{"id":378674,"url":"https://github.com/go-git/go-billy","last_synced_at":"2026-07-11T12:01:16.077Z","repository":{"id":46417246,"uuid":"246113572","full_name":"go-git/go-billy","owner":"go-git","description":"The missing interface filesystem abstraction for Go","archived":false,"fork":false,"pushed_at":"2026-07-09T08:36:25.000Z","size":770,"stargazers_count":420,"open_issues_count":22,"forks_count":68,"subscribers_count":8,"default_branch":"main","last_synced_at":"2026-07-09T18:04:19.256Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":"https://pkg.go.dev/github.com/go-git/go-billy/v5","language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/go-git.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null}},"created_at":"2020-03-09T18:35:04.000Z","updated_at":"2026-07-09T02:53:12.000Z","dependencies_parsed_at":"2026-02-26T03:00:35.579Z","dependency_job_id":"33c4797f-e022-4e8c-9026-d59c92495aa4","html_url":"https://github.com/go-git/go-billy","commit_stats":{"total_commits":207,"total_committers":34,"mean_commits":6.088235294117647,"dds":0.6473429951690821,"last_synced_commit":"1bb3aa54c166c2384e0acf4d4e595911230c209e"},"previous_names":[],"tags_count":36,"template":false,"template_full_name":null,"purl":"pkg:github/go-git/go-billy","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/go-git","download_url":"https://codeload.github.com/go-git/go-billy/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy/sbom","scorecard":{"id":431830,"data":{"date":"2025-08-17T17:21:30Z","repo":{"name":"github.com/go-git/go-billy","commit":"3a9ca963b7289d5bc1fd7bd48dc4d818f6997096"},"scorecard":{"version":"v5.2.1","commit":"ab2f6e92482462fe66246d9e32f642855a691dc1"},"score":7.2,"checks":[{"name":"Code-Review","score":0,"reason":"Found 0/2 approved changesets -- score normalized to 0","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#code-review"}},{"name":"Dependency-Update-Tool","score":10,"reason":"update tool detected","details":["Info: detected update tool: Dependabot: .github/dependabot.yaml:1"],"documentation":{"short":"Determines if the project uses a dependency update tool.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#dependency-update-tool"}},{"name":"Maintained","score":10,"reason":"19 commit(s) and 1 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#maintained"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#packaging"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#dangerous-workflow"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#binary-artifacts"}},{"name":"Token-Permissions","score":10,"reason":"GitHub workflow tokens follow principle of least privilege","details":["Info: jobLevel 'contents' permission set to 'read': .github/workflows/codeql.yml:18","Info: jobLevel 'actions' permission set to 'read': .github/workflows/codeql.yml:17","Info: found token with 'none' permissions: .github/workflows/codeql.yml:1","Info: topLevel permissions set to 'read-all': .github/workflows/scorecard.yml:14","Info: found token with 'none' permissions: .github/workflows/test.yml:1","Info: found token with 'none' permissions: .github/workflows/test_wasip1.yml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#token-permissions"}},{"name":"Pinned-Dependencies","score":5,"reason":"dependency not pinned by hash detected -- score normalized to 5","details":["Warn: goCommand not pinned by hash: scripts/wasirun-wrapper:6","Warn: goCommand not pinned by hash: .github/workflows/test_wasip1.yml:27","Info:  10 out of  10 GitHub-owned GitHubAction dependencies pinned","Info:   1 out of   1 third-party GitHubAction dependencies pinned","Info:   0 out of   2 goCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#pinned-dependencies"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: Apache License 2.0: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#license"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#cii-best-practices"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#vulnerabilities"}},{"name":"SAST","score":10,"reason":"SAST tool is run on all commits","details":["Info: SAST configuration detected: CodeQL","Info: all commits (30) are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#sast"}},{"name":"Security-Policy","score":0,"reason":"security policy file not detected","details":["Warn: no security policy file detected","Warn: no security file to analyze","Warn: no security file to analyze","Warn: no security file to analyze"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#security-policy"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#fuzzing"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#signed-releases"}},{"name":"Branch-Protection","score":6,"reason":"branch protection is not maximal on development and all release branches","details":["Info: 'allow deletion' disabled on branch 'main'","Info: 'allow deletion' disabled on branch 'releases/v5.x'","Info: 'force pushes' disabled on branch 'main'","Info: 'force pushes' disabled on branch 'releases/v5.x'","Warn: 'branch protection settings apply to administrators' is disabled on branch 'main'","Warn: 'branch protection settings apply to administrators' is disabled on branch 'releases/v5.x'","Info: 'stale review dismissal' is required to merge on branch 'main'","Info: 'stale review dismissal' is required to merge on branch 'releases/v5.x'","Warn: required approving review count is 1 on branch 'main'","Warn: required approving review count is 1 on branch 'releases/v5.x'","Warn: codeowners review is not required on branch 'main'","Warn: codeowners review is not required on branch 'releases/v5.x'","Info: 'last push approval' is required to merge on branch 'main'","Info: 'last push approval' is required to merge on branch 'releases/v5.x'","Warn: no status checks found to merge onto branch 'main'","Warn: no status checks found to merge onto branch 'releases/v5.x'","Info: PRs are required in order to make changes on branch 'main'","Info: PRs are required in order to make changes on branch 'releases/v5.x'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#branch-protection"}},{"name":"CI-Tests","score":10,"reason":"15 out of 15 merged PRs checked by a CI test -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project runs tests before pull requests are merged.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#ci-tests"}},{"name":"Contributors","score":10,"reason":"project has 28 contributing companies or organizations","details":["Info: found contributions from: CodeCantor, DataDog, SUSE, bblfsh, croupiers, datadog, distribyted, dotnet, emberjs, fluxcd, glimmerjs, go-enry, go-git, hdiv, ipfs, ipld, knative, kubernetes, kubernetes-sigs, libp2p, mindersec, mloncode, qubesome, rancher, rancher @suse, rancherlabs, sigstore, sqle"],"documentation":{"short":"Determines if the project has a set of contributors from multiple organizations (e.g., companies).","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#contributors"}}]},"last_synced_at":"2025-08-19T03:33:03.665Z","repository_id":46417246,"created_at":"2025-08-19T03:33:03.665Z","updated_at":"2025-08-19T03:33:03.665Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":35348376,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-05-26T15:22:16.424Z","status":"online","status_checked_at":"2026-07-10T02:00:06.465Z","response_time":60,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"owner":{"login":"go-git","name":"go-git","uuid":"57653224","kind":"organization","description":"A highly extensible Git implementation in pure Go.","email":null,"website":null,"location":null,"twitter":null,"company":null,"icon_url":"https://avatars.githubusercontent.com/u/57653224?v=4","repositories_count":4,"last_synced_at":"2023-03-04T21:00:52.787Z","metadata":{"has_sponsors_listing":false},"html_url":"https://github.com/go-git","funding_links":[],"total_stars":null,"followers":null,"following":null,"created_at":"2022-11-15T00:42:35.065Z","updated_at":"2023-03-04T21:00:52.803Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/go-git","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/go-git/repositories"},"packages":[{"id":3635655,"name":"github.com/go-git/go-billy/v5","ecosystem":"go","description":"","homepage":"https://github.com/go-git/go-billy","licenses":"Apache-2.0","normalized_licenses":["Apache-2.0"],"repository_url":"https://github.com/go-git/go-billy","keywords_array":[],"namespace":"github.com/go-git/go-billy","versions_count":14,"first_release_published_at":"2020-03-09T20:00:45.000Z","latest_release_published_at":"2026-05-06T10:16:07.000Z","latest_release_number":"v5.9.0","last_synced_at":"2026-07-10T02:35:14.730Z","created_at":"2022-04-11T08:41:05.991Z","updated_at":"2026-07-10T02:35:14.731Z","registry_url":"https://pkg.go.dev/github.com/go-git/go-billy/v5","install_command":"go get github.com/go-git/go-billy/v5","documentation_url":"https://pkg.go.dev/github.com/go-git/go-billy/v5#section-documentation","metadata":{},"repo_metadata":{"id":46417246,"uuid":"246113572","full_name":"go-git/go-billy","owner":"go-git","description":"The missing interface filesystem abstraction for Go","archived":false,"fork":false,"pushed_at":"2026-03-05T17:27:08.000Z","size":657,"stargazers_count":394,"open_issues_count":22,"forks_count":59,"subscribers_count":8,"default_branch":"main","last_synced_at":"2026-03-24T15:22:50.111Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":"https://pkg.go.dev/github.com/go-git/go-billy/v5","language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/go-git.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null}},"created_at":"2020-03-09T18:35:04.000Z","updated_at":"2026-03-23T11:47:42.000Z","dependencies_parsed_at":"2026-02-26T03:00:35.579Z","dependency_job_id":null,"html_url":"https://github.com/go-git/go-billy","commit_stats":{"total_commits":207,"total_committers":34,"mean_commits":6.088235294117647,"dds":0.6473429951690821,"last_synced_commit":"1bb3aa54c166c2384e0acf4d4e595911230c209e"},"previous_names":[],"tags_count":34,"template":false,"template_full_name":null,"purl":"pkg:github/go-git/go-billy","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/go-git","download_url":"https://codeload.github.com/go-git/go-billy/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy/sbom","scorecard":{"id":431830,"data":{"date":"2025-08-17T17:21:30Z","repo":{"name":"github.com/go-git/go-billy","commit":"3a9ca963b7289d5bc1fd7bd48dc4d818f6997096"},"scorecard":{"version":"v5.2.1","commit":"ab2f6e92482462fe66246d9e32f642855a691dc1"},"score":7.2,"checks":[{"name":"Code-Review","score":0,"reason":"Found 0/2 approved changesets -- score normalized to 0","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#code-review"}},{"name":"Dependency-Update-Tool","score":10,"reason":"update tool detected","details":["Info: detected update tool: Dependabot: .github/dependabot.yaml:1"],"documentation":{"short":"Determines if the project uses a dependency update tool.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#dependency-update-tool"}},{"name":"Maintained","score":10,"reason":"19 commit(s) and 1 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#maintained"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#packaging"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#dangerous-workflow"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#binary-artifacts"}},{"name":"Token-Permissions","score":10,"reason":"GitHub workflow tokens follow principle of least privilege","details":["Info: jobLevel 'contents' permission set to 'read': .github/workflows/codeql.yml:18","Info: jobLevel 'actions' permission set to 'read': .github/workflows/codeql.yml:17","Info: found token with 'none' permissions: .github/workflows/codeql.yml:1","Info: topLevel permissions set to 'read-all': .github/workflows/scorecard.yml:14","Info: found token with 'none' permissions: .github/workflows/test.yml:1","Info: found token with 'none' permissions: .github/workflows/test_wasip1.yml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#token-permissions"}},{"name":"Pinned-Dependencies","score":5,"reason":"dependency not pinned by hash detected -- score normalized to 5","details":["Warn: goCommand not pinned by hash: scripts/wasirun-wrapper:6","Warn: goCommand not pinned by hash: .github/workflows/test_wasip1.yml:27","Info:  10 out of  10 GitHub-owned GitHubAction dependencies pinned","Info:   1 out of   1 third-party GitHubAction dependencies pinned","Info:   0 out of   2 goCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#pinned-dependencies"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: Apache License 2.0: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#license"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#cii-best-practices"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#vulnerabilities"}},{"name":"SAST","score":10,"reason":"SAST tool is run on all commits","details":["Info: SAST configuration detected: CodeQL","Info: all commits (30) are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#sast"}},{"name":"Security-Policy","score":0,"reason":"security policy file not detected","details":["Warn: no security policy file detected","Warn: no security file to analyze","Warn: no security file to analyze","Warn: no security file to analyze"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#security-policy"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#fuzzing"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#signed-releases"}},{"name":"Branch-Protection","score":6,"reason":"branch protection is not maximal on development and all release branches","details":["Info: 'allow deletion' disabled on branch 'main'","Info: 'allow deletion' disabled on branch 'releases/v5.x'","Info: 'force pushes' disabled on branch 'main'","Info: 'force pushes' disabled on branch 'releases/v5.x'","Warn: 'branch protection settings apply to administrators' is disabled on branch 'main'","Warn: 'branch protection settings apply to administrators' is disabled on branch 'releases/v5.x'","Info: 'stale review dismissal' is required to merge on branch 'main'","Info: 'stale review dismissal' is required to merge on branch 'releases/v5.x'","Warn: required approving review count is 1 on branch 'main'","Warn: required approving review count is 1 on branch 'releases/v5.x'","Warn: codeowners review is not required on branch 'main'","Warn: codeowners review is not required on branch 'releases/v5.x'","Info: 'last push approval' is required to merge on branch 'main'","Info: 'last push approval' is required to merge on branch 'releases/v5.x'","Warn: no status checks found to merge onto branch 'main'","Warn: no status checks found to merge onto branch 'releases/v5.x'","Info: PRs are required in order to make changes on branch 'main'","Info: PRs are required in order to make changes on branch 'releases/v5.x'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#branch-protection"}},{"name":"CI-Tests","score":10,"reason":"15 out of 15 merged PRs checked by a CI test -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project runs tests before pull requests are merged.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#ci-tests"}},{"name":"Contributors","score":10,"reason":"project has 28 contributing companies or organizations","details":["Info: found contributions from: CodeCantor, DataDog, SUSE, bblfsh, croupiers, datadog, distribyted, dotnet, emberjs, fluxcd, glimmerjs, go-enry, go-git, hdiv, ipfs, ipld, knative, kubernetes, kubernetes-sigs, libp2p, mindersec, mloncode, qubesome, rancher, rancher @suse, rancherlabs, sigstore, sqle"],"documentation":{"short":"Determines if the project has a set of contributors from multiple organizations (e.g., companies).","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#contributors"}}]},"last_synced_at":"2025-08-19T03:33:03.665Z","repository_id":46417246,"created_at":"2025-08-19T03:33:03.665Z","updated_at":"2025-08-19T03:33:03.665Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":30897946,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-03-24T08:58:18.477Z","status":"ssl_error","status_checked_at":"2026-03-24T08:57:59.595Z","response_time":106,"last_error":"SSL_read: unexpected eof while reading","robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":false,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"go-git","name":"go-git","uuid":"57653224","kind":"organization","description":"A highly extensible Git implementation in pure Go.","email":null,"website":null,"location":null,"twitter":null,"company":null,"icon_url":"https://avatars.githubusercontent.com/u/57653224?v=4","repositories_count":4,"last_synced_at":"2023-03-04T21:00:52.787Z","metadata":{"has_sponsors_listing":false},"html_url":"https://github.com/go-git","funding_links":[],"total_stars":null,"followers":null,"following":null,"created_at":"2022-11-15T00:42:35.065Z","updated_at":"2023-03-04T21:00:52.803Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/go-git","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/go-git/repositories"},"tags":[{"name":"v5.8.0","sha":"8662784198181209e3a42818bf7ce0258cb4051c","kind":"commit","published_at":"2026-02-24T22:55:39.000Z","download_url":"https://codeload.github.com/go-git/go-billy/tar.gz/v5.8.0","html_url":"https://github.com/go-git/go-billy/releases/tag/v5.8.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-git/go-billy@v5.8.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy/tags/v5.8.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy/tags/v5.8.0/manifests"},{"name":"v5.7.0","sha":"cc50ee75c06c917f097a7ea5f1e3cbb21b7b8e0a","kind":"commit","published_at":"2025-12-06T10:17:49.000Z","download_url":"https://codeload.github.com/go-git/go-billy/tar.gz/v5.7.0","html_url":"https://github.com/go-git/go-billy/releases/tag/v5.7.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-git/go-billy@v5.7.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy/tags/v5.7.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy/tags/v5.7.0/manifests"},{"name":"v5.6.2","sha":"9f8b16d30b0a071884faba91fd4edff482af5bde","kind":"commit","published_at":"2025-01-10T16:06:35.000Z","download_url":"https://codeload.github.com/go-git/go-billy/tar.gz/v5.6.2","html_url":"https://github.com/go-git/go-billy/releases/tag/v5.6.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-git/go-billy@v5.6.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy/tags/v5.6.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy/tags/v5.6.2/manifests"},{"name":"v5.6.1","sha":"a6c6b505da9f067ef0ad91daa7010a693024e055","kind":"commit","published_at":"2024-12-28T12:40:04.000Z","download_url":"https://codeload.github.com/go-git/go-billy/tar.gz/v5.6.1","html_url":"https://github.com/go-git/go-billy/releases/tag/v5.6.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-git/go-billy@v5.6.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy/tags/v5.6.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy/tags/v5.6.1/manifests"},{"name":"v5.6.0","sha":"371e232676ac6807a104d8d2d3373b2327840aff","kind":"commit","published_at":"2024-10-08T10:10:53.000Z","download_url":"https://codeload.github.com/go-git/go-billy/tar.gz/v5.6.0","html_url":"https://github.com/go-git/go-billy/releases/tag/v5.6.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-git/go-billy@v5.6.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy/tags/v5.6.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy/tags/v5.6.0/manifests"},{"name":"v5.5.0","sha":"5c1dfec7a041579bb69e0f248293c03c2a856c55","kind":"commit","published_at":"2023-09-11T16:14:50.000Z","download_url":"https://codeload.github.com/go-git/go-billy/tar.gz/v5.5.0","html_url":"https://github.com/go-git/go-billy/releases/tag/v5.5.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-git/go-billy@v5.5.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy/tags/v5.5.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy/tags/v5.5.0/manifests"},{"name":"v5.4.1","sha":"ed16d7ba55f95b937e995cb7890e91e1e785b7be","kind":"commit","published_at":"2023-02-05T11:14:30.000Z","download_url":"https://codeload.github.com/go-git/go-billy/tar.gz/v5.4.1","html_url":"https://github.com/go-git/go-billy/releases/tag/v5.4.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-git/go-billy@v5.4.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy/tags/v5.4.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy/tags/v5.4.1/manifests"},{"name":"v5.4.0","sha":"1b88f62a6a858b72fd9b8596c78e5335d8990685","kind":"commit","published_at":"2022-12-19T16:39:30.000Z","download_url":"https://codeload.github.com/go-git/go-billy/tar.gz/v5.4.0","html_url":"https://github.com/go-git/go-billy/releases/tag/v5.4.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-git/go-billy@v5.4.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy/tags/v5.4.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy/tags/v5.4.0/manifests"},{"name":"v5.3.1","sha":"3bf3fe5b381bcfa471f7f6054c0cf2309c35e651","kind":"commit","published_at":"2021-05-02T23:02:33.000Z","download_url":"https://codeload.github.com/go-git/go-billy/tar.gz/v5.3.1","html_url":"https://github.com/go-git/go-billy/releases/tag/v5.3.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-git/go-billy@v5.3.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy/tags/v5.3.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy/tags/v5.3.1/manifests"},{"name":"v5.3.0","sha":"af7e4ac12d42e726180d4474122a2266f18b07d6","kind":"commit","published_at":"2021-04-28T22:50:51.000Z","download_url":"https://codeload.github.com/go-git/go-billy/tar.gz/v5.3.0","html_url":"https://github.com/go-git/go-billy/releases/tag/v5.3.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-git/go-billy@v5.3.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy/tags/v5.3.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy/tags/v5.3.0/manifests"},{"name":"v5.2.0","sha":"42ead41a46a48b2e0ebc6aa7ab1456a5de3d1b23","kind":"commit","published_at":"2021-04-22T00:15:16.000Z","download_url":"https://codeload.github.com/go-git/go-billy/tar.gz/v5.2.0","html_url":"https://github.com/go-git/go-billy/releases/tag/v5.2.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-git/go-billy@v5.2.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy/tags/v5.2.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy/tags/v5.2.0/manifests"},{"name":"v5.1.0","sha":"3d7f61fe9ffd652dd388e5aab60b969b86f43fa3","kind":"commit","published_at":"2021-03-10T06:50:46.000Z","download_url":"https://codeload.github.com/go-git/go-billy/tar.gz/v5.1.0","html_url":"https://github.com/go-git/go-billy/releases/tag/v5.1.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-git/go-billy@v5.1.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy/tags/v5.1.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy/tags/v5.1.0/manifests"},{"name":"v5.0.0","sha":"205ba6585ca03bd60e304f7fa0b270232ba1d707","kind":"commit","published_at":"2020-03-09T20:00:45.000Z","download_url":"https://codeload.github.com/go-git/go-billy/tar.gz/v5.0.0","html_url":"https://github.com/go-git/go-billy/releases/tag/v5.0.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-git/go-billy@v5.0.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy/tags/v5.0.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy/tags/v5.0.0/manifests"},{"name":"v4.3.2","sha":"780403cfc1bc95ff4d07e7b26db40a6186c5326e","kind":"commit","published_at":"2019-07-29T15:17:39.000Z","download_url":"https://codeload.github.com/go-git/go-billy/tar.gz/v4.3.2","html_url":"https://github.com/go-git/go-billy/releases/tag/v4.3.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-git/go-billy@v4.3.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy/tags/v4.3.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy/tags/v4.3.2/manifests"},{"name":"v4.3.1","sha":"711f3aa5b30ce9bbc7d708792ca98b913cbbd4a5","kind":"commit","published_at":"2019-06-30T22:50:54.000Z","download_url":"https://codeload.github.com/go-git/go-billy/tar.gz/v4.3.1","html_url":"https://github.com/go-git/go-billy/releases/tag/v4.3.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-git/go-billy@v4.3.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy/tags/v4.3.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy/tags/v4.3.1/manifests"},{"name":"v4.3.0","sha":"982626487c60a5252e7d0b695ca23fb0fa2fd670","kind":"commit","published_at":"2018-09-19T10:02:40.000Z","download_url":"https://codeload.github.com/go-git/go-billy/tar.gz/v4.3.0","html_url":"https://github.com/go-git/go-billy/releases/tag/v4.3.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-git/go-billy@v4.3.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy/tags/v4.3.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy/tags/v4.3.0/manifests"},{"name":"v4.2.1","sha":"59952543636f55de3f860b477b615093d5c2c3e4","kind":"commit","published_at":"2018-09-04T09:03:59.000Z","download_url":"https://codeload.github.com/go-git/go-billy/tar.gz/v4.2.1","html_url":"https://github.com/go-git/go-billy/releases/tag/v4.2.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-git/go-billy@v4.2.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy/tags/v4.2.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy/tags/v4.2.1/manifests"},{"name":"v4.2.0","sha":"83cf655d40b15b427014d7875d10850f96edba14","kind":"commit","published_at":"2018-06-11T08:24:45.000Z","download_url":"https://codeload.github.com/go-git/go-billy/tar.gz/v4.2.0","html_url":"https://github.com/go-git/go-billy/releases/tag/v4.2.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-git/go-billy@v4.2.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy/tags/v4.2.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy/tags/v4.2.0/manifests"},{"name":"v4.1.1","sha":"df053870ae7070b0350624ba5a22161ba3796cc0","kind":"commit","published_at":"2018-04-03T08:40:37.000Z","download_url":"https://codeload.github.com/go-git/go-billy/tar.gz/v4.1.1","html_url":"https://github.com/go-git/go-billy/releases/tag/v4.1.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-git/go-billy@v4.1.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy/tags/v4.1.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy/tags/v4.1.1/manifests"},{"name":"v4.1.0","sha":"027dceab1aa836eb310d92c2eb2266e4dc9f4b81","kind":"commit","published_at":"2018-02-02T09:03:00.000Z","download_url":"https://codeload.github.com/go-git/go-billy/tar.gz/v4.1.0","html_url":"https://github.com/go-git/go-billy/releases/tag/v4.1.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-git/go-billy@v4.1.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy/tags/v4.1.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy/tags/v4.1.0/manifests"},{"name":"v4.0.2","sha":"e940f8b62a8e61adc71f69802c1cc8305b64ec96","kind":"commit","published_at":"2018-01-14T23:10:49.000Z","download_url":"https://codeload.github.com/go-git/go-billy/tar.gz/v4.0.2","html_url":"https://github.com/go-git/go-billy/releases/tag/v4.0.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-git/go-billy@v4.0.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy/tags/v4.0.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy/tags/v4.0.2/manifests"},{"name":"v4.0.1","sha":"053dbd006f81a230434f712314aacfb540b52cc5","kind":"commit","published_at":"2017-11-27T19:20:57.000Z","download_url":"https://codeload.github.com/go-git/go-billy/tar.gz/v4.0.1","html_url":"https://github.com/go-git/go-billy/releases/tag/v4.0.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-git/go-billy@v4.0.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy/tags/v4.0.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy/tags/v4.0.1/manifests"},{"name":"v4.0.0","sha":"198f713dfdcd18797f6ac7c729e2440e5fde337f","kind":"commit","published_at":"2017-11-18T23:00:01.000Z","download_url":"https://codeload.github.com/go-git/go-billy/tar.gz/v4.0.0","html_url":"https://github.com/go-git/go-billy/releases/tag/v4.0.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-git/go-billy@v4.0.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy/tags/v4.0.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy/tags/v4.0.0/manifests"},{"name":"v3.1.0","sha":"c329b7bc7b9d24905d2bc1b85bfa29f7ae266314","kind":"commit","published_at":"2017-06-27T10:15:46.000Z","download_url":"https://codeload.github.com/go-git/go-billy/tar.gz/v3.1.0","html_url":"https://github.com/go-git/go-billy/releases/tag/v3.1.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-git/go-billy@v3.1.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy/tags/v3.1.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy/tags/v3.1.0/manifests"},{"name":"v3.0.1","sha":"e501c17e5a47cc1adfdf16fbf54e60e6dafb92c2","kind":"commit","published_at":"2017-06-19T13:02:16.000Z","download_url":"https://codeload.github.com/go-git/go-billy/tar.gz/v3.0.1","html_url":"https://github.com/go-git/go-billy/releases/tag/v3.0.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-git/go-billy@v3.0.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy/tags/v3.0.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy/tags/v3.0.1/manifests"},{"name":"v3.0.0","sha":"d48e2a7f38a8b154de0cbdac7f9ed4f0a4fc8722","kind":"commit","published_at":"2017-06-16T16:12:35.000Z","download_url":"https://codeload.github.com/go-git/go-billy/tar.gz/v3.0.0","html_url":"https://github.com/go-git/go-billy/releases/tag/v3.0.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-git/go-billy@v3.0.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy/tags/v3.0.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy/tags/v3.0.0/manifests"},{"name":"v2.0.5","sha":"52497601f113730d14baa00453674376fca22f22","kind":"commit","published_at":"2017-05-17T08:25:08.000Z","download_url":"https://codeload.github.com/go-git/go-billy/tar.gz/v2.0.5","html_url":"https://github.com/go-git/go-billy/releases/tag/v2.0.5","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-git/go-billy@v2.0.5","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy/tags/v2.0.5","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy/tags/v2.0.5/manifests"},{"name":"v2.0.4","sha":"99d839800b93542496ec19319f37abacf17f589f","kind":"commit","published_at":"2017-04-19T07:02:02.000Z","download_url":"https://codeload.github.com/go-git/go-billy/tar.gz/v2.0.4","html_url":"https://github.com/go-git/go-billy/releases/tag/v2.0.4","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-git/go-billy@v2.0.4","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy/tags/v2.0.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy/tags/v2.0.4/manifests"},{"name":"v2.0.3","sha":"0f02306b1aa8fe9ed04feb409ceffedc568fa2a4","kind":"commit","published_at":"2017-04-17T21:18:04.000Z","download_url":"https://codeload.github.com/go-git/go-billy/tar.gz/v2.0.3","html_url":"https://github.com/go-git/go-billy/releases/tag/v2.0.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-git/go-billy@v2.0.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy/tags/v2.0.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy/tags/v2.0.3/manifests"},{"name":"v2.0.2","sha":"0661b96fbe0d3d820b4bfc51c95ae981560b5553","kind":"commit","published_at":"2017-04-17T10:59:54.000Z","download_url":"https://codeload.github.com/go-git/go-billy/tar.gz/v2.0.2","html_url":"https://github.com/go-git/go-billy/releases/tag/v2.0.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-git/go-billy@v2.0.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy/tags/v2.0.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy/tags/v2.0.2/manifests"},{"name":"v2.0.1","sha":"bf5cdf7d823be98aa2851ad3e1253cd11bcea1fe","kind":"commit","published_at":"2017-04-12T11:01:20.000Z","download_url":"https://codeload.github.com/go-git/go-billy/tar.gz/v2.0.1","html_url":"https://github.com/go-git/go-billy/releases/tag/v2.0.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-git/go-billy@v2.0.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy/tags/v2.0.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy/tags/v2.0.1/manifests"},{"name":"v2.0.0","sha":"0dfa3dd2e89c570b8e1e25f5b28647525c44c3ca","kind":"commit","published_at":"2017-03-10T11:24:05.000Z","download_url":"https://codeload.github.com/go-git/go-billy/tar.gz/v2.0.0","html_url":"https://github.com/go-git/go-billy/releases/tag/v2.0.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-git/go-billy@v2.0.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy/tags/v2.0.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy/tags/v2.0.0/manifests"},{"name":"v1.0.0","sha":"1dfacf9a4b2ac372f16acd6b1aab9a50df955a2a","kind":"commit","published_at":"2017-01-30T15:44:06.000Z","download_url":"https://codeload.github.com/go-git/go-billy/tar.gz/v1.0.0","html_url":"https://github.com/go-git/go-billy/releases/tag/v1.0.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-git/go-billy@v1.0.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy/tags/v1.0.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy/tags/v1.0.0/manifests"},{"name":"v1-alpha","sha":"6ca1fd6ba86f5929a23633719f5fd413a0046998","kind":"commit","published_at":"2016-12-15T10:38:17.000Z","download_url":"https://codeload.github.com/go-git/go-billy/tar.gz/v1-alpha","html_url":"https://github.com/go-git/go-billy/releases/tag/v1-alpha","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-git/go-billy@v1-alpha","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy/tags/v1-alpha","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy/tags/v1-alpha/manifests"}]},"repo_metadata_updated_at":"2026-03-25T17:00:25.169Z","dependent_packages_count":7221,"downloads":null,"downloads_period":null,"dependent_repos_count":13460,"rankings":{"downloads":null,"dependent_repos_count":0.06543457475822391,"dependent_packages_count":0.04459091465298935,"stargazers_count":3.4891872216956576,"forks_count":4.176600212583931,"docker_downloads_count":0.030902540852536808,"average":1.5613430929086678},"purl":"pkg:golang/github.com/go-git/go-billy/v5","advisories":[{"uuid":"GSA_kwCzR0hTQS1xdzY0LTN4OTgtZzdxMs4ABW4H","url":"https://github.com/advisories/GHSA-qw64-3x98-g7q2","title":"go-billy has path traversal vulnerabilities","description":"### Impact\nMultiple path traversal issues exist across different components of `go-billy`. Insufficient path sanitization and boundary enforcement may allow crafted paths (e.g., using `..`) to escape intended base directories.\n\nWhile go-billy was not originally designed to provide a strong security boundary, some of these issues were inconsistent across some of the built-in implementations. This results in scenarios where applications relying on `go-billy` for some level of isolation may inadvertently expose access to unintended filesystem locations.\n\nThe `osfs.ChrootOS` implementation is notably affected by this vulnerability and is now deprecated in `v5`, removed at `v6`. Users are recommended to move on to `osfs.BoundOS` instead: `osfs.New(path, WithBoundOS())`.\n\nUsers requiring stronger security boundary enforcement are recommended to upgrade to `v6`, where the `osfs` implementation are backed by the [traversal-resistant](https://go.dev/blog/osroot) primitive [os.Root](https://pkg.go.dev/os#Root).\n\n### Patches\nUsers should upgrade to a patched version in order to mitigate this vulnerability. Versions prior to `v5` are likely to be affected, users are recommended to upgrade to a supported `go-billy` version.\n\n### Credits\nThanks to @faran66 and @vnykmshr for finding and separately reporting this issue privately to the go-git project. 🙇","origin":"UNSPECIFIED","severity":"HIGH","published_at":"2026-05-14T18:25:38.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":8.1,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N","references":["https://github.com/go-git/go-billy/security/advisories/GHSA-qw64-3x98-g7q2","https://github.com/go-git/go-billy/releases/tag/v5.9.0","https://github.com/go-git/go-billy/releases/tag/v6.0.0-alpha.1","https://nvd.nist.gov/vuln/detail/CVE-2026-44973","https://github.com/advisories/GHSA-qw64-3x98-g7q2"],"source_kind":"github","identifiers":["GHSA-qw64-3x98-g7q2","CVE-2026-44973"],"repository_url":null,"blast_radius":0.0,"created_at":"2026-05-14T19:00:24.443Z","updated_at":"2026-06-24T01:00:52.555Z","epss_percentage":0.0031,"epss_percentile":0.22579,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS1xdzY0LTN4OTgtZzdxMs4ABW4H","html_url":"https://advisories.ecosyste.ms/advisories/GSA_kwCzR0hTQS1xdzY0LTN4OTgtZzdxMs4ABW4H","packages":[{"ecosystem":"go","package_name":"github.com/go-git/go-billy/v6","versions":[{"first_patched_version":"6.0.0-alpha.1","vulnerable_version_range":"\u003c 6.0.0-alpha.1"}],"purl":"pkg:go/github.com%2Fgo-git%2Fgo-billy%2Fv6"},{"ecosystem":"go","package_name":"github.com/go-git/go-billy/v5","versions":[{"first_patched_version":"5.9.0","vulnerable_version_range":"\u003c 5.9.0"}],"purl":"pkg:go/github.com%2Fgo-git%2Fgo-billy%2Fv5"}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS1xdzY0LTN4OTgtZzdxMs4ABW4H/related_packages","related_advisories":[]},{"uuid":"GSA_kwCzR0hTQS1tM3hjLWg4OTItZ2d4Ns4ABWyK","url":"https://github.com/advisories/GHSA-m3xc-h892-ggx6","title":"go-billy: Lack of depth and cycle detection in symlink resolution may lead to infinite loops and resource exhaustion","description":"### Impact\nMultiple components may improperly handle crafted or malformed input, resulting in panics, infinite loops, uncontrolled recursion, or excessive resource consumption.