{"id":378819,"url":"https://github.com/kelseyhightower/envconfig","last_synced_at":"2026-10-02T04:02:05.632Z","repository":{"id":11670029,"uuid":"14179252","full_name":"kelseyhightower/envconfig","owner":"kelseyhightower","description":"Golang library for managing configuration data from environment variables","archived":false,"fork":false,"pushed_at":"2025-06-28T02:01:37.000Z","size":101,"stargazers_count":5469,"open_issues_count":62,"forks_count":397,"subscribers_count":34,"default_branch":"master","last_synced_at":"2026-09-26T06:46:17.193Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":null,"language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/kelseyhightower.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":"MAINTAINERS","copyright":null,"agents":null,"claude":null,"gemini":null,"cursor":null,"copilot":null,"dco":null,"cla":null,"disclosure":null}},"created_at":"2013-11-06T17:01:55.000Z","updated_at":"2026-09-25T14:07:23.000Z","dependencies_parsed_at":"2026-08-06T01:41:57.803Z","dependency_job_id":null,"html_url":"https://github.com/kelseyhightower/envconfig","commit_stats":{"total_commits":108,"total_committers":50,"mean_commits":2.16,"dds":0.8148148148148149,"last_synced_commit":"10e87fe9eaec671f89425dc366f004a9336bcc8f"},"previous_names":[],"tags_count":6,"template":false,"template_full_name":null,"purl":"pkg:github/kelseyhightower/envconfig","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kelseyhightower%2Fenvconfig","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kelseyhightower%2Fenvconfig/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kelseyhightower%2Fenvconfig/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kelseyhightower%2Fenvconfig/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/kelseyhightower","download_url":"https://codeload.github.com/kelseyhightower/envconfig/tar.gz/refs/heads/master","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kelseyhightower%2Fenvconfig/sbom","scorecard":{"id":554485,"data":{"date":"2025-08-11","repo":{"name":"github.com/kelseyhightower/envconfig","commit":"7834011875d613aec60c606b52c2b0fe8949fe91"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":4.2,"checks":[{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Maintained","score":0,"reason":"1 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Code-Review","score":8,"reason":"Found 24/30 approved changesets -- score normalized to 8","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Warn: no topLevel permission defined: .github/workflows/go.yml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/go.yml:19: update your workflow using https://app.stepsecurity.io/secureworkflow/kelseyhightower/envconfig/go.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/go.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/kelseyhightower/envconfig/go.yml/master?enable=pin","Info:   0 out of   2 GitHub-owned GitHubAction dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Security-Policy","score":0,"reason":"security policy file not detected","details":["Warn: no security policy file detected","Warn: no security file to analyze","Warn: no security file to analyze","Warn: no security file to analyze"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: MIT License: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Branch-Protection","score":0,"reason":"branch protection not enabled on development/release branches","details":["Warn: branch protection not enabled for branch 'master'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 24 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-20T11:58:13.668Z","repository_id":11670029,"created_at":"2025-08-20T11:58:13.668Z","updated_at":"2025-08-20T11:58:13.668Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":341189360,"owners_count":37709542,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-08-22T15:14:58.755Z","status":"online","status_checked_at":"2026-09-26T02:00:06.440Z","response_time":102,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"owner":{"login":"kelseyhightower","name":"Kelsey Hightower","uuid":"1123322","kind":"user","description":"","email":"kelsey.hightower@gmail.com","website":null,"location":"Washington","twitter":null,"company":null,"icon_url":"https://avatars.githubusercontent.com/u/1123322?u=e9afe6d5b9bd6c20bbaf40f76b6188619fc24436\u0026v=4","repositories_count":195,"last_synced_at":"2026-09-25T03:11:39.839Z","metadata":{"has_sponsors_listing":false,"funding":null},"html_url":"https://github.com/kelseyhightower","funding_links":[],"total_stars":143349,"followers":24771,"following":13,"created_at":"2022-11-05T15:13:05.765Z","updated_at":"2026-09-25T03:11:39.865Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/kelseyhightower","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/kelseyhightower/repositories"},"packages":[{"id":3574390,"name":"github.com/kelseyhightower/envConfig","ecosystem":"go","description":"Package envconfig implements decoding of environment variables based on a user defined specification.","homepage":"https://github.com/kelseyhightower/envConfig","licenses":"MIT","normalized_licenses":["MIT"],"repository_url":"https://github.com/kelseyhightower/envConfig","keywords_array":[],"namespace":"github.com/kelseyhightower","versions_count":5,"first_release_published_at":"2014-03-15T18:19:28.000Z","latest_release_published_at":"2019-05-24T18:54:28.000Z","latest_release_number":"v1.4.0","last_synced_at":"2026-10-01T03:35:29.857Z","created_at":"2022-04-11T03:24:36.084Z","updated_at":"2026-10-01T03:35:29.858Z","registry_url":"https://pkg.go.dev/github.com/kelseyhightower/envConfig","install_command":"go get github.com/kelseyhightower/envConfig","documentation_url":"https://pkg.go.dev/github.com/kelseyhightower/envConfig#section-documentation","metadata":null,"repo_metadata":{"id":11670029,"uuid":"14179252","full_name":"kelseyhightower/envconfig","owner":"kelseyhightower","description":"Golang library for managing configuration data from environment variables","archived":false,"fork":false,"pushed_at":"2025-06-28T02:01:37.000Z","size":101,"stargazers_count":5469,"open_issues_count":62,"forks_count":397,"subscribers_count":34,"default_branch":"master","last_synced_at":"2026-09-26T06:46:17.193Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":null,"language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/kelseyhightower.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":"MAINTAINERS","copyright":null,"agents":null,"claude":null,"gemini":null,"cursor":null,"copilot":null,"dco":null,"cla":null,"disclosure":null}},"created_at":"2013-11-06T17:01:55.000Z","updated_at":"2026-09-25T14:07:23.000Z","dependencies_parsed_at":"2026-08-06T01:41:57.803Z","dependency_job_id":null,"html_url":"https://github.com/kelseyhightower/envconfig","commit_stats":{"total_commits":108,"total_committers":50,"mean_commits":2.16,"dds":0.8148148148148149,"last_synced_commit":"10e87fe9eaec671f89425dc366f004a9336bcc8f"},"previous_names":[],"tags_count":6,"template":false,"template_full_name":null,"purl":"pkg:github/kelseyhightower/envconfig","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kelseyhightower%2Fenvconfig","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kelseyhightower%2Fenvconfig/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kelseyhightower%2Fenvconfig/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kelseyhightower%2Fenvconfig/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/kelseyhightower","download_url":"https://codeload.github.com/kelseyhightower/envconfig/tar.gz/refs/heads/master","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kelseyhightower%2Fenvconfig/sbom","scorecard":{"id":554485,"data":{"date":"2025-08-11","repo":{"name":"github.com/kelseyhightower/envconfig","commit":"7834011875d613aec60c606b52c2b0fe8949fe91"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":4.2,"checks":[{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Maintained","score":0,"reason":"1 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Code-Review","score":8,"reason":"Found 24/30 approved changesets -- score normalized to 8","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Warn: no topLevel permission defined: .github/workflows/go.yml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/go.yml:19: update your workflow using https://app.stepsecurity.io/secureworkflow/kelseyhightower/envconfig/go.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/go.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/kelseyhightower/envconfig/go.yml/master?enable=pin","Info:   0 out of   2 GitHub-owned GitHubAction dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Security-Policy","score":0,"reason":"security policy file not detected","details":["Warn: no security policy file detected","Warn: no security file to analyze","Warn: no security file to analyze","Warn: no security file to analyze"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: MIT License: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Branch-Protection","score":0,"reason":"branch protection not enabled on development/release branches","details":["Warn: branch protection not enabled for branch 'master'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 24 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-20T11:58:13.668Z","repository_id":11670029,"created_at":"2025-08-20T11:58:13.668Z","updated_at":"2025-08-20T11:58:13.668Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":341189360,"owners_count":37709542,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-08-22T15:14:58.755Z","status":"online","status_checked_at":"2026-09-26T02:00:06.440Z","response_time":102,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"kelseyhightower","name":"Kelsey Hightower","uuid":"1123322","kind":"user","description":"","email":"kelsey.hightower@gmail.com","website":null,"location":"Washington","twitter":null,"company":null,"icon_url":"https://avatars.githubusercontent.com/u/1123322?u=e9afe6d5b9bd6c20bbaf40f76b6188619fc24436\u0026v=4","repositories_count":195,"last_synced_at":"2026-09-25T03:11:39.839Z","metadata":{"has_sponsors_listing":false,"funding":null},"html_url":"https://github.com/kelseyhightower","funding_links":[],"total_stars":143349,"followers":24771,"following":13,"created_at":"2022-11-05T15:13:05.765Z","updated_at":"2026-09-25T03:11:39.865Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/kelseyhightower","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/kelseyhightower/repositories"},"tags":[{"name":"v1.4.0","sha":"0b417c4ec4a8a82eecc22a1459a504aa55163d61","kind":"commit","published_at":"2019-05-24T18:54:28.000Z","download_url":"https://codeload.github.com/kelseyhightower/envconfig/tar.gz/v1.4.0","html_url":"https://github.com/kelseyhightower/envconfig/releases/tag/v1.4.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/kelseyhightower/envconfig@v1.4.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kelseyhightower%2Fenvconfig/tags/v1.4.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kelseyhightower%2Fenvconfig/tags/v1.4.0/manifests"},{"name":"v1.3.0","sha":"f611eb38b3875cc3bd991ca91c51d06446afa14c","kind":"commit","published_at":"2017-01-24T16:28:13.000Z","download_url":"https://codeload.github.com/kelseyhightower/envconfig/tar.gz/v1.3.0","html_url":"https://github.com/kelseyhightower/envconfig/releases/tag/v1.3.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/kelseyhightower/envconfig@v1.3.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kelseyhightower%2Fenvconfig/tags/v1.3.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kelseyhightower%2Fenvconfig/tags/v1.3.0/manifests"},{"name":"v1.2.0","sha":"9aca109c9aec4633fced9717c4a09ecab3d33111","kind":"commit","published_at":"2016-10-19T16:24:55.000Z","download_url":"https://codeload.github.com/kelseyhightower/envconfig/tar.gz/v1.2.0","html_url":"https://github.com/kelseyhightower/envconfig/releases/tag/v1.2.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/kelseyhightower/envconfig@v1.2.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kelseyhightower%2Fenvconfig/tags/v1.2.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kelseyhightower%2Fenvconfig/tags/v1.2.0/manifests"},{"name":"1.1.0","sha":"ac12b1f15efba734211a556d8b125110dc538016","kind":"commit","published_at":"2016-03-04T06:38:36.000Z","download_url":"https://codeload.github.com/kelseyhightower/envconfig/tar.gz/1.1.0","html_url":"https://github.com/kelseyhightower/envconfig/releases/tag/1.1.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/kelseyhightower/envconfig@1.1.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kelseyhightower%2Fenvconfig/tags/1.1.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kelseyhightower%2Fenvconfig/tags/1.1.0/manifests"},{"name":"v1.1.0","sha":"ac12b1f15efba734211a556d8b125110dc538016","kind":"commit","published_at":"2016-03-04T06:38:36.000Z","download_url":"https://codeload.github.com/kelseyhightower/envconfig/tar.gz/v1.1.0","html_url":"https://github.com/kelseyhightower/envconfig/releases/tag/v1.1.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/kelseyhightower/envconfig@v1.1.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kelseyhightower%2Fenvconfig/tags/v1.1.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kelseyhightower%2Fenvconfig/tags/v1.1.0/manifests"},{"name":"v1.0.0","sha":"0280e33525f5d88edb71638a80b31724153225ba","kind":"commit","published_at":"2014-03-15T18:19:28.000Z","download_url":"https://codeload.github.com/kelseyhightower/envconfig/tar.gz/v1.0.0","html_url":"https://github.com/kelseyhightower/envconfig/releases/tag/v1.0.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/kelseyhightower/envconfig@v1.0.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kelseyhightower%2Fenvconfig/tags/v1.0.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kelseyhightower%2Fenvconfig/tags/v1.0.0/manifests"}]},"repo_metadata_updated_at":"2026-09-26T10:22:30.317Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":9.345852080216646,"dependent_packages_count":6.999148183520997,"stargazers_count":null,"forks_count":null,"average":8.172500131868823},"purl":"pkg:golang/github.com/kelseyhightower/envConfig","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/go/github.com/kelseyhightower/envConfig","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/go/github.com/kelseyhightower/envConfig","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/go/github.com/kelseyhightower/envConfig/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-09-26T01:03:35.347Z","issues_count":48,"pull_requests_count":80,"avg_time_to_close_issue":22378798.545454547,"avg_time_to_close_pull_request":25763564.34090909,"issues_closed_count":22,"pull_requests_closed_count":44,"pull_request_authors_count":66,"issue_authors_count":47,"avg_comments_per_issue":2.3958333333333335,"avg_comments_per_pull_request":1.3875,"merged_pull_requests_count":15,"bot_issues_count":0,"bot_pull_requests_count":0,"past_year_issues_count":0,"past_year_pull_requests_count":9,"past_year_avg_time_to_close_issue":null,"past_year_avg_time_to_close_pull_request":547575.6666666666,"past_year_issues_closed_count":0,"past_year_pull_requests_closed_count":3,"past_year_pull_request_authors_count":5,"past_year_issue_authors_count":0,"past_year_avg_comments_per_issue":null,"past_year_avg_comments_per_pull_request":0.2222222222222222,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":0,"past_year_merged_pull_requests_count":0,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/kelseyhightower%2Fenvconfig/issues","maintainers":[],"active_maintainers":[]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fkelseyhightower%2FenvConfig/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fkelseyhightower%2FenvConfig/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fkelseyhightower%2FenvConfig/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fkelseyhightower%2FenvConfig/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fkelseyhightower%2FenvConfig/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fkelseyhightower%2FenvConfig/codemeta","maintainers":[],"registry":{"name":"proxy.golang.org","url":"https://proxy.golang.org","ecosystem":"go","default":true,"packages_count":2539736,"maintainers_count":0,"namespaces_count":852760,"keywords_count":136985,"github":"golang","metadata":{"funded_packages_count":110283,"sync_missing_packages_cursor":{"timestamp":"2026-09-29T00:04:57.155362Z","path":"github.com/virtengine/virtengine/sdk/specs","version":"v0.0.0-20260928231908-c0c887541540"},"rate_limit":5},"icon_url":"https://github.com/golang.png","created_at":"2022-04-04T15:19:22.939Z","updated_at":"2026-10-01T05:04:10.855Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/namespaces"}},{"id":3834904,"name":"github.com/KelseyHightower/envconfig","ecosystem":"go","description":"Package envconfig implements decoding of environment variables based on a user defined specification.","homepage":"https://github.com/KelseyHightower/envconfig","licenses":"MIT","normalized_licenses":["MIT"],"repository_url":"https://github.com/KelseyHightower/envconfig","keywords_array":[],"namespace":"github.com/KelseyHightower","versions_count":5,"first_release_published_at":"2014-03-15T18:19:28.000Z","latest_release_published_at":"2019-05-24T18:54:28.000Z","latest_release_number":"v1.4.0","last_synced_at":"2026-10-01T03:35:33.462Z","created_at":"2022-04-11T20:13:31.209Z","updated_at":"2026-10-01T03:35:33.463Z","registry_url":"https://pkg.go.dev/github.com/KelseyHightower/envconfig","install_command":"go get github.com/KelseyHightower/envconfig","documentation_url":"https://pkg.go.dev/github.com/KelseyHightower/envconfig#section-documentation","metadata":null,"repo_metadata":{"id":11670029,"uuid":"14179252","full_name":"kelseyhightower/envconfig","owner":"kelseyhightower","description":"Golang library for managing configuration data from environment variables","archived":false,"fork":false,"pushed_at":"2025-06-28T02:01:37.000Z","size":101,"stargazers_count":5469,"open_issues_count":62,"forks_count":397,"subscribers_count":34,"default_branch":"master","last_synced_at":"2026-09-26T06:46:17.193Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":null,"language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/kelseyhightower.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":"MAINTAINERS","copyright":null,"agents":null,"claude":null,"gemini":null,"cursor":null,"copilot":null,"dco":null,"cla":null,"disclosure":null}},"created_at":"2013-11-06T17:01:55.000Z","updated_at":"2026-09-25T14:07:23.000Z","dependencies_parsed_at":"2026-08-06T01:41:57.803Z","dependency_job_id":null,"html_url":"https://github.com/kelseyhightower/envconfig","commit_stats":{"total_commits":108,"total_committers":50,"mean_commits":2.16,"dds":0.8148148148148149,"last_synced_commit":"10e87fe9eaec671f89425dc366f004a9336bcc8f"},"previous_names":[],"tags_count":6,"template":false,"template_full_name":null,"purl":"pkg:github/kelseyhightower/envconfig","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kelseyhightower%2Fenvconfig","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kelseyhightower%2Fenvconfig/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kelseyhightower%2Fenvconfig/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kelseyhightower%2Fenvconfig/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/kelseyhightower","download_url":"https://codeload.github.com/kelseyhightower/envconfig/tar.gz/refs/heads/master","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kelseyhightower%2Fenvconfig/sbom","scorecard":{"id":554485,"data":{"date":"2025-08-11","repo":{"name":"github.com/kelseyhightower/envconfig","commit":"7834011875d613aec60c606b52c2b0fe8949fe91"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":4.2,"checks":[{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Maintained","score":0,"reason":"1 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Code-Review","score":8,"reason":"Found 24/30 approved changesets -- score normalized to 8","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Warn: no topLevel permission defined: .github/workflows/go.yml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/go.yml:19: update your workflow using https://app.stepsecurity.io/secureworkflow/kelseyhightower/envconfig/go.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/go.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/kelseyhightower/envconfig/go.yml/master?enable=pin","Info:   0 out of   2 GitHub-owned GitHubAction dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Security-Policy","score":0,"reason":"security policy file not detected","details":["Warn: no security policy file detected","Warn: no security file to analyze","Warn: no security file to analyze","Warn: no security file to analyze"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: MIT License: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Branch-Protection","score":0,"reason":"branch protection not enabled on development/release branches","details":["Warn: branch protection not enabled for branch 'master'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 24 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-20T11:58:13.668Z","repository_id":11670029,"created_at":"2025-08-20T11:58:13.668Z","updated_at":"2025-08-20T11:58:13.668Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":341189360,"owners_count":37709541,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-08-22T15:14:58.755Z","status":"online","status_checked_at":"2026-09-26T02:00:06.440Z","response_time":102,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"kelseyhightower","name":"Kelsey Hightower","uuid":"1123322","kind":"user","description":"","email":"kelsey.hightower@gmail.com","website":null,"location":"Washington","twitter":null,"company":null,"icon_url":"https://avatars.githubusercontent.com/u/1123322?u=e9afe6d5b9bd6c20bbaf40f76b6188619fc24436\u0026v=4","repositories_count":195,"last_synced_at":"2026-09-25T03:11:39.839Z","metadata":{"has_sponsors_listing":false,"funding":null},"html_url":"https://github.com/kelseyhightower","funding_links":[],"total_stars":143349,"followers":24771,"following":13,"created_at":"2022-11-05T15:13:05.765Z","updated_at":"2026-09-25T03:11:39.865Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/kelseyhightower","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/kelseyhightower/repositories"},"tags":[{"name":"v1.4.0","sha":"0b417c4ec4a8a82eecc22a1459a504aa55163d61","kind":"commit","published_at":"2019-05-24T18:54:28.000Z","download_url":"https://codeload.github.com/kelseyhightower/envconfig/tar.gz/v1.4.0","html_url":"https://github.com/kelseyhightower/envconfig/releases/tag/v1.4.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/kelseyhightower/envconfig@v1.4.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kelseyhightower%2Fenvconfig/tags/v1.4.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kelseyhightower%2Fenvconfig/tags/v1.4.0/manifests"},{"name":"v1.3.0","sha":"f611eb38b3875cc3bd991ca91c51d06446afa14c","kind":"commit","published_at":"2017-01-24T16:28:13.000Z","download_url":"https://codeload.github.com/kelseyhightower/envconfig/tar.gz/v1.3.0","html_url":"https://github.com/kelseyhightower/envconfig/releases/tag/v1.3.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/kelseyhightower/envconfig@v1.3.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kelseyhightower%2Fenvconfig/tags/v1.3.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kelseyhightower%2Fenvconfig/tags/v1.3.0/manifests"},{"name":"v1.2.0","sha":"9aca109c9aec4633fced9717c4a09ecab3d33111","kind":"commit","published_at":"2016-10-19T16:24:55.000Z","download_url":"https://codeload.github.com/kelseyhightower/envconfig/tar.gz/v1.2.0","html_url":"https://github.com/kelseyhightower/envconfig/releases/tag/v1.2.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/kelseyhightower/envconfig@v1.2.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kelseyhightower%2Fenvconfig/tags/v1.2.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kelseyhightower%2Fenvconfig/tags/v1.2.0/manifests"},{"name":"1.1.0","sha":"ac12b1f15efba734211a556d8b125110dc538016","kind":"commit","published_at":"2016-03-04T06:38:36.000Z","download_url":"https://codeload.github.com/kelseyhightower/envconfig/tar.gz/1.1.0","html_url":"https://github.com/kelseyhightower/envconfig/releases/tag/1.1.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/kelseyhightower/envconfig@1.1.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kelseyhightower%2Fenvconfig/tags/1.1.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kelseyhightower%2Fenvconfig/tags/1.1.0/manifests"},{"name":"v1.1.0","sha":"ac12b1f15efba734211a556d8b125110dc538016","kind":"commit","published_at":"2016-03-04T06:38:36.000Z","download_url":"https://codeload.github.com/kelseyhightower/envconfig/tar.gz/v1.1.0","html_url":"https://github.com/kelseyhightower/envconfig/releases/tag/v1.1.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/kelseyhightower/envconfig@v1.1.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kelseyhightower%2Fenvconfig/tags/v1.1.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kelseyhightower%2Fenvconfig/tags/v1.1.0/manifests"},{"name":"v1.0.0","sha":"0280e33525f5d88edb71638a80b31724153225ba","kind":"commit","published_at":"2014-03-15T18:19:28.000Z","download_url":"https://codeload.github.com/kelseyhightower/envconfig/tar.gz/v1.0.0","html_url":"https://github.com/kelseyhightower/envconfig/releases/tag/v1.0.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/kelseyhightower/envconfig@v1.0.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kelseyhightower%2Fenvconfig/tags/v1.0.