b8435cfb71e54062f6c6e99e9ade30b124d5","kind":"commit","published_at":"2019-10-02T18:33:36.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.2.4","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.2.4","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.2.4","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.4/manifests"},{"name":"v2.2.3","sha":"bb4e33bf68bf89cad44d386192cbed201f35b241","kind":"commit","published_at":"2019-09-30T19:09:21.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.2.3","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.2.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.2.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.3/manifests"},{"name":"v2.2.2","sha":"51d6538a90f86fe93ac480b35f37b2be17fef232","kind":"commit","published_at":"2018-11-15T11:05:04.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.2.2","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.2.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.2.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.2/manifests"},{"name":"v2.2.1","sha":"5420a8b6744d3b0345ab293f6fcba19c978f1183","kind":"commit","published_at":"2018-03-28T19:50:20.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.2.1","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.2.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.2.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.1/manifests"},{"name":"v2.2.0","sha":"86f5ed62f8a0ee96bd888d2efdfd6d4fb100a4eb","kind":"commit","published_at":"2018-03-26T05:07:29.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.2.0","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.2.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.2.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.0/manifests"},{"name":"v2.1.1","sha":"7f97868eec74b32b0982dd158a51a446d1da7eb5","kind":"tag","published_at":"2018-02-23T19:13:14.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.1.1","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.1.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.1.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.1.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.1.1/manifests"},{"name":"v2.1.0","sha":"3e6d767784b037b90a14701b6c9f0643f05db963","kind":"tag","published_at":"2018-02-23T19:02:00.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.1.0","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.1.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.1.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.1.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.1.0/manifests"},{"name":"v2.0.0","sha":"d670f9405373e636a5a2765eea47fac0c9bc91a4","kind":"tag","published_at":"2018-02-23T18:53:08.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.0.0","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.0.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.0.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.0.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.0.0/manifests"}]},"repo_metadata_updated_at":"2026-09-04T23:40:06.827Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":4.98566480365132,"dependent_packages_count":4.671703975317771,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":4.828684389484545},"purl":"pkg:golang/github.com/go-%21y%21a%21m%21l/yaml","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/go/github.com/go-YAML/yaml","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/go/github.com/go-YAML/yaml","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/go/github.com/go-YAML/yaml/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-09-04T22:05:44.168Z","issues_count":179,"pull_requests_count":117,"avg_time_to_close_issue":27337742.275,"avg_time_to_close_pull_request":54605651.71428572,"issues_closed_count":40,"pull_requests_closed_count":42,"pull_request_authors_count":78,"issue_authors_count":167,"avg_comments_per_issue":3.11731843575419,"avg_comments_per_pull_request":1.4700854700854702,"merged_pull_requests_count":3,"bot_issues_count":0,"bot_pull_requests_count":0,"past_year_issues_count":0,"past_year_pull_requests_count":0,"past_year_avg_time_to_close_issue":null,"past_year_avg_time_to_close_pull_request":null,"past_year_issues_closed_count":0,"past_year_pull_requests_closed_count":0,"past_year_pull_request_authors_count":0,"past_year_issue_authors_count":0,"past_year_avg_comments_per_issue":null,"past_year_avg_comments_per_pull_request":null,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":0,"past_year_merged_pull_requests_count":0,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/issues","maintainers":[],"active_maintainers":[]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fgo-YAML%2Fyaml/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fgo-YAML%2Fyaml/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fgo-YAML%2Fyaml/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fgo-YAML%2Fyaml/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fgo-YAML%2Fyaml/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fgo-YAML%2Fyaml/codemeta","maintainers":[],"registry":{"name":"proxy.golang.org","url":"https://proxy.golang.org","ecosystem":"go","default":true,"packages_count":2287853,"maintainers_count":0,"namespaces_count":839605,"keywords_count":126639,"github":"golang","metadata":{"funded_packages_count":74445,"sync_missing_packages_cursor":{"timestamp":"2026-09-07T00:07:19.468853Z","path":"github.com/herodotusdev/accumulators","version":"v4.2.0-alpha.1+incompatible"},"rate_limit":1},"icon_url":"https://github.com/golang.png","created_at":"2022-04-04T15:19:22.939Z","updated_at":"2026-09-07T00:08:13.518Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/namespaces"}},{"id":11110313,"name":"github.com/go-YAML/YAML","ecosystem":"go","description":"","homepage":"https://github.com/go-YAML/YAML","licenses":"other","normalized_licenses":["Other"],"repository_url":"https://github.com/go-YAML/YAML","keywords_array":[],"namespace":"github.com/go-YAML","versions_count":1,"first_release_published_at":"2014-09-22T21:32:25.000Z","latest_release_published_at":"2014-09-22T21:32:25.000Z","latest_release_number":"v0.0.0-20140922213225-bec87e4332ae","last_synced_at":"2026-09-06T23:30:26.234Z","created_at":"2024-12-04T09:23:36.468Z","updated_at":"2026-09-06T23:30:26.234Z","registry_url":"https://pkg.go.dev/github.com/go-YAML/YAML","install_command":"go get github.com/go-YAML/YAML","documentation_url":"https://pkg.go.dev/github.com/go-YAML/YAML#section-documentation","metadata":{},"repo_metadata":{"id":14730402,"uuid":"17451182","full_name":"go-yaml/yaml","owner":"go-yaml","description":"YAML support for the Go language.","archived":true,"fork":false,"pushed_at":"2025-04-01T17:00:11.000Z","size":1587,"stargazers_count":7018,"open_issues_count":422,"forks_count":1117,"subscribers_count":3,"default_branch":"v3","last_synced_at":"2026-09-02T19:07:29.914Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":null,"language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"other","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/go-yaml.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null}},"created_at":"2014-03-05T18:54:57.000Z","updated_at":"2026-09-02T18:56:31.000Z","dependencies_parsed_at":"2023-02-16T14:45:46.186Z","dependency_job_id":"c3f4f6d2-0694-43c1-a700-724512e371e7","html_url":"https://github.com/go-yaml/yaml","commit_stats":{"total_commits":302,"total_committers":48,"mean_commits":6.291666666666667,"dds":0.2814569536423841,"last_synced_commit":"f6f7691b1fdeb513f56608cd2c32c51f8194bf51"},"previous_names":["go-yaml/go-yaml-v1"],"tags_count":16,"template":false,"template_full_name":null,"purl":"pkg:github/go-yaml/yaml","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/go-yaml","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/refs/heads/v3","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/sbom","scorecard":{"id":432677,"data":{"date":"2025-08-11","repo":{"name":"github.com/go-yaml/yaml","commit":"944c86a7d29391925ed6ac33bee98a0516f1287a"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":4.4,"checks":[{"name":"Code-Review","score":2,"reason":"Found 6/27 approved changesets -- score normalized to 2","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Warn: no topLevel permission defined: .github/workflows/go.yaml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Maintained","score":0,"reason":"project is archived","details":["Warn: Repository is archived."],"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Pinned-Dependencies","score":3,"reason":"dependency not pinned by hash detected -- score normalized to 3","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/go.yaml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/go-yaml/yaml/go.yaml/v3?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/go.yaml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/go-yaml/yaml/go.yaml/v3?enable=pin","Info: 0 out of 2 GitHub-owned GitHubAction dependencies pinned","Info: 1 out of 1 goCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Security-Policy","score":0,"reason":"security policy file not detected","details":["Warn: no security policy file detected","Warn: no security file to analyze","Warn: no security file to analyze","Warn: no security file to analyze"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"License","score":9,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Warn: project license file does not contain an FSF or OSI license."],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Fuzzing","score":10,"reason":"project is fuzzed","details":["Info: OSSFuzz integration found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Branch-Protection","score":0,"reason":"branch protection not enabled on development/release branches","details":["Warn: branch protection not enabled for branch 'v3'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 9 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-19T03:43:53.386Z","repository_id":14730402,"created_at":"2025-08-19T03:43:53.386Z","updated_at":"2025-08-19T03:43:53.386Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":336071963,"owners_count":37020922,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-08-22T15:14:58.755Z","status":"online","status_checked_at":"2026-09-04T02:00:06.169Z","response_time":115,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"go-yaml","name":"go-yaml","uuid":"6823640","kind":"organization","description":null,"email":null,"website":null,"location":null,"twitter":null,"company":null,"icon_url":"https://avatars.githubusercontent.com/u/6823640?v=4","repositories_count":1,"last_synced_at":"2026-08-29T00:59:16.798Z","metadata":{"has_sponsors_listing":false,"funding":null},"html_url":"https://github.com/go-yaml","funding_links":[],"total_stars":7019,"followers":17,"following":0,"created_at":"2022-11-07T11:53:36.392Z","updated_at":"2026-08-29T00:59:16.811Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/go-yaml","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/go-yaml/repositories"},"tags":[{"name":"v3.0.1","sha":"f6f7691b1fdeb513f56608cd2c32c51f8194bf51","kind":"commit","published_at":"2022-05-27T08:35:30.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v3.0.1","html_url":"https://github.com/go-yaml/yaml/releases/tag/v3.0.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v3.0.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v3.0.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v3.0.1/manifests"},{"name":"v3.0.0","sha":"00bbc0947ae889b9e480044dbc3bc3e3216a6a89","kind":"commit","published_at":"2022-05-21T10:33:21.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v3.0.0","html_url":"https://github.com/go-yaml/yaml/releases/tag/v3.0.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v3.0.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v3.0.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v3.0.0/manifests"},{"name":"v2.4.0","sha":"7649d4548cb53a614db133b2a8ac1f31859dda8c","kind":"commit","published_at":"2020-11-17T15:46:20.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.4.0","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.4.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.4.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.4.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.4.0/manifests"},{"name":"v2.3.0","sha":"0b1645d91e851e735d3e23330303ce81f70adbe3","kind":"commit","published_at":"2020-05-06T23:08:38.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.3.0","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.3.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.3.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.3.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.3.0/manifests"},{"name":"v2.2.8","sha":"53403b58ad1b561927d19068c655246f2db79d48","kind":"commit","published_at":"2020-01-21T17:19:40.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.2.8","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.2.8","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.2.8","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.8","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.8/manifests"},{"name":"v2.2.7","sha":"1f64d6156d11335c3f22d9330b0ad14fc1e789ce","kind":"commit","published_at":"2019-11-19T21:27:36.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.2.7","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.2.7","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.2.7","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.7","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.7/manifests"},{"name":"v2.2.6","sha":"a95acef3719e5e9f7614cc90a119dee4699291eb","kind":"commit","published_at":"2019-11-19T11:51:43.