{"id":389644,"url":"https://github.com/eapache/go-xerial-snappy","last_synced_at":"2026-10-23T21:02:42.795Z","repository":{"id":57479292,"uuid":"60779985","full_name":"eapache/go-xerial-snappy","owner":"eapache","description":"Xerial-compatible Snappy framing support for golang","archived":false,"fork":false,"pushed_at":"2023-07-31T22:30:53.000Z","size":26,"stargazers_count":15,"open_issues_count":1,"forks_count":18,"subscribers_count":5,"default_branch":"master","last_synced_at":"2026-10-02T17:21:26.801Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":null,"language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/eapache.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null}},"created_at":"2016-06-09T14:12:46.000Z","updated_at":"2024-05-04T10:29:40.000Z","dependencies_parsed_at":"2024-06-18T15:22:50.786Z","dependency_job_id":"199c81a9-764b-427d-b3a5-e9e614f239d5","html_url":"https://github.com/eapache/go-xerial-snappy","commit_stats":{"total_commits":18,"total_committers":5,"mean_commits":3.6,"dds":0.5555555555555556,"last_synced_commit":"c322873962e393e443b7efa5969edac6884adfa1"},"previous_names":[],"tags_count":0,"template":false,"template_full_name":null,"purl":"pkg:github/eapache/go-xerial-snappy","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/eapache%2Fgo-xerial-snappy","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/eapache%2Fgo-xerial-snappy/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/eapache%2Fgo-xerial-snappy/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/eapache%2Fgo-xerial-snappy/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/eapache","download_url":"https://codeload.github.com/eapache/go-xerial-snappy/tar.gz/refs/heads/master","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/eapache%2Fgo-xerial-snappy/sbom","scorecard":{"id":363758,"data":{"date":"2025-08-11","repo":{"name":"github.com/eapache/go-xerial-snappy","commit":"c322873962e393e443b7efa5969edac6884adfa1"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":4.6,"checks":[{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Code-Review","score":5,"reason":"Found 5/9 approved changesets -- score normalized to 5","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Dangerous-Workflow","score":-1,"reason":"no workflows found","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Token-Permissions","score":-1,"reason":"No tokens found","details":null,"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Maintained","score":0,"reason":"0 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Pinned-Dependencies","score":-1,"reason":"no dependencies found","details":null,"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Security-Policy","score":0,"reason":"security policy file not detected","details":["Warn: no security policy file detected","Warn: no security file to analyze","Warn: no security file to analyze","Warn: no security file to analyze"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Fuzzing","score":10,"reason":"project is fuzzed","details":["Info: GoBuiltInFuzzer integration found: fuzz_test.go:8","Info: GoBuiltInFuzzer integration found: fuzz_test.go:25"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: MIT License: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Branch-Protection","score":0,"reason":"branch protection not enabled on development/release branches","details":["Warn: branch protection not enabled for branch 'master'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 19 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}}]},"last_synced_at":"2025-08-18T11:23:48.938Z","repository_id":57479292,"created_at":"2025-08-18T11:23:48.938Z","updated_at":"2025-08-18T11:23:48.938Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":343170754,"owners_count":38081417,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-10-03T21:59:58.778Z","status":"online","status_checked_at":"2026-10-06T02:00:06.537Z","response_time":86,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"owner":{"login":"eapache","name":"Evan Huus","uuid":"1706826","kind":"user","description":"Amateur musician and actor. Trying to end up with the right regrets.","email":"eapache@gmail.com","website":"https://eapache.github.io/","location":"Ottawa, Canada","twitter":null,"company":null,"icon_url":"https://avatars.githubusercontent.com/u/1706826?u=fc6b0661133ba2128ce555a6f32894608bb949c7\u0026v=4","repositories_count":31,"last_synced_at":"2026-10-16T18:38:16.267Z","metadata":{"has_sponsors_listing":false,"funding":null},"html_url":"https://github.com/eapache","funding_links":[],"total_stars":4215,"followers":531,"following":10,"created_at":"2022-11-04T05:34:02.064Z","updated_at":"2026-10-16T18:38:16.281Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/eapache","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/eapache/repositories"},"packages":[{"id":13387713,"name":"golang-github-eapache-go-xerial-snappy","ecosystem":"ubuntu","description":null,"homepage":"https://github.com/eapache/go-xerial-snappy","licenses":"mit","normalized_licenses":[],"repository_url":"https://github.com/eapache/go-xerial-snappy","keywords_array":["universe/misc"],"namespace":"universe","versions_count":1,"first_release_published_at":"2026-02-05T15:43:45.800Z","latest_release_published_at":"2026-02-05T15:43:45.800Z","latest_release_number":"0.0~git20180814.776d571-1","latest_published_release_number":null,"last_synced_at":"2026-08-13T17:56:03.541Z","created_at":"2026-02-05T15:43:44.665Z","updated_at":"2026-10-13T02:15:25.571Z","registry_url":"https://launchpad.net/ubuntu/+source/golang-github-eapache-go-xerial-snappy","install_command":"apt-get install golang-github-eapache-go-xerial-snappy","documentation_url":null,"metadata":{"component":"universe","architecture":"all","priority":"optional","binary":"golang-github-eapache-go-xerial-snappy-dev","standards_version":"4.6.2","maintainer":"Debian Go Packaging Team \u003cteam+pkg-go@tracker.debian.org\u003e","build_depends":"debhelper-compat (= 13), dh-golang, golang-any, golang-github-golang-snappy-dev","build_depends_indep":null,"build_depends_arch":null},"repo_metadata":{"id":57479292,"uuid":"60779985","full_name":"eapache/go-xerial-snappy","owner":"eapache","description":"Xerial-compatible Snappy framing support for golang","archived":false,"fork":false,"pushed_at":"2023-07-31T22:30:53.000Z","size":26,"stargazers_count":15,"open_issues_count":1,"forks_count":18,"subscribers_count":5,"default_branch":"master","last_synced_at":"2026-10-02T17:21:26.801Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":null,"language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/eapache.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null}},"created_at":"2016-06-09T14:12:46.000Z","updated_at":"2024-05-04T10:29:40.000Z","dependencies_parsed_at":"2024-06-18T15:22:50.786Z","dependency_job_id":"199c81a9-764b-427d-b3a5-e9e614f239d5","html_url":"https://github.com/eapache/go-xerial-snappy","commit_stats":{"total_commits":18,"total_committers":5,"mean_commits":3.6,"dds":0.5555555555555556,"last_synced_commit":"c322873962e393e443b7efa5969edac6884adfa1"},"previous_names":[],"tags_count":0,"template":false,"template_full_name":null,"purl":"pkg:github/eapache/go-xerial-snappy","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/eapache%2Fgo-xerial-snappy","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/eapache%2Fgo-xerial-snappy/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/eapache%2Fgo-xerial-snappy/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/eapache%2Fgo-xerial-snappy/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/eapache","download_url":"https://codeload.github.com/eapache/go-xerial-snappy/tar.gz/refs/heads/master","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/eapache%2Fgo-xerial-snappy/sbom","scorecard":{"id":363758,"data":{"date":"2025-08-11","repo":{"name":"github.com/eapache/go-xerial-snappy","commit":"c322873962e393e443b7efa5969edac6884adfa1"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":4.6,"checks":[{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Code-Review","score":5,"reason":"Found 5/9 approved changesets -- score normalized to 5","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Dangerous-Workflow","score":-1,"reason":"no workflows found","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Token-Permissions","score":-1,"reason":"No tokens found","details":null,"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Maintained","score":0,"reason":"0 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Pinned-Dependencies","score":-1,"reason":"no dependencies found","details":null,"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Security-Policy","score":0,"reason":"security policy file not detected","details":["Warn: no security policy file detected","Warn: no security file to analyze","Warn: no security file to analyze","Warn: no security file to analyze"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Fuzzing","score":10,"reason":"project is fuzzed","details":["Info: GoBuiltInFuzzer integration found: fuzz_test.go:8","Info: GoBuiltInFuzzer integration found: fuzz_test.go:25"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: MIT License: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Branch-Protection","score":0,"reason":"branch protection not enabled on development/release branches","details":["Warn: branch protection not enabled for branch 'master'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 19 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}}]},"last_synced_at":"2025-08-18T11:23:48.938Z","repository_id":57479292,"created_at":"2025-08-18T11:23:48.938Z","updated_at":"2025-08-18T11:23:48.938Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":343170754,"owners_count":38081417,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-10-03T21:59:58.778Z","status":"online","status_checked_at":"2026-10-06T02:00:06.537Z","response_time":86,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"repo_metadata_updated_at":"2026-10-13T02:15:25.571Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":0.0,"dependent_packages_count":0.0,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":100},"purl":"pkg:deb/ubuntu/golang-github-eapache-go-xerial-snappy?arch=source\u0026distro=ubuntu-24.04","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/ubuntu/golang-github-eapache-go-xerial-snappy","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/ubuntu/golang-github-eapache-go-xerial-snappy","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/ubuntu/golang-github-eapache-go-xerial-snappy/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-10-12T10:32:31.842Z","issues_count":3,"pull_requests_count":7,"avg_time_to_close_issue":14325178.5,"avg_time_to_close_pull_request":3279791.4285714286,"issues_closed_count":2,"pull_requests_closed_count":7,"pull_request_authors_count":6,"issue_authors_count":3,"avg_comments_per_issue":0.6666666666666666,"avg_comments_per_pull_request":1.5714285714285714,"merged_pull_requests_count":5,"bot_issues_count":0,"bot_pull_requests_count":0,"past_year_issues_count":0,"past_year_pull_requests_count":0,"past_year_avg_time_to_close_issue":null,"past_year_avg_time_to_close_pull_request":null,"past_year_issues_closed_count":0,"past_year_pull_requests_closed_count":0,"past_year_pull_request_authors_count":0,"past_year_issue_authors_count":