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kelseyhightower%2Fenvconfig/tags/v1.0.0/manifests"}]},"repo_metadata_updated_at":"2026-09-26T10:22:29.233Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":9.345852080216646,"dependent_packages_count":6.999148183520997,"stargazers_count":0.6192784362489998,"forks_count":0.9433951676529707,"average":4.476918466909904},"purl":"pkg:golang/github.com/KelseyHightower/envconfig","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/go/github.com/KelseyHightower/envconfig","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/go/github.com/KelseyHightower/envconfig","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/go/github.com/KelseyHightower/envconfig/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-09-26T01:03:35.347Z","issues_count":48,"pull_requests_count":80,"avg_time_to_close_issue":22378798.545454547,"avg_time_to_close_pull_request":25763564.34090909,"issues_closed_count":22,"pull_requests_closed_count":44,"pull_request_authors_count":66,"issue_authors_count":47,"avg_comments_per_issue":2.3958333333333335,"avg_comments_per_pull_request":1.3875,"merged_pull_requests_count":15,"bot_issues_count":0,"bot_pull_requests_count":0,"past_year_issues_count":0,"past_year_pull_requests_count":9,"past_year_avg_time_to_close_issue":null,"past_year_avg_time_to_close_pull_request":547575.6666666666,"past_year_issues_closed_count":0,"past_year_pull_requests_closed_count":3,"past_year_pull_request_authors_count":5,"past_year_issue_authors_count":0,"past_year_avg_comments_per_issue":null,"past_year_avg_comments_per_pull_request":0.2222222222222222,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":0,"past_year_merged_pull_requests_count":0,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/kelseyhightower%2Fenvconfig/issues","maintainers":[],"active_maintainers":[]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2FKelseyHightower%2Fenvconfig/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2FKelseyHightower%2Fenvconfig/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2FKelseyHightower%2Fenvconfig/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2FKelseyHightower%2Fenvconfig/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2FKelseyHightower%2Fenvconfig/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2FKelseyHightower%2Fenvconfig/codemeta","maintainers":[],"registry":{"name":"proxy.golang.org","url":"https://proxy.golang.org","ecosystem":"go","default":true,"packages_count":2539736,"maintainers_count":0,"namespaces_count":852760,"keywords_count":136985,"github":"golang","metadata":{"funded_packages_count":110283,"sync_missing_packages_cursor":{"timestamp":"2026-09-29T00:04:57.155362Z","path":"github.com/virtengine/virtengine/sdk/specs","version":"v0.0.0-20260928231908-c0c887541540"},"rate_limit":5},"icon_url":"https://github.com/golang.png","created_at":"2022-04-04T15:19:22.939Z","updated_at":"2026-10-01T05:04:10.855Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/namespaces"}},{"id":3494064,"name":"github.com/kelseyhightower/envconfig","ecosystem":"go","description":"Package envconfig implements decoding of environment variables based on a user defined specification.","homepage":"https://github.com/kelseyhightower/envconfig","licenses":"MIT","normalized_licenses":["MIT"],"repository_url":"https://github.com/kelseyhightower/envconfig","keywords_array":[],"namespace":"github.com/kelseyhightower","versions_count":5,"first_release_published_at":"2014-03-15T18:19:28.000Z","latest_release_published_at":"2019-05-24T18:54:28.000Z","latest_release_number":"v1.4.0","last_synced_at":"2026-10-01T03:35:45.860Z","created_at":"2022-04-10T19:21:39.942Z","updated_at":"2026-10-01T03:35:45.860Z","registry_url":"https://pkg.go.dev/github.com/kelseyhightower/envconfig","install_command":"go get github.com/kelseyhightower/envconfig","documentation_url":"https://pkg.go.dev/github.com/kelseyhightower/envconfig#section-documentation","metadata":null,"repo_metadata":{"id":11670029,"uuid":"14179252","full_name":"kelseyhightower/envconfig","owner":"kelseyhightower","description":"Golang library for managing configuration data from environment variables","archived":false,"fork":false,"pushed_at":"2025-06-28T02:01:37.000Z","size":101,"stargazers_count":5469,"open_issues_count":62,"forks_count":397,"subscribers_count":34,"default_branch":"master","last_synced_at":"2026-09-26T06:46:17.193Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":null,"language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/kelseyhightower.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":"MAINTAINERS","copyright":null,"agents":null,"claude":null,"gemini":null,"cursor":null,"copilot":null,"dco":null,"cla":null,"disclosure":null}},"created_at":"2013-11-06T17:01:55.000Z","updated_at":"2026-09-25T14:07:23.000Z","dependencies_parsed_at":"2026-08-06T01:41:57.803Z","dependency_job_id":null,"html_url":"https://github.com/kelseyhightower/envconfig","commit_stats":{"total_commits":108,"total_committers":50,"mean_commits":2.16,"dds":0.8148148148148149,"last_synced_commit":"10e87fe9eaec671f89425dc366f004a9336bcc8f"},"previous_names":[],"tags_count":6,"template":false,"template_full_name":null,"purl":"pkg:github/kelseyhightower/envconfig","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kelseyhightower%2Fenvconfig","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kelseyhightower%2Fenvconfig/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kelseyhightower%2Fenvconfig/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kelseyhightower%2Fenvconfig/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/kelseyhightower","download_url":"https://codeload.github.com/kelseyhightower/envconfig/tar.gz/refs/heads/master","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kelseyhightower%2Fenvconfig/sbom","scorecard":{"id":554485,"data":{"date":"2025-08-11","repo":{"name":"github.com/kelseyhightower/envconfig","commit":"7834011875d613aec60c606b52c2b0fe8949fe91"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":4.2,"checks":[{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Maintained","score":0,"reason":"1 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Code-Review","score":8,"reason":"Found 24/30 approved changesets -- score normalized to 8","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Warn: no topLevel permission defined: .github/workflows/go.yml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/go.yml:19: update your workflow using https://app.stepsecurity.io/secureworkflow/kelseyhightower/envconfig/go.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/go.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/kelseyhightower/envconfig/go.yml/master?enable=pin","Info:   0 out of   2 GitHub-owned GitHubAction dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Security-Policy","score":0,"reason":"security policy file not detected","details":["Warn: no security policy file detected","Warn: no security file to analyze","Warn: no security file to analyze","Warn: no security file to analyze"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: MIT License: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Branch-Protection","score":0,"reason":"branch protection not enabled on development/release branches","details":["Warn: branch protection not enabled for branch 'master'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 24 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-20T11:58:13.668Z","repository_id":11670029,"created_at":"2025-08-20T11:58:13.668Z","updated_at":"2025-08-20T11:58:13.668Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":341189360,"owners_count":37709542,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-08-22T15:14:58.755Z","status":"online","status_checked_at":"2026-09-26T02:00:06.440Z","response_time":102,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"kelseyhightower","name":"Kelsey Hightower","uuid":"1123322","kind":"user","description":"","email":"kelsey.hightower@gmail.com","website":null,"location":"Washington","twitter":null,"company":null,"icon_url":"https://avatars.githubusercontent.com/u/1123322?u=e9afe6d5b9bd6c20bbaf40f76b6188619fc24436\u0026v=4","repositories_count":195,"last_synced_at":"2026-09-25T03:11:39.839Z","metadata":{"has_sponsors_listing":false,"funding":null},"html_url":"https://github.com/kelseyhightower","funding_links":[],"total_stars":143349,"followers":24771,"following":13,"created_at":"2022-11-05T15:13:05.765Z","updated_at":"2026-09-25T03:11:39.865Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/kelseyhightower","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/kelseyhightower/repositories"},"tags":[{"name":"v1.4.0","sha":"0b417c4ec4a8a82eecc22a1459a504aa55163d61","kind":"commit","published_at":"2019-05-24T18:54:28.000Z","download_url":"https://codeload.github.com/kelseyhightower/envconfig/tar.gz/v1.4.0","html_url":"https://github.com/kelseyhightower/envconfig/releases/tag/v1.4.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/kelseyhightower/envconfig@v1.4.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kelseyhightower%2Fenvconfig/tags/v1.4.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kelseyhightower%2Fenvconfig/tags/v1.4.0/manifests"},{"name":"v1.3.0","sha":"f611eb38b3875cc3bd991ca91c51d06446afa14c","kind":"commit","published_at":"2017-01-24T16:28:13.000Z","download_url":"https://codeload.github.com/kelseyhightower/envconfig/tar.gz/v1.3.0","html_url":"https://github.com/kelseyhightower/envconfig/releases/tag/v1.3.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/kelseyhightower/envconfig@v1.3.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kelseyhightower%2Fenvconfig/tags/v1.3.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kelseyhightower%2Fenvconfig/tags/v1.3.0/manifests"},{"name":"v1.2.0","sha":"9aca109c9aec4633fced9717c4a09ecab3d33111","kind":"commit","published_at":"2016-10-19T16:24:55.000Z","download_url":"https://codeload.github.com/kelseyhightower/envconfig/tar.gz/v1.2.0","html_url":"https://github.com/kelseyhightower/envconfig/releases/tag/v1.2.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/kelseyhightower/envconfig@v1.2.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kelseyhightower%2Fenvconfig/tags/v1.2.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kelseyhightower%2Fenvconfig/tags/v1.2.0/manifests"},{"name":"1.1.0","sha":"ac12b1f15efba734211a556d8b125110dc538016","kind":"commit","published_at":"2016-03-04T06:38:36.000Z","download_url":"https://codeload.github.com/kelseyhightower/envconfig/tar.gz/1.1.0","html_url":"https://github.com/kelseyhightower/envconfig/releases/tag/1.1.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/kelseyhightower/envconfig@1.1.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kelseyhightower%2Fenvconfig/tags/1.1.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kelseyhightower%2Fenvconfig/tags/1.1.0/manifests"},{"name":"v1.1.0","sha":"ac12b1f15efba734211a556d8b125110dc538016","kind":"commit","published_at":"2016-03-04T06:38:36.000Z","download_url":"https://codeload.github.com/kelseyhightower/envconfig/tar.gz/v1.1.0","html_url":"https://github.com/kelseyhightower/envconfig/releases/tag/v1.1.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/kelseyhightower/envconfig@v1.1.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kelseyhightower%2Fenvconfig/tags/v1.1.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kelseyhightower%2Fenvconfig/tags/v1.1.0/manifests"},{"name":"v1.0.0","sha":"0280e33525f5d88edb71638a80b31724153225ba","kind":"commit","published_at":"2014-03-15T18:19:28.000Z","download_url":"https://codeload.github.com/kelseyhightower/envconfig/tar.gz/v1.0.0","html_url":"https://github.com/kelseyhightower/envconfig/releases/tag/v1.0.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/kelseyhightower/envconfig@v1.0.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kelseyhightower%2Fenvconfig/tags/v1.0.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kelseyhightower%2Fenvconfig/tags/v1.0.0/manifests"}]},"repo_metadata_updated_at":"2026-09-26T10:22:29.647Z","dependent_packages_count":4481,"downloads":null,"downloads_period":null,"dependent_repos_count":9196,"rankings":{"downloads":null,"dependent_repos_count":0.07829689784698492,"dependent_packages_count":0.04468408947190987,"stargazers_count":0.9983103828668435,"forks_count":1.5381101422908974,"docker_downloads_count":0.09265964089152737,"average":0.5504122306736325},"purl":"pkg:golang/github.com/kelseyhightower/envconfig","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/go/github.com/kelseyhightower/envconfig","docker_dependents_count":1670,"docker_downloads_count":3729114867,"usage_url":"https://repos.ecosyste.ms/usage/go/github.com/kelseyhightower/envconfig","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/go/github.com/kelseyhightower/envconfig/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-09-26T01:03:35.347Z","issues_count":48,"pull_requests_count":80,"avg_time_to_close_issue":22378798.545454547,"avg_time_to_close_pull_request":25763564.34090909,"issues_closed_count":22,"pull_requests_closed_count":44,"pull_request_authors_count":66,"issue_authors_count":47,"avg_comments_per_issue":2.3958333333333335,"avg_comments_per_pull_request":1.3875,"merged_pull_requests_count":15,"bot_issues_count":0,"bot_pull_requests_count":0,"past_year_issues_count":0,"past_year_pull_requests_count":9,"past_year_avg_time_to_close_issue":null,"past_year_avg_time_to_close_pull_request":547575.6666666666,"past_year_issues_closed_count":0,"past_year_pull_requests_closed_count":3,"past_year_pull_request_authors_count":5,"past_year_issue_authors_count":0,"past_year_avg_comments_per_issue":null,"past_year_avg_comments_per_pull_request":0.2222222222222222,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":0,"past_year_merged_pull_requests_count":0,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/kelseyhightower%2Fenvconfig/issues","maintainers":[],"active_maintainers":[]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fkelseyhightower%2Fenvconfig/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fkelseyhightower%2Fenvconfig/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fkelseyhightower%2Fenvconfig/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fkelseyhightower%2Fenvconfig/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fkelseyhightower%2Fenvconfig/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fkelseyhightower%2Fenvconfig/codemeta","maintainers":[],"registry":{"name":"proxy.golang.org","url":"https://proxy.golang.org","ecosystem":"go","default":true,"packages_count":2539736,"maintainers_count":0,"namespaces_count":852760,"keywords_count":136985,"github":"golang","metadata":{"funded_packages_count":110283,"sync_missing_packages_cursor":{"timestamp":"2026-09-29T00:04:57.155362Z","path":"github.com/virtengine/virtengine/sdk/specs","version":"v0.0.0-20260928231908-c0c887541540"},"rate_limit":5},"icon_url":"https://github.com/golang.png","created_at":"2022-04-04T15:19:22.939Z","updated_at":"2026-10-01T05:04:10.855Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/namespaces"}},{"id":8211585,"name":"github.com/kelseyhightower/envconfiG","ecosystem":"go","description":"Package envconfig implements decoding of environment variables based on a user defined specification.","homepage":"https://github.com/kelseyhightower/envconfiG","licenses":"MIT","normalized_licenses":["MIT"],"repository_url":"https://github.com/kelseyhightower/envconfiG","keywords_array":[],"namespace":"github.com/kelseyhightower","versions_count":5,"first_release_published_at":"2014-03-15T18:19:28.000Z","latest_release_published_at":"2019-05-24T18:54:28.000Z","latest_release_number":"v1.4.0","last_synced_at":"2026-10-01T03:35:51.244Z","created_at":"2023-09-05T03:09:28.344Z","updated_at":"2026-10-01T03:35:51.245Z","registry_url":"https://pkg.go.dev/github.com/kelseyhightower/envconfiG","install_command":"go get github.com/kelseyhightower/envconfiG","documentation_url":"https://pkg.go.dev/github.com/kelseyhightower/envconfiG#section-documentation","metadata":null,"repo_metadata":{"id":11670029,"uuid":"14179252","full_name":"kelseyhightower/envconfig","owner":"kelseyhightower","description":"Golang library for managing configuration data from environment variables","archived":false,"fork":false,"pushed_at":"2025-06-28T02:01:37.000Z","size":101,"stargazers_count":5469,"open_issues_count":62,"forks_count":397,"subscribers_count":34,"default_branch":"master","last_synced_at":"2026-09-26T06:46:17.193Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":null,"language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/kelseyhightower.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":"MAINTAINERS","copyright":null,"agents":null,"claude":null,"gemini":null,"cursor":null,"copilot":null,"dco":null,"cla":null,"disclosure":null}},"created_at":"2013-11-06T17:01:55.000Z","updated_at":"2026-09-25T14:07:23.000Z","dependencies_parsed_at":"2026-08-06T01:41:57.803Z","dependency_job_id":null,"html_url":"https://github.com/kelseyhightower/envconfig","commit_stats":{"total_commits":108,"total_committers":50,"mean_commits":2.16,"dds":0.8148148148148149,"last_synced_commit":"10e87fe9eaec671f89425dc366f004a9336bcc8f"},"previous_names":[],"tags_count":6,"template":false,"template_full_name":null,"purl":"pkg:github/kelseyhightower/envconfig","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kelseyhightower%2Fenvconfig","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kelseyhightower%2Fenvconfig/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kelseyhightower%2Fenvconfig/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kelseyhightower%2Fenvconfig/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/kelseyhightower","download_url":"https://codeload.github.com/kelseyhightower/envconfig/tar.gz/refs/heads/master","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kelseyhightower%2Fenvconfig/sbom","scorecard":{"id":554485,"data":{"date":"2025-08-11","repo":{"name":"github.com/kelseyhightower/envconfig","commit":"7834011875d613aec60c606b52c2b0fe8949fe91"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":4.2,"checks":[{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Maintained","score":0,"reason":"1 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Code-Review","score":8,"reason":"Found 24/30 approved changesets -- score normalized to 8","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Warn: no topLevel permission defined: .github/workflows/go.yml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/go.yml:19: update your workflow using https://app.stepsecurity.io/secureworkflow/kelseyhightower/envconfig/go.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/go.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/kelseyhightower/envconfig/go.yml/master?enable=pin","Info:   0 out of   2 GitHub-owned GitHubAction dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Security-Policy","score":0,"reason":"security policy file not detected","details":["Warn: no security policy file detected","Warn: no security file to analyze","Warn: no security file to analyze","Warn: no security file to analyze"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: MIT License: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Branch-Protection","score":0,"reason":"branch protection not enabled on development/release branches","details":["Warn: branch protection not enabled for branch 'master'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 24 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-20T11:58:13.668Z","repository_id":11670029,"created_at":"2025-08-20T11:58:13.668Z","updated_at":"2025-08-20T11:58:13.668Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":341189360,"owners_count":37709542,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-08-22T15:14:58.755Z","status":"online","status_checked_at":"2026-09-26T02:00:06.440Z","response_time":102,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"kelseyhightower","name":"Kelsey Hightower","uuid":"1123322","kind":"user","description":"","email":"kelsey.hightower@gmail.com","website":null,"location":"Washington","twitter":null,"company":null,"icon_url":"https://avatars.githubusercontent.com/u/1123322?u=e9afe6d5b9bd6c20bbaf40f76b6188619fc24436\u0026v=4","repositories_count":195,"last_synced_at":"2026-09-25T03:11:39.839Z","metadata":{"has_sponsors_listing":false,"funding":null},"html_url":"https://github.com/kelseyhightower","funding_links":[],"total_stars":143349,"followers":24771,"following":13,"created_at":"2022-11-05T15:13:05.765Z","updated_at":"2026-09-25T03:11:39.865Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/kelseyhightower","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/kelseyhightower/repositories"},"tags":[{"name":"v1.4.0","sha":"0b417c4ec4a8a82eecc22a1459a504aa55163d61","kind":"commit","published_at":"2019-05-24T18:54:28.000Z","download_url":"https://codeload.github.com/kelseyhightower/envconfig/tar.gz/v1.4.0","html_url":"https://github.com/kelseyhightower/envconfig/releases/tag/v1.4.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/kelseyhightower/envconfig@v1.4.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kelseyhightower%2Fenvconfig/tags/v1.4.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kelseyhightower%2Fenvconfig/tags/v1.4.0/manifests"},{"name":"v1.3.0","sha":"f611eb38b3875cc3bd991ca91c51d06446afa14c","kind":"commit","published_at":"2017-01-24T16:28:13.000Z","download_url":"https://codeload.github.com/kelseyhightower/envconfig/tar.gz/v1.3.0","html_url":"https://github.com/kelseyhightower/envconfig/releases/tag/v1.3.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/kelseyhightower/envconfig@v1.3.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kelseyhightower%2Fenvconfig/tags/v1.3.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kelseyhightower%2Fenvconfig/tags/v1.3.0/manifests"},{"name":"v1.2.0","sha":"9aca109c9aec4633fced9717c4a09ecab3d33111","kind":"commit","published_at":"2016-10-19T16:24:55.000Z","download_url":"https://codeload.github.com/kelseyhightower/envconfig/tar.gz/v1.2.0","html_url":"https://github.com/kelseyhightower/envconfig/releases/tag/v1.2.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/kelseyhightower/envconfig@v1.2.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kelseyhightower%2Fenvconfig/tags/v1.2.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kelseyhightower%2Fenvconfig/tags/v1.2.0/manifests"},{"name":"1.1.0","sha":"ac12b1f15efba734211a556d8b125110dc538016","kind":"commit","published_at":"2016-03-04T06:38:36.000Z","download_url":"https://codeload.github.com/kelseyhightower/envconfig/tar.gz/1.1.0","html_url":"https://github.com/kelseyhightower/envconfig/releases/tag/1.1.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/kelseyhightower/envconfig@1.1.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kelseyhightower%2Fenvconfig/tags/1.1.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kelseyhightower%2Fenvconfig/tags/1.1.0/manifests"},{"name":"v1.1.0","sha":"ac12b1f15efba734211a556d8b125110dc538016","kind":"commit","published_at":"2016-03-04T06:38:36.000Z","download_url":"https://codeload.github.com/kelseyhightower/envconfig/tar.gz/v1.1.0","html_url":"https://github.com/kelseyhightower/envconfig/releases/tag/v1.1.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/kelseyhightower/envconfig@v1.1.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kelseyhightower%2Fenvconfig/tags/v1.1.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kelseyhightower%2Fenvconfig/tags/v1.1.0/manifests"},{"name":"v1.0.0","sha":"0280e33525f5d88edb71638a80b31724153225ba","kind":"commit","published_at":"2014-03-15T18:19:28.000Z","download_url":"https://codeload.github.com/kelseyhightower/envconfig/tar.gz/v1.0.0","html_url":"https://github.com/kelseyhightower/envconfig/releases/tag/v1.0.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/kelseyhightower/envconfig@v1.0.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kelseyhightower%2Fenvconfig/tags/v1.0.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kelseyhightower%2Fenvconfig/tags/v1.0.0/manifests"}]},"repo_metadata_updated_at":"2026-09-26T10:22:30.489Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":10.56745293061189,"dependent_packages_count":8.899321458400431,"stargazers_count":0.9798476674071722,"forks_count":1.4804543990567016,"docker_downloads_count":null,"average":5.481769113869048},"purl":"pkg:golang/github.com/kelseyhightower/envconfiG","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/go/github.com/kelseyhightower/envconfiG","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/go/github.com/kelseyhightower/envconfiG","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/go/github.com/kelseyhightower/envconfiG/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-09-26T01:03:35.347Z","issues_count":48,"pull_requests_count":80,"avg_time_to_close_issue":22378798.545454547,"avg_time_to_close_pull_request":25763564.34090909,"issues_closed_count":22,"pull_requests_closed_count":44,"pull_request_authors_count":66,"issue_authors_count":47,"avg_comments_per_issue":2.3958333333333335,"avg_comments_per_pull_request":1.3875,"merged_pull_requests_count":15,"bot_issues_count":0,"bot_pull_requests_count":0,"past_year_issues_count":0,"past_year_pull_requests_count":9,"past_year_avg_time_to_close_issue":null,"past_year_avg_time_to_close_pull_request":547575.6666666666,"past_year_issues_closed_count":0,"past_year_pull_requests_closed_count":3,"past_year_pull_request_authors_count":5,"past_year_issue_authors_count":0,"past_year_avg_comments_per_issue":null,"past_year_avg_comments_per_pull_request":0.2222222222222222,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":0,"past_year_merged_pull_requests_count":0,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/kelseyhightower%2Fenvconfig/issues","maintainers":[],"active_maintainers":[]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fkelseyhightower%2FenvconfiG/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fkelseyhightower%2FenvconfiG/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fkelseyhightower%2FenvconfiG/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fkelseyhightower%2FenvconfiG/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fkelseyhightower%2FenvconfiG/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fkelseyhightower%2FenvconfiG/codemeta","maintainers":[],"registry":{"name":"proxy.golang.org","url":"https://proxy.golang.org","ecosystem":"go","default":true,"packages_count":2539736,"maintainers_count":0,"namespaces_count":852760,"keywords_count":136985,"github":"golang","metadata":{"funded_packages_count":110283,"sync_missing_packages_cursor":{"timestamp":"2026-09-29T00:04:57.155362Z","path":"github.com/virtengine/virtengine/sdk/specs","version":"v0.0.0-20260928231908-c0c887541540"},"rate_limit":5},"icon_url":"https://github.com/golang.png","created_at":"2022-04-04T15:19:22.939Z","updated_at":"2026-10-01T05:04:10.855Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/namespaces"}},{"id":7610660,"name":"github.com/kelseyHightower/envconfig","ecosystem":"go","description":"Package envconfig implements decoding of environment variables based on a user defined specification.","homepage":"https://github.com/kelseyHightower/envconfig","licenses":"MIT","normalized_licenses":["MIT"],"repository_url":"https://github.com/kelseyHightower/envconfig","keywords_array":[],"namespace":"github.com/kelseyHightower","versions_count":5,"first_release_published_at":"2014-03-15T18:19:28.000Z","latest_release_published_at":"2019-05-24T18:54:28.000Z","latest_release_number":"v1.4.0","last_synced_at":"2026-10-01T03:35:53.825Z","created_at":"2023-04-21T00:54:20.530Z","updated_at":"2026-10-01T03:35:53.825Z","registry_url":"https://pkg.go.dev/github.com/kelseyHightower/envconfig","install_command":"go get github.com/kelseyHightower/envconfig","documentation_url":"https://pkg.go.dev/github.com/kelseyHightower/envconfig#section-documentation","metadata":null,"repo_metadata":{"id":11670029,"uuid":"14179252","full_name":"kelseyhightower/envconfig","owner":"kelseyhightower","description":"Golang library for managing configuration data from environment variables","archived":false,"fork":false,"pushed_at":"2025-06-28T02:01:37.000Z","size":101,"stargazers_count":5469,"open_issues_count":62,"forks_count":397,"subscribers_count":34,"default_branch":"master","last_synced_at":"2026-09-26T06:46:17.193Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":null,"language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/kelseyhightower.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":"MAINTAINERS","copyright":null,"agents":null,"claude":null,"gemini":null,"cursor":null,"copilot":null,"dco":null,"cla":null,"disclosure":null}},"created_at":"2013-11-06T17:01:55.000Z","updated_at":"2026-09-25T14:07:23.000Z","dependencies_parsed_at":"2026-08-06T01:41:57.803Z","dependency_job_id":null,"html_url":"https://github.com/kelseyhightower/envconfig","commit_stats":{"total_commits":108,"total_committers":50,"mean_commits":2.16,"dds":0.8148148148148149,"last_synced_commit":"10e87fe9eaec671f89425dc366f004a9336bcc8f"},"previous_names":[],"tags_count":6,"template":false,"template_full_name":null,"purl":"pkg:github/kelseyhightower/envconfig","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kelseyhightower%2Fenvconfig","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kelseyhightower%2Fenvconfig/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kelseyhightower%2Fenvconfig/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kelseyhightower%2Fenvconfig/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/kelseyhightower","download_url":"https://codeload.github.com/kelseyhightower/envconfig/tar.gz/refs/heads/master","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kelseyhightower%2Fenvconfig/sbom","scorecard":{"id":554485,"data":{"date":"2025-08-11","repo":{"name":"github.com/kelseyhightower/envconfig","commit":"7834011875d613aec60c606b52c2b0fe8949fe91"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":4.2,"checks":[{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Maintained","score":0,"reason":"1 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Code-Review","score":8,"reason":"Found 24/30 approved changesets -- score normalized to 8","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Warn: no topLevel permission defined: .github/workflows/go.yml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/go.yml:19: update your workflow using https://app.stepsecurity.io/secureworkflow/kelseyhightower/envconfig/go.