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.2.6","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.2.6","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.2.6","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.6","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.6/manifests"},{"name":"v2.2.5","sha":"f90ceb4f409096b60e2e9076b38b304b8246e5fa","kind":"commit","published_at":"2019-11-04T18:03:43.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.2.5","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.2.5","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.2.5","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.5","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.5/manifests"},{"name":"v2.2.4","sha":"f221b8435cfb71e54062f6c6e99e9ade30b124d5","kind":"commit","published_at":"2019-10-02T18:33:36.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.2.4","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.2.4","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.2.4","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.4/manifests"},{"name":"v2.2.3","sha":"bb4e33bf68bf89cad44d386192cbed201f35b241","kind":"commit","published_at":"2019-09-30T19:09:21.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.2.3","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.2.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.2.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.3/manifests"},{"name":"v2.2.2","sha":"51d6538a90f86fe93ac480b35f37b2be17fef232","kind":"commit","published_at":"2018-11-15T11:05:04.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.2.2","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.2.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.2.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.2/manifests"},{"name":"v2.2.1","sha":"5420a8b6744d3b0345ab293f6fcba19c978f1183","kind":"commit","published_at":"2018-03-28T19:50:20.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.2.1","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.2.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.2.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.1/manifests"},{"name":"v2.2.0","sha":"86f5ed62f8a0ee96bd888d2efdfd6d4fb100a4eb","kind":"commit","published_at":"2018-03-26T05:07:29.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.2.0","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.2.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.2.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.0/manifests"},{"name":"v2.1.1","sha":"7f97868eec74b32b0982dd158a51a446d1da7eb5","kind":"tag","published_at":"2018-02-23T19:13:14.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.1.1","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.1.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.1.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.1.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.1.1/manifests"},{"name":"v2.1.0","sha":"3e6d767784b037b90a14701b6c9f0643f05db963","kind":"tag","published_at":"2018-02-23T19:02:00.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.1.0","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.1.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.1.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.1.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.1.0/manifests"},{"name":"v2.0.0","sha":"d670f9405373e636a5a2765eea47fac0c9bc91a4","kind":"tag","published_at":"2018-02-23T18:53:08.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.0.0","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.0.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.0.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.0.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.0.0/manifests"}]},"repo_metadata_updated_at":"2026-09-04T12:39:49.241Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":6.345954671501144,"dependent_packages_count":5.947086858228722,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":6.146520764864933},"purl":"pkg:golang/github.com/go-%21y%21a%21m%21l/%21y%21a%21m%21l","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/go/github.com/go-YAML/YAML","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/go/github.com/go-YAML/YAML","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/go/github.com/go-YAML/YAML/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-09-03T21:36:28.384Z","issues_count":179,"pull_requests_count":117,"avg_time_to_close_issue":27337742.275,"avg_time_to_close_pull_request":54605651.71428572,"issues_closed_count":40,"pull_requests_closed_count":42,"pull_request_authors_count":78,"issue_authors_count":167,"avg_comments_per_issue":3.11731843575419,"avg_comments_per_pull_request":1.4700854700854702,"merged_pull_requests_count":3,"bot_issues_count":0,"bot_pull_requests_count":0,"past_year_issues_count":0,"past_year_pull_requests_count":0,"past_year_avg_time_to_close_issue":null,"past_year_avg_time_to_close_pull_request":null,"past_year_issues_closed_count":0,"past_year_pull_requests_closed_count":0,"past_year_pull_request_authors_count":0,"past_year_issue_authors_count":0,"past_year_avg_comments_per_issue":null,"past_year_avg_comments_per_pull_request":null,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":0,"past_year_merged_pull_requests_count":0,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/issues","maintainers":[],"active_maintainers":[]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fgo-YAML%2FYAML/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fgo-YAML%2FYAML/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fgo-YAML%2FYAML/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fgo-YAML%2FYAML/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fgo-YAML%2FYAML/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fgo-YAML%2FYAML/codemeta","maintainers":[],"registry":{"name":"proxy.golang.org","url":"https://proxy.golang.org","ecosystem":"go","default":true,"packages_count":2287853,"maintainers_count":0,"namespaces_count":839605,"keywords_count":126639,"github":"golang","metadata":{"funded_packages_count":74445,"sync_missing_packages_cursor":{"timestamp":"2026-09-07T00:07:19.468853Z","path":"github.com/herodotusdev/accumulators","version":"v4.2.0-alpha.1+incompatible"},"rate_limit":1},"icon_url":"https://github.com/golang.png","created_at":"2022-04-04T15:19:22.939Z","updated_at":"2026-09-07T00:08:13.518Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/namespaces"}},{"id":14645335,"name":"github.com/Go-yaml/yaml","ecosystem":"go","description":"","homepage":"https://github.com/Go-yaml/yaml","licenses":"other","normalized_licenses":["Other"],"repository_url":"https://github.com/Go-yaml/yaml","keywords_array":[],"namespace":"github.com/Go-yaml","versions_count":1,"first_release_published_at":"2014-09-22T21:32:25.000Z","latest_release_published_at":"2014-09-22T21:32:25.000Z","latest_release_number":"v0.0.0-20140922213225-bec87e4332ae","last_synced_at":"2026-09-06T23:31:21.023Z","created_at":"2026-06-17T13:31:46.072Z","updated_at":"2026-09-06T23:31:21.023Z","registry_url":"https://pkg.go.dev/github.com/Go-yaml/yaml","install_command":"go get github.com/Go-yaml/yaml","documentation_url":"https://pkg.go.dev/github.com/Go-yaml/yaml#section-documentation","metadata":{},"repo_metadata":{"id":14730402,"uuid":"17451182","full_name":"go-yaml/yaml","owner":"go-yaml","description":"YAML support for the Go language.","archived":true,"fork":false,"pushed_at":"2025-04-01T17:00:11.000Z","size":1587,"stargazers_count":7018,"open_issues_count":422,"forks_count":1117,"subscribers_count":3,"default_branch":"v3","last_synced_at":"2026-09-02T19:07:29.914Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":null,"language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"other","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/go-yaml.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null}},"created_at":"2014-03-05T18:54:57.000Z","updated_at":"2026-09-02T18:56:31.000Z","dependencies_parsed_at":"2023-02-16T14:45:46.186Z","dependency_job_id":"c3f4f6d2-0694-43c1-a700-724512e371e7","html_url":"https://github.com/go-yaml/yaml","commit_stats":{"total_commits":302,"total_committers":48,"mean_commits":6.291666666666667,"dds":0.2814569536423841,"last_synced_commit":"f6f7691b1fdeb513f56608cd2c32c51f8194bf51"},"previous_names":["go-yaml/go-yaml-v1"],"tags_count":16,"template":false,"template_full_name":null,"purl":"pkg:github/go-yaml/yaml","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/go-yaml","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/refs/heads/v3","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/sbom","scorecard":{"id":432677,"data":{"date":"2025-08-11","repo":{"name":"github.com/go-yaml/yaml","commit":"944c86a7d29391925ed6ac33bee98a0516f1287a"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":4.4,"checks":[{"name":"Code-Review","score":2,"reason":"Found 6/27 approved changesets -- score normalized to 2","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Warn: no topLevel permission defined: .github/workflows/go.yaml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Maintained","score":0,"reason":"project is archived","details":["Warn: Repository is archived."],"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Pinned-Dependencies","score":3,"reason":"dependency not pinned by hash detected -- score normalized to 3","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/go.yaml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/go-yaml/yaml/go.yaml/v3?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/go.yaml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/go-yaml/yaml/go.yaml/v3?enable=pin","Info: 0 out of 2 GitHub-owned GitHubAction dependencies pinned","Info: 1 out of 1 goCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Security-Policy","score":0,"reason":"security policy file not detected","details":["Warn: no security policy file detected","Warn: no security file to analyze","Warn: no security file to analyze","Warn: no security file to analyze"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"License","score":9,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Warn: project license file does not contain an FSF or OSI license."],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Fuzzing","score":10,"reason":"project is fuzzed","details":["Info: OSSFuzz integration found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Branch-Protection","score":0,"reason":"branch protection not enabled on development/release branches","details":["Warn: branch protection not enabled for branch 'v3'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 9 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-19T03:43:53.386Z","repository_id":14730402,"created_at":"2025-08-19T03:43:53.386Z","updated_at":"2025-08-19T03:43:53.386Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":336071963,"owners_count":37021023,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-08-22T15:14:58.755Z","status":"online","status_checked_at":"2026-09-04T02:00:06.169Z","response_time":115,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"go-yaml","name":"go-yaml","uuid":"6823640","kind":"organization","description":null,"email":null,"website":null,"location":null,"twitter":null,"company":null,"icon_url":"https://avatars.githubusercontent.com/u/6823640?v=4","repositories_count":1,"last_synced_at":"2026-08-29T00:59:16.798Z","metadata":{"has_sponsors_listing":false,"funding":null},"html_url":"https://github.com/go-yaml","funding_links":[],"total_stars":7019,"followers":17,"following":0,"created_at":"2022-11-07T11:53:36.392Z","updated_at":"2026-08-29T00:59:16.811Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/go-yaml","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/go-yaml/repositories"},"tags":[{"name":"v3.0.1","sha":"f6f7691b1fdeb513f56608cd2c32c51f8194bf51","kind":"commit","published_at":"2022-05-27T08:35:30.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v3.0.1","html_url":"https://github.com/go-yaml/yaml/releases/tag/v3.0.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v3.0.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v3.0.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v3.0.1/manifests"},{"name":"v3.0.0","sha":"00bbc0947ae889b9e480044dbc3bc3e3216a6a89","kind":"commit","published_at":"2022-05-21T10:33:21.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v3.0.0","html_url":"https://github.com/go-yaml/yaml/releases/tag/v3.0.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v3.0.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v3.0.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v3.0.0/manifests"},{"name":"v2.4.0","sha":"7649d4548cb53a614db133b2a8ac1f31859dda8c","kind":"commit","published_at":"2020-11-17T15:46:20.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.4.0","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.4.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.4.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.4.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.4.0/manifests"},{"name":"v2.3.0","sha":"0b1645d91e851e735d3e23330303ce81f70adbe3","kind":"commit","published_at":"2020-05-06T23:08:38.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.3.0","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.3.