0,"past_year_avg_comments_per_issue":null,"past_year_avg_comments_per_pull_request":null,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":0,"past_year_merged_pull_requests_count":0,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/eapache%2Fgo-xerial-snappy/issues","maintainers":[{"login":"dnwe","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/dnwe"}],"active_maintainers":[]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-24.04/packages/golang-github-eapache-go-xerial-snappy/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-24.04/packages/golang-github-eapache-go-xerial-snappy/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-24.04/packages/golang-github-eapache-go-xerial-snappy/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-24.04/packages/golang-github-eapache-go-xerial-snappy/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-24.04/packages/golang-github-eapache-go-xerial-snappy/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-24.04/packages/golang-github-eapache-go-xerial-snappy/codemeta","maintainers":[],"registry":{"name":"ubuntu-24.04","url":"https://launchpad.net/ubuntu/noble","ecosystem":"ubuntu","default":true,"packages_count":37306,"maintainers_count":0,"namespaces_count":4,"keywords_count":1696,"github":"ubuntu","metadata":{"codename":"noble","funded_packages_count":2580},"icon_url":"https://github.com/ubuntu.png","created_at":"2026-02-04T11:01:45.928Z","updated_at":"2026-10-22T05:05:53.997Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-24.04/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-24.04/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-24.04/namespaces"}},{"id":13645427,"name":"golang-github-eapache-go-xerial-snappy","ecosystem":"debian","description":null,"homepage":"https://github.com/eapache/go-xerial-snappy","licenses":"mit","normalized_licenses":[],"repository_url":"https://github.com/eapache/go-xerial-snappy","keywords_array":["golang"],"namespace":"main","versions_count":1,"first_release_published_at":"2026-02-12T03:11:16.146Z","latest_release_published_at":"2026-02-12T03:11:16.146Z","latest_release_number":"0.0~git20180814.776d571-1","latest_published_release_number":null,"last_synced_at":"2026-03-13T20:09:52.470Z","created_at":"2026-02-12T03:11:15.967Z","updated_at":"2026-10-14T11:08:49.565Z","registry_url":"https://tracker.debian.org/pkg/golang-github-eapache-go-xerial-snappy","install_command":"apt-get install golang-github-eapache-go-xerial-snappy","documentation_url":"https://packages.debian.org/trixie/golang-github-eapache-go-xerial-snappy","metadata":{"component":"main","architecture":"all","priority":"extra","binary":"golang-github-eapache-go-xerial-snappy-dev","standards_version":"4.6.2","maintainer":"Debian Go Packaging Team \u003cteam+pkg-go@tracker.debian.org\u003e","build_depends":"debhelper-compat (= 13), dh-golang, golang-any, golang-github-golang-snappy-dev","build_depends_indep":null,"build_depends_arch":null},"repo_metadata":{"id":57479292,"uuid":"60779985","full_name":"eapache/go-xerial-snappy","owner":"eapache","description":"Xerial-compatible Snappy framing support for golang","archived":false,"fork":false,"pushed_at":"2023-07-31T22:30:53.000Z","size":26,"stargazers_count":15,"open_issues_count":1,"forks_count":18,"subscribers_count":5,"default_branch":"master","last_synced_at":"2026-10-02T17:21:26.801Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":null,"language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/eapache.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null}},"created_at":"2016-06-09T14:12:46.000Z","updated_at":"2024-05-04T10:29:40.000Z","dependencies_parsed_at":"2024-06-18T15:22:50.786Z","dependency_job_id":"199c81a9-764b-427d-b3a5-e9e614f239d5","html_url":"https://github.com/eapache/go-xerial-snappy","commit_stats":{"total_commits":18,"total_committers":5,"mean_commits":3.6,"dds":0.5555555555555556,"last_synced_commit":"c322873962e393e443b7efa5969edac6884adfa1"},"previous_names":[],"tags_count":0,"template":false,"template_full_name":null,"purl":"pkg:github/eapache/go-xerial-snappy","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/eapache%2Fgo-xerial-snappy","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/eapache%2Fgo-xerial-snappy/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/eapache%2Fgo-xerial-snappy/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/eapache%2Fgo-xerial-snappy/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/eapache","download_url":"https://codeload.github.com/eapache/go-xerial-snappy/tar.gz/refs/heads/master","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/eapache%2Fgo-xerial-snappy/sbom","scorecard":{"id":363758,"data":{"date":"2025-08-11","repo":{"name":"github.com/eapache/go-xerial-snappy","commit":"c322873962e393e443b7efa5969edac6884adfa1"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":4.6,"checks":[{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Code-Review","score":5,"reason":"Found 5/9 approved changesets -- score normalized to 5","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Dangerous-Workflow","score":-1,"reason":"no workflows found","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Token-Permissions","score":-1,"reason":"No tokens found","details":null,"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Maintained","score":0,"reason":"0 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Pinned-Dependencies","score":-1,"reason":"no dependencies found","details":null,"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Security-Policy","score":0,"reason":"security policy file not detected","details":["Warn: no security policy file detected","Warn: no security file to analyze","Warn: no security file to analyze","Warn: no security file to analyze"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Fuzzing","score":10,"reason":"project is fuzzed","details":["Info: GoBuiltInFuzzer integration found: fuzz_test.go:8","Info: GoBuiltInFuzzer integration found: fuzz_test.go:25"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: MIT License: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Branch-Protection","score":0,"reason":"branch protection not enabled on development/release branches","details":["Warn: branch protection not enabled for branch 'master'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 19 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}}]},"last_synced_at":"2025-08-18T11:23:48.938Z","repository_id":57479292,"created_at":"2025-08-18T11:23:48.938Z","updated_at":"2025-08-18T11:23:48.938Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":343170754,"owners_count":38081417,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-10-03T21:59:58.778Z","status":"online","status_checked_at":"2026-10-06T02:00:06.537Z","response_time":86,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"repo_metadata_updated_at":"2026-10-14T11:08:49.564Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":0.0,"dependent_packages_count":0.0,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":100},"purl":"pkg:deb/debian/golang-github-eapache-go-xerial-snappy?arch=source\u0026distro=debian-13\u0026repository_url=https://packages.debian.org/trixie","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/debian/golang-github-eapache-go-xerial-snappy","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/debian/golang-github-eapache-go-xerial-snappy","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/debian/golang-github-eapache-go-xerial-snappy/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-10-13T13:33:51.737Z","issues_count":3,"pull_requests_count":7,"avg_time_to_close_issue":14325178.5,"avg_time_to_close_pull_request":3279791.4285714286,"issues_closed_count":2,"pull_requests_closed_count":7,"pull_request_authors_count":6,"issue_authors_count":3,"avg_comments_per_issue":0.6666666666666666,"avg_comments_per_pull_request":1.5714285714285714,"merged_pull_requests_count":5,"bot_issues_count":0,"bot_pull_requests_count":0,"past_year_issues_count":0,"past_year_pull_requests_count":0,"past_year_avg_time_to_close_issue":null,"past_year_avg_time_to_close_pull_request":null,"past_year_issues_closed_count":0,"past_year_pull_requests_closed_count":0,"past_year_pull_request_authors_count":0,"past_year_issue_authors_count":0,"past_year_avg_comments_per_issue":null,"past_year_avg_comments_per_pull_request":null,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":0,"past_year_merged_pull_requests_count":0,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/eapache%2Fgo-xerial-snappy/issues","maintainers":[{"login":"dnwe","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/dnwe"}],"active_maintainers":[]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/debian-13/packages/golang-github-eapache-go-xerial-snappy/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/debian-13/packages/golang-github-eapache-go-xerial-snappy/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/debian-13/packages/golang-github-eapache-go-xerial-snappy/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/debian-13/packages/golang-github-eapache-go-xerial-snappy/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/debian-13/packages/golang-github-eapache-go-xerial-snappy/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/debian-13/packages/golang-github-eapache-go-xerial-snappy/codemeta","maintainers":[],"registry":{"name":"debian-13","url":"https://packages.debian.org/trixie","ecosystem":"debian","default":false,"packages_count":38027,"maintainers_count":0,"namespaces_count":4,"keywords_count":1978,"github":"debian","metadata":{"codename":"trixie","funded_packages_count":3248},"icon_url":"https://github.com/debian.png","created_at":"2026-02-04T11:01:50.448Z","updated_at":"2026-10-23T05:03:14.460Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/debian-13/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/debian-13/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/debian-13/namespaces"}},{"id":13417392,"name":"golang-github-eapache-go-xerial-snappy","ecosystem":"ubuntu","description":null,"homepage":"https://github.com/eapache/go-xerial-snappy","licenses":"mit","normalized_licenses":[],"repository_url":"https://github.com/eapache/go-xerial-snappy","keywords_array":["universe/misc"],"namespace":"universe","versions_count":1,"first_release_published_at":"2026-02-07T03:07:51.545Z","latest_release_published_at":"2026-02-07T03:07:51.545Z","latest_release_number":"0.0~git20160609.bb955e0-1.1","latest_published_release_number":null,"last_synced_at":"2026-08-16T07:33:51.356Z","created_at":"2026-02-07T03:07:51.245Z","updated_at":"2026-10-13T06:34:21.089Z","registry_url":"https://launchpad.net/ubuntu/+source/golang-github-eapache-go-xerial-snappy","install_command":"apt-get install golang-github-eapache-go-xerial-snappy","documentation_url":null,"metadata":{"component":"universe","architecture":"all","priority":"optional","binary":"golang-github-eapache-go-xerial-snappy-dev","standards_version":"4.1.3","maintainer":"Debian Go Packaging Team \u003cpkg-go-maintainers@lists.alioth.debian.org\u003e","build_depends":"debhelper (\u003e= 11), dh-golang, golang-any, golang-snappy-go-dev","build_depends_indep":null,"build_depends_arch":null},"repo_metadata":{"id":57479292,"uuid":"60779985","full_name":"eapache/go-xerial-snappy","owner":"eapache","description":"Xerial-compatible Snappy framing support for golang","archived":false,"fork":false,"pushed_at":"2023-07-31T22:30:53.000Z","size":26,"stargazers_count":15,"open_issues_count":1,"forks_count":18,"subscribers_count":5,"default_branch":"master","last_synced_at":"2026-10-02T17:21:26.801Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":null,"language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/eapache.