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/go.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/kelseyhightower/envconfig/go.yml/master?enable=pin","Info:   0 out of   2 GitHub-owned GitHubAction dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Security-Policy","score":0,"reason":"security policy file not detected","details":["Warn: no security policy file detected","Warn: no security file to analyze","Warn: no security file to analyze","Warn: no security file to analyze"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: MIT License: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Branch-Protection","score":0,"reason":"branch protection not enabled on development/release branches","details":["Warn: branch protection not enabled for branch 'master'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 24 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-20T11:58:13.668Z","repository_id":11670029,"created_at":"2025-08-20T11:58:13.668Z","updated_at":"2025-08-20T11:58:13.668Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":341189360,"owners_count":37709542,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-08-22T15:14:58.755Z","status":"online","status_checked_at":"2026-09-26T02:00:06.440Z","response_time":102,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"kelseyhightower","name":"Kelsey Hightower","uuid":"1123322","kind":"user","description":"","email":"kelsey.hightower@gmail.com","website":null,"location":"Washington","twitter":null,"company":null,"icon_url":"https://avatars.githubusercontent.com/u/1123322?u=e9afe6d5b9bd6c20bbaf40f76b6188619fc24436\u0026v=4","repositories_count":195,"last_synced_at":"2026-09-25T03:11:39.839Z","metadata":{"has_sponsors_listing":false,"funding":null},"html_url":"https://github.com/kelseyhightower","funding_links":[],"total_stars":143349,"followers":24771,"following":13,"created_at":"2022-11-05T15:13:05.765Z","updated_at":"2026-09-25T03:11:39.865Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/kelseyhightower","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/kelseyhightower/repositories"},"tags":[{"name":"v1.4.0","sha":"0b417c4ec4a8a82eecc22a1459a504aa55163d61","kind":"commit","published_at":"2019-05-24T18:54:28.000Z","download_url":"https://codeload.github.com/kelseyhightower/envconfig/tar.gz/v1.4.0","html_url":"https://github.com/kelseyhightower/envconfig/releases/tag/v1.4.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/kelseyhightower/envconfig@v1.4.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kelseyhightower%2Fenvconfig/tags/v1.4.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kelseyhightower%2Fenvconfig/tags/v1.4.0/manifests"},{"name":"v1.3.0","sha":"f611eb38b3875cc3bd991ca91c51d06446afa14c","kind":"commit","published_at":"2017-01-24T16:28:13.000Z","download_url":"https://codeload.github.com/kelseyhightower/envconfig/tar.gz/v1.3.0","html_url":"https://github.com/kelseyhightower/envconfig/releases/tag/v1.3.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/kelseyhightower/envconfig@v1.3.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kelseyhightower%2Fenvconfig/tags/v1.3.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kelseyhightower%2Fenvconfig/tags/v1.3.0/manifests"},{"name":"v1.2.0","sha":"9aca109c9aec4633fced9717c4a09ecab3d33111","kind":"commit","published_at":"2016-10-19T16:24:55.000Z","download_url":"https://codeload.github.com/kelseyhightower/envconfig/tar.gz/v1.2.0","html_url":"https://github.com/kelseyhightower/envconfig/releases/tag/v1.2.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/kelseyhightower/envconfig@v1.2.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kelseyhightower%2Fenvconfig/tags/v1.2.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kelseyhightower%2Fenvconfig/tags/v1.2.0/manifests"},{"name":"1.1.0","sha":"ac12b1f15efba734211a556d8b125110dc538016","kind":"commit","published_at":"2016-03-04T06:38:36.000Z","download_url":"https://codeload.github.com/kelseyhightower/envconfig/tar.gz/1.1.0","html_url":"https://github.com/kelseyhightower/envconfig/releases/tag/1.1.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/kelseyhightower/envconfig@1.1.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kelseyhightower%2Fenvconfig/tags/1.1.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kelseyhightower%2Fenvconfig/tags/1.1.0/manifests"},{"name":"v1.1.0","sha":"ac12b1f15efba734211a556d8b125110dc538016","kind":"commit","published_at":"2016-03-04T06:38:36.000Z","download_url":"https://codeload.github.com/kelseyhightower/envconfig/tar.gz/v1.1.0","html_url":"https://github.com/kelseyhightower/envconfig/releases/tag/v1.1.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/kelseyhightower/envconfig@v1.1.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kelseyhightower%2Fenvconfig/tags/v1.1.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kelseyhightower%2Fenvconfig/tags/v1.1.0/manifests"},{"name":"v1.0.0","sha":"0280e33525f5d88edb71638a80b31724153225ba","kind":"commit","published_at":"2014-03-15T18:19:28.000Z","download_url":"https://codeload.github.com/kelseyhightower/envconfig/tar.gz/v1.0.0","html_url":"https://github.com/kelseyhightower/envconfig/releases/tag/v1.0.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/kelseyhightower/envconfig@v1.0.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kelseyhightower%2Fenvconfig/tags/v1.0.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kelseyhightower%2Fenvconfig/tags/v1.0.0/manifests"}]},"repo_metadata_updated_at":"2026-09-26T10:22:29.830Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":9.309369929259201,"dependent_packages_count":8.0797707346991,"stargazers_count":0.9874855284194277,"forks_count":1.4719573591249444,"average":4.962145887875669},"purl":"pkg:golang/github.com/kelseyHightower/envconfig","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/go/github.com/kelseyHightower/envconfig","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/go/github.com/kelseyHightower/envconfig","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/go/github.com/kelseyHightower/envconfig/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-09-26T01:03:35.347Z","issues_count":48,"pull_requests_count":80,"avg_time_to_close_issue":22378798.545454547,"avg_time_to_close_pull_request":25763564.34090909,"issues_closed_count":22,"pull_requests_closed_count":44,"pull_request_authors_count":66,"issue_authors_count":47,"avg_comments_per_issue":2.3958333333333335,"avg_comments_per_pull_request":1.3875,"merged_pull_requests_count":15,"bot_issues_count":0,"bot_pull_requests_count":0,"past_year_issues_count":0,"past_year_pull_requests_count":9,"past_year_avg_time_to_close_issue":null,"past_year_avg_time_to_close_pull_request":547575.6666666666,"past_year_issues_closed_count":0,"past_year_pull_requests_closed_count":3,"past_year_pull_request_authors_count":5,"past_year_issue_authors_count":0,"past_year_avg_comments_per_issue":null,"past_year_avg_comments_per_pull_request":0.2222222222222222,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":0,"past_year_merged_pull_requests_count":0,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/kelseyhightower%2Fenvconfig/issues","maintainers":[],"active_maintainers":[]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2FkelseyHightower%2Fenvconfig/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2FkelseyHightower%2Fenvconfig/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2FkelseyHightower%2Fenvconfig/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2FkelseyHightower%2Fenvconfig/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2FkelseyHightower%2Fenvconfig/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2FkelseyHightower%2Fenvconfig/codemeta","maintainers":[],"registry":{"name":"proxy.golang.org","url":"https://proxy.golang.org","ecosystem":"go","default":true,"packages_count":2539736,"maintainers_count":0,"namespaces_count":852760,"keywords_count":136985,"github":"golang","metadata":{"funded_packages_count":110283,"sync_missing_packages_cursor":{"timestamp":"2026-09-29T00:04:57.155362Z","path":"github.com/virtengine/virtengine/sdk/specs","version":"v0.0.0-20260928231908-c0c887541540"},"rate_limit":5},"icon_url":"https://github.com/golang.png","created_at":"2022-04-04T15:19:22.939Z","updated_at":"2026-10-01T05:04:10.855Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/namespaces"}},{"id":3834889,"name":"github.com/Kelseyhightower/envconfig","ecosystem":"go","description":"Package envconfig implements decoding of environment variables based on a user defined specification.","homepage":"https://github.com/Kelseyhightower/envconfig","licenses":"MIT","normalized_licenses":["MIT"],"repository_url":"https://github.com/Kelseyhightower/envconfig","keywords_array":[],"namespace":"github.com/Kelseyhightower","versions_count":5,"first_release_published_at":"2014-03-15T18:19:28.000Z","latest_release_published_at":"2019-05-24T18:54:28.000Z","latest_release_number":"v1.4.0","last_synced_at":"2026-10-01T03:35:53.844Z","created_at":"2022-04-11T20:13:29.086Z","updated_at":"2026-10-01T03:35:53.844Z","registry_url":"https://pkg.go.dev/github.com/Kelseyhightower/envconfig","install_command":"go get github.com/Kelseyhightower/envconfig","documentation_url":"https://pkg.go.dev/github.com/Kelseyhightower/envconfig#section-documentation","metadata":null,"repo_metadata":{"id":11670029,"uuid":"14179252","full_name":"kelseyhightower/envconfig","owner":"kelseyhightower","description":"Golang library for managing configuration data from environment variables","archived":false,"fork":false,"pushed_at":"2025-06-28T02:01:37.000Z","size":101,"stargazers_count":5469,"open_issues_count":62,"forks_count":397,"subscribers_count":34,"default_branch":"master","last_synced_at":"2026-09-26T06:46:17.193Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":null,"language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/kelseyhightower.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":"MAINTAINERS","copyright":null,"agents":null,"claude":null,"gemini":null,"cursor":null,"copilot":null,"dco":null,"cla":null,"disclosure":null}},"created_at":"2013-11-06T17:01:55.000Z","updated_at":"2026-09-25T14:07:23.000Z","dependencies_parsed_at":"2026-08-06T01:41:57.803Z","dependency_job_id":null,"html_url":"https://github.com/kelseyhightower/envconfig","commit_stats":{"total_commits":108,"total_committers":50,"mean_commits":2.16,"dds":0.8148148148148149,"last_synced_commit":"10e87fe9eaec671f89425dc366f004a9336bcc8f"},"previous_names":[],"tags_count":6,"template":false,"template_full_name":null,"purl":"pkg:github/kelseyhightower/envconfig","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kelseyhightower%2Fenvconfig","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kelseyhightower%2Fenvconfig/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kelseyhightower%2Fenvconfig/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kelseyhightower%2Fenvconfig/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/kelseyhightower","download_url":"https://codeload.github.com/kelseyhightower/envconfig/tar.gz/refs/heads/master","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kelseyhightower%2Fenvconfig/sbom","scorecard":{"id":554485,"data":{"date":"2025-08-11","repo":{"name":"github.com/kelseyhightower/envconfig","commit":"7834011875d613aec60c606b52c2b0fe8949fe91"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":4.2,"checks":[{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Maintained","score":0,"reason":"1 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Code-Review","score":8,"reason":"Found 24/30 approved changesets -- score normalized to 8","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Warn: no topLevel permission defined: .github/workflows/go.yml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/go.yml:19: update your workflow using https://app.stepsecurity.io/secureworkflow/kelseyhightower/envconfig/go.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/go.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/kelseyhightower/envconfig/go.yml/master?enable=pin","Info:   0 out of   2 GitHub-owned GitHubAction dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Security-Policy","score":0,"reason":"security policy file not detected","details":["Warn: no security policy file detected","Warn: no security file to analyze","Warn: no security file to analyze","Warn: no security file to analyze"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: MIT License: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Branch-Protection","score":0,"reason":"branch protection not enabled on development/release branches","details":["Warn: branch protection not enabled for branch 'master'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 24 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-20T11:58:13.668Z","repository_id":11670029,"created_at":"2025-08-20T11:58:13.668Z","updated_at":"2025-08-20T11:58:13.668Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":341189360,"owners_count":37709542,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-08-22T15:14:58.755Z","status":"online","status_checked_at":"2026-09-26T02:00:06.440Z","response_time":102,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"kelseyhightower","name":"Kelsey Hightower","uuid":"1123322","kind":"user","description":"","email":"kelsey.hightower@gmail.com","website":null,"location":"Washington","twitter":null,"company":null,"icon_url":"https://avatars.githubusercontent.com/u/1123322?u=e9afe6d5b9bd6c20bbaf40f76b6188619fc24436\u0026v=4","repositories_count":195,"last_synced_at":"2026-09-25T03:11:39.839Z","metadata":{"has_sponsors_listing":false,"funding":null},"html_url":"https://github.com/kelseyhightower","funding_links":[],"total_stars":143349,"followers":24771,"following":13,"created_at":"2022-11-05T15:13:05.765Z","updated_at":"2026-09-25T03:11:39.865Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/kelseyhightower","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/kelseyhightower/repositories"},"tags":[{"name":"v1.4.0","sha":"0b417c4ec4a8a82eecc22a1459a504aa55163d61","kind":"commit","published_at":"2019-05-24T18:54:28.000Z","download_url":"https://codeload.github.com/kelseyhightower/envconfig/tar.gz/v1.4.0","html_url":"https://github.com/kelseyhightower/envconfig/releases/tag/v1.4.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/kelseyhightower/envconfig@v1.4.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kelseyhightower%2Fenvconfig/tags/v1.4.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kelseyhightower%2Fenvconfig/tags/v1.4.0/manifests"},{"name":"v1.3.0","sha":"f611eb38b3875cc3bd991ca91c51d06446afa14c","kind":"commit","published_at":"2017-01-24T16:28:13.000Z","download_url":"https://codeload.github.com/kelseyhightower/envconfig/tar.gz/v1.3.0","html_url":"https://github.com/kelseyhightower/envconfig/releases/tag/v1.3.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/kelseyhightower/envconfig@v1.3.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kelseyhightower%2Fenvconfig/tags/v1.3.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kelseyhightower%2Fenvconfig/tags/v1.3.0/manifests"},{"name":"v1.2.0","sha":"9aca109c9aec4633fced9717c4a09ecab3d33111","kind":"commit","published_at":"2016-10-19T16:24:55.000Z","download_url":"https://codeload.github.com/kelseyhightower/envconfig/tar.gz/v1.2.0","html_url":"https://github.com/kelseyhightower/envconfig/releases/tag/v1.2.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/kelseyhightower/envconfig@v1.2.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kelseyhightower%2Fenvconfig/tags/v1.2.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kelseyhightower%2Fenvconfig/tags/v1.2.0/manifests"},{"name":"1.1.0","sha":"ac12b1f15efba734211a556d8b125110dc538016","kind":"commit","published_at":"2016-03-04T06:38:36.000Z","download_url":"https://codeload.github.com/kelseyhightower/envconfig/tar.gz/1.1.0","html_url":"https://github.com/kelseyhightower/envconfig/releases/tag/1.1.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/kelseyhightower/envconfig@1.1.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kelseyhightower%2Fenvconfig/tags/1.1.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kelseyhightower%2Fenvconfig/tags/1.1.0/manifests"},{"name":"v1.1.0","sha":"ac12b1f15efba734211a556d8b125110dc538016","kind":"commit","published_at":"2016-03-04T06:38:36.000Z","download_url":"https://codeload.github.com/kelseyhightower/envconfig/tar.gz/v1.1.0","html_url":"https://github.com/kelseyhightower/envconfig/releases/tag/v1.1.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/kelseyhightower/envconfig@v1.1.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kelseyhightower%2Fenvconfig/tags/v1.1.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kelseyhightower%2Fenvconfig/tags/v1.1.0/manifests"},{"name":"v1.0.0","sha":"0280e33525f5d88edb71638a80b31724153225ba","kind":"commit","published_at":"2014-03-15T18:19:28.000Z","download_url":"https://codeload.github.com/kelseyhightower/envconfig/tar.gz/v1.0.0","html_url":"https://github.com/kelseyhightower/envconfig/releases/tag/v1.0.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/kelseyhightower/envconfig@v1.0.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kelseyhightower%2Fenvconfig/tags/v1.0.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kelseyhightower%2Fenvconfig/tags/v1.0.0/manifests"}]},"repo_metadata_updated_at":"2026-09-26T10:22:40.123Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":9.345852080216646,"dependent_packages_count":6.999148183520997,"stargazers_count":0.6192784362489998,"forks_count":0.9433951676529707,"average":4.476918466909904},"purl":"pkg:golang/github.com/Kelseyhightower/envconfig","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/go/github.com/Kelseyhightower/envconfig","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/go/github.com/Kelseyhightower/envconfig","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/go/github.com/Kelseyhightower/envconfig/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-09-26T01:03:35.347Z","issues_count":48,"pull_requests_count":80,"avg_time_to_close_issue":22378798.545454547,"avg_time_to_close_pull_request":25763564.34090909,"issues_closed_count":22,"pull_requests_closed_count":44,"pull_request_authors_count":66,"issue_authors_count":47,"avg_comments_per_issue":2.3958333333333335,"avg_comments_per_pull_request":1.3875,"merged_pull_requests_count":15,"bot_issues_count":0,"bot_pull_requests_count":0,"past_year_issues_count":0,"past_year_pull_requests_count":9,"past_year_avg_time_to_close_issue":null,"past_year_avg_time_to_close_pull_request":547575.6666666666,"past_year_issues_closed_count":0,"past_year_pull_requests_closed_count":3,"past_year_pull_request_authors_count":5,"past_year_issue_authors_count":0,"past_year_avg_comments_per_issue":null,"past_year_avg_comments_per_pull_request":0.2222222222222222,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":0,"past_year_merged_pull_requests_count":0,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/kelseyhightower%2Fenvconfig/issues","maintainers":[],"active_maintainers":[]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2FKelseyhightower%2Fenvconfig/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2FKelseyhightower%2Fenvconfig/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2FKelseyhightower%2Fenvconfig/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2FKelseyhightower%2Fenvconfig/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2FKelseyhightower%2Fenvconfig/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2FKelseyhightower%2Fenvconfig/codemeta","maintainers":[],"registry":{"name":"proxy.golang.org","url":"https://proxy.golang.org","ecosystem":"go","default":true,"packages_count":2539736,"maintainers_count":0,"namespaces_count":852760,"keywords_count":136985,"github":"golang","metadata":{"funded_packages_count":110283,"sync_missing_packages_cursor":{"timestamp":"2026-09-29T00:04:57.155362Z","path":"github.com/virtengine/virtengine/sdk/specs","version":"v0.0.0-20260928231908-c0c887541540"},"rate_limit":5},"icon_url":"https://github.com/golang.png","created_at":"2022-04-04T15:19:22.939Z","updated_at":"2026-10-01T05:04:10.855Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/namespaces"}},{"id":4030656,"name":"gopkg.in/kelseyhightower/envconfig.v1","ecosystem":"go","description":"Package envconfig implements decoding of environment variables based on a user defined specification.","homepage":"https://github.com/kelseyhightower/envconfig","licenses":"MIT","normalized_licenses":["MIT"],"repository_url":"https://github.com/kelseyhightower/envconfig","keywords_array":[],"namespace":"gopkg.in/kelseyhightower","versions_count":4,"first_release_published_at":"2014-03-15T18:19:28.000Z","latest_release_published_at":"2017-01-24T16:28:13.000Z","latest_release_number":"v1.3.0","last_synced_at":"2026-10-01T03:35:56.691Z","created_at":"2022-04-12T09:04:40.557Z","updated_at":"2026-10-01T03:35:56.691Z","registry_url":"https://pkg.go.dev/gopkg.in/kelseyhightower/envconfig.v1","install_command":"go get gopkg.in/kelseyhightower/envconfig.v1","documentation_url":"https://pkg.go.dev/gopkg.in/kelseyhightower/envconfig.v1#section-documentation","metadata":null,"repo_metadata":{"id":11670029,"uuid":"14179252","full_name":"kelseyhightower/envconfig","owner":"kelseyhightower","description":"Golang library for managing configuration data from environment variables","archived":false,"fork":false,"pushed_at":"2025-06-28T02:01:37.000Z","size":101,"stargazers_count":5469,"open_issues_count":62,"forks_count":397,"subscribers_count":34,"default_branch":"master","last_synced_at":"2026-09-26T06:46:17.193Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":null,"language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/kelseyhightower.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":"MAINTAINERS","copyright":null,"agents":null,"claude":null,"gemini":null,"cursor":null,"copilot":null,"dco":null,"cla":null,"disclosure":null}},"created_at":"2013-11-06T17:01:55.000Z","updated_at":"2026-09-25T14:07:23.000Z","dependencies_parsed_at":"2026-08-06T01:41:57.803Z","dependency_job_id":null,"html_url":"https://github.com/kelseyhightower/envconfig","commit_stats":{"total_commits":108,"total_committers":50,"mean_commits":2.16,"dds":0.8148148148148149,"last_synced_commit":"10e87fe9eaec671f89425dc366f004a9336bcc8f"},"previous_names":[],"tags_count":6,"template":false,"template_full_name":null,"purl":"pkg:github/kelseyhightower/envconfig","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kelseyhightower%2Fenvconfig","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kelseyhightower%2Fenvconfig/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kelseyhightower%2Fenvconfig/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kelseyhightower%2Fenvconfig/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/kelseyhightower","download_url":"https://codeload.github.com/kelseyhightower/envconfig/tar.gz/refs/heads/master","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kelseyhightower%2Fenvconfig/sbom","scorecard":{"id":554485,"data":{"date":"2025-08-11","repo":{"name":"github.com/kelseyhightower/envconfig","commit":"7834011875d613aec60c606b52c2b0fe8949fe91"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":4.2,"checks":[{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Maintained","score":0,"reason":"1 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Code-Review","score":8,"reason":"Found 24/30 approved changesets -- score normalized to 8","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Warn: no topLevel permission defined: .github/workflows/go.yml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/go.yml:19: update your workflow using https://app.stepsecurity.io/secureworkflow/kelseyhightower/envconfig/go.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/go.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/kelseyhightower/envconfig/go.yml/master?enable=pin","Info:   0 out of   2 GitHub-owned GitHubAction dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Security-Policy","score":0,"reason":"security policy file not detected","details":["Warn: no security policy file detected","Warn: no security file to analyze","Warn: no security file to analyze","Warn: no security file to analyze"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: MIT License: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Branch-Protection","score":0,"reason":"branch protection not enabled on development/release branches","details":["Warn: branch protection not enabled for branch 'master'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 24 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-20T11:58:13.668Z","repository_id":11670029,"created_at":"2025-08-20T11:58:13.668Z","updated_at":"2025-08-20T11:58:13.668Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":341189360,"owners_count":37709542,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-08-22T15:14:58.755Z","status":"online","status_checked_at":"2026-09-26T02:00:06.440Z","response_time":102,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"kelseyhightower","name":"Kelsey Hightower","uuid":"1123322","kind":"user","description":"","email":"kelsey.hightower@gmail.com","website":null,"location":"Washington","twitter":null,"company":null,"icon_url":"https://avatars.githubusercontent.com/u/1123322?u=e9afe6d5b9bd6c20bbaf40f76b6188619fc24436\u0026v=4","repositories_count":195,"last_synced_at":"2026-09-25T03:11:39.839Z","metadata":{"has_sponsors_listing":false,"funding":null},"html_url":"https://github.com/kelseyhightower","funding_links":[],"total_stars":143349,"followers":24771,"following":13,"created_at":"2022-11-05T15:13:05.765Z","updated_at":"2026-09-25T03:11:39.865Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/kelseyhightower","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/kelseyhightower/repositories"},"tags":[{"name":"v1.4.0","sha":"0b417c4ec4a8a82eecc22a1459a504aa55163d61","kind":"commit","published_at":"2019-05-24T18:54:28.000Z","download_url":"https://codeload.github.com/kelseyhightower/envconfig/tar.gz/v1.4.0","html_url":"https://github.com/kelseyhightower/envconfig/releases/tag/v1.4.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/kelseyhightower/envconfig@v1.4.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kelseyhightower%2Fenvconfig/tags/v1.4.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kelseyhightower%2Fenvconfig/tags/v1.4.0/manifests"},{"name":"v1.3.0","sha":"f611eb38b3875cc3bd991ca91c51d06446afa14c","kind":"commit","published_at":"2017-01-24T16:28:13.000Z","download_url":"https://codeload.github.com/kelseyhightower/envconfig/tar.gz/v1.3.0","html_url":"https://github.com/kelseyhightower/envconfig/releases/tag/v1.3.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/kelseyhightower/envconfig@v1.3.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kelseyhightower%2Fenvconfig/tags/v1.3.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kelseyhightower%2Fenvconfig/tags/v1.3.0/manifests"},{"name":"v1.2.0","sha":"9aca109c9aec4633fced9717c4a09ecab3d33111","kind":"commit","published_at":"2016-10-19T16:24:55.000Z","download_url":"https://codeload.github.com/kelseyhightower/envconfig/tar.gz/v1.2.0","html_url":"https://github.com/kelseyhightower/envconfig/releases/tag/v1.2.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/kelseyhightower/envconfig@v1.2.