\n\nThese issues arise from insufficient validation and missing safety mechanisms such as cycle detection, recursion limits, or defensive handling of unexpected states when processing untrusted repository data and filesystem structures.\n\n### Patches\nUsers should upgrade to a patched version in order to mitigate this vulnerability. Versions prior to `v5` are likely to be affected, users are recommended to upgrade to a supported `go-billy` version.\n\n### Credits\nThanks to @faran66 for finding and reporting this issue privately to the go-git project. 🙇","origin":"UNSPECIFIED","severity":"MODERATE","published_at":"2026-05-13T15:29:47.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":6.5,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","references":["https://github.com/go-git/go-billy/security/advisories/GHSA-m3xc-h892-ggx6","https://github.com/go-git/go-billy/releases/tag/v5.9.0","https://github.com/go-git/go-billy/releases/tag/v6.0.0-alpha.1","https://nvd.nist.gov/vuln/detail/CVE-2026-44740","https://github.com/advisories/GHSA-m3xc-h892-ggx6"],"source_kind":"github","identifiers":["GHSA-m3xc-h892-ggx6","CVE-2026-44740"],"repository_url":null,"blast_radius":0.0,"created_at":"2026-05-13T16:00:09.158Z","updated_at":"2026-06-22T18:00:58.644Z","epss_percentage":0.00295,"epss_percentile":0.20974,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS1tM3hjLWg4OTItZ2d4Ns4ABWyK","html_url":"https://advisories.ecosyste.ms/advisories/GSA_kwCzR0hTQS1tM3hjLWg4OTItZ2d4Ns4ABWyK","packages":[{"ecosystem":"go","package_name":"github.com/go-git/go-billy/v6","versions":[{"first_patched_version":"6.0.0-alpha.1","vulnerable_version_range":"\u003c 6.0.0-alpha.1"}],"purl":"pkg:go/github.com%2Fgo-git%2Fgo-billy%2Fv6"},{"ecosystem":"go","package_name":"github.com/go-git/go-billy/v5","versions":[{"first_patched_version":"5.9.0","vulnerable_version_range":"\u003c 5.9.0"}],"purl":"pkg:go/github.com%2Fgo-git%2Fgo-billy%2Fv5"}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS1tM3hjLWg4OTItZ2d4Ns4ABWyK/related_packages","related_advisories":[]}],"docker_usage_url":"https://docker.ecosyste.ms/usage/go/github.com/go-git/go-billy/v5","docker_dependents_count":2482,"docker_downloads_count":13787218905,"usage_url":"https://repos.ecosyste.ms/usage/go/github.com/go-git/go-billy/v5","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/go/github.com/go-git/go-billy/v5/dependencies","status":null,"funding_links":[],"critical":true,"issue_metadata":{"last_synced_at":"2026-02-09T15:03:08.348Z","issues_count":33,"pull_requests_count":192,"avg_time_to_close_issue":44029525.95454545,"avg_time_to_close_pull_request":2373581.36196319,"issues_closed_count":22,"pull_requests_closed_count":163,"pull_request_authors_count":29,"issue_authors_count":29,"avg_comments_per_issue":1.4848484848484849,"avg_comments_per_pull_request":0.3489583333333333,"merged_pull_requests_count":143,"bot_issues_count":1,"bot_pull_requests_count":116,"past_year_issues_count":6,"past_year_pull_requests_count":46,"past_year_avg_time_to_close_issue":233359.0,"past_year_avg_time_to_close_pull_request":313714.48484848486,"past_year_issues_closed_count":2,"past_year_pull_requests_closed_count":33,"past_year_pull_request_authors_count":6,"past_year_issue_authors_count":6,"past_year_avg_comments_per_issue":1.1666666666666667,"past_year_avg_comments_per_pull_request":0.30434782608695654,"past_year_bot_issues_count":1,"past_year_bot_pull_requests_count":30,"past_year_merged_pull_requests_count":32,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy/issues","maintainers":[{"login":"pjbgf","count":34,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/pjbgf"}],"active_maintainers":[{"login":"pjbgf","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/pjbgf"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fgo-git%2Fgo-billy%2Fv5/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fgo-git%2Fgo-billy%2Fv5/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fgo-git%2Fgo-billy%2Fv5/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fgo-git%2Fgo-billy%2Fv5/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fgo-git%2Fgo-billy%2Fv5/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fgo-git%2Fgo-billy%2Fv5/codemeta","maintainers":[],"registry":{"name":"proxy.golang.org","url":"https://proxy.golang.org","ecosystem":"go","default":true,"packages_count":2206448,"maintainers_count":0,"namespaces_count":792747,"keywords_count":113213,"github":"golang","metadata":{"funded_packages_count":53976},"icon_url":"https://github.com/golang.png","created_at":"2022-04-04T15:19:22.939Z","updated_at":"2026-06-10T05:03:23.672Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/namespaces"}},{"id":11308824,"name":"github.com/go-git/go-billy/v6","ecosystem":"go","description":"","homepage":"https://github.com/go-git/go-billy","licenses":"Apache-2.0","normalized_licenses":["Apache-2.0"],"repository_url":"https://github.com/go-git/go-billy","keywords_array":[],"namespace":"github.com/go-git/go-billy","versions_count":1,"first_release_published_at":"2026-05-11T05:51:04.000Z","latest_release_published_at":"2026-05-11T05:51:04.000Z","latest_release_number":"v6.0.0-alpha.1","last_synced_at":"2026-07-11T01:20:34.399Z","created_at":"2025-01-29T06:51:56.565Z","updated_at":"2026-07-11T01:20:34.399Z","registry_url":"https://pkg.go.dev/github.com/go-git/go-billy/v6","install_command":"go get github.com/go-git/go-billy/v6","documentation_url":"https://pkg.go.dev/github.com/go-git/go-billy/v6#section-documentation","metadata":{},"repo_metadata":{"id":46417246,"uuid":"246113572","full_name":"go-git/go-billy","owner":"go-git","description":"The missing interface filesystem abstraction for Go","archived":false,"fork":false,"pushed_at":"2026-03-05T17:27:08.000Z","size":657,"stargazers_count":394,"open_issues_count":22,"forks_count":59,"subscribers_count":8,"default_branch":"main","last_synced_at":"2026-03-24T15:22:50.111Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":"https://pkg.go.dev/github.com/go-git/go-billy/v5","language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/go-git.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null}},"created_at":"2020-03-09T18:35:04.000Z","updated_at":"2026-03-23T11:47:42.000Z","dependencies_parsed_at":"2026-02-26T03:00:35.579Z","dependency_job_id":null,"html_url":"https://github.com/go-git/go-billy","commit_stats":{"total_commits":207,"total_committers":34,"mean_commits":6.088235294117647,"dds":0.6473429951690821,"last_synced_commit":"1bb3aa54c166c2384e0acf4d4e595911230c209e"},"previous_names":[],"tags_count":34,"template":false,"template_full_name":null,"purl":"pkg:github/go-git/go-billy","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/go-git","download_url":"https://codeload.github.com/go-git/go-billy/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy/sbom","scorecard":{"id":431830,"data":{"date":"2025-08-17T17:21:30Z","repo":{"name":"github.com/go-git/go-billy","commit":"3a9ca963b7289d5bc1fd7bd48dc4d818f6997096"},"scorecard":{"version":"v5.2.1","commit":"ab2f6e92482462fe66246d9e32f642855a691dc1"},"score":7.2,"checks":[{"name":"Code-Review","score":0,"reason":"Found 0/2 approved changesets -- score normalized to 0","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#code-review"}},{"name":"Dependency-Update-Tool","score":10,"reason":"update tool detected","details":["Info: detected update tool: Dependabot: .github/dependabot.yaml:1"],"documentation":{"short":"Determines if the project uses a dependency update tool.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#dependency-update-tool"}},{"name":"Maintained","score":10,"reason":"19 commit(s) and 1 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#maintained"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#packaging"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#dangerous-workflow"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#binary-artifacts"}},{"name":"Token-Permissions","score":10,"reason":"GitHub workflow tokens follow principle of least privilege","details":["Info: jobLevel 'contents' permission set to 'read': .github/workflows/codeql.yml:18","Info: jobLevel 'actions' permission set to 'read': .github/workflows/codeql.yml:17","Info: found token with 'none' permissions: .github/workflows/codeql.yml:1","Info: topLevel permissions set to 'read-all': .github/workflows/scorecard.yml:14","Info: found token with 'none' permissions: .github/workflows/test.yml:1","Info: found token with 'none' permissions: .github/workflows/test_wasip1.yml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#token-permissions"}},{"name":"Pinned-Dependencies","score":5,"reason":"dependency not pinned by hash detected -- score normalized to 5","details":["Warn: goCommand not pinned by hash: scripts/wasirun-wrapper:6","Warn: goCommand not pinned by hash: .github/workflows/test_wasip1.yml:27","Info:  10 out of  10 GitHub-owned GitHubAction dependencies pinned","Info:   1 out of   1 third-party GitHubAction dependencies pinned","Info:   0 out of   2 goCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#pinned-dependencies"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: Apache License 2.0: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#license"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#cii-best-practices"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#vulnerabilities"}},{"name":"SAST","score":10,"reason":"SAST tool is run on all commits","details":["Info: SAST configuration detected: CodeQL","Info: all commits (30) are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#sast"}},{"name":"Security-Policy","score":0,"reason":"security policy file not detected","details":["Warn: no security policy file detected","Warn: no security file to analyze","Warn: no security file to analyze","Warn: no security file to analyze"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#security-policy"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#fuzzing"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#signed-releases"}},{"name":"Branch-Protection","score":6,"reason":"branch protection is not maximal on development and all release branches","details":["Info: 'allow deletion' disabled on branch 'main'","Info: 'allow deletion' disabled on branch 'releases/v5.x'","Info: 'force pushes' disabled on branch 'main'","Info: 'force pushes' disabled on branch 'releases/v5.x'","Warn: 'branch protection settings apply to administrators' is disabled on branch 'main'","Warn: 'branch protection settings apply to administrators' is disabled on branch 'releases/v5.x'","Info: 'stale review dismissal' is required to merge on branch 'main'","Info: 'stale review dismissal' is required to merge on branch 'releases/v5.x'","Warn: required approving review count is 1 on branch 'main'","Warn: required approving review count is 1 on branch 'releases/v5.x'","Warn: codeowners review is not required on branch 'main'","Warn: codeowners review is not required on branch 'releases/v5.x'","Info: 'last push approval' is required to merge on branch 'main'","Info: 'last push approval' is required to merge on branch 'releases/v5.x'","Warn: no status checks found to merge onto branch 'main'","Warn: no status checks found to merge onto branch 'releases/v5.x'","Info: PRs are required in order to make changes on branch 'main'","Info: PRs are required in order to make changes on branch 'releases/v5.x'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#branch-protection"}},{"name":"CI-Tests","score":10,"reason":"15 out of 15 merged PRs checked by a CI test -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project runs tests before pull requests are merged.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#ci-tests"}},{"name":"Contributors","score":10,"reason":"project has 28 contributing companies or organizations","details":["Info: found contributions from: CodeCantor, DataDog, SUSE, bblfsh, croupiers, datadog, distribyted, dotnet, emberjs, fluxcd, glimmerjs, go-enry, go-git, hdiv, ipfs, ipld, knative, kubernetes, kubernetes-sigs, libp2p, mindersec, mloncode, qubesome, rancher, rancher @suse, rancherlabs, sigstore, sqle"],"documentation":{"short":"Determines if the project has a set of contributors from multiple organizations (e.g., companies).","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#contributors"}}]},"last_synced_at":"2025-08-19T03:33:03.665Z","repository_id":46417246,"created_at":"2025-08-19T03:33:03.665Z","updated_at":"2025-08-19T03:33:03.665Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":30897946,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-03-24T08:58:18.477Z","status":"ssl_error","status_checked_at":"2026-03-24T08:57:59.595Z","response_time":106,"last_error":"SSL_read: unexpected eof while reading","robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":false,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"go-git","name":"go-git","uuid":"57653224","kind":"organization","description":"A highly extensible Git implementation in pure Go.","email":null,"website":null,"location":null,"twitter":null,"company":null,"icon_url":"https://avatars.githubusercontent.com/u/57653224?v=4","repositories_count":4,"last_synced_at":"2023-03-04T21:00:52.787Z","metadata":{"has_sponsors_listing":false},"html_url":"https://github.com/go-git","funding_links":[],"total_stars":null,"followers":null,"following":null,"created_at":"2022-11-15T00:42:35.065Z","updated_at":"2023-03-04T21:00:52.803Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/go-git","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/go-git/repositories"},"tags":[{"name":"v5.8.0","sha":"8662784198181209e3a42818bf7ce0258cb4051c","kind":"commit","published_at":"2026-02-24T22:55:39.000Z","download_url":"https://codeload.github.com/go-git/go-billy/tar.gz/v5.8.0","html_url":"https://github.com/go-git/go-billy/releases/tag/v5.8.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-git/go-billy@v5.8.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy/tags/v5.8.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy/tags/v5.8.0/manifests"},{"name":"v5.7.0","sha":"cc50ee75c06c917f097a7ea5f1e3cbb21b7b8e0a","kind":"commit","published_at":"2025-12-06T10:17:49.000Z","download_url":"https://codeload.github.com/go-git/go-billy/tar.gz/v5.7.0","html_url":"https://github.com/go-git/go-billy/releases/tag/v5.7.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-git/go-billy@v5.7.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy/tags/v5.7.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy/tags/v5.7.0/manifests"},{"name":"v5.6.2","sha":"9f8b16d30b0a071884faba91fd4edff482af5bde","kind":"commit","published_at":"2025-01-10T16:06:35.000Z","download_url":"https://codeload.github.com/go-git/go-billy/tar.gz/v5.6.2","html_url":"https://github.com/go-git/go-billy/releases/tag/v5.6.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-git/go-billy@v5.6.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy/tags/v5.6.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy/tags/v5.6.2/manifests"},{"name":"v5.6.1","sha":"a6c6b505da9f067ef0ad91daa7010a693024e055","kind":"commit","published_at":"2024-12-28T12:40:04.000Z","download_url":"https://codeload.github.com/go-git/go-billy/tar.gz/v5.6.1","html_url":"https://github.com/go-git/go-billy/releases/tag/v5.6.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-git/go-billy@v5.6.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy/tags/v5.6.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy/tags/v5.6.1/manifests"},{"name":"v5.6.0","sha":"371e232676ac6807a104d8d2d3373b2327840aff","kind":"commit","published_at":"2024-10-08T10:10:53.000Z","download_url":"https://codeload.github.com/go-git/go-billy/tar.gz/v5.6.0","html_url":"https://github.com/go-git/go-billy/releases/tag/v5.6.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-git/go-billy@v5.6.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy/tags/v5.6.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy/tags/v5.6.0/manifests"},{"name":"v5.5.0","sha":"5c1dfec7a041579bb69e0f248293c03c2a856c55","kind":"commit","published_at":"2023-09-11T16:14:50.000Z","download_url":"https://codeload.github.com/go-git/go-billy/tar.gz/v5.5.0","html_url":"https://github.com/go-git/go-billy/releases/tag/v5.5.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-git/go-billy@v5.5.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy/tags/v5.5.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy/tags/v5.5.0/manifests"},{"name":"v5.4.1","sha":"ed16d7ba55f95b937e995cb7890e91e1e785b7be","kind":"commit","published_at":"2023-02-05T11:14:30.000Z","download_url":"https://codeload.github.com/go-git/go-billy/tar.gz/v5.4.1","html_url":"https://github.com/go-git/go-billy/releases/tag/v5.4.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-git/go-billy@v5.4.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy/tags/v5.4.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy/tags/v5.4.1/manifests"},{"name":"v5.4.0","sha":"1b88f62a6a858b72fd9b8596c78e5335d8990685","kind":"commit","published_at":"2022-12-19T16:39:30.000Z","download_url":"https://codeload.github.com/go-git/go-billy/tar.gz/v5.4.0","html_url":"https://github.com/go-git/go-billy/releases/tag/v5.4.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-git/go-billy@v5.4.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy/tags/v5.4.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy/tags/v5.4.0/manifests"},{"name":"v5.3.1","sha":"3bf3fe5b381bcfa471f7f6054c0cf2309c35e651","kind":"commit","published_at":"2021-05-02T23:02:33.000Z","download_url":"https://codeload.github.com/go-git/go-billy/tar.gz/v5.3.1","html_url":"https://github.com/go-git/go-billy/releases/tag/v5.3.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-git/go-billy@v5.3.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy/tags/v5.3.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy/tags/v5.3.1/manifests"},{"name":"v5.3.0","sha":"af7e4ac12d42e726180d4474122a2266f18b07d6","kind":"commit","published_at":"2021-04-28T22:50:51.000Z","download_url":"https://codeload.github.com/go-git/go-billy/tar.gz/v5.3.0","html_url":"https://github.com/go-git/go-billy/releases/tag/v5.3.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-git/go-billy@v5.3.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy/tags/v5.3.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy/tags/v5.3.0/manifests"},{"name":"v5.2.0","sha":"42ead41a46a48b2e0ebc6aa7ab1456a5de3d1b23","kind":"commit","published_at":"2021-04-22T00:15:16.000Z","download_url":"https://codeload.github.com/go-git/go-billy/tar.gz/v5.2.0","html_url":"https://github.com/go-git/go-billy/releases/tag/v5.2.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-git/go-billy@v5.2.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy/tags/v5.2.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy/tags/v5.2.0/manifests"},{"name":"v5.1.0","sha":"3d7f61fe9ffd652dd388e5aab60b969b86f43fa3","kind":"commit","published_at":"2021-03-10T06:50:46.000Z","download_url":"https://codeload.github.com/go-git/go-billy/tar.gz/v5.1.0","html_url":"https://github.com/go-git/go-billy/releases/tag/v5.1.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-git/go-billy@v5.1.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy/tags/v5.1.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy/tags/v5.1.0/manifests"},{"name":"v5.0.0","sha":"205ba6585ca03bd60e304f7fa0b270232ba1d707","kind":"commit","published_at":"2020-03-09T20:00:45.000Z","download_url":"https://codeload.github.com/go-git/go-billy/tar.gz/v5.0.0","html_url":"https://github.com/go-git/go-billy/releases/tag/v5.0.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-git/go-billy@v5.0.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy/tags/v5.0.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy/tags/v5.0.0/manifests"},{"name":"v4.3.2","sha":"780403cfc1bc95ff4d07e7b26db40a6186c5326e","kind":"commit","published_at":"2019-07-29T15:17:39.000Z","download_url":"https://codeload.github.com/go-git/go-billy/tar.gz/v4.3.2","html_url":"https://github.com/go-git/go-billy/releases/tag/v4.3.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-git/go-billy@v4.3.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy/tags/v4.3.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy/tags/v4.3.2/manifests"},{"name":"v4.3.1","sha":"711f3aa5b30ce9bbc7d708792ca98b913cbbd4a5","kind":"commit","published_at":"2019-06-30T22:50:54.000Z","download_url":"https://codeload.github.com/go-git/go-billy/tar.gz/v4.3.1","html_url":"https://github.com/go-git/go-billy/releases/tag/v4.3.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-git/go-billy@v4.3.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy/tags/v4.3.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy/tags/v4.3.1/manifests"},{"name":"v4.3.0","sha":"982626487c60a5252e7d0b695ca23fb0fa2fd670","kind":"commit","published_at":"2018-09-19T10:02:40.000Z","download_url":"https://codeload.github.com/go-git/go-billy/tar.gz/v4.3.0","html_url":"https://github.com/go-git/go-billy/releases/tag/v4.3.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-git/go-billy@v4.3.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy/tags/v4.3.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy/tags/v4.3.0/manifests"},{"name":"v4.2.1","sha":"59952543636f55de3f860b477b615093d5c2c3e4","kind":"commit","published_at":"2018-09-04T09:03:59.000Z","download_url":"https://codeload.github.com/go-git/go-billy/tar.gz/v4.2.1","html_url":"https://github.com/go-git/go-billy/releases/tag/v4.2.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-git/go-billy@v4.2.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy/tags/v4.2.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy/tags/v4.2.1/manifests"},{"name":"v4.2.0","sha":"83cf655d40b15b427014d7875d10850f96edba14","kind":"commit","published_at":"2018-06-11T08:24:45.000Z","download_url":"https://codeload.github.com/go-git/go-billy/tar.gz/v4.2.0","html_url":"https://github.com/go-git/go-billy/releases/tag/v4.2.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-git/go-billy@v4.2.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy/tags/v4.2.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy/tags/v4.2.0/manifests"},{"name":"v4.1.1","sha":"df053870ae7070b0350624ba5a22161ba3796cc0","kind":"commit","published_at":"2018-04-03T08:40:37.000Z","download_url":"https://codeload.github.com/go-git/go-billy/tar.gz/v4.1.1","html_url":"https://github.com/go-git/go-billy/releases/tag/v4.1.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-git/go-billy@v4.1.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy/tags/v4.1.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy/tags/v4.1.1/manifests"},{"name":"v4.1.0","sha":"027dceab1aa836eb310d92c2eb2266e4dc9f4b81","kind":"commit","published_at":"2018-02-02T09:03:00.000Z","download_url":"https://codeload.github.com/go-git/go-billy/tar.gz/v4.1.0","html_url":"https://github.com/go-git/go-billy/releases/tag/v4.1.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-git/go-billy@v4.1.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy/tags/v4.1.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy/tags/v4.1.0/manifests"},{"name":"v4.0.2","sha":"e940f8b62a8e61adc71f69802c1cc8305b64ec96","kind":"commit","published_at":"2018-01-14T23:10:49.000Z","download_url":"https://codeload.github.com/go-git/go-billy/tar.gz/v4.0.2","html_url":"https://github.com/go-git/go-billy/releases/tag/v4.0.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-git/go-billy@v4.0.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy/tags/v4.0.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy/tags/v4.0.2/manifests"},{"name":"v4.0.1","sha":"053dbd006f81a230434f712314aacfb540b52cc5","kind":"commit","published_at":"2017-11-27T19:20:57.000Z","download_url":"https://codeload.github.com/go-git/go-billy/tar.gz/v4.0.1","html_url":"https://github.com/go-git/go-billy/releases/tag/v4.0.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-git/go-billy@v4.0.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy/tags/v4.0.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy/tags/v4.0.1/manifests"},{"name":"v4.0.0","sha":"198f713dfdcd18797f6ac7c729e2440e5fde337f","kind":"commit","published_at":"2017-11-18T23:00:01.000Z","download_url":"https://codeload.github.com/go-git/go-billy/tar.gz/v4.0.0","html_url":"https://github.com/go-git/go-billy/releases/tag/v4.0.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-git/go-billy@v4.0.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy/tags/v4.0.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy/tags/v4.0.0/manifests"},{"name":"v3.1.0","sha":"c329b7bc7b9d24905d2bc1b85bfa29f7ae266314","kind":"commit","published_at":"2017-06-27T10:15:46.000Z","download_url":"https://codeload.github.com/go-git/go-billy/tar.gz/v3.1.0","html_url":"https://github.com/go-git/go-billy/releases/tag/v3.1.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-git/go-billy@v3.1.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy/tags/v3.1.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy/tags/v3.1.0/manifests"},{"name":"v3.0.1","sha":"e501c17e5a47cc1adfdf16fbf54e60e6dafb92c2","kind":"commit","published_at":"2017-06-19T13:02:16.000Z","download_url":"https://codeload.github.com/go-git/go-billy/tar.gz/v3.0.1","html_url":"https://github.com/go-git/go-billy/releases/tag/v3.0.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-git/go-billy@v3.0.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy/tags/v3.0.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy/tags/v3.0.1/manifests"},{"name":"v3.0.0","sha":"d48e2a7f38a8b154de0cbdac7f9ed4f0a4fc8722","kind":"commit","published_at":"2017-06-16T16:12:35.000Z","download_url":"https://codeload.github.com/go-git/go-billy/tar.gz/v3.0.0","html_url":"https://github.com/go-git/go-billy/releases/tag/v3.0.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-git/go-billy@v3.0.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy/tags/v3.0.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy/tags/v3.0.0/manifests"},{"name":"v2.0.5","sha":"52497601f113730d14baa00453674376fca22f22","kind":"commit","published_at":"2017-05-17T08:25:08.000Z","download_url":"https://codeload.github.com/go-git/go-billy/tar.gz/v2.0.5","html_url":"https://github.com/go-git/go-billy/releases/tag/v2.0.5","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-git/go-billy@v2.0.5","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy/tags/v2.0.5","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy/tags/v2.0.5/manifests"},{"name":"v2.0.4","sha":"99d839800b93542496ec19319f37abacf17f589f","kind":"commit","published_at":"2017-04-19T07:02:02.000Z","download_url":"https://codeload.github.com/go-git/go-billy/tar.gz/v2.0.4","html_url":"https://github.com/go-git/go-billy/releases/tag/v2.0.4","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-git/go-billy@v2.0.4","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy/tags/v2.0.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy/tags/v2.0.4/manifests"},{"name":"v2.0.3","sha":"0f02306b1aa8fe9ed04feb409ceffedc568fa2a4","kind":"commit","published_at":"2017-04-17T21:18:04.000Z","download_url":"https://codeload.github.com/go-git/go-billy/tar.gz/v2.0.3","html_url":"https://github.com/go-git/go-billy/releases/tag/v2.0.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-git/go-billy@v2.0.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy/tags/v2.0.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy/tags/v2.0.3/manifests"},{"name":"v2.0.2","sha":"0661b96fbe0d3d820b4bfc51c95ae981560b5553","kind":"commit","published_at":"2017-04-17T10:59:54.000Z","download_url":"https://codeload.github.com/go-git/go-billy/tar.gz/v2.0.2","html_url":"https://github.com/go-git/go-billy/releases/tag/v2.0.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-git/go-billy@v2.0.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy/tags/v2.0.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy/tags/v2.0.2/manifests"},{"name":"v2.0.1","sha":"bf5cdf7d823be98aa2851ad3e1253cd11bcea1fe","kind":"commit","published_at":"2017-04-12T11:01:20.000Z","download_url":"https://codeload.github.com/go-git/go-billy/tar.gz/v2.0.1","html_url":"https://github.com/go-git/go-billy/releases/tag/v2.0.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-git/go-billy@v2.0.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy/tags/v2.0.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy/tags/v2.0.1/manifests"},{"name":"v2.0.0","sha":"0dfa3dd2e89c570b8e1e25f5b28647525c44c3ca","kind":"commit","published_at":"2017-03-10T11:24:05.000Z","download_url":"https://codeload.github.com/go-git/go-billy/tar.gz/v2.0.0","html_url":"https://github.com/go-git/go-billy/releases/tag/v2.0.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-git/go-billy@v2.0.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy/tags/v2.0.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy/tags/v2.0.0/manifests"},{"name":"v1.0.0","sha":"1dfacf9a4b2ac372f16acd6b1aab9a50df955a2a","kind":"commit","published_at":"2017-01-30T15:44:06.000Z","download_url":"https://codeload.github.com/go-git/go-billy/tar.gz/v1.0.0","html_url":"https://github.com/go-git/go-billy/releases/tag/v1.0.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-git/go-billy@v1.0.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy/tags/v1.0.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy/tags/v1.0.0/manifests"},{"name":"v1-alpha","sha":"6ca1fd6ba86f5929a23633719f5fd413a0046998","kind":"commit","published_at":"2016-12-15T10:38:17.000Z","download_url":"https://codeload.github.com/go-git/go-billy/tar.gz/v1-alpha","html_url":"https://github.com/go-git/go-billy/releases/tag/v1-alpha","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-git/go-billy@v1-alpha","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy/tags/v1-alpha","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy/tags/v1-alpha/manifests"}]},"repo_metadata_updated_at":"2026-03-25T17:00:25.179Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":6.1722003825661576,"dependent_packages_count":5.784673977804322,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":5.97843718018524},"purl":"pkg:golang/github.com/go-git/go-billy/v6","advisories":[{"uuid":"GSA_kwCzR0hTQS1xdzY0LTN4OTgtZzdxMs4ABW4H","url":"https://github.com/advisories/GHSA-qw64-3x98-g7q2","title":"go-billy has path traversal vulnerabilities","description":"### Impact\nMultiple path traversal issues exist across different components of `go-billy`. Insufficient path sanitization and boundary enforcement may allow crafted paths (e.g., using `..`) to escape intended base directories.\n\nWhile go-billy was not originally designed to provide a strong security boundary, some of these issues were inconsistent across some of the built-in implementations. This results in scenarios where applications relying on `go-billy` for some level of isolation may inadvertently expose access to unintended filesystem locations.\n\nThe `osfs.ChrootOS` implementation is notably affected by this vulnerability and is now deprecated in `v5`, removed at `v6`. Users are recommended to move on to `osfs.BoundOS` instead: `osfs.New(path, WithBoundOS())`.\n\nUsers requiring stronger security boundary enforcement are recommended to upgrade to `v6`, where the `osfs` implementation are backed by the [traversal-resistant](https://go.dev/blog/osroot) primitive [os.Root](https://pkg.go.dev/os#Root).\n\n### Patches\nUsers should upgrade to a patched version in order to mitigate this vulnerability. Versions prior to `v5` are likely to be affected, users are recommended to upgrade to a supported `go-billy` version.\n\n### Credits\nThanks to @faran66 and @vnykmshr for finding and separately reporting this issue privately to the go-git project. 🙇","origin":"UNSPECIFIED","severity":"HIGH","published_at":"2026-05-14T18:25:38.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":8.1,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N","references":["https://github.com/go-git/go-billy/security/advisories/GHSA-qw64-3x98-g7q2","https://github.com/go-git/go-billy/releases/tag/v5.9.0","https://github.com/go-git/go-billy/releases/tag/v6.0.0-alpha.1","https://nvd.nist.gov/vuln/detail/CVE-2026-44973","https://github.com/advisories/GHSA-qw64-3x98-g7q2"],"source_kind":"github","identifiers":["GHSA-qw64-3x98-g7q2","CVE-2026-44973"],"repository_url":null,"blast_radius":0.0,"created_at":"2026-05-14T19:00:24.443Z","updated_at":"2026-06-24T01:00:52.555Z","epss_percentage":0.0031,"epss_percentile":0.22579,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS1xdzY0LTN4OTgtZzdxMs4ABW4H","html_url":"https://advisories.ecosyste.ms/advisories/GSA_kwCzR0hTQS1xdzY0LTN4OTgtZzdxMs4ABW4H","packages":[{"ecosystem":"go","package_name":"github.com/go-git/go-billy/v6","versions":[{"first_patched_version":"6.0.0-alpha.1","vulnerable_version_range":"\u003c 6.0.0-alpha.1"}],"purl":"pkg:go/github.com%2Fgo-git%2Fgo-billy%2Fv6"},{"ecosystem":"go","package_name":"github.com/go-git/go-billy/v5","versions":[{"first_patched_version":"5.9.0","vulnerable_version_range":"\u003c 5.9.0"}],"purl":"pkg:go/github.com%2Fgo-git%2Fgo-billy%2Fv5"}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS1xdzY0LTN4OTgtZzdxMs4ABW4H/related_packages","related_advisories":[]},{"uuid":"GSA_kwCzR0hTQS1tM3hjLWg4OTItZ2d4Ns4ABWyK","url":"https://github.com/advisories/GHSA-m3xc-h892-ggx6","title":"go-billy: Lack of depth and cycle detection in symlink resolution may lead to infinite loops and resource exhaustion","description":"### Impact\nMultiple components may improperly handle crafted or malformed input, resulting in panics, infinite loops, uncontrolled recursion, or excessive resource consumption.\n\nThese issues arise from insufficient validation and missing safety mechanisms such as cycle detection, recursion limits, or defensive handling of unexpected states when processing untrusted repository data and filesystem structures.\n\n### Patches\nUsers should upgrade to a patched version in order to mitigate this vulnerability. Versions prior to `v5` are likely to be affected, users are recommended to upgrade to a supported `go-billy` version.\n\n### Credits\nThanks to @faran66 for finding and reporting this issue privately to the go-git project. 🙇","origin":"UNSPECIFIED","severity":"MODERATE","published_at":"2026-05-13T15:29:47.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":6.5,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","references":["https://github.com/go-git/go-billy/security/advisories/GHSA-m3xc-h892-ggx6","https://github.com/go-git/go-billy/releases/tag/v5.9.0","https://github.com/go-git/go-billy/releases/tag/v6.0.0-alpha.1","https://nvd.nist.gov/vuln/detail/CVE-2026-44740","https://github.com/advisories/GHSA-m3xc-h892-ggx6"],"source_kind":"github","identifiers":["GHSA-m3xc-h892-ggx6","CVE-2026-44740"],"repository_url":null,"blast_radius":0.0,"created_at":"2026-05-13T16:00:09.158Z","updated_at":"2026-06-22T18:00:58.644Z","epss_percentage":0.00295,"epss_percentile":0.20974,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS1tM3hjLWg4OTItZ2d4Ns4ABWyK","html_url":"https://advisories.ecosyste.ms/advisories/GSA_kwCzR0hTQS1tM3hjLWg4OTItZ2d4Ns4ABWyK","packages":[{"ecosystem":"go","package_name":"github.com/go-git/go-billy/v6","versions":[{"first_patched_version":"6.0.0-alpha.1","vulnerable_version_range":"\u003c 6.0.0-alpha.1"}],"purl":"pkg:go/github.com%2Fgo-git%2Fgo-billy%2Fv6"},{"ecosystem":"go","package_name":"github.com/go-git/go-billy/v5","versions":[{"first_patched_version":"5.9.0","vulnerable_version_range":"\u003c 5.9.0"}],"purl":"pkg:go/github.com%2Fgo-git%2Fgo-billy%2Fv5"}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS1tM3hjLWg4OTItZ2d4Ns4ABWyK/related_packages","related_advisories":[]}],"docker_usage_url":"https://docker.ecosyste.ms/usage/go/github.com/go-git/go-billy/v6","docker_dependents_count":1,"docker_downloads_count":15765451,"usage_url":"https://repos.ecosyste.ms/usage/go/github.com/go-git/go-billy/v6","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/go/github.com/go-git/go-billy/v6/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-02-09T15:03:08.348Z","issues_count":33,"pull_requests_count":192,"avg_time_to_close_issue":44029525.95454545,"avg_time_to_close_pull_request":2373581.36196319,"issues_closed_count":22,"pull_requests_closed_count":163,"pull_request_authors_count":29,"issue_authors_count":29,"avg_comments_per_issue":1.4848484848484849,"avg_comments_per_pull_request":0.3489583333333333,"merged_pull_requests_count":143,"bot_issues_count":1,"bot_pull_requests_count":116,"past_year_issues_count":6,"past_year_pull_requests_count":46,"past_year_avg_time_to_close_issue":233359.0,"past_year_avg_time_to_close_pull_request":313714.48484848486,"past_year_issues_closed_count":2,"past_year_pull_requests_closed_count":33,"past_year_pull_request_authors_count":6,"past_year_issue_authors_count":6,"past_year_avg_comments_per_issue":1.1666666666666667,"past_year_avg_comments_per_pull_request":0.30434782608695654,"past_year_bot_issues_count":1,"past_year_bot_pull_requests_count":30,"past_year_merged_pull_requests_count":32,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy/issues","maintainers":[{"login":"pjbgf","count":34,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/pjbgf"}],"active_maintainers":[{"login":"pjbgf","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/pjbgf"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fgo-git%2Fgo-billy%2Fv6/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fgo-git%2Fgo-billy%2Fv6/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fgo-git%2Fgo-billy%2Fv6/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fgo-git%2Fgo-billy%2Fv6/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fgo-git%2Fgo-billy%2Fv6/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fgo-git%2Fgo-billy%2Fv6/codemeta","maintainers":[],"registry":{"name":"proxy.golang.org","url":"https://proxy.golang.org","ecosystem":"go","default":true,"packages_count":2206448,"maintainers_count":0,"namespaces_count":792747,"keywords_count":113213,"github":"golang","metadata":{"funded_packages_count":53976},"icon_url":"https://github.com/golang.png","created_at":"2022-04-04T15:19:22.939Z","updated_at":"2026-06-10T05:03:23.672Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/namespaces"}},{"id":3635633,"name":"github.com/go-git/go-billy","ecosystem":"go","description":"","homepage":"https://github.com/go-git/go-billy","licenses":"Apache-2.0","normalized_licenses":["Apache-2.0"],"repository_url":"https://github.com/go-git/go-billy","keywords_array":[],"namespace":"github.com/go-git","versions_count":16,"first_release_published_at":"2017-01-30T15:44:06.000Z","latest_release_published_at":"2018-06-11T08:24:45.000Z","latest_release_number":"v4.2.0+incompatible","last_synced_at":"2026-07-11T01:20:34.356Z","created_at":"2022-04-11T08:41:02.103Z","updated_at":"2026-07-11T01:20:34.356Z","registry_url":"https://pkg.go.dev/github.com/go-git/go-billy","install_command":"go get github.com/go-git/go-billy","documentation_url":"https://pkg.go.dev/github.com/go-git/go-billy#section-documentation","metadata":{},"repo_metadata":{"id":46417246,"uuid":"246113572","full_name":"go-git/go-billy","owner":"go-git","description":"The missing interface filesystem abstraction for Go","archived":false,"fork":false,"pushed_at":"2026-03-05T17:27:08.000Z","size":657,"stargazers_count":394,"open_issues_count":22,"forks_count":59,"subscribers_count":8,"default_branch":"main","last_synced_at":"2026-03-24T15:22:50.111Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":"https://pkg.go.dev/github.com/go-git/go-billy/v5","language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/go-git.