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null}},"created_at":"2016-06-09T14:12:46.000Z","updated_at":"2024-05-04T10:29:40.000Z","dependencies_parsed_at":"2024-06-18T15:22:50.786Z","dependency_job_id":"199c81a9-764b-427d-b3a5-e9e614f239d5","html_url":"https://github.com/eapache/go-xerial-snappy","commit_stats":{"total_commits":18,"total_committers":5,"mean_commits":3.6,"dds":0.5555555555555556,"last_synced_commit":"c322873962e393e443b7efa5969edac6884adfa1"},"previous_names":[],"tags_count":0,"template":false,"template_full_name":null,"purl":"pkg:github/eapache/go-xerial-snappy","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/eapache%2Fgo-xerial-snappy","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/eapache%2Fgo-xerial-snappy/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/eapache%2Fgo-xerial-snappy/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/eapache%2Fgo-xerial-snappy/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/eapache","download_url":"https://codeload.github.com/eapache/go-xerial-snappy/tar.gz/refs/heads/master","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/eapache%2Fgo-xerial-snappy/sbom","scorecard":{"id":363758,"data":{"date":"2025-08-11","repo":{"name":"github.com/eapache/go-xerial-snappy","commit":"c322873962e393e443b7efa5969edac6884adfa1"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":4.6,"checks":[{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Code-Review","score":5,"reason":"Found 5/9 approved changesets -- score normalized to 5","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Dangerous-Workflow","score":-1,"reason":"no workflows found","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Token-Permissions","score":-1,"reason":"No tokens found","details":null,"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Maintained","score":0,"reason":"0 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Pinned-Dependencies","score":-1,"reason":"no dependencies found","details":null,"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Security-Policy","score":0,"reason":"security policy file not detected","details":["Warn: no security policy file detected","Warn: no security file to analyze","Warn: no security file to analyze","Warn: no security file to analyze"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Fuzzing","score":10,"reason":"project is fuzzed","details":["Info: GoBuiltInFuzzer integration found: fuzz_test.go:8","Info: GoBuiltInFuzzer integration found: fuzz_test.go:25"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: MIT License: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Branch-Protection","score":0,"reason":"branch protection not enabled on development/release branches","details":["Warn: branch protection not enabled for branch 'master'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 19 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}}]},"last_synced_at":"2025-08-18T11:23:48.938Z","repository_id":57479292,"created_at":"2025-08-18T11:23:48.938Z","updated_at":"2025-08-18T11:23:48.938Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":343170754,"owners_count":38081417,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-10-03T21:59:58.778Z","status":"online","status_checked_at":"2026-10-06T02:00:06.537Z","response_time":86,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"repo_metadata_updated_at":"2026-10-13T06:34:21.089Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":0.0,"dependent_packages_count":0.0,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":100},"purl":"pkg:deb/ubuntu/golang-github-eapache-go-xerial-snappy?arch=source\u0026distro=ubuntu-22.04\u0026repository_url=https://launchpad.net/ubuntu/jammy","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/ubuntu/golang-github-eapache-go-xerial-snappy","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/ubuntu/golang-github-eapache-go-xerial-snappy","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/ubuntu/golang-github-eapache-go-xerial-snappy/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-10-12T10:32:31.842Z","issues_count":3,"pull_requests_count":7,"avg_time_to_close_issue":14325178.5,"avg_time_to_close_pull_request":3279791.4285714286,"issues_closed_count":2,"pull_requests_closed_count":7,"pull_request_authors_count":6,"issue_authors_count":3,"avg_comments_per_issue":0.6666666666666666,"avg_comments_per_pull_request":1.5714285714285714,"merged_pull_requests_count":5,"bot_issues_count":0,"bot_pull_requests_count":0,"past_year_issues_count":0,"past_year_pull_requests_count":0,"past_year_avg_time_to_close_issue":null,"past_year_avg_time_to_close_pull_request":null,"past_year_issues_closed_count":0,"past_year_pull_requests_closed_count":0,"past_year_pull_request_authors_count":0,"past_year_issue_authors_count":0,"past_year_avg_comments_per_issue":null,"past_year_avg_comments_per_pull_request":null,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":0,"past_year_merged_pull_requests_count":0,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/eapache%2Fgo-xerial-snappy/issues","maintainers":[{"login":"dnwe","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/dnwe"}],"active_maintainers":[]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-22.04/packages/golang-github-eapache-go-xerial-snappy/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-22.04/packages/golang-github-eapache-go-xerial-snappy/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-22.04/packages/golang-github-eapache-go-xerial-snappy/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-22.04/packages/golang-github-eapache-go-xerial-snappy/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-22.04/packages/golang-github-eapache-go-xerial-snappy/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-22.04/packages/golang-github-eapache-go-xerial-snappy/codemeta","maintainers":[],"registry":{"name":"ubuntu-22.04","url":"https://launchpad.net/ubuntu/jammy","ecosystem":"ubuntu","default":false,"packages_count":34289,"maintainers_count":0,"namespaces_count":4,"keywords_count":1498,"github":"ubuntu","metadata":{"codename":"jammy","funded_packages_count":2059},"icon_url":"https://github.com/ubuntu.png","created_at":"2026-02-04T11:01:46.486Z","updated_at":"2026-10-22T05:05:57.669Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-22.04/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-22.04/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-22.04/namespaces"}},{"id":13438333,"name":"golang-github-eapache-go-xerial-snappy","ecosystem":"ubuntu","description":null,"homepage":"https://github.com/eapache/go-xerial-snappy","licenses":"mit","normalized_licenses":[],"repository_url":"https://github.com/eapache/go-xerial-snappy","keywords_array":["universe/misc"],"namespace":"universe","versions_count":1,"first_release_published_at":"2026-02-08T01:27:20.056Z","latest_release_published_at":"2026-02-08T01:27:20.056Z","latest_release_number":"0.0~git20160609.bb955e0-1","latest_published_release_number":null,"last_synced_at":"2026-08-06T11:03:10.665Z","created_at":"2026-02-08T01:27:19.726Z","updated_at":"2026-10-13T09:37:24.751Z","registry_url":"https://launchpad.net/ubuntu/+source/golang-github-eapache-go-xerial-snappy","install_command":"apt-get install golang-github-eapache-go-xerial-snappy","documentation_url":null,"metadata":{"component":"universe","architecture":"all","priority":"optional","binary":"golang-github-eapache-go-xerial-snappy-dev","standards_version":"4.1.3","maintainer":"Debian Go Packaging Team \u003cpkg-go-maintainers@lists.alioth.debian.org\u003e","build_depends":"debhelper (\u003e= 11), dh-golang, golang-any, golang-snappy-go-dev","build_depends_indep":null,"build_depends_arch":null},"repo_metadata":{"id":57479292,"uuid":"60779985","full_name":"eapache/go-xerial-snappy","owner":"eapache","description":"Xerial-compatible Snappy framing support for golang","archived":false,"fork":false,"pushed_at":"2023-07-31T22:30:53.000Z","size":26,"stargazers_count":15,"open_issues_count":1,"forks_count":18,"subscribers_count":5,"default_branch":"master","last_synced_at":"2026-10-02T17:21:26.801Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":null,"language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/eapache.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null}},"created_at":"2016-06-09T14:12:46.000Z","updated_at":"2024-05-04T10:29:40.000Z","dependencies_parsed_at":"2024-06-18T15:22:50.786Z","dependency_job_id":"199c81a9-764b-427d-b3a5-e9e614f239d5","html_url":"https://github.com/eapache/go-xerial-snappy","commit_stats":{"total_commits":18,"total_committers":5,"mean_commits":3.6,"dds":0.5555555555555556,"last_synced_commit":"c322873962e393e443b7efa5969edac6884adfa1"},"previous_names":[],"tags_count":0,"template":false,"template_full_name":null,"purl":"pkg:github/eapache/go-xerial-snappy","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/eapache%2Fgo-xerial-snappy","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/eapache%2Fgo-xerial-snappy/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/eapache%2Fgo-xerial-snappy/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/eapache%2Fgo-xerial-snappy/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/eapache","download_url":"https://codeload.github.com/eapache/go-xerial-snappy/tar.gz/refs/heads/master","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/eapache%2Fgo-xerial-snappy/sbom","scorecard":{"id":363758,"data":{"date":"2025-08-11","repo":{"name":"github.com/eapache/go-xerial-snappy","commit":"c322873962e393e443b7efa5969edac6884adfa1"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":4.6,"checks":[{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Code-Review","score":5,"reason":"Found 5/9 approved changesets -- score normalized to 5","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Dangerous-Workflow","score":-1,"reason":"no workflows found","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Token-Permissions","score":-1,"reason":"No tokens found","details":null,"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Maintained","score":0,"reason":"0 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Pinned-Dependencies","score":-1,"reason":"no dependencies found","details":null,"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Security-Policy","score":0,"reason":"security policy file not detected","details":["Warn: no security policy file detected","Warn: no security file to analyze","Warn: no security file to analyze","Warn: no security file to analyze"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Fuzzing","score":10,"reason":"project is fuzzed","details":["Info: GoBuiltInFuzzer integration found: fuzz_test.go:8","Info: GoBuiltInFuzzer integration found: fuzz_test.go:25"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: MIT License: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Branch-Protection","score":0,"reason":"branch protection not enabled on development/release branches","details":["Warn: branch