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.3.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.3.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.3.0/manifests"},{"name":"v2.2.8","sha":"53403b58ad1b561927d19068c655246f2db79d48","kind":"commit","published_at":"2020-01-21T17:19:40.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.2.8","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.2.8","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.2.8","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.8","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.8/manifests"},{"name":"v2.2.7","sha":"1f64d6156d11335c3f22d9330b0ad14fc1e789ce","kind":"commit","published_at":"2019-11-19T21:27:36.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.2.7","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.2.7","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.2.7","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.7","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.7/manifests"},{"name":"v2.2.6","sha":"a95acef3719e5e9f7614cc90a119dee4699291eb","kind":"commit","published_at":"2019-11-19T11:51:43.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.2.6","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.2.6","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.2.6","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.6","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.6/manifests"},{"name":"v2.2.5","sha":"f90ceb4f409096b60e2e9076b38b304b8246e5fa","kind":"commit","published_at":"2019-11-04T18:03:43.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.2.5","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.2.5","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.2.5","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.5","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.5/manifests"},{"name":"v2.2.4","sha":"f221b8435cfb71e54062f6c6e99e9ade30b124d5","kind":"commit","published_at":"2019-10-02T18:33:36.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.2.4","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.2.4","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.2.4","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.4/manifests"},{"name":"v2.2.3","sha":"bb4e33bf68bf89cad44d386192cbed201f35b241","kind":"commit","published_at":"2019-09-30T19:09:21.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.2.3","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.2.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.2.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.3/manifests"},{"name":"v2.2.2","sha":"51d6538a90f86fe93ac480b35f37b2be17fef232","kind":"commit","published_at":"2018-11-15T11:05:04.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.2.2","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.2.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.2.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.2/manifests"},{"name":"v2.2.1","sha":"5420a8b6744d3b0345ab293f6fcba19c978f1183","kind":"commit","published_at":"2018-03-28T19:50:20.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.2.1","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.2.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.2.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.1/manifests"},{"name":"v2.2.0","sha":"86f5ed62f8a0ee96bd888d2efdfd6d4fb100a4eb","kind":"commit","published_at":"2018-03-26T05:07:29.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.2.0","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.2.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.2.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.0/manifests"},{"name":"v2.1.1","sha":"7f97868eec74b32b0982dd158a51a446d1da7eb5","kind":"tag","published_at":"2018-02-23T19:13:14.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.1.1","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.1.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.1.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.1.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.1.1/manifests"},{"name":"v2.1.0","sha":"3e6d767784b037b90a14701b6c9f0643f05db963","kind":"tag","published_at":"2018-02-23T19:02:00.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.1.0","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.1.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.1.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.1.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.1.0/manifests"},{"name":"v2.0.0","sha":"d670f9405373e636a5a2765eea47fac0c9bc91a4","kind":"tag","published_at":"2018-02-23T18:53:08.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.0.0","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.0.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.0.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.0.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.0.0/manifests"}]},"repo_metadata_updated_at":"2026-09-04T13:46:10.668Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":4.98566480365132,"dependent_packages_count":4.671703975317771,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":4.828684389484545},"purl":"pkg:golang/github.com/%21go-yaml/yaml","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/go/github.com/Go-yaml/yaml","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/go/github.com/Go-yaml/yaml","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/go/github.com/Go-yaml/yaml/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-09-03T21:36:28.384Z","issues_count":179,"pull_requests_count":117,"avg_time_to_close_issue":27337742.275,"avg_time_to_close_pull_request":54605651.71428572,"issues_closed_count":40,"pull_requests_closed_count":42,"pull_request_authors_count":78,"issue_authors_count":167,"avg_comments_per_issue":3.11731843575419,"avg_comments_per_pull_request":1.4700854700854702,"merged_pull_requests_count":3,"bot_issues_count":0,"bot_pull_requests_count":0,"past_year_issues_count":0,"past_year_pull_requests_count":0,"past_year_avg_time_to_close_issue":null,"past_year_avg_time_to_close_pull_request":null,"past_year_issues_closed_count":0,"past_year_pull_requests_closed_count":0,"past_year_pull_request_authors_count":0,"past_year_issue_authors_count":0,"past_year_avg_comments_per_issue":null,"past_year_avg_comments_per_pull_request":null,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":0,"past_year_merged_pull_requests_count":0,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/issues","maintainers":[],"active_maintainers":[]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2FGo-yaml%2Fyaml/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2FGo-yaml%2Fyaml/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2FGo-yaml%2Fyaml/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2FGo-yaml%2Fyaml/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2FGo-yaml%2Fyaml/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2FGo-yaml%2Fyaml/codemeta","maintainers":[],"registry":{"name":"proxy.golang.org","url":"https://proxy.golang.org","ecosystem":"go","default":true,"packages_count":2287853,"maintainers_count":0,"namespaces_count":839605,"keywords_count":126639,"github":"golang","metadata":{"funded_packages_count":74445,"sync_missing_packages_cursor":{"timestamp":"2026-09-07T00:07:19.468853Z","path":"github.com/herodotusdev/accumulators","version":"v4.2.0-alpha.1+incompatible"},"rate_limit":1},"icon_url":"https://github.com/golang.png","created_at":"2022-04-04T15:19:22.939Z","updated_at":"2026-09-07T00:08:13.518Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/namespaces"}},{"id":3848969,"name":"gopkg.in/go-yaml/yaml.v1","ecosystem":"go","description":"Package yaml implements YAML support for the Go language.","homepage":"https://github.com/go-yaml/yaml","licenses":"LGPL-3.0","normalized_licenses":["LGPL-3.0"],"repository_url":"https://github.com/go-yaml/yaml","keywords_array":[],"namespace":"gopkg.in/go-yaml","versions_count":0,"first_release_published_at":null,"latest_release_published_at":"2026-09-06T23:38:28.512Z","latest_release_number":null,"last_synced_at":"2026-09-06T23:38:29.151Z","created_at":"2022-04-11T21:02:43.098Z","updated_at":"2026-09-06T23:38:29.151Z","registry_url":"https://pkg.go.dev/gopkg.in/go-yaml/yaml.v1","install_command":"go get gopkg.in/go-yaml/yaml.v1","documentation_url":"https://pkg.go.dev/gopkg.in/go-yaml/yaml.v1#section-documentation","metadata":{},"repo_metadata":{"id":14730402,"uuid":"17451182","full_name":"go-yaml/yaml","owner":"go-yaml","description":"YAML support for the Go language.","archived":true,"fork":false,"pushed_at":"2025-04-01T17:00:11.000Z","size":1587,"stargazers_count":7018,"open_issues_count":422,"forks_count":1117,"subscribers_count":3,"default_branch":"v3","last_synced_at":"2026-09-02T19:07:29.914Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":null,"language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"other","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/go-yaml.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null}},"created_at":"2014-03-05T18:54:57.000Z","updated_at":"2026-09-02T18:56:31.000Z","dependencies_parsed_at":"2023-02-16T14:45:46.186Z","dependency_job_id":"c3f4f6d2-0694-43c1-a700-724512e371e7","html_url":"https://github.com/go-yaml/yaml","commit_stats":{"total_commits":302,"total_committers":48,"mean_commits":6.291666666666667,"dds":0.2814569536423841,"last_synced_commit":"f6f7691b1fdeb513f56608cd2c32c51f8194bf51"},"previous_names":["go-yaml/go-yaml-v1"],"tags_count":16,"template":false,"template_full_name":null,"purl":"pkg:github/go-yaml/yaml","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/go-yaml","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/refs/heads/v3","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/sbom","scorecard":{"id":432677,"data":{"date":"2025-08-11","repo":{"name":"github.com/go-yaml/yaml","commit":"944c86a7d29391925ed6ac33bee98a0516f1287a"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":4.4,"checks":[{"name":"Code-Review","score":2,"reason":"Found 6/27 approved changesets -- score normalized to 2","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Warn: no topLevel permission defined: .github/workflows/go.yaml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Maintained","score":0,"reason":"project is archived","details":["Warn: Repository is archived."],"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Pinned-Dependencies","score":3,"reason":"dependency not pinned by hash detected -- score normalized to 3","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/go.yaml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/go-yaml/yaml/go.yaml/v3?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/go.yaml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/go-yaml/yaml/go.yaml/v3?enable=pin","Info: 0 out of 2 GitHub-owned GitHubAction dependencies pinned","Info: 1 out of 1 goCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Security-Policy","score":0,"reason":"security policy file not detected","details":["Warn: no security policy file detected","Warn: no security file to analyze","Warn: no security file to analyze","Warn: no security file to analyze"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"License","score":9,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Warn: project license file does not contain an FSF or OSI license."],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Fuzzing","score":10,"reason":"project is fuzzed","details":["Info: OSSFuzz integration found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Branch-Protection","score":0,"reason":"branch protection not enabled on development/release branches","details":["Warn: branch protection not enabled for branch 'v3'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 9 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-19T03:43:53.386Z","repository_id":14730402,"created_at":"2025-08-19T03:43:53.386Z","updated_at":"2025-08-19T03:43:53.386Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":37019155,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-08-22T15:14:58.755Z","status":"online","status_checked_at":"2026-09-02T02:00:06.194Z","response_time":106,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"go-yaml","name":"go-yaml","uuid":"6823640","kind":"organization","description":null,"email":null,"website":null,"location":null,"twitter":null,"company":null,"icon_url":"https://avatars.githubusercontent.com/u/6823640?v=4","repositories_count":1,"last_synced_at":"2026-08-29T00:59:16.798Z","metadata":{"has_sponsors_listing":false,"funding":null},"html_url":"https://github.com/go-yaml","funding_links":[],"total_stars":7019,"followers":17,"following":0,"created_at":"2022-11-07T11:53:36.392Z","updated_at":"2026-08-29T00:59:16.811Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/go-yaml","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/go-yaml/repositories"},"tags":[{"name":"v3.0.1","sha":"f6f7691b1fdeb513f56608cd2c32c51f8194bf51","kind":"commit","published_at":"2022-05-27T08:35:30.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v3.0.1","html_url":"https://github.com/go-yaml/yaml/releases/tag/v3.0.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v3.0.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v3.0.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v3.0.1/manifests"},{"name":"v3.0.0","sha":"00bbc0947ae889b9e480044dbc3bc3e3216a6a89","kind":"commit","published_at":"2022-05-21T10:33:21.