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kelseyhightower%2Fenvconfig/tags/v1.2.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kelseyhightower%2Fenvconfig/tags/v1.2.0/manifests"},{"name":"1.1.0","sha":"ac12b1f15efba734211a556d8b125110dc538016","kind":"commit","published_at":"2016-03-04T06:38:36.000Z","download_url":"https://codeload.github.com/kelseyhightower/envconfig/tar.gz/1.1.0","html_url":"https://github.com/kelseyhightower/envconfig/releases/tag/1.1.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/kelseyhightower/envconfig@1.1.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kelseyhightower%2Fenvconfig/tags/1.1.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kelseyhightower%2Fenvconfig/tags/1.1.0/manifests"},{"name":"v1.1.0","sha":"ac12b1f15efba734211a556d8b125110dc538016","kind":"commit","published_at":"2016-03-04T06:38:36.000Z","download_url":"https://codeload.github.com/kelseyhightower/envconfig/tar.gz/v1.1.0","html_url":"https://github.com/kelseyhightower/envconfig/releases/tag/v1.1.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/kelseyhightower/envconfig@v1.1.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kelseyhightower%2Fenvconfig/tags/v1.1.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kelseyhightower%2Fenvconfig/tags/v1.1.0/manifests"},{"name":"v1.0.0","sha":"0280e33525f5d88edb71638a80b31724153225ba","kind":"commit","published_at":"2014-03-15T18:19:28.000Z","download_url":"https://codeload.github.com/kelseyhightower/envconfig/tar.gz/v1.0.0","html_url":"https://github.com/kelseyhightower/envconfig/releases/tag/v1.0.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/kelseyhightower/envconfig@v1.0.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kelseyhightower%2Fenvconfig/tags/v1.0.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kelseyhightower%2Fenvconfig/tags/v1.0.0/manifests"}]},"repo_metadata_updated_at":"2026-09-26T10:22:30.125Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":9.345852080216646,"dependent_packages_count":6.999148183520997,"stargazers_count":0.6192784362489998,"forks_count":0.9433951676529707,"average":4.476918466909904},"purl":"pkg:golang/gopkg.in/kelseyhightower/envconfig.v1","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/go/gopkg.in/kelseyhightower/envconfig.v1","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/go/gopkg.in/kelseyhightower/envconfig.v1","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/go/gopkg.in/kelseyhightower/envconfig.v1/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-09-26T01:03:35.347Z","issues_count":48,"pull_requests_count":80,"avg_time_to_close_issue":22378798.545454547,"avg_time_to_close_pull_request":25763564.34090909,"issues_closed_count":22,"pull_requests_closed_count":44,"pull_request_authors_count":66,"issue_authors_count":47,"avg_comments_per_issue":2.3958333333333335,"avg_comments_per_pull_request":1.3875,"merged_pull_requests_count":15,"bot_issues_count":0,"bot_pull_requests_count":0,"past_year_issues_count":0,"past_year_pull_requests_count":9,"past_year_avg_time_to_close_issue":null,"past_year_avg_time_to_close_pull_request":547575.6666666666,"past_year_issues_closed_count":0,"past_year_pull_requests_closed_count":3,"past_year_pull_request_authors_count":5,"past_year_issue_authors_count":0,"past_year_avg_comments_per_issue":null,"past_year_avg_comments_per_pull_request":0.2222222222222222,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":0,"past_year_merged_pull_requests_count":0,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/kelseyhightower%2Fenvconfig/issues","maintainers":[],"active_maintainers":[]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/gopkg.in%2Fkelseyhightower%2Fenvconfig.v1/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/gopkg.in%2Fkelseyhightower%2Fenvconfig.v1/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/gopkg.in%2Fkelseyhightower%2Fenvconfig.v1/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/gopkg.in%2Fkelseyhightower%2Fenvconfig.v1/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/gopkg.in%2Fkelseyhightower%2Fenvconfig.v1/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/gopkg.in%2Fkelseyhightower%2Fenvconfig.v1/codemeta","maintainers":[],"registry":{"name":"proxy.golang.org","url":"https://proxy.golang.org","ecosystem":"go","default":true,"packages_count":2539736,"maintainers_count":0,"namespaces_count":852760,"keywords_count":136985,"github":"golang","metadata":{"funded_packages_count":110283,"sync_missing_packages_cursor":{"timestamp":"2026-09-29T00:04:57.155362Z","path":"github.com/virtengine/virtengine/sdk/specs","version":"v0.0.0-20260928231908-c0c887541540"},"rate_limit":5},"icon_url":"https://github.com/golang.png","created_at":"2022-04-04T15:19:22.939Z","updated_at":"2026-10-01T05:04:10.855Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/namespaces"}},{"id":13438651,"name":"golang-github-kelseyhightower-envconfig-dev","ecosystem":"ubuntu","description":null,"homepage":"https://github.com/kelseyhightower/envconfig","licenses":"mit","normalized_licenses":[],"repository_url":"https://github.com/kelseyhightower/envconfig","keywords_array":["universe/misc"],"namespace":"universe","versions_count":1,"first_release_published_at":"2026-02-08T01:43:31.780Z","latest_release_published_at":"2026-02-08T01:43:31.780Z","latest_release_number":"1.3.0-1","last_synced_at":"2026-03-08T02:58:44.400Z","created_at":"2026-02-08T01:43:30.378Z","updated_at":"2026-09-26T10:22:29.869Z","registry_url":"https://launchpad.net/ubuntu/+source/golang-github-kelseyhightower-envconfig-dev","install_command":"apt-get install golang-github-kelseyhightower-envconfig-dev","documentation_url":null,"metadata":{"component":"universe","architecture":"all","priority":"optional","binary":"golang-github-kelseyhightower-envconfig-dev","standards_version":"4.0.0","maintainer":"Pirate Praveen \u003cpraveen@debian.org\u003e","build_depends":"debhelper (\u003e= 9), golang-go, dh-golang","build_depends_indep":null,"build_depends_arch":null},"repo_metadata":{"id":11670029,"uuid":"14179252","full_name":"kelseyhightower/envconfig","owner":"kelseyhightower","description":"Golang library for managing configuration data from environment variables","archived":false,"fork":false,"pushed_at":"2025-06-28T02:01:37.000Z","size":101,"stargazers_count":5469,"open_issues_count":62,"forks_count":397,"subscribers_count":34,"default_branch":"master","last_synced_at":"2026-09-26T06:46:17.193Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":null,"language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/kelseyhightower.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":"MAINTAINERS","copyright":null,"agents":null,"claude":null,"gemini":null,"cursor":null,"copilot":null,"dco":null,"cla":null,"disclosure":null}},"created_at":"2013-11-06T17:01:55.000Z","updated_at":"2026-09-25T14:07:23.000Z","dependencies_parsed_at":"2026-08-06T01:41:57.803Z","dependency_job_id":null,"html_url":"https://github.com/kelseyhightower/envconfig","commit_stats":{"total_commits":108,"total_committers":50,"mean_commits":2.16,"dds":0.8148148148148149,"last_synced_commit":"10e87fe9eaec671f89425dc366f004a9336bcc8f"},"previous_names":[],"tags_count":6,"template":false,"template_full_name":null,"purl":"pkg:github/kelseyhightower/envconfig","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kelseyhightower%2Fenvconfig","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kelseyhightower%2Fenvconfig/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kelseyhightower%2Fenvconfig/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kelseyhightower%2Fenvconfig/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/kelseyhightower","download_url":"https://codeload.github.com/kelseyhightower/envconfig/tar.gz/refs/heads/master","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kelseyhightower%2Fenvconfig/sbom","scorecard":{"id":554485,"data":{"date":"2025-08-11","repo":{"name":"github.com/kelseyhightower/envconfig","commit":"7834011875d613aec60c606b52c2b0fe8949fe91"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":4.2,"checks":[{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Maintained","score":0,"reason":"1 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Code-Review","score":8,"reason":"Found 24/30 approved changesets -- score normalized to 8","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Warn: no topLevel permission defined: .github/workflows/go.yml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/go.yml:19: update your workflow using https://app.stepsecurity.io/secureworkflow/kelseyhightower/envconfig/go.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/go.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/kelseyhightower/envconfig/go.yml/master?enable=pin","Info:   0 out of   2 GitHub-owned GitHubAction dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Security-Policy","score":0,"reason":"security policy file not detected","details":["Warn: no security policy file detected","Warn: no security file to analyze","Warn: no security file to analyze","Warn: no security file to analyze"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: MIT License: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Branch-Protection","score":0,"reason":"branch protection not enabled on development/release branches","details":["Warn: branch protection not enabled for branch 'master'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 24 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-20T11:58:13.668Z","repository_id":11670029,"created_at":"2025-08-20T11:58:13.668Z","updated_at":"2025-08-20T11:58:13.668Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":341189360,"owners_count":37709542,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-08-22T15:14:58.755Z","status":"online","status_checked_at":"2026-09-26T02:00:06.440Z","response_time":102,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"kelseyhightower","name":"Kelsey Hightower","uuid":"1123322","kind":"user","description":"","email":"kelsey.hightower@gmail.com","website":null,"location":"Washington","twitter":null,"company":null,"icon_url":"https://avatars.githubusercontent.com/u/1123322?u=e9afe6d5b9bd6c20bbaf40f76b6188619fc24436\u0026v=4","repositories_count":195,"last_synced_at":"2026-09-25T03:11:39.839Z","metadata":{"has_sponsors_listing":false,"funding":null},"html_url":"https://github.com/kelseyhightower","funding_links":[],"total_stars":143349,"followers":24771,"following":13,"created_at":"2022-11-05T15:13:05.765Z","updated_at":"2026-09-25T03:11:39.865Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/kelseyhightower","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/kelseyhightower/repositories"},"tags":[{"name":"v1.4.0","sha":"0b417c4ec4a8a82eecc22a1459a504aa55163d61","kind":"commit","published_at":"2019-05-24T18:54:28.000Z","download_url":"https://codeload.github.com/kelseyhightower/envconfig/tar.gz/v1.4.0","html_url":"https://github.com/kelseyhightower/envconfig/releases/tag/v1.4.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/kelseyhightower/envconfig@v1.4.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kelseyhightower%2Fenvconfig/tags/v1.4.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kelseyhightower%2Fenvconfig/tags/v1.4.0/manifests"},{"name":"v1.3.0","sha":"f611eb38b3875cc3bd991ca91c51d06446afa14c","kind":"commit","published_at":"2017-01-24T16:28:13.000Z","download_url":"https://codeload.github.com/kelseyhightower/envconfig/tar.gz/v1.3.0","html_url":"https://github.com/kelseyhightower/envconfig/releases/tag/v1.3.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/kelseyhightower/envconfig@v1.3.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kelseyhightower%2Fenvconfig/tags/v1.3.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kelseyhightower%2Fenvconfig/tags/v1.3.0/manifests"},{"name":"v1.2.0","sha":"9aca109c9aec4633fced9717c4a09ecab3d33111","kind":"commit","published_at":"2016-10-19T16:24:55.000Z","download_url":"https://codeload.github.com/kelseyhightower/envconfig/tar.gz/v1.2.0","html_url":"https://github.com/kelseyhightower/envconfig/releases/tag/v1.2.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/kelseyhightower/envconfig@v1.2.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kelseyhightower%2Fenvconfig/tags/v1.2.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kelseyhightower%2Fenvconfig/tags/v1.2.0/manifests"},{"name":"1.1.0","sha":"ac12b1f15efba734211a556d8b125110dc538016","kind":"commit","published_at":"2016-03-04T06:38:36.000Z","download_url":"https://codeload.github.com/kelseyhightower/envconfig/tar.gz/1.1.0","html_url":"https://github.com/kelseyhightower/envconfig/releases/tag/1.1.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/kelseyhightower/envconfig@1.1.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kelseyhightower%2Fenvconfig/tags/1.1.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kelseyhightower%2Fenvconfig/tags/1.1.0/manifests"},{"name":"v1.1.0","sha":"ac12b1f15efba734211a556d8b125110dc538016","kind":"commit","published_at":"2016-03-04T06:38:36.000Z","download_url":"https://codeload.github.com/kelseyhightower/envconfig/tar.gz/v1.1.0","html_url":"https://github.com/kelseyhightower/envconfig/releases/tag/v1.1.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/kelseyhightower/envconfig@v1.1.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kelseyhightower%2Fenvconfig/tags/v1.1.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kelseyhightower%2Fenvconfig/tags/v1.1.0/manifests"},{"name":"v1.0.0","sha":"0280e33525f5d88edb71638a80b31724153225ba","kind":"commit","published_at":"2014-03-15T18:19:28.000Z","download_url":"https://codeload.github.com/kelseyhightower/envconfig/tar.gz/v1.0.0","html_url":"https://github.com/kelseyhightower/envconfig/releases/tag/v1.0.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/kelseyhightower/envconfig@v1.0.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kelseyhightower%2Fenvconfig/tags/v1.0.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kelseyhightower%2Fenvconfig/tags/v1.0.0/manifests"}]},"repo_metadata_updated_at":"2026-09-26T10:22:29.869Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":0.0,"dependent_packages_count":0.0,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":100},"purl":"pkg:deb/ubuntu/golang-github-kelseyhightower-envconfig-dev?arch=source\u0026distro=ubuntu-20.04\u0026repository_url=https://launchpad.net/ubuntu/focal","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/ubuntu/golang-github-kelseyhightower-envconfig-dev","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/ubuntu/golang-github-kelseyhightower-envconfig-dev","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/ubuntu/golang-github-kelseyhightower-envconfig-dev/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-09-26T01:03:35.347Z","issues_count":48,"pull_requests_count":80,"avg_time_to_close_issue":22378798.545454547,"avg_time_to_close_pull_request":25763564.34090909,"issues_closed_count":22,"pull_requests_closed_count":44,"pull_request_authors_count":66,"issue_authors_count":47,"avg_comments_per_issue":2.3958333333333335,"avg_comments_per_pull_request":1.3875,"merged_pull_requests_count":15,"bot_issues_count":0,"bot_pull_requests_count":0,"past_year_issues_count":0,"past_year_pull_requests_count":9,"past_year_avg_time_to_close_issue":null,"past_year_avg_time_to_close_pull_request":547575.6666666666,"past_year_issues_closed_count":0,"past_year_pull_requests_closed_count":3,"past_year_pull_request_authors_count":5,"past_year_issue_authors_count":0,"past_year_avg_comments_per_issue":null,"past_year_avg_comments_per_pull_request":0.2222222222222222,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":0,"past_year_merged_pull_requests_count":0,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/kelseyhightower%2Fenvconfig/issues","maintainers":[],"active_maintainers":[]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-20.04/packages/golang-github-kelseyhightower-envconfig-dev/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-20.04/packages/golang-github-kelseyhightower-envconfig-dev/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-20.04/packages/golang-github-kelseyhightower-envconfig-dev/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-20.04/packages/golang-github-kelseyhightower-envconfig-dev/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-20.04/packages/golang-github-kelseyhightower-envconfig-dev/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-20.04/packages/golang-github-kelseyhightower-envconfig-dev/codemeta","maintainers":[],"registry":{"name":"ubuntu-20.04","url":"https://launchpad.net/ubuntu/focal","ecosystem":"ubuntu","default":false,"packages_count":30789,"maintainers_count":0,"namespaces_count":4,"keywords_count":1425,"github":"ubuntu","metadata":{"codename":"focal","funded_packages_count":1087},"icon_url":"https://github.com/ubuntu.png","created_at":"2026-02-04T11:01:47.233Z","updated_at":"2026-10-01T05:06:55.218Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-20.04/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-20.04/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-20.04/namespaces"}},{"id":13685121,"name":"golang-github-kelseyhightower-envconfig-dev","ecosystem":"debian","description":null,"homepage":"https://github.com/kelseyhightower/envconfig","licenses":"mit","normalized_licenses":[],"repository_url":"https://github.com/kelseyhightower/envconfig","keywords_array":["golang"],"namespace":"main","versions_count":1,"first_release_published_at":"2026-02-12T17:52:33.789Z","latest_release_published_at":"2026-02-12T17:52:33.789Z","latest_release_number":"1.3.0-2","last_synced_at":"2026-03-13T00:13:51.576Z","created_at":"2026-02-12T17:52:33.623Z","updated_at":"2026-09-26T10:22:29.913Z","registry_url":"https://tracker.debian.org/pkg/golang-github-kelseyhightower-envconfig-dev","install_command":"apt-get install golang-github-kelseyhightower-envconfig-dev","documentation_url":"https://packages.debian.org/bookworm/golang-github-kelseyhightower-envconfig-dev","metadata":{"component":"main","architecture":"all","priority":"extra","binary":"golang-github-kelseyhightower-envconfig-dev","standards_version":"4.6.0","maintainer":"Pirate Praveen \u003cpraveen@debian.org\u003e","build_depends":"debhelper-compat (= 13), golang-any, dh-golang","build_depends_indep":null,"build_depends_arch":null},"repo_metadata":{"id":11670029,"uuid":"14179252","full_name":"kelseyhightower/envconfig","owner":"kelseyhightower","description":"Golang library for managing configuration data from environment variables","archived":false,"fork":false,"pushed_at":"2025-06-28T02:01:37.000Z","size":101,"stargazers_count":5469,"open_issues_count":62,"forks_count":397,"subscribers_count":34,"default_branch":"master","last_synced_at":"2026-09-26T06:46:17.193Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":null,"language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/kelseyhightower.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":"MAINTAINERS","copyright":null,"agents":null,"claude":null,"gemini":null,"cursor":null,"copilot":null,"dco":null,"cla":null,"disclosure":null}},"created_at":"2013-11-06T17:01:55.000Z","updated_at":"2026-09-25T14:07:23.000Z","dependencies_parsed_at":"2026-08-06T01:41:57.803Z","dependency_job_id":null,"html_url":"https://github.com/kelseyhightower/envconfig","commit_stats":{"total_commits":108,"total_committers":50,"mean_commits":2.16,"dds":0.8148148148148149,"last_synced_commit":"10e87fe9eaec671f89425dc366f004a9336bcc8f"},"previous_names":[],"tags_count":6,"template":false,"template_full_name":null,"purl":"pkg:github/kelseyhightower/envconfig","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kelseyhightower%2Fenvconfig","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kelseyhightower%2Fenvconfig/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kelseyhightower%2Fenvconfig/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kelseyhightower%2Fenvconfig/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/kelseyhightower","download_url":"https://codeload.github.com/kelseyhightower/envconfig/tar.gz/refs/heads/master","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kelseyhightower%2Fenvconfig/sbom","scorecard":{"id":554485,"data":{"date":"2025-08-11","repo":{"name":"github.com/kelseyhightower/envconfig","commit":"7834011875d613aec60c606b52c2b0fe8949fe91"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":4.2,"checks":[{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Maintained","score":0,"reason":"1 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Code-Review","score":8,"reason":"Found 24/30 approved changesets -- score normalized to 8","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Warn: no topLevel permission defined: .github/workflows/go.yml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/go.yml:19: update your workflow using https://app.stepsecurity.io/secureworkflow/kelseyhightower/envconfig/go.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/go.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/kelseyhightower/envconfig/go.yml/master?enable=pin","Info:   0 out of   2 GitHub-owned GitHubAction dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Security-Policy","score":0,"reason":"security policy file not detected","details":["Warn: no security policy file detected","Warn: no security file to analyze","Warn: no security file to analyze","Warn: no security file to analyze"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: MIT License: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Branch-Protection","score":0,"reason":"branch protection not enabled on development/release branches","details":["Warn: branch protection not enabled for branch 'master'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 24 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-20T11:58:13.668Z","repository_id":11670029,"created_at":"2025-08-20T11:58:13.668Z","updated_at":"2025-08-20T11:58:13.668Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":341189360,"owners_count":37709542,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-08-22T15:14:58.755Z","status":"online","status_checked_at":"2026-09-26T02:00:06.440Z","response_time":102,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"kelseyhightower","name":"Kelsey Hightower","uuid":"1123322","kind":"user","description":"","email":"kelsey.hightower@gmail.com","website":null,"location":"Washington","twitter":null,"company":null,"icon_url":"https://avatars.githubusercontent.com/u/1123322?u=e9afe6d5b9bd6c20bbaf40f76b6188619fc24436\u0026v=4","repositories_count":195,"last_synced_at":"2026-09-25T03:11:39.839Z","metadata":{"has_sponsors_listing":false,"funding":null},"html_url":"https://github.com/kelseyhightower","funding_links":[],"total_stars":143349,"followers":24771,"following":13,"created_at":"2022-11-05T15:13:05.765Z","updated_at":"2026-09-25T03:11:39.865Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/kelseyhightower","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/kelseyhightower/repositories"},"tags":[{"name":"v1.4.0","sha":"0b417c4ec4a8a82eecc22a1459a504aa55163d61","kind":"commit","published_at":"2019-05-24T18:54:28.000Z","download_url":"https://codeload.github.com/kelseyhightower/envconfig/tar.gz/v1.4.0","html_url":"https://github.com/kelseyhightower/envconfig/releases/tag/v1.4.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/kelseyhightower/envconfig@v1.4.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kelseyhightower%2Fenvconfig/tags/v1.4.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kelseyhightower%2Fenvconfig/tags/v1.4.0/manifests"},{"name":"v1.3.0","sha":"f611eb38b3875cc3bd991ca91c51d06446afa14c","kind":"commit","published_at":"2017-01-24T16:28:13.000Z","download_url":"https://codeload.github.com/kelseyhightower/envconfig/tar.gz/v1.3.0","html_url":"https://github.com/kelseyhightower/envconfig/releases/tag/v1.3.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/kelseyhightower/envconfig@v1.3.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kelseyhightower%2Fenvconfig/tags/v1.3.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kelseyhightower%2Fenvconfig/tags/v1.3.0/manifests"},{"name":"v1.2.0","sha":"9aca109c9aec4633fced9717c4a09ecab3d33111","kind":"commit","published_at":"2016-10-19T16:24:55.000Z","download_url":"https://codeload.github.com/kelseyhightower/envconfig/tar.gz/v1.2.0","html_url":"https://github.com/kelseyhightower/envconfig/releases/tag/v1.2.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/kelseyhightower/envconfig@v1.2.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kelseyhightower%2Fenvconfig/tags/v1.2.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kelseyhightower%2Fenvconfig/tags/v1.2.0/manifests"},{"name":"1.1.0","sha":"ac12b1f15efba734211a556d8b125110dc538016","kind":"commit","published_at":"2016-03-04T06:38:36.000Z","download_url":"https://codeload.github.com/kelseyhightower/envconfig/tar.gz/1.1.0","html_url":"https://github.com/kelseyhightower/envconfig/releases/tag/1.1.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/kelseyhightower/envconfig@1.1.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kelseyhightower%2Fenvconfig/tags/1.1.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kelseyhightower%2Fenvconfig/tags/1.1.0/manifests"},{"name":"v1.1.0","sha":"ac12b1f15efba734211a556d8b125110dc538016","kind":"commit","published_at":"2016-03-04T06:38:36.000Z","download_url":"https://codeload.github.com/kelseyhightower/envconfig/tar.gz/v1.1.0","html_url":"https://github.com/kelseyhightower/envconfig/releases/tag/v1.1.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/kelseyhightower/envconfig@v1.1.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kelseyhightower%2Fenvconfig/tags/v1.1.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kelseyhightower%2Fenvconfig/tags/v1.1.0/manifests"},{"name":"v1.0.0","sha":"0280e33525f5d88edb71638a80b31724153225ba","kind":"commit","published_at":"2014-03-15T18:19:28.000Z","download_url":"https://codeload.github.com/kelseyhightower/envconfig/tar.gz/v1.0.0","html_url":"https://github.com/kelseyhightower/envconfig/releases/tag/v1.0.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/kelseyhightower/envconfig@v1.0.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kelseyhightower%2Fenvconfig/tags/v1.0.