protection not enabled for branch 'master'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 19 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}}]},"last_synced_at":"2025-08-18T11:23:48.938Z","repository_id":57479292,"created_at":"2025-08-18T11:23:48.938Z","updated_at":"2025-08-18T11:23:48.938Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":343170754,"owners_count":38081417,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-10-03T21:59:58.778Z","status":"online","status_checked_at":"2026-10-06T02:00:06.537Z","response_time":86,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"repo_metadata_updated_at":"2026-10-13T09:37:24.750Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":0.0,"dependent_packages_count":0.0,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":100},"purl":"pkg:deb/ubuntu/golang-github-eapache-go-xerial-snappy?arch=source\u0026distro=ubuntu-20.04\u0026repository_url=https://launchpad.net/ubuntu/focal","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/ubuntu/golang-github-eapache-go-xerial-snappy","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/ubuntu/golang-github-eapache-go-xerial-snappy","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/ubuntu/golang-github-eapache-go-xerial-snappy/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-10-12T10:32:31.842Z","issues_count":3,"pull_requests_count":7,"avg_time_to_close_issue":14325178.5,"avg_time_to_close_pull_request":3279791.4285714286,"issues_closed_count":2,"pull_requests_closed_count":7,"pull_request_authors_count":6,"issue_authors_count":3,"avg_comments_per_issue":0.6666666666666666,"avg_comments_per_pull_request":1.5714285714285714,"merged_pull_requests_count":5,"bot_issues_count":0,"bot_pull_requests_count":0,"past_year_issues_count":0,"past_year_pull_requests_count":0,"past_year_avg_time_to_close_issue":null,"past_year_avg_time_to_close_pull_request":null,"past_year_issues_closed_count":0,"past_year_pull_requests_closed_count":0,"past_year_pull_request_authors_count":0,"past_year_issue_authors_count":0,"past_year_avg_comments_per_issue":null,"past_year_avg_comments_per_pull_request":null,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":0,"past_year_merged_pull_requests_count":0,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/eapache%2Fgo-xerial-snappy/issues","maintainers":[{"login":"dnwe","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/dnwe"}],"active_maintainers":[]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-20.04/packages/golang-github-eapache-go-xerial-snappy/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-20.04/packages/golang-github-eapache-go-xerial-snappy/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-20.04/packages/golang-github-eapache-go-xerial-snappy/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-20.04/packages/golang-github-eapache-go-xerial-snappy/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-20.04/packages/golang-github-eapache-go-xerial-snappy/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-20.04/packages/golang-github-eapache-go-xerial-snappy/codemeta","maintainers":[],"registry":{"name":"ubuntu-20.04","url":"https://launchpad.net/ubuntu/focal","ecosystem":"ubuntu","default":false,"packages_count":30789,"maintainers_count":0,"namespaces_count":4,"keywords_count":1425,"github":"ubuntu","metadata":{"codename":"focal","funded_packages_count":1620},"icon_url":"https://github.com/ubuntu.png","created_at":"2026-02-04T11:01:47.233Z","updated_at":"2026-10-22T05:06:00.803Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-20.04/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-20.04/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-20.04/namespaces"}},{"id":13684455,"name":"golang-github-eapache-go-xerial-snappy","ecosystem":"debian","description":null,"homepage":"https://github.com/eapache/go-xerial-snappy","licenses":"mit","normalized_licenses":[],"repository_url":"https://github.com/eapache/go-xerial-snappy","keywords_array":["golang"],"namespace":"main","versions_count":1,"first_release_published_at":"2026-02-12T17:45:47.016Z","latest_release_published_at":"2026-02-12T17:45:47.016Z","latest_release_number":"0.0~git20180814.776d571-1","latest_published_release_number":null,"last_synced_at":"2026-09-18T10:28:32.488Z","created_at":"2026-02-12T17:45:46.838Z","updated_at":"2026-10-14T15:57:21.883Z","registry_url":"https://tracker.debian.org/pkg/golang-github-eapache-go-xerial-snappy","install_command":"apt-get install golang-github-eapache-go-xerial-snappy","documentation_url":"https://packages.debian.org/bookworm/golang-github-eapache-go-xerial-snappy","metadata":{"component":"main","architecture":"all","priority":"extra","binary":"golang-github-eapache-go-xerial-snappy-dev","standards_version":"4.6.2","maintainer":"Debian Go Packaging Team \u003cteam+pkg-go@tracker.debian.org\u003e","build_depends":"debhelper-compat (= 13), dh-golang, golang-any, golang-github-golang-snappy-dev","build_depends_indep":null,"build_depends_arch":null},"repo_metadata":{"id":57479292,"uuid":"60779985","full_name":"eapache/go-xerial-snappy","owner":"eapache","description":"Xerial-compatible Snappy framing support for golang","archived":false,"fork":false,"pushed_at":"2023-07-31T22:30:53.000Z","size":26,"stargazers_count":15,"open_issues_count":1,"forks_count":18,"subscribers_count":5,"default_branch":"master","last_synced_at":"2026-10-02T17:21:26.801Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":null,"language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/eapache.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null}},"created_at":"2016-06-09T14:12:46.000Z","updated_at":"2024-05-04T10:29:40.000Z","dependencies_parsed_at":"2024-06-18T15:22:50.786Z","dependency_job_id":"199c81a9-764b-427d-b3a5-e9e614f239d5","html_url":"https://github.com/eapache/go-xerial-snappy","commit_stats":{"total_commits":18,"total_committers":5,"mean_commits":3.6,"dds":0.5555555555555556,"last_synced_commit":"c322873962e393e443b7efa5969edac6884adfa1"},"previous_names":[],"tags_count":0,"template":false,"template_full_name":null,"purl":"pkg:github/eapache/go-xerial-snappy","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/eapache%2Fgo-xerial-snappy","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/eapache%2Fgo-xerial-snappy/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/eapache%2Fgo-xerial-snappy/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/eapache%2Fgo-xerial-snappy/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/eapache","download_url":"https://codeload.github.com/eapache/go-xerial-snappy/tar.gz/refs/heads/master","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/eapache%2Fgo-xerial-snappy/sbom","scorecard":{"id":363758,"data":{"date":"2025-08-11","repo":{"name":"github.com/eapache/go-xerial-snappy","commit":"c322873962e393e443b7efa5969edac6884adfa1"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":4.6,"checks":[{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Code-Review","score":5,"reason":"Found 5/9 approved changesets -- score normalized to 5","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Dangerous-Workflow","score":-1,"reason":"no workflows found","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Token-Permissions","score":-1,"reason":"No tokens found","details":null,"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Maintained","score":0,"reason":"0 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Pinned-Dependencies","score":-1,"reason":"no dependencies found","details":null,"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Security-Policy","score":0,"reason":"security policy file not detected","details":["Warn: no security policy file detected","Warn: no security file to analyze","Warn: no security file to analyze","Warn: no security file to analyze"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Fuzzing","score":10,"reason":"project is fuzzed","details":["Info: GoBuiltInFuzzer integration found: fuzz_test.go:8","Info: GoBuiltInFuzzer integration found: fuzz_test.go:25"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: MIT License: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Branch-Protection","score":0,"reason":"branch protection not enabled on development/release branches","details":["Warn: branch protection not enabled for branch 'master'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 19 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}}]},"last_synced_at":"2025-08-18T11:23:48.938Z","repository_id":57479292,"created_at":"2025-08-18T11:23:48.938Z","updated_at":"2025-08-18T11:23:48.938Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":343170754,"owners_count":38081417,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-10-03T21:59:58.778Z","status":"online","status_checked_at":"2026-10-06T02:00:06.537Z","response_time":86,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"repo_metadata_updated_at":"2026-10-14T15:57:21.883Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":0.0,"dependent_packages_count":0.0,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":100},"purl":"pkg:deb/debian/golang-github-eapache-go-xerial-snappy?arch=source\u0026distro=debian-12","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/debian/golang-github-eapache-go-xerial-snappy","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/debian/golang-github-eapache-go-xerial-snappy","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/debian/golang-github-eapache-go-xerial-snappy/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-10-13T13:33:51.737Z","issues_count":3,"pull_requests_count":7,"avg_time_to_close_issue":14325178.5,"avg_time_to_close_pull_request":3279791.4285714286,"issues_closed_count":2,"pull_requests_closed_count":7,"pull_request_authors_count":6,"issue_authors_count":3,"avg_comments_per_issue":0.6666666666666666,"avg_comments_per_pull_request":1.5714285714285714,"merged_pull_requests_count":5,"bot_issues_count":0,"bot_pull_requests_count":0,"past_year_issues_count":0,"past_year_pull_requests_count":0,"past_year_avg_time_to_close_issue":null,"past_year_avg_time_to_close_pull_request":null,"past_year_issues_closed_count":0,"past_year_pull_requests_closed_count":0,"past_year_pull_request_authors_count":0,"past_year_issue_authors_count":0,"past_year_avg_comments_per_issue":null,"past_year_avg_comments_per_pull_request":null,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":0,"past_year_merged_pull_requests_count":0,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/eapache%2Fgo-xerial-snappy/issues","maintainers":[{"login":"dnwe","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/dnwe"}],"active_maintainers":[]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/debian-12/packages/golang-github-eapache-go-xerial-snappy/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/debian-12/packages/golang-github-eapache-go-xerial-snappy/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/debian-12/packages/golang-github-eapache-go-xerial-snappy/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/debian-12/packages/golang-github-eapache-go-xerial-snappy/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/debian-12/packages/golang-github-eapache-go-xerial-snappy/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/debian-12/packages/golang-github-eapache-go-xerial-snappy/codemeta","maintainers":[],"registry":{"name":"debian-12","url":"https://packages.debian.org/bookworm","ecosystem":"debian","default":true,"packages_count":34734,"maintainers_count":0,"namespaces_count":4,"keywords_count":2635,"github":"debian","metadata":{"codename":"bookworm","funded_packages_count":2322},"icon_url":"https://github.com/debian.png","created_at":"2026-02-04T11:01:49.459Z","updated_at":"2026-10-22T05:06:13.183Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/debian-12/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/debian-12/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/debian-12/namespaces"}},{"id":13475459,"name":"golang-github-eapache-go-xerial-snappy","ecosystem":"ubuntu","description":null,"homepage":"https://github.com/eapache/go-xerial-snappy","licenses":"mit","normalized_licenses":[],"repository_url":"https://github.com/eapache/go-xerial-snappy","keywords_array":["universe/misc"],"namespace":"universe","versions_count":1,"first_release_published_at":"2026-02-10T03:21:44.489Z","latest_release_published_at":"2026-02-10T03:21:44.489Z","latest_release_number":"0.0~git20180814.776d571-1","latest_published_release_number":null,"last_synced_at":"2026-03-10T04:11:31.174Z","created_at":"2026-02-10T03:21:44.116Z","updated_at":"2026-10-13T14:22:34.270Z","registry_url":"https://launchpad.net/ubuntu/+source/golang-github-eapache-go-xerial-snappy","install_command":"apt-get