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null}},"created_at":"2020-03-09T18:35:04.000Z","updated_at":"2026-03-23T11:47:42.000Z","dependencies_parsed_at":"2026-02-26T03:00:35.579Z","dependency_job_id":null,"html_url":"https://github.com/go-git/go-billy","commit_stats":{"total_commits":207,"total_committers":34,"mean_commits":6.088235294117647,"dds":0.6473429951690821,"last_synced_commit":"1bb3aa54c166c2384e0acf4d4e595911230c209e"},"previous_names":[],"tags_count":34,"template":false,"template_full_name":null,"purl":"pkg:github/go-git/go-billy","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/go-git","download_url":"https://codeload.github.com/go-git/go-billy/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy/sbom","scorecard":{"id":431830,"data":{"date":"2025-08-17T17:21:30Z","repo":{"name":"github.com/go-git/go-billy","commit":"3a9ca963b7289d5bc1fd7bd48dc4d818f6997096"},"scorecard":{"version":"v5.2.1","commit":"ab2f6e92482462fe66246d9e32f642855a691dc1"},"score":7.2,"checks":[{"name":"Code-Review","score":0,"reason":"Found 0/2 approved changesets -- score normalized to 0","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#code-review"}},{"name":"Dependency-Update-Tool","score":10,"reason":"update tool detected","details":["Info: detected update tool: Dependabot: .github/dependabot.yaml:1"],"documentation":{"short":"Determines if the project uses a dependency update tool.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#dependency-update-tool"}},{"name":"Maintained","score":10,"reason":"19 commit(s) and 1 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#maintained"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#packaging"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#dangerous-workflow"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#binary-artifacts"}},{"name":"Token-Permissions","score":10,"reason":"GitHub workflow tokens follow principle of least privilege","details":["Info: jobLevel 'contents' permission set to 'read': .github/workflows/codeql.yml:18","Info: jobLevel 'actions' permission set to 'read': .github/workflows/codeql.yml:17","Info: found token with 'none' permissions: .github/workflows/codeql.yml:1","Info: topLevel permissions set to 'read-all': .github/workflows/scorecard.yml:14","Info: found token with 'none' permissions: .github/workflows/test.yml:1","Info: found token with 'none' permissions: .github/workflows/test_wasip1.yml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#token-permissions"}},{"name":"Pinned-Dependencies","score":5,"reason":"dependency not pinned by hash detected -- score normalized to 5","details":["Warn: goCommand not pinned by hash: scripts/wasirun-wrapper:6","Warn: goCommand not pinned by hash: .github/workflows/test_wasip1.yml:27","Info:  10 out of  10 GitHub-owned GitHubAction dependencies pinned","Info:   1 out of   1 third-party GitHubAction dependencies pinned","Info:   0 out of   2 goCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#pinned-dependencies"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: Apache License 2.0: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#license"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#cii-best-practices"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#vulnerabilities"}},{"name":"SAST","score":10,"reason":"SAST tool is run on all commits","details":["Info: SAST configuration detected: CodeQL","Info: all commits (30) are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#sast"}},{"name":"Security-Policy","score":0,"reason":"security policy file not detected","details":["Warn: no security policy file detected","Warn: no security file to analyze","Warn: no security file to analyze","Warn: no security file to analyze"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#security-policy"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#fuzzing"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#signed-releases"}},{"name":"Branch-Protection","score":6,"reason":"branch protection is not maximal on development and all release branches","details":["Info: 'allow deletion' disabled on branch 'main'","Info: 'allow deletion' disabled on branch 'releases/v5.x'","Info: 'force pushes' disabled on branch 'main'","Info: 'force pushes' disabled on branch 'releases/v5.x'","Warn: 'branch protection settings apply to administrators' is disabled on branch 'main'","Warn: 'branch protection settings apply to administrators' is disabled on branch 'releases/v5.x'","Info: 'stale review dismissal' is required to merge on branch 'main'","Info: 'stale review dismissal' is required to merge on branch 'releases/v5.x'","Warn: required approving review count is 1 on branch 'main'","Warn: required approving review count is 1 on branch 'releases/v5.x'","Warn: codeowners review is not required on branch 'main'","Warn: codeowners review is not required on branch 'releases/v5.x'","Info: 'last push approval' is required to merge on branch 'main'","Info: 'last push approval' is required to merge on branch 'releases/v5.x'","Warn: no status checks found to merge onto branch 'main'","Warn: no status checks found to merge onto branch 'releases/v5.x'","Info: PRs are required in order to make changes on branch 'main'","Info: PRs are required in order to make changes on branch 'releases/v5.x'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#branch-protection"}},{"name":"CI-Tests","score":10,"reason":"15 out of 15 merged PRs checked by a CI test -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project runs tests before pull requests are merged.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#ci-tests"}},{"name":"Contributors","score":10,"reason":"project has 28 contributing companies or organizations","details":["Info: found contributions from: CodeCantor, DataDog, SUSE, bblfsh, croupiers, datadog, distribyted, dotnet, emberjs, fluxcd, glimmerjs, go-enry, go-git, hdiv, ipfs, ipld, knative, kubernetes, kubernetes-sigs, libp2p, mindersec, mloncode, qubesome, rancher, rancher @suse, rancherlabs, sigstore, sqle"],"documentation":{"short":"Determines if the project has a set of contributors from multiple organizations (e.g., companies).","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#contributors"}}]},"last_synced_at":"2025-08-19T03:33:03.665Z","repository_id":46417246,"created_at":"2025-08-19T03:33:03.665Z","updated_at":"2025-08-19T03:33:03.665Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":30897946,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-03-24T08:58:18.477Z","status":"ssl_error","status_checked_at":"2026-03-24T08:57:59.595Z","response_time":106,"last_error":"SSL_read: unexpected eof while reading","robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":false,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"go-git","name":"go-git","uuid":"57653224","kind":"organization","description":"A highly extensible Git implementation in pure Go.","email":null,"website":null,"location":null,"twitter":null,"company":null,"icon_url":"https://avatars.githubusercontent.com/u/57653224?v=4","repositories_count":4,"last_synced_at":"2023-03-04T21:00:52.787Z","metadata":{"has_sponsors_listing":false},"html_url":"https://github.com/go-git","funding_links":[],"total_stars":null,"followers":null,"following":null,"created_at":"2022-11-15T00:42:35.065Z","updated_at":"2023-03-04T21:00:52.803Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/go-git","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/go-git/repositories"},"tags":[{"name":"v5.8.0","sha":"8662784198181209e3a42818bf7ce0258cb4051c","kind":"commit","published_at":"2026-02-24T22:55:39.000Z","download_url":"https://codeload.github.com/go-git/go-billy/tar.gz/v5.8.0","html_url":"https://github.com/go-git/go-billy/releases/tag/v5.8.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-git/go-billy@v5.8.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy/tags/v5.8.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy/tags/v5.8.0/manifests"},{"name":"v5.7.0","sha":"cc50ee75c06c917f097a7ea5f1e3cbb21b7b8e0a","kind":"commit","published_at":"2025-12-06T10:17:49.000Z","download_url":"https://codeload.github.com/go-git/go-billy/tar.gz/v5.7.0","html_url":"https://github.com/go-git/go-billy/releases/tag/v5.7.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-git/go-billy@v5.7.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy/tags/v5.7.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy/tags/v5.7.0/manifests"},{"name":"v5.6.2","sha":"9f8b16d30b0a071884faba91fd4edff482af5bde","kind":"commit","published_at":"2025-01-10T16:06:35.000Z","download_url":"https://codeload.github.com/go-git/go-billy/tar.gz/v5.6.2","html_url":"https://github.com/go-git/go-billy/releases/tag/v5.6.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-git/go-billy@v5.6.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy/tags/v5.6.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy/tags/v5.6.2/manifests"},{"name":"v5.6.1","sha":"a6c6b505da9f067ef0ad91daa7010a693024e055","kind":"commit","published_at":"2024-12-28T12:40:04.000Z","download_url":"https://codeload.github.com/go-git/go-billy/tar.gz/v5.6.1","html_url":"https://github.com/go-git/go-billy/releases/tag/v5.6.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-git/go-billy@v5.6.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy/tags/v5.6.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy/tags/v5.6.1/manifests"},{"name":"v5.6.0","sha":"371e232676ac6807a104d8d2d3373b2327840aff","kind":"commit","published_at":"2024-10-08T10:10:53.000Z","download_url":"https://codeload.github.com/go-git/go-billy/tar.gz/v5.6.0","html_url":"https://github.com/go-git/go-billy/releases/tag/v5.6.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-git/go-billy@v5.6.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy/tags/v5.6.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy/tags/v5.6.0/manifests"},{"name":"v5.5.0","sha":"5c1dfec7a041579bb69e0f248293c03c2a856c55","kind":"commit","published_at":"2023-09-11T16:14:50.000Z","download_url":"https://codeload.github.com/go-git/go-billy/tar.gz/v5.5.0","html_url":"https://github.com/go-git/go-billy/releases/tag/v5.5.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-git/go-billy@v5.5.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy/tags/v5.5.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy/tags/v5.5.0/manifests"},{"name":"v5.4.1","sha":"ed16d7ba55f95b937e995cb7890e91e1e785b7be","kind":"commit","published_at":"2023-02-05T11:14:30.000Z","download_url":"https://codeload.github.com/go-git/go-billy/tar.gz/v5.4.1","html_url":"https://github.com/go-git/go-billy/releases/tag/v5.4.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-git/go-billy@v5.4.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy/tags/v5.4.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy/tags/v5.4.1/manifests"},{"name":"v5.4.0","sha":"1b88f62a6a858b72fd9b8596c78e5335d8990685","kind":"commit","published_at":"2022-12-19T16:39:30.000Z","download_url":"https://codeload.github.com/go-git/go-billy/tar.gz/v5.4.0","html_url":"https://github.com/go-git/go-billy/releases/tag/v5.4.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-git/go-billy@v5.4.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy/tags/v5.4.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy/tags/v5.4.0/manifests"},{"name":"v5.3.1","sha":"3bf3fe5b381bcfa471f7f6054c0cf2309c35e651","kind":"commit","published_at":"2021-05-02T23:02:33.000Z","download_url":"https://codeload.github.com/go-git/go-billy/tar.gz/v5.3.1","html_url":"https://github.com/go-git/go-billy/releases/tag/v5.3.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-git/go-billy@v5.3.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy/tags/v5.3.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy/tags/v5.3.1/manifests"},{"name":"v5.3.0","sha":"af7e4ac12d42e726180d4474122a2266f18b07d6","kind":"commit","published_at":"2021-04-28T22:50:51.000Z","download_url":"https://codeload.github.com/go-git/go-billy/tar.gz/v5.3.0","html_url":"https://github.com/go-git/go-billy/releases/tag/v5.3.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-git/go-billy@v5.3.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy/tags/v5.3.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy/tags/v5.3.0/manifests"},{"name":"v5.2.0","sha":"42ead41a46a48b2e0ebc6aa7ab1456a5de3d1b23","kind":"commit","published_at":"2021-04-22T00:15:16.000Z","download_url":"https://codeload.github.com/go-git/go-billy/tar.gz/v5.2.0","html_url":"https://github.com/go-git/go-billy/releases/tag/v5.2.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-git/go-billy@v5.2.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy/tags/v5.2.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy/tags/v5.2.0/manifests"},{"name":"v5.1.0","sha":"3d7f61fe9ffd652dd388e5aab60b969b86f43fa3","kind":"commit","published_at":"2021-03-10T06:50:46.000Z","download_url":"https://codeload.github.com/go-git/go-billy/tar.gz/v5.1.0","html_url":"https://github.com/go-git/go-billy/releases/tag/v5.1.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-git/go-billy@v5.1.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy/tags/v5.1.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy/tags/v5.1.0/manifests"},{"name":"v5.0.0","sha":"205ba6585ca03bd60e304f7fa0b270232ba1d707","kind":"commit","published_at":"2020-03-09T20:00:45.000Z","download_url":"https://codeload.github.com/go-git/go-billy/tar.gz/v5.0.0","html_url":"https://github.com/go-git/go-billy/releases/tag/v5.0.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-git/go-billy@v5.0.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy/tags/v5.0.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy/tags/v5.0.0/manifests"},{"name":"v4.3.2","sha":"780403cfc1bc95ff4d07e7b26db40a6186c5326e","kind":"commit","published_at":"2019-07-29T15:17:39.000Z","download_url":"https://codeload.github.com/go-git/go-billy/tar.gz/v4.3.2","html_url":"https://github.com/go-git/go-billy/releases/tag/v4.3.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-git/go-billy@v4.3.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy/tags/v4.3.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy/tags/v4.3.2/manifests"},{"name":"v4.3.1","sha":"711f3aa5b30ce9bbc7d708792ca98b913cbbd4a5","kind":"commit","published_at":"2019-06-30T22:50:54.000Z","download_url":"https://codeload.github.com/go-git/go-billy/tar.gz/v4.3.1","html_url":"https://github.com/go-git/go-billy/releases/tag/v4.3.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-git/go-billy@v4.3.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy/tags/v4.3.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy/tags/v4.3.1/manifests"},{"name":"v4.3.0","sha":"982626487c60a5252e7d0b695ca23fb0fa2fd670","kind":"commit","published_at":"2018-09-19T10:02:40.000Z","download_url":"https://codeload.github.com/go-git/go-billy/tar.gz/v4.3.0","html_url":"https://github.com/go-git/go-billy/releases/tag/v4.3.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-git/go-billy@v4.3.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy/tags/v4.3.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy/tags/v4.3.0/manifests"},{"name":"v4.2.1","sha":"59952543636f55de3f860b477b615093d5c2c3e4","kind":"commit","published_at":"2018-09-04T09:03:59.000Z","download_url":"https://codeload.github.com/go-git/go-billy/tar.gz/v4.2.1","html_url":"https://github.com/go-git/go-billy/releases/tag/v4.2.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-git/go-billy@v4.2.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy/tags/v4.2.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy/tags/v4.2.1/manifests"},{"name":"v4.2.0","sha":"83cf655d40b15b427014d7875d10850f96edba14","kind":"commit","published_at":"2018-06-11T08:24:45.000Z","download_url":"https://codeload.github.com/go-git/go-billy/tar.gz/v4.2.0","html_url":"https://github.com/go-git/go-billy/releases/tag/v4.2.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-git/go-billy@v4.2.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy/tags/v4.2.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy/tags/v4.2.0/manifests"},{"name":"v4.1.1","sha":"df053870ae7070b0350624ba5a22161ba3796cc0","kind":"commit","published_at":"2018-04-03T08:40:37.000Z","download_url":"https://codeload.github.com/go-git/go-billy/tar.gz/v4.1.1","html_url":"https://github.com/go-git/go-billy/releases/tag/v4.1.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-git/go-billy@v4.1.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy/tags/v4.1.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy/tags/v4.1.1/manifests"},{"name":"v4.1.0","sha":"027dceab1aa836eb310d92c2eb2266e4dc9f4b81","kind":"commit","published_at":"2018-02-02T09:03:00.000Z","download_url":"https://codeload.github.com/go-git/go-billy/tar.gz/v4.1.0","html_url":"https://github.com/go-git/go-billy/releases/tag/v4.1.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-git/go-billy@v4.1.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy/tags/v4.1.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy/tags/v4.1.0/manifests"},{"name":"v4.0.2","sha":"e940f8b62a8e61adc71f69802c1cc8305b64ec96","kind":"commit","published_at":"2018-01-14T23:10:49.000Z","download_url":"https://codeload.github.com/go-git/go-billy/tar.gz/v4.0.2","html_url":"https://github.com/go-git/go-billy/releases/tag/v4.0.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-git/go-billy@v4.0.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy/tags/v4.0.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy/tags/v4.0.2/manifests"},{"name":"v4.0.1","sha":"053dbd006f81a230434f712314aacfb540b52cc5","kind":"commit","published_at":"2017-11-27T19:20:57.000Z","download_url":"https://codeload.github.com/go-git/go-billy/tar.gz/v4.0.1","html_url":"https://github.com/go-git/go-billy/releases/tag/v4.0.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-git/go-billy@v4.0.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy/tags/v4.0.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy/tags/v4.0.1/manifests"},{"name":"v4.0.0","sha":"198f713dfdcd18797f6ac7c729e2440e5fde337f","kind":"commit","published_at":"2017-11-18T23:00:01.000Z","download_url":"https://codeload.github.com/go-git/go-billy/tar.gz/v4.0.0","html_url":"https://github.com/go-git/go-billy/releases/tag/v4.0.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-git/go-billy@v4.0.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy/tags/v4.0.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy/tags/v4.0.0/manifests"},{"name":"v3.1.0","sha":"c329b7bc7b9d24905d2bc1b85bfa29f7ae266314","kind":"commit","published_at":"2017-06-27T10:15:46.000Z","download_url":"https://codeload.github.com/go-git/go-billy/tar.gz/v3.1.0","html_url":"https://github.com/go-git/go-billy/releases/tag/v3.1.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-git/go-billy@v3.1.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy/tags/v3.1.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy/tags/v3.1.0/manifests"},{"name":"v3.0.1","sha":"e501c17e5a47cc1adfdf16fbf54e60e6dafb92c2","kind":"commit","published_at":"2017-06-19T13:02:16.000Z","download_url":"https://codeload.github.com/go-git/go-billy/tar.gz/v3.0.1","html_url":"https://github.com/go-git/go-billy/releases/tag/v3.0.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-git/go-billy@v3.0.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy/tags/v3.0.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy/tags/v3.0.1/manifests"},{"name":"v3.0.0","sha":"d48e2a7f38a8b154de0cbdac7f9ed4f0a4fc8722","kind":"commit","published_at":"2017-06-16T16:12:35.000Z","download_url":"https://codeload.github.com/go-git/go-billy/tar.gz/v3.0.0","html_url":"https://github.com/go-git/go-billy/releases/tag/v3.0.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-git/go-billy@v3.0.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy/tags/v3.0.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy/tags/v3.0.0/manifests"},{"name":"v2.0.5","sha":"52497601f113730d14baa00453674376fca22f22","kind":"commit","published_at":"2017-05-17T08:25:08.000Z","download_url":"https://codeload.github.com/go-git/go-billy/tar.gz/v2.0.5","html_url":"https://github.com/go-git/go-billy/releases/tag/v2.0.5","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-git/go-billy@v2.0.5","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy/tags/v2.0.5","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy/tags/v2.0.5/manifests"},{"name":"v2.0.4","sha":"99d839800b93542496ec19319f37abacf17f589f","kind":"commit","published_at":"2017-04-19T07:02:02.000Z","download_url":"https://codeload.github.com/go-git/go-billy/tar.gz/v2.0.4","html_url":"https://github.com/go-git/go-billy/releases/tag/v2.0.4","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-git/go-billy@v2.0.4","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy/tags/v2.0.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy/tags/v2.0.4/manifests"},{"name":"v2.0.3","sha":"0f02306b1aa8fe9ed04feb409ceffedc568fa2a4","kind":"commit","published_at":"2017-04-17T21:18:04.000Z","download_url":"https://codeload.github.com/go-git/go-billy/tar.gz/v2.0.3","html_url":"https://github.com/go-git/go-billy/releases/tag/v2.0.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-git/go-billy@v2.0.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy/tags/v2.0.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy/tags/v2.0.3/manifests"},{"name":"v2.0.2","sha":"0661b96fbe0d3d820b4bfc51c95ae981560b5553","kind":"commit","published_at":"2017-04-17T10:59:54.000Z","download_url":"https://codeload.github.com/go-git/go-billy/tar.gz/v2.0.2","html_url":"https://github.com/go-git/go-billy/releases/tag/v2.0.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-git/go-billy@v2.0.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy/tags/v2.0.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy/tags/v2.0.2/manifests"},{"name":"v2.0.1","sha":"bf5cdf7d823be98aa2851ad3e1253cd11bcea1fe","kind":"commit","published_at":"2017-04-12T11:01:20.000Z","download_url":"https://codeload.github.com/go-git/go-billy/tar.gz/v2.0.1","html_url":"https://github.com/go-git/go-billy/releases/tag/v2.0.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-git/go-billy@v2.0.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy/tags/v2.0.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy/tags/v2.0.1/manifests"},{"name":"v2.0.0","sha":"0dfa3dd2e89c570b8e1e25f5b28647525c44c3ca","kind":"commit","published_at":"2017-03-10T11:24:05.000Z","download_url":"https://codeload.github.com/go-git/go-billy/tar.gz/v2.0.0","html_url":"https://github.com/go-git/go-billy/releases/tag/v2.0.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-git/go-billy@v2.0.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy/tags/v2.0.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy/tags/v2.0.0/manifests"},{"name":"v1.0.0","sha":"1dfacf9a4b2ac372f16acd6b1aab9a50df955a2a","kind":"commit","published_at":"2017-01-30T15:44:06.000Z","download_url":"https://codeload.github.com/go-git/go-billy/tar.gz/v1.0.0","html_url":"https://github.com/go-git/go-billy/releases/tag/v1.0.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-git/go-billy@v1.0.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy/tags/v1.0.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy/tags/v1.0.0/manifests"},{"name":"v1-alpha","sha":"6ca1fd6ba86f5929a23633719f5fd413a0046998","kind":"commit","published_at":"2016-12-15T10:38:17.000Z","download_url":"https://codeload.github.com/go-git/go-billy/tar.gz/v1-alpha","html_url":"https://github.com/go-git/go-billy/releases/tag/v1-alpha","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-git/go-billy@v1-alpha","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy/tags/v1-alpha","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy/tags/v1-alpha/manifests"}]},"repo_metadata_updated_at":"2026-03-25T17:00:56.183Z","dependent_packages_count":15,"downloads":null,"downloads_period":null,"dependent_repos_count":45,"rankings":{"downloads":null,"dependent_repos_count":0.8500348333552094,"dependent_packages_count":1.4222105550114597,"stargazers_count":3.494643740597518,"forks_count":4.177377502700847,"docker_downloads_count":0.6010520682935694,"average":2.1090637399917207},"purl":"pkg:golang/github.com/go-git/go-billy","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/go/github.com/go-git/go-billy","docker_dependents_count":1,"docker_downloads_count":513610,"usage_url":"https://repos.ecosyste.ms/usage/go/github.com/go-git/go-billy","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/go/github.com/go-git/go-billy/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-02-09T15:03:08.348Z","issues_count":33,"pull_requests_count":192,"avg_time_to_close_issue":44029525.95454545,"avg_time_to_close_pull_request":2373581.36196319,"issues_closed_count":22,"pull_requests_closed_count":163,"pull_request_authors_count":29,"issue_authors_count":29,"avg_comments_per_issue":1.4848484848484849,"avg_comments_per_pull_request":0.3489583333333333,"merged_pull_requests_count":143,"bot_issues_count":1,"bot_pull_requests_count":116,"past_year_issues_count":6,"past_year_pull_requests_count":46,"past_year_avg_time_to_close_issue":233359.0,"past_year_avg_time_to_close_pull_request":313714.48484848486,"past_year_issues_closed_count":2,"past_year_pull_requests_closed_count":33,"past_year_pull_request_authors_count":6,"past_year_issue_authors_count":6,"past_year_avg_comments_per_issue":1.1666666666666667,"past_year_avg_comments_per_pull_request":0.30434782608695654,"past_year_bot_issues_count":1,"past_year_bot_pull_requests_count":30,"past_year_merged_pull_requests_count":32,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy/issues","maintainers":[{"login":"pjbgf","count":34,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/pjbgf"}],"active_maintainers":[{"login":"pjbgf","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/pjbgf"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fgo-git%2Fgo-billy/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fgo-git%2Fgo-billy/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fgo-git%2Fgo-billy/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fgo-git%2Fgo-billy/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fgo-git%2Fgo-billy/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fgo-git%2Fgo-billy/codemeta","maintainers":[],"registry":{"name":"proxy.golang.org","url":"https://proxy.golang.org","ecosystem":"go","default":true,"packages_count":2206448,"maintainers_count":0,"namespaces_count":792747,"keywords_count":113213,"github":"golang","metadata":{"funded_packages_count":53976},"icon_url":"https://github.com/golang.png","created_at":"2022-04-04T15:19:22.939Z","updated_at":"2026-06-10T05:03:23.672Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/namespaces"}},{"id":13448199,"name":"golang-github-go-git-go-billy","ecosystem":"ubuntu","description":null,"homepage":"https://github.com/go-git/go-billy","licenses":"apache-2.0","normalized_licenses":[],"repository_url":"https://github.com/go-git/go-billy","keywords_array":["universe/misc"],"namespace":"universe","versions_count":1,"first_release_published_at":"2026-02-08T15:14:07.386Z","latest_release_published_at":"2026-02-08T15:14:07.386Z","latest_release_number":"5.5.0-1","last_synced_at":"2026-03-08T15:43:38.931Z","created_at":"2026-02-08T15:14:04.703Z","updated_at":"2026-03-25T17:00:19.452Z","registry_url":"https://launchpad.net/ubuntu/+source/golang-github-go-git-go-billy","install_command":"apt-get install golang-github-go-git-go-billy","documentation_url":null,"metadata":{"component":"universe","architecture":"all","priority":"optional","binary":"golang-github-go-git-go-billy-dev","standards_version":"4.6.2","maintainer":"Debian Go Packaging Team \u003cteam+pkg-go@tracker.debian.org\u003e","build_depends":"debhelper-compat (= 13), dh-golang, golang-any, golang-github-cyphar-filepath-securejoin-dev, golang-gopkg-check.v1-dev \u003c!nocheck\u003e, golang-golang-x-sys-dev, golang-gomega-dev \u003c!nocheck\u003e","build_depends_indep":null,"build_depends_arch":null},"repo_metadata":{"id":46417246,"uuid":"246113572","full_name":"go-git/go-billy","owner":"go-git","description":"The missing interface filesystem abstraction for Go","archived":false,"fork":false,"pushed_at":"2026-03-05T17:27:08.000Z","size":657,"stargazers_count":394,"open_issues_count":22,"forks_count":59,"subscribers_count":8,"default_branch":"main","last_synced_at":"2026-03-24T15:22:50.111Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":"https://pkg.go.dev/github.com/go-git/go-billy/v5","language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/go-git.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null}},"created_at":"2020-03-09T18:35:04.000Z","updated_at":"2026-03-23T11:47:42.000Z","dependencies_parsed_at":"2026-02-26T03:00:35.579Z","dependency_job_id":null,"html_url":"https://github.com/go-git/go-billy","commit_stats":{"total_commits":207,"total_committers":34,"mean_commits":6.088235294117647,"dds":0.6473429951690821,"last_synced_commit":"1bb3aa54c166c2384e0acf4d4e595911230c209e"},"previous_names":[],"tags_count":34,"template":false,"template_full_name":null,"purl":"pkg:github/go-git/go-billy","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/go-git","download_url":"https://codeload.github.com/go-git/go-billy/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy/sbom","scorecard":{"id":431830,"data":{"date":"2025-08-17T17:21:30Z","repo":{"name":"github.com/go-git/go-billy","commit":"3a9ca963b7289d5bc1fd7bd48dc4d818f6997096"},"scorecard":{"version":"v5.2.1","commit":"ab2f6e92482462fe66246d9e32f642855a691dc1"},"score":7.2,"checks":[{"name":"Code-Review","score":0,"reason":"Found 0/2 approved changesets -- score normalized to 0","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#code-review"}},{"name":"Dependency-Update-Tool","score":10,"reason":"update tool detected","details":["Info: detected update tool: Dependabot: .github/dependabot.yaml:1"],"documentation":{"short":"Determines if the project uses a dependency update tool.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#dependency-update-tool"}},{"name":"Maintained","score":10,"reason":"19 commit(s) and 1 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#maintained"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#packaging"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#dangerous-workflow"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#binary-artifacts"}},{"name":"Token-Permissions","score":10,"reason":"GitHub workflow tokens follow principle of least privilege","details":["Info: jobLevel 'contents' permission set to 'read': .github/workflows/codeql.yml:18","Info: jobLevel 'actions' permission set to 'read': .github/workflows/codeql.yml:17","Info: found token with 'none' permissions: .github/workflows/codeql.yml:1","Info: topLevel permissions set to 'read-all': .github/workflows/scorecard.yml:14","Info: found token with 'none' permissions: .github/workflows/test.yml:1","Info: found token with 'none' permissions: .github/workflows/test_wasip1.yml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#token-permissions"}},{"name":"Pinned-Dependencies","score":5,"reason":"dependency not pinned by hash detected -- score normalized to 5","details":["Warn: goCommand not pinned by hash: scripts/wasirun-wrapper:6","Warn: goCommand not pinned by hash: .github/workflows/test_wasip1.yml:27","Info:  10 out of  10 GitHub-owned GitHubAction dependencies pinned","Info:   1 out of   1 third-party GitHubAction dependencies pinned","Info:   0 out of   2 goCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#pinned-dependencies"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: Apache License 2.0: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#license"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#cii-best-practices"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#vulnerabilities"}},{"name":"SAST","score":10,"reason":"SAST tool is run on all commits","details":["Info: SAST configuration detected: CodeQL","Info: all commits (30) are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#sast"}},{"name":"Security-Policy","score":0,"reason":"security policy file not detected","details":["Warn: no security policy file detected","Warn: no security file to analyze","Warn: no security file to analyze","Warn: no security file to analyze"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#security-policy"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#fuzzing"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#signed-releases"}},{"name":"Branch-Protection","score":6,"reason":"branch protection is not maximal on development and all release branches","details":["Info: 'allow deletion' disabled on branch 'main'","Info: 'allow deletion' disabled on branch 'releases/v5.x'","Info: 'force pushes' disabled on branch 'main'","Info: 'force pushes' disabled on branch 'releases/v5.x'","Warn: 'branch protection settings apply to administrators' is disabled on branch 'main'","Warn: 'branch protection settings apply to administrators' is disabled on branch 'releases/v5.x'","Info: 'stale review dismissal' is required to merge on branch 'main'","Info: 'stale review dismissal' is required to merge on branch 'releases/v5.x'","Warn: required approving review count is 1 on branch 'main'","Warn: required approving review count is 1 on branch 'releases/v5.x'","Warn: codeowners review is not required on branch 'main'","Warn: codeowners review is not required on branch 'releases/v5.x'","Info: 'last push approval' is required to merge on branch 'main'","Info: 'last push approval' is required to merge on branch 'releases/v5.x'","Warn: no status checks found to merge onto branch 'main'","Warn: no status checks found to merge onto branch 'releases/v5.x'","Info: PRs are required in order to make changes on branch 'main'","Info: PRs are required in order to make changes on branch 'releases/v5.x'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#branch-protection"}},{"name":"CI-Tests","score":10,"reason":"15 out of 15 merged PRs checked by a CI test -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project runs tests before pull requests are merged.