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v3.0.0","html_url":"https://github.com/go-yaml/yaml/releases/tag/v3.0.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v3.0.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v3.0.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v3.0.0/manifests"},{"name":"v2.4.0","sha":"7649d4548cb53a614db133b2a8ac1f31859dda8c","kind":"commit","published_at":"2020-11-17T15:46:20.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.4.0","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.4.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.4.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.4.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.4.0/manifests"},{"name":"v2.3.0","sha":"0b1645d91e851e735d3e23330303ce81f70adbe3","kind":"commit","published_at":"2020-05-06T23:08:38.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.3.0","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.3.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.3.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.3.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.3.0/manifests"},{"name":"v2.2.8","sha":"53403b58ad1b561927d19068c655246f2db79d48","kind":"commit","published_at":"2020-01-21T17:19:40.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.2.8","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.2.8","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.2.8","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.8","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.8/manifests"},{"name":"v2.2.7","sha":"1f64d6156d11335c3f22d9330b0ad14fc1e789ce","kind":"commit","published_at":"2019-11-19T21:27:36.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.2.7","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.2.7","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.2.7","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.7","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.7/manifests"},{"name":"v2.2.6","sha":"a95acef3719e5e9f7614cc90a119dee4699291eb","kind":"commit","published_at":"2019-11-19T11:51:43.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.2.6","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.2.6","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.2.6","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.6","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.6/manifests"},{"name":"v2.2.5","sha":"f90ceb4f409096b60e2e9076b38b304b8246e5fa","kind":"commit","published_at":"2019-11-04T18:03:43.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.2.5","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.2.5","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.2.5","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.5","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.5/manifests"},{"name":"v2.2.4","sha":"f221b8435cfb71e54062f6c6e99e9ade30b124d5","kind":"commit","published_at":"2019-10-02T18:33:36.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.2.4","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.2.4","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.2.4","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.4/manifests"},{"name":"v2.2.3","sha":"bb4e33bf68bf89cad44d386192cbed201f35b241","kind":"commit","published_at":"2019-09-30T19:09:21.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.2.3","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.2.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.2.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.3/manifests"},{"name":"v2.2.2","sha":"51d6538a90f86fe93ac480b35f37b2be17fef232","kind":"commit","published_at":"2018-11-15T11:05:04.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.2.2","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.2.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.2.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.2/manifests"},{"name":"v2.2.1","sha":"5420a8b6744d3b0345ab293f6fcba19c978f1183","kind":"commit","published_at":"2018-03-28T19:50:20.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.2.1","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.2.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.2.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.1/manifests"},{"name":"v2.2.0","sha":"86f5ed62f8a0ee96bd888d2efdfd6d4fb100a4eb","kind":"commit","published_at":"2018-03-26T05:07:29.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.2.0","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.2.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.2.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.0/manifests"},{"name":"v2.1.1","sha":"7f97868eec74b32b0982dd158a51a446d1da7eb5","kind":"tag","published_at":"2018-02-23T19:13:14.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.1.1","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.1.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.1.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.1.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.1.1/manifests"},{"name":"v2.1.0","sha":"3e6d767784b037b90a14701b6c9f0643f05db963","kind":"tag","published_at":"2018-02-23T19:02:00.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.1.0","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.1.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.1.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.1.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.1.0/manifests"},{"name":"v2.0.0","sha":"d670f9405373e636a5a2765eea47fac0c9bc91a4","kind":"tag","published_at":"2018-02-23T18:53:08.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.0.0","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.0.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.0.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.0.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.0.0/manifests"}]},"repo_metadata_updated_at":"2026-09-03T14:27:16.879Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":9.345852080216646,"dependent_packages_count":6.999148183520997,"stargazers_count":0.5486865304134396,"forks_count":0.6032297199779583,"average":4.37422912853226},"purl":"pkg:golang/gopkg.in/go-yaml/yaml.v1","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/go/gopkg.in/go-yaml/yaml.v1","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/go/gopkg.in/go-yaml/yaml.v1","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/go/gopkg.in/go-yaml/yaml.v1/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-09-02T21:28:34.859Z","issues_count":179,"pull_requests_count":117,"avg_time_to_close_issue":27337742.275,"avg_time_to_close_pull_request":54605651.71428572,"issues_closed_count":40,"pull_requests_closed_count":42,"pull_request_authors_count":78,"issue_authors_count":167,"avg_comments_per_issue":3.11731843575419,"avg_comments_per_pull_request":1.4700854700854702,"merged_pull_requests_count":3,"bot_issues_count":0,"bot_pull_requests_count":0,"past_year_issues_count":0,"past_year_pull_requests_count":0,"past_year_avg_time_to_close_issue":null,"past_year_avg_time_to_close_pull_request":null,"past_year_issues_closed_count":0,"past_year_pull_requests_closed_count":0,"past_year_pull_request_authors_count":0,"past_year_issue_authors_count":0,"past_year_avg_comments_per_issue":null,"past_year_avg_comments_per_pull_request":null,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":0,"past_year_merged_pull_requests_count":0,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/issues","maintainers":[],"active_maintainers":[]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/gopkg.in%2Fgo-yaml%2Fyaml.v1/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/gopkg.in%2Fgo-yaml%2Fyaml.v1/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/gopkg.in%2Fgo-yaml%2Fyaml.v1/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/gopkg.in%2Fgo-yaml%2Fyaml.v1/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/gopkg.in%2Fgo-yaml%2Fyaml.v1/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/gopkg.in%2Fgo-yaml%2Fyaml.v1/codemeta","maintainers":[],"registry":{"name":"proxy.golang.org","url":"https://proxy.golang.org","ecosystem":"go","default":true,"packages_count":2287853,"maintainers_count":0,"namespaces_count":839605,"keywords_count":126639,"github":"golang","metadata":{"funded_packages_count":74445,"sync_missing_packages_cursor":{"timestamp":"2026-09-07T00:07:19.468853Z","path":"github.com/herodotusdev/accumulators","version":"v4.2.0-alpha.1+incompatible"},"rate_limit":1},"icon_url":"https://github.com/golang.png","created_at":"2022-04-04T15:19:22.939Z","updated_at":"2026-09-07T00:08:13.518Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/namespaces"}},{"id":3494119,"name":"github.com/go-yaml/yaml","ecosystem":"go","description":"Package yaml implements YAML support for the Go language.","homepage":"https://github.com/go-yaml/yaml","licenses":"Apache-2.0","normalized_licenses":["Apache-2.0"],"repository_url":"https://github.com/go-yaml/yaml","keywords_array":[],"namespace":"github.com/go-yaml","versions_count":2,"first_release_published_at":"2018-01-09T11:43:31.000Z","latest_release_published_at":"2018-02-23T19:01:16.000Z","latest_release_number":"v2.1.0+incompatible","last_synced_at":"2026-09-07T10:16:57.332Z","created_at":"2022-04-10T19:22:08.747Z","updated_at":"2026-09-07T10:16:57.332Z","registry_url":"https://pkg.go.dev/github.com/go-yaml/yaml","install_command":"go get github.com/go-yaml/yaml","documentation_url":"https://pkg.go.dev/github.com/go-yaml/yaml#section-documentation","metadata":{},"repo_metadata":{"id":14730402,"uuid":"17451182","full_name":"go-yaml/yaml","owner":"go-yaml","description":"YAML support for the Go language.","archived":true,"fork":false,"pushed_at":"2025-04-01T17:00:11.000Z","size":1587,"stargazers_count":7018,"open_issues_count":422,"forks_count":1117,"subscribers_count":3,"default_branch":"v3","last_synced_at":"2026-09-02T19:07:29.914Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":null,"language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"other","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/go-yaml.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null}},"created_at":"2014-03-05T18:54:57.000Z","updated_at":"2026-09-02T18:56:31.000Z","dependencies_parsed_at":"2023-02-16T14:45:46.186Z","dependency_job_id":"c3f4f6d2-0694-43c1-a700-724512e371e7","html_url":"https://github.com/go-yaml/yaml","commit_stats":{"total_commits":302,"total_committers":48,"mean_commits":6.291666666666667,"dds":0.2814569536423841,"last_synced_commit":"f6f7691b1fdeb513f56608cd2c32c51f8194bf51"},"previous_names":["go-yaml/go-yaml-v1"],"tags_count":16,"template":false,"template_full_name":null,"purl":"pkg:github/go-yaml/yaml","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/go-yaml","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/refs/heads/v3","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/sbom","scorecard":{"id":432677,"data":{"date":"2025-08-11","repo":{"name":"github.com/go-yaml/yaml","commit":"944c86a7d29391925ed6ac33bee98a0516f1287a"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":4.4,"checks":[{"name":"Code-Review","score":2,"reason":"Found 6/27 approved changesets -- score normalized to 2","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Warn: no topLevel permission defined: .github/workflows/go.yaml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Maintained","score":0,"reason":"project is archived","details":["Warn: Repository is archived."],"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Pinned-Dependencies","score":3,"reason":"dependency not pinned by hash detected -- score normalized to 3","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/go.yaml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/go-yaml/yaml/go.yaml/v3?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/go.yaml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/go-yaml/yaml/go.yaml/v3?enable=pin","Info: 0 out of 2 GitHub-owned GitHubAction dependencies pinned","Info: 1 out of 1 goCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Security-Policy","score":0,"reason":"security policy file not detected","details":["Warn: no security policy file detected","Warn: no security file to analyze","Warn: no security file to analyze","Warn: no security file to analyze"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"License","score":9,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Warn: project license file does not contain an FSF or OSI license."],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Fuzzing","score":10,"reason":"project is fuzzed","details":["Info: OSSFuzz integration found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Branch-Protection","score":0,"reason":"branch protection not enabled on development/release branches","details":["Warn: branch protection not enabled for branch 'v3'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 9 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-19T03:43:53.386Z","repository_id":14730402,"created_at":"2025-08-19T03:43:53.386Z","updated_at":"2025-08-19T03:43:53.386Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":37019155,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-08-22T15:14:58.755Z","status":"online","status_checked_at":"2026-09-02T02:00:06.194Z","response_time":106,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"go-yaml","name":"go-yaml","uuid":"6823640","kind":"organization","description":null,"email":null,"website":null,"location":null,"twitter":null,"company":null,"icon_url":"https://avatars.githubusercontent.com/u/6823640?v=4","repositories_count":1,"last_synced_at":"2026-08-29T00:59:16.798Z","metadata":{"has_sponsors_listing":false,"funding":null},"html_url":"https://github.com/go-yaml","funding_links":[],"total_stars":7019,"followers":17,"following":0,"created_at":"2022-11-07T11:53:36.392Z","updated_at":"2026-08-29T00:59:16.811Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/go-yaml","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/go-yaml/repositories"},"tags":[{"name":"v3.0.1","sha":"f6f7691b1fdeb513f56608cd2c32c51f8194bf51","kind":"commit","published_at":"2022-05-27T08:35:30.