install golang-github-eapache-go-xerial-snappy","documentation_url":null,"metadata":{"component":"universe","architecture":"all","priority":"optional","binary":"golang-github-eapache-go-xerial-snappy-dev","standards_version":"4.6.2","maintainer":"Debian Go Packaging Team \u003cteam+pkg-go@tracker.debian.org\u003e","build_depends":"debhelper-compat (= 13), dh-golang, golang-any, golang-github-golang-snappy-dev","build_depends_indep":null,"build_depends_arch":null},"repo_metadata":{"id":57479292,"uuid":"60779985","full_name":"eapache/go-xerial-snappy","owner":"eapache","description":"Xerial-compatible Snappy framing support for golang","archived":false,"fork":false,"pushed_at":"2023-07-31T22:30:53.000Z","size":26,"stargazers_count":15,"open_issues_count":1,"forks_count":18,"subscribers_count":5,"default_branch":"master","last_synced_at":"2026-10-02T17:21:26.801Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":null,"language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/eapache.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null}},"created_at":"2016-06-09T14:12:46.000Z","updated_at":"2024-05-04T10:29:40.000Z","dependencies_parsed_at":"2024-06-18T15:22:50.786Z","dependency_job_id":"199c81a9-764b-427d-b3a5-e9e614f239d5","html_url":"https://github.com/eapache/go-xerial-snappy","commit_stats":{"total_commits":18,"total_committers":5,"mean_commits":3.6,"dds":0.5555555555555556,"last_synced_commit":"c322873962e393e443b7efa5969edac6884adfa1"},"previous_names":[],"tags_count":0,"template":false,"template_full_name":null,"purl":"pkg:github/eapache/go-xerial-snappy","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/eapache%2Fgo-xerial-snappy","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/eapache%2Fgo-xerial-snappy/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/eapache%2Fgo-xerial-snappy/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/eapache%2Fgo-xerial-snappy/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/eapache","download_url":"https://codeload.github.com/eapache/go-xerial-snappy/tar.gz/refs/heads/master","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/eapache%2Fgo-xerial-snappy/sbom","scorecard":{"id":363758,"data":{"date":"2025-08-11","repo":{"name":"github.com/eapache/go-xerial-snappy","commit":"c322873962e393e443b7efa5969edac6884adfa1"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":4.6,"checks":[{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Code-Review","score":5,"reason":"Found 5/9 approved changesets -- score normalized to 5","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Dangerous-Workflow","score":-1,"reason":"no workflows found","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Token-Permissions","score":-1,"reason":"No tokens found","details":null,"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Maintained","score":0,"reason":"0 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Pinned-Dependencies","score":-1,"reason":"no dependencies found","details":null,"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Security-Policy","score":0,"reason":"security policy file not detected","details":["Warn: no security policy file detected","Warn: no security file to analyze","Warn: no security file to analyze","Warn: no security file to analyze"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Fuzzing","score":10,"reason":"project is fuzzed","details":["Info: GoBuiltInFuzzer integration found: fuzz_test.go:8","Info: GoBuiltInFuzzer integration found: fuzz_test.go:25"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: MIT License: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Branch-Protection","score":0,"reason":"branch protection not enabled on development/release branches","details":["Warn: branch protection not enabled for branch 'master'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 19 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}}]},"last_synced_at":"2025-08-18T11:23:48.938Z","repository_id":57479292,"created_at":"2025-08-18T11:23:48.938Z","updated_at":"2025-08-18T11:23:48.938Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":343170754,"owners_count":38081417,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-10-03T21:59:58.778Z","status":"online","status_checked_at":"2026-10-06T02:00:06.537Z","response_time":86,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"repo_metadata_updated_at":"2026-10-13T14:22:34.270Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":0.0,"dependent_packages_count":0.0,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":100},"purl":"pkg:deb/ubuntu/golang-github-eapache-go-xerial-snappy?arch=source\u0026distro=ubuntu-23.10\u0026repository_url=https://launchpad.net/ubuntu/mantic","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/ubuntu/golang-github-eapache-go-xerial-snappy","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/ubuntu/golang-github-eapache-go-xerial-snappy","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/ubuntu/golang-github-eapache-go-xerial-snappy/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-10-12T10:32:31.842Z","issues_count":3,"pull_requests_count":7,"avg_time_to_close_issue":14325178.5,"avg_time_to_close_pull_request":3279791.4285714286,"issues_closed_count":2,"pull_requests_closed_count":7,"pull_request_authors_count":6,"issue_authors_count":3,"avg_comments_per_issue":0.6666666666666666,"avg_comments_per_pull_request":1.5714285714285714,"merged_pull_requests_count":5,"bot_issues_count":0,"bot_pull_requests_count":0,"past_year_issues_count":0,"past_year_pull_requests_count":0,"past_year_avg_time_to_close_issue":null,"past_year_avg_time_to_close_pull_request":null,"past_year_issues_closed_count":0,"past_year_pull_requests_closed_count":0,"past_year_pull_request_authors_count":0,"past_year_issue_authors_count":0,"past_year_avg_comments_per_issue":null,"past_year_avg_comments_per_pull_request":null,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":0,"past_year_merged_pull_requests_count":0,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/eapache%2Fgo-xerial-snappy/issues","maintainers":[{"login":"dnwe","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/dnwe"}],"active_maintainers":[]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-23.10/packages/golang-github-eapache-go-xerial-snappy/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-23.10/packages/golang-github-eapache-go-xerial-snappy/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-23.10/packages/golang-github-eapache-go-xerial-snappy/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-23.10/packages/golang-github-eapache-go-xerial-snappy/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-23.10/packages/golang-github-eapache-go-xerial-snappy/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-23.10/packages/golang-github-eapache-go-xerial-snappy/codemeta","maintainers":[],"registry":{"name":"ubuntu-23.10","url":"https://launchpad.net/ubuntu/mantic","ecosystem":"ubuntu","default":false,"packages_count":36642,"maintainers_count":0,"namespaces_count":4,"keywords_count":2188,"github":"ubuntu","metadata":{"codename":"mantic","mirror":"http://old-releases.ubuntu.com/ubuntu","funded_packages_count":2474},"icon_url":"https://github.com/ubuntu.png","created_at":"2026-02-04T11:01:48.636Z","updated_at":"2026-10-22T05:06:04.745Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-23.10/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-23.10/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-23.10/namespaces"}},{"id":13503642,"name":"golang-github-eapache-go-xerial-snappy","ecosystem":"debian","description":null,"homepage":"https://github.com/eapache/go-xerial-snappy","licenses":"mit","normalized_licenses":[],"repository_url":"https://github.com/eapache/go-xerial-snappy","keywords_array":["golang"],"namespace":"main","versions_count":1,"first_release_published_at":"2026-02-10T18:54:47.474Z","latest_release_published_at":"2026-02-10T18:54:47.474Z","latest_release_number":"0.0~git20160609.bb955e0-1.1","latest_published_release_number":null,"last_synced_at":"2026-03-13T15:36:51.152Z","created_at":"2026-02-10T18:54:47.263Z","updated_at":"2026-10-13T18:06:18.194Z","registry_url":"https://tracker.debian.org/pkg/golang-github-eapache-go-xerial-snappy","install_command":"apt-get install golang-github-eapache-go-xerial-snappy","documentation_url":"https://packages.debian.org/bullseye/golang-github-eapache-go-xerial-snappy","metadata":{"component":"main","architecture":"all","priority":"extra","binary":"golang-github-eapache-go-xerial-snappy-dev","standards_version":"4.1.3","maintainer":"Debian Go Packaging Team \u003cpkg-go-maintainers@lists.alioth.debian.org\u003e","build_depends":"debhelper (\u003e= 11), dh-golang, golang-any, golang-snappy-go-dev","build_depends_indep":null,"build_depends_arch":null},"repo_metadata":{"id":57479292,"uuid":"60779985","full_name":"eapache/go-xerial-snappy","owner":"eapache","description":"Xerial-compatible Snappy framing support for golang","archived":false,"fork":false,"pushed_at":"2023-07-31T22:30:53.000Z","size":26,"stargazers_count":15,"open_issues_count":1,"forks_count":18,"subscribers_count":5,"default_branch":"master","last_synced_at":"2026-10-02T17:21:26.801Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":null,"language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/eapache.