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kelseyhightower%2Fenvconfig/tags/v1.0.0/manifests"}]},"repo_metadata_updated_at":"2026-09-26T10:22:29.913Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":0.0,"dependent_packages_count":0.0,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":100},"purl":"pkg:deb/debian/golang-github-kelseyhightower-envconfig-dev?arch=source\u0026distro=debian-12","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/debian/golang-github-kelseyhightower-envconfig-dev","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/debian/golang-github-kelseyhightower-envconfig-dev","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/debian/golang-github-kelseyhightower-envconfig-dev/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-09-26T01:03:35.347Z","issues_count":48,"pull_requests_count":80,"avg_time_to_close_issue":22378798.545454547,"avg_time_to_close_pull_request":25763564.34090909,"issues_closed_count":22,"pull_requests_closed_count":44,"pull_request_authors_count":66,"issue_authors_count":47,"avg_comments_per_issue":2.3958333333333335,"avg_comments_per_pull_request":1.3875,"merged_pull_requests_count":15,"bot_issues_count":0,"bot_pull_requests_count":0,"past_year_issues_count":0,"past_year_pull_requests_count":9,"past_year_avg_time_to_close_issue":null,"past_year_avg_time_to_close_pull_request":547575.6666666666,"past_year_issues_closed_count":0,"past_year_pull_requests_closed_count":3,"past_year_pull_request_authors_count":5,"past_year_issue_authors_count":0,"past_year_avg_comments_per_issue":null,"past_year_avg_comments_per_pull_request":0.2222222222222222,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":0,"past_year_merged_pull_requests_count":0,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/kelseyhightower%2Fenvconfig/issues","maintainers":[],"active_maintainers":[]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/debian-12/packages/golang-github-kelseyhightower-envconfig-dev/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/debian-12/packages/golang-github-kelseyhightower-envconfig-dev/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/debian-12/packages/golang-github-kelseyhightower-envconfig-dev/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/debian-12/packages/golang-github-kelseyhightower-envconfig-dev/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/debian-12/packages/golang-github-kelseyhightower-envconfig-dev/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/debian-12/packages/golang-github-kelseyhightower-envconfig-dev/codemeta","maintainers":[],"registry":{"name":"debian-12","url":"https://packages.debian.org/bookworm","ecosystem":"debian","default":true,"packages_count":34734,"maintainers_count":0,"namespaces_count":4,"keywords_count":2635,"github":"debian","metadata":{"codename":"bookworm","funded_packages_count":1707},"icon_url":"https://github.com/debian.png","created_at":"2026-02-04T11:01:49.459Z","updated_at":"2026-10-01T05:07:01.489Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/debian-12/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/debian-12/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/debian-12/namespaces"}},{"id":13545992,"name":"golang-github-kelseyhightower-envconfig-dev","ecosystem":"ubuntu","description":null,"homepage":"https://github.com/kelseyhightower/envconfig","licenses":"mit","normalized_licenses":[],"repository_url":"https://github.com/kelseyhightower/envconfig","keywords_array":["universe/misc"],"namespace":"universe","versions_count":1,"first_release_published_at":"2026-02-11T02:06:20.654Z","latest_release_published_at":"2026-02-11T02:06:20.654Z","latest_release_number":"1.3.0-2","last_synced_at":"2026-03-11T20:17:44.596Z","created_at":"2026-02-11T02:06:20.481Z","updated_at":"2026-09-26T10:22:29.966Z","registry_url":"https://launchpad.net/ubuntu/+source/golang-github-kelseyhightower-envconfig-dev","install_command":"apt-get install golang-github-kelseyhightower-envconfig-dev","documentation_url":null,"metadata":{"component":"universe","architecture":"all","priority":"optional","binary":"golang-github-kelseyhightower-envconfig-dev","standards_version":"4.6.0","maintainer":"Pirate Praveen \u003cpraveen@debian.org\u003e","build_depends":"debhelper-compat (= 13), golang-any, dh-golang","build_depends_indep":null,"build_depends_arch":null},"repo_metadata":{"id":11670029,"uuid":"14179252","full_name":"kelseyhightower/envconfig","owner":"kelseyhightower","description":"Golang library for managing configuration data from environment variables","archived":false,"fork":false,"pushed_at":"2025-06-28T02:01:37.000Z","size":101,"stargazers_count":5469,"open_issues_count":62,"forks_count":397,"subscribers_count":34,"default_branch":"master","last_synced_at":"2026-09-26T06:46:17.193Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":null,"language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/kelseyhightower.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":"MAINTAINERS","copyright":null,"agents":null,"claude":null,"gemini":null,"cursor":null,"copilot":null,"dco":null,"cla":null,"disclosure":null}},"created_at":"2013-11-06T17:01:55.000Z","updated_at":"2026-09-25T14:07:23.000Z","dependencies_parsed_at":"2026-08-06T01:41:57.803Z","dependency_job_id":null,"html_url":"https://github.com/kelseyhightower/envconfig","commit_stats":{"total_commits":108,"total_committers":50,"mean_commits":2.16,"dds":0.8148148148148149,"last_synced_commit":"10e87fe9eaec671f89425dc366f004a9336bcc8f"},"previous_names":[],"tags_count":6,"template":false,"template_full_name":null,"purl":"pkg:github/kelseyhightower/envconfig","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kelseyhightower%2Fenvconfig","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kelseyhightower%2Fenvconfig/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kelseyhightower%2Fenvconfig/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kelseyhightower%2Fenvconfig/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/kelseyhightower","download_url":"https://codeload.github.com/kelseyhightower/envconfig/tar.gz/refs/heads/master","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kelseyhightower%2Fenvconfig/sbom","scorecard":{"id":554485,"data":{"date":"2025-08-11","repo":{"name":"github.com/kelseyhightower/envconfig","commit":"7834011875d613aec60c606b52c2b0fe8949fe91"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":4.2,"checks":[{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Maintained","score":0,"reason":"1 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Code-Review","score":8,"reason":"Found 24/30 approved changesets -- score normalized to 8","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Warn: no topLevel permission defined: .github/workflows/go.yml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/go.yml:19: update your workflow using https://app.stepsecurity.io/secureworkflow/kelseyhightower/envconfig/go.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/go.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/kelseyhightower/envconfig/go.yml/master?enable=pin","Info:   0 out of   2 GitHub-owned GitHubAction dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Security-Policy","score":0,"reason":"security policy file not detected","details":["Warn: no security policy file detected","Warn: no security file to analyze","Warn: no security file to analyze","Warn: no security file to analyze"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: MIT License: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Branch-Protection","score":0,"reason":"branch protection not enabled on development/release branches","details":["Warn: branch protection not enabled for branch 'master'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 24 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-20T11:58:13.668Z","repository_id":11670029,"created_at":"2025-08-20T11:58:13.668Z","updated_at":"2025-08-20T11:58:13.668Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":341189360,"owners_count":37709542,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-08-22T15:14:58.755Z","status":"online","status_checked_at":"2026-09-26T02:00:06.440Z","response_time":102,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"kelseyhightower","name":"Kelsey Hightower","uuid":"1123322","kind":"user","description":"","email":"kelsey.hightower@gmail.com","website":null,"location":"Washington","twitter":null,"company":null,"icon_url":"https://avatars.githubusercontent.com/u/1123322?u=e9afe6d5b9bd6c20bbaf40f76b6188619fc24436\u0026v=4","repositories_count":195,"last_synced_at":"2026-09-25T03:11:39.839Z","metadata":{"has_sponsors_listing":false,"funding":null},"html_url":"https://github.com/kelseyhightower","funding_links":[],"total_stars":143349,"followers":24771,"following":13,"created_at":"2022-11-05T15:13:05.765Z","updated_at":"2026-09-25T03:11:39.865Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/kelseyhightower","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/kelseyhightower/repositories"},"tags":[{"name":"v1.4.0","sha":"0b417c4ec4a8a82eecc22a1459a504aa55163d61","kind":"commit","published_at":"2019-05-24T18:54:28.000Z","download_url":"https://codeload.github.com/kelseyhightower/envconfig/tar.gz/v1.4.0","html_url":"https://github.com/kelseyhightower/envconfig/releases/tag/v1.4.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/kelseyhightower/envconfig@v1.4.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kelseyhightower%2Fenvconfig/tags/v1.4.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kelseyhightower%2Fenvconfig/tags/v1.4.0/manifests"},{"name":"v1.3.0","sha":"f611eb38b3875cc3bd991ca91c51d06446afa14c","kind":"commit","published_at":"2017-01-24T16:28:13.000Z","download_url":"https://codeload.github.com/kelseyhightower/envconfig/tar.gz/v1.3.0","html_url":"https://github.com/kelseyhightower/envconfig/releases/tag/v1.3.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/kelseyhightower/envconfig@v1.3.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kelseyhightower%2Fenvconfig/tags/v1.3.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kelseyhightower%2Fenvconfig/tags/v1.3.0/manifests"},{"name":"v1.2.0","sha":"9aca109c9aec4633fced9717c4a09ecab3d33111","kind":"commit","published_at":"2016-10-19T16:24:55.000Z","download_url":"https://codeload.github.com/kelseyhightower/envconfig/tar.gz/v1.2.0","html_url":"https://github.com/kelseyhightower/envconfig/releases/tag/v1.2.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/kelseyhightower/envconfig@v1.2.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kelseyhightower%2Fenvconfig/tags/v1.2.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kelseyhightower%2Fenvconfig/tags/v1.2.0/manifests"},{"name":"1.1.0","sha":"ac12b1f15efba734211a556d8b125110dc538016","kind":"commit","published_at":"2016-03-04T06:38:36.000Z","download_url":"https://codeload.github.com/kelseyhightower/envconfig/tar.gz/1.1.0","html_url":"https://github.com/kelseyhightower/envconfig/releases/tag/1.1.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/kelseyhightower/envconfig@1.1.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kelseyhightower%2Fenvconfig/tags/1.1.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kelseyhightower%2Fenvconfig/tags/1.1.0/manifests"},{"name":"v1.1.0","sha":"ac12b1f15efba734211a556d8b125110dc538016","kind":"commit","published_at":"2016-03-04T06:38:36.000Z","download_url":"https://codeload.github.com/kelseyhightower/envconfig/tar.gz/v1.1.0","html_url":"https://github.com/kelseyhightower/envconfig/releases/tag/v1.1.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/kelseyhightower/envconfig@v1.1.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kelseyhightower%2Fenvconfig/tags/v1.1.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kelseyhightower%2Fenvconfig/tags/v1.1.0/manifests"},{"name":"v1.0.0","sha":"0280e33525f5d88edb71638a80b31724153225ba","kind":"commit","published_at":"2014-03-15T18:19:28.000Z","download_url":"https://codeload.github.com/kelseyhightower/envconfig/tar.gz/v1.0.0","html_url":"https://github.com/kelseyhightower/envconfig/releases/tag/v1.0.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/kelseyhightower/envconfig@v1.0.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kelseyhightower%2Fenvconfig/tags/v1.0.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kelseyhightower%2Fenvconfig/tags/v1.0.0/manifests"}]},"repo_metadata_updated_at":"2026-09-26T10:22:29.966Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":0.0,"dependent_packages_count":0.0,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":100},"purl":"pkg:deb/ubuntu/golang-github-kelseyhightower-envconfig-dev?arch=source\u0026distro=ubuntu-23.04\u0026repository_url=https://launchpad.net/ubuntu/lunar","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/ubuntu/golang-github-kelseyhightower-envconfig-dev","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/ubuntu/golang-github-kelseyhightower-envconfig-dev","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/ubuntu/golang-github-kelseyhightower-envconfig-dev/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-09-26T01:03:35.347Z","issues_count":48,"pull_requests_count":80,"avg_time_to_close_issue":22378798.545454547,"avg_time_to_close_pull_request":25763564.34090909,"issues_closed_count":22,"pull_requests_closed_count":44,"pull_request_authors_count":66,"issue_authors_count":47,"avg_comments_per_issue":2.3958333333333335,"avg_comments_per_pull_request":1.3875,"merged_pull_requests_count":15,"bot_issues_count":0,"bot_pull_requests_count":0,"past_year_issues_count":0,"past_year_pull_requests_count":9,"past_year_avg_time_to_close_issue":null,"past_year_avg_time_to_close_pull_request":547575.6666666666,"past_year_issues_closed_count":0,"past_year_pull_requests_closed_count":3,"past_year_pull_request_authors_count":5,"past_year_issue_authors_count":0,"past_year_avg_comments_per_issue":null,"past_year_avg_comments_per_pull_request":0.2222222222222222,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":0,"past_year_merged_pull_requests_count":0,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/kelseyhightower%2Fenvconfig/issues","maintainers":[],"active_maintainers":[]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-23.04/packages/golang-github-kelseyhightower-envconfig-dev/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-23.04/packages/golang-github-kelseyhightower-envconfig-dev/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-23.04/packages/golang-github-kelseyhightower-envconfig-dev/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-23.04/packages/golang-github-kelseyhightower-envconfig-dev/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-23.04/packages/golang-github-kelseyhightower-envconfig-dev/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-23.04/packages/golang-github-kelseyhightower-envconfig-dev/codemeta","maintainers":[],"registry":{"name":"ubuntu-23.04","url":"https://launchpad.net/ubuntu/lunar","ecosystem":"ubuntu","default":false,"packages_count":36116,"maintainers_count":0,"namespaces_count":4,"keywords_count":999,"github":"ubuntu","metadata":{"codename":"lunar","mirror":"http://old-releases.ubuntu.com/ubuntu","funded_packages_count":1639},"icon_url":"https://github.com/ubuntu.png","created_at":"2026-02-04T11:01:49.117Z","updated_at":"2026-10-01T05:06:59.285Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-23.04/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-23.04/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-23.04/namespaces"}},{"id":13790803,"name":"golang-github-kelseyhightower-envconfig-dev","ecosystem":"ubuntu","description":null,"homepage":"https://github.com/kelseyhightower/envconfig","licenses":"mit","normalized_licenses":[],"repository_url":"https://github.com/kelseyhightower/envconfig","keywords_array":["universe/misc"],"namespace":"universe","versions_count":1,"first_release_published_at":"2026-02-13T15:10:55.050Z","latest_release_published_at":"2026-02-13T15:10:55.050Z","latest_release_number":"1.3.0-2","last_synced_at":"2026-03-13T15:24:25.585Z","created_at":"2026-02-13T15:10:54.834Z","updated_at":"2026-09-26T10:22:30.013Z","registry_url":"https://launchpad.net/ubuntu/+source/golang-github-kelseyhightower-envconfig-dev","install_command":"apt-get install golang-github-kelseyhightower-envconfig-dev","documentation_url":null,"metadata":{"component":"universe","architecture":"all","priority":"optional","binary":"golang-github-kelseyhightower-envconfig-dev","standards_version":"4.6.0","maintainer":"Pirate Praveen \u003cpraveen@debian.org\u003e","build_depends":"debhelper-compat (= 13), golang-any, dh-golang","build_depends_indep":null,"build_depends_arch":null},"repo_metadata":{"id":11670029,"uuid":"14179252","full_name":"kelseyhightower/envconfig","owner":"kelseyhightower","description":"Golang library for managing configuration data from environment variables","archived":false,"fork":false,"pushed_at":"2025-06-28T02:01:37.000Z","size":101,"stargazers_count":5469,"open_issues_count":62,"forks_count":397,"subscribers_count":34,"default_branch":"master","last_synced_at":"2026-09-26T06:46:17.193Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":null,"language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/kelseyhightower.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":"MAINTAINERS","copyright":null,"agents":null,"claude":null,"gemini":null,"cursor":null,"copilot":null,"dco":null,"cla":null,"disclosure":null}},"created_at":"2013-11-06T17:01:55.000Z","updated_at":"2026-09-25T14:07:23.000Z","dependencies_parsed_at":"2026-08-06T01:41:57.803Z","dependency_job_id":null,"html_url":"https://github.com/kelseyhightower/envconfig","commit_stats":{"total_commits":108,"total_committers":50,"mean_commits":2.16,"dds":0.8148148148148149,"last_synced_commit":"10e87fe9eaec671f89425dc366f004a9336bcc8f"},"previous_names":[],"tags_count":6,"template":false,"template_full_name":null,"purl":"pkg:github/kelseyhightower/envconfig","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kelseyhightower%2Fenvconfig","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kelseyhightower%2Fenvconfig/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kelseyhightower%2Fenvconfig/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kelseyhightower%2Fenvconfig/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/kelseyhightower","download_url":"https://codeload.github.com/kelseyhightower/envconfig/tar.gz/refs/heads/master","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kelseyhightower%2Fenvconfig/sbom","scorecard":{"id":554485,"data":{"date":"2025-08-11","repo":{"name":"github.com/kelseyhightower/envconfig","commit":"7834011875d613aec60c606b52c2b0fe8949fe91"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":4.2,"checks":[{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Maintained","score":0,"reason":"1 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Code-Review","score":8,"reason":"Found 24/30 approved changesets -- score normalized to 8","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Warn: no topLevel permission defined: .github/workflows/go.yml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/go.yml:19: update your workflow using https://app.stepsecurity.io/secureworkflow/kelseyhightower/envconfig/go.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/go.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/kelseyhightower/envconfig/go.yml/master?enable=pin","Info:   0 out of   2 GitHub-owned GitHubAction dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Security-Policy","score":0,"reason":"security policy file not detected","details":["Warn: no security policy file detected","Warn: no security file to analyze","Warn: no security file to analyze","Warn: no security file to analyze"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: MIT License: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Branch-Protection","score":0,"reason":"branch protection not enabled on development/release branches","details":["Warn: branch protection not enabled for branch 'master'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 24 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-20T11:58:13.668Z","repository_id":11670029,"created_at":"2025-08-20T11:58:13.668Z","updated_at":"2025-08-20T11:58:13.668Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":341189360,"owners_count":37709542,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-08-22T15:14:58.755Z","status":"online","status_checked_at":"2026-09-26T02:00:06.440Z","response_time":102,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"kelseyhightower","name":"Kelsey Hightower","uuid":"1123322","kind":"user","description":"","email":"kelsey.hightower@gmail.com","website":null,"location":"Washington","twitter":null,"company":null,"icon_url":"https://avatars.githubusercontent.com/u/1123322?u=e9afe6d5b9bd6c20bbaf40f76b6188619fc24436\u0026v=4","repositories_count":195,"last_synced_at":"2026-09-25T03:11:39.839Z","metadata":{"has_sponsors_listing":false,"funding":null},"html_url":"https://github.com/kelseyhightower","funding_links":[],"total_stars":143349,"followers":24771,"following":13,"created_at":"2022-11-05T15:13:05.765Z","updated_at":"2026-09-25T03:11:39.865Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/kelseyhightower","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/kelseyhightower/repositories"},"tags":[{"name":"v1.4.0","sha":"0b417c4ec4a8a82eecc22a1459a504aa55163d61","kind":"commit","published_at":"2019-05-24T18:54:28.000Z","download_url":"https://codeload.github.com/kelseyhightower/envconfig/tar.gz/v1.4.0","html_url":"https://github.com/kelseyhightower/envconfig/releases/tag/v1.4.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/kelseyhightower/envconfig@v1.4.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kelseyhightower%2Fenvconfig/tags/v1.4.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kelseyhightower%2Fenvconfig/tags/v1.4.0/manifests"},{"name":"v1.3.0","sha":"f611eb38b3875cc3bd991ca91c51d06446afa14c","kind":"commit","published_at":"2017-01-24T16:28:13.000Z","download_url":"https://codeload.github.com/kelseyhightower/envconfig/tar.gz/v1.3.0","html_url":"https://github.com/kelseyhightower/envconfig/releases/tag/v1.3.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/kelseyhightower/envconfig@v1.3.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kelseyhightower%2Fenvconfig/tags/v1.3.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kelseyhightower%2Fenvconfig/tags/v1.3.0/manifests"},{"name":"v1.2.0","sha":"9aca109c9aec4633fced9717c4a09ecab3d33111","kind":"commit","published_at":"2016-10-19T16:24:55.000Z","download_url":"https://codeload.github.com/kelseyhightower/envconfig/tar.gz/v1.2.0","html_url":"https://github.com/kelseyhightower/envconfig/releases/tag/v1.2.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/kelseyhightower/envconfig@v1.2.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kelseyhightower%2Fenvconfig/tags/v1.2.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kelseyhightower%2Fenvconfig/tags/v1.2.0/manifests"},{"name":"1.1.0","sha":"ac12b1f15efba734211a556d8b125110dc538016","kind":"commit","published_at":"2016-03-04T06:38:36.000Z","download_url":"https://codeload.github.com/kelseyhightower/envconfig/tar.gz/1.1.0","html_url":"https://github.com/kelseyhightower/envconfig/releases/tag/1.1.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/kelseyhightower/envconfig@1.1.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kelseyhightower%2Fenvconfig/tags/1.1.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kelseyhightower%2Fenvconfig/tags/1.1.0/manifests"},{"name":"v1.1.0","sha":"ac12b1f15efba734211a556d8b125110dc538016","kind":"commit","published_at":"2016-03-04T06:38:36.000Z","download_url":"https://codeload.github.com/kelseyhightower/envconfig/tar.gz/v1.1.0","html_url":"https://github.com/kelseyhightower/envconfig/releases/tag/v1.1.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/kelseyhightower/envconfig@v1.1.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kelseyhightower%2Fenvconfig/tags/v1.1.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kelseyhightower%2Fenvconfig/tags/v1.1.0/manifests"},{"name":"v1.0.0","sha":"0280e33525f5d88edb71638a80b31724153225ba","kind":"commit","published_at":"2014-03-15T18:19:28.000Z","download_url":"https://codeload.github.com/kelseyhightower/envconfig/tar.gz/v1.0.0","html_url":"https://github.com/kelseyhightower/envconfig/releases/tag/v1.0.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/kelseyhightower/envconfig@v1.0.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kelseyhightower%2Fenvconfig/tags/v1.0.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kelseyhightower%2Fenvconfig/tags/v1.0.0/manifests"}]},"repo_metadata_updated_at":"2026-09-26T10:22:30.012Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":0.0,"dependent_packages_count":0.0,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":100},"purl":"pkg:deb/ubuntu/golang-github-kelseyhightower-envconfig-dev?arch=source\u0026distro=ubuntu-23.10\u0026repository_url=https://launchpad.net/ubuntu/mantic","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/ubuntu/golang-github-kelseyhightower-envconfig-dev","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/ubuntu/golang-github-kelseyhightower-envconfig-dev","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/ubuntu/golang-github-kelseyhightower-envconfig-dev/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-09-26T01:03:35.347Z","issues_count":48,"pull_requests_count":80,"avg_time_to_close_issue":22378798.545454547,"avg_time_to_close_pull_request":25763564.34090909,"issues_closed_count":22,"pull_requests_closed_count":44,"pull_request_authors_count":66,"issue_authors_count":47,"avg_comments_per_issue":2.3958333333333335,"avg_comments_per_pull_request":1.3875,"merged_pull_requests_count":15,"bot_issues_count":0,"bot_pull_requests_count":0,"past_year_issues_count":0,"past_year_pull_requests_count":9,"past_year_avg_time_to_close_issue":null,"past_year_avg_time_to_close_pull_request":547575.6666666666,"past_year_issues_closed_count":0,"past_year_pull_requests_closed_count":3,"past_year_pull_request_authors_count":5,"past_year_issue_authors_count":0,"past_year_avg_comments_per_issue":null,"past_year_avg_comments_per_pull_request":0.2222222222222222,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":0,"past_year_merged_pull_requests_count":0,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/kelseyhightower%2Fenvconfig/issues","maintainers":[],"active_maintainers":[]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-23.10/packages/golang-github-kelseyhightower-envconfig-dev/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-23.10/packages/golang-github-kelseyhightower-envconfig-dev/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-23.10/packages/golang-github-kelseyhightower-envconfig-dev/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-23.10/packages/golang-github-kelseyhightower-envconfig-dev/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-23.10/packages/golang-github-kelseyhightower-envconfig-dev/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-23.10/packages/golang-github-kelseyhightower-envconfig-dev/codemeta","maintainers":[],"registry":{"name":"ubuntu-23.10","url":"https://launchpad.net/ubuntu/mantic","ecosystem":"ubuntu","default":false,"packages_count":36642,"maintainers_count":0,"namespaces_count":4,"keywords_count":2210,"github":"ubuntu","metadata":{"codename":"mantic","mirror":"http://old-releases.ubuntu.com/ubuntu","funded_packages_count":1830},"icon_url":"https://github.com/ubuntu.png","created_at":"2026-02-04T11:01:48.636Z","updated_at":"2026-10-01T05:06:57.280Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-23.10/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-23.10/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-23.10/namespaces"}},{"id":13581297,"name":"golang-github-kelseyhightower-envconfig-dev","ecosystem":"debian","description":null,"homepage":"https://github.com/kelseyhightower/envconfig","licenses":"mit","normalized_licenses":[],"repository_url":"https://github.com/kelseyhightower/envconfig","keywords_array":["misc"],"namespace":"main","versions_count":1,"first_release_published_at":"2026-02-11T08:52:38.130Z","latest_release_published_at":"2026-02-11T08:52:38.130Z","latest_release_number":"1.3.0-1","last_synced_at":"2026-03-14T05:02:52.174Z","created_at":"2026-02-11T08:52:37.876Z","updated_at":"2026-09-26T10:22:30.010Z","registry_url":"https://tracker.debian.org/pkg/golang-github-kelseyhightower-envconfig-dev","install_command":"apt-get install golang-github-kelseyhightower-envconfig-dev","documentation_url":"https://packages.debian.org/buster/golang-github-kelseyhightower-envconfig-dev","metadata":{"component":"main","architecture":"all","priority":"extra","binary":"golang-github-kelseyhightower-envconfig-dev","standards_version":"4.0.0","maintainer":"Pirate Praveen \u003cpraveen@debian.org\u003e","build_depends":"debhelper (\u003e= 9), golang-go, dh-golang","build_depends_indep":null,"build_depends_arch":null},"repo_metadata":{"id":11670029,"uuid":"14179252","full_name":"kelseyhightower/envconfig","owner":"kelseyhightower","description":"Golang library for managing configuration data from environment variables","archived":false,"fork":false,"pushed_at":"2025-06-28T02:01:37.000Z","size":101,"stargazers_count":5469,"open_issues_count":62,"forks_count":397,"subscribers_count":34,"default_branch":"master","last_synced_at":"2026-09-26T06:46:17.193Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":null,"language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/kelseyhightower.