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#ci-tests"}},{"name":"Contributors","score":10,"reason":"project has 28 contributing companies or organizations","details":["Info: found contributions from: CodeCantor, DataDog, SUSE, bblfsh, croupiers, datadog, distribyted, dotnet, emberjs, fluxcd, glimmerjs, go-enry, go-git, hdiv, ipfs, ipld, knative, kubernetes, kubernetes-sigs, libp2p, mindersec, mloncode, qubesome, rancher, rancher @suse, rancherlabs, sigstore, sqle"],"documentation":{"short":"Determines if the project has a set of contributors from multiple organizations (e.g., companies).","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#contributors"}}]},"last_synced_at":"2025-08-19T03:33:03.665Z","repository_id":46417246,"created_at":"2025-08-19T03:33:03.665Z","updated_at":"2025-08-19T03:33:03.665Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":30897946,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-03-24T08:58:18.477Z","status":"ssl_error","status_checked_at":"2026-03-24T08:57:59.595Z","response_time":106,"last_error":"SSL_read: unexpected eof while reading","robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":false,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"repo_metadata_updated_at":"2026-03-25T17:00:19.452Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":0.0,"dependent_packages_count":0.0,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":100},"purl":"pkg:deb/ubuntu/golang-github-go-git-go-billy?arch=source\u0026distro=ubuntu-24.10\u0026repository_url=https://launchpad.net/ubuntu/oracular","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/ubuntu/golang-github-go-git-go-billy","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/ubuntu/golang-github-go-git-go-billy","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/ubuntu/golang-github-go-git-go-billy/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-02-09T15:03:08.348Z","issues_count":33,"pull_requests_count":192,"avg_time_to_close_issue":44029525.95454545,"avg_time_to_close_pull_request":2373581.36196319,"issues_closed_count":22,"pull_requests_closed_count":163,"pull_request_authors_count":29,"issue_authors_count":29,"avg_comments_per_issue":1.4848484848484849,"avg_comments_per_pull_request":0.3489583333333333,"merged_pull_requests_count":143,"bot_issues_count":1,"bot_pull_requests_count":116,"past_year_issues_count":6,"past_year_pull_requests_count":46,"past_year_avg_time_to_close_issue":233359.0,"past_year_avg_time_to_close_pull_request":313714.48484848486,"past_year_issues_closed_count":2,"past_year_pull_requests_closed_count":33,"past_year_pull_request_authors_count":6,"past_year_issue_authors_count":6,"past_year_avg_comments_per_issue":1.1666666666666667,"past_year_avg_comments_per_pull_request":0.30434782608695654,"past_year_bot_issues_count":1,"past_year_bot_pull_requests_count":30,"past_year_merged_pull_requests_count":32,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy/issues","maintainers":[{"login":"pjbgf","count":34,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/pjbgf"}],"active_maintainers":[{"login":"pjbgf","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/pjbgf"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-24.10/packages/golang-github-go-git-go-billy/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-24.10/packages/golang-github-go-git-go-billy/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-24.10/packages/golang-github-go-git-go-billy/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-24.10/packages/golang-github-go-git-go-billy/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-24.10/packages/golang-github-go-git-go-billy/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-24.10/packages/golang-github-go-git-go-billy/codemeta","maintainers":[],"registry":{"name":"ubuntu-24.10","url":"https://launchpad.net/ubuntu/oracular","ecosystem":"ubuntu","default":false,"packages_count":38437,"maintainers_count":0,"namespaces_count":4,"keywords_count":1473,"github":"ubuntu","metadata":{"codename":"oracular","mirror":"http://old-releases.ubuntu.com/ubuntu","funded_packages_count":214},"icon_url":"https://github.com/ubuntu.png","created_at":"2026-02-04T11:01:48.028Z","updated_at":"2026-06-10T05:17:05.787Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-24.10/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-24.10/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-24.10/namespaces"}},{"id":13417507,"name":"golang-github-go-git-go-billy","ecosystem":"ubuntu","description":null,"homepage":"https://github.com/go-git/go-billy","licenses":"apache-2.0","normalized_licenses":[],"repository_url":"https://github.com/go-git/go-billy","keywords_array":["universe/misc"],"namespace":"universe","versions_count":1,"first_release_published_at":"2026-02-07T03:12:23.924Z","latest_release_published_at":"2026-02-07T03:12:23.924Z","latest_release_number":"5.3.1-3","last_synced_at":"2026-03-07T03:36:13.303Z","created_at":"2026-02-07T03:12:22.988Z","updated_at":"2026-03-25T17:00:19.768Z","registry_url":"https://launchpad.net/ubuntu/+source/golang-github-go-git-go-billy","install_command":"apt-get install golang-github-go-git-go-billy","documentation_url":null,"metadata":{"component":"universe","architecture":"all","priority":"optional","binary":"golang-github-go-git-go-billy-dev","standards_version":"4.6.0","maintainer":"Debian Go Packaging Team \u003cteam+pkg-go@tracker.debian.org\u003e","build_depends":"debhelper-compat (= 13), dh-golang, golang-any, golang-gopkg-check.v1-dev, golang-golang-x-sys-dev","build_depends_indep":null,"build_depends_arch":null},"repo_metadata":{"id":46417246,"uuid":"246113572","full_name":"go-git/go-billy","owner":"go-git","description":"The missing interface filesystem abstraction for Go","archived":false,"fork":false,"pushed_at":"2026-03-05T17:27:08.000Z","size":657,"stargazers_count":394,"open_issues_count":22,"forks_count":59,"subscribers_count":8,"default_branch":"main","last_synced_at":"2026-03-24T15:22:50.111Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":"https://pkg.go.dev/github.com/go-git/go-billy/v5","language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/go-git.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null}},"created_at":"2020-03-09T18:35:04.000Z","updated_at":"2026-03-23T11:47:42.000Z","dependencies_parsed_at":"2026-02-26T03:00:35.579Z","dependency_job_id":null,"html_url":"https://github.com/go-git/go-billy","commit_stats":{"total_commits":207,"total_committers":34,"mean_commits":6.088235294117647,"dds":0.6473429951690821,"last_synced_commit":"1bb3aa54c166c2384e0acf4d4e595911230c209e"},"previous_names":[],"tags_count":34,"template":false,"template_full_name":null,"purl":"pkg:github/go-git/go-billy","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/go-git","download_url":"https://codeload.github.com/go-git/go-billy/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy/sbom","scorecard":{"id":431830,"data":{"date":"2025-08-17T17:21:30Z","repo":{"name":"github.com/go-git/go-billy","commit":"3a9ca963b7289d5bc1fd7bd48dc4d818f6997096"},"scorecard":{"version":"v5.2.1","commit":"ab2f6e92482462fe66246d9e32f642855a691dc1"},"score":7.2,"checks":[{"name":"Code-Review","score":0,"reason":"Found 0/2 approved changesets -- score normalized to 0","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#code-review"}},{"name":"Dependency-Update-Tool","score":10,"reason":"update tool detected","details":["Info: detected update tool: Dependabot: .github/dependabot.yaml:1"],"documentation":{"short":"Determines if the project uses a dependency update tool.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#dependency-update-tool"}},{"name":"Maintained","score":10,"reason":"19 commit(s) and 1 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#maintained"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#packaging"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#dangerous-workflow"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#binary-artifacts"}},{"name":"Token-Permissions","score":10,"reason":"GitHub workflow tokens follow principle of least privilege","details":["Info: jobLevel 'contents' permission set to 'read': .github/workflows/codeql.yml:18","Info: jobLevel 'actions' permission set to 'read': .github/workflows/codeql.yml:17","Info: found token with 'none' permissions: .github/workflows/codeql.yml:1","Info: topLevel permissions set to 'read-all': .github/workflows/scorecard.yml:14","Info: found token with 'none' permissions: .github/workflows/test.yml:1","Info: found token with 'none' permissions: .github/workflows/test_wasip1.yml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#token-permissions"}},{"name":"Pinned-Dependencies","score":5,"reason":"dependency not pinned by hash detected -- score normalized to 5","details":["Warn: goCommand not pinned by hash: scripts/wasirun-wrapper:6","Warn: goCommand not pinned by hash: .github/workflows/test_wasip1.yml:27","Info:  10 out of  10 GitHub-owned GitHubAction dependencies pinned","Info:   1 out of   1 third-party GitHubAction dependencies pinned","Info:   0 out of   2 goCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#pinned-dependencies"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: Apache License 2.0: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#license"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#cii-best-practices"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#vulnerabilities"}},{"name":"SAST","score":10,"reason":"SAST tool is run on all commits","details":["Info: SAST configuration detected: CodeQL","Info: all commits (30) are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#sast"}},{"name":"Security-Policy","score":0,"reason":"security policy file not detected","details":["Warn: no security policy file detected","Warn: no security file to analyze","Warn: no security file to analyze","Warn: no security file to analyze"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#security-policy"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#fuzzing"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#signed-releases"}},{"name":"Branch-Protection","score":6,"reason":"branch protection is not maximal on development and all release branches","details":["Info: 'allow deletion' disabled on branch 'main'","Info: 'allow deletion' disabled on branch 'releases/v5.x'","Info: 'force pushes' disabled on branch 'main'","Info: 'force pushes' disabled on branch 'releases/v5.x'","Warn: 'branch protection settings apply to administrators' is disabled on branch 'main'","Warn: 'branch protection settings apply to administrators' is disabled on branch 'releases/v5.x'","Info: 'stale review dismissal' is required to merge on branch 'main'","Info: 'stale review dismissal' is required to merge on branch 'releases/v5.x'","Warn: required approving review count is 1 on branch 'main'","Warn: required approving review count is 1 on branch 'releases/v5.x'","Warn: codeowners review is not required on branch 'main'","Warn: codeowners review is not required on branch 'releases/v5.x'","Info: 'last push approval' is required to merge on branch 'main'","Info: 'last push approval' is required to merge on branch 'releases/v5.x'","Warn: no status checks found to merge onto branch 'main'","Warn: no status checks found to merge onto branch 'releases/v5.x'","Info: PRs are required in order to make changes on branch 'main'","Info: PRs are required in order to make changes on branch 'releases/v5.x'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#branch-protection"}},{"name":"CI-Tests","score":10,"reason":"15 out of 15 merged PRs checked by a CI test -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project runs tests before pull requests are merged.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#ci-tests"}},{"name":"Contributors","score":10,"reason":"project has 28 contributing companies or organizations","details":["Info: found contributions from: CodeCantor, DataDog, SUSE, bblfsh, croupiers, datadog, distribyted, dotnet, emberjs, fluxcd, glimmerjs, go-enry, go-git, hdiv, ipfs, ipld, knative, kubernetes, kubernetes-sigs, libp2p, mindersec, mloncode, qubesome, rancher, rancher @suse, rancherlabs, sigstore, sqle"],"documentation":{"short":"Determines if the project has a set of contributors from multiple organizations (e.g., companies).","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#contributors"}}]},"last_synced_at":"2025-08-19T03:33:03.665Z","repository_id":46417246,"created_at":"2025-08-19T03:33:03.665Z","updated_at":"2025-08-19T03:33:03.665Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":30897946,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-03-24T08:58:18.477Z","status":"ssl_error","status_checked_at":"2026-03-24T08:57:59.595Z","response_time":106,"last_error":"SSL_read: unexpected eof while reading","robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":false,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"repo_metadata_updated_at":"2026-03-25T17:00:19.767Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":0.0,"dependent_packages_count":0.0,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":100},"purl":"pkg:deb/ubuntu/golang-github-go-git-go-billy?arch=source\u0026distro=ubuntu-22.04\u0026repository_url=https://launchpad.net/ubuntu/jammy","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/ubuntu/golang-github-go-git-go-billy","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/ubuntu/golang-github-go-git-go-billy","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/ubuntu/golang-github-go-git-go-billy/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-02-09T15:03:08.348Z","issues_count":33,"pull_requests_count":192,"avg_time_to_close_issue":44029525.95454545,"avg_time_to_close_pull_request":2373581.36196319,"issues_closed_count":22,"pull_requests_closed_count":163,"pull_request_authors_count":29,"issue_authors_count":29,"avg_comments_per_issue":1.4848484848484849,"avg_comments_per_pull_request":0.3489583333333333,"merged_pull_requests_count":143,"bot_issues_count":1,"bot_pull_requests_count":116,"past_year_issues_count":6,"past_year_pull_requests_count":46,"past_year_avg_time_to_close_issue":233359.0,"past_year_avg_time_to_close_pull_request":313714.48484848486,"past_year_issues_closed_count":2,"past_year_pull_requests_closed_count":33,"past_year_pull_request_authors_count":6,"past_year_issue_authors_count":6,"past_year_avg_comments_per_issue":1.1666666666666667,"past_year_avg_comments_per_pull_request":0.30434782608695654,"past_year_bot_issues_count":1,"past_year_bot_pull_requests_count":30,"past_year_merged_pull_requests_count":32,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy/issues","maintainers":[{"login":"pjbgf","count":34,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/pjbgf"}],"active_maintainers":[{"login":"pjbgf","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/pjbgf"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-22.04/packages/golang-github-go-git-go-billy/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-22.04/packages/golang-github-go-git-go-billy/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-22.04/packages/golang-github-go-git-go-billy/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-22.04/packages/golang-github-go-git-go-billy/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-22.04/packages/golang-github-go-git-go-billy/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-22.04/packages/golang-github-go-git-go-billy/codemeta","maintainers":[],"registry":{"name":"ubuntu-22.04","url":"https://launchpad.net/ubuntu/jammy","ecosystem":"ubuntu","default":false,"packages_count":34289,"maintainers_count":0,"namespaces_count":4,"keywords_count":1523,"github":"ubuntu","metadata":{"codename":"jammy","funded_packages_count":167},"icon_url":"https://github.com/ubuntu.png","created_at":"2026-02-04T11:01:46.486Z","updated_at":"2026-06-10T05:17:45.610Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-22.04/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-22.04/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-22.04/namespaces"}},{"id":13684613,"name":"golang-github-go-git-go-billy","ecosystem":"debian","description":null,"homepage":"https://github.com/go-git/go-billy","licenses":"apache-2.0","normalized_licenses":[],"repository_url":"https://github.com/go-git/go-billy","keywords_array":["misc"],"namespace":"main","versions_count":1,"first_release_published_at":"2026-02-12T17:47:22.541Z","latest_release_published_at":"2026-02-12T17:47:22.541Z","latest_release_number":"5.3.1-3","last_synced_at":"2026-03-12T20:11:51.687Z","created_at":"2026-02-12T17:47:22.389Z","updated_at":"2026-03-25T17:00:19.447Z","registry_url":"https://tracker.debian.org/pkg/golang-github-go-git-go-billy","install_command":"apt-get install golang-github-go-git-go-billy","documentation_url":"https://packages.debian.org/bookworm/golang-github-go-git-go-billy","metadata":{"component":"main","architecture":"all","priority":"optional","binary":"golang-github-go-git-go-billy-dev","standards_version":"4.6.0","maintainer":"Debian Go Packaging Team \u003cteam+pkg-go@tracker.debian.org\u003e","build_depends":"debhelper-compat (= 13), dh-golang, golang-any, golang-gopkg-check.v1-dev, golang-golang-x-sys-dev","build_depends_indep":null,"build_depends_arch":null},"repo_metadata":{"id":46417246,"uuid":"246113572","full_name":"go-git/go-billy","owner":"go-git","description":"The missing interface filesystem abstraction for Go","archived":false,"fork":false,"pushed_at":"2026-03-05T17:27:08.000Z","size":657,"stargazers_count":394,"open_issues_count":22,"forks_count":59,"subscribers_count":8,"default_branch":"main","last_synced_at":"2026-03-24T15:22:50.111Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":"https://pkg.go.dev/github.com/go-git/go-billy/v5","language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/go-git.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null}},"created_at":"2020-03-09T18:35:04.000Z","updated_at":"2026-03-23T11:47:42.000Z","dependencies_parsed_at":"2026-02-26T03:00:35.579Z","dependency_job_id":null,"html_url":"https://github.com/go-git/go-billy","commit_stats":{"total_commits":207,"total_committers":34,"mean_commits":6.088235294117647,"dds":0.6473429951690821,"last_synced_commit":"1bb3aa54c166c2384e0acf4d4e595911230c209e"},"previous_names":[],"tags_count":34,"template":false,"template_full_name":null,"purl":"pkg:github/go-git/go-billy","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/go-git","download_url":"https://codeload.github.com/go-git/go-billy/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy/sbom","scorecard":{"id":431830,"data":{"date":"2025-08-17T17:21:30Z","repo":{"name":"github.com/go-git/go-billy","commit":"3a9ca963b7289d5bc1fd7bd48dc4d818f6997096"},"scorecard":{"version":"v5.2.1","commit":"ab2f6e92482462fe66246d9e32f642855a691dc1"},"score":7.2,"checks":[{"name":"Code-Review","score":0,"reason":"Found 0/2 approved changesets -- score normalized to 0","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#code-review"}},{"name":"Dependency-Update-Tool","score":10,"reason":"update tool detected","details":["Info: detected update tool: Dependabot: .github/dependabot.yaml:1"],"documentation":{"short":"Determines if the project uses a dependency update tool.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#dependency-update-tool"}},{"name":"Maintained","score":10,"reason":"19 commit(s) and 1 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#maintained"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#packaging"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#dangerous-workflow"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#binary-artifacts"}},{"name":"Token-Permissions","score":10,"reason":"GitHub workflow tokens follow principle of least privilege","details":["Info: jobLevel 'contents' permission set to 'read': .github/workflows/codeql.yml:18","Info: jobLevel 'actions' permission set to 'read': .github/workflows/codeql.yml:17","Info: found token with 'none' permissions: .github/workflows/codeql.yml:1","Info: topLevel permissions set to 'read-all': .github/workflows/scorecard.yml:14","Info: found token with 'none' permissions: .github/workflows/test.yml:1","Info: found token with 'none' permissions: .github/workflows/test_wasip1.yml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#token-permissions"}},{"name":"Pinned-Dependencies","score":5,"reason":"dependency not pinned by hash detected -- score normalized to 5","details":["Warn: goCommand not pinned by hash: scripts/wasirun-wrapper:6","Warn: goCommand not pinned by hash: .github/workflows/test_wasip1.yml:27","Info:  10 out of  10 GitHub-owned GitHubAction dependencies pinned","Info:   1 out of   1 third-party GitHubAction dependencies pinned","Info:   0 out of   2 goCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#pinned-dependencies"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: Apache License 2.0: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#license"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#cii-best-practices"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#vulnerabilities"}},{"name":"SAST","score":10,"reason":"SAST tool is run on all commits","details":["Info: SAST configuration detected: CodeQL","Info: all commits (30) are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#sast"}},{"name":"Security-Policy","score":0,"reason":"security policy file not detected","details":["Warn: no security policy file detected","Warn: no security file to analyze","Warn: no security file to analyze","Warn: no security file to analyze"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#security-policy"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#fuzzing"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#signed-releases"}},{"name":"Branch-Protection","score":6,"reason":"branch protection is not maximal on development and all release branches","details":["Info: 'allow deletion' disabled on branch 'main'","Info: 'allow deletion' disabled on branch 'releases/v5.x'","Info: 'force pushes' disabled on branch 'main'","Info: 'force pushes' disabled on branch 'releases/v5.x'","Warn: 'branch protection settings apply to administrators' is disabled on branch 'main'","Warn: 'branch protection settings apply to administrators' is disabled on branch 'releases/v5.x'","Info: 'stale review dismissal' is required to merge on branch 'main'","Info: 'stale review dismissal' is required to merge on branch 'releases/v5.x'","Warn: required approving review count is 1 on branch 'main'","Warn: required approving review count is 1 on branch 'releases/v5.x'","Warn: codeowners review is not required on branch 'main'","Warn: codeowners review is not required on branch 'releases/v5.x'","Info: 'last push approval' is required to merge on branch 'main'","Info: 'last push approval' is required to merge on branch 'releases/v5.x'","Warn: no status checks found to merge onto branch 'main'","Warn: no status checks found to merge onto branch 'releases/v5.x'","Info: PRs are required in order to make changes on branch 'main'","Info: PRs are required in order to make changes on branch 'releases/v5.x'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#branch-protection"}},{"name":"CI-Tests","score":10,"reason":"15 out of 15 merged PRs checked by a CI test -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project runs tests before pull requests are merged.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#ci-tests"}},{"name":"Contributors","score":10,"reason":"project has 28 contributing companies or organizations","details":["Info: found contributions from: CodeCantor, DataDog, SUSE, bblfsh, croupiers, datadog, distribyted, dotnet, emberjs, fluxcd, glimmerjs, go-enry, go-git, hdiv, ipfs, ipld, knative, kubernetes, kubernetes-sigs, libp2p, mindersec, mloncode, qubesome, rancher, rancher @suse, rancherlabs, sigstore, sqle"],"documentation":{"short":"Determines if the project has a set of contributors from multiple organizations (e.g., companies).","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#contributors"}}]},"last_synced_at":"2025-08-19T03:33:03.665Z","repository_id":46417246,"created_at":"2025-08-19T03:33:03.665Z","updated_at":"2025-08-19T03:33:03.665Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":30897946,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-03-24T08:58:18.477Z","status":"ssl_error","status_checked_at":"2026-03-24T08:57:59.595Z","response_time":106,"last_error":"SSL_read: unexpected eof while reading","robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":false,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"repo_metadata_updated_at":"2026-03-25T17:00:19.447Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":0.0,"dependent_packages_count":0.0,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":100},"purl":"pkg:deb/debian/golang-github-go-git-go-billy?arch=source\u0026distro=debian-12","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/debian/golang-github-go-git-go-billy","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/debian/golang-github-go-git-go-billy","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/debian/golang-github-go-git-go-billy/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-02-09T15:03:08.348Z","issues_count":33,"pull_requests_count":192,"avg_time_to_close_issue":44029525.95454545,"avg_time_to_close_pull_request":2373581.36196319,"issues_closed_count":22,"pull_requests_closed_count":163,"pull_request_authors_count":29,"issue_authors_count":29,"avg_comments_per_issue":1.4848484848484849,"avg_comments_per_pull_request":0.3489583333333333,"merged_pull_requests_count":143,"bot_issues_count":1,"bot_pull_requests_count":116,"past_year_issues_count":6,"past_year_pull_requests_count":46,"past_year_avg_time_to_close_issue":233359.0,"past_year_avg_time_to_close_pull_request":313714.48484848486,"past_year_issues_closed_count":2,"past_year_pull_requests_closed_count":33,"past_year_pull_request_authors_count":6,"past_year_issue_authors_count":6,"past_year_avg_comments_per_issue":1.1666666666666667,"past_year_avg_comments_per_pull_request":0.30434782608695654,"past_year_bot_issues_count":1,"past_year_bot_pull_requests_count":30,"past_year_merged_pull_requests_count":32,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy/issues","maintainers":[{"login":"pjbgf","count":34,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/pjbgf"}],"active_maintainers":[{"login":"pjbgf","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/pjbgf"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/debian-12/packages/golang-github-go-git-go-billy/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/debian-12/packages/golang-github-go-git-go-billy/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/debian-12/packages/golang-github-go-git-go-billy/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/debian-12/packages/golang-github-go-git-go-billy/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/debian-12/packages/golang-github-go-git-go-billy/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/debian-12/packages/golang-github-go-git-go-billy/codemeta","maintainers":[],"registry":{"name":"debian-12","url":"https://packages.debian.org/bookworm","ecosystem":"debian","default":true,"packages_count":34734,"maintainers_count":0,"namespaces_count":4,"keywords_count":2667,"github":"debian","metadata":{"codename":"bookworm","funded_packages_count":395},"icon_url":"https://github.com/debian.png","created_at":"2026-02-04T11:01:49.459Z","updated_at":"2026-06-10T05:17:51.014Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/debian-12/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/debian-12/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/debian-12/namespaces"}},{"id":13645575,"name":"golang-github-go-git-go-billy","ecosystem":"debian","description":null,"homepage":"https://github.com/go-git/go-billy","licenses":"apache-2.0","normalized_licenses":[],"repository_url":"https://github.com/go-git/go-billy","keywords_array":["misc"],"namespace":"main","versions_count":1,"first_release_published_at":"2026-02-12T03:13:47.512Z","latest_release_published_at":"2026-02-12T03:13:47.512Z","latest_release_number":"5.5.0-1","last_synced_at":"2026-03-13T20:10:21.383Z","created_at":"2026-02-12T03:13:46.829Z","updated_at":"2026-03-25T17:00:19.448Z","registry_url":"https://tracker.debian.org/pkg/golang-github-go-git-go-billy","install_command":"apt-get install golang-github-go-git-go-billy","documentation_url":"https://packages.debian.org/trixie/golang-github-go-git-go-billy","metadata":{"component":"main","architecture":"all","priority":"optional","binary":"golang-github-go-git-go-billy-dev","standards_version":"4.6.2","maintainer":"Debian Go Packaging Team \u003cteam+pkg-go@tracker.debian.org\u003e","build_depends":"debhelper-compat (= 13), dh-golang, golang-any, golang-github-cyphar-filepath-securejoin-dev, golang-gopkg-check.v1-dev \u003c!nocheck\u003e, golang-golang-x-sys-dev, golang-gomega-dev \u003c!nocheck\u003e","build_depends_indep":null,"build_depends_arch":null},"repo_metadata":{"id":46417246,"uuid":"246113572","full_name":"go-git/go-billy","owner":"go-git","description":"The missing interface filesystem abstraction for Go","archived":false,"fork":false,"pushed_at":"2026-03-05T17:27:08.000Z","size":657,"stargazers_count":394,"open_issues_count":22,"forks_count":59,"subscribers_count":8,"default_branch":"main","last_synced_at":"2026-03-24T15:22:50.111Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":"https://pkg.go.dev/github.com/go-git/go-billy/v5","language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/go-git.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null}},"created_at":"2020-03-09T18:35:04.000Z","updated_at":"2026-03-23T11:47:42.000Z","dependencies_parsed_at":"2026-02-26T03:00:35.579Z","dependency_job_id":null,"html_url":"https://github.com/go-git/go-billy","commit_stats":{"total_commits":207,"total_committers":34,"mean_commits":6.088235294117647,"dds":0.6473429951690821,"last_synced_commit":"1bb3aa54c166c2384e0acf4d4e595911230c209e"},"previous_names":[],"tags_count":34,"template":false,"template_full_name":null,"purl":"pkg:github/go-git/go-billy","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/go-git","download_url":"https://codeload.github.com/go-git/go-billy/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy/sbom","scorecard":{"id":431830,"data":{"date":"2025-08-17T17:21:30Z","repo":{"name":"github.com/go-git/go-billy","commit":"3a9ca963b7289d5bc1fd7bd48dc4d818f6997096"},"scorecard":{"version":"v5.2.1","commit":"ab2f6e92482462fe66246d9e32f642855a691dc1"},"score":7.2,"checks":[{"name":"Code-Review","score":0,"reason":"Found 0/2 approved changesets -- score normalized to 0","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#code-review"}},{"name":"Dependency-Update-Tool","score":10,"reason":"update tool detected","details":["Info: detected update tool: Dependabot: .github/dependabot.yaml:1"],"documentation":{"short":"Determines if the project uses a dependency update tool.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#dependency-update-tool"}},{"name":"Maintained","score":10,"reason":"19 commit(s) and 1 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#maintained"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#packaging"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#dangerous-workflow"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#binary-artifacts"}},{"name":"Token-Permissions","score":10,"reason":"GitHub workflow tokens follow principle of least privilege","details":["Info: jobLevel 'contents' permission set to 'read': .github/workflows/codeql.yml:18","Info: jobLevel 'actions' permission set to 'read': .github/workflows/codeql.yml:17","Info: found token with 'none' permissions: .github/workflows/codeql.yml:1","Info: topLevel permissions set to 'read-all': .github/workflows/scorecard.yml:14","Info: found token with 'none' permissions: .github/workflows/test.yml:1","Info: found token with 'none' permissions: .github/workflows/test_wasip1.yml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#token-permissions"}},{"name":"Pinned-Dependencies","score":5,"reason":"dependency not pinned by hash detected -- score normalized to 5","details":["Warn: goCommand not pinned by hash: scripts/wasirun-wrapper:6","Warn: goCommand not pinned by hash: .github/workflows/test_wasip1.yml:27","Info:  10 out of  10 GitHub-owned GitHubAction dependencies pinned","Info:   1 out of   1 third-party GitHubAction dependencies pinned","Info:   0 out of   2 goCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#pinned-dependencies"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: Apache License 2.0: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#license"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#cii-best-practices"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#vulnerabilities"}},{"name":"SAST","score":10,"reason":"SAST tool is run on all commits","details":["Info: SAST configuration detected: CodeQL","Info: all commits (30) are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#sast"}},{"name":"Security-Policy","score":0,"reason":"security policy file not detected","details":["Warn: no security policy file detected","Warn: no security file to analyze","Warn: no security file to analyze","Warn: no security file to analyze"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#security-policy"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#fuzzing"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#signed-releases"}},{"name":"Branch-Protection","score":6,"reason":"branch protection is not maximal on development and all release branches","details":["Info: 'allow deletion' disabled on branch 'main'","Info: 'allow deletion' disabled on branch 'releases/v5.x'","Info: 'force pushes' disabled on branch 'main'","Info: 'force pushes' disabled on branch 'releases/v5.x'","Warn: 'branch protection settings apply to administrators' is disabled on branch 'main'","Warn: 'branch protection settings apply to administrators' is disabled on branch 'releases/v5.x'","Info: 'stale review dismissal' is required to merge on branch 'main'","Info: 'stale review dismissal' is required to merge on branch 'releases/v5.x'","Warn: required approving review count is 1 on branch 'main'","Warn: required approving review count is 1 on branch 'releases/v5.x'","Warn: codeowners review is not required on branch 'main'","Warn: codeowners review is not required on branch 'releases/v5.x'","Info: 'last push approval' is required to merge on branch 'main'","Info: 'last push approval' is required to merge on branch 'releases/v5.x'","Warn: no status checks found to merge onto branch 'main'","Warn: no status checks found to merge onto branch 'releases/v5.x'","Info: PRs are required in order to make changes on branch 'main'","Info: PRs are required in order to make changes on branch 'releases/v5.x'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#branch-protection"}},{"name":"CI-Tests","score":10,"reason":"15 out of 15 merged PRs checked by a CI test -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project runs tests before pull requests are merged.