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v3.0.1","html_url":"https://github.com/go-yaml/yaml/releases/tag/v3.0.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v3.0.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v3.0.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v3.0.1/manifests"},{"name":"v3.0.0","sha":"00bbc0947ae889b9e480044dbc3bc3e3216a6a89","kind":"commit","published_at":"2022-05-21T10:33:21.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v3.0.0","html_url":"https://github.com/go-yaml/yaml/releases/tag/v3.0.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v3.0.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v3.0.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v3.0.0/manifests"},{"name":"v2.4.0","sha":"7649d4548cb53a614db133b2a8ac1f31859dda8c","kind":"commit","published_at":"2020-11-17T15:46:20.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.4.0","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.4.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.4.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.4.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.4.0/manifests"},{"name":"v2.3.0","sha":"0b1645d91e851e735d3e23330303ce81f70adbe3","kind":"commit","published_at":"2020-05-06T23:08:38.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.3.0","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.3.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.3.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.3.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.3.0/manifests"},{"name":"v2.2.8","sha":"53403b58ad1b561927d19068c655246f2db79d48","kind":"commit","published_at":"2020-01-21T17:19:40.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.2.8","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.2.8","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.2.8","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.8","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.8/manifests"},{"name":"v2.2.7","sha":"1f64d6156d11335c3f22d9330b0ad14fc1e789ce","kind":"commit","published_at":"2019-11-19T21:27:36.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.2.7","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.2.7","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.2.7","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.7","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.7/manifests"},{"name":"v2.2.6","sha":"a95acef3719e5e9f7614cc90a119dee4699291eb","kind":"commit","published_at":"2019-11-19T11:51:43.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.2.6","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.2.6","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.2.6","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.6","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.6/manifests"},{"name":"v2.2.5","sha":"f90ceb4f409096b60e2e9076b38b304b8246e5fa","kind":"commit","published_at":"2019-11-04T18:03:43.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.2.5","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.2.5","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.2.5","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.5","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.5/manifests"},{"name":"v2.2.4","sha":"f221b8435cfb71e54062f6c6e99e9ade30b124d5","kind":"commit","published_at":"2019-10-02T18:33:36.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.2.4","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.2.4","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.2.4","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.4/manifests"},{"name":"v2.2.3","sha":"bb4e33bf68bf89cad44d386192cbed201f35b241","kind":"commit","published_at":"2019-09-30T19:09:21.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.2.3","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.2.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.2.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.3/manifests"},{"name":"v2.2.2","sha":"51d6538a90f86fe93ac480b35f37b2be17fef232","kind":"commit","published_at":"2018-11-15T11:05:04.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.2.2","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.2.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.2.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.2/manifests"},{"name":"v2.2.1","sha":"5420a8b6744d3b0345ab293f6fcba19c978f1183","kind":"commit","published_at":"2018-03-28T19:50:20.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.2.1","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.2.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.2.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.1/manifests"},{"name":"v2.2.0","sha":"86f5ed62f8a0ee96bd888d2efdfd6d4fb100a4eb","kind":"commit","published_at":"2018-03-26T05:07:29.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.2.0","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.2.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.2.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.0/manifests"},{"name":"v2.1.1","sha":"7f97868eec74b32b0982dd158a51a446d1da7eb5","kind":"tag","published_at":"2018-02-23T19:13:14.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.1.1","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.1.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.1.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.1.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.1.1/manifests"},{"name":"v2.1.0","sha":"3e6d767784b037b90a14701b6c9f0643f05db963","kind":"tag","published_at":"2018-02-23T19:02:00.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.1.0","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.1.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.1.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.1.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.1.0/manifests"},{"name":"v2.0.0","sha":"d670f9405373e636a5a2765eea47fac0c9bc91a4","kind":"tag","published_at":"2018-02-23T18:53:08.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.0.0","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.0.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.0.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.0.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.0.0/manifests"}]},"repo_metadata_updated_at":"2026-09-03T19:32:53.741Z","dependent_packages_count":864,"downloads":null,"downloads_period":null,"dependent_repos_count":1948,"rankings":{"downloads":null,"dependent_repos_count":0.1846893465045908,"dependent_packages_count":0.1323777787921669,"stargazers_count":0.8346797024230496,"forks_count":0.8659970424816607,"docker_downloads_count":0.4224729913866945,"average":0.4880433723176325},"purl":"pkg:golang/github.com/go-yaml/yaml","advisories":[{"uuid":"MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLXd4YzQtZjRtNi13d3F2","url":"https://github.com/advisories/GHSA-wxc4-f4m6-wwqv","title":"Excessive Platform Resource Consumption within a Loop in Kubernetes","description":"The Kubernetes API Server component in versions 1.1-1.14, and versions prior to 1.15.10, 1.16.7 and 1.17.3 allows an authorized user who sends malicious YAML payloads to cause the kube-apiserver to consume excessive CPU cycles while parsing YAML.","origin":"UNSPECIFIED","severity":"MODERATE","published_at":"2021-12-20T16:55:06.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":6.5,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","references":["https://nvd.nist.gov/vuln/detail/CVE-2019-11254","https://github.com/kubernetes/kubernetes/issues/89535","https://github.com/kubernetes/kubernetes/pull/87467/commits/b86df2bec4f377afc0ca03482ffad2f0a49a83b8","https://github.com/go-yaml/yaml/commit/53403b58ad1b561927d19068c655246f2db79d48","https://groups.google.com/d/msg/kubernetes-announce/ALL9s73E5ck/4yHe8J-PBAAJ","https://security.netapp.com/advisory/ntap-20200413-0003/","https://github.com/go-yaml/yaml/pull/555","https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=18496","https://pkg.go.dev/vuln/GO-2020-0036","https://github.com/advisories/GHSA-wxc4-f4m6-wwqv"],"source_kind":"github","identifiers":["GHSA-wxc4-f4m6-wwqv","CVE-2019-11254"],"repository_url":"https://github.com/kubernetes/kubernetes","blast_radius":0.0,"created_at":"2022-12-21T16:13:04.796Z","updated_at":"2026-08-31T20:11:41.057Z","epss_percentage":0.03072,"epss_percentile":0.86507,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLXd4YzQtZjRtNi13d3F2","html_url":"https://advisories.ecosyste.ms/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLXd4YzQtZjRtNi13d3F2","packages":[{"ecosystem":"go","package_name":"github.com/go-yaml/yaml","versions":[{"first_patched_version":null,"vulnerable_version_range":"\u003c= 2.1.0"}],"purl":"pkg:go/github.com%2Fgo-yaml%2Fyaml"}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLXd4YzQtZjRtNi13d3F2/related_packages","related_advisories":[]}],"docker_usage_url":"https://docker.ecosyste.ms/usage/go/github.com/go-yaml/yaml","docker_dependents_count":191,"docker_downloads_count":9910598,"usage_url":"https://repos.ecosyste.ms/usage/go/github.com/go-yaml/yaml","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/go/github.com/go-yaml/yaml/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-09-02T21:28:34.859Z","issues_count":179,"pull_requests_count":117,"avg_time_to_close_issue":27337742.275,"avg_time_to_close_pull_request":54605651.71428572,"issues_closed_count":40,"pull_requests_closed_count":42,"pull_request_authors_count":78,"issue_authors_count":167,"avg_comments_per_issue":3.11731843575419,"avg_comments_per_pull_request":1.4700854700854702,"merged_pull_requests_count":3,"bot_issues_count":0,"bot_pull_requests_count":0,"past_year_issues_count":0,"past_year_pull_requests_count":0,"past_year_avg_time_to_close_issue":null,"past_year_avg_time_to_close_pull_request":null,"past_year_issues_closed_count":0,"past_year_pull_requests_closed_count":0,"past_year_pull_request_authors_count":0,"past_year_issue_authors_count":0,"past_year_avg_comments_per_issue":null,"past_year_avg_comments_per_pull_request":null,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":0,"past_year_merged_pull_requests_count":0,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/issues","maintainers":[],"active_maintainers":[]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fgo-yaml%2Fyaml/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fgo-yaml%2Fyaml/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fgo-yaml%2Fyaml/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fgo-yaml%2Fyaml/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fgo-yaml%2Fyaml/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fgo-yaml%2Fyaml/codemeta","maintainers":[],"registry":{"name":"proxy.golang.org","url":"https://proxy.golang.org","ecosystem":"go","default":true,"packages_count":2287853,"maintainers_count":0,"namespaces_count":839605,"keywords_count":126639,"github":"golang","metadata":{"funded_packages_count":74445,"sync_missing_packages_cursor":{"timestamp":"2026-09-07T00:07:19.468853Z","path":"github.com/herodotusdev/accumulators","version":"v4.2.0-alpha.1+incompatible"},"rate_limit":1},"icon_url":"https://github.com/golang.png","created_at":"2022-04-04T15:19:22.939Z","updated_at":"2026-09-07T00:08:13.518Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/namespaces"}},{"id":13506664,"name":"golang-yaml.v2","ecosystem":"debian","description":null,"homepage":"https://github.com/go-yaml/yaml/tree/v2","licenses":"other","normalized_licenses":[],"repository_url":"https://github.com/go-yaml/yaml","keywords_array":["golang"],"namespace":"main","versions_count":1,"first_release_published_at":"2026-02-10T19:12:35.005Z","latest_release_published_at":"2026-02-10T19:12:35.005Z","latest_release_number":"2.4.0-1","last_synced_at":"2026-08-21T03:29:46.489Z","created_at":"2026-02-10T19:12:34.773Z","updated_at":"2026-09-07T23:00:59.507Z","registry_url":"https://tracker.debian.org/pkg/golang-yaml.v2","install_command":"apt-get install golang-yaml.v2","documentation_url":"https://packages.debian.org/bullseye/golang-yaml.v2","metadata":{"component":"main","architecture":"all","priority":"extra","binary":"golang-gopkg-yaml.v2-dev","standards_version":"4.5.1","maintainer":"Debian Go Packaging Team \u003cteam+pkg-go@tracker.debian.org\u003e","build_depends":"debhelper-compat (= 12), dh-golang (\u003e= 1.10), golang-any, golang-gopkg-check.v1-dev","build_depends_indep":null,"build_depends_arch":null},"repo_metadata":{"id":14730402,"uuid":"17451182","full_name":"go-yaml/yaml","owner":"go-yaml","description":"YAML support for the Go language.","archived":true,"fork":false,"pushed_at":"2025-04-01T17:00:11.000Z","size":1587,"stargazers_count":7018,"open_issues_count":422,"forks_count":1117,"subscribers_count":3,"default_branch":"v3","last_synced_at":"2026-09-02T19:07:29.914Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":null,"language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"other","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/go-yaml.