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":"MAINTAINERS","copyright":null,"agents":null,"claude":null,"gemini":null,"cursor":null,"copilot":null,"dco":null,"cla":null,"disclosure":null}},"created_at":"2013-11-06T17:01:55.000Z","updated_at":"2026-09-25T14:07:23.000Z","dependencies_parsed_at":"2026-08-06T01:41:57.803Z","dependency_job_id":null,"html_url":"https://github.com/kelseyhightower/envconfig","commit_stats":{"total_commits":108,"total_committers":50,"mean_commits":2.16,"dds":0.8148148148148149,"last_synced_commit":"10e87fe9eaec671f89425dc366f004a9336bcc8f"},"previous_names":[],"tags_count":6,"template":false,"template_full_name":null,"purl":"pkg:github/kelseyhightower/envconfig","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kelseyhightower%2Fenvconfig","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kelseyhightower%2Fenvconfig/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kelseyhightower%2Fenvconfig/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kelseyhightower%2Fenvconfig/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/kelseyhightower","download_url":"https://codeload.github.com/kelseyhightower/envconfig/tar.gz/refs/heads/master","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kelseyhightower%2Fenvconfig/sbom","scorecard":{"id":554485,"data":{"date":"2025-08-11","repo":{"name":"github.com/kelseyhightower/envconfig","commit":"7834011875d613aec60c606b52c2b0fe8949fe91"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":4.2,"checks":[{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Maintained","score":0,"reason":"1 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Code-Review","score":8,"reason":"Found 24/30 approved changesets -- score normalized to 8","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Warn: no topLevel permission defined: .github/workflows/go.yml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/go.yml:19: update your workflow using https://app.stepsecurity.io/secureworkflow/kelseyhightower/envconfig/go.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/go.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/kelseyhightower/envconfig/go.yml/master?enable=pin","Info:   0 out of   2 GitHub-owned GitHubAction dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Security-Policy","score":0,"reason":"security policy file not detected","details":["Warn: no security policy file detected","Warn: no security file to analyze","Warn: no security file to analyze","Warn: no security file to analyze"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: MIT License: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Branch-Protection","score":0,"reason":"branch protection not enabled on development/release branches","details":["Warn: branch protection not enabled for branch 'master'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 24 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-20T11:58:13.668Z","repository_id":11670029,"created_at":"2025-08-20T11:58:13.668Z","updated_at":"2025-08-20T11:58:13.668Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":341189360,"owners_count":37709542,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-08-22T15:14:58.755Z","status":"online","status_checked_at":"2026-09-26T02:00:06.440Z","response_time":102,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"kelseyhightower","name":"Kelsey Hightower","uuid":"1123322","kind":"user","description":"","email":"kelsey.hightower@gmail.com","website":null,"location":"Washington","twitter":null,"company":null,"icon_url":"https://avatars.githubusercontent.com/u/1123322?u=e9afe6d5b9bd6c20bbaf40f76b6188619fc24436\u0026v=4","repositories_count":195,"last_synced_at":"2026-09-25T03:11:39.839Z","metadata":{"has_sponsors_listing":false,"funding":null},"html_url":"https://github.com/kelseyhightower","funding_links":[],"total_stars":143349,"followers":24771,"following":13,"created_at":"2022-11-05T15:13:05.765Z","updated_at":"2026-09-25T03:11:39.865Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/kelseyhightower","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/kelseyhightower/repositories"},"tags":[{"name":"v1.4.0","sha":"0b417c4ec4a8a82eecc22a1459a504aa55163d61","kind":"commit","published_at":"2019-05-24T18:54:28.000Z","download_url":"https://codeload.github.com/kelseyhightower/envconfig/tar.gz/v1.4.0","html_url":"https://github.com/kelseyhightower/envconfig/releases/tag/v1.4.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/kelseyhightower/envconfig@v1.4.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kelseyhightower%2Fenvconfig/tags/v1.4.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kelseyhightower%2Fenvconfig/tags/v1.4.0/manifests"},{"name":"v1.3.0","sha":"f611eb38b3875cc3bd991ca91c51d06446afa14c","kind":"commit","published_at":"2017-01-24T16:28:13.000Z","download_url":"https://codeload.github.com/kelseyhightower/envconfig/tar.gz/v1.3.0","html_url":"https://github.com/kelseyhightower/envconfig/releases/tag/v1.3.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/kelseyhightower/envconfig@v1.3.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kelseyhightower%2Fenvconfig/tags/v1.3.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kelseyhightower%2Fenvconfig/tags/v1.3.0/manifests"},{"name":"v1.2.0","sha":"9aca109c9aec4633fced9717c4a09ecab3d33111","kind":"commit","published_at":"2016-10-19T16:24:55.000Z","download_url":"https://codeload.github.com/kelseyhightower/envconfig/tar.gz/v1.2.0","html_url":"https://github.com/kelseyhightower/envconfig/releases/tag/v1.2.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/kelseyhightower/envconfig@v1.2.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kelseyhightower%2Fenvconfig/tags/v1.2.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kelseyhightower%2Fenvconfig/tags/v1.2.0/manifests"},{"name":"1.1.0","sha":"ac12b1f15efba734211a556d8b125110dc538016","kind":"commit","published_at":"2016-03-04T06:38:36.000Z","download_url":"https://codeload.github.com/kelseyhightower/envconfig/tar.gz/1.1.0","html_url":"https://github.com/kelseyhightower/envconfig/releases/tag/1.1.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/kelseyhightower/envconfig@1.1.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kelseyhightower%2Fenvconfig/tags/1.1.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kelseyhightower%2Fenvconfig/tags/1.1.0/manifests"},{"name":"v1.1.0","sha":"ac12b1f15efba734211a556d8b125110dc538016","kind":"commit","published_at":"2016-03-04T06:38:36.000Z","download_url":"https://codeload.github.com/kelseyhightower/envconfig/tar.gz/v1.1.0","html_url":"https://github.com/kelseyhightower/envconfig/releases/tag/v1.1.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/kelseyhightower/envconfig@v1.1.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kelseyhightower%2Fenvconfig/tags/v1.1.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kelseyhightower%2Fenvconfig/tags/v1.1.0/manifests"},{"name":"v1.0.0","sha":"0280e33525f5d88edb71638a80b31724153225ba","kind":"commit","published_at":"2014-03-15T18:19:28.000Z","download_url":"https://codeload.github.com/kelseyhightower/envconfig/tar.gz/v1.0.0","html_url":"https://github.com/kelseyhightower/envconfig/releases/tag/v1.0.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/kelseyhightower/envconfig@v1.0.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kelseyhightower%2Fenvconfig/tags/v1.0.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kelseyhightower%2Fenvconfig/tags/v1.0.0/manifests"}]},"repo_metadata_updated_at":"2026-09-26T10:22:30.009Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":0.0,"dependent_packages_count":0.0,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":100},"purl":"pkg:deb/debian/golang-github-kelseyhightower-envconfig-dev?arch=source\u0026distro=debian-10\u0026repository_url=https://packages.debian.org/buster","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/debian/golang-github-kelseyhightower-envconfig-dev","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/debian/golang-github-kelseyhightower-envconfig-dev","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/debian/golang-github-kelseyhightower-envconfig-dev/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-09-26T01:03:35.347Z","issues_count":48,"pull_requests_count":80,"avg_time_to_close_issue":22378798.545454547,"avg_time_to_close_pull_request":25763564.34090909,"issues_closed_count":22,"pull_requests_closed_count":44,"pull_request_authors_count":66,"issue_authors_count":47,"avg_comments_per_issue":2.3958333333333335,"avg_comments_per_pull_request":1.3875,"merged_pull_requests_count":15,"bot_issues_count":0,"bot_pull_requests_count":0,"past_year_issues_count":0,"past_year_pull_requests_count":9,"past_year_avg_time_to_close_issue":null,"past_year_avg_time_to_close_pull_request":547575.6666666666,"past_year_issues_closed_count":0,"past_year_pull_requests_closed_count":3,"past_year_pull_request_authors_count":5,"past_year_issue_authors_count":0,"past_year_avg_comments_per_issue":null,"past_year_avg_comments_per_pull_request":0.2222222222222222,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":0,"past_year_merged_pull_requests_count":0,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/kelseyhightower%2Fenvconfig/issues","maintainers":[],"active_maintainers":[]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/debian-10/packages/golang-github-kelseyhightower-envconfig-dev/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/debian-10/packages/golang-github-kelseyhightower-envconfig-dev/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/debian-10/packages/golang-github-kelseyhightower-envconfig-dev/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/debian-10/packages/golang-github-kelseyhightower-envconfig-dev/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/debian-10/packages/golang-github-kelseyhightower-envconfig-dev/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/debian-10/packages/golang-github-kelseyhightower-envconfig-dev/codemeta","maintainers":[],"registry":{"name":"debian-10","url":"https://packages.debian.org/buster","ecosystem":"debian","default":false,"packages_count":28836,"maintainers_count":0,"namespaces_count":3,"keywords_count":903,"github":"debian","metadata":{"codename":"buster","mirror":"http://archive.debian.org/debian","funded_packages_count":902},"icon_url":"https://github.com/debian.png","created_at":"2026-02-04T11:01:50.156Z","updated_at":"2026-10-01T05:00:10.867Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/debian-10/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/debian-10/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/debian-10/namespaces"}},{"id":13388216,"name":"golang-github-kelseyhightower-envconfig-dev","ecosystem":"ubuntu","description":null,"homepage":"https://github.com/kelseyhightower/envconfig","licenses":"mit","normalized_licenses":[],"repository_url":"https://github.com/kelseyhightower/envconfig","keywords_array":["universe/misc"],"namespace":"universe","versions_count":1,"first_release_published_at":"2026-02-05T16:21:24.309Z","latest_release_published_at":"2026-02-05T16:21:24.309Z","latest_release_number":"1.3.0-2","last_synced_at":"2026-08-13T18:29:08.241Z","created_at":"2026-02-05T16:21:24.027Z","updated_at":"2026-09-26T10:22:30.044Z","registry_url":"https://launchpad.net/ubuntu/+source/golang-github-kelseyhightower-envconfig-dev","install_command":"apt-get install golang-github-kelseyhightower-envconfig-dev","documentation_url":null,"metadata":{"component":"universe","architecture":"all","priority":"optional","binary":"golang-github-kelseyhightower-envconfig-dev","standards_version":"4.6.0","maintainer":"Pirate Praveen \u003cpraveen@debian.org\u003e","build_depends":"debhelper-compat (= 13), golang-any, dh-golang","build_depends_indep":null,"build_depends_arch":null},"repo_metadata":{"id":11670029,"uuid":"14179252","full_name":"kelseyhightower/envconfig","owner":"kelseyhightower","description":"Golang library for managing configuration data from environment variables","archived":false,"fork":false,"pushed_at":"2025-06-28T02:01:37.000Z","size":101,"stargazers_count":5469,"open_issues_count":62,"forks_count":397,"subscribers_count":34,"default_branch":"master","last_synced_at":"2026-09-26T06:46:17.193Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":null,"language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/kelseyhightower.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":"MAINTAINERS","copyright":null,"agents":null,"claude":null,"gemini":null,"cursor":null,"copilot":null,"dco":null,"cla":null,"disclosure":null}},"created_at":"2013-11-06T17:01:55.000Z","updated_at":"2026-09-25T14:07:23.000Z","dependencies_parsed_at":"2026-08-06T01:41:57.803Z","dependency_job_id":null,"html_url":"https://github.com/kelseyhightower/envconfig","commit_stats":{"total_commits":108,"total_committers":50,"mean_commits":2.16,"dds":0.8148148148148149,"last_synced_commit":"10e87fe9eaec671f89425dc366f004a9336bcc8f"},"previous_names":[],"tags_count":6,"template":false,"template_full_name":null,"purl":"pkg:github/kelseyhightower/envconfig","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kelseyhightower%2Fenvconfig","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kelseyhightower%2Fenvconfig/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kelseyhightower%2Fenvconfig/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kelseyhightower%2Fenvconfig/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/kelseyhightower","download_url":"https://codeload.github.com/kelseyhightower/envconfig/tar.gz/refs/heads/master","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kelseyhightower%2Fenvconfig/sbom","scorecard":{"id":554485,"data":{"date":"2025-08-11","repo":{"name":"github.com/kelseyhightower/envconfig","commit":"7834011875d613aec60c606b52c2b0fe8949fe91"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":4.2,"checks":[{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Maintained","score":0,"reason":"1 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Code-Review","score":8,"reason":"Found 24/30 approved changesets -- score normalized to 8","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Warn: no topLevel permission defined: .github/workflows/go.yml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/go.yml:19: update your workflow using https://app.stepsecurity.io/secureworkflow/kelseyhightower/envconfig/go.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/go.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/kelseyhightower/envconfig/go.yml/master?enable=pin","Info:   0 out of   2 GitHub-owned GitHubAction dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Security-Policy","score":0,"reason":"security policy file not detected","details":["Warn: no security policy file detected","Warn: no security file to analyze","Warn: no security file to analyze","Warn: no security file to analyze"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: MIT License: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Branch-Protection","score":0,"reason":"branch protection not enabled on development/release branches","details":["Warn: branch protection not enabled for branch 'master'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 24 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-20T11:58:13.668Z","repository_id":11670029,"created_at":"2025-08-20T11:58:13.668Z","updated_at":"2025-08-20T11:58:13.668Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":341189360,"owners_count":37709542,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-08-22T15:14:58.755Z","status":"online","status_checked_at":"2026-09-26T02:00:06.440Z","response_time":102,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"kelseyhightower","name":"Kelsey Hightower","uuid":"1123322","kind":"user","description":"","email":"kelsey.hightower@gmail.com","website":null,"location":"Washington","twitter":null,"company":null,"icon_url":"https://avatars.githubusercontent.com/u/1123322?u=e9afe6d5b9bd6c20bbaf40f76b6188619fc24436\u0026v=4","repositories_count":195,"last_synced_at":"2026-09-25T03:11:39.839Z","metadata":{"has_sponsors_listing":false,"funding":null},"html_url":"https://github.com/kelseyhightower","funding_links":[],"total_stars":143349,"followers":24771,"following":13,"created_at":"2022-11-05T15:13:05.765Z","updated_at":"2026-09-25T03:11:39.865Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/kelseyhightower","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/kelseyhightower/repositories"},"tags":[{"name":"v1.4.0","sha":"0b417c4ec4a8a82eecc22a1459a504aa55163d61","kind":"commit","published_at":"2019-05-24T18:54:28.000Z","download_url":"https://codeload.github.com/kelseyhightower/envconfig/tar.gz/v1.4.0","html_url":"https://github.com/kelseyhightower/envconfig/releases/tag/v1.4.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/kelseyhightower/envconfig@v1.4.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kelseyhightower%2Fenvconfig/tags/v1.4.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kelseyhightower%2Fenvconfig/tags/v1.4.0/manifests"},{"name":"v1.3.0","sha":"f611eb38b3875cc3bd991ca91c51d06446afa14c","kind":"commit","published_at":"2017-01-24T16:28:13.000Z","download_url":"https://codeload.github.com/kelseyhightower/envconfig/tar.gz/v1.3.0","html_url":"https://github.com/kelseyhightower/envconfig/releases/tag/v1.3.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/kelseyhightower/envconfig@v1.3.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kelseyhightower%2Fenvconfig/tags/v1.3.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kelseyhightower%2Fenvconfig/tags/v1.3.0/manifests"},{"name":"v1.2.0","sha":"9aca109c9aec4633fced9717c4a09ecab3d33111","kind":"commit","published_at":"2016-10-19T16:24:55.000Z","download_url":"https://codeload.github.com/kelseyhightower/envconfig/tar.gz/v1.2.0","html_url":"https://github.com/kelseyhightower/envconfig/releases/tag/v1.2.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/kelseyhightower/envconfig@v1.2.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kelseyhightower%2Fenvconfig/tags/v1.2.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kelseyhightower%2Fenvconfig/tags/v1.2.0/manifests"},{"name":"1.1.0","sha":"ac12b1f15efba734211a556d8b125110dc538016","kind":"commit","published_at":"2016-03-04T06:38:36.000Z","download_url":"https://codeload.github.com/kelseyhightower/envconfig/tar.gz/1.1.0","html_url":"https://github.com/kelseyhightower/envconfig/releases/tag/1.1.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/kelseyhightower/envconfig@1.1.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kelseyhightower%2Fenvconfig/tags/1.1.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kelseyhightower%2Fenvconfig/tags/1.1.0/manifests"},{"name":"v1.1.0","sha":"ac12b1f15efba734211a556d8b125110dc538016","kind":"commit","published_at":"2016-03-04T06:38:36.000Z","download_url":"https://codeload.github.com/kelseyhightower/envconfig/tar.gz/v1.1.0","html_url":"https://github.com/kelseyhightower/envconfig/releases/tag/v1.1.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/kelseyhightower/envconfig@v1.1.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kelseyhightower%2Fenvconfig/tags/v1.1.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kelseyhightower%2Fenvconfig/tags/v1.1.0/manifests"},{"name":"v1.0.0","sha":"0280e33525f5d88edb71638a80b31724153225ba","kind":"commit","published_at":"2014-03-15T18:19:28.000Z","download_url":"https://codeload.github.com/kelseyhightower/envconfig/tar.gz/v1.0.0","html_url":"https://github.com/kelseyhightower/envconfig/releases/tag/v1.0.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/kelseyhightower/envconfig@v1.0.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kelseyhightower%2Fenvconfig/tags/v1.0.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kelseyhightower%2Fenvconfig/tags/v1.0.0/manifests"}]},"repo_metadata_updated_at":"2026-09-26T10:22:30.043Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":0.0,"dependent_packages_count":0.0,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":100},"purl":"pkg:deb/ubuntu/golang-github-kelseyhightower-envconfig-dev?arch=source\u0026distro=ubuntu-24.04","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/ubuntu/golang-github-kelseyhightower-envconfig-dev","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/ubuntu/golang-github-kelseyhightower-envconfig-dev","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/ubuntu/golang-github-kelseyhightower-envconfig-dev/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-09-26T01:03:35.347Z","issues_count":48,"pull_requests_count":80,"avg_time_to_close_issue":22378798.545454547,"avg_time_to_close_pull_request":25763564.34090909,"issues_closed_count":22,"pull_requests_closed_count":44,"pull_request_authors_count":66,"issue_authors_count":47,"avg_comments_per_issue":2.3958333333333335,"avg_comments_per_pull_request":1.3875,"merged_pull_requests_count":15,"bot_issues_count":0,"bot_pull_requests_count":0,"past_year_issues_count":0,"past_year_pull_requests_count":9,"past_year_avg_time_to_close_issue":null,"past_year_avg_time_to_close_pull_request":547575.6666666666,"past_year_issues_closed_count":0,"past_year_pull_requests_closed_count":3,"past_year_pull_request_authors_count":5,"past_year_issue_authors_count":0,"past_year_avg_comments_per_issue":null,"past_year_avg_comments_per_pull_request":0.2222222222222222,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":0,"past_year_merged_pull_requests_count":0,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/kelseyhightower%2Fenvconfig/issues","maintainers":[],"active_maintainers":[]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-24.04/packages/golang-github-kelseyhightower-envconfig-dev/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-24.04/packages/golang-github-kelseyhightower-envconfig-dev/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-24.04/packages/golang-github-kelseyhightower-envconfig-dev/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-24.04/packages/golang-github-kelseyhightower-envconfig-dev/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-24.04/packages/golang-github-kelseyhightower-envconfig-dev/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-24.04/packages/golang-github-kelseyhightower-envconfig-dev/codemeta","maintainers":[],"registry":{"name":"ubuntu-24.04","url":"https://launchpad.net/ubuntu/noble","ecosystem":"ubuntu","default":true,"packages_count":37306,"maintainers_count":0,"namespaces_count":4,"keywords_count":1696,"github":"ubuntu","metadata":{"codename":"noble","funded_packages_count":1835},"icon_url":"https://github.com/ubuntu.png","created_at":"2026-02-04T11:01:45.928Z","updated_at":"2026-10-01T05:06:51.700Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-24.04/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-24.04/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-24.04/namespaces"}},{"id":13448628,"name":"golang-github-kelseyhightower-envconfig-dev","ecosystem":"ubuntu","description":null,"homepage":"https://github.com/kelseyhightower/envconfig","licenses":"mit","normalized_licenses":[],"repository_url":"https://github.com/kelseyhightower/envconfig","keywords_array":["universe/misc"],"namespace":"universe","versions_count":1,"first_release_published_at":"2026-02-08T15:51:19.912Z","latest_release_published_at":"2026-02-08T15:51:19.912Z","latest_release_number":"1.3.0-2","last_synced_at":"2026-03-08T16:49:34.022Z","created_at":"2026-02-08T15:51:19.415Z","updated_at":"2026-09-26T10:22:30.084Z","registry_url":"https://launchpad.net/ubuntu/+source/golang-github-kelseyhightower-envconfig-dev","install_command":"apt-get install golang-github-kelseyhightower-envconfig-dev","documentation_url":null,"metadata":{"component":"universe","architecture":"all","priority":"optional","binary":"golang-github-kelseyhightower-envconfig-dev","standards_version":"4.6.0","maintainer":"Pirate Praveen \u003cpraveen@debian.org\u003e","build_depends":"debhelper-compat (= 13), golang-any, dh-golang","build_depends_indep":null,"build_depends_arch":null},"repo_metadata":{"id":11670029,"uuid":"14179252","full_name":"kelseyhightower/envconfig","owner":"kelseyhightower","description":"Golang library for managing configuration data from environment variables","archived":false,"fork":false,"pushed_at":"2025-06-28T02:01:37.000Z","size":101,"stargazers_count":5469,"open_issues_count":62,"forks_count":397,"subscribers_count":34,"default_branch":"master","last_synced_at":"2026-09-26T06:46:17.193Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":null,"language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/kelseyhightower.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":"MAINTAINERS","copyright":null,"agents":null,"claude":null,"gemini":null,"cursor":null,"copilot":null,"dco":null,"cla":null,"disclosure":null}},"created_at":"2013-11-06T17:01:55.000Z","updated_at":"2026-09-25T14:07:23.000Z","dependencies_parsed_at":"2026-08-06T01:41:57.803Z","dependency_job_id":null,"html_url":"https://github.com/kelseyhightower/envconfig","commit_stats":{"total_commits":108,"total_committers":50,"mean_commits":2.16,"dds":0.8148148148148149,"last_synced_commit":"10e87fe9eaec671f89425dc366f004a9336bcc8f"},"previous_names":[],"tags_count":6,"template":false,"template_full_name":null,"purl":"pkg:github/kelseyhightower/envconfig","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kelseyhightower%2Fenvconfig","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kelseyhightower%2Fenvconfig/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kelseyhightower%2Fenvconfig/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kelseyhightower%2Fenvconfig/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/kelseyhightower","download_url":"https://codeload.github.com/kelseyhightower/envconfig/tar.gz/refs/heads/master","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kelseyhightower%2Fenvconfig/sbom","scorecard":{"id":554485,"data":{"date":"2025-08-11","repo":{"name":"github.com/kelseyhightower/envconfig","commit":"7834011875d613aec60c606b52c2b0fe8949fe91"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":4.2,"checks":[{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Maintained","score":0,"reason":"1 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Code-Review","score":8,"reason":"Found 24/30 approved changesets -- score normalized to 8","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Warn: no topLevel permission defined: .github/workflows/go.yml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/go.yml:19: update your workflow using https://app.stepsecurity.io/secureworkflow/kelseyhightower/envconfig/go.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/go.