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#ci-tests"}},{"name":"Contributors","score":10,"reason":"project has 28 contributing companies or organizations","details":["Info: found contributions from: CodeCantor, DataDog, SUSE, bblfsh, croupiers, datadog, distribyted, dotnet, emberjs, fluxcd, glimmerjs, go-enry, go-git, hdiv, ipfs, ipld, knative, kubernetes, kubernetes-sigs, libp2p, mindersec, mloncode, qubesome, rancher, rancher @suse, rancherlabs, sigstore, sqle"],"documentation":{"short":"Determines if the project has a set of contributors from multiple organizations (e.g., companies).","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#contributors"}}]},"last_synced_at":"2025-08-19T03:33:03.665Z","repository_id":46417246,"created_at":"2025-08-19T03:33:03.665Z","updated_at":"2025-08-19T03:33:03.665Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":30897946,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-03-24T08:58:18.477Z","status":"ssl_error","status_checked_at":"2026-03-24T08:57:59.595Z","response_time":106,"last_error":"SSL_read: unexpected eof while reading","robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":false,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"repo_metadata_updated_at":"2026-03-25T17:00:19.448Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":0.0,"dependent_packages_count":0.0,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":100},"purl":"pkg:deb/debian/golang-github-go-git-go-billy?arch=source\u0026distro=debian-13\u0026repository_url=https://packages.debian.org/trixie","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/debian/golang-github-go-git-go-billy","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/debian/golang-github-go-git-go-billy","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/debian/golang-github-go-git-go-billy/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-02-09T15:03:08.348Z","issues_count":33,"pull_requests_count":192,"avg_time_to_close_issue":44029525.95454545,"avg_time_to_close_pull_request":2373581.36196319,"issues_closed_count":22,"pull_requests_closed_count":163,"pull_request_authors_count":29,"issue_authors_count":29,"avg_comments_per_issue":1.4848484848484849,"avg_comments_per_pull_request":0.3489583333333333,"merged_pull_requests_count":143,"bot_issues_count":1,"bot_pull_requests_count":116,"past_year_issues_count":6,"past_year_pull_requests_count":46,"past_year_avg_time_to_close_issue":233359.0,"past_year_avg_time_to_close_pull_request":313714.48484848486,"past_year_issues_closed_count":2,"past_year_pull_requests_closed_count":33,"past_year_pull_request_authors_count":6,"past_year_issue_authors_count":6,"past_year_avg_comments_per_issue":1.1666666666666667,"past_year_avg_comments_per_pull_request":0.30434782608695654,"past_year_bot_issues_count":1,"past_year_bot_pull_requests_count":30,"past_year_merged_pull_requests_count":32,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy/issues","maintainers":[{"login":"pjbgf","count":34,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/pjbgf"}],"active_maintainers":[{"login":"pjbgf","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/pjbgf"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/debian-13/packages/golang-github-go-git-go-billy/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/debian-13/packages/golang-github-go-git-go-billy/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/debian-13/packages/golang-github-go-git-go-billy/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/debian-13/packages/golang-github-go-git-go-billy/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/debian-13/packages/golang-github-go-git-go-billy/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/debian-13/packages/golang-github-go-git-go-billy/codemeta","maintainers":[],"registry":{"name":"debian-13","url":"https://packages.debian.org/trixie","ecosystem":"debian","default":false,"packages_count":38024,"maintainers_count":0,"namespaces_count":4,"keywords_count":1987,"github":"debian","metadata":{"codename":"trixie","funded_packages_count":316},"icon_url":"https://github.com/debian.png","created_at":"2026-02-04T11:01:50.448Z","updated_at":"2026-06-10T05:17:04.542Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/debian-13/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/debian-13/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/debian-13/namespaces"}},{"id":13387855,"name":"golang-github-go-git-go-billy","ecosystem":"ubuntu","description":null,"homepage":"https://github.com/go-git/go-billy","licenses":"apache-2.0","normalized_licenses":[],"repository_url":"https://github.com/go-git/go-billy","keywords_array":["universe/misc"],"namespace":"universe","versions_count":1,"first_release_published_at":"2026-02-05T15:55:13.737Z","latest_release_published_at":"2026-02-05T15:55:13.737Z","latest_release_number":"5.3.1-3","last_synced_at":"2026-03-05T17:09:31.788Z","created_at":"2026-02-05T15:55:12.836Z","updated_at":"2026-03-25T17:00:21.942Z","registry_url":"https://launchpad.net/ubuntu/+source/golang-github-go-git-go-billy","install_command":"apt-get install golang-github-go-git-go-billy","documentation_url":null,"metadata":{"component":"universe","architecture":"all","priority":"optional","binary":"golang-github-go-git-go-billy-dev","standards_version":"4.6.0","maintainer":"Debian Go Packaging Team \u003cteam+pkg-go@tracker.debian.org\u003e","build_depends":"debhelper-compat (= 13), dh-golang, golang-any, golang-gopkg-check.v1-dev, golang-golang-x-sys-dev","build_depends_indep":null,"build_depends_arch":null},"repo_metadata":{"id":46417246,"uuid":"246113572","full_name":"go-git/go-billy","owner":"go-git","description":"The missing interface filesystem abstraction for Go","archived":false,"fork":false,"pushed_at":"2026-03-05T17:27:08.000Z","size":657,"stargazers_count":394,"open_issues_count":22,"forks_count":59,"subscribers_count":8,"default_branch":"main","last_synced_at":"2026-03-24T15:22:50.111Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":"https://pkg.go.dev/github.com/go-git/go-billy/v5","language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/go-git.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null}},"created_at":"2020-03-09T18:35:04.000Z","updated_at":"2026-03-23T11:47:42.000Z","dependencies_parsed_at":"2026-02-26T03:00:35.579Z","dependency_job_id":null,"html_url":"https://github.com/go-git/go-billy","commit_stats":{"total_commits":207,"total_committers":34,"mean_commits":6.088235294117647,"dds":0.6473429951690821,"last_synced_commit":"1bb3aa54c166c2384e0acf4d4e595911230c209e"},"previous_names":[],"tags_count":34,"template":false,"template_full_name":null,"purl":"pkg:github/go-git/go-billy","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/go-git","download_url":"https://codeload.github.com/go-git/go-billy/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy/sbom","scorecard":{"id":431830,"data":{"date":"2025-08-17T17:21:30Z","repo":{"name":"github.com/go-git/go-billy","commit":"3a9ca963b7289d5bc1fd7bd48dc4d818f6997096"},"scorecard":{"version":"v5.2.1","commit":"ab2f6e92482462fe66246d9e32f642855a691dc1"},"score":7.2,"checks":[{"name":"Code-Review","score":0,"reason":"Found 0/2 approved changesets -- score normalized to 0","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#code-review"}},{"name":"Dependency-Update-Tool","score":10,"reason":"update tool detected","details":["Info: detected update tool: Dependabot: .github/dependabot.yaml:1"],"documentation":{"short":"Determines if the project uses a dependency update tool.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#dependency-update-tool"}},{"name":"Maintained","score":10,"reason":"19 commit(s) and 1 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#maintained"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#packaging"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#dangerous-workflow"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#binary-artifacts"}},{"name":"Token-Permissions","score":10,"reason":"GitHub workflow tokens follow principle of least privilege","details":["Info: jobLevel 'contents' permission set to 'read': .github/workflows/codeql.yml:18","Info: jobLevel 'actions' permission set to 'read': .github/workflows/codeql.yml:17","Info: found token with 'none' permissions: .github/workflows/codeql.yml:1","Info: topLevel permissions set to 'read-all': .github/workflows/scorecard.yml:14","Info: found token with 'none' permissions: .github/workflows/test.yml:1","Info: found token with 'none' permissions: .github/workflows/test_wasip1.yml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#token-permissions"}},{"name":"Pinned-Dependencies","score":5,"reason":"dependency not pinned by hash detected -- score normalized to 5","details":["Warn: goCommand not pinned by hash: scripts/wasirun-wrapper:6","Warn: goCommand not pinned by hash: .github/workflows/test_wasip1.yml:27","Info:  10 out of  10 GitHub-owned GitHubAction dependencies pinned","Info:   1 out of   1 third-party GitHubAction dependencies pinned","Info:   0 out of   2 goCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#pinned-dependencies"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: Apache License 2.0: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#license"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#cii-best-practices"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#vulnerabilities"}},{"name":"SAST","score":10,"reason":"SAST tool is run on all commits","details":["Info: SAST configuration detected: CodeQL","Info: all commits (30) are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#sast"}},{"name":"Security-Policy","score":0,"reason":"security policy file not detected","details":["Warn: no security policy file detected","Warn: no security file to analyze","Warn: no security file to analyze","Warn: no security file to analyze"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#security-policy"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#fuzzing"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#signed-releases"}},{"name":"Branch-Protection","score":6,"reason":"branch protection is not maximal on development and all release branches","details":["Info: 'allow deletion' disabled on branch 'main'","Info: 'allow deletion' disabled on branch 'releases/v5.x'","Info: 'force pushes' disabled on branch 'main'","Info: 'force pushes' disabled on branch 'releases/v5.x'","Warn: 'branch protection settings apply to administrators' is disabled on branch 'main'","Warn: 'branch protection settings apply to administrators' is disabled on branch 'releases/v5.x'","Info: 'stale review dismissal' is required to merge on branch 'main'","Info: 'stale review dismissal' is required to merge on branch 'releases/v5.x'","Warn: required approving review count is 1 on branch 'main'","Warn: required approving review count is 1 on branch 'releases/v5.x'","Warn: codeowners review is not required on branch 'main'","Warn: codeowners review is not required on branch 'releases/v5.x'","Info: 'last push approval' is required to merge on branch 'main'","Info: 'last push approval' is required to merge on branch 'releases/v5.x'","Warn: no status checks found to merge onto branch 'main'","Warn: no status checks found to merge onto branch 'releases/v5.x'","Info: PRs are required in order to make changes on branch 'main'","Info: PRs are required in order to make changes on branch 'releases/v5.x'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#branch-protection"}},{"name":"CI-Tests","score":10,"reason":"15 out of 15 merged PRs checked by a CI test -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project runs tests before pull requests are merged.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#ci-tests"}},{"name":"Contributors","score":10,"reason":"project has 28 contributing companies or organizations","details":["Info: found contributions from: CodeCantor, DataDog, SUSE, bblfsh, croupiers, datadog, distribyted, dotnet, emberjs, fluxcd, glimmerjs, go-enry, go-git, hdiv, ipfs, ipld, knative, kubernetes, kubernetes-sigs, libp2p, mindersec, mloncode, qubesome, rancher, rancher @suse, rancherlabs, sigstore, sqle"],"documentation":{"short":"Determines if the project has a set of contributors from multiple organizations (e.g., companies).","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#contributors"}}]},"last_synced_at":"2025-08-19T03:33:03.665Z","repository_id":46417246,"created_at":"2025-08-19T03:33:03.665Z","updated_at":"2025-08-19T03:33:03.665Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":30897946,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-03-24T08:58:18.477Z","status":"ssl_error","status_checked_at":"2026-03-24T08:57:59.595Z","response_time":106,"last_error":"SSL_read: unexpected eof while reading","robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":false,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"repo_metadata_updated_at":"2026-03-25T17:00:21.942Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":0.0,"dependent_packages_count":0.0,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":100},"purl":"pkg:deb/ubuntu/golang-github-go-git-go-billy?arch=source\u0026distro=ubuntu-24.04","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/ubuntu/golang-github-go-git-go-billy","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/ubuntu/golang-github-go-git-go-billy","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/ubuntu/golang-github-go-git-go-billy/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-02-09T15:03:08.348Z","issues_count":33,"pull_requests_count":192,"avg_time_to_close_issue":44029525.95454545,"avg_time_to_close_pull_request":2373581.36196319,"issues_closed_count":22,"pull_requests_closed_count":163,"pull_request_authors_count":29,"issue_authors_count":29,"avg_comments_per_issue":1.4848484848484849,"avg_comments_per_pull_request":0.3489583333333333,"merged_pull_requests_count":143,"bot_issues_count":1,"bot_pull_requests_count":116,"past_year_issues_count":6,"past_year_pull_requests_count":46,"past_year_avg_time_to_close_issue":233359.0,"past_year_avg_time_to_close_pull_request":313714.48484848486,"past_year_issues_closed_count":2,"past_year_pull_requests_closed_count":33,"past_year_pull_request_authors_count":6,"past_year_issue_authors_count":6,"past_year_avg_comments_per_issue":1.1666666666666667,"past_year_avg_comments_per_pull_request":0.30434782608695654,"past_year_bot_issues_count":1,"past_year_bot_pull_requests_count":30,"past_year_merged_pull_requests_count":32,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy/issues","maintainers":[{"login":"pjbgf","count":34,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/pjbgf"}],"active_maintainers":[{"login":"pjbgf","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/pjbgf"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-24.04/packages/golang-github-go-git-go-billy/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-24.04/packages/golang-github-go-git-go-billy/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-24.04/packages/golang-github-go-git-go-billy/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-24.04/packages/golang-github-go-git-go-billy/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-24.04/packages/golang-github-go-git-go-billy/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-24.04/packages/golang-github-go-git-go-billy/codemeta","maintainers":[],"registry":{"name":"ubuntu-24.04","url":"https://launchpad.net/ubuntu/noble","ecosystem":"ubuntu","default":true,"packages_count":37306,"maintainers_count":0,"namespaces_count":4,"keywords_count":1701,"github":"ubuntu","metadata":{"codename":"noble","funded_packages_count":198},"icon_url":"https://github.com/ubuntu.png","created_at":"2026-02-04T11:01:45.928Z","updated_at":"2026-06-10T05:17:44.581Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-24.04/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-24.04/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-24.04/namespaces"}},{"id":13475595,"name":"golang-github-go-git-go-billy","ecosystem":"ubuntu","description":null,"homepage":"https://github.com/go-git/go-billy","licenses":"apache-2.0","normalized_licenses":[],"repository_url":"https://github.com/go-git/go-billy","keywords_array":["universe/misc"],"namespace":"universe","versions_count":1,"first_release_published_at":"2026-02-10T03:32:53.986Z","latest_release_published_at":"2026-02-10T03:32:53.986Z","latest_release_number":"5.3.1-3","last_synced_at":"2026-03-10T04:13:56.949Z","created_at":"2026-02-10T03:32:53.676Z","updated_at":"2026-03-25T17:00:56.356Z","registry_url":"https://launchpad.net/ubuntu/+source/golang-github-go-git-go-billy","install_command":"apt-get install golang-github-go-git-go-billy","documentation_url":null,"metadata":{"component":"universe","architecture":"all","priority":"optional","binary":"golang-github-go-git-go-billy-dev","standards_version":"4.6.0","maintainer":"Debian Go Packaging Team \u003cteam+pkg-go@tracker.debian.org\u003e","build_depends":"debhelper-compat (= 13), dh-golang, golang-any, golang-gopkg-check.v1-dev, golang-golang-x-sys-dev","build_depends_indep":null,"build_depends_arch":null},"repo_metadata":{"id":46417246,"uuid":"246113572","full_name":"go-git/go-billy","owner":"go-git","description":"The missing interface filesystem abstraction for Go","archived":false,"fork":false,"pushed_at":"2026-03-05T17:27:08.000Z","size":657,"stargazers_count":394,"open_issues_count":22,"forks_count":59,"subscribers_count":8,"default_branch":"main","last_synced_at":"2026-03-24T15:22:50.111Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":"https://pkg.go.dev/github.com/go-git/go-billy/v5","language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/go-git.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null}},"created_at":"2020-03-09T18:35:04.000Z","updated_at":"2026-03-23T11:47:42.000Z","dependencies_parsed_at":"2026-02-26T03:00:35.579Z","dependency_job_id":null,"html_url":"https://github.com/go-git/go-billy","commit_stats":{"total_commits":207,"total_committers":34,"mean_commits":6.088235294117647,"dds":0.6473429951690821,"last_synced_commit":"1bb3aa54c166c2384e0acf4d4e595911230c209e"},"previous_names":[],"tags_count":34,"template":false,"template_full_name":null,"purl":"pkg:github/go-git/go-billy","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/go-git","download_url":"https://codeload.github.com/go-git/go-billy/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy/sbom","scorecard":{"id":431830,"data":{"date":"2025-08-17T17:21:30Z","repo":{"name":"github.com/go-git/go-billy","commit":"3a9ca963b7289d5bc1fd7bd48dc4d818f6997096"},"scorecard":{"version":"v5.2.1","commit":"ab2f6e92482462fe66246d9e32f642855a691dc1"},"score":7.2,"checks":[{"name":"Code-Review","score":0,"reason":"Found 0/2 approved changesets -- score normalized to 0","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#code-review"}},{"name":"Dependency-Update-Tool","score":10,"reason":"update tool detected","details":["Info: detected update tool: Dependabot: .github/dependabot.yaml:1"],"documentation":{"short":"Determines if the project uses a dependency update tool.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#dependency-update-tool"}},{"name":"Maintained","score":10,"reason":"19 commit(s) and 1 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#maintained"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#packaging"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#dangerous-workflow"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#binary-artifacts"}},{"name":"Token-Permissions","score":10,"reason":"GitHub workflow tokens follow principle of least privilege","details":["Info: jobLevel 'contents' permission set to 'read': .github/workflows/codeql.yml:18","Info: jobLevel 'actions' permission set to 'read': .github/workflows/codeql.yml:17","Info: found token with 'none' permissions: .github/workflows/codeql.yml:1","Info: topLevel permissions set to 'read-all': .github/workflows/scorecard.yml:14","Info: found token with 'none' permissions: .github/workflows/test.yml:1","Info: found token with 'none' permissions: .github/workflows/test_wasip1.yml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#token-permissions"}},{"name":"Pinned-Dependencies","score":5,"reason":"dependency not pinned by hash detected -- score normalized to 5","details":["Warn: goCommand not pinned by hash: scripts/wasirun-wrapper:6","Warn: goCommand not pinned by hash: .github/workflows/test_wasip1.yml:27","Info:  10 out of  10 GitHub-owned GitHubAction dependencies pinned","Info:   1 out of   1 third-party GitHubAction dependencies pinned","Info:   0 out of   2 goCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#pinned-dependencies"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: Apache License 2.0: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#license"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#cii-best-practices"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#vulnerabilities"}},{"name":"SAST","score":10,"reason":"SAST tool is run on all commits","details":["Info: SAST configuration detected: CodeQL","Info: all commits (30) are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#sast"}},{"name":"Security-Policy","score":0,"reason":"security policy file not detected","details":["Warn: no security policy file detected","Warn: no security file to analyze","Warn: no security file to analyze","Warn: no security file to analyze"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#security-policy"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#fuzzing"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#signed-releases"}},{"name":"Branch-Protection","score":6,"reason":"branch protection is not maximal on development and all release branches","details":["Info: 'allow deletion' disabled on branch 'main'","Info: 'allow deletion' disabled on branch 'releases/v5.x'","Info: 'force pushes' disabled on branch 'main'","Info: 'force pushes' disabled on branch 'releases/v5.x'","Warn: 'branch protection settings apply to administrators' is disabled on branch 'main'","Warn: 'branch protection settings apply to administrators' is disabled on branch 'releases/v5.x'","Info: 'stale review dismissal' is required to merge on branch 'main'","Info: 'stale review dismissal' is required to merge on branch 'releases/v5.x'","Warn: required approving review count is 1 on branch 'main'","Warn: required approving review count is 1 on branch 'releases/v5.x'","Warn: codeowners review is not required on branch 'main'","Warn: codeowners review is not required on branch 'releases/v5.x'","Info: 'last push approval' is required to merge on branch 'main'","Info: 'last push approval' is required to merge on branch 'releases/v5.x'","Warn: no status checks found to merge onto branch 'main'","Warn: no status checks found to merge onto branch 'releases/v5.x'","Info: PRs are required in order to make changes on branch 'main'","Info: PRs are required in order to make changes on branch 'releases/v5.x'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#branch-protection"}},{"name":"CI-Tests","score":10,"reason":"15 out of 15 merged PRs checked by a CI test -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project runs tests before pull requests are merged.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#ci-tests"}},{"name":"Contributors","score":10,"reason":"project has 28 contributing companies or organizations","details":["Info: found contributions from: CodeCantor, DataDog, SUSE, bblfsh, croupiers, datadog, distribyted, dotnet, emberjs, fluxcd, glimmerjs, go-enry, go-git, hdiv, ipfs, ipld, knative, kubernetes, kubernetes-sigs, libp2p, mindersec, mloncode, qubesome, rancher, rancher @suse, rancherlabs, sigstore, sqle"],"documentation":{"short":"Determines if the project has a set of contributors from multiple organizations (e.g., companies).","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#contributors"}}]},"last_synced_at":"2025-08-19T03:33:03.665Z","repository_id":46417246,"created_at":"2025-08-19T03:33:03.665Z","updated_at":"2025-08-19T03:33:03.665Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":30897946,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-03-24T08:58:18.477Z","status":"ssl_error","status_checked_at":"2026-03-24T08:57:59.595Z","response_time":106,"last_error":"SSL_read: unexpected eof while reading","robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":false,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"repo_metadata_updated_at":"2026-03-25T17:00:56.356Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":0.0,"dependent_packages_count":0.0,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":100},"purl":"pkg:deb/ubuntu/golang-github-go-git-go-billy?arch=source\u0026distro=ubuntu-23.10\u0026repository_url=https://launchpad.net/ubuntu/mantic","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/ubuntu/golang-github-go-git-go-billy","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/ubuntu/golang-github-go-git-go-billy","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/ubuntu/golang-github-go-git-go-billy/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-02-09T15:03:08.348Z","issues_count":33,"pull_requests_count":192,"avg_time_to_close_issue":44029525.95454545,"avg_time_to_close_pull_request":2373581.36196319,"issues_closed_count":22,"pull_requests_closed_count":163,"pull_request_authors_count":29,"issue_authors_count":29,"avg_comments_per_issue":1.4848484848484849,"avg_comments_per_pull_request":0.3489583333333333,"merged_pull_requests_count":143,"bot_issues_count":1,"bot_pull_requests_count":116,"past_year_issues_count":6,"past_year_pull_requests_count":46,"past_year_avg_time_to_close_issue":233359.0,"past_year_avg_time_to_close_pull_request":313714.48484848486,"past_year_issues_closed_count":2,"past_year_pull_requests_closed_count":33,"past_year_pull_request_authors_count":6,"past_year_issue_authors_count":6,"past_year_avg_comments_per_issue":1.1666666666666667,"past_year_avg_comments_per_pull_request":0.30434782608695654,"past_year_bot_issues_count":1,"past_year_bot_pull_requests_count":30,"past_year_merged_pull_requests_count":32,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy/issues","maintainers":[{"login":"pjbgf","count":34,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/pjbgf"}],"active_maintainers":[{"login":"pjbgf","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/pjbgf"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-23.10/packages/golang-github-go-git-go-billy/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-23.10/packages/golang-github-go-git-go-billy/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-23.10/packages/golang-github-go-git-go-billy/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-23.10/packages/golang-github-go-git-go-billy/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-23.10/packages/golang-github-go-git-go-billy/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-23.10/packages/golang-github-go-git-go-billy/codemeta","maintainers":[],"registry":{"name":"ubuntu-23.10","url":"https://launchpad.net/ubuntu/mantic","ecosystem":"ubuntu","default":false,"packages_count":36642,"maintainers_count":0,"namespaces_count":4,"keywords_count":2223,"github":"ubuntu","metadata":{"codename":"mantic","mirror":"http://old-releases.ubuntu.com/ubuntu","funded_packages_count":444},"icon_url":"https://github.com/ubuntu.png","created_at":"2026-02-04T11:01:48.636Z","updated_at":"2026-06-10T05:17:48.008Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-23.10/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-23.10/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-23.10/namespaces"}},{"id":13545585,"name":"golang-github-go-git-go-billy","ecosystem":"ubuntu","description":null,"homepage":"https://github.com/go-git/go-billy","licenses":"apache-2.0","normalized_licenses":[],"repository_url":"https://github.com/go-git/go-billy","keywords_array":["universe/misc"],"namespace":"universe","versions_count":1,"first_release_published_at":"2026-02-11T02:01:27.277Z","latest_release_published_at":"2026-02-11T02:01:27.277Z","latest_release_number":"5.3.1-3","last_synced_at":"2026-03-12T08:05:32.591Z","created_at":"2026-02-11T02:01:27.038Z","updated_at":"2026-03-25T17:00:56.891Z","registry_url":"https://launchpad.net/ubuntu/+source/golang-github-go-git-go-billy","install_command":"apt-get install golang-github-go-git-go-billy","documentation_url":null,"metadata":{"component":"universe","architecture":"all","priority":"optional","binary":"golang-github-go-git-go-billy-dev","standards_version":"4.6.0","maintainer":"Debian Go Packaging Team \u003cteam+pkg-go@tracker.debian.org\u003e","build_depends":"debhelper-compat (= 13), dh-golang, golang-any, golang-gopkg-check.v1-dev, golang-golang-x-sys-dev","build_depends_indep":null,"build_depends_arch":null},"repo_metadata":{"id":46417246,"uuid":"246113572","full_name":"go-git/go-billy","owner":"go-git","description":"The missing interface filesystem abstraction for Go","archived":false,"fork":false,"pushed_at":"2026-03-05T17:27:08.000Z","size":657,"stargazers_count":394,"open_issues_count":22,"forks_count":59,"subscribers_count":8,"default_branch":"main","last_synced_at":"2026-03-24T15:22:50.111Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":"https://pkg.go.dev/github.com/go-git/go-billy/v5","language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/go-git.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null}},"created_at":"2020-03-09T18:35:04.000Z","updated_at":"2026-03-23T11:47:42.000Z","dependencies_parsed_at":"2026-02-26T03:00:35.579Z","dependency_job_id":null,"html_url":"https://github.com/go-git/go-billy","commit_stats":{"total_commits":207,"total_committers":34,"mean_commits":6.088235294117647,"dds":0.6473429951690821,"last_synced_commit":"1bb3aa54c166c2384e0acf4d4e595911230c209e"},"previous_names":[],"tags_count":34,"template":false,"template_full_name":null,"purl":"pkg:github/go-git/go-billy","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/go-git","download_url":"https://codeload.github.com/go-git/go-billy/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy/sbom","scorecard":{"id":431830,"data":{"date":"2025-08-17T17:21:30Z","repo":{"name":"github.com/go-git/go-billy","commit":"3a9ca963b7289d5bc1fd7bd48dc4d818f6997096"},"scorecard":{"version":"v5.2.1","commit":"ab2f6e92482462fe66246d9e32f642855a691dc1"},"score":7.2,"checks":[{"name":"Code-Review","score":0,"reason":"Found 0/2 approved changesets -- score normalized to 0","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#code-review"}},{"name":"Dependency-Update-Tool","score":10,"reason":"update tool detected","details":["Info: detected update tool: Dependabot: .github/dependabot.yaml:1"],"documentation":{"short":"Determines if the project uses a dependency update tool.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#dependency-update-tool"}},{"name":"Maintained","score":10,"reason":"19 commit(s) and 1 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#maintained"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#packaging"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#dangerous-workflow"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#binary-artifacts"}},{"name":"Token-Permissions","score":10,"reason":"GitHub workflow tokens follow principle of least privilege","details":["Info: jobLevel 'contents' permission set to 'read': .github/workflows/codeql.yml:18","Info: jobLevel 'actions' permission set to 'read': .github/workflows/codeql.yml:17","Info: found token with 'none' permissions: .github/workflows/codeql.yml:1","Info: topLevel permissions set to 'read-all': .github/workflows/scorecard.yml:14","Info: found token with 'none' permissions: .github/workflows/test.yml:1","Info: found token with 'none' permissions: .github/workflows/test_wasip1.yml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#token-permissions"}},{"name":"Pinned-Dependencies","score":5,"reason":"dependency not pinned by hash detected -- score normalized to 5","details":["Warn: goCommand not pinned by hash: scripts/wasirun-wrapper:6","Warn: goCommand not pinned by hash: .github/workflows/test_wasip1.yml:27","Info:  10 out of  10 GitHub-owned GitHubAction dependencies pinned","Info:   1 out of   1 third-party GitHubAction dependencies pinned","Info:   0 out of   2 goCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#pinned-dependencies"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: Apache License 2.0: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#license"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#cii-best-practices"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#vulnerabilities"}},{"name":"SAST","score":10,"reason":"SAST tool is run on all commits","details":["Info: SAST configuration detected: CodeQL","Info: all commits (30) are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#sast"}},{"name":"Security-Policy","score":0,"reason":"security policy file not detected","details":["Warn: no security policy file detected","Warn: no security file to analyze","Warn: no security file to analyze","Warn: no security file to analyze"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#security-policy"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#fuzzing"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#signed-releases"}},{"name":"Branch-Protection","score":6,"reason":"branch protection is not maximal on development and all release branches","details":["Info: 'allow deletion' disabled on branch 'main'","Info: 'allow deletion' disabled on branch 'releases/v5.x'","Info: 'force pushes' disabled on branch 'main'","Info: 'force pushes' disabled on branch 'releases/v5.x'","Warn: 'branch protection settings apply to administrators' is disabled on branch 'main'","Warn: 'branch protection settings apply to administrators' is disabled on branch 'releases/v5.x'","Info: 'stale review dismissal' is required to merge on branch 'main'","Info: 'stale review dismissal' is required to merge on branch 'releases/v5.x'","Warn: required approving review count is 1 on branch 'main'","Warn: required approving review count is 1 on branch 'releases/v5.x'","Warn: codeowners review is not required on branch 'main'","Warn: codeowners review is not required on branch 'releases/v5.x'","Info: 'last push approval' is required to merge on branch 'main'","Info: 'last push approval' is required to merge on branch 'releases/v5.x'","Warn: no status checks found to merge onto branch 'main'","Warn: no status checks found to merge onto branch 'releases/v5.x'","Info: PRs are required in order to make changes on branch 'main'","Info: PRs are required in order to make changes on branch 'releases/v5.x'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#branch-protection"}},{"name":"CI-Tests","score":10,"reason":"15 out of 15 merged PRs checked by a CI test -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project runs tests before pull requests are merged.