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null}},"created_at":"2016-06-09T14:12:46.000Z","updated_at":"2024-05-04T10:29:40.000Z","dependencies_parsed_at":"2024-06-18T15:22:50.786Z","dependency_job_id":"199c81a9-764b-427d-b3a5-e9e614f239d5","html_url":"https://github.com/eapache/go-xerial-snappy","commit_stats":{"total_commits":18,"total_committers":5,"mean_commits":3.6,"dds":0.5555555555555556,"last_synced_commit":"c322873962e393e443b7efa5969edac6884adfa1"},"previous_names":[],"tags_count":0,"template":false,"template_full_name":null,"purl":"pkg:github/eapache/go-xerial-snappy","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/eapache%2Fgo-xerial-snappy","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/eapache%2Fgo-xerial-snappy/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/eapache%2Fgo-xerial-snappy/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/eapache%2Fgo-xerial-snappy/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/eapache","download_url":"https://codeload.github.com/eapache/go-xerial-snappy/tar.gz/refs/heads/master","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/eapache%2Fgo-xerial-snappy/sbom","scorecard":{"id":363758,"data":{"date":"2025-08-11","repo":{"name":"github.com/eapache/go-xerial-snappy","commit":"c322873962e393e443b7efa5969edac6884adfa1"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":4.6,"checks":[{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Code-Review","score":5,"reason":"Found 5/9 approved changesets -- score normalized to 5","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Dangerous-Workflow","score":-1,"reason":"no workflows found","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Token-Permissions","score":-1,"reason":"No tokens found","details":null,"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Maintained","score":0,"reason":"0 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Pinned-Dependencies","score":-1,"reason":"no dependencies found","details":null,"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Security-Policy","score":0,"reason":"security policy file not detected","details":["Warn: no security policy file detected","Warn: no security file to analyze","Warn: no security file to analyze","Warn: no security file to analyze"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Fuzzing","score":10,"reason":"project is fuzzed","details":["Info: GoBuiltInFuzzer integration found: fuzz_test.go:8","Info: GoBuiltInFuzzer integration found: fuzz_test.go:25"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: MIT License: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Branch-Protection","score":0,"reason":"branch protection not enabled on development/release branches","details":["Warn: branch protection not enabled for branch 'master'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 19 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}}]},"last_synced_at":"2025-08-18T11:23:48.938Z","repository_id":57479292,"created_at":"2025-08-18T11:23:48.938Z","updated_at":"2025-08-18T11:23:48.938Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":343170754,"owners_count":38081417,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-10-03T21:59:58.778Z","status":"online","status_checked_at":"2026-10-06T02:00:06.537Z","response_time":86,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"repo_metadata_updated_at":"2026-10-13T18:06:18.192Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":0.0,"dependent_packages_count":0.0,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":100},"purl":"pkg:deb/debian/golang-github-eapache-go-xerial-snappy?arch=source\u0026distro=debian-11\u0026repository_url=https://packages.debian.org/bullseye","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/debian/golang-github-eapache-go-xerial-snappy","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/debian/golang-github-eapache-go-xerial-snappy","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/debian/golang-github-eapache-go-xerial-snappy/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-10-13T13:33:51.737Z","issues_count":3,"pull_requests_count":7,"avg_time_to_close_issue":14325178.5,"avg_time_to_close_pull_request":3279791.4285714286,"issues_closed_count":2,"pull_requests_closed_count":7,"pull_request_authors_count":6,"issue_authors_count":3,"avg_comments_per_issue":0.6666666666666666,"avg_comments_per_pull_request":1.5714285714285714,"merged_pull_requests_count":5,"bot_issues_count":0,"bot_pull_requests_count":0,"past_year_issues_count":0,"past_year_pull_requests_count":0,"past_year_avg_time_to_close_issue":null,"past_year_avg_time_to_close_pull_request":null,"past_year_issues_closed_count":0,"past_year_pull_requests_closed_count":0,"past_year_pull_request_authors_count":0,"past_year_issue_authors_count":0,"past_year_avg_comments_per_issue":null,"past_year_avg_comments_per_pull_request":null,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":0,"past_year_merged_pull_requests_count":0,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/eapache%2Fgo-xerial-snappy/issues","maintainers":[{"login":"dnwe","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/dnwe"}],"active_maintainers":[]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/debian-11/packages/golang-github-eapache-go-xerial-snappy/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/debian-11/packages/golang-github-eapache-go-xerial-snappy/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/debian-11/packages/golang-github-eapache-go-xerial-snappy/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/debian-11/packages/golang-github-eapache-go-xerial-snappy/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/debian-11/packages/golang-github-eapache-go-xerial-snappy/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/debian-11/packages/golang-github-eapache-go-xerial-snappy/codemeta","maintainers":[],"registry":{"name":"debian-11","url":"https://packages.debian.org/bullseye","ecosystem":"debian","default":false,"packages_count":31268,"maintainers_count":0,"namespaces_count":3,"keywords_count":758,"github":"debian","metadata":{"codename":"bullseye","funded_packages_count":1758},"icon_url":"https://github.com/debian.png","created_at":"2026-02-04T11:01:49.702Z","updated_at":"2026-10-22T05:06:16.673Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/debian-11/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/debian-11/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/debian-11/namespaces"}},{"id":13757911,"name":"golang-github-eapache-go-xerial-snappy","ecosystem":"ubuntu","description":null,"homepage":"https://github.com/eapache/go-xerial-snappy","licenses":"mit","normalized_licenses":[],"repository_url":"https://github.com/eapache/go-xerial-snappy","keywords_array":["universe/misc"],"namespace":"universe","versions_count":1,"first_release_published_at":"2026-02-13T09:15:24.493Z","latest_release_published_at":"2026-02-13T09:15:24.493Z","latest_release_number":"0.0~git20180814.776d571-1","latest_published_release_number":null,"last_synced_at":"2026-10-22T16:29:42.185Z","created_at":"2026-02-13T09:15:23.855Z","updated_at":"2026-10-22T16:29:42.186Z","registry_url":"https://launchpad.net/ubuntu/+source/golang-github-eapache-go-xerial-snappy","install_command":"apt-get install golang-github-eapache-go-xerial-snappy","documentation_url":null,"metadata":{"component":"universe","architecture":"all","priority":"optional","binary":"golang-github-eapache-go-xerial-snappy-dev","standards_version":"4.6.2","maintainer":"Debian Go Packaging Team \u003cteam+pkg-go@tracker.debian.org\u003e","build_depends":"debhelper-compat (= 13), dh-golang, golang-any, golang-github-golang-snappy-dev","build_depends_indep":null,"build_depends_arch":null},"repo_metadata":{"id":57479292,"uuid":"60779985","full_name":"eapache/go-xerial-snappy","owner":"eapache","description":"Xerial-compatible Snappy framing support for golang","archived":false,"fork":false,"pushed_at":"2023-07-31T22:30:53.000Z","size":26,"stargazers_count":15,"open_issues_count":1,"forks_count":18,"subscribers_count":5,"default_branch":"master","last_synced_at":"2026-10-02T17:21:26.801Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":null,"language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/eapache.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null}},"created_at":"2016-06-09T14:12:46.000Z","updated_at":"2024-05-04T10:29:40.000Z","dependencies_parsed_at":"2024-06-18T15:22:50.786Z","dependency_job_id":"199c81a9-764b-427d-b3a5-e9e614f239d5","html_url":"https://github.com/eapache/go-xerial-snappy","commit_stats":{"total_commits":18,"total_committers":5,"mean_commits":3.6,"dds":0.5555555555555556,"last_synced_commit":"c322873962e393e443b7efa5969edac6884adfa1"},"previous_names":[],"tags_count":0,"template":false,"template_full_name":null,"purl":"pkg:github/eapache/go-xerial-snappy","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/eapache%2Fgo-xerial-snappy","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/eapache%2Fgo-xerial-snappy/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/eapache%2Fgo-xerial-snappy/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/eapache%2Fgo-xerial-snappy/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/eapache","download_url":"https://codeload.github.com/eapache/go-xerial-snappy/tar.gz/refs/heads/master","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/eapache%2Fgo-xerial-snappy/sbom","scorecard":{"id":363758,"data":{"date":"2025-08-11","repo":{"name":"github.com/eapache/go-xerial-snappy","commit":"c322873962e393e443b7efa5969edac6884adfa1"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":4.6,"checks":[{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Code-Review","score":5,"reason":"Found 5/9 approved changesets -- score normalized to 5","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Dangerous-Workflow","score":-1,"reason":"no workflows found","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Token-Permissions","score":-1,"reason":"No tokens found","details":null,"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Maintained","score":0,"reason":"0 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Pinned-Dependencies","score":-1,"reason":"no dependencies found","details":null,"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Security-Policy","score":0,"reason":"security policy file not detected","details":["Warn: no security policy file detected","Warn: no security file to analyze","Warn: no security file to analyze","Warn: no security file to analyze"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Fuzzing","score":10,"reason":"project is fuzzed","details":["Info: GoBuiltInFuzzer integration found: fuzz_test.go:8","Info: GoBuiltInFuzzer integration found: fuzz_test.go:25"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: MIT License: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Branch-Protection","score":0,"reason":"branch protection not enabled on development/release branches","details":["Warn: branch protection not enabled for branch 'master'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 19 