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null}},"created_at":"2014-03-05T18:54:57.000Z","updated_at":"2026-09-02T18:56:31.000Z","dependencies_parsed_at":"2023-02-16T14:45:46.186Z","dependency_job_id":"c3f4f6d2-0694-43c1-a700-724512e371e7","html_url":"https://github.com/go-yaml/yaml","commit_stats":{"total_commits":302,"total_committers":48,"mean_commits":6.291666666666667,"dds":0.2814569536423841,"last_synced_commit":"f6f7691b1fdeb513f56608cd2c32c51f8194bf51"},"previous_names":["go-yaml/go-yaml-v1"],"tags_count":16,"template":false,"template_full_name":null,"purl":"pkg:github/go-yaml/yaml","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/go-yaml","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/refs/heads/v3","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/sbom","scorecard":{"id":432677,"data":{"date":"2025-08-11","repo":{"name":"github.com/go-yaml/yaml","commit":"944c86a7d29391925ed6ac33bee98a0516f1287a"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":4.4,"checks":[{"name":"Code-Review","score":2,"reason":"Found 6/27 approved changesets -- score normalized to 2","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Warn: no topLevel permission defined: .github/workflows/go.yaml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Maintained","score":0,"reason":"project is archived","details":["Warn: Repository is archived."],"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Pinned-Dependencies","score":3,"reason":"dependency not pinned by hash detected -- score normalized to 3","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/go.yaml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/go-yaml/yaml/go.yaml/v3?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/go.yaml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/go-yaml/yaml/go.yaml/v3?enable=pin","Info: 0 out of 2 GitHub-owned GitHubAction dependencies pinned","Info: 1 out of 1 goCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Security-Policy","score":0,"reason":"security policy file not detected","details":["Warn: no security policy file detected","Warn: no security file to analyze","Warn: no security file to analyze","Warn: no security file to analyze"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"License","score":9,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Warn: project license file does not contain an FSF or OSI license."],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Fuzzing","score":10,"reason":"project is fuzzed","details":["Info: OSSFuzz integration found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Branch-Protection","score":0,"reason":"branch protection not enabled on development/release branches","details":["Warn: branch protection not enabled for branch 'v3'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 9 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-19T03:43:53.386Z","repository_id":14730402,"created_at":"2025-08-19T03:43:53.386Z","updated_at":"2025-08-19T03:43:53.386Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":37019155,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-08-22T15:14:58.755Z","status":"online","status_checked_at":"2026-09-02T02:00:06.194Z","response_time":106,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"go-yaml","name":"go-yaml","uuid":"6823640","kind":"organization","description":null,"email":null,"website":null,"location":null,"twitter":null,"company":null,"icon_url":"https://avatars.githubusercontent.com/u/6823640?v=4","repositories_count":1,"last_synced_at":"2026-09-06T00:54:23.710Z","metadata":{"has_sponsors_listing":false,"funding":null},"html_url":"https://github.com/go-yaml","funding_links":[],"total_stars":7018,"followers":17,"following":0,"created_at":"2022-11-07T11:53:36.392Z","updated_at":"2026-09-06T00:54:23.738Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/go-yaml","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/go-yaml/repositories"},"tags":[{"name":"v3.0.1","sha":"f6f7691b1fdeb513f56608cd2c32c51f8194bf51","kind":"commit","published_at":"2022-05-27T08:35:30.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v3.0.1","html_url":"https://github.com/go-yaml/yaml/releases/tag/v3.0.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v3.0.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v3.0.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v3.0.1/manifests"},{"name":"v3.0.0","sha":"00bbc0947ae889b9e480044dbc3bc3e3216a6a89","kind":"commit","published_at":"2022-05-21T10:33:21.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v3.0.0","html_url":"https://github.com/go-yaml/yaml/releases/tag/v3.0.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v3.0.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v3.0.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v3.0.0/manifests"},{"name":"v2.4.0","sha":"7649d4548cb53a614db133b2a8ac1f31859dda8c","kind":"commit","published_at":"2020-11-17T15:46:20.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.4.0","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.4.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.4.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.4.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.4.0/manifests"},{"name":"v2.3.0","sha":"0b1645d91e851e735d3e23330303ce81f70adbe3","kind":"commit","published_at":"2020-05-06T23:08:38.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.3.0","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.3.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.3.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.3.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.3.0/manifests"},{"name":"v2.2.8","sha":"53403b58ad1b561927d19068c655246f2db79d48","kind":"commit","published_at":"2020-01-21T17:19:40.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.2.8","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.2.8","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.2.8","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.8","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.8/manifests"},{"name":"v2.2.7","sha":"1f64d6156d11335c3f22d9330b0ad14fc1e789ce","kind":"commit","published_at":"2019-11-19T21:27:36.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.2.7","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.2.7","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.2.7","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.7","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.7/manifests"},{"name":"v2.2.6","sha":"a95acef3719e5e9f7614cc90a119dee4699291eb","kind":"commit","published_at":"2019-11-19T11:51:43.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.2.6","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.2.6","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.2.6","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.6","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.6/manifests"},{"name":"v2.2.5","sha":"f90ceb4f409096b60e2e9076b38b304b8246e5fa","kind":"commit","published_at":"2019-11-04T18:03:43.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.2.5","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.2.5","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.2.5","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.5","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.5/manifests"},{"name":"v2.2.4","sha":"f221b8435cfb71e54062f6c6e99e9ade30b124d5","kind":"commit","published_at":"2019-10-02T18:33:36.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.2.4","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.2.4","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.2.4","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.4/manifests"},{"name":"v2.2.3","sha":"bb4e33bf68bf89cad44d386192cbed201f35b241","kind":"commit","published_at":"2019-09-30T19:09:21.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.2.3","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.2.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.2.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.3/manifests"},{"name":"v2.2.2","sha":"51d6538a90f86fe93ac480b35f37b2be17fef232","kind":"commit","published_at":"2018-11-15T11:05:04.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.2.2","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.2.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.2.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.2/manifests"},{"name":"v2.2.1","sha":"5420a8b6744d3b0345ab293f6fcba19c978f1183","kind":"commit","published_at":"2018-03-28T19:50:20.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.2.1","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.2.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.2.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.1/manifests"},{"name":"v2.2.0","sha":"86f5ed62f8a0ee96bd888d2efdfd6d4fb100a4eb","kind":"commit","published_at":"2018-03-26T05:07:29.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.2.0","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.2.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.2.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.0/manifests"},{"name":"v2.1.1","sha":"7f97868eec74b32b0982dd158a51a446d1da7eb5","kind":"tag","published_at":"2018-02-23T19:13:14.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.1.1","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.1.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.1.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.1.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.1.1/manifests"},{"name":"v2.1.0","sha":"3e6d767784b037b90a14701b6c9f0643f05db963","kind":"tag","published_at":"2018-02-23T19:02:00.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.1.0","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.1.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.1.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.1.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.1.0/manifests"},{"name":"v2.0.0","sha":"d670f9405373e636a5a2765eea47fac0c9bc91a4","kind":"tag","published_at":"2018-02-23T18:53:08.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.0.0","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.0.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.0.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.0.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.0.0/manifests"}]},"repo_metadata_updated_at":"2026-09-07T23:00:59.506Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":0.0,"dependent_packages_count":0.0,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":100},"purl":"pkg:deb/debian/golang-yaml.v2?arch=source\u0026distro=debian-11\u0026repository_url=https://packages.debian.org/bullseye","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/debian/golang-yaml.v2","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/debian/golang-yaml.v2","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/debian/golang-yaml.v2/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-09-06T23:09:36.074Z","issues_count":179,"pull_requests_count":117,"avg_time_to_close_issue":27337742.275,"avg_time_to_close_pull_request":54605651.71428572,"issues_closed_count":40,"pull_requests_closed_count":42,"pull_request_authors_count":78,"issue_authors_count":167,"avg_comments_per_issue":3.11731843575419,"avg_comments_per_pull_request":1.4700854700854702,"merged_pull_requests_count":3,"bot_issues_count":0,"bot_pull_requests_count":0,"past_year_issues_count":0,"past_year_pull_requests_count":0,"past_year_avg_time_to_close_issue":null,"past_year_avg_time_to_close_pull_request":null,"past_year_issues_closed_count":0,"past_year_pull_requests_closed_count":0,"past_year_pull_request_authors_count":0,"past_year_issue_authors_count":0,"past_year_avg_comments_per_issue":null,"past_year_avg_comments_per_pull_request":null,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":0,"past_year_merged_pull_requests_count":0,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/issues","maintainers":[],"active_maintainers":[]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/debian-11/packages/golang-yaml.v2/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/debian-11/packages/golang-yaml.v2/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/debian-11/packages/golang-yaml.v2/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/debian-11/packages/golang-yaml.v2/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/debian-11/packages/golang-yaml.v2/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/debian-11/packages/golang-yaml.v2/codemeta","maintainers":[],"registry":{"name":"debian-11","url":"https://packages.debian.org/bullseye","ecosystem":"debian","default":false,"packages_count":31268,"maintainers_count":0,"namespaces_count":3,"keywords_count":759,"github":"debian","metadata":{"codename":"bullseye","funded_packages_count":891},"icon_url":"https://github.com/debian.png","created_at":"2026-02-04T11:01:49.702Z","updated_at":"2026-09-04T05:05:56.001Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/debian-11/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/debian-11/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/debian-11/namespaces"}},{"id":3905645,"name":"github.com/go-yaml/yaml/v3","ecosystem":"go","description":"Package yaml implements YAML support for the Go language.