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#ci-tests"}},{"name":"Contributors","score":10,"reason":"project has 28 contributing companies or organizations","details":["Info: found contributions from: CodeCantor, DataDog, SUSE, bblfsh, croupiers, datadog, distribyted, dotnet, emberjs, fluxcd, glimmerjs, go-enry, go-git, hdiv, ipfs, ipld, knative, kubernetes, kubernetes-sigs, libp2p, mindersec, mloncode, qubesome, rancher, rancher @suse, rancherlabs, sigstore, sqle"],"documentation":{"short":"Determines if the project has a set of contributors from multiple organizations (e.g., companies).","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#contributors"}}]},"last_synced_at":"2025-08-19T03:33:03.665Z","repository_id":46417246,"created_at":"2025-08-19T03:33:03.665Z","updated_at":"2025-08-19T03:33:03.665Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":30897946,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-03-24T08:58:18.477Z","status":"ssl_error","status_checked_at":"2026-03-24T08:57:59.595Z","response_time":106,"last_error":"SSL_read: unexpected eof while reading","robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":false,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"repo_metadata_updated_at":"2026-03-25T17:00:56.891Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":0.0,"dependent_packages_count":0.0,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":100},"purl":"pkg:deb/ubuntu/golang-github-go-git-go-billy?arch=source\u0026distro=ubuntu-23.04\u0026repository_url=https://launchpad.net/ubuntu/lunar","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/ubuntu/golang-github-go-git-go-billy","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/ubuntu/golang-github-go-git-go-billy","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/ubuntu/golang-github-go-git-go-billy/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-02-09T15:03:08.348Z","issues_count":33,"pull_requests_count":192,"avg_time_to_close_issue":44029525.95454545,"avg_time_to_close_pull_request":2373581.36196319,"issues_closed_count":22,"pull_requests_closed_count":163,"pull_request_authors_count":29,"issue_authors_count":29,"avg_comments_per_issue":1.4848484848484849,"avg_comments_per_pull_request":0.3489583333333333,"merged_pull_requests_count":143,"bot_issues_count":1,"bot_pull_requests_count":116,"past_year_issues_count":6,"past_year_pull_requests_count":46,"past_year_avg_time_to_close_issue":233359.0,"past_year_avg_time_to_close_pull_request":313714.48484848486,"past_year_issues_closed_count":2,"past_year_pull_requests_closed_count":33,"past_year_pull_request_authors_count":6,"past_year_issue_authors_count":6,"past_year_avg_comments_per_issue":1.1666666666666667,"past_year_avg_comments_per_pull_request":0.30434782608695654,"past_year_bot_issues_count":1,"past_year_bot_pull_requests_count":30,"past_year_merged_pull_requests_count":32,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy/issues","maintainers":[{"login":"pjbgf","count":34,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/pjbgf"}],"active_maintainers":[{"login":"pjbgf","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/pjbgf"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-23.04/packages/golang-github-go-git-go-billy/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-23.04/packages/golang-github-go-git-go-billy/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-23.04/packages/golang-github-go-git-go-billy/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-23.04/packages/golang-github-go-git-go-billy/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-23.04/packages/golang-github-go-git-go-billy/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-23.04/packages/golang-github-go-git-go-billy/codemeta","maintainers":[],"registry":{"name":"ubuntu-23.04","url":"https://launchpad.net/ubuntu/lunar","ecosystem":"ubuntu","default":false,"packages_count":36116,"maintainers_count":0,"namespaces_count":4,"keywords_count":1000,"github":"ubuntu","metadata":{"codename":"lunar","mirror":"http://old-releases.ubuntu.com/ubuntu","funded_packages_count":133},"icon_url":"https://github.com/ubuntu.png","created_at":"2026-02-04T11:01:49.117Z","updated_at":"2026-06-10T05:17:49.008Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-23.04/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-23.04/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-23.04/namespaces"}},{"id":14389463,"name":"github.com/go-git/go-billy/v5/osfs","ecosystem":"go","description":"Package osfs provides a billy filesystem for the OS.","homepage":"https://github.com/go-git/go-billy","licenses":"Apache-2.0","normalized_licenses":["Apache-2.0"],"repository_url":"https://github.com/go-git/go-billy","keywords_array":[],"namespace":"github.com/go-git/go-billy/v5","versions_count":13,"first_release_published_at":"2026-05-06T09:27:57.369Z","latest_release_published_at":"2026-05-06T09:27:57.369Z","latest_release_number":"v5.8.0","last_synced_at":"2026-07-11T01:20:32.856Z","created_at":"2026-05-06T09:27:37.942Z","updated_at":"2026-07-11T01:20:32.856Z","registry_url":"https://pkg.go.dev/github.com/go-git/go-billy/v5/osfs","install_command":"go get github.com/go-git/go-billy/v5/osfs","documentation_url":"https://pkg.go.dev/github.com/go-git/go-billy/v5/osfs#section-documentation","metadata":{},"repo_metadata":{},"repo_metadata_updated_at":"2026-05-06T09:27:38.624Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":5.10009395951028,"dependent_packages_count":4.778749975273802,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":4.939421967392041},"purl":"pkg:golang/github.com/go-git/go-billy/v5/osfs","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/go/github.com/go-git/go-billy/v5/osfs","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/go/github.com/go-git/go-billy/v5/osfs","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/go/github.com/go-git/go-billy/v5/osfs/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":null,"versions_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fgo-git%2Fgo-billy%2Fv5%2Fosfs/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fgo-git%2Fgo-billy%2Fv5%2Fosfs/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fgo-git%2Fgo-billy%2Fv5%2Fosfs/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fgo-git%2Fgo-billy%2Fv5%2Fosfs/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fgo-git%2Fgo-billy%2Fv5%2Fosfs/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fgo-git%2Fgo-billy%2Fv5%2Fosfs/codemeta","maintainers":[],"registry":{"name":"proxy.golang.org","url":"https://proxy.golang.org","ecosystem":"go","default":true,"packages_count":2206448,"maintainers_count":0,"namespaces_count":792747,"keywords_count":113213,"github":"golang","metadata":{"funded_packages_count":53976},"icon_url":"https://github.com/golang.png","created_at":"2022-04-04T15:19:22.939Z","updated_at":"2026-06-10T05:03:23.672Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/namespaces"}},{"id":14389462,"name":"github.com/go-git/go-billy/v5/helper/polyfill","ecosystem":"go","description":"","homepage":"https://github.com/go-git/go-billy","licenses":"Apache-2.0","normalized_licenses":["Apache-2.0"],"repository_url":"https://github.com/go-git/go-billy","keywords_array":[],"namespace":"github.com/go-git/go-billy/v5/helper","versions_count":13,"first_release_published_at":"2026-05-06T09:27:56.732Z","latest_release_published_at":"2026-05-06T09:27:56.732Z","latest_release_number":"v5.8.0","last_synced_at":"2026-07-11T01:20:32.933Z","created_at":"2026-05-06T09:27:37.763Z","updated_at":"2026-07-11T01:20:32.934Z","registry_url":"https://pkg.go.dev/github.com/go-git/go-billy/v5/helper/polyfill","install_command":"go get github.com/go-git/go-billy/v5/helper/polyfill","documentation_url":"https://pkg.go.dev/github.com/go-git/go-billy/v5/helper/polyfill#section-documentation","metadata":{},"repo_metadata":{},"repo_metadata_updated_at":"2026-05-06T09:27:38.626Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":5.10009395951028,"dependent_packages_count":4.778736471275303,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":4.939415215392792},"purl":"pkg:golang/github.com/go-git/go-billy/v5/helper/polyfill","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/go/github.com/go-git/go-billy/v5/helper/polyfill","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/go/github.com/go-git/go-billy/v5/helper/polyfill","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/go/github.com/go-git/go-billy/v5/helper/polyfill/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":null,"versions_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fgo-git%2Fgo-billy%2Fv5%2Fhelper%2Fpolyfill/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fgo-git%2Fgo-billy%2Fv5%2Fhelper%2Fpolyfill/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fgo-git%2Fgo-billy%2Fv5%2Fhelper%2Fpolyfill/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fgo-git%2Fgo-billy%2Fv5%2Fhelper%2Fpolyfill/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fgo-git%2Fgo-billy%2Fv5%2Fhelper%2Fpolyfill/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fgo-git%2Fgo-billy%2Fv5%2Fhelper%2Fpolyfill/codemeta","maintainers":[],"registry":{"name":"proxy.golang.org","url":"https://proxy.golang.org","ecosystem":"go","default":true,"packages_count":2206448,"maintainers_count":0,"namespaces_count":792747,"keywords_count":113213,"github":"golang","metadata":{"funded_packages_count":53976},"icon_url":"https://github.com/golang.png","created_at":"2022-04-04T15:19:22.939Z","updated_at":"2026-06-10T05:03:23.672Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/namespaces"}},{"id":13963469,"name":"go-github-com-go-git-go-billy-v6","ecosystem":"guix","description":"File system abstraction for Go","homepage":"https://github.com/go-git/go-billy/","licenses":"apache-2.0","normalized_licenses":["Apache-2.0"],"repository_url":"https://github.com/go-git/go-billy","keywords_array":[],"namespace":null,"versions_count":1,"first_release_published_at":"2026-03-02T22:53:32.733Z","latest_release_published_at":"2026-03-02T22:53:32.733Z","latest_release_number":"6.0.0","last_synced_at":"2026-04-27T18:12:03.642Z","created_at":"2026-03-02T22:53:32.550Z","updated_at":"2026-04-27T18:12:04.497Z","registry_url":"https://packages.guix.gnu.org/packages/go-github-com-go-git-go-billy-v6/6.0.0/","install_command":"guix install go-github-com-go-git-go-billy-v6","documentation_url":"https://git.savannah.gnu.org/cgit/guix.git/tree/gnu/packages/golang-xyz.scm#n10719","metadata":{"location":"gnu/packages/golang-xyz.scm:10719","variable_name":"go-github-com-go-git-go-billy-v6"},"repo_metadata":{"id":46417246,"uuid":"246113572","full_name":"go-git/go-billy","owner":"go-git","description":"The missing interface filesystem abstraction for Go","archived":false,"fork":false,"pushed_at":"2026-03-05T17:27:08.000Z","size":657,"stargazers_count":394,"open_issues_count":22,"forks_count":59,"subscribers_count":8,"default_branch":"main","last_synced_at":"2026-03-24T15:22:50.111Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":"https://pkg.go.dev/github.com/go-git/go-billy/v5","language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/go-git.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null}},"created_at":"2020-03-09T18:35:04.000Z","updated_at":"2026-03-23T11:47:42.000Z","dependencies_parsed_at":"2026-02-26T03:00:35.579Z","dependency_job_id":null,"html_url":"https://github.com/go-git/go-billy","commit_stats":{"total_commits":207,"total_committers":34,"mean_commits":6.088235294117647,"dds":0.6473429951690821,"last_synced_commit":"1bb3aa54c166c2384e0acf4d4e595911230c209e"},"previous_names":[],"tags_count":34,"template":false,"template_full_name":null,"purl":"pkg:github/go-git/go-billy","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/go-git","download_url":"https://codeload.github.com/go-git/go-billy/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy/sbom","scorecard":{"id":431830,"data":{"date":"2025-08-17T17:21:30Z","repo":{"name":"github.com/go-git/go-billy","commit":"3a9ca963b7289d5bc1fd7bd48dc4d818f6997096"},"scorecard":{"version":"v5.2.1","commit":"ab2f6e92482462fe66246d9e32f642855a691dc1"},"score":7.2,"checks":[{"name":"Code-Review","score":0,"reason":"Found 0/2 approved changesets -- score normalized to 0","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#code-review"}},{"name":"Dependency-Update-Tool","score":10,"reason":"update tool detected","details":["Info: detected update tool: Dependabot: .github/dependabot.yaml:1"],"documentation":{"short":"Determines if the project uses a dependency update tool.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#dependency-update-tool"}},{"name":"Maintained","score":10,"reason":"19 commit(s) and 1 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#maintained"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#packaging"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#dangerous-workflow"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#binary-artifacts"}},{"name":"Token-Permissions","score":10,"reason":"GitHub workflow tokens follow principle of least privilege","details":["Info: jobLevel 'contents' permission set to 'read': .github/workflows/codeql.yml:18","Info: jobLevel 'actions' permission set to 'read': .github/workflows/codeql.yml:17","Info: found token with 'none' permissions: .github/workflows/codeql.yml:1","Info: topLevel permissions set to 'read-all': .github/workflows/scorecard.yml:14","Info: found token with 'none' permissions: .github/workflows/test.yml:1","Info: found token with 'none' permissions: .github/workflows/test_wasip1.yml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#token-permissions"}},{"name":"Pinned-Dependencies","score":5,"reason":"dependency not pinned by hash detected -- score normalized to 5","details":["Warn: goCommand not pinned by hash: scripts/wasirun-wrapper:6","Warn: goCommand not pinned by hash: .github/workflows/test_wasip1.yml:27","Info:  10 out of  10 GitHub-owned GitHubAction dependencies pinned","Info:   1 out of   1 third-party GitHubAction dependencies pinned","Info:   0 out of   2 goCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#pinned-dependencies"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: Apache License 2.0: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#license"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#cii-best-practices"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#vulnerabilities"}},{"name":"SAST","score":10,"reason":"SAST tool is run on all commits","details":["Info: SAST configuration detected: CodeQL","Info: all commits (30) are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#sast"}},{"name":"Security-Policy","score":0,"reason":"security policy file not detected","details":["Warn: no security policy file detected","Warn: no security file to analyze","Warn: no security file to analyze","Warn: no security file to analyze"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#security-policy"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#fuzzing"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#signed-releases"}},{"name":"Branch-Protection","score":6,"reason":"branch protection is not maximal on development and all release branches","details":["Info: 'allow deletion' disabled on branch 'main'","Info: 'allow deletion' disabled on branch 'releases/v5.x'","Info: 'force pushes' disabled on branch 'main'","Info: 'force pushes' disabled on branch 'releases/v5.x'","Warn: 'branch protection settings apply to administrators' is disabled on branch 'main'","Warn: 'branch protection settings apply to administrators' is disabled on branch 'releases/v5.x'","Info: 'stale review dismissal' is required to merge on branch 'main'","Info: 'stale review dismissal' is required to merge on branch 'releases/v5.x'","Warn: required approving review count is 1 on branch 'main'","Warn: required approving review count is 1 on branch 'releases/v5.x'","Warn: codeowners review is not required on branch 'main'","Warn: codeowners review is not required on branch 'releases/v5.x'","Info: 'last push approval' is required to merge on branch 'main'","Info: 'last push approval' is required to merge on branch 'releases/v5.x'","Warn: no status checks found to merge onto branch 'main'","Warn: no status checks found to merge onto branch 'releases/v5.x'","Info: PRs are required in order to make changes on branch 'main'","Info: PRs are required in order to make changes on branch 'releases/v5.x'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#branch-protection"}},{"name":"CI-Tests","score":10,"reason":"15 out of 15 merged PRs checked by a CI test -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project runs tests before pull requests are merged.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#ci-tests"}},{"name":"Contributors","score":10,"reason":"project has 28 contributing companies or organizations","details":["Info: found contributions from: CodeCantor, DataDog, SUSE, bblfsh, croupiers, datadog, distribyted, dotnet, emberjs, fluxcd, glimmerjs, go-enry, go-git, hdiv, ipfs, ipld, knative, kubernetes, kubernetes-sigs, libp2p, mindersec, mloncode, qubesome, rancher, rancher @suse, rancherlabs, sigstore, sqle"],"documentation":{"short":"Determines if the project has a set of contributors from multiple organizations (e.g., companies).","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#contributors"}}]},"last_synced_at":"2025-08-19T03:33:03.665Z","repository_id":46417246,"created_at":"2025-08-19T03:33:03.665Z","updated_at":"2025-08-19T03:33:03.665Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":30897946,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-03-24T08:58:18.477Z","status":"ssl_error","status_checked_at":"2026-03-24T08:57:59.595Z","response_time":106,"last_error":"SSL_read: unexpected eof while reading","robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":false,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"repo_metadata_updated_at":"2026-04-27T18:12:04.470Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":0.0,"dependent_packages_count":0.0,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":100},"purl":"pkg:guix/go-github-com-go-git-go-billy-v6","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/guix/go-github-com-go-git-go-billy-v6","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/guix/go-github-com-go-git-go-billy-v6","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/guix/go-github-com-go-git-go-billy-v6/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-02-09T15:03:08.348Z","issues_count":33,"pull_requests_count":192,"avg_time_to_close_issue":44029525.95454545,"avg_time_to_close_pull_request":2373581.36196319,"issues_closed_count":22,"pull_requests_closed_count":163,"pull_request_authors_count":29,"issue_authors_count":29,"avg_comments_per_issue":1.4848484848484849,"avg_comments_per_pull_request":0.3489583333333333,"merged_pull_requests_count":143,"bot_issues_count":1,"bot_pull_requests_count":116,"past_year_issues_count":6,"past_year_pull_requests_count":46,"past_year_avg_time_to_close_issue":233359.0,"past_year_avg_time_to_close_pull_request":313714.48484848486,"past_year_issues_closed_count":2,"past_year_pull_requests_closed_count":33,"past_year_pull_request_authors_count":6,"past_year_issue_authors_count":6,"past_year_avg_comments_per_issue":1.1666666666666667,"past_year_avg_comments_per_pull_request":0.30434782608695654,"past_year_bot_issues_count":1,"past_year_bot_pull_requests_count":30,"past_year_merged_pull_requests_count":32,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy/issues","maintainers":[{"login":"pjbgf","count":34,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/pjbgf"}],"active_maintainers":[{"login":"pjbgf","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/pjbgf"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/guix/packages/go-github-com-go-git-go-billy-v6/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/guix/packages/go-github-com-go-git-go-billy-v6/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/guix/packages/go-github-com-go-git-go-billy-v6/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/guix/packages/go-github-com-go-git-go-billy-v6/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/guix/packages/go-github-com-go-git-go-billy-v6/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/guix/packages/go-github-com-go-git-go-billy-v6/codemeta","maintainers":[],"registry":{"name":"guix","url":"https://guix.gnu.org","ecosystem":"guix","default":true,"packages_count":32052,"maintainers_count":0,"namespaces_count":0,"keywords_count":1627,"github":"guix-mirror","metadata":{"funded_packages_count":368},"icon_url":"https://github.com/guix-mirror.png","created_at":"2026-03-02T16:23:46.981Z","updated_at":"2026-06-10T05:17:25.224Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/guix/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/guix/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/guix/namespaces"}},{"id":13962805,"name":"go-github-com-go-git-go-billy-v5","ecosystem":"guix","description":"File system abstraction for Go","homepage":"https://github.com/go-git/go-billy/","licenses":"asl2.0","normalized_licenses":["CERN-OHL-P-2.0"],"repository_url":"https://github.com/go-git/go-billy","keywords_array":[],"namespace":null,"versions_count":1,"first_release_published_at":"2026-03-02T22:42:20.112Z","latest_release_published_at":"2026-03-02T22:42:20.112Z","latest_release_number":"5.6.0","last_synced_at":"2026-04-27T18:12:32.206Z","created_at":"2026-03-02T22:42:19.931Z","updated_at":"2026-04-27T18:12:32.503Z","registry_url":"https://packages.guix.gnu.org/packages/go-github-com-go-git-go-billy-v5/5.6.0/","install_command":"guix install go-github-com-go-git-go-billy-v5","documentation_url":"https://git.savannah.gnu.org/cgit/guix.git/tree/gnu/packages/golang-xyz.scm#n10683","metadata":{"location":"gnu/packages/golang-xyz.scm:10683","variable_name":"go-github-com-go-git-go-billy-v5"},"repo_metadata":{"id":46417246,"uuid":"246113572","full_name":"go-git/go-billy","owner":"go-git","description":"The missing interface filesystem abstraction for Go","archived":false,"fork":false,"pushed_at":"2026-03-05T17:27:08.000Z","size":657,"stargazers_count":394,"open_issues_count":22,"forks_count":59,"subscribers_count":8,"default_branch":"main","last_synced_at":"2026-03-24T15:22:50.111Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":"https://pkg.go.dev/github.com/go-git/go-billy/v5","language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/go-git.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null}},"created_at":"2020-03-09T18:35:04.000Z","updated_at":"2026-03-23T11:47:42.000Z","dependencies_parsed_at":"2026-02-26T03:00:35.579Z","dependency_job_id":null,"html_url":"https://github.com/go-git/go-billy","commit_stats":{"total_commits":207,"total_committers":34,"mean_commits":6.088235294117647,"dds":0.6473429951690821,"last_synced_commit":"1bb3aa54c166c2384e0acf4d4e595911230c209e"},"previous_names":[],"tags_count":34,"template":false,"template_full_name":null,"purl":"pkg:github/go-git/go-billy","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/go-git","download_url":"https://codeload.github.com/go-git/go-billy/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy/sbom","scorecard":{"id":431830,"data":{"date":"2025-08-17T17:21:30Z","repo":{"name":"github.com/go-git/go-billy","commit":"3a9ca963b7289d5bc1fd7bd48dc4d818f6997096"},"scorecard":{"version":"v5.2.1","commit":"ab2f6e92482462fe66246d9e32f642855a691dc1"},"score":7.2,"checks":[{"name":"Code-Review","score":0,"reason":"Found 0/2 approved changesets -- score normalized to 0","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#code-review"}},{"name":"Dependency-Update-Tool","score":10,"reason":"update tool detected","details":["Info: detected update tool: Dependabot: .github/dependabot.yaml:1"],"documentation":{"short":"Determines if the project uses a dependency update tool.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#dependency-update-tool"}},{"name":"Maintained","score":10,"reason":"19 commit(s) and 1 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#maintained"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#packaging"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#dangerous-workflow"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#binary-artifacts"}},{"name":"Token-Permissions","score":10,"reason":"GitHub workflow tokens follow principle of least privilege","details":["Info: jobLevel 'contents' permission set to 'read': .github/workflows/codeql.yml:18","Info: jobLevel 'actions' permission set to 'read': .github/workflows/codeql.yml:17","Info: found token with 'none' permissions: .github/workflows/codeql.yml:1","Info: topLevel permissions set to 'read-all': .github/workflows/scorecard.yml:14","Info: found token with 'none' permissions: .github/workflows/test.yml:1","Info: found token with 'none' permissions: .github/workflows/test_wasip1.yml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#token-permissions"}},{"name":"Pinned-Dependencies","score":5,"reason":"dependency not pinned by hash detected -- score normalized to 5","details":["Warn: goCommand not pinned by hash: scripts/wasirun-wrapper:6","Warn: goCommand not pinned by hash: .github/workflows/test_wasip1.yml:27","Info:  10 out of  10 GitHub-owned GitHubAction dependencies pinned","Info:   1 out of   1 third-party GitHubAction dependencies pinned","Info:   0 out of   2 goCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#pinned-dependencies"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: Apache License 2.0: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#license"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#cii-best-practices"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#vulnerabilities"}},{"name":"SAST","score":10,"reason":"SAST tool is run on all commits","details":["Info: SAST configuration detected: CodeQL","Info: all commits (30) are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#sast"}},{"name":"Security-Policy","score":0,"reason":"security policy file not detected","details":["Warn: no security policy file detected","Warn: no security file to analyze","Warn: no security file to analyze","Warn: no security file to analyze"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#security-policy"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#fuzzing"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#signed-releases"}},{"name":"Branch-Protection","score":6,"reason":"branch protection is not maximal on development and all release branches","details":["Info: 'allow deletion' disabled on branch 'main'","Info: 'allow deletion' disabled on branch 'releases/v5.x'","Info: 'force pushes' disabled on branch 'main'","Info: 'force pushes' disabled on branch 'releases/v5.x'","Warn: 'branch protection settings apply to administrators' is disabled on branch 'main'","Warn: 'branch protection settings apply to administrators' is disabled on branch 'releases/v5.x'","Info: 'stale review dismissal' is required to merge on branch 'main'","Info: 'stale review dismissal' is required to merge on branch 'releases/v5.x'","Warn: required approving review count is 1 on branch 'main'","Warn: required approving review count is 1 on branch 'releases/v5.x'","Warn: codeowners review is not required on branch 'main'","Warn: codeowners review is not required on branch 'releases/v5.x'","Info: 'last push approval' is required to merge on branch 'main'","Info: 'last push approval' is required to merge on branch 'releases/v5.x'","Warn: no status checks found to merge onto branch 'main'","Warn: no status checks found to merge onto branch 'releases/v5.x'","Info: PRs are required in order to make changes on branch 'main'","Info: PRs are required in order to make changes on branch 'releases/v5.x'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#branch-protection"}},{"name":"CI-Tests","score":10,"reason":"15 out of 15 merged PRs checked by a CI test -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project runs tests before pull requests are merged.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#ci-tests"}},{"name":"Contributors","score":10,"reason":"project has 28 contributing companies or organizations","details":["Info: found contributions from: CodeCantor, DataDog, SUSE, bblfsh, croupiers, datadog, distribyted, dotnet, emberjs, fluxcd, glimmerjs, go-enry, go-git, hdiv, ipfs, ipld, knative, kubernetes, kubernetes-sigs, libp2p, mindersec, mloncode, qubesome, rancher, rancher @suse, rancherlabs, sigstore, sqle"],"documentation":{"short":"Determines if the project has a set of contributors from multiple organizations (e.g., companies).","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#contributors"}}]},"last_synced_at":"2025-08-19T03:33:03.665Z","repository_id":46417246,"created_at":"2025-08-19T03:33:03.665Z","updated_at":"2025-08-19T03:33:03.665Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":30897946,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-03-24T08:58:18.477Z","status":"ssl_error","status_checked_at":"2026-03-24T08:57:59.595Z","response_time":106,"last_error":"SSL_read: unexpected eof while reading","robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":false,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"repo_metadata_updated_at":"2026-04-27T18:12:32.257Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":0.0,"dependent_packages_count":0.0,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":100},"purl":"pkg:guix/go-github-com-go-git-go-billy-v5","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/guix/go-github-com-go-git-go-billy-v5","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/guix/go-github-com-go-git-go-billy-v5","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/guix/go-github-com-go-git-go-billy-v5/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-02-09T15:03:08.348Z","issues_count":33,"pull_requests_count":192,"avg_time_to_close_issue":44029525.95454545,"avg_time_to_close_pull_request":2373581.36196319,"issues_closed_count":22,"pull_requests_closed_count":163,"pull_request_authors_count":29,"issue_authors_count":29,"avg_comments_per_issue":1.4848484848484849,"avg_comments_per_pull_request":0.3489583333333333,"merged_pull_requests_count":143,"bot_issues_count":1,"bot_pull_requests_count":116,"past_year_issues_count":6,"past_year_pull_requests_count":46,"past_year_avg_time_to_close_issue":233359.0,"past_year_avg_time_to_close_pull_request":313714.48484848486,"past_year_issues_closed_count":2,"past_year_pull_requests_closed_count":33,"past_year_pull_request_authors_count":6,"past_year_issue_authors_count":6,"past_year_avg_comments_per_issue":1.1666666666666667,"past_year_avg_comments_per_pull_request":0.30434782608695654,"past_year_bot_issues_count":1,"past_year_bot_pull_requests_count":30,"past_year_merged_pull_requests_count":32,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy/issues","maintainers":[{"login":"pjbgf","count":34,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/pjbgf"}],"active_maintainers":[{"login":"pjbgf","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/pjbgf"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/guix/packages/go-github-com-go-git-go-billy-v5/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/guix/packages/go-github-com-go-git-go-billy-v5/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/guix/packages/go-github-com-go-git-go-billy-v5/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/guix/packages/go-github-com-go-git-go-billy-v5/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/guix/packages/go-github-com-go-git-go-billy-v5/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/guix/packages/go-github-com-go-git-go-billy-v5/codemeta","maintainers":[],"registry":{"name":"guix","url":"https://guix.gnu.org","ecosystem":"guix","default":true,"packages_count":32052,"maintainers_count":0,"namespaces_count":0,"keywords_count":1627,"github":"guix-mirror","metadata":{"funded_packages_count":368},"icon_url":"https://github.com/guix-mirror.png","created_at":"2026-03-02T16:23:46.981Z","updated_at":"2026-06-10T05:17:25.224Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/guix/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/guix/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/guix/namespaces"}},{"id":14389464,"name":"github.com/go-git/go-billy/v5/helper/chroot","ecosystem":"go","description":"","homepage":"https://github.com/go-git/go-billy","licenses":"Apache-2.0","normalized_licenses":["Apache-2.0"],"repository_url":"https://github.com/go-git/go-billy","keywords_array":[],"namespace":"github.com/go-git/go-billy/v5/helper","versions_count":13,"first_release_published_at":"2026-05-06T09:27:56.642Z","latest_release_published_at":"2026-05-06T09:27:56.642Z","latest_release_number":"v5.8.0","last_synced_at":"2026-07-11T01:20:32.847Z","created_at":"2026-05-06T09:27:38.040Z","updated_at":"2026-07-11T01:20:32.848Z","registry_url":"https://pkg.go.dev/github.com/go-git/go-billy/v5/helper/chroot","install_command":"go get github.com/go-git/go-billy/v5/helper/chroot","documentation_url":"https://pkg.go.dev/github.com/go-git/go-billy/v5/helper/chroot#section-documentation","metadata":{},"repo_metadata":{},"repo_metadata_updated_at":"2026-05-06T09:27:38.624Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":5.10009395951028,"dependent_packages_count":4.778747724602085,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":4.939420842056183},"purl":"pkg:golang/github.com/go-git/go-billy/v5/helper/chroot","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/go/github.com/go-git/go-billy/v5/helper/chroot","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/go/github.com/go-git/go-billy/v5/helper/chroot","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/go/github.com/go-git/go-billy/v5/helper/chroot/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":null,"versions_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fgo-git%2Fgo-billy%2Fv5%2Fhelper%2Fchroot/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fgo-git%2Fgo-billy%2Fv5%2Fhelper%2Fchroot/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fgo-git%2Fgo-billy%2Fv5%2Fhelper%2Fchroot/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fgo-git%2Fgo-billy%2Fv5%2Fhelper%2Fchroot/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fgo-git%2Fgo-billy%2Fv5%2Fhelper%2Fchroot/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fgo-git%2Fgo-billy%2Fv5%2Fhelper%2Fchroot/codemeta","maintainers":[],"registry":{"name":"proxy.golang.org","url":"https://proxy.golang.org","ecosystem":"go","default":true,"packages_count":2206448,"maintainers_count":0,"namespaces_count":792747,"keywords_count":113213,"github":"golang","metadata":{"funded_packages_count":53976},"icon_url":"https://github.com/golang.png","created_at":"2022-04-04T15:19:22.939Z","updated_at":"2026-06-10T05:03:23.672Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/namespaces"}},{"id":14389466,"name":"github.com/go-git/go-billy/v5/util","ecosystem":"go","description":"","homepage":"https://github.com/go-git/go-billy","licenses":"Apache-2.0","normalized_licenses":["Apache-2.0"],"repository_url":"https://github.com/go-git/go-billy","keywords_array":[],"namespace":"github.com/go-git/go-billy/v5","versions_count":13,"first_release_published_at":"2026-05-06T09:27:57.172Z","latest_release_published_at":"2026-05-06T09:27:57.172Z","latest_release_number":"v5.8.0","last_synced_at":"2026-07-11T01:20:33.468Z","created_at":"2026-05-06T09:27:38.238Z","updated_at":"2026-07-11T01:20:33.469Z","registry_url":"https://pkg.go.dev/github.com/go-git/go-billy/v5/util","install_command":"go get github.com/go-git/go-billy/v5/util","documentation_url":"https://pkg.go.dev/github.com/go-git/go-billy/v5/util#section-documentation","metadata":{},"repo_metadata":{},"repo_metadata_updated_at":"2026-05-06T09:27:38.630Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":5.10009395951028,"dependent_packages_count":4.778745473932489,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":4.9394197167213845},"purl":"pkg:golang/github.com/go-git/go-billy/v5/util","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/go/github.com/go-git/go-billy/v5/util","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/go/github.com/go-git/go-billy/v5/util","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/go/github.com/go-git/go-billy/v5/util/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":null,"versions_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fgo-git%2Fgo-billy%2Fv5%2Futil/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fgo-git%2Fgo-billy%2Fv5%2Futil/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fgo-git%2Fgo-billy%2Fv5%2Futil/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fgo-git%2Fgo-billy%2Fv5%2Futil/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fgo-git%2Fgo-billy%2Fv5%2Futil/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fgo-git%2Fgo-billy%2Fv5%2Futil/codemeta","maintainers":[],"registry":{"name":"proxy.golang.org","url":"https://proxy.golang.org","ecosystem":"go","default":true,"packages_count":2206448,"maintainers_count":0,"namespaces_count":792747,"keywords_count":113213,"github":"golang","metadata":{"funded_packages_count":53976},"icon_url":"https://github.com/golang.png","created_at":"2022-04-04T15:19:22.939Z","updated_at":"2026-06-10T05:03:23.672Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/namespaces"}},{"id":3635692,"name":"github.com/go-git/go-billy/v4","ecosystem":"go","description":"","homepage":"https://github.com/src-d/go-billy","licenses":"Apache-2.0","normalized_licenses":["Apache-2.0"],"repository_url":"https://github.com/go-git/go-billy","keywords_array":[],"namespace":"github.com/go-git/go-billy","versions_count":10,"first_release_published_at":"2022-11-18T21:47:58.147Z","latest_release_published_at":"2019-07-29T15:17:39.000Z","latest_release_number":"v4.3.2","last_synced_at":"2026-07-11T01:20:35.960Z","created_at":"2022-04-11T08:41:13.176Z","updated_at":"2026-07-11T01:20:35.961Z","registry_url":"https://pkg.go.dev/github.com/go-git/go-billy/v4","install_command":"go get github.com/go-git/go-billy/v4","documentation_url":"https://pkg.go.dev/github.com/go-git/go-billy/v4#section-documentation","metadata":{},"repo_metadata":{"id":46417246,"uuid":"246113572","full_name":"go-git/go-billy","owner":"go-git","description":"The missing interface filesystem abstraction for Go","archived":false,"fork":false,"pushed_at":"2026-03-05T17:27:08.000Z","size":657,"stargazers_count":394,"open_issues_count":22,"forks_count":59,"subscribers_count":8,"default_branch":"main","last_synced_at":"2026-03-24T15:22:50.111Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":"https://pkg.go.dev/github.com/go-git/go-billy/v5","language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/go-git.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null}},"created_at":"2020-03-09T18:35:04.000Z","updated_at":"2026-03-23T11:47:42.000Z","dependencies_parsed_at":"2026-02-26T03:00:35.579Z","dependency_job_id":null,"html_url":"https://github.com/go-git/go-billy","commit_stats":{"total_commits":207,"total_committers":34,"mean_commits":6.088235294117647,"dds":0.6473429951690821,"last_synced_commit":"1bb3aa54c166c2384e0acf4d4e595911230c209e"},"previous_names":[],"tags_count":34,"template":false,"template_full_name":null,"purl":"pkg:github/go-git/go-billy","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/go-git","download_url":"https://codeload.github.com/go-git/go-billy/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy/sbom","scorecard":{"id":431830,"data":{"date":"2025-08-17T17:21:30Z","repo":{"name":"github.com/go-git/go-billy","commit":"3a9ca963b7289d5bc1fd7bd48dc4d818f6997096"},"scorecard":{"version":"v5.2.1","commit":"ab2f6e92482462fe66246d9e32f642855a691dc1"},"score":7.2,"checks":[{"name":"Code-Review","score":0,"reason":"Found 0/2 approved changesets -- score normalized to 0","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#code-review"}},{"name":"Dependency-Update-Tool","score":10,"reason":"update tool detected","details":["Info: detected update tool: Dependabot: .github/dependabot.yaml:1"],"documentation":{"short":"Determines if the project uses a dependency update tool.