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/kelseyhightower/envconfig/go.yml/master?enable=pin","Info:   0 out of   2 GitHub-owned GitHubAction dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Security-Policy","score":0,"reason":"security policy file not detected","details":["Warn: no security policy file detected","Warn: no security file to analyze","Warn: no security file to analyze","Warn: no security file to analyze"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: MIT License: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Branch-Protection","score":0,"reason":"branch protection not enabled on development/release branches","details":["Warn: branch protection not enabled for branch 'master'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 24 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-20T11:58:13.668Z","repository_id":11670029,"created_at":"2025-08-20T11:58:13.668Z","updated_at":"2025-08-20T11:58:13.668Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":341189360,"owners_count":37709542,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-08-22T15:14:58.755Z","status":"online","status_checked_at":"2026-09-26T02:00:06.440Z","response_time":102,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"kelseyhightower","name":"Kelsey Hightower","uuid":"1123322","kind":"user","description":"","email":"kelsey.hightower@gmail.com","website":null,"location":"Washington","twitter":null,"company":null,"icon_url":"https://avatars.githubusercontent.com/u/1123322?u=e9afe6d5b9bd6c20bbaf40f76b6188619fc24436\u0026v=4","repositories_count":195,"last_synced_at":"2026-09-25T03:11:39.839Z","metadata":{"has_sponsors_listing":false,"funding":null},"html_url":"https://github.com/kelseyhightower","funding_links":[],"total_stars":143349,"followers":24771,"following":13,"created_at":"2022-11-05T15:13:05.765Z","updated_at":"2026-09-25T03:11:39.865Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/kelseyhightower","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/kelseyhightower/repositories"},"tags":[{"name":"v1.4.0","sha":"0b417c4ec4a8a82eecc22a1459a504aa55163d61","kind":"commit","published_at":"2019-05-24T18:54:28.000Z","download_url":"https://codeload.github.com/kelseyhightower/envconfig/tar.gz/v1.4.0","html_url":"https://github.com/kelseyhightower/envconfig/releases/tag/v1.4.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/kelseyhightower/envconfig@v1.4.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kelseyhightower%2Fenvconfig/tags/v1.4.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kelseyhightower%2Fenvconfig/tags/v1.4.0/manifests"},{"name":"v1.3.0","sha":"f611eb38b3875cc3bd991ca91c51d06446afa14c","kind":"commit","published_at":"2017-01-24T16:28:13.000Z","download_url":"https://codeload.github.com/kelseyhightower/envconfig/tar.gz/v1.3.0","html_url":"https://github.com/kelseyhightower/envconfig/releases/tag/v1.3.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/kelseyhightower/envconfig@v1.3.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kelseyhightower%2Fenvconfig/tags/v1.3.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kelseyhightower%2Fenvconfig/tags/v1.3.0/manifests"},{"name":"v1.2.0","sha":"9aca109c9aec4633fced9717c4a09ecab3d33111","kind":"commit","published_at":"2016-10-19T16:24:55.000Z","download_url":"https://codeload.github.com/kelseyhightower/envconfig/tar.gz/v1.2.0","html_url":"https://github.com/kelseyhightower/envconfig/releases/tag/v1.2.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/kelseyhightower/envconfig@v1.2.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kelseyhightower%2Fenvconfig/tags/v1.2.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kelseyhightower%2Fenvconfig/tags/v1.2.0/manifests"},{"name":"1.1.0","sha":"ac12b1f15efba734211a556d8b125110dc538016","kind":"commit","published_at":"2016-03-04T06:38:36.000Z","download_url":"https://codeload.github.com/kelseyhightower/envconfig/tar.gz/1.1.0","html_url":"https://github.com/kelseyhightower/envconfig/releases/tag/1.1.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/kelseyhightower/envconfig@1.1.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kelseyhightower%2Fenvconfig/tags/1.1.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kelseyhightower%2Fenvconfig/tags/1.1.0/manifests"},{"name":"v1.1.0","sha":"ac12b1f15efba734211a556d8b125110dc538016","kind":"commit","published_at":"2016-03-04T06:38:36.000Z","download_url":"https://codeload.github.com/kelseyhightower/envconfig/tar.gz/v1.1.0","html_url":"https://github.com/kelseyhightower/envconfig/releases/tag/v1.1.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/kelseyhightower/envconfig@v1.1.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kelseyhightower%2Fenvconfig/tags/v1.1.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kelseyhightower%2Fenvconfig/tags/v1.1.0/manifests"},{"name":"v1.0.0","sha":"0280e33525f5d88edb71638a80b31724153225ba","kind":"commit","published_at":"2014-03-15T18:19:28.000Z","download_url":"https://codeload.github.com/kelseyhightower/envconfig/tar.gz/v1.0.0","html_url":"https://github.com/kelseyhightower/envconfig/releases/tag/v1.0.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/kelseyhightower/envconfig@v1.0.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kelseyhightower%2Fenvconfig/tags/v1.0.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kelseyhightower%2Fenvconfig/tags/v1.0.0/manifests"}]},"repo_metadata_updated_at":"2026-09-26T10:22:30.084Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":0.0,"dependent_packages_count":0.0,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":100},"purl":"pkg:deb/ubuntu/golang-github-kelseyhightower-envconfig-dev?arch=source\u0026distro=ubuntu-24.10\u0026repository_url=https://launchpad.net/ubuntu/oracular","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/ubuntu/golang-github-kelseyhightower-envconfig-dev","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/ubuntu/golang-github-kelseyhightower-envconfig-dev","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/ubuntu/golang-github-kelseyhightower-envconfig-dev/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-09-26T01:03:35.347Z","issues_count":48,"pull_requests_count":80,"avg_time_to_close_issue":22378798.545454547,"avg_time_to_close_pull_request":25763564.34090909,"issues_closed_count":22,"pull_requests_closed_count":44,"pull_request_authors_count":66,"issue_authors_count":47,"avg_comments_per_issue":2.3958333333333335,"avg_comments_per_pull_request":1.3875,"merged_pull_requests_count":15,"bot_issues_count":0,"bot_pull_requests_count":0,"past_year_issues_count":0,"past_year_pull_requests_count":9,"past_year_avg_time_to_close_issue":null,"past_year_avg_time_to_close_pull_request":547575.6666666666,"past_year_issues_closed_count":0,"past_year_pull_requests_closed_count":3,"past_year_pull_request_authors_count":5,"past_year_issue_authors_count":0,"past_year_avg_comments_per_issue":null,"past_year_avg_comments_per_pull_request":0.2222222222222222,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":0,"past_year_merged_pull_requests_count":0,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/kelseyhightower%2Fenvconfig/issues","maintainers":[],"active_maintainers":[]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-24.10/packages/golang-github-kelseyhightower-envconfig-dev/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-24.10/packages/golang-github-kelseyhightower-envconfig-dev/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-24.10/packages/golang-github-kelseyhightower-envconfig-dev/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-24.10/packages/golang-github-kelseyhightower-envconfig-dev/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-24.10/packages/golang-github-kelseyhightower-envconfig-dev/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-24.10/packages/golang-github-kelseyhightower-envconfig-dev/codemeta","maintainers":[],"registry":{"name":"ubuntu-24.10","url":"https://launchpad.net/ubuntu/oracular","ecosystem":"ubuntu","default":false,"packages_count":38437,"maintainers_count":0,"namespaces_count":4,"keywords_count":1440,"github":"ubuntu","metadata":{"codename":"oracular","mirror":"http://old-releases.ubuntu.com/ubuntu","funded_packages_count":1980},"icon_url":"https://github.com/ubuntu.png","created_at":"2026-02-04T11:01:48.028Z","updated_at":"2026-10-01T05:01:38.869Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-24.10/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-24.10/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-24.10/namespaces"}},{"id":13505048,"name":"golang-github-kelseyhightower-envconfig-dev","ecosystem":"debian","description":null,"homepage":"https://github.com/kelseyhightower/envconfig","licenses":"mit","normalized_licenses":[],"repository_url":"https://github.com/kelseyhightower/envconfig","keywords_array":["golang"],"namespace":"main","versions_count":1,"first_release_published_at":"2026-02-10T19:00:25.671Z","latest_release_published_at":"2026-02-10T19:00:25.671Z","latest_release_number":"1.3.0-1.1","last_synced_at":"2026-03-14T10:11:46.070Z","created_at":"2026-02-10T19:00:25.328Z","updated_at":"2026-09-26T10:22:30.100Z","registry_url":"https://tracker.debian.org/pkg/golang-github-kelseyhightower-envconfig-dev","install_command":"apt-get install golang-github-kelseyhightower-envconfig-dev","documentation_url":"https://packages.debian.org/bullseye/golang-github-kelseyhightower-envconfig-dev","metadata":{"component":"main","architecture":"all","priority":"extra","binary":"golang-github-kelseyhightower-envconfig-dev","standards_version":"4.0.0","maintainer":"Pirate Praveen \u003cpraveen@debian.org\u003e","build_depends":"debhelper (\u003e= 9), golang-go, dh-golang","build_depends_indep":null,"build_depends_arch":null},"repo_metadata":{"id":11670029,"uuid":"14179252","full_name":"kelseyhightower/envconfig","owner":"kelseyhightower","description":"Golang library for managing configuration data from environment variables","archived":false,"fork":false,"pushed_at":"2025-06-28T02:01:37.000Z","size":101,"stargazers_count":5469,"open_issues_count":62,"forks_count":397,"subscribers_count":34,"default_branch":"master","last_synced_at":"2026-09-26T06:46:17.193Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":null,"language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/kelseyhightower.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":"MAINTAINERS","copyright":null,"agents":null,"claude":null,"gemini":null,"cursor":null,"copilot":null,"dco":null,"cla":null,"disclosure":null}},"created_at":"2013-11-06T17:01:55.000Z","updated_at":"2026-09-25T14:07:23.000Z","dependencies_parsed_at":"2026-08-06T01:41:57.803Z","dependency_job_id":null,"html_url":"https://github.com/kelseyhightower/envconfig","commit_stats":{"total_commits":108,"total_committers":50,"mean_commits":2.16,"dds":0.8148148148148149,"last_synced_commit":"10e87fe9eaec671f89425dc366f004a9336bcc8f"},"previous_names":[],"tags_count":6,"template":false,"template_full_name":null,"purl":"pkg:github/kelseyhightower/envconfig","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kelseyhightower%2Fenvconfig","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kelseyhightower%2Fenvconfig/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kelseyhightower%2Fenvconfig/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kelseyhightower%2Fenvconfig/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/kelseyhightower","download_url":"https://codeload.github.com/kelseyhightower/envconfig/tar.gz/refs/heads/master","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kelseyhightower%2Fenvconfig/sbom","scorecard":{"id":554485,"data":{"date":"2025-08-11","repo":{"name":"github.com/kelseyhightower/envconfig","commit":"7834011875d613aec60c606b52c2b0fe8949fe91"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":4.2,"checks":[{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Maintained","score":0,"reason":"1 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Code-Review","score":8,"reason":"Found 24/30 approved changesets -- score normalized to 8","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Warn: no topLevel permission defined: .github/workflows/go.yml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/go.yml:19: update your workflow using https://app.stepsecurity.io/secureworkflow/kelseyhightower/envconfig/go.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/go.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/kelseyhightower/envconfig/go.yml/master?enable=pin","Info:   0 out of   2 GitHub-owned GitHubAction dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Security-Policy","score":0,"reason":"security policy file not detected","details":["Warn: no security policy file detected","Warn: no security file to analyze","Warn: no security file to analyze","Warn: no security file to analyze"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: MIT License: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Branch-Protection","score":0,"reason":"branch protection not enabled on development/release branches","details":["Warn: branch protection not enabled for branch 'master'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 24 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-20T11:58:13.668Z","repository_id":11670029,"created_at":"2025-08-20T11:58:13.668Z","updated_at":"2025-08-20T11:58:13.668Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":341189360,"owners_count":37709542,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-08-22T15:14:58.755Z","status":"online","status_checked_at":"2026-09-26T02:00:06.440Z","response_time":102,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"kelseyhightower","name":"Kelsey Hightower","uuid":"1123322","kind":"user","description":"","email":"kelsey.hightower@gmail.com","website":null,"location":"Washington","twitter":null,"company":null,"icon_url":"https://avatars.githubusercontent.com/u/1123322?u=e9afe6d5b9bd6c20bbaf40f76b6188619fc24436\u0026v=4","repositories_count":195,"last_synced_at":"2026-09-25T03:11:39.839Z","metadata":{"has_sponsors_listing":false,"funding":null},"html_url":"https://github.com/kelseyhightower","funding_links":[],"total_stars":143349,"followers":24771,"following":13,"created_at":"2022-11-05T15:13:05.765Z","updated_at":"2026-09-25T03:11:39.865Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/kelseyhightower","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/kelseyhightower/repositories"},"tags":[{"name":"v1.4.0","sha":"0b417c4ec4a8a82eecc22a1459a504aa55163d61","kind":"commit","published_at":"2019-05-24T18:54:28.000Z","download_url":"https://codeload.github.com/kelseyhightower/envconfig/tar.gz/v1.4.0","html_url":"https://github.com/kelseyhightower/envconfig/releases/tag/v1.4.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/kelseyhightower/envconfig@v1.4.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kelseyhightower%2Fenvconfig/tags/v1.4.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kelseyhightower%2Fenvconfig/tags/v1.4.0/manifests"},{"name":"v1.3.0","sha":"f611eb38b3875cc3bd991ca91c51d06446afa14c","kind":"commit","published_at":"2017-01-24T16:28:13.000Z","download_url":"https://codeload.github.com/kelseyhightower/envconfig/tar.gz/v1.3.0","html_url":"https://github.com/kelseyhightower/envconfig/releases/tag/v1.3.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/kelseyhightower/envconfig@v1.3.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kelseyhightower%2Fenvconfig/tags/v1.3.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kelseyhightower%2Fenvconfig/tags/v1.3.0/manifests"},{"name":"v1.2.0","sha":"9aca109c9aec4633fced9717c4a09ecab3d33111","kind":"commit","published_at":"2016-10-19T16:24:55.000Z","download_url":"https://codeload.github.com/kelseyhightower/envconfig/tar.gz/v1.2.0","html_url":"https://github.com/kelseyhightower/envconfig/releases/tag/v1.2.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/kelseyhightower/envconfig@v1.2.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kelseyhightower%2Fenvconfig/tags/v1.2.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kelseyhightower%2Fenvconfig/tags/v1.2.0/manifests"},{"name":"1.1.0","sha":"ac12b1f15efba734211a556d8b125110dc538016","kind":"commit","published_at":"2016-03-04T06:38:36.000Z","download_url":"https://codeload.github.com/kelseyhightower/envconfig/tar.gz/1.1.0","html_url":"https://github.com/kelseyhightower/envconfig/releases/tag/1.1.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/kelseyhightower/envconfig@1.1.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kelseyhightower%2Fenvconfig/tags/1.1.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kelseyhightower%2Fenvconfig/tags/1.1.0/manifests"},{"name":"v1.1.0","sha":"ac12b1f15efba734211a556d8b125110dc538016","kind":"commit","published_at":"2016-03-04T06:38:36.000Z","download_url":"https://codeload.github.com/kelseyhightower/envconfig/tar.gz/v1.1.0","html_url":"https://github.com/kelseyhightower/envconfig/releases/tag/v1.1.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/kelseyhightower/envconfig@v1.1.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kelseyhightower%2Fenvconfig/tags/v1.1.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kelseyhightower%2Fenvconfig/tags/v1.1.0/manifests"},{"name":"v1.0.0","sha":"0280e33525f5d88edb71638a80b31724153225ba","kind":"commit","published_at":"2014-03-15T18:19:28.000Z","download_url":"https://codeload.github.com/kelseyhightower/envconfig/tar.gz/v1.0.0","html_url":"https://github.com/kelseyhightower/envconfig/releases/tag/v1.0.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/kelseyhightower/envconfig@v1.0.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kelseyhightower%2Fenvconfig/tags/v1.0.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kelseyhightower%2Fenvconfig/tags/v1.0.0/manifests"}]},"repo_metadata_updated_at":"2026-09-26T10:22:30.100Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":0.0,"dependent_packages_count":0.0,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":100},"purl":"pkg:deb/debian/golang-github-kelseyhightower-envconfig-dev?arch=source\u0026distro=debian-11\u0026repository_url=https://packages.debian.org/bullseye","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/debian/golang-github-kelseyhightower-envconfig-dev","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/debian/golang-github-kelseyhightower-envconfig-dev","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/debian/golang-github-kelseyhightower-envconfig-dev/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-09-26T01:03:35.347Z","issues_count":48,"pull_requests_count":80,"avg_time_to_close_issue":22378798.545454547,"avg_time_to_close_pull_request":25763564.34090909,"issues_closed_count":22,"pull_requests_closed_count":44,"pull_request_authors_count":66,"issue_authors_count":47,"avg_comments_per_issue":2.3958333333333335,"avg_comments_per_pull_request":1.3875,"merged_pull_requests_count":15,"bot_issues_count":0,"bot_pull_requests_count":0,"past_year_issues_count":0,"past_year_pull_requests_count":9,"past_year_avg_time_to_close_issue":null,"past_year_avg_time_to_close_pull_request":547575.6666666666,"past_year_issues_closed_count":0,"past_year_pull_requests_closed_count":3,"past_year_pull_request_authors_count":5,"past_year_issue_authors_count":0,"past_year_avg_comments_per_issue":null,"past_year_avg_comments_per_pull_request":0.2222222222222222,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":0,"past_year_merged_pull_requests_count":0,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/kelseyhightower%2Fenvconfig/issues","maintainers":[],"active_maintainers":[]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/debian-11/packages/golang-github-kelseyhightower-envconfig-dev/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/debian-11/packages/golang-github-kelseyhightower-envconfig-dev/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/debian-11/packages/golang-github-kelseyhightower-envconfig-dev/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/debian-11/packages/golang-github-kelseyhightower-envconfig-dev/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/debian-11/packages/golang-github-kelseyhightower-envconfig-dev/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/debian-11/packages/golang-github-kelseyhightower-envconfig-dev/codemeta","maintainers":[],"registry":{"name":"debian-11","url":"https://packages.debian.org/bullseye","ecosystem":"debian","default":false,"packages_count":31268,"maintainers_count":0,"namespaces_count":3,"keywords_count":758,"github":"debian","metadata":{"codename":"bullseye","funded_packages_count":1199},"icon_url":"https://github.com/debian.png","created_at":"2026-02-04T11:01:49.702Z","updated_at":"2026-10-01T05:07:03.156Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/debian-11/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/debian-11/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/debian-11/namespaces"}},{"id":13417863,"name":"golang-github-kelseyhightower-envconfig-dev","ecosystem":"ubuntu","description":null,"homepage":"https://github.com/kelseyhightower/envconfig","licenses":"mit","normalized_licenses":[],"repository_url":"https://github.com/kelseyhightower/envconfig","keywords_array":["universe/misc"],"namespace":"universe","versions_count":1,"first_release_published_at":"2026-02-07T03:34:39.577Z","latest_release_published_at":"2026-02-07T03:34:39.577Z","latest_release_number":"1.3.0-2","last_synced_at":"2026-08-03T04:04:44.447Z","created_at":"2026-02-07T03:34:39.285Z","updated_at":"2026-09-26T10:22:30.340Z","registry_url":"https://launchpad.net/ubuntu/+source/golang-github-kelseyhightower-envconfig-dev","install_command":"apt-get install golang-github-kelseyhightower-envconfig-dev","documentation_url":null,"metadata":{"component":"universe","architecture":"all","priority":"optional","binary":"golang-github-kelseyhightower-envconfig-dev","standards_version":"4.6.0","maintainer":"Pirate Praveen \u003cpraveen@debian.org\u003e","build_depends":"debhelper-compat (= 13), golang-any, dh-golang","build_depends_indep":null,"build_depends_arch":null},"repo_metadata":{"id":11670029,"uuid":"14179252","full_name":"kelseyhightower/envconfig","owner":"kelseyhightower","description":"Golang library for managing configuration data from environment variables","archived":false,"fork":false,"pushed_at":"2025-06-28T02:01:37.000Z","size":101,"stargazers_count":5469,"open_issues_count":62,"forks_count":397,"subscribers_count":34,"default_branch":"master","last_synced_at":"2026-09-26T06:46:17.193Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":null,"language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/kelseyhightower.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":"MAINTAINERS","copyright":null,"agents":null,"claude":null,"gemini":null,"cursor":null,"copilot":null,"dco":null,"cla":null,"disclosure":null}},"created_at":"2013-11-06T17:01:55.000Z","updated_at":"2026-09-25T14:07:23.000Z","dependencies_parsed_at":"2026-08-06T01:41:57.803Z","dependency_job_id":null,"html_url":"https://github.com/kelseyhightower/envconfig","commit_stats":{"total_commits":108,"total_committers":50,"mean_commits":2.16,"dds":0.8148148148148149,"last_synced_commit":"10e87fe9eaec671f89425dc366f004a9336bcc8f"},"previous_names":[],"tags_count":6,"template":false,"template_full_name":null,"purl":"pkg:github/kelseyhightower/envconfig","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kelseyhightower%2Fenvconfig","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kelseyhightower%2Fenvconfig/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kelseyhightower%2Fenvconfig/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kelseyhightower%2Fenvconfig/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/kelseyhightower","download_url":"https://codeload.github.com/kelseyhightower/envconfig/tar.gz/refs/heads/master","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kelseyhightower%2Fenvconfig/sbom","scorecard":{"id":554485,"data":{"date":"2025-08-11","repo":{"name":"github.com/kelseyhightower/envconfig","commit":"7834011875d613aec60c606b52c2b0fe8949fe91"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":4.2,"checks":[{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Maintained","score":0,"reason":"1 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Code-Review","score":8,"reason":"Found 24/30 approved changesets -- score normalized to 8","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Warn: no topLevel permission defined: .github/workflows/go.yml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/go.yml:19: update your workflow using https://app.stepsecurity.io/secureworkflow/kelseyhightower/envconfig/go.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/go.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/kelseyhightower/envconfig/go.yml/master?enable=pin","Info:   0 out of   2 GitHub-owned GitHubAction dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Security-Policy","score":0,"reason":"security policy file not detected","details":["Warn: no security policy file detected","Warn: no security file to analyze","Warn: no security file to analyze","Warn: no security file to analyze"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: MIT License: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Branch-Protection","score":0,"reason":"branch protection not enabled on development/release branches","details":["Warn: branch protection not enabled for branch 'master'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 24 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-20T11:58:13.668Z","repository_id":11670029,"created_at":"2025-08-20T11:58:13.668Z","updated_at":"2025-08-20T11:58:13.668Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":341189360,"owners_count":37709542,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-08-22T15:14:58.755Z","status":"online","status_checked_at":"2026-09-26T02:00:06.440Z","response_time":102,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"kelseyhightower","name":"Kelsey Hightower","uuid":"1123322","kind":"user","description":"","email":"kelsey.hightower@gmail.com","website":null,"location":"Washington","twitter":null,"company":null,"icon_url":"https://avatars.githubusercontent.com/u/1123322?u=e9afe6d5b9bd6c20bbaf40f76b6188619fc24436\u0026v=4","repositories_count":195,"last_synced_at":"2026-09-25T03:11:39.839Z","metadata":{"has_sponsors_listing":false,"funding":null},"html_url":"https://github.com/kelseyhightower","funding_links":[],"total_stars":143349,"followers":24771,"following":13,"created_at":"2022-11-05T15:13:05.765Z","updated_at":"2026-09-25T03:11:39.865Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/kelseyhightower","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/kelseyhightower/repositories"},"tags":[{"name":"v1.4.0","sha":"0b417c4ec4a8a82eecc22a1459a504aa55163d61","kind":"commit","published_at":"2019-05-24T18:54:28.000Z","download_url":"https://codeload.github.com/kelseyhightower/envconfig/tar.gz/v1.4.0","html_url":"https://github.com/kelseyhightower/envconfig/releases/tag/v1.4.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/kelseyhightower/envconfig@v1.4.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kelseyhightower%2Fenvconfig/tags/v1.4.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kelseyhightower%2Fenvconfig/tags/v1.4.0/manifests"},{"name":"v1.3.0","sha":"f611eb38b3875cc3bd991ca91c51d06446afa14c","kind":"commit","published_at":"2017-01-24T16:28:13.000Z","download_url":"https://codeload.github.com/kelseyhightower/envconfig/tar.gz/v1.3.0","html_url":"https://github.com/kelseyhightower/envconfig/releases/tag/v1.3.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/kelseyhightower/envconfig@v1.3.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kelseyhightower%2Fenvconfig/tags/v1.3.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kelseyhightower%2Fenvconfig/tags/v1.3.0/manifests"},{"name":"v1.2.0","sha":"9aca109c9aec4633fced9717c4a09ecab3d33111","kind":"commit","published_at":"2016-10-19T16:24:55.000Z","download_url":"https://codeload.github.com/kelseyhightower/envconfig/tar.gz/v1.2.0","html_url":"https://github.com/kelseyhightower/envconfig/releases/tag/v1.2.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/kelseyhightower/envconfig@v1.2.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kelseyhightower%2Fenvconfig/tags/v1.2.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kelseyhightower%2Fenvconfig/tags/v1.2.0/manifests"},{"name":"1.1.0","sha":"ac12b1f15efba734211a556d8b125110dc538016","kind":"commit","published_at":"2016-03-04T06:38:36.000Z","download_url":"https://codeload.github.com/kelseyhightower/envconfig/tar.gz/1.1.0","html_url":"https://github.com/kelseyhightower/envconfig/releases/tag/1.1.