\n\nSource code and other details for the project are available at GitHub:","homepage":"https://github.com/go-yaml/yaml","licenses":"Apache-2.0","normalized_licenses":["Apache-2.0"],"repository_url":"https://github.com/go-yaml/yaml","keywords_array":[],"namespace":"github.com/go-yaml/yaml","versions_count":2,"first_release_published_at":"2022-05-21T10:33:21.000Z","latest_release_published_at":"2022-05-27T08:35:30.000Z","latest_release_number":"v3.0.1","last_synced_at":"2026-09-06T23:15:40.179Z","created_at":"2022-04-12T00:49:09.840Z","updated_at":"2026-09-06T23:15:40.179Z","registry_url":"https://pkg.go.dev/github.com/go-yaml/yaml/v3","install_command":"go get github.com/go-yaml/yaml/v3","documentation_url":"https://pkg.go.dev/github.com/go-yaml/yaml/v3#section-documentation","metadata":{},"repo_metadata":{"id":14730402,"uuid":"17451182","full_name":"go-yaml/yaml","owner":"go-yaml","description":"YAML support for the Go language.","archived":true,"fork":false,"pushed_at":"2025-04-01T17:00:11.000Z","size":1587,"stargazers_count":7018,"open_issues_count":422,"forks_count":1117,"subscribers_count":3,"default_branch":"v3","last_synced_at":"2026-09-02T19:07:29.914Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":null,"language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"other","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/go-yaml.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null}},"created_at":"2014-03-05T18:54:57.000Z","updated_at":"2026-09-02T18:56:31.000Z","dependencies_parsed_at":"2023-02-16T14:45:46.186Z","dependency_job_id":"c3f4f6d2-0694-43c1-a700-724512e371e7","html_url":"https://github.com/go-yaml/yaml","commit_stats":{"total_commits":302,"total_committers":48,"mean_commits":6.291666666666667,"dds":0.2814569536423841,"last_synced_commit":"f6f7691b1fdeb513f56608cd2c32c51f8194bf51"},"previous_names":["go-yaml/go-yaml-v1"],"tags_count":16,"template":false,"template_full_name":null,"purl":"pkg:github/go-yaml/yaml","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/go-yaml","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/refs/heads/v3","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/sbom","scorecard":{"id":432677,"data":{"date":"2025-08-11","repo":{"name":"github.com/go-yaml/yaml","commit":"944c86a7d29391925ed6ac33bee98a0516f1287a"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":4.4,"checks":[{"name":"Code-Review","score":2,"reason":"Found 6/27 approved changesets -- score normalized to 2","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Warn: no topLevel permission defined: .github/workflows/go.yaml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Maintained","score":0,"reason":"project is archived","details":["Warn: Repository is archived."],"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Pinned-Dependencies","score":3,"reason":"dependency not pinned by hash detected -- score normalized to 3","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/go.yaml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/go-yaml/yaml/go.yaml/v3?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/go.yaml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/go-yaml/yaml/go.yaml/v3?enable=pin","Info: 0 out of 2 GitHub-owned GitHubAction dependencies pinned","Info: 1 out of 1 goCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Security-Policy","score":0,"reason":"security policy file not detected","details":["Warn: no security policy file detected","Warn: no security file to analyze","Warn: no security file to analyze","Warn: no security file to analyze"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"License","score":9,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Warn: project license file does not contain an FSF or OSI license."],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Fuzzing","score":10,"reason":"project is fuzzed","details":["Info: OSSFuzz integration found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Branch-Protection","score":0,"reason":"branch protection not enabled on development/release branches","details":["Warn: branch protection not enabled for branch 'v3'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 9 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-19T03:43:53.386Z","repository_id":14730402,"created_at":"2025-08-19T03:43:53.386Z","updated_at":"2025-08-19T03:43:53.386Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":37019155,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-08-22T15:14:58.755Z","status":"online","status_checked_at":"2026-09-02T02:00:06.194Z","response_time":106,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"go-yaml","name":"go-yaml","uuid":"6823640","kind":"organization","description":null,"email":null,"website":null,"location":null,"twitter":null,"company":null,"icon_url":"https://avatars.githubusercontent.com/u/6823640?v=4","repositories_count":1,"last_synced_at":"2026-08-29T00:59:16.798Z","metadata":{"has_sponsors_listing":false,"funding":null},"html_url":"https://github.com/go-yaml","funding_links":[],"total_stars":7019,"followers":17,"following":0,"created_at":"2022-11-07T11:53:36.392Z","updated_at":"2026-08-29T00:59:16.811Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/go-yaml","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/go-yaml/repositories"},"tags":[{"name":"v3.0.1","sha":"f6f7691b1fdeb513f56608cd2c32c51f8194bf51","kind":"commit","published_at":"2022-05-27T08:35:30.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v3.0.1","html_url":"https://github.com/go-yaml/yaml/releases/tag/v3.0.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v3.0.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v3.0.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v3.0.1/manifests"},{"name":"v3.0.0","sha":"00bbc0947ae889b9e480044dbc3bc3e3216a6a89","kind":"commit","published_at":"2022-05-21T10:33:21.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v3.0.0","html_url":"https://github.com/go-yaml/yaml/releases/tag/v3.0.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v3.0.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v3.0.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v3.0.0/manifests"},{"name":"v2.4.0","sha":"7649d4548cb53a614db133b2a8ac1f31859dda8c","kind":"commit","published_at":"2020-11-17T15:46:20.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.4.0","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.4.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.4.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.4.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.4.0/manifests"},{"name":"v2.3.0","sha":"0b1645d91e851e735d3e23330303ce81f70adbe3","kind":"commit","published_at":"2020-05-06T23:08:38.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.3.0","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.3.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.3.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.3.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.3.0/manifests"},{"name":"v2.2.8","sha":"53403b58ad1b561927d19068c655246f2db79d48","kind":"commit","published_at":"2020-01-21T17:19:40.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.2.8","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.2.8","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.2.8","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.8","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.8/manifests"},{"name":"v2.2.7","sha":"1f64d6156d11335c3f22d9330b0ad14fc1e789ce","kind":"commit","published_at":"2019-11-19T21:27:36.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.2.7","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.2.7","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.2.7","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.7","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.7/manifests"},{"name":"v2.2.6","sha":"a95acef3719e5e9f7614cc90a119dee4699291eb","kind":"commit","published_at":"2019-11-19T11:51:43.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.2.6","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.2.6","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.2.6","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.6","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.6/manifests"},{"name":"v2.2.5","sha":"f90ceb4f409096b60e2e9076b38b304b8246e5fa","kind":"commit","published_at":"2019-11-04T18:03:43.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.2.5","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.2.5","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.2.5","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.5","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.5/manifests"},{"name":"v2.2.4","sha":"f221b8435cfb71e54062f6c6e99e9ade30b124d5","kind":"commit","published_at":"2019-10-02T18:33:36.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.2.4","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.2.4","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.2.4","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.4/manifests"},{"name":"v2.2.3","sha":"bb4e33bf68bf89cad44d386192cbed201f35b241","kind":"commit","published_at":"2019-09-30T19:09:21.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.2.3","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.2.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.2.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.3/manifests"},{"name":"v2.2.2","sha":"51d6538a90f86fe93ac480b35f37b2be17fef232","kind":"commit","published_at":"2018-11-15T11:05:04.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.2.2","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.2.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.2.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.2/manifests"},{"name":"v2.2.1","sha":"5420a8b6744d3b0345ab293f6fcba19c978f1183","kind":"commit","published_at":"2018-03-28T19:50:20.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.2.1","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.2.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.2.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.1/manifests"},{"name":"v2.2.0","sha":"86f5ed62f8a0ee96bd888d2efdfd6d4fb100a4eb","kind":"commit","published_at":"2018-03-26T05:07:29.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.2.0","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.2.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.2.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.2.0/manifests"},{"name":"v2.1.1","sha":"7f97868eec74b32b0982dd158a51a446d1da7eb5","kind":"tag","published_at":"2018-02-23T19:13:14.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.1.1","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.1.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.1.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.1.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.1.1/manifests"},{"name":"v2.1.0","sha":"3e6d767784b037b90a14701b6c9f0643f05db963","kind":"tag","published_at":"2018-02-23T19:02:00.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.1.0","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.1.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.1.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.1.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.1.0/manifests"},{"name":"v2.0.0","sha":"d670f9405373e636a5a2765eea47fac0c9bc91a4","kind":"tag","published_at":"2018-02-23T18:53:08.000Z","download_url":"https://codeload.github.com/go-yaml/yaml/tar.gz/v2.0.0","html_url":"https://github.com/go-yaml/yaml/releases/tag/v2.0.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-yaml/yaml@v2.0.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.0.