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#dependency-update-tool"}},{"name":"Maintained","score":10,"reason":"19 commit(s) and 1 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#maintained"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#packaging"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#dangerous-workflow"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#binary-artifacts"}},{"name":"Token-Permissions","score":10,"reason":"GitHub workflow tokens follow principle of least privilege","details":["Info: jobLevel 'contents' permission set to 'read': .github/workflows/codeql.yml:18","Info: jobLevel 'actions' permission set to 'read': .github/workflows/codeql.yml:17","Info: found token with 'none' permissions: .github/workflows/codeql.yml:1","Info: topLevel permissions set to 'read-all': .github/workflows/scorecard.yml:14","Info: found token with 'none' permissions: .github/workflows/test.yml:1","Info: found token with 'none' permissions: .github/workflows/test_wasip1.yml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#token-permissions"}},{"name":"Pinned-Dependencies","score":5,"reason":"dependency not pinned by hash detected -- score normalized to 5","details":["Warn: goCommand not pinned by hash: scripts/wasirun-wrapper:6","Warn: goCommand not pinned by hash: .github/workflows/test_wasip1.yml:27","Info:  10 out of  10 GitHub-owned GitHubAction dependencies pinned","Info:   1 out of   1 third-party GitHubAction dependencies pinned","Info:   0 out of   2 goCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#pinned-dependencies"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: Apache License 2.0: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#license"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#cii-best-practices"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#vulnerabilities"}},{"name":"SAST","score":10,"reason":"SAST tool is run on all commits","details":["Info: SAST configuration detected: CodeQL","Info: all commits (30) are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#sast"}},{"name":"Security-Policy","score":0,"reason":"security policy file not detected","details":["Warn: no security policy file detected","Warn: no security file to analyze","Warn: no security file to analyze","Warn: no security file to analyze"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#security-policy"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#fuzzing"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#signed-releases"}},{"name":"Branch-Protection","score":6,"reason":"branch protection is not maximal on development and all release branches","details":["Info: 'allow deletion' disabled on branch 'main'","Info: 'allow deletion' disabled on branch 'releases/v5.x'","Info: 'force pushes' disabled on branch 'main'","Info: 'force pushes' disabled on branch 'releases/v5.x'","Warn: 'branch protection settings apply to administrators' is disabled on branch 'main'","Warn: 'branch protection settings apply to administrators' is disabled on branch 'releases/v5.x'","Info: 'stale review dismissal' is required to merge on branch 'main'","Info: 'stale review dismissal' is required to merge on branch 'releases/v5.x'","Warn: required approving review count is 1 on branch 'main'","Warn: required approving review count is 1 on branch 'releases/v5.x'","Warn: codeowners review is not required on branch 'main'","Warn: codeowners review is not required on branch 'releases/v5.x'","Info: 'last push approval' is required to merge on branch 'main'","Info: 'last push approval' is required to merge on branch 'releases/v5.x'","Warn: no status checks found to merge onto branch 'main'","Warn: no status checks found to merge onto branch 'releases/v5.x'","Info: PRs are required in order to make changes on branch 'main'","Info: PRs are required in order to make changes on branch 'releases/v5.x'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#branch-protection"}},{"name":"CI-Tests","score":10,"reason":"15 out of 15 merged PRs checked by a CI test -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project runs tests before pull requests are merged.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#ci-tests"}},{"name":"Contributors","score":10,"reason":"project has 28 contributing companies or organizations","details":["Info: found contributions from: CodeCantor, DataDog, SUSE, bblfsh, croupiers, datadog, distribyted, dotnet, emberjs, fluxcd, glimmerjs, go-enry, go-git, hdiv, ipfs, ipld, knative, kubernetes, kubernetes-sigs, libp2p, mindersec, mloncode, qubesome, rancher, rancher @suse, rancherlabs, sigstore, sqle"],"documentation":{"short":"Determines if the project has a set of contributors from multiple organizations (e.g., companies).","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#contributors"}}]},"last_synced_at":"2025-08-19T03:33:03.665Z","repository_id":46417246,"created_at":"2025-08-19T03:33:03.665Z","updated_at":"2025-08-19T03:33:03.665Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":30897946,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-03-24T08:58:18.477Z","status":"ssl_error","status_checked_at":"2026-03-24T08:57:59.595Z","response_time":106,"last_error":"SSL_read: unexpected eof while reading","robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":false,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"go-git","name":"go-git","uuid":"57653224","kind":"organization","description":"A highly extensible Git implementation in pure Go.","email":null,"website":null,"location":null,"twitter":null,"company":null,"icon_url":"https://avatars.githubusercontent.com/u/57653224?v=4","repositories_count":4,"last_synced_at":"2023-03-04T21:00:52.787Z","metadata":{"has_sponsors_listing":false},"html_url":"https://github.com/go-git","funding_links":[],"total_stars":null,"followers":null,"following":null,"created_at":"2022-11-15T00:42:35.065Z","updated_at":"2023-03-04T21:00:52.803Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/go-git","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/go-git/repositories"},"tags":[{"name":"v5.8.0","sha":"8662784198181209e3a42818bf7ce0258cb4051c","kind":"commit","published_at":"2026-02-24T22:55:39.000Z","download_url":"https://codeload.github.com/go-git/go-billy/tar.gz/v5.8.0","html_url":"https://github.com/go-git/go-billy/releases/tag/v5.8.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-git/go-billy@v5.8.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy/tags/v5.8.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy/tags/v5.8.0/manifests"},{"name":"v5.7.0","sha":"cc50ee75c06c917f097a7ea5f1e3cbb21b7b8e0a","kind":"commit","published_at":"2025-12-06T10:17:49.000Z","download_url":"https://codeload.github.com/go-git/go-billy/tar.gz/v5.7.0","html_url":"https://github.com/go-git/go-billy/releases/tag/v5.7.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-git/go-billy@v5.7.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy/tags/v5.7.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy/tags/v5.7.0/manifests"},{"name":"v5.6.2","sha":"9f8b16d30b0a071884faba91fd4edff482af5bde","kind":"commit","published_at":"2025-01-10T16:06:35.000Z","download_url":"https://codeload.github.com/go-git/go-billy/tar.gz/v5.6.2","html_url":"https://github.com/go-git/go-billy/releases/tag/v5.6.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-git/go-billy@v5.6.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy/tags/v5.6.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy/tags/v5.6.2/manifests"},{"name":"v5.6.1","sha":"a6c6b505da9f067ef0ad91daa7010a693024e055","kind":"commit","published_at":"2024-12-28T12:40:04.000Z","download_url":"https://codeload.github.com/go-git/go-billy/tar.gz/v5.6.1","html_url":"https://github.com/go-git/go-billy/releases/tag/v5.6.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-git/go-billy@v5.6.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy/tags/v5.6.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy/tags/v5.6.1/manifests"},{"name":"v5.6.0","sha":"371e232676ac6807a104d8d2d3373b2327840aff","kind":"commit","published_at":"2024-10-08T10:10:53.000Z","download_url":"https://codeload.github.com/go-git/go-billy/tar.gz/v5.6.0","html_url":"https://github.com/go-git/go-billy/releases/tag/v5.6.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-git/go-billy@v5.6.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy/tags/v5.6.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy/tags/v5.6.0/manifests"},{"name":"v5.5.0","sha":"5c1dfec7a041579bb69e0f248293c03c2a856c55","kind":"commit","published_at":"2023-09-11T16:14:50.000Z","download_url":"https://codeload.github.com/go-git/go-billy/tar.gz/v5.5.0","html_url":"https://github.com/go-git/go-billy/releases/tag/v5.5.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-git/go-billy@v5.5.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy/tags/v5.5.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy/tags/v5.5.0/manifests"},{"name":"v5.4.1","sha":"ed16d7ba55f95b937e995cb7890e91e1e785b7be","kind":"commit","published_at":"2023-02-05T11:14:30.000Z","download_url":"https://codeload.github.com/go-git/go-billy/tar.gz/v5.4.1","html_url":"https://github.com/go-git/go-billy/releases/tag/v5.4.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-git/go-billy@v5.4.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy/tags/v5.4.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy/tags/v5.4.1/manifests"},{"name":"v5.4.0","sha":"1b88f62a6a858b72fd9b8596c78e5335d8990685","kind":"commit","published_at":"2022-12-19T16:39:30.000Z","download_url":"https://codeload.github.com/go-git/go-billy/tar.gz/v5.4.0","html_url":"https://github.com/go-git/go-billy/releases/tag/v5.4.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-git/go-billy@v5.4.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy/tags/v5.4.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy/tags/v5.4.0/manifests"},{"name":"v5.3.1","sha":"3bf3fe5b381bcfa471f7f6054c0cf2309c35e651","kind":"commit","published_at":"2021-05-02T23:02:33.000Z","download_url":"https://codeload.github.com/go-git/go-billy/tar.gz/v5.3.1","html_url":"https://github.com/go-git/go-billy/releases/tag/v5.3.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-git/go-billy@v5.3.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy/tags/v5.3.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy/tags/v5.3.1/manifests"},{"name":"v5.3.0","sha":"af7e4ac12d42e726180d4474122a2266f18b07d6","kind":"commit","published_at":"2021-04-28T22:50:51.000Z","download_url":"https://codeload.github.com/go-git/go-billy/tar.gz/v5.3.0","html_url":"https://github.com/go-git/go-billy/releases/tag/v5.3.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-git/go-billy@v5.3.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy/tags/v5.3.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy/tags/v5.3.0/manifests"},{"name":"v5.2.0","sha":"42ead41a46a48b2e0ebc6aa7ab1456a5de3d1b23","kind":"commit","published_at":"2021-04-22T00:15:16.000Z","download_url":"https://codeload.github.com/go-git/go-billy/tar.gz/v5.2.0","html_url":"https://github.com/go-git/go-billy/releases/tag/v5.2.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-git/go-billy@v5.2.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy/tags/v5.2.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy/tags/v5.2.0/manifests"},{"name":"v5.1.0","sha":"3d7f61fe9ffd652dd388e5aab60b969b86f43fa3","kind":"commit","published_at":"2021-03-10T06:50:46.000Z","download_url":"https://codeload.github.com/go-git/go-billy/tar.gz/v5.1.0","html_url":"https://github.com/go-git/go-billy/releases/tag/v5.1.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-git/go-billy@v5.1.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy/tags/v5.1.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy/tags/v5.1.0/manifests"},{"name":"v5.0.0","sha":"205ba6585ca03bd60e304f7fa0b270232ba1d707","kind":"commit","published_at":"2020-03-09T20:00:45.000Z","download_url":"https://codeload.github.com/go-git/go-billy/tar.gz/v5.0.0","html_url":"https://github.com/go-git/go-billy/releases/tag/v5.0.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-git/go-billy@v5.0.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy/tags/v5.0.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy/tags/v5.0.0/manifests"},{"name":"v4.3.2","sha":"780403cfc1bc95ff4d07e7b26db40a6186c5326e","kind":"commit","published_at":"2019-07-29T15:17:39.000Z","download_url":"https://codeload.github.com/go-git/go-billy/tar.gz/v4.3.2","html_url":"https://github.com/go-git/go-billy/releases/tag/v4.3.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-git/go-billy@v4.3.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy/tags/v4.3.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy/tags/v4.3.2/manifests"},{"name":"v4.3.1","sha":"711f3aa5b30ce9bbc7d708792ca98b913cbbd4a5","kind":"commit","published_at":"2019-06-30T22:50:54.000Z","download_url":"https://codeload.github.com/go-git/go-billy/tar.gz/v4.3.1","html_url":"https://github.com/go-git/go-billy/releases/tag/v4.3.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-git/go-billy@v4.3.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy/tags/v4.3.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy/tags/v4.3.1/manifests"},{"name":"v4.3.0","sha":"982626487c60a5252e7d0b695ca23fb0fa2fd670","kind":"commit","published_at":"2018-09-19T10:02:40.000Z","download_url":"https://codeload.github.com/go-git/go-billy/tar.gz/v4.3.0","html_url":"https://github.com/go-git/go-billy/releases/tag/v4.3.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-git/go-billy@v4.3.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy/tags/v4.3.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy/tags/v4.3.0/manifests"},{"name":"v4.2.1","sha":"59952543636f55de3f860b477b615093d5c2c3e4","kind":"commit","published_at":"2018-09-04T09:03:59.000Z","download_url":"https://codeload.github.com/go-git/go-billy/tar.gz/v4.2.1","html_url":"https://github.com/go-git/go-billy/releases/tag/v4.2.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-git/go-billy@v4.2.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy/tags/v4.2.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy/tags/v4.2.1/manifests"},{"name":"v4.2.0","sha":"83cf655d40b15b427014d7875d10850f96edba14","kind":"commit","published_at":"2018-06-11T08:24:45.000Z","download_url":"https://codeload.github.com/go-git/go-billy/tar.gz/v4.2.0","html_url":"https://github.com/go-git/go-billy/releases/tag/v4.2.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-git/go-billy@v4.2.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy/tags/v4.2.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy/tags/v4.2.0/manifests"},{"name":"v4.1.1","sha":"df053870ae7070b0350624ba5a22161ba3796cc0","kind":"commit","published_at":"2018-04-03T08:40:37.000Z","download_url":"https://codeload.github.com/go-git/go-billy/tar.gz/v4.1.1","html_url":"https://github.com/go-git/go-billy/releases/tag/v4.1.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-git/go-billy@v4.1.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy/tags/v4.1.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy/tags/v4.1.1/manifests"},{"name":"v4.1.0","sha":"027dceab1aa836eb310d92c2eb2266e4dc9f4b81","kind":"commit","published_at":"2018-02-02T09:03:00.000Z","download_url":"https://codeload.github.com/go-git/go-billy/tar.gz/v4.1.0","html_url":"https://github.com/go-git/go-billy/releases/tag/v4.1.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-git/go-billy@v4.1.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy/tags/v4.1.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy/tags/v4.1.0/manifests"},{"name":"v4.0.2","sha":"e940f8b62a8e61adc71f69802c1cc8305b64ec96","kind":"commit","published_at":"2018-01-14T23:10:49.000Z","download_url":"https://codeload.github.com/go-git/go-billy/tar.gz/v4.0.2","html_url":"https://github.com/go-git/go-billy/releases/tag/v4.0.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-git/go-billy@v4.0.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy/tags/v4.0.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy/tags/v4.0.2/manifests"},{"name":"v4.0.1","sha":"053dbd006f81a230434f712314aacfb540b52cc5","kind":"commit","published_at":"2017-11-27T19:20:57.000Z","download_url":"https://codeload.github.com/go-git/go-billy/tar.gz/v4.0.1","html_url":"https://github.com/go-git/go-billy/releases/tag/v4.0.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-git/go-billy@v4.0.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy/tags/v4.0.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy/tags/v4.0.1/manifests"},{"name":"v4.0.0","sha":"198f713dfdcd18797f6ac7c729e2440e5fde337f","kind":"commit","published_at":"2017-11-18T23:00:01.000Z","download_url":"https://codeload.github.com/go-git/go-billy/tar.gz/v4.0.0","html_url":"https://github.com/go-git/go-billy/releases/tag/v4.0.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-git/go-billy@v4.0.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy/tags/v4.0.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy/tags/v4.0.0/manifests"},{"name":"v3.1.0","sha":"c329b7bc7b9d24905d2bc1b85bfa29f7ae266314","kind":"commit","published_at":"2017-06-27T10:15:46.000Z","download_url":"https://codeload.github.com/go-git/go-billy/tar.gz/v3.1.0","html_url":"https://github.com/go-git/go-billy/releases/tag/v3.1.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-git/go-billy@v3.1.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy/tags/v3.1.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy/tags/v3.1.0/manifests"},{"name":"v3.0.1","sha":"e501c17e5a47cc1adfdf16fbf54e60e6dafb92c2","kind":"commit","published_at":"2017-06-19T13:02:16.000Z","download_url":"https://codeload.github.com/go-git/go-billy/tar.gz/v3.0.1","html_url":"https://github.com/go-git/go-billy/releases/tag/v3.0.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-git/go-billy@v3.0.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy/tags/v3.0.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy/tags/v3.0.1/manifests"},{"name":"v3.0.0","sha":"d48e2a7f38a8b154de0cbdac7f9ed4f0a4fc8722","kind":"commit","published_at":"2017-06-16T16:12:35.000Z","download_url":"https://codeload.github.com/go-git/go-billy/tar.gz/v3.0.0","html_url":"https://github.com/go-git/go-billy/releases/tag/v3.0.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-git/go-billy@v3.0.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy/tags/v3.0.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy/tags/v3.0.0/manifests"},{"name":"v2.0.5","sha":"52497601f113730d14baa00453674376fca22f22","kind":"commit","published_at":"2017-05-17T08:25:08.000Z","download_url":"https://codeload.github.com/go-git/go-billy/tar.gz/v2.0.5","html_url":"https://github.com/go-git/go-billy/releases/tag/v2.0.5","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-git/go-billy@v2.0.5","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy/tags/v2.0.5","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy/tags/v2.0.5/manifests"},{"name":"v2.0.4","sha":"99d839800b93542496ec19319f37abacf17f589f","kind":"commit","published_at":"2017-04-19T07:02:02.000Z","download_url":"https://codeload.github.com/go-git/go-billy/tar.gz/v2.0.4","html_url":"https://github.com/go-git/go-billy/releases/tag/v2.0.4","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-git/go-billy@v2.0.4","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy/tags/v2.0.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy/tags/v2.0.4/manifests"},{"name":"v2.0.3","sha":"0f02306b1aa8fe9ed04feb409ceffedc568fa2a4","kind":"commit","published_at":"2017-04-17T21:18:04.000Z","download_url":"https://codeload.github.com/go-git/go-billy/tar.gz/v2.0.3","html_url":"https://github.com/go-git/go-billy/releases/tag/v2.0.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-git/go-billy@v2.0.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy/tags/v2.0.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy/tags/v2.0.3/manifests"},{"name":"v2.0.2","sha":"0661b96fbe0d3d820b4bfc51c95ae981560b5553","kind":"commit","published_at":"2017-04-17T10:59:54.000Z","download_url":"https://codeload.github.com/go-git/go-billy/tar.gz/v2.0.2","html_url":"https://github.com/go-git/go-billy/releases/tag/v2.0.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-git/go-billy@v2.0.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy/tags/v2.0.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy/tags/v2.0.2/manifests"},{"name":"v2.0.1","sha":"bf5cdf7d823be98aa2851ad3e1253cd11bcea1fe","kind":"commit","published_at":"2017-04-12T11:01:20.000Z","download_url":"https://codeload.github.com/go-git/go-billy/tar.gz/v2.0.1","html_url":"https://github.com/go-git/go-billy/releases/tag/v2.0.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-git/go-billy@v2.0.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy/tags/v2.0.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy/tags/v2.0.1/manifests"},{"name":"v2.0.0","sha":"0dfa3dd2e89c570b8e1e25f5b28647525c44c3ca","kind":"commit","published_at":"2017-03-10T11:24:05.000Z","download_url":"https://codeload.github.com/go-git/go-billy/tar.gz/v2.0.0","html_url":"https://github.com/go-git/go-billy/releases/tag/v2.0.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-git/go-billy@v2.0.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy/tags/v2.0.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy/tags/v2.0.0/manifests"},{"name":"v1.0.0","sha":"1dfacf9a4b2ac372f16acd6b1aab9a50df955a2a","kind":"commit","published_at":"2017-01-30T15:44:06.000Z","download_url":"https://codeload.github.com/go-git/go-billy/tar.gz/v1.0.0","html_url":"https://github.com/go-git/go-billy/releases/tag/v1.0.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-git/go-billy@v1.0.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy/tags/v1.0.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy/tags/v1.0.0/manifests"},{"name":"v1-alpha","sha":"6ca1fd6ba86f5929a23633719f5fd413a0046998","kind":"commit","published_at":"2016-12-15T10:38:17.000Z","download_url":"https://codeload.github.com/go-git/go-billy/tar.gz/v1-alpha","html_url":"https://github.com/go-git/go-billy/releases/tag/v1-alpha","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-git/go-billy@v1-alpha","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy/tags/v1-alpha","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy/tags/v1-alpha/manifests"}]},"repo_metadata_updated_at":"2026-03-25T17:00:25.175Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":9.345852080216646,"dependent_packages_count":6.999148183520997,"stargazers_count":2.1700557889290795,"forks_count":2.1700557889290795,"average":5.1712779603989505},"purl":"pkg:golang/github.com/go-git/go-billy/v4","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/go/github.com/go-git/go-billy/v4","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/go/github.com/go-git/go-billy/v4","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/go/github.com/go-git/go-billy/v4/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-02-09T15:03:08.348Z","issues_count":33,"pull_requests_count":192,"avg_time_to_close_issue":44029525.95454545,"avg_time_to_close_pull_request":2373581.36196319,"issues_closed_count":22,"pull_requests_closed_count":163,"pull_request_authors_count":29,"issue_authors_count":29,"avg_comments_per_issue":1.4848484848484849,"avg_comments_per_pull_request":0.3489583333333333,"merged_pull_requests_count":143,"bot_issues_count":1,"bot_pull_requests_count":116,"past_year_issues_count":6,"past_year_pull_requests_count":46,"past_year_avg_time_to_close_issue":233359.0,"past_year_avg_time_to_close_pull_request":313714.48484848486,"past_year_issues_closed_count":2,"past_year_pull_requests_closed_count":33,"past_year_pull_request_authors_count":6,"past_year_issue_authors_count":6,"past_year_avg_comments_per_issue":1.1666666666666667,"past_year_avg_comments_per_pull_request":0.30434782608695654,"past_year_bot_issues_count":1,"past_year_bot_pull_requests_count":30,"past_year_merged_pull_requests_count":32,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy/issues","maintainers":[{"login":"pjbgf","count":34,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/pjbgf"}],"active_maintainers":[{"login":"pjbgf","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/pjbgf"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fgo-git%2Fgo-billy%2Fv4/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fgo-git%2Fgo-billy%2Fv4/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fgo-git%2Fgo-billy%2Fv4/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fgo-git%2Fgo-billy%2Fv4/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fgo-git%2Fgo-billy%2Fv4/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fgo-git%2Fgo-billy%2Fv4/codemeta","maintainers":[],"registry":{"name":"proxy.golang.org","url":"https://proxy.golang.org","ecosystem":"go","default":true,"packages_count":2206448,"maintainers_count":0,"namespaces_count":792747,"keywords_count":113213,"github":"golang","metadata":{"funded_packages_count":53976},"icon_url":"https://github.com/golang.png","created_at":"2022-04-04T15:19:22.939Z","updated_at":"2026-06-10T05:03:23.672Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/namespaces"}},{"id":12599401,"name":"github.com/go-git/go-Billy/v5","ecosystem":"go","description":null,"homepage":null,"licenses":"apache-2.0","normalized_licenses":["Apache-2.0"],"repository_url":"https://github.com/go-git/go-Billy","keywords_array":[],"namespace":null,"versions_count":14,"first_release_published_at":"2020-03-09T20:00:45.000Z","latest_release_published_at":"2026-05-06T10:16:07.000Z","latest_release_number":"v5.9.0","last_synced_at":"2026-07-11T01:20:35.492Z","created_at":"2025-12-18T11:17:38.684Z","updated_at":"2026-07-11T01:20:35.492Z","registry_url":"https://pkg.go.dev/github.com/go-git/go-Billy/v5","install_command":"go get github.com/go-git/go-Billy/v5","documentation_url":"https://pkg.go.dev/github.com/go-git/go-Billy/v5#section-documentation","metadata":{},"repo_metadata":{"id":46417246,"uuid":"246113572","full_name":"go-git/go-billy","owner":"go-git","description":"The missing interface filesystem abstraction for Go","archived":false,"fork":false,"pushed_at":"2026-03-05T17:27:08.000Z","size":657,"stargazers_count":394,"open_issues_count":22,"forks_count":59,"subscribers_count":8,"default_branch":"main","last_synced_at":"2026-03-24T15:22:50.111Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":"https://pkg.go.dev/github.com/go-git/go-billy/v5","language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/go-git.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null}},"created_at":"2020-03-09T18:35:04.000Z","updated_at":"2026-03-23T11:47:42.000Z","dependencies_parsed_at":"2026-02-26T03:00:35.579Z","dependency_job_id":null,"html_url":"https://github.com/go-git/go-billy","commit_stats":{"total_commits":207,"total_committers":34,"mean_commits":6.088235294117647,"dds":0.6473429951690821,"last_synced_commit":"1bb3aa54c166c2384e0acf4d4e595911230c209e"},"previous_names":[],"tags_count":34,"template":false,"template_full_name":null,"purl":"pkg:github/go-git/go-billy","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/go-git","download_url":"https://codeload.github.com/go-git/go-billy/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy/sbom","scorecard":{"id":431830,"data":{"date":"2025-08-17T17:21:30Z","repo":{"name":"github.com/go-git/go-billy","commit":"3a9ca963b7289d5bc1fd7bd48dc4d818f6997096"},"scorecard":{"version":"v5.2.1","commit":"ab2f6e92482462fe66246d9e32f642855a691dc1"},"score":7.2,"checks":[{"name":"Code-Review","score":0,"reason":"Found 0/2 approved changesets -- score normalized to 0","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#code-review"}},{"name":"Dependency-Update-Tool","score":10,"reason":"update tool detected","details":["Info: detected update tool: Dependabot: .github/dependabot.yaml:1"],"documentation":{"short":"Determines if the project uses a dependency update tool.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#dependency-update-tool"}},{"name":"Maintained","score":10,"reason":"19 commit(s) and 1 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#maintained"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#packaging"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#dangerous-workflow"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#binary-artifacts"}},{"name":"Token-Permissions","score":10,"reason":"GitHub workflow tokens follow principle of least privilege","details":["Info: jobLevel 'contents' permission set to 'read': .github/workflows/codeql.yml:18","Info: jobLevel 'actions' permission set to 'read': .github/workflows/codeql.yml:17","Info: found token with 'none' permissions: .github/workflows/codeql.yml:1","Info: topLevel permissions set to 'read-all': .github/workflows/scorecard.yml:14","Info: found token with 'none' permissions: .github/workflows/test.yml:1","Info: found token with 'none' permissions: .github/workflows/test_wasip1.yml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#token-permissions"}},{"name":"Pinned-Dependencies","score":5,"reason":"dependency not pinned by hash detected -- score normalized to 5","details":["Warn: goCommand not pinned by hash: scripts/wasirun-wrapper:6","Warn: goCommand not pinned by hash: .github/workflows/test_wasip1.yml:27","Info:  10 out of  10 GitHub-owned GitHubAction dependencies pinned","Info:   1 out of   1 third-party GitHubAction dependencies pinned","Info:   0 out of   2 goCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#pinned-dependencies"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: Apache License 2.0: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#license"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#cii-best-practices"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#vulnerabilities"}},{"name":"SAST","score":10,"reason":"SAST tool is run on all commits","details":["Info: SAST configuration detected: CodeQL","Info: all commits (30) are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#sast"}},{"name":"Security-Policy","score":0,"reason":"security policy file not detected","details":["Warn: no security policy file detected","Warn: no security file to analyze","Warn: no security file to analyze","Warn: no security file to analyze"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#security-policy"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#fuzzing"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#signed-releases"}},{"name":"Branch-Protection","score":6,"reason":"branch protection is not maximal on development and all release branches","details":["Info: 'allow deletion' disabled on branch 'main'","Info: 'allow deletion' disabled on branch 'releases/v5.x'","Info: 'force pushes' disabled on branch 'main'","Info: 'force pushes' disabled on branch 'releases/v5.x'","Warn: 'branch protection settings apply to administrators' is disabled on branch 'main'","Warn: 'branch protection settings apply to administrators' is disabled on branch 'releases/v5.x'","Info: 'stale review dismissal' is required to merge on branch 'main'","Info: 'stale review dismissal' is required to merge on branch 'releases/v5.x'","Warn: required approving review count is 1 on branch 'main'","Warn: required approving review count is 1 on branch 'releases/v5.x'","Warn: codeowners review is not required on branch 'main'","Warn: codeowners review is not required on branch 'releases/v5.x'","Info: 'last push approval' is required to merge on branch 'main'","Info: 'last push approval' is required to merge on branch 'releases/v5.x'","Warn: no status checks found to merge onto branch 'main'","Warn: no status checks found to merge onto branch 'releases/v5.x'","Info: PRs are required in order to make changes on branch 'main'","Info: PRs are required in order to make changes on branch 'releases/v5.x'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#branch-protection"}},{"name":"CI-Tests","score":10,"reason":"15 out of 15 merged PRs checked by a CI test -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project runs tests before pull requests are merged.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#ci-tests"}},{"name":"Contributors","score":10,"reason":"project has 28 contributing companies or organizations","details":["Info: found contributions from: CodeCantor, DataDog, SUSE, bblfsh, croupiers, datadog, distribyted, dotnet, emberjs, fluxcd, glimmerjs, go-enry, go-git, hdiv, ipfs, ipld, knative, kubernetes, kubernetes-sigs, libp2p, mindersec, mloncode, qubesome, rancher, rancher @suse, rancherlabs, sigstore, sqle"],"documentation":{"short":"Determines if the project has a set of contributors from multiple organizations (e.g., companies).","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#contributors"}}]},"last_synced_at":"2025-08-19T03:33:03.665Z","repository_id":46417246,"created_at":"2025-08-19T03:33:03.665Z","updated_at":"2025-08-19T03:33:03.665Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":30931109,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-03-25T07:55:14.202Z","status":"ssl_error","status_checked_at":"2026-03-25T07:55:10.924Z","response_time":80,"last_error":"SSL_read: unexpected eof while reading","robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":false,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"repo_metadata_updated_at":"2026-03-25T17:00:58.494Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":5.37955281026384,"dependent_packages_count":5.041144595852847,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":5.210348703058344},"purl":"pkg:golang/github.com/go-git/go-%21billy/v5","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/go/github.com/go-git/go-Billy/v5","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/go/github.com/go-git/go-Billy/v5","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/go/github.com/go-git/go-Billy/v5/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-02-09T15:03:08.348Z","issues_count":33,"pull_requests_count":192,"avg_time_to_close_issue":44029525.95454545,"avg_time_to_close_pull_request":2373581.36196319,"issues_closed_count":22,"pull_requests_closed_count":163,"pull_request_authors_count":29,"issue_authors_count":29,"avg_comments_per_issue":1.4848484848484849,"avg_comments_per_pull_request":0.3489583333333333,"merged_pull_requests_count":143,"bot_issues_count":1,"bot_pull_requests_count":116,"past_year_issues_count":6,"past_year_pull_requests_count":46,"past_year_avg_time_to_close_issue":233359.0,"past_year_avg_time_to_close_pull_request":313714.48484848486,"past_year_issues_closed_count":2,"past_year_pull_requests_closed_count":33,"past_year_pull_request_authors_count":6,"past_year_issue_authors_count":6,"past_year_avg_comments_per_issue":1.1666666666666667,"past_year_avg_comments_per_pull_request":0.30434782608695654,"past_year_bot_issues_count":1,"past_year_bot_pull_requests_count":30,"past_year_merged_pull_requests_count":32,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy/issues","maintainers":[{"login":"pjbgf","count":34,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/pjbgf"}],"active_maintainers":[{"login":"pjbgf","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/pjbgf"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fgo-git%2Fgo-Billy%2Fv5/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fgo-git%2Fgo-Billy%2Fv5/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fgo-git%2Fgo-Billy%2Fv5/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fgo-git%2Fgo-Billy%2Fv5/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fgo-git%2Fgo-Billy%2Fv5/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fgo-git%2Fgo-Billy%2Fv5/codemeta","maintainers":[],"registry":{"name":"proxy.golang.org","url":"https://proxy.golang.org","ecosystem":"go","default":true,"packages_count":2206448,"maintainers_count":0,"namespaces_count":792747,"keywords_count":113213,"github":"golang","metadata":{"funded_packages_count":53976},"icon_url":"https://github.com/golang.png","created_at":"2022-04-04T15:19:22.939Z","updated_at":"2026-06-10T05:03:23.672Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/namespaces"}},{"id":11996194,"name":"github.com/go-Git/go-billy/v5","ecosystem":"go","description":null,"homepage":null,"licenses":"apache-2.0","normalized_licenses":["Apache-2.0"],"repository_url":"https://github.com/go-Git/go-billy","keywords_array":[],"namespace":null,"versions_count":14,"first_release_published_at":"2020-03-09T20:00:45.000Z","latest_release_published_at":"2026-05-06T10:16:07.000Z","latest_release_number":"v5.9.0","last_synced_at":"2026-07-11T01:20:35.451Z","created_at":"2025-08-11T13:20:25.569Z","updated_at":"2026-07-11T01:20:35.451Z","registry_url":"https://pkg.go.dev/github.com/go-Git/go-billy/v5","install_command":"go get github.com/go-Git/go-billy/v5","documentation_url":"https://pkg.go.dev/github.com/go-Git/go-billy/v5#section-documentation","metadata":{},"repo_metadata":{"id":46417246,"uuid":"246113572","full_name":"go-git/go-billy","owner":"go-git","description":"The missing interface filesystem abstraction for Go","archived":false,"fork":false,"pushed_at":"2026-03-05T17:27:08.000Z","size":657,"stargazers_count":394,"open_issues_count":22,"forks_count":59,"subscribers_count":8,"default_branch":"main","last_synced_at":"2026-03-24T15:22:50.111Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":"https://pkg.go.dev/github.com/go-git/go-billy/v5","language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/go-git.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null}},"created_at":"2020-03-09T18:35:04.000Z","updated_at":"2026-03-23T11:47:42.000Z","dependencies_parsed_at":"2026-02-26T03:00:35.579Z","dependency_job_id":null,"html_url":"https://github.com/go-git/go-billy","commit_stats":{"total_commits":207,"total_committers":34,"mean_commits":6.088235294117647,"dds":0.6473429951690821,"last_synced_commit":"1bb3aa54c166c2384e0acf4d4e595911230c209e"},"previous_names":[],"tags_count":34,"template":false,"template_full_name":null,"purl":"pkg:github/go-git/go-billy","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/go-git","download_url":"https://codeload.github.com/go-git/go-billy/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy/sbom","scorecard":{"id":431830,"data":{"date":"2025-08-17T17:21:30Z","repo":{"name":"github.com/go-git/go-billy","commit":"3a9ca963b7289d5bc1fd7bd48dc4d818f6997096"},"scorecard":{"version":"v5.2.1","commit":"ab2f6e92482462fe66246d9e32f642855a691dc1"},"score":7.2,"checks":[{"name":"Code-Review","score":0,"reason":"Found 0/2 approved changesets -- score normalized to 0","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#code-review"}},{"name":"Dependency-Update-Tool","score":10,"reason":"update tool detected","details":["Info: detected update tool: Dependabot: .github/dependabot.yaml:1"],"documentation":{"short":"Determines if the project uses a dependency update tool.