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}}]},"last_synced_at":"2025-08-18T11:23:48.938Z","repository_id":57479292,"created_at":"2025-08-18T11:23:48.938Z","updated_at":"2025-08-18T11:23:48.938Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":343170754,"owners_count":38081417,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-10-03T21:59:58.778Z","status":"online","status_checked_at":"2026-10-06T02:00:06.537Z","response_time":86,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"repo_metadata_updated_at":"2026-10-15T01:04:33.945Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":0.0,"dependent_packages_count":0.0,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":100},"purl":"pkg:deb/ubuntu/golang-github-eapache-go-xerial-snappy?arch=source\u0026distro=ubuntu-24.10\u0026repository_url=https://launchpad.net/ubuntu/oracular","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/ubuntu/golang-github-eapache-go-xerial-snappy","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/ubuntu/golang-github-eapache-go-xerial-snappy","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/ubuntu/golang-github-eapache-go-xerial-snappy/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-10-14T15:57:21.970Z","issues_count":3,"pull_requests_count":7,"avg_time_to_close_issue":14325178.5,"avg_time_to_close_pull_request":3279791.4285714286,"issues_closed_count":2,"pull_requests_closed_count":7,"pull_request_authors_count":6,"issue_authors_count":3,"avg_comments_per_issue":0.6666666666666666,"avg_comments_per_pull_request":1.5714285714285714,"merged_pull_requests_count":5,"bot_issues_count":0,"bot_pull_requests_count":0,"past_year_issues_count":0,"past_year_pull_requests_count":0,"past_year_avg_time_to_close_issue":null,"past_year_avg_time_to_close_pull_request":null,"past_year_issues_closed_count":0,"past_year_pull_requests_closed_count":0,"past_year_pull_request_authors_count":0,"past_year_issue_authors_count":0,"past_year_avg_comments_per_issue":null,"past_year_avg_comments_per_pull_request":null,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":0,"past_year_merged_pull_requests_count":0,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/eapache%2Fgo-xerial-snappy/issues","maintainers":[{"login":"dnwe","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/dnwe"}],"active_maintainers":[]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-24.10/packages/golang-github-eapache-go-xerial-snappy/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-24.10/packages/golang-github-eapache-go-xerial-snappy/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-24.10/packages/golang-github-eapache-go-xerial-snappy/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-24.10/packages/golang-github-eapache-go-xerial-snappy/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-24.10/packages/golang-github-eapache-go-xerial-snappy/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-24.10/packages/golang-github-eapache-go-xerial-snappy/codemeta","maintainers":[],"registry":{"name":"ubuntu-24.10","url":"https://launchpad.net/ubuntu/oracular","ecosystem":"ubuntu","default":false,"packages_count":38437,"maintainers_count":0,"namespaces_count":4,"keywords_count":1430,"github":"ubuntu","metadata":{"codename":"oracular","mirror":"http://old-releases.ubuntu.com/ubuntu","funded_packages_count":2744},"icon_url":"https://github.com/ubuntu.png","created_at":"2026-02-04T11:01:48.028Z","updated_at":"2026-10-23T05:03:18.611Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-24.10/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-24.10/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-24.10/namespaces"}},{"id":13545457,"name":"golang-github-eapache-go-xerial-snappy","ecosystem":"ubuntu","description":null,"homepage":"https://github.com/eapache/go-xerial-snappy","licenses":"mit","normalized_licenses":[],"repository_url":"https://github.com/eapache/go-xerial-snappy","keywords_array":["universe/misc"],"namespace":"universe","versions_count":1,"first_release_published_at":"2026-02-11T01:59:49.689Z","latest_release_published_at":"2026-02-11T01:59:49.689Z","latest_release_number":"0.0~git20180814.776d571-1","latest_published_release_number":null,"last_synced_at":"2026-09-16T15:31:34.074Z","created_at":"2026-02-11T01:59:49.485Z","updated_at":"2026-10-13T23:37:16.218Z","registry_url":"https://launchpad.net/ubuntu/+source/golang-github-eapache-go-xerial-snappy","install_command":"apt-get install golang-github-eapache-go-xerial-snappy","documentation_url":null,"metadata":{"component":"universe","architecture":"all","priority":"optional","binary":"golang-github-eapache-go-xerial-snappy-dev","standards_version":"4.6.2","maintainer":"Debian Go Packaging Team \u003cteam+pkg-go@tracker.debian.org\u003e","build_depends":"debhelper-compat (= 13), dh-golang, golang-any, golang-github-golang-snappy-dev","build_depends_indep":null,"build_depends_arch":null},"repo_metadata":{"id":57479292,"uuid":"60779985","full_name":"eapache/go-xerial-snappy","owner":"eapache","description":"Xerial-compatible Snappy framing support for golang","archived":false,"fork":false,"pushed_at":"2023-07-31T22:30:53.000Z","size":26,"stargazers_count":15,"open_issues_count":1,"forks_count":18,"subscribers_count":5,"default_branch":"master","last_synced_at":"2026-10-02T17:21:26.801Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":null,"language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/eapache.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null}},"created_at":"2016-06-09T14:12:46.000Z","updated_at":"2024-05-04T10:29:40.000Z","dependencies_parsed_at":"2024-06-18T15:22:50.786Z","dependency_job_id":"199c81a9-764b-427d-b3a5-e9e614f239d5","html_url":"https://github.com/eapache/go-xerial-snappy","commit_stats":{"total_commits":18,"total_committers":5,"mean_commits":3.6,"dds":0.5555555555555556,"last_synced_commit":"c322873962e393e443b7efa5969edac6884adfa1"},"previous_names":[],"tags_count":0,"template":false,"template_full_name":null,"purl":"pkg:github/eapache/go-xerial-snappy","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/eapache%2Fgo-xerial-snappy","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/eapache%2Fgo-xerial-snappy/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/eapache%2Fgo-xerial-snappy/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/eapache%2Fgo-xerial-snappy/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/eapache","download_url":"https://codeload.github.com/eapache/go-xerial-snappy/tar.gz/refs/heads/master","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/eapache%2Fgo-xerial-snappy/sbom","scorecard":{"id":363758,"data":{"date":"2025-08-11","repo":{"name":"github.com/eapache/go-xerial-snappy","commit":"c322873962e393e443b7efa5969edac6884adfa1"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":4.6,"checks":[{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Code-Review","score":5,"reason":"Found 5/9 approved changesets -- score normalized to 5","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Dangerous-Workflow","score":-1,"reason":"no workflows found","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Token-Permissions","score":-1,"reason":"No tokens found","details":null,"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Maintained","score":0,"reason":"0 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Pinned-Dependencies","score":-1,"reason":"no dependencies found","details":null,"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Security-Policy","score":0,"reason":"security policy file not detected","details":["Warn: no security policy file detected","Warn: no security file to analyze","Warn: no security file to analyze","Warn: no security file to analyze"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Fuzzing","score":10,"reason":"project is fuzzed","details":["Info: GoBuiltInFuzzer integration found: fuzz_test.go:8","Info: GoBuiltInFuzzer integration found: fuzz_test.go:25"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: MIT License: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Branch-Protection","score":0,"reason":"branch protection not enabled on development/release branches","details":["Warn: branch protection not enabled for branch 'master'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 19 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}}]},"last_synced_at":"2025-08-18T11:23:48.938Z","repository_id":57479292,"created_at":"2025-08-18T11:23:48.938Z","updated_at":"2025-08-18T11:23:48.938Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":343170754,"owners_count":38081417,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-10-03T21:59:58.778Z","status":"online","status_checked_at":"2026-10-06T02:00:06.537Z","response_time":86,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"repo_metadata_updated_at":"2026-10-13T23:37:16.217Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":0.0,"dependent_packages_count":0.0,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":100},"purl":"pkg:deb/ubuntu/golang-github-eapache-go-xerial-snappy?arch=source\u0026distro=ubuntu-23.04\u0026repository_url=https://launchpad.net/ubuntu/lunar","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/ubuntu/golang-github-eapache-go-xerial-snappy","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/ubuntu/golang-github-eapache-go-xerial-snappy","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/ubuntu/golang-github-eapache-go-xerial-snappy/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-10-13T13:33:51.737Z","issues_count":3,"pull_requests_count":7,"avg_time_to_close_issue":14325178.5,"avg_time_to_close_pull_request":3279791.4285714286,"issues_closed_count":2,"pull_requests_closed_count":7,"pull_request_authors_count":6,"issue_authors_count":3,"avg_comments_per_issue":0.6666666666666666,"avg_comments_per_pull_request":1.5714285714285714,"merged_pull_requests_count":5,"bot_issues_count":0,"bot_pull_requests_count":0,"past_year_issues_count":0,"past_year_pull_requests_count":0,"past_year_avg_time_to_close_issue":null,"past_year_avg_time_to_close_pull_request":null,"past_year_issues_closed_count":0,"past_year_pull_requests_closed_count":0,"past_year_pull_request_authors_count":0,"past_year_issue_authors_count":0,"past_year_avg_comments_per_issue":null,"past_year_avg_comments_per_pull_request":null,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":0,"past_year_merged_pull_requests_count":0,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/eapache%2Fgo-xerial-snappy/issues","maintainers":[{"login":"dnwe","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/dnwe"}],"active_maintainers":[]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-23.04/packages/golang-github-eapache-go-xerial-snappy/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-23.04/packages/golang-github-eapache-go-xerial-snappy/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-23.04/packages/golang-github-eapache-go-xerial-snappy/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-23.04/packages/golang-github-eapache-go-xerial-snappy/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-23.04/packages/golang-github-eapache-go-xerial-snappy/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-23.04/packages/golang-github-eapache-go-xerial-snappy/codemeta","maintainers":[],"registry":{"name":"ubuntu-23.04","url":"https://launchpad.net/ubuntu/lunar","ecosystem":"ubuntu","default":false,"packages_count":36116,"maintainers_count":0,"namespaces_count":4,"keywords_count":993,"github":"ubuntu","metadata":{"codename":"lunar","mirror":"http://old-releases.ubuntu.com/ubuntu","funded_packages_count":2330},"icon_url":"https://github.com/ubuntu.png","created_at":"2026-02-04T11:01:49.117Z","updated_at":"2026-10-22T05:06:08.908Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-23.04/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-23.04/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-23.04/namespaces"}},{"id":14703156,"name":"github.com/eapache/Go-xerial-snappy","ecosystem":"go","description":"","homepage":"https://github.com/eapache/Go-xerial-snappy","licenses":"MIT","normalized_licenses":["MIT"],"repository_url":"https://github.com/eapache/Go-xerial-snappy","keywords_array":[],"namespace":"github.com/eapache","versions_count":0,"first_release_published_at":null,"latest_release_published_at":"2026-10-22T18:00:53.132Z","latest_release_number":null,"latest_published_release_number":null,"last_synced_at":"2026-10-22T18:00:53.837Z","created_at":"2026-07-01T13:16:33.382Z","updated_at":"2026-10-22T18:00:53.838Z","registry_url":"https://pkg.go.dev/github.com/eapache/Go-xerial-snappy","install_command":"go get github.com/eapache/Go-xerial-snappy","documentation_url":"https://pkg.go.dev/github.com/eapache/Go-xerial-snappy#section-documentation","metadata":null,"repo_metadata":{"id":57479292,"uuid":"60779985","full_name":"eapache/go-xerial-snappy","owner":"eapache","description":"Xerial-compatible Snappy framing support for golang","archived":false,"fork":false,"pushed_at":"2023-07-31T22:30:53.000Z","size":26,"stargazers_count":15,"open_issues_count":1,"forks_count":18,"subscribers_count":5,"default_branch":"master","last_synced_at":"2026-10-02T17:21:26.801Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":null,"language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/eapache.