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/tags/v2.0.0/manifests"}]},"repo_metadata_updated_at":"2026-09-05T13:54:38.784Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":1,"rankings":{"downloads":null,"dependent_repos_count":4.793834424600911,"dependent_packages_count":8.452778221382484,"stargazers_count":0.8332279052017895,"forks_count":0.8637789655401369,"docker_downloads_count":null,"average":3.7359048791813305},"purl":"pkg:golang/github.com/go-yaml/yaml/v3","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/go/github.com/go-yaml/yaml/v3","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/go/github.com/go-yaml/yaml/v3","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/go/github.com/go-yaml/yaml/v3/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-09-04T22:05:44.168Z","issues_count":179,"pull_requests_count":117,"avg_time_to_close_issue":27337742.275,"avg_time_to_close_pull_request":54605651.71428572,"issues_closed_count":40,"pull_requests_closed_count":42,"pull_request_authors_count":78,"issue_authors_count":167,"avg_comments_per_issue":3.11731843575419,"avg_comments_per_pull_request":1.4700854700854702,"merged_pull_requests_count":3,"bot_issues_count":0,"bot_pull_requests_count":0,"past_year_issues_count":0,"past_year_pull_requests_count":0,"past_year_avg_time_to_close_issue":null,"past_year_avg_time_to_close_pull_request":null,"past_year_issues_closed_count":0,"past_year_pull_requests_closed_count":0,"past_year_pull_request_authors_count":0,"past_year_issue_authors_count":0,"past_year_avg_comments_per_issue":null,"past_year_avg_comments_per_pull_request":null,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":0,"past_year_merged_pull_requests_count":0,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/issues","maintainers":[],"active_maintainers":[]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fgo-yaml%2Fyaml%2Fv3/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fgo-yaml%2Fyaml%2Fv3/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fgo-yaml%2Fyaml%2Fv3/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fgo-yaml%2Fyaml%2Fv3/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fgo-yaml%2Fyaml%2Fv3/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fgo-yaml%2Fyaml%2Fv3/codemeta","maintainers":[],"registry":{"name":"proxy.golang.org","url":"https://proxy.golang.org","ecosystem":"go","default":true,"packages_count":2287853,"maintainers_count":0,"namespaces_count":839605,"keywords_count":126639,"github":"golang","metadata":{"funded_packages_count":74445,"sync_missing_packages_cursor":{"timestamp":"2026-09-07T00:07:19.468853Z","path":"github.com/herodotusdev/accumulators","version":"v4.2.0-alpha.1+incompatible"},"rate_limit":1},"icon_url":"https://github.com/golang.png","created_at":"2022-04-04T15:19:22.939Z","updated_at":"2026-09-07T00:08:13.518Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/namespaces"}}],"commits":{"id":7760,"full_name":"go-yaml/yaml","default_branch":"v3","total_commits":303,"total_committers":46,"total_bot_commits":0,"total_bot_committers":0,"mean_commits":6.586956521739131,"dds":0.2805280528052805,"past_year_total_commits":0,"past_year_total_committers":0,"past_year_total_bot_commits":0,"past_year_total_bot_committers":0,"past_year_mean_commits":0.0,"past_year_dds":0.0,"last_synced_at":"2026-09-06T23:10:06.167Z","last_synced_commit":"944c86a7d29391925ed6ac33bee98a0516f1287a","created_at":"2023-03-07T09:46:30.667Z","updated_at":"2026-09-06T23:10:05.767Z","committers":[{"name":"Gustavo Niemeyer","email":"gustavo@niemeyer.net","login":"niemeyer","count":218},{"name":"Roger Peppe","email":"rogpeppe@gmail.com","login":"rogpeppe","count":19},{"name":"Roger Peppe","email":"roger.peppe@canonical.com","login":null,"count":6},{"name":"John Arbash Meinel","email":"john@arbash-meinel.com","login":"jameinel","count":5},{"name":"Sylvain Rabot","email":"sylvain@abstraction.fr","login":"sylr","count":3},{"name":"Andrew Lavery","email":"laverya@umich.edu","login":"laverya","count":3},{"name":"Songmu","email":"y.songmu@gmail.com","login":"Songmu","count":2},{"name":"Robert Gogolok","email":"gogolok@gmail.com","login":"gogolok","count":2},{"name":"Jordan Liggitt","email":"jliggitt@redhat.com","login":"liggitt","count":2},{"name":"James King","email":"king-jam","login":"king-jam","count":2},{"name":"Bill Q","email":"get-ion@hotmail.com","login":"hiveminded","count":2},{"name":"Robert","email":"rvollmert@gmx.net","login":"robx","count":2},{"name":"chenrui","email":"chenrui333@gmail.com","login":"chenrui333","count":2},{"name":"abishopric","email":"abishopric@squareup.com","login":null,"count":2},{"name":"Dave Cheney","email":"david.cheney@canonical.com","login":null,"count":2},{"name":"Vincent Hou","email":"shou@us.ibm.com","login":null,"count":1},{"name":"Sergey Bogomolov","email":"sb@a-k-d.ru","login":null,"count":1},{"name":"Leo Arias","email":"leo@zeppelin.solutions","login":null,"count":1},{"name":"Alex Harford","email":"alex.harford@hpe.com","login":null,"count":1},{"name":"Abel Deuring","email":"abel.deuring@canonical.com","login":null,"count":1},{"name":"Aaron.L.Xu","email":"likexu@harmonycloud.cn","login":"xulike666","count":1},{"name":"Afriza N. Arief","email":"afriza.na@gmail.com","login":"afriza","count":1},{"name":"Andrey Chernih","email":"andrey.chernih@gmail.com","login":"a-chernykh","count":1},{"name":"Anthony Fok","email":"foka@debian.org","login":"anthonyfok","count":1},{"name":"ktnyt","email":"ktnyt","login":"ktnyt","count":1},{"name":"andrewheberle","email":"andrewheberle","login":"andrewheberle","count":1},{"name":"Witold Krecicki","email":"wpk@culm.net","login":"wupeka","count":1},{"name":"Vasily Korytov","email":"chillum","login":"chillum","count":1},{"name":"Tristan Colgate-McFarlane","email":"tcolgate@gmail.com","login":"tcolgate","count":1},{"name":"Shawn Smith","email":"shawnpsmith@gmail.com","login":"shawnps","count":1},{"name":"Sebastian Vidrio","email":"svidrio@gmail.com","login":"vitreuz","count":1},{"name":"Sameer Vohra","email":"svohra@pivotal.io","login":"xtreme-sameer-vohra","count":1},{"name":"Robert Liebowitz","email":"rliebz@gmail.com","login":"rliebz","count":1},{"name":"Prashant Varanasi","email":"github@prashantv.com","login":"prashantv","count":1},{"name":"Parker Zhou","email":"zhoupingtkbjb@163.com","login":"PChou","count":1},{"name":"Morgan Jones","email":"mevanj89@gmail.com","login":"mogthesprog","count":1},{"name":"Michael Vogt","email":"mvo@debian.org","login":"mvo5","count":1},{"name":"Michael Hudson-Doyle","email":"michael.hudson@canonical.com","login":"mwhudson","count":1},{"name":"Matthew M. Boedicker","email":"matthewm@boedicker.org","login":"mmb","count":1},{"name":"Josh Sephton","email":"josh.sephton@gmail.com","login":"heldtogether","count":1},{"name":"Joe Tsai","email":"joetsai@digital-static.net","login":"dsnet","count":1},{"name":"Joe Farrell","email":"joe2farrell@gmail.com","login":"joe2far","count":1},{"name":"Henrik Jonsson","email":"me@hkjn.me","login":"hkjn","count":1},{"name":"George Hartzell","email":"hartzell@alerce.com","login":"hartzell","count":1},{"name":"Gabriel Aszalos","email":"gabriel.aszalos@gmail.com","login":"gbbr","count":1},{"name":"Brian Bland","email":"brian.bland@docker.com","login":"BrianBland","count":1}],"past_year_committers":[],"commits_url":"https://commits.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/commits","host":{"name":"GitHub","url":"https://github.com","kind":"github","last_synced_at":"2026-09-07T00:00:07.768Z","repositories_count":7076607,"commits_count":1028753943,"contributors_count":44613590,"owners_count":1412627,"committers_count":3436674,"icon_url":"https://github.com/github.png","host_url":"https://commits.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://commits.ecosyste.ms/api/v1/hosts/GitHub/repositories"}},"issues":{"table":{"full_name":"go-yaml/yaml","html_url":"https://github.com/go-yaml/yaml","last_synced_at":"2026-09-06T23:09:36.074Z","status":null,"issues_count":179,"pull_requests_count":117,"avg_time_to_close_issue":27337742.275,"avg_time_to_close_pull_request":54605651.71428572,"issues_closed_count":40,"pull_requests_closed_count":42,"pull_request_authors_count":78,"issue_authors_count":167,"avg_comments_per_issue":3.11731843575419,"avg_comments_per_pull_request":1.4700854700854702,"merged_pull_requests_count":3,"bot_issues_count":0,"bot_pull_requests_count":0,"past_year_issues_count":0,"past_year_pull_requests_count":0,"past_year_avg_time_to_close_issue":null,"past_year_avg_time_to_close_pull_request":null,"past_year_issues_closed_count":0,"past_year_pull_requests_closed_count":0,"past_year_pull_request_authors_count":0,"past_year_issue_authors_count":0,"past_year_avg_comments_per_issue":null,"past_year_avg_comments_per_pull_request":null,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":0,"past_year_merged_pull_requests_count":0,"created_at":"2023-05-16T03:48:14.570Z","updated_at":"2026-09-06T23:09:36.074Z","repository_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml","issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-yaml%2Fyaml/issues","issue_labels_count":{"table":{"thinking":1,"enhancement":1}},"pull_request_labels_count":{"table":{}},"issue_author_associations_count":{"table":{"NONE":177,"CONTRIBUTOR":2}},"pull_request_author_associations_count":{"table":{"NONE":108,"CONTRIBUTOR":9}},"issue_authors":{"table":{"jotego":3,"yxxhero":2,"mikefarah":2,"rogpeppe":2,"andig":2,"ahmetb":2,"guettli":2,"abursavich":2,"vanbroup":2,"fgm":2,"michaelruigrok":2,"edigaryev":1,"nirekin":1,"kzhui125":1,"metux":1,"Alfus":1,"tracyde":1,"DukeOjeh":1,"graywolf-at-work":1,"geeker-smallwhite":1,"xl4sh":1,"jl945":1,"coticom":1,"palage4a":1,"tchiotludo":1,"loeffert":1,"bboreham":1,"gabyx":1,"cloudzhou":1,"junhwong":1,"qjebbs":1,"RedCrazyGhost":1,"ainar-g":1,"xtheandrew":1,"prymitive":1,"thediveo":1,"SameerPr":1,"Cod3er-ai":1,"xyz-li":1,"iliakap":1,"ichenhe":1,"mattheusv":1,"michaelsauter":1,"vjorlikowski":1,"intiluha":1,"robertmclaws":1,"nsurleraux-railnova":1,"erkylima":1,"EduardGomezEscandell":1,"andrehaland":1,"lirtistan":1,"Akashr7n":1,"dsp25no":1,"zombieleet":1,"Mivr":1,"RekGRpth":1,"Zirbo":1,"jochenehret":1,"sclevine":1,"tux21b":1,"yywing":1,"juzna":1,"Jougan-0":1,"debajyoti-truefoundry":1,"GrantFleming":1,"diogoteles08":1,"n-bes":1,"tdakkota":1,"roidelapluie":1,"feidhlimx":1,"cbf123":1,"jwright-stripe":1,"ostcar":1,"septs":1,"ievgennaida":1,"szymonGlomskiN":1,"nicksnyder":1,"le011":1,"AkashKumar7902":1,"AbrahamTewa":1,"sgielen":1,"honmaple":1,"lukedirtwalker":1,"zhyee":1,"pantelis-karamolegkos":1,"dploeger":1,"mcandre":1,"BLasan":1,"MeissnerSC":1,"darh":1,"misnaged":1,"moorereason":1,"TristanSpeakEasy":1,"TLINDEN":1,"eBerdnA":1,"damn-at":1,"docooler":1,"karelorigin":1,"lazychanger":1,"taiyang-li":1,"irsl":1,"bruceauyeung":1,"awrichar":1,"edoger":1,"Pim-Infuzed":1,"mtojek":1,"bradleyjkemp":1,"xyzzyz":1,"ardnew":1,"Silence-worker-02":1,"viktorasm":1,"efd6":1,"ivankatliarchuk":1,"bluebrown":1,"dragonpiper":1,"galdor":1,"nmiyake":1,"rwxrob":1,"andyblog":1,"zx8":1,"tyangliu":1,"DirectXMan12":1,"jdistler":1,"mruzicka":1,"chenzhiwei":1,"jlewi":1,"praveensanap":1,"keisuke713":1,"johnmarianhoffman":1,"omefire":1,"yusiwen":1,"LuisBecker0":1,"davidebettio":1,"jmhodges":1,"TheFriendlyCoder":1,"tech4him1":1,"johanbrandhorst":1,"MicroOps-cn":1,"ghost":1,"mx-psi":1,"rbren":1,"rokkerruslan":1,"vinayak-kukreja":1,"dayeguilaiye":1,"ndeloof":1,"aanm":1,"lithdew":1,"467892746":1,"MisterMX":1,"fabianofranz":1,"nikolaydubina":1,"tiegz":1,"micovery":1,"howardjohn":1,"thallgren":1,"wqhhust":1,"scudette":1,"ldesplat":1,"elegos":1,"aep-sunlife":1,"rickchristie":1,"shoelzle":1,"1755":1,"johnnybubonic":1,"viveksahu26":1,"fredrikelinder":1,"rolfvandekrol":1}},"pull_request_authors":{"table":{"chenrui333":6,"aathan":4,"colega":3,"dolmen":3,"braydonk":3,"xordspar0":2,"steveh":2,"SuperSandro2000":2,"jjrodenburg":2,"ryuichi1208":2,"iamshivamnanda":2,"moskyb":2,"Prashansa-K":2,"lucacome":2,"setrofim":2,"lukemassa":2,"sustrik":2,"tonickkozlov":2,"diogoteles08":2,"torkve":2,"laverya":2,"linehk":2,"DMaxter":2,"erdnaxeli":2,"blaubaer":2,"naquin":2,"stevenh":2,"ndeloof":2,"rick-kilgore":2,"NathanBaulch":2,"felixfontein":1,"TESLAOPUnix":1,"pawel-kedzior-sw":1,"nobiit":1,"andrewheberle":1,"JMARRUJO91":1,"alfredkrohmer":1,"iliakap":1,"andig":1,"intiluha":1,"hairyhenderson":1,"alex-ac":1,"joshdk":1,"tcarreira":1,"lyda":1,"osela":1,"tomclegg":1,"dsharp-pivotal":1,"taustgen-wework":1,"jpap":1,"wanshuangcheng":1,"orangeswim":1,"ddollar":1,"covrom":1,"joy4eg":1,"alecrajeev":1,"danielorbach":1,"facundopoblete":1,"Tieske":1,"davidmdm":1,"lelvisl":1,"jfrabaute":1,"zecke":1,"misnaged":1,"artemmikhalitsin":1,"SCKelemen":1,"brian14708":1,"putao520":1,"ramcq":1,"lazarenkovegor":1,"preslavmihaylov":1,"xyz-li":1,"cjcullen":1,"hedhyw":1,"roffe":1,"mkmik":1,"pgporada":1,"michaelruigrok":1}},"host":{"table":{"name":"GitHub","url":"https://github.com","kind":"github","last_synced_at":"2026-09-07T00:00:06.792Z","repositories_count":16965793,"issues_count":44814105,"pull_requests_count":141347450,"authors_count":11673536,"icon_url":"https://github.com/github.png","host_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories","owners_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/owners","authors_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors"}},"past_year_issue_labels_count":{"table":{}},"past_year_pull_request_labels_count":{"table":{}},"past_year_issue_author_associations_count":{"table":{}},"past_year_pull_request_author_associations_count":{"table":{}},"past_year_issue_authors":{"table":{}},"past_year_pull_request_authors":{"table":{}},"maintainers":[],"active_maintainers":[]}},"events":{"total":{"ForkEvent":63,"IssueCommentEvent":37,"IssuesEvent":17,"PullRequestEvent":6,"PullRequestReviewCommentEvent":2,"PullRequestReviewEvent":6,"WatchEvent":249},"last_year":{"ForkEvent":8,"WatchEvent":20}},"keywords":[],"dependencies":[{"ecosystem":"go","filepath":"go.mod","sha":null,"kind":"manifest","created_at":"2022-07-12T05:15:04.658Z","updated_at":"2022-07-12T05:15:04.658Z","repository_link":"https://github.com/go-yaml/yaml/blob/v3/go.mod","dependencies":[{"id":153082831,"package_name":"\"gopkg.in/check.v1\"","ecosystem":"go","requirements":"v0.0.0-20161208181325-20d25e280405","direct":true,"kind":"runtime","optional":false}]},{"ecosystem":"actions","filepath":".github/workflows/go.yaml","sha":null,"kind":"manifest","created_at":"2023-01-13T18:05:26.941Z","updated_at":"2023-01-13T18:05:26.941Z","repository_link":"https://github.com/go-yaml/yaml/blob/v3/.github/workflows/go.yaml","dependencies":[{"id":6890998361,"package_name":"actions/checkout","ecosystem":"actions","requirements":"v2","direct":true,"kind":"composite","optional":false},{"id":6890998362,"package_name":"actions/setup-go","ecosystem":"actions","requirements":"v2","direct":true,"kind":"composite","optional":false}]}],"score":38.45756305179387,"created_at":"2026-07-08T08:31:42.051Z","updated_at":"2026-09-07T23:35:05.193Z","avatar_url":"https://github.com/go-yaml.png","language":"Go","codemeta":null,"publiccode":null,"project_url":"https://summary.ecosyste.ms/api/v1/projects/378460","html_url":"https://summary.ecosyste.ms/projects/378460"}