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#dependency-update-tool"}},{"name":"Maintained","score":10,"reason":"19 commit(s) and 1 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#maintained"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#packaging"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#dangerous-workflow"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#binary-artifacts"}},{"name":"Token-Permissions","score":10,"reason":"GitHub workflow tokens follow principle of least privilege","details":["Info: jobLevel 'contents' permission set to 'read': .github/workflows/codeql.yml:18","Info: jobLevel 'actions' permission set to 'read': .github/workflows/codeql.yml:17","Info: found token with 'none' permissions: .github/workflows/codeql.yml:1","Info: topLevel permissions set to 'read-all': .github/workflows/scorecard.yml:14","Info: found token with 'none' permissions: .github/workflows/test.yml:1","Info: found token with 'none' permissions: .github/workflows/test_wasip1.yml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#token-permissions"}},{"name":"Pinned-Dependencies","score":5,"reason":"dependency not pinned by hash detected -- score normalized to 5","details":["Warn: goCommand not pinned by hash: scripts/wasirun-wrapper:6","Warn: goCommand not pinned by hash: .github/workflows/test_wasip1.yml:27","Info:  10 out of  10 GitHub-owned GitHubAction dependencies pinned","Info:   1 out of   1 third-party GitHubAction dependencies pinned","Info:   0 out of   2 goCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#pinned-dependencies"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: Apache License 2.0: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#license"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#cii-best-practices"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#vulnerabilities"}},{"name":"SAST","score":10,"reason":"SAST tool is run on all commits","details":["Info: SAST configuration detected: CodeQL","Info: all commits (30) are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#sast"}},{"name":"Security-Policy","score":0,"reason":"security policy file not detected","details":["Warn: no security policy file detected","Warn: no security file to analyze","Warn: no security file to analyze","Warn: no security file to analyze"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#security-policy"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#fuzzing"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#signed-releases"}},{"name":"Branch-Protection","score":6,"reason":"branch protection is not maximal on development and all release branches","details":["Info: 'allow deletion' disabled on branch 'main'","Info: 'allow deletion' disabled on branch 'releases/v5.x'","Info: 'force pushes' disabled on branch 'main'","Info: 'force pushes' disabled on branch 'releases/v5.x'","Warn: 'branch protection settings apply to administrators' is disabled on branch 'main'","Warn: 'branch protection settings apply to administrators' is disabled on branch 'releases/v5.x'","Info: 'stale review dismissal' is required to merge on branch 'main'","Info: 'stale review dismissal' is required to merge on branch 'releases/v5.x'","Warn: required approving review count is 1 on branch 'main'","Warn: required approving review count is 1 on branch 'releases/v5.x'","Warn: codeowners review is not required on branch 'main'","Warn: codeowners review is not required on branch 'releases/v5.x'","Info: 'last push approval' is required to merge on branch 'main'","Info: 'last push approval' is required to merge on branch 'releases/v5.x'","Warn: no status checks found to merge onto branch 'main'","Warn: no status checks found to merge onto branch 'releases/v5.x'","Info: PRs are required in order to make changes on branch 'main'","Info: PRs are required in order to make changes on branch 'releases/v5.x'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#branch-protection"}},{"name":"CI-Tests","score":10,"reason":"15 out of 15 merged PRs checked by a CI test -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project runs tests before pull requests are merged.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#ci-tests"}},{"name":"Contributors","score":10,"reason":"project has 28 contributing companies or organizations","details":["Info: found contributions from: CodeCantor, DataDog, SUSE, bblfsh, croupiers, datadog, distribyted, dotnet, emberjs, fluxcd, glimmerjs, go-enry, go-git, hdiv, ipfs, ipld, knative, kubernetes, kubernetes-sigs, libp2p, mindersec, mloncode, qubesome, rancher, rancher @suse, rancherlabs, sigstore, sqle"],"documentation":{"short":"Determines if the project has a set of contributors from multiple organizations (e.g., companies).","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#contributors"}}]},"last_synced_at":"2025-08-19T03:33:03.665Z","repository_id":46417246,"created_at":"2025-08-19T03:33:03.665Z","updated_at":"2025-08-19T03:33:03.665Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":30931109,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-03-25T07:55:14.202Z","status":"ssl_error","status_checked_at":"2026-03-25T07:55:10.924Z","response_time":80,"last_error":"SSL_read: unexpected eof while reading","robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":false,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"go-git","name":"go-git","uuid":"57653224","kind":"organization","description":"A highly extensible Git implementation in pure Go.","email":null,"website":null,"location":null,"twitter":null,"company":null,"icon_url":"https://avatars.githubusercontent.com/u/57653224?v=4","repositories_count":4,"last_synced_at":"2023-03-04T21:00:52.787Z","metadata":{"has_sponsors_listing":false},"html_url":"https://github.com/go-git","funding_links":[],"total_stars":null,"followers":null,"following":null,"created_at":"2022-11-15T00:42:35.065Z","updated_at":"2023-03-04T21:00:52.803Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/go-git","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/go-git/repositories"},"tags":[{"name":"v5.8.0","sha":"8662784198181209e3a42818bf7ce0258cb4051c","kind":"commit","published_at":"2026-02-24T22:55:39.000Z","download_url":"https://codeload.github.com/go-git/go-billy/tar.gz/v5.8.0","html_url":"https://github.com/go-git/go-billy/releases/tag/v5.8.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-git/go-billy@v5.8.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy/tags/v5.8.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy/tags/v5.8.0/manifests"},{"name":"v5.7.0","sha":"cc50ee75c06c917f097a7ea5f1e3cbb21b7b8e0a","kind":"commit","published_at":"2025-12-06T10:17:49.000Z","download_url":"https://codeload.github.com/go-git/go-billy/tar.gz/v5.7.0","html_url":"https://github.com/go-git/go-billy/releases/tag/v5.7.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-git/go-billy@v5.7.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy/tags/v5.7.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy/tags/v5.7.0/manifests"},{"name":"v5.6.2","sha":"9f8b16d30b0a071884faba91fd4edff482af5bde","kind":"commit","published_at":"2025-01-10T16:06:35.000Z","download_url":"https://codeload.github.com/go-git/go-billy/tar.gz/v5.6.2","html_url":"https://github.com/go-git/go-billy/releases/tag/v5.6.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-git/go-billy@v5.6.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy/tags/v5.6.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy/tags/v5.6.2/manifests"},{"name":"v5.6.1","sha":"a6c6b505da9f067ef0ad91daa7010a693024e055","kind":"commit","published_at":"2024-12-28T12:40:04.000Z","download_url":"https://codeload.github.com/go-git/go-billy/tar.gz/v5.6.1","html_url":"https://github.com/go-git/go-billy/releases/tag/v5.6.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-git/go-billy@v5.6.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy/tags/v5.6.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy/tags/v5.6.1/manifests"},{"name":"v5.6.0","sha":"371e232676ac6807a104d8d2d3373b2327840aff","kind":"commit","published_at":"2024-10-08T10:10:53.000Z","download_url":"https://codeload.github.com/go-git/go-billy/tar.gz/v5.6.0","html_url":"https://github.com/go-git/go-billy/releases/tag/v5.6.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-git/go-billy@v5.6.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy/tags/v5.6.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy/tags/v5.6.0/manifests"},{"name":"v5.5.0","sha":"5c1dfec7a041579bb69e0f248293c03c2a856c55","kind":"commit","published_at":"2023-09-11T16:14:50.000Z","download_url":"https://codeload.github.com/go-git/go-billy/tar.gz/v5.5.0","html_url":"https://github.com/go-git/go-billy/releases/tag/v5.5.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-git/go-billy@v5.5.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy/tags/v5.5.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy/tags/v5.5.0/manifests"},{"name":"v5.4.1","sha":"ed16d7ba55f95b937e995cb7890e91e1e785b7be","kind":"commit","published_at":"2023-02-05T11:14:30.000Z","download_url":"https://codeload.github.com/go-git/go-billy/tar.gz/v5.4.1","html_url":"https://github.com/go-git/go-billy/releases/tag/v5.4.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-git/go-billy@v5.4.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy/tags/v5.4.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy/tags/v5.4.1/manifests"},{"name":"v5.4.0","sha":"1b88f62a6a858b72fd9b8596c78e5335d8990685","kind":"commit","published_at":"2022-12-19T16:39:30.000Z","download_url":"https://codeload.github.com/go-git/go-billy/tar.gz/v5.4.0","html_url":"https://github.com/go-git/go-billy/releases/tag/v5.4.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-git/go-billy@v5.4.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy/tags/v5.4.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy/tags/v5.4.0/manifests"},{"name":"v5.3.1","sha":"3bf3fe5b381bcfa471f7f6054c0cf2309c35e651","kind":"commit","published_at":"2021-05-02T23:02:33.000Z","download_url":"https://codeload.github.com/go-git/go-billy/tar.gz/v5.3.1","html_url":"https://github.com/go-git/go-billy/releases/tag/v5.3.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-git/go-billy@v5.3.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy/tags/v5.3.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy/tags/v5.3.1/manifests"},{"name":"v5.3.0","sha":"af7e4ac12d42e726180d4474122a2266f18b07d6","kind":"commit","published_at":"2021-04-28T22:50:51.000Z","download_url":"https://codeload.github.com/go-git/go-billy/tar.gz/v5.3.0","html_url":"https://github.com/go-git/go-billy/releases/tag/v5.3.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-git/go-billy@v5.3.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy/tags/v5.3.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy/tags/v5.3.0/manifests"},{"name":"v5.2.0","sha":"42ead41a46a48b2e0ebc6aa7ab1456a5de3d1b23","kind":"commit","published_at":"2021-04-22T00:15:16.000Z","download_url":"https://codeload.github.com/go-git/go-billy/tar.gz/v5.2.0","html_url":"https://github.com/go-git/go-billy/releases/tag/v5.2.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-git/go-billy@v5.2.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy/tags/v5.2.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy/tags/v5.2.0/manifests"},{"name":"v5.1.0","sha":"3d7f61fe9ffd652dd388e5aab60b969b86f43fa3","kind":"commit","published_at":"2021-03-10T06:50:46.000Z","download_url":"https://codeload.github.com/go-git/go-billy/tar.gz/v5.1.0","html_url":"https://github.com/go-git/go-billy/releases/tag/v5.1.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-git/go-billy@v5.1.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy/tags/v5.1.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy/tags/v5.1.0/manifests"},{"name":"v5.0.0","sha":"205ba6585ca03bd60e304f7fa0b270232ba1d707","kind":"commit","published_at":"2020-03-09T20:00:45.000Z","download_url":"https://codeload.github.com/go-git/go-billy/tar.gz/v5.0.0","html_url":"https://github.com/go-git/go-billy/releases/tag/v5.0.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-git/go-billy@v5.0.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy/tags/v5.0.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy/tags/v5.0.0/manifests"},{"name":"v4.3.2","sha":"780403cfc1bc95ff4d07e7b26db40a6186c5326e","kind":"commit","published_at":"2019-07-29T15:17:39.000Z","download_url":"https://codeload.github.com/go-git/go-billy/tar.gz/v4.3.2","html_url":"https://github.com/go-git/go-billy/releases/tag/v4.3.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-git/go-billy@v4.3.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy/tags/v4.3.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy/tags/v4.3.2/manifests"},{"name":"v4.3.1","sha":"711f3aa5b30ce9bbc7d708792ca98b913cbbd4a5","kind":"commit","published_at":"2019-06-30T22:50:54.000Z","download_url":"https://codeload.github.com/go-git/go-billy/tar.gz/v4.3.1","html_url":"https://github.com/go-git/go-billy/releases/tag/v4.3.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-git/go-billy@v4.3.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy/tags/v4.3.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy/tags/v4.3.1/manifests"},{"name":"v4.3.0","sha":"982626487c60a5252e7d0b695ca23fb0fa2fd670","kind":"commit","published_at":"2018-09-19T10:02:40.000Z","download_url":"https://codeload.github.com/go-git/go-billy/tar.gz/v4.3.0","html_url":"https://github.com/go-git/go-billy/releases/tag/v4.3.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-git/go-billy@v4.3.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy/tags/v4.3.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy/tags/v4.3.0/manifests"},{"name":"v4.2.1","sha":"59952543636f55de3f860b477b615093d5c2c3e4","kind":"commit","published_at":"2018-09-04T09:03:59.000Z","download_url":"https://codeload.github.com/go-git/go-billy/tar.gz/v4.2.1","html_url":"https://github.com/go-git/go-billy/releases/tag/v4.2.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-git/go-billy@v4.2.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy/tags/v4.2.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy/tags/v4.2.1/manifests"},{"name":"v4.2.0","sha":"83cf655d40b15b427014d7875d10850f96edba14","kind":"commit","published_at":"2018-06-11T08:24:45.000Z","download_url":"https://codeload.github.com/go-git/go-billy/tar.gz/v4.2.0","html_url":"https://github.com/go-git/go-billy/releases/tag/v4.2.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-git/go-billy@v4.2.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy/tags/v4.2.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy/tags/v4.2.0/manifests"},{"name":"v4.1.1","sha":"df053870ae7070b0350624ba5a22161ba3796cc0","kind":"commit","published_at":"2018-04-03T08:40:37.000Z","download_url":"https://codeload.github.com/go-git/go-billy/tar.gz/v4.1.1","html_url":"https://github.com/go-git/go-billy/releases/tag/v4.1.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-git/go-billy@v4.1.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy/tags/v4.1.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy/tags/v4.1.1/manifests"},{"name":"v4.1.0","sha":"027dceab1aa836eb310d92c2eb2266e4dc9f4b81","kind":"commit","published_at":"2018-02-02T09:03:00.000Z","download_url":"https://codeload.github.com/go-git/go-billy/tar.gz/v4.1.0","html_url":"https://github.com/go-git/go-billy/releases/tag/v4.1.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-git/go-billy@v4.1.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy/tags/v4.1.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy/tags/v4.1.0/manifests"},{"name":"v4.0.2","sha":"e940f8b62a8e61adc71f69802c1cc8305b64ec96","kind":"commit","published_at":"2018-01-14T23:10:49.000Z","download_url":"https://codeload.github.com/go-git/go-billy/tar.gz/v4.0.2","html_url":"https://github.com/go-git/go-billy/releases/tag/v4.0.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-git/go-billy@v4.0.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy/tags/v4.0.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy/tags/v4.0.2/manifests"},{"name":"v4.0.1","sha":"053dbd006f81a230434f712314aacfb540b52cc5","kind":"commit","published_at":"2017-11-27T19:20:57.000Z","download_url":"https://codeload.github.com/go-git/go-billy/tar.gz/v4.0.1","html_url":"https://github.com/go-git/go-billy/releases/tag/v4.0.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-git/go-billy@v4.0.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy/tags/v4.0.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy/tags/v4.0.1/manifests"},{"name":"v4.0.0","sha":"198f713dfdcd18797f6ac7c729e2440e5fde337f","kind":"commit","published_at":"2017-11-18T23:00:01.000Z","download_url":"https://codeload.github.com/go-git/go-billy/tar.gz/v4.0.0","html_url":"https://github.com/go-git/go-billy/releases/tag/v4.0.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-git/go-billy@v4.0.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy/tags/v4.0.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy/tags/v4.0.0/manifests"},{"name":"v3.1.0","sha":"c329b7bc7b9d24905d2bc1b85bfa29f7ae266314","kind":"commit","published_at":"2017-06-27T10:15:46.000Z","download_url":"https://codeload.github.com/go-git/go-billy/tar.gz/v3.1.0","html_url":"https://github.com/go-git/go-billy/releases/tag/v3.1.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-git/go-billy@v3.1.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy/tags/v3.1.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy/tags/v3.1.0/manifests"},{"name":"v3.0.1","sha":"e501c17e5a47cc1adfdf16fbf54e60e6dafb92c2","kind":"commit","published_at":"2017-06-19T13:02:16.000Z","download_url":"https://codeload.github.com/go-git/go-billy/tar.gz/v3.0.1","html_url":"https://github.com/go-git/go-billy/releases/tag/v3.0.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-git/go-billy@v3.0.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy/tags/v3.0.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy/tags/v3.0.1/manifests"},{"name":"v3.0.0","sha":"d48e2a7f38a8b154de0cbdac7f9ed4f0a4fc8722","kind":"commit","published_at":"2017-06-16T16:12:35.000Z","download_url":"https://codeload.github.com/go-git/go-billy/tar.gz/v3.0.0","html_url":"https://github.com/go-git/go-billy/releases/tag/v3.0.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-git/go-billy@v3.0.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy/tags/v3.0.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy/tags/v3.0.0/manifests"},{"name":"v2.0.5","sha":"52497601f113730d14baa00453674376fca22f22","kind":"commit","published_at":"2017-05-17T08:25:08.000Z","download_url":"https://codeload.github.com/go-git/go-billy/tar.gz/v2.0.5","html_url":"https://github.com/go-git/go-billy/releases/tag/v2.0.5","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-git/go-billy@v2.0.5","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy/tags/v2.0.5","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy/tags/v2.0.5/manifests"},{"name":"v2.0.4","sha":"99d839800b93542496ec19319f37abacf17f589f","kind":"commit","published_at":"2017-04-19T07:02:02.000Z","download_url":"https://codeload.github.com/go-git/go-billy/tar.gz/v2.0.4","html_url":"https://github.com/go-git/go-billy/releases/tag/v2.0.4","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-git/go-billy@v2.0.4","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy/tags/v2.0.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy/tags/v2.0.4/manifests"},{"name":"v2.0.3","sha":"0f02306b1aa8fe9ed04feb409ceffedc568fa2a4","kind":"commit","published_at":"2017-04-17T21:18:04.000Z","download_url":"https://codeload.github.com/go-git/go-billy/tar.gz/v2.0.3","html_url":"https://github.com/go-git/go-billy/releases/tag/v2.0.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-git/go-billy@v2.0.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy/tags/v2.0.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy/tags/v2.0.3/manifests"},{"name":"v2.0.2","sha":"0661b96fbe0d3d820b4bfc51c95ae981560b5553","kind":"commit","published_at":"2017-04-17T10:59:54.000Z","download_url":"https://codeload.github.com/go-git/go-billy/tar.gz/v2.0.2","html_url":"https://github.com/go-git/go-billy/releases/tag/v2.0.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-git/go-billy@v2.0.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy/tags/v2.0.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy/tags/v2.0.2/manifests"},{"name":"v2.0.1","sha":"bf5cdf7d823be98aa2851ad3e1253cd11bcea1fe","kind":"commit","published_at":"2017-04-12T11:01:20.000Z","download_url":"https://codeload.github.com/go-git/go-billy/tar.gz/v2.0.1","html_url":"https://github.com/go-git/go-billy/releases/tag/v2.0.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-git/go-billy@v2.0.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy/tags/v2.0.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy/tags/v2.0.1/manifests"},{"name":"v2.0.0","sha":"0dfa3dd2e89c570b8e1e25f5b28647525c44c3ca","kind":"commit","published_at":"2017-03-10T11:24:05.000Z","download_url":"https://codeload.github.com/go-git/go-billy/tar.gz/v2.0.0","html_url":"https://github.com/go-git/go-billy/releases/tag/v2.0.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-git/go-billy@v2.0.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy/tags/v2.0.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy/tags/v2.0.0/manifests"},{"name":"v1.0.0","sha":"1dfacf9a4b2ac372f16acd6b1aab9a50df955a2a","kind":"commit","published_at":"2017-01-30T15:44:06.000Z","download_url":"https://codeload.github.com/go-git/go-billy/tar.gz/v1.0.0","html_url":"https://github.com/go-git/go-billy/releases/tag/v1.0.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-git/go-billy@v1.0.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy/tags/v1.0.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy/tags/v1.0.0/manifests"},{"name":"v1-alpha","sha":"6ca1fd6ba86f5929a23633719f5fd413a0046998","kind":"commit","published_at":"2016-12-15T10:38:17.000Z","download_url":"https://codeload.github.com/go-git/go-billy/tar.gz/v1-alpha","html_url":"https://github.com/go-git/go-billy/releases/tag/v1-alpha","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-git/go-billy@v1-alpha","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy/tags/v1-alpha","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy/tags/v1-alpha/manifests"}]},"repo_metadata_updated_at":"2026-03-25T17:00:59.782Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":5.599498543106364,"dependent_packages_count":5.247351267037174,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":5.423424905071769},"purl":"pkg:golang/github.com/go-%21git/go-billy/v5","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/go/github.com/go-Git/go-billy/v5","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/go/github.com/go-Git/go-billy/v5","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/go/github.com/go-Git/go-billy/v5/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-02-09T15:03:08.348Z","issues_count":33,"pull_requests_count":192,"avg_time_to_close_issue":44029525.95454545,"avg_time_to_close_pull_request":2373581.36196319,"issues_closed_count":22,"pull_requests_closed_count":163,"pull_request_authors_count":29,"issue_authors_count":29,"avg_comments_per_issue":1.4848484848484849,"avg_comments_per_pull_request":0.3489583333333333,"merged_pull_requests_count":143,"bot_issues_count":1,"bot_pull_requests_count":116,"past_year_issues_count":6,"past_year_pull_requests_count":46,"past_year_avg_time_to_close_issue":233359.0,"past_year_avg_time_to_close_pull_request":313714.48484848486,"past_year_issues_closed_count":2,"past_year_pull_requests_closed_count":33,"past_year_pull_request_authors_count":6,"past_year_issue_authors_count":6,"past_year_avg_comments_per_issue":1.1666666666666667,"past_year_avg_comments_per_pull_request":0.30434782608695654,"past_year_bot_issues_count":1,"past_year_bot_pull_requests_count":30,"past_year_merged_pull_requests_count":32,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy/issues","maintainers":[{"login":"pjbgf","count":34,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/pjbgf"}],"active_maintainers":[{"login":"pjbgf","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/pjbgf"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fgo-Git%2Fgo-billy%2Fv5/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fgo-Git%2Fgo-billy%2Fv5/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fgo-Git%2Fgo-billy%2Fv5/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fgo-Git%2Fgo-billy%2Fv5/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fgo-Git%2Fgo-billy%2Fv5/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fgo-Git%2Fgo-billy%2Fv5/codemeta","maintainers":[],"registry":{"name":"proxy.golang.org","url":"https://proxy.golang.org","ecosystem":"go","default":true,"packages_count":2206448,"maintainers_count":0,"namespaces_count":792747,"keywords_count":113213,"github":"golang","metadata":{"funded_packages_count":53976},"icon_url":"https://github.com/golang.png","created_at":"2022-04-04T15:19:22.939Z","updated_at":"2026-06-10T05:03:23.672Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/namespaces"}}],"commits":{"id":1741813,"full_name":"go-git/go-billy","default_branch":"main","total_commits":354,"total_committers":38,"total_bot_commits":57,"total_bot_committers":2,"mean_commits":9.31578947368421,"dds":0.6468926553672316,"past_year_total_commits":127,"past_year_total_committers":13,"past_year_total_bot_commits":35,"past_year_total_bot_committers":2,"past_year_mean_commits":9.76923076923077,"past_year_dds":0.4173228346456693,"last_synced_at":"2026-07-11T01:45:28.962Z","last_synced_commit":"606e1d5a143dc6744d487ef4a740e316e4666689","created_at":"2024-09-13T18:50:33.107Z","updated_at":"2026-07-11T01:44:51.158Z","committers":[{"name":"Paulo Gomes","email":"pjbgf@linux.com","login":"pjbgf","count":125},{"name":"Máximo Cuadros","email":"mcuadros@gmail.com","login":"mcuadros","count":73},{"name":"dependabot[bot]","email":"49699333+dependabot[bot]","login":"dependabot[bot]","count":38},{"name":"Santiago M. Mola","email":"santi@mola.io","login":"smola","count":20},{"name":"go-git-renovate[bot]","email":"245267575+go-git-renovate[bot]","login":"go-git-renovate[bot]","count":19},{"name":"Javi Fontan","email":"jfontan@gmail.com","login":"jfontan","count":13},{"name":"Antonio Jesus Navarro Perez","email":"antonio@sourced.tech","login":"ajnavarro","count":8},{"name":"Taru Karttunen","email":"taruti@taruti.net","login":"taruti","count":6},{"name":"Evan Anderson","email":"evan.k.anderson@gmail.com","login":"evankanderson","count":6},{"name":"Sergio Arbeo","email":"serabe@gmail.com","login":"Serabe","count":5},{"name":"Will Hickman","email":"whickman@palantir.com","login":"whickman","count":3},{"name":"Adolfo García Veytia (Puerco)","email":"adolfo.garcia@uservers.net","login":"puerco","count":3},{"name":"Tryggvi Larusson","email":"tryggvi.larusson@netapp.com","login":"tryggvil","count":2},{"name":"Thibault Jamet","email":"tjamet","login":"tjamet","count":2},{"name":"Nicolas Simonds","email":"github@submedia.net","login":"0xDEC0DE","count":2},{"name":"Hidde Beydals","email":"hidde@hhh.computer","login":"hiddeco","count":2},{"name":"Hans van den Bogert","email":"hansbogert@gmail.com","login":"hansbogert","count":2},{"name":"Georg Friedrich","email":"georg@entire.io","login":"georg","count":2},{"name":"kuba--","email":"kuba@sourced.tech","login":null,"count":2},{"name":"Christian Stewart","email":"christian@aperture.us","login":"paralin","count":2},{"name":"Terry Hardie","email":"65614981+sfc-gh-thardie","login":"sfc-gh-thardie","count":2},{"name":"onee-only","email":"kimww0306@gmail.com","login":"onee-only","count":1},{"name":"Perez Domingo, Victor","email":"victor.perez@tecnalia.com","login":null,"count":1},{"name":"nodivbyzero","email":"nodivbyzero@gmail.com","login":"nodivbyzero","count":1},{"name":"nikandfor","email":"nikandfor@gmail.com","login":"nikandfor","count":1},{"name":"jawr","email":"jess@lawrence.pm","login":"jawr","count":1},{"name":"cui fliter","email":"imcusg@gmail.com","login":"cuishuang","count":1},{"name":"Till Wegmüller","email":"toasterson@gmail.com","login":"Toasterson","count":1},{"name":"Spencer McCreary","email":"spencer_mccreary@compulsivesoftware.com","login":"spennymac","count":1},{"name":"Ronald G Minnich","email":"rminnich@gmail.com","login":"rminnich","count":1},{"name":"Pierre Guilleminot","email":"pierre.guilleminot@gmail.com","login":"jinroh","count":1},{"name":"Mateusz Czapliński","email":"czapkofan@gmail.com","login":"akavel","count":1},{"name":"James Harris","email":"james.harris@icecave.com.au","login":"jmalloc","count":1},{"name":"Fedor Korotkov","email":"fedor.korotkov@gmail.com","login":"fkorotkov","count":1},{"name":"Fazlul Shahriar","email":"fshahriar@gmail.com","login":"fhs","count":1},{"name":"Craig Weber","email":"craig.weber@tempus.com","login":"weberc2-tempus","count":1},{"name":"Conrad Hoffmann","email":"ch@bitfehler.net","login":"bitfehler","count":1},{"name":"Alberto Cortés","email":"alcortesm@gmail.com","login":"alcortesm","count":1}],"past_year_committers":[{"name":"Paulo Gomes","email":"paulo@entire.io","login":"pjbgf","count":74},{"name":"go-git-renovate[bot]","email":"245267575+go-git-renovate[bot]","login":"go-git-renovate[bot]","count":19},{"name":"dependabot[bot]","email":"49699333+dependabot[bot]","login":"dependabot[bot]","count":16},{"name":"Javi Fontan","email":"jfontan@gmail.com","login":"jfontan","count":4},{"name":"Adolfo García Veytia (Puerco)","email":"adolfo.garcia@uservers.net","login":"puerco","count":3},{"name":"Hidde Beydals","email":"hidde@hhh.computer","login":"hiddeco","count":2},{"name":"Hans van den Bogert","email":"hansbogert@gmail.com","login":"hansbogert","count":2},{"name":"Georg Friedrich","email":"georg@entire.io","login":"georg","count":2},{"name":"nodivbyzero","email":"nodivbyzero@gmail.com","login":"nodivbyzero","count":1},{"name":"Nicolas Simonds","email":"github@submedia.net","login":"0xDEC0DE","count":1},{"name":"Evan Anderson","email":"evan.k.anderson@gmail.com","login":"evankanderson","count":1},{"name":"Conrad Hoffmann","email":"ch@bitfehler.net","login":"bitfehler","count":1},{"name":"Christian Stewart","email":"christian@aperture.us","login":"paralin","count":1}],"commits_url":"https://commits.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-git%2Fgo-billy/commits","host":{"name":"GitHub","url":"https://github.com","kind":"github","last_synced_at":"2026-07-11T00:00:14.669Z","repositories_count":6304736,"commits_count":864546591,"contributors_count":35291483,"owners_count":1190436,"icon_url":"https://github.com/github.png","host_url":"https://commits.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://commits.ecosyste.ms/api/v1/hosts/GitHub/repositories"}},"issues":{"table":{}},"events":null,"keywords":[],"dependencies":[{"ecosystem":"actions","filepath":".github/workflows/test.yml","sha":null,"kind":"manifest","created_at":"2023-02-18T23:15:50.824Z","updated_at":"2023-02-18T23:15:50.824Z","repository_link":"https://github.com/go-git/go-billy/blob/main/.github/workflows/test.yml","dependencies":[{"id":7772863109,"package_name":"actions/setup-go","ecosystem":"actions","requirements":"v3","direct":true,"kind":"composite","optional":false},{"id":7772863110,"package_name":"actions/checkout","ecosystem":"actions","requirements":"v3","direct":true,"kind":"composite","optional":false}]},{"ecosystem":"go","filepath":"go.mod","sha":null,"kind":"manifest","created_at":"2022-09-15T21:50:37.186Z","updated_at":"2022-09-15T21:50:37.186Z","repository_link":"https://github.com/go-git/go-billy/blob/main/go.mod","dependencies":[{"id":4983616761,"package_name":"github.com/kr/text","ecosystem":"go","requirements":"v0.2.0","direct":true,"kind":"runtime","optional":false},{"id":4983616762,"package_name":"github.com/niemeyer/pretty","ecosystem":"go","requirements":"v0.0.0-20200227124842-a10e7caefd8e","direct":true,"kind":"runtime","optional":false},{"id":4983616763,"package_name":"golang.org/x/sys","ecosystem":"go","requirements":"v0.0.0-20200302150141-5c8b2ff67527","direct":true,"kind":"runtime","optional":false},{"id":4983616764,"package_name":"gopkg.in/check.v1","ecosystem":"go","requirements":"v1.0.0-20200227125254-8fa46927fb4f","direct":true,"kind":"runtime","optional":false}]},{"ecosystem":"go","filepath":"go.sum","sha":null,"kind":"lockfile","created_at":"2022-09-15T21:50:37.231Z","updated_at":"2022-09-15T21:50:37.231Z","repository_link":"https://github.com/go-git/go-billy/blob/main/go.sum","dependencies":[{"id":4983617874,"package_name":"github.com/creack/pty","ecosystem":"go","requirements":"v1.1.9","direct":false,"kind":"runtime","optional":false},{"id":4983617875,"package_name":"github.com/go-git/go-billy","ecosystem":"go","requirements":"v1.0.0","direct":false,"kind":"runtime","optional":false},{"id":4983617876,"package_name":"github.com/go-git/go-billy","ecosystem":"go","requirements":"v3.1.0+incompatible","direct":false,"kind":"runtime","optional":false},{"id":4983617877,"package_name":"github.com/kr/pty","ecosystem":"go","requirements":"v1.1.1","direct":false,"kind":"runtime","optional":false},{"id":4983617878,"package_name":"github.com/kr/text","ecosystem":"go","requirements":"v0.1.0","direct":false,"kind":"runtime","optional":false},{"id":4983617879,"package_name":"github.com/kr/text","ecosystem":"go","requirements":"v0.2.0","direct":false,"kind":"runtime","optional":false},{"id":4983617880,"package_name":"github.com/niemeyer/pretty","ecosystem":"go","requirements":"v0.0.0-20200227124842-a10e7caefd8e","direct":false,"kind":"runtime","optional":false},{"id":4983617881,"package_name":"golang.org/x/sys","ecosystem":"go","requirements":"v0.0.0-20200302150141-5c8b2ff67527","direct":false,"kind":"runtime","optional":false},{"id":4983617882,"package_name":"gopkg.in/check.v1","ecosystem":"go","requirements":"v1.0.0-20200227125254-8fa46927fb4f","direct":false,"kind":"runtime","optional":false}]},{"ecosystem":"actions","filepath":".github/workflows/codeql.yml","sha":null,"kind":"manifest","created_at":"2023-10-14T23:07:20.214Z","updated_at":"2023-10-14T23:07:20.214Z","repository_link":"https://github.com/go-git/go-billy/blob/main/.github/workflows/codeql.yml","dependencies":[{"id":14207381688,"package_name":"actions/checkout","ecosystem":"actions","requirements":"8e5e7e5ab8b370d6c329ec480221332ada57f0ab","direct":true,"kind":"composite","optional":false},{"id":14207381689,"package_name":"github/codeql-action/init","ecosystem":"actions","requirements":"29b1f65c5e92e24fe6b6647da1eaabe529cec70f","direct":true,"kind":"composite","optional":false},{"id":14207381690,"package_name":"github/codeql-action/analyze","ecosystem":"actions","requirements":"29b1f65c5e92e24fe6b6647da1eaabe529cec70f","direct":true,"kind":"composite","optional":false}]},{"ecosystem":"actions","filepath":".github/workflows/test_wasip1.yml","sha":null,"kind":"manifest","created_at":"2023-11-20T22:24:56.002Z","updated_at":"2023-11-20T22:24:56.002Z","repository_link":"https://github.com/go-git/go-billy/blob/main/.github/workflows/test_wasip1.yml","dependencies":[{"id":14624460117,"package_name":"actions/setup-go","ecosystem":"actions","requirements":"v3","direct":true,"kind":"composite","optional":false},{"id":14624460118,"package_name":"actions/checkout","ecosystem":"actions","requirements":"v3","direct":true,"kind":"composite","optional":false}]},{"ecosystem":"actions","filepath":".github/workflows/bench-regression.yml","sha":null,"kind":"manifest","created_at":"2026-02-26T03:00:34.696Z","updated_at":"2026-02-26T03:00:34.696Z","repository_link":"https://github.com/go-git/go-billy/blob/main/.github/workflows/bench-regression.yml","dependencies":[{"id":25826207931,"package_name":"actions/checkout","ecosystem":"actions","requirements":"08c6903cd8c0fde910a37f88322edcfb5dd907a8","direct":true,"kind":"composite","optional":false},{"id":25826207932,"package_name":"actions/setup-go","ecosystem":"actions","requirements":"44694675825211faa026b3c33043df3e48a5fa00","direct":true,"kind":"composite","optional":false}]},{"ecosystem":"actions","filepath":".github/workflows/scorecard.yml","sha":null,"kind":"manifest","created_at":"2026-02-26T03:00:34.766Z","updated_at":"2026-02-26T03:00:34.766Z","repository_link":"https://github.com/go-git/go-billy/blob/main/.github/workflows/scorecard.yml","dependencies":[{"id":25826207934,"package_name":"actions/checkout","ecosystem":"actions","requirements":"08c6903cd8c0fde910a37f88322edcfb5dd907a8","direct":true,"kind":"composite","optional":false},{"id":25826207935,"package_name":"ossf/scorecard-action","ecosystem":"actions","requirements":"4eaacf0543bb3f2c246792bd56e8cdeffafb205a","direct":true,"kind":"composite","optional":false},{"id":25826207948,"package_name":"actions/upload-artifact","ecosystem":"actions","requirements":"330a01c490aca151604b8cf639adc76d48f6c5d4","direct":true,"kind":"composite","optional":false},{"id":25826207949,"package_name":"github/codeql-action/upload-sarif","ecosystem":"actions","requirements":"0499de31b99561a6d14a36a5f662c2a54f91beee","direct":true,"kind":"composite","optional":false}]}],"score":33.07708559713431,"created_at":"2026-07-08T09:33:53.908Z","updated_at":"2026-07-11T12:01:16.145Z","avatar_url":"https://github.com/go-git.png","language":"Go","codemeta":null,"publiccode":null,"project_url":"https://summary.ecosyste.ms/api/v1/projects/378674","html_url":"https://summary.ecosyste.ms/projects/378674"}