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/kelseyhightower/envconfig@1.1.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kelseyhightower%2Fenvconfig/tags/1.1.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kelseyhightower%2Fenvconfig/tags/1.1.0/manifests"},{"name":"v1.1.0","sha":"ac12b1f15efba734211a556d8b125110dc538016","kind":"commit","published_at":"2016-03-04T06:38:36.000Z","download_url":"https://codeload.github.com/kelseyhightower/envconfig/tar.gz/v1.1.0","html_url":"https://github.com/kelseyhightower/envconfig/releases/tag/v1.1.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/kelseyhightower/envconfig@v1.1.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kelseyhightower%2Fenvconfig/tags/v1.1.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kelseyhightower%2Fenvconfig/tags/v1.1.0/manifests"},{"name":"v1.0.0","sha":"0280e33525f5d88edb71638a80b31724153225ba","kind":"commit","published_at":"2014-03-15T18:19:28.000Z","download_url":"https://codeload.github.com/kelseyhightower/envconfig/tar.gz/v1.0.0","html_url":"https://github.com/kelseyhightower/envconfig/releases/tag/v1.0.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/kelseyhightower/envconfig@v1.0.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kelseyhightower%2Fenvconfig/tags/v1.0.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kelseyhightower%2Fenvconfig/tags/v1.0.0/manifests"}]},"repo_metadata_updated_at":"2026-09-26T10:22:30.339Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":0.0,"dependent_packages_count":0.0,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":100},"purl":"pkg:deb/ubuntu/golang-github-kelseyhightower-envconfig-dev?arch=source\u0026distro=ubuntu-22.04\u0026repository_url=https://launchpad.net/ubuntu/jammy","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/ubuntu/golang-github-kelseyhightower-envconfig-dev","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/ubuntu/golang-github-kelseyhightower-envconfig-dev","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/ubuntu/golang-github-kelseyhightower-envconfig-dev/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-09-26T01:03:35.347Z","issues_count":48,"pull_requests_count":80,"avg_time_to_close_issue":22378798.545454547,"avg_time_to_close_pull_request":25763564.34090909,"issues_closed_count":22,"pull_requests_closed_count":44,"pull_request_authors_count":66,"issue_authors_count":47,"avg_comments_per_issue":2.3958333333333335,"avg_comments_per_pull_request":1.3875,"merged_pull_requests_count":15,"bot_issues_count":0,"bot_pull_requests_count":0,"past_year_issues_count":0,"past_year_pull_requests_count":9,"past_year_avg_time_to_close_issue":null,"past_year_avg_time_to_close_pull_request":547575.6666666666,"past_year_issues_closed_count":0,"past_year_pull_requests_closed_count":3,"past_year_pull_request_authors_count":5,"past_year_issue_authors_count":0,"past_year_avg_comments_per_issue":null,"past_year_avg_comments_per_pull_request":0.2222222222222222,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":0,"past_year_merged_pull_requests_count":0,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/kelseyhightower%2Fenvconfig/issues","maintainers":[],"active_maintainers":[]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-22.04/packages/golang-github-kelseyhightower-envconfig-dev/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-22.04/packages/golang-github-kelseyhightower-envconfig-dev/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-22.04/packages/golang-github-kelseyhightower-envconfig-dev/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-22.04/packages/golang-github-kelseyhightower-envconfig-dev/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-22.04/packages/golang-github-kelseyhightower-envconfig-dev/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-22.04/packages/golang-github-kelseyhightower-envconfig-dev/codemeta","maintainers":[],"registry":{"name":"ubuntu-22.04","url":"https://launchpad.net/ubuntu/jammy","ecosystem":"ubuntu","default":false,"packages_count":34289,"maintainers_count":0,"namespaces_count":4,"keywords_count":1498,"github":"ubuntu","metadata":{"codename":"jammy","funded_packages_count":1444},"icon_url":"https://github.com/ubuntu.png","created_at":"2026-02-04T11:01:46.486Z","updated_at":"2026-10-01T05:06:53.708Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-22.04/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-22.04/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-22.04/namespaces"}},{"id":13646032,"name":"golang-github-kelseyhightower-envconfig-dev","ecosystem":"debian","description":null,"homepage":"https://github.com/kelseyhightower/envconfig","licenses":"mit","normalized_licenses":[],"repository_url":"https://github.com/kelseyhightower/envconfig","keywords_array":["golang"],"namespace":"main","versions_count":1,"first_release_published_at":"2026-02-12T03:23:18.552Z","latest_release_published_at":"2026-02-12T03:23:18.552Z","latest_release_number":"1.3.0-2","last_synced_at":"2026-03-13T19:15:28.650Z","created_at":"2026-02-12T03:23:17.361Z","updated_at":"2026-09-26T10:22:45.062Z","registry_url":"https://tracker.debian.org/pkg/golang-github-kelseyhightower-envconfig-dev","install_command":"apt-get install golang-github-kelseyhightower-envconfig-dev","documentation_url":"https://packages.debian.org/trixie/golang-github-kelseyhightower-envconfig-dev","metadata":{"component":"main","architecture":"all","priority":"extra","binary":"golang-github-kelseyhightower-envconfig-dev","standards_version":"4.6.0","maintainer":"Pirate Praveen \u003cpraveen@debian.org\u003e","build_depends":"debhelper-compat (= 13), golang-any, dh-golang","build_depends_indep":null,"build_depends_arch":null},"repo_metadata":{"id":11670029,"uuid":"14179252","full_name":"kelseyhightower/envconfig","owner":"kelseyhightower","description":"Golang library for managing configuration data from environment variables","archived":false,"fork":false,"pushed_at":"2025-06-28T02:01:37.000Z","size":101,"stargazers_count":5469,"open_issues_count":62,"forks_count":397,"subscribers_count":34,"default_branch":"master","last_synced_at":"2026-09-26T06:46:17.193Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":null,"language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/kelseyhightower.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":"MAINTAINERS","copyright":null,"agents":null,"claude":null,"gemini":null,"cursor":null,"copilot":null,"dco":null,"cla":null,"disclosure":null}},"created_at":"2013-11-06T17:01:55.000Z","updated_at":"2026-09-25T14:07:23.000Z","dependencies_parsed_at":"2026-08-06T01:41:57.803Z","dependency_job_id":null,"html_url":"https://github.com/kelseyhightower/envconfig","commit_stats":{"total_commits":108,"total_committers":50,"mean_commits":2.16,"dds":0.8148148148148149,"last_synced_commit":"10e87fe9eaec671f89425dc366f004a9336bcc8f"},"previous_names":[],"tags_count":6,"template":false,"template_full_name":null,"purl":"pkg:github/kelseyhightower/envconfig","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kelseyhightower%2Fenvconfig","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kelseyhightower%2Fenvconfig/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kelseyhightower%2Fenvconfig/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kelseyhightower%2Fenvconfig/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/kelseyhightower","download_url":"https://codeload.github.com/kelseyhightower/envconfig/tar.gz/refs/heads/master","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kelseyhightower%2Fenvconfig/sbom","scorecard":{"id":554485,"data":{"date":"2025-08-11","repo":{"name":"github.com/kelseyhightower/envconfig","commit":"7834011875d613aec60c606b52c2b0fe8949fe91"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":4.2,"checks":[{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Maintained","score":0,"reason":"1 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Code-Review","score":8,"reason":"Found 24/30 approved changesets -- score normalized to 8","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Warn: no topLevel permission defined: .github/workflows/go.yml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/go.yml:19: update your workflow using https://app.stepsecurity.io/secureworkflow/kelseyhightower/envconfig/go.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/go.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/kelseyhightower/envconfig/go.yml/master?enable=pin","Info:   0 out of   2 GitHub-owned GitHubAction dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Security-Policy","score":0,"reason":"security policy file not detected","details":["Warn: no security policy file detected","Warn: no security file to analyze","Warn: no security file to analyze","Warn: no security file to analyze"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: MIT License: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Branch-Protection","score":0,"reason":"branch protection not enabled on development/release branches","details":["Warn: branch protection not enabled for branch 'master'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 24 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-20T11:58:13.668Z","repository_id":11670029,"created_at":"2025-08-20T11:58:13.668Z","updated_at":"2025-08-20T11:58:13.668Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":341189360,"owners_count":37709542,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-08-22T15:14:58.755Z","status":"online","status_checked_at":"2026-09-26T02:00:06.440Z","response_time":102,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"kelseyhightower","name":"Kelsey Hightower","uuid":"1123322","kind":"user","description":"","email":"kelsey.hightower@gmail.com","website":null,"location":"Washington","twitter":null,"company":null,"icon_url":"https://avatars.githubusercontent.com/u/1123322?u=e9afe6d5b9bd6c20bbaf40f76b6188619fc24436\u0026v=4","repositories_count":195,"last_synced_at":"2026-09-25T03:11:39.839Z","metadata":{"has_sponsors_listing":false,"funding":null},"html_url":"https://github.com/kelseyhightower","funding_links":[],"total_stars":143349,"followers":24771,"following":13,"created_at":"2022-11-05T15:13:05.765Z","updated_at":"2026-09-25T03:11:39.865Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/kelseyhightower","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/kelseyhightower/repositories"},"tags":[{"name":"v1.4.0","sha":"0b417c4ec4a8a82eecc22a1459a504aa55163d61","kind":"commit","published_at":"2019-05-24T18:54:28.000Z","download_url":"https://codeload.github.com/kelseyhightower/envconfig/tar.gz/v1.4.0","html_url":"https://github.com/kelseyhightower/envconfig/releases/tag/v1.4.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/kelseyhightower/envconfig@v1.4.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kelseyhightower%2Fenvconfig/tags/v1.4.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kelseyhightower%2Fenvconfig/tags/v1.4.0/manifests"},{"name":"v1.3.0","sha":"f611eb38b3875cc3bd991ca91c51d06446afa14c","kind":"commit","published_at":"2017-01-24T16:28:13.000Z","download_url":"https://codeload.github.com/kelseyhightower/envconfig/tar.gz/v1.3.0","html_url":"https://github.com/kelseyhightower/envconfig/releases/tag/v1.3.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/kelseyhightower/envconfig@v1.3.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kelseyhightower%2Fenvconfig/tags/v1.3.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kelseyhightower%2Fenvconfig/tags/v1.3.0/manifests"},{"name":"v1.2.0","sha":"9aca109c9aec4633fced9717c4a09ecab3d33111","kind":"commit","published_at":"2016-10-19T16:24:55.000Z","download_url":"https://codeload.github.com/kelseyhightower/envconfig/tar.gz/v1.2.0","html_url":"https://github.com/kelseyhightower/envconfig/releases/tag/v1.2.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/kelseyhightower/envconfig@v1.2.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kelseyhightower%2Fenvconfig/tags/v1.2.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kelseyhightower%2Fenvconfig/tags/v1.2.0/manifests"},{"name":"1.1.0","sha":"ac12b1f15efba734211a556d8b125110dc538016","kind":"commit","published_at":"2016-03-04T06:38:36.000Z","download_url":"https://codeload.github.com/kelseyhightower/envconfig/tar.gz/1.1.0","html_url":"https://github.com/kelseyhightower/envconfig/releases/tag/1.1.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/kelseyhightower/envconfig@1.1.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kelseyhightower%2Fenvconfig/tags/1.1.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kelseyhightower%2Fenvconfig/tags/1.1.0/manifests"},{"name":"v1.1.0","sha":"ac12b1f15efba734211a556d8b125110dc538016","kind":"commit","published_at":"2016-03-04T06:38:36.000Z","download_url":"https://codeload.github.com/kelseyhightower/envconfig/tar.gz/v1.1.0","html_url":"https://github.com/kelseyhightower/envconfig/releases/tag/v1.1.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/kelseyhightower/envconfig@v1.1.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kelseyhightower%2Fenvconfig/tags/v1.1.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kelseyhightower%2Fenvconfig/tags/v1.1.0/manifests"},{"name":"v1.0.0","sha":"0280e33525f5d88edb71638a80b31724153225ba","kind":"commit","published_at":"2014-03-15T18:19:28.000Z","download_url":"https://codeload.github.com/kelseyhightower/envconfig/tar.gz/v1.0.0","html_url":"https://github.com/kelseyhightower/envconfig/releases/tag/v1.0.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/kelseyhightower/envconfig@v1.0.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kelseyhightower%2Fenvconfig/tags/v1.0.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kelseyhightower%2Fenvconfig/tags/v1.0.0/manifests"}]},"repo_metadata_updated_at":"2026-09-26T10:22:45.062Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":0.0,"dependent_packages_count":0.0,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":100},"purl":"pkg:deb/debian/golang-github-kelseyhightower-envconfig-dev?arch=source\u0026distro=debian-13\u0026repository_url=https://packages.debian.org/trixie","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/debian/golang-github-kelseyhightower-envconfig-dev","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/debian/golang-github-kelseyhightower-envconfig-dev","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/debian/golang-github-kelseyhightower-envconfig-dev/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-09-26T01:03:35.347Z","issues_count":48,"pull_requests_count":80,"avg_time_to_close_issue":22378798.545454547,"avg_time_to_close_pull_request":25763564.34090909,"issues_closed_count":22,"pull_requests_closed_count":44,"pull_request_authors_count":66,"issue_authors_count":47,"avg_comments_per_issue":2.3958333333333335,"avg_comments_per_pull_request":1.3875,"merged_pull_requests_count":15,"bot_issues_count":0,"bot_pull_requests_count":0,"past_year_issues_count":0,"past_year_pull_requests_count":9,"past_year_avg_time_to_close_issue":null,"past_year_avg_time_to_close_pull_request":547575.6666666666,"past_year_issues_closed_count":0,"past_year_pull_requests_closed_count":3,"past_year_pull_request_authors_count":5,"past_year_issue_authors_count":0,"past_year_avg_comments_per_issue":null,"past_year_avg_comments_per_pull_request":0.2222222222222222,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":0,"past_year_merged_pull_requests_count":0,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/kelseyhightower%2Fenvconfig/issues","maintainers":[],"active_maintainers":[]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/debian-13/packages/golang-github-kelseyhightower-envconfig-dev/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/debian-13/packages/golang-github-kelseyhightower-envconfig-dev/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/debian-13/packages/golang-github-kelseyhightower-envconfig-dev/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/debian-13/packages/golang-github-kelseyhightower-envconfig-dev/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/debian-13/packages/golang-github-kelseyhightower-envconfig-dev/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/debian-13/packages/golang-github-kelseyhightower-envconfig-dev/codemeta","maintainers":[],"registry":{"name":"debian-13","url":"https://packages.debian.org/trixie","ecosystem":"debian","default":false,"packages_count":38027,"maintainers_count":0,"namespaces_count":4,"keywords_count":1979,"github":"debian","metadata":{"codename":"trixie","funded_packages_count":2411},"icon_url":"https://github.com/debian.png","created_at":"2026-02-04T11:01:50.448Z","updated_at":"2026-10-01T05:01:27.983Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/debian-13/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/debian-13/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/debian-13/namespaces"}}],"commits":{"id":8081,"full_name":"kelseyhightower/envconfig","default_branch":"master","total_commits":109,"total_committers":51,"total_bot_commits":0,"total_bot_committers":0,"mean_commits":2.1372549019607843,"dds":0.8165137614678899,"past_year_total_commits":0,"past_year_total_committers":0,"past_year_total_bot_commits":0,"past_year_total_bot_committers":0,"past_year_mean_commits":0.0,"past_year_dds":0.0,"last_synced_at":"2026-10-01T03:35:13.413Z","last_synced_commit":"7834011875d613aec60c606b52c2b0fe8949fe91","created_at":"2023-03-07T09:47:24.851Z","updated_at":"2026-10-01T03:35:13.213Z","committers":[{"name":"Travis J Parker","email":"travis.parker@gmail.com","login":"teepark","count":20},{"name":"Kelsey Hightower","email":"kelsey.hightower@gmail.com","login":"kelseyhightower","count":19},{"name":"Daniel Hess","email":"dan9186@gmail.com","login":"dan9186","count":7},{"name":"David K. Bainbridge","email":"dbainbri@ciena.com","login":"dbainbri-ciena","count":4},{"name":"Mark Adams","email":"mark@markadams.me","login":"mark-adams","count":4},{"name":"Andrei Mackenzie","email":"andrei@clypd.com","login":"andrei-m","count":3},{"name":"Marcos Nils","email":"marcosnils@gmail.com","login":"marcosnils","count":2},{"name":"Kevin Gillette","email":"kevin.gillette@sendgrid.com","login":"extemporalgenome","count":2},{"name":"Karl Matthias","email":"karl@matthias.org","login":"relistan","count":2},{"name":"Fran Garcia","email":"fran.miranda@gmail.com","login":"FranGM","count":2},{"name":"Antoine Grondin","email":"antoinegrondin@gmail.com","login":"aybabtme","count":2},{"name":"Alexey Palazhchenko","email":"alexey.palazhchenko@gmail.com","login":"AlekSi","count":2},{"name":"Rafael Dantas Justo","email":"cadastros@rafael.net.br","login":"rafaeljusto","count":2},{"name":"stephen mcquay","email":"stephen@mcquay.me","login":"smcquay","count":1},{"name":"Curtis Allen","email":"curtis.n.allen@gmail.com","login":"curtisallen","count":1},{"name":"Davor Kapsa","email":"dvrkps","login":"dvrkps","count":1},{"name":"Eldar Rakhimberdin","email":"ibeono@gmail.com","login":"beono","count":1},{"name":"Francisco Souza","email":"f@souza.cc","login":"fsouza","count":1},{"name":"Geraint Edwards","email":"gedge","login":"gedge","count":1},{"name":"User Travis","email":"travis@folsom.tjp.io","login":null,"count":1},{"name":"Travis J Parker","email":"travis@affirm.com","login":null,"count":1},{"name":"Rahul Shewale","email":"rahul.s.aux@go-jek.com","login":null,"count":1},{"name":"Rafe Colton","email":"r.colton@modcloth.com","login":null,"count":1},{"name":"Denis Krivak","email":"tetafro@gmail.com","login":null,"count":1},{"name":"Carlo Alberto Ferraris","email":"github@cafxx.strayorange.com","login":null,"count":1},{"name":"JP Robinson","email":"john.paul.robinson@gmail.com","login":"jprobinson","count":1},{"name":"osamingo","email":"osamingo@gmail.com","login":"osamingo","count":1},{"name":"lucapette","email":"lucapette@gmail.com","login":"lucapette","count":1},{"name":"gulyasm","email":"mgulyas86@gmail.com","login":"gulyasm","count":1},{"name":"elgris","email":"iddqd07@yandex.ru","login":"elgris","count":1},{"name":"cassidykelly","email":"cassidy@cassidykelly.com","login":"cassidykelly","count":1},{"name":"Wojtek Bednarzak","email":"wojtek.bednarzak@gmail.com","login":"VoyTechnology","count":1},{"name":"William Kennedy","email":"bill@ardanstudios.com","login":"ardan-bkennedy","count":1},{"name":"TusharM","email":"tushar.madhukar@gmail.com","login":"tusharm","count":1},{"name":"Siddharth Kannan","email":"mail@siddharthkannan.in","login":"icyflame","count":1},{"name":"Saddam H","email":"thedevsaddam@gmail.com","login":"thedevsaddam","count":1},{"name":"Oleksandr Mosur","email":"oleksandr.mosur@gmail.com","login":"johnnywidth","count":1},{"name":"Medya Gh","email":"medyagh","login":"medyagh","count":1},{"name":"Matthew Wedgwood","email":"mw@rmn.com","login":"mwedgwood-rmn","count":1},{"name":"Marc Bramaud","email":"sircelsius","login":"sircelsius","count":1},{"name":"Kirill Motkov","email":"motkov.kirill@gmail.com","login":"sosiska","count":1},{"name":"Kevin Stock","email":"kevinstock@tantalic.com","login":"tantalic","count":1},{"name":"Kelis Hightower","email":"kelisshightower@gmail.com","login":"kelishightower","count":1},{"name":"John Benediktsson","email":"mrjbq7@gmail.com","login":"mrjbq7","count":1},{"name":"Jenan Wise","email":"jenan@stripe.com","login":"jenan-stripe","count":1},{"name":"James Hillyerd","email":"james@hillyerd.com","login":"jhillyerd","count":1},{"name":"Bela Hullar","email":"hullarb@gmail.com","login":"hullarb","count":1},{"name":"Ivan Bertona","email":"ivan.bertona@gmail.com","login":"ibrt","count":1},{"name":"Ingve Vormestrand","email":"ingvev@gmail.com","login":"ingve","count":1},{"name":"Igor Zibarev","email":"hypnoglow@gmail.com","login":"hypnoglow","count":1},{"name":"Brian Ketelsen","email":"brian@xordataexchange.com","login":null,"count":1}],"past_year_committers":[],"commits_url":"https://commits.ecosyste.ms/api/v1/hosts/GitHub/repositories/kelseyhightower%2Fenvconfig/commits","host":{"name":"GitHub","url":"https://github.com","kind":"github","last_synced_at":"2026-10-02T00:00:06.453Z","repositories_count":7997721,"commits_count":1217958321,"contributors_count":55601594,"owners_count":1667440,"committers_count":3706735,"icon_url":"https://github.com/github.png","host_url":"https://commits.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://commits.ecosyste.ms/api/v1/hosts/GitHub/repositories"}},"issues":{"table":{"full_name":"kelseyhightower/envconfig","html_url":"https://github.com/kelseyhightower/envconfig","last_synced_at":"2026-10-01T03:35:16.852Z","status":null,"issues_count":48,"pull_requests_count":80,"avg_time_to_close_issue":22378798.545454547,"avg_time_to_close_pull_request":25763564.34090909,"issues_closed_count":22,"pull_requests_closed_count":44,"pull_request_authors_count":66,"issue_authors_count":47,"avg_comments_per_issue":2.3958333333333335,"avg_comments_per_pull_request":1.3875,"merged_pull_requests_count":15,"bot_issues_count":0,"bot_pull_requests_count":0,"past_year_issues_count":0,"past_year_pull_requests_count":9,"past_year_avg_time_to_close_issue":null,"past_year_avg_time_to_close_pull_request":547575.6666666666,"past_year_issues_closed_count":0,"past_year_pull_requests_closed_count":3,"past_year_pull_request_authors_count":5,"past_year_issue_authors_count":0,"past_year_avg_comments_per_issue":null,"past_year_avg_comments_per_pull_request":0.2222222222222222,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":0,"past_year_merged_pull_requests_count":0,"created_at":"2023-05-16T03:53:42.941Z","updated_at":"2026-10-01T03:35:16.852Z","repository_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/kelseyhightower%2Fenvconfig","issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/kelseyhightower%2Fenvconfig/issues","issue_labels_count":{"table":{}},"pull_request_labels_count":{"table":{}},"issue_author_associations_count":{"table":{"NONE":48}},"pull_request_author_associations_count":{"table":{"NONE":67,"CONTRIBUTOR":13}},"issue_authors":{"table":{"mafredri":2,"ricardogama":1,"na--":1,"ErinCall":1,"MistaTwista":1,"jgimenez":1,"naueramant":1,"pcurren-atlassian":1,"hbobenicio":1,"thuandoan274":1,"dakyskye":1,"bkielbasa":1,"sknaumov":1,"cv711":1,"T-PWK":1,"drbwa":1,"a-urth":1,"dortizrv":1,"bwhaley":1,"kelishightower":1,"beeekind":1,"devnore":1,"cuonglm":1,"ahcarpenter":1,"yuliabaron":1,"Antonboom":1,"steadysupply":1,"mickeyreiss":1,"abemedia":1,"jlucktay":1,"wfernandes":1,"fernandodr19":1,"smoyer64":1,"bradrydzewski":1,"mdere":1,"neumantm":1,"argos83":1,"rossmcf":1,"ronniel1":1,"andrewslotin":1,"MB175":1,"DeadlySurgeon":1,"AlmogBaku":1,"ghost":1,"jakubdyszkiewicz":1,"dominiksimek":1,"m90":1}},"pull_request_authors":{"table":{"KenxinKun":4,"sonnemusk":3,"team-humaki":3,"imjasonh":2,"thaonx":2,"jgiles":2,"colega":2,"davidterranova":2,"pr0n1x":2,"desimone":2,"sircelsius":1,"taothit":1,"johanbrandhorst":1,"tomMoulard":1,"santosh653":1,"imantung":1,"syndbg":1,"oleh-ozimok":1,"kelishightower":1,"sobolevsv":1,"medyagh":1,"cuonglm":1,"koddr":1,"ragan":1,"bschaatsbergen":1,"justinruggles":1,"icyflame":1,"hullarb":1,"wfernandes":1,"bookmoons":1,"bchapman":1,"hexdigest":1,"UnAfraid":1,"kuritka":1,"sosiska":1,"jhillyerd":1,"jaideeppyne":1,"diegosantochi":1,"andrei-m":1,"rahulshewale153":1,"fernandodr19":1,"strawhatguy":1,"edwarnicke":1,"VoyTechnology":1,"hallizh":1,"TonyPythoneer":1,"tboerger":1,"hori-ryota":1,"davidkbainbridge":1,"ndrewnee":1,"bsdlp":1,"johanperez-super":1,"keizo042":1,"beono":1,"hypnoglow":1,"rossmcf":1,"tetafro":1,"crispmark":1,"erkanzileli":1,"whilei":1,"intinig":1,"carnott-snap":1,"tusharm":1,"aoright":1,"jdemeyer":1,"thedevsaddam":1}},"host":{"table":{"name":"GitHub","url":"https://github.com","kind":"github","last_synced_at":"2026-10-02T00:00:06.440Z","repositories_count":17726957,"issues_count":47269083,"pull_requests_count":147079016,"authors_count":11890381,"icon_url":"https://github.com/github.png","host_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories","owners_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/owners","authors_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors"}},"past_year_issue_labels_count":{"table":{}},"past_year_pull_request_labels_count":{"table":{}},"past_year_issue_author_associations_count":{"table":{}},"past_year_pull_request_author_associations_count":{"table":{"NONE":9}},"past_year_issue_authors":{"table":{}},"past_year_pull_request_authors":{"table":{"sonnemusk":3,"team-humaki":3,"aoright":1,"jaideeppyne":1,"johanperez-super":1}},"maintainers":[],"active_maintainers":[]}},"events":{"total":{"ForkEvent":14,"GollumEvent":1,"IssueCommentEvent":8,"IssuesEvent":2,"PullRequestEvent":10,"WatchEvent":292},"last_year":{"ForkEvent":2,"IssueCommentEvent":2,"WatchEvent":32}},"keywords":[],"dependencies":[{"ecosystem":"go","filepath":"go.mod","sha":null,"kind":"manifest","created_at":"2024-06-18T10:51:17.674Z","updated_at":"2024-06-18T10:51:17.674Z","repository_link":"https://github.com/kelseyhightower/envconfig/blob/master/go.mod","dependencies":[]},{"ecosystem":"actions","filepath":".github/workflows/go.yml","sha":null,"kind":"manifest","created_at":"2026-08-06T01:41:57.674Z","updated_at":"2026-08-06T01:41:57.674Z","repository_link":"https://github.com/kelseyhightower/envconfig/blob/master/.github/workflows/go.yml","dependencies":[{"id":25900734351,"package_name":"actions/checkout","ecosystem":"actions","requirements":"v4","direct":true,"kind":"composite","optional":false},{"id":25900734352,"package_name":"actions/setup-go","ecosystem":"actions","requirements":"v4","direct":true,"kind":"composite","optional":false}]}],"score":34.58939039953374,"created_at":"2026-07-08T10:06:44.353Z","updated_at":"2026-10-02T04:02:05.632Z","avatar_url":"https://github.com/kelseyhightower.png","language":"Go","codemeta":null,"publiccode":null,"project_url":"https://summary.ecosyste.ms/api/v1/projects/378819","html_url":"https://summary.ecosyste.ms/projects/378819"}