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null}},"created_at":"2016-06-09T14:12:46.000Z","updated_at":"2024-05-04T10:29:40.000Z","dependencies_parsed_at":"2024-06-18T15:22:50.786Z","dependency_job_id":"199c81a9-764b-427d-b3a5-e9e614f239d5","html_url":"https://github.com/eapache/go-xerial-snappy","commit_stats":{"total_commits":18,"total_committers":5,"mean_commits":3.6,"dds":0.5555555555555556,"last_synced_commit":"c322873962e393e443b7efa5969edac6884adfa1"},"previous_names":[],"tags_count":0,"template":false,"template_full_name":null,"purl":"pkg:github/eapache/go-xerial-snappy","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/eapache%2Fgo-xerial-snappy","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/eapache%2Fgo-xerial-snappy/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/eapache%2Fgo-xerial-snappy/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/eapache%2Fgo-xerial-snappy/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/eapache","download_url":"https://codeload.github.com/eapache/go-xerial-snappy/tar.gz/refs/heads/master","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/eapache%2Fgo-xerial-snappy/sbom","scorecard":{"id":363758,"data":{"date":"2025-08-11","repo":{"name":"github.com/eapache/go-xerial-snappy","commit":"c322873962e393e443b7efa5969edac6884adfa1"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":4.6,"checks":[{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Code-Review","score":5,"reason":"Found 5/9 approved changesets -- score normalized to 5","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Dangerous-Workflow","score":-1,"reason":"no workflows found","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Token-Permissions","score":-1,"reason":"No tokens found","details":null,"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Maintained","score":0,"reason":"0 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Pinned-Dependencies","score":-1,"reason":"no dependencies found","details":null,"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Security-Policy","score":0,"reason":"security policy file not detected","details":["Warn: no security policy file detected","Warn: no security file to analyze","Warn: no security file to analyze","Warn: no security file to analyze"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Fuzzing","score":10,"reason":"project is fuzzed","details":["Info: GoBuiltInFuzzer integration found: fuzz_test.go:8","Info: GoBuiltInFuzzer integration found: fuzz_test.go:25"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: MIT License: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Branch-Protection","score":0,"reason":"branch protection not enabled on development/release branches","details":["Warn: branch protection not enabled for branch 'master'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 19 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}}]},"last_synced_at":"2025-08-18T11:23:48.938Z","repository_id":57479292,"created_at":"2025-08-18T11:23:48.938Z","updated_at":"2025-08-18T11:23:48.938Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":343170754,"owners_count":38081418,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-10-03T21:59:58.778Z","status":"online","status_checked_at":"2026-10-06T02:00:06.537Z","response_time":86,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"repo_metadata_updated_at":"2026-10-06T11:22:56.042Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":4.932113073670603,"dependent_packages_count":4.621521674670199,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":4.776817374170401},"purl":"pkg:golang/github.com/eapache/Go-xerial-snappy","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/go/github.com/eapache/Go-xerial-snappy","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/go/github.com/eapache/Go-xerial-snappy","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/go/github.com/eapache/Go-xerial-snappy/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-10-02T22:02:28.829Z","issues_count":3,"pull_requests_count":7,"avg_time_to_close_issue":14325178.5,"avg_time_to_close_pull_request":3279791.4285714286,"issues_closed_count":2,"pull_requests_closed_count":7,"pull_request_authors_count":6,"issue_authors_count":3,"avg_comments_per_issue":0.6666666666666666,"avg_comments_per_pull_request":1.5714285714285714,"merged_pull_requests_count":5,"bot_issues_count":0,"bot_pull_requests_count":0,"past_year_issues_count":0,"past_year_pull_requests_count":0,"past_year_avg_time_to_close_issue":null,"past_year_avg_time_to_close_pull_request":null,"past_year_issues_closed_count":0,"past_year_pull_requests_closed_count":0,"past_year_pull_request_authors_count":0,"past_year_issue_authors_count":0,"past_year_avg_comments_per_issue":null,"past_year_avg_comments_per_pull_request":null,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":0,"past_year_merged_pull_requests_count":0,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/eapache%2Fgo-xerial-snappy/issues","maintainers":[{"login":"dnwe","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/dnwe"}],"active_maintainers":[]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Feapache%2FGo-xerial-snappy/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Feapache%2FGo-xerial-snappy/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Feapache%2FGo-xerial-snappy/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Feapache%2FGo-xerial-snappy/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Feapache%2FGo-xerial-snappy/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Feapache%2FGo-xerial-snappy/codemeta","maintainers":[],"registry":{"name":"proxy.golang.org","url":"https://proxy.golang.org","ecosystem":"go","default":true,"packages_count":2541048,"maintainers_count":0,"namespaces_count":853808,"keywords_count":146098,"github":"golang","metadata":{"funded_packages_count":120986,"sync_missing_packages_cursor":{"timestamp":"2026-09-29T00:04:57.155362Z","path":"github.com/virtengine/virtengine/sdk/specs","version":"v0.0.0-20260928231908-c0c887541540"},"rate_limit":5},"icon_url":"https://github.com/golang.png","created_at":"2022-04-04T15:19:22.939Z","updated_at":"2026-10-22T05:07:44.151Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/namespaces"}},{"id":14698569,"name":"github.com/Eapache/go-xerial-snappy","ecosystem":"go","description":"","homepage":"https://github.com/Eapache/go-xerial-snappy","licenses":"MIT","normalized_licenses":["MIT"],"repository_url":"https://github.com/Eapache/go-xerial-snappy","keywords_array":[],"namespace":"github.com/Eapache","versions_count":0,"first_release_published_at":null,"latest_release_published_at":"2026-10-22T18:00:53.120Z","latest_release_number":null,"latest_published_release_number":null,"last_synced_at":"2026-10-22T18:00:53.766Z","created_at":"2026-06-30T11:55:18.518Z","updated_at":"2026-10-22T18:00:53.766Z","registry_url":"https://pkg.go.dev/github.com/Eapache/go-xerial-snappy","install_command":"go get github.com/Eapache/go-xerial-snappy","documentation_url":"https://pkg.go.dev/github.com/Eapache/go-xerial-snappy#section-documentation","metadata":null,"repo_metadata":{"id":57479292,"uuid":"60779985","full_name":"eapache/go-xerial-snappy","owner":"eapache","description":"Xerial-compatible Snappy framing support for golang","archived":false,"fork":false,"pushed_at":"2023-07-31T22:30:53.000Z","size":26,"stargazers_count":15,"open_issues_count":1,"forks_count":18,"subscribers_count":5,"default_branch":"master","last_synced_at":"2026-10-02T17:21:26.801Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":null,"language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/eapache.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null}},"created_at":"2016-06-09T14:12:46.000Z","updated_at":"2024-05-04T10:29:40.000Z","dependencies_parsed_at":"2024-06-18T15:22:50.786Z","dependency_job_id":"199c81a9-764b-427d-b3a5-e9e614f239d5","html_url":"https://github.com/eapache/go-xerial-snappy","commit_stats":{"total_commits":18,"total_committers":5,"mean_commits":3.6,"dds":0.5555555555555556,"last_synced_commit":"c322873962e393e443b7efa5969edac6884adfa1"},"previous_names":[],"tags_count":0,"template":false,"template_full_name":null,"purl":"pkg:github/eapache/go-xerial-snappy","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/eapache%2Fgo-xerial-snappy","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/eapache%2Fgo-xerial-snappy/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/eapache%2Fgo-xerial-snappy/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/eapache%2Fgo-xerial-snappy/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/eapache","download_url":"https://codeload.github.com/eapache/go-xerial-snappy/tar.gz/refs/heads/master","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/eapache%2Fgo-xerial-snappy/sbom","scorecard":{"id":363758,"data":{"date":"2025-08-11","repo":{"name":"github.com/eapache/go-xerial-snappy","commit":"c322873962e393e443b7efa5969edac6884adfa1"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":4.6,"checks":[{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Code-Review","score":5,"reason":"Found 5/9 approved changesets -- score normalized to 5","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Dangerous-Workflow","score":-1,"reason":"no workflows found","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Token-Permissions","score":-1,"reason":"No tokens found","details":null,"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Maintained","score":0,"reason":"0 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Pinned-Dependencies","score":-1,"reason":"no dependencies found","details":null,"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Security-Policy","score":0,"reason":"security policy file not detected","details":["Warn: no security policy file detected","Warn: no security file to analyze","Warn: no security file to analyze","Warn: no security file to analyze"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Fuzzing","score":10,"reason":"project is fuzzed","details":["Info: GoBuiltInFuzzer integration found: fuzz_test.go:8","Info: GoBuiltInFuzzer integration found: fuzz_test.go:25"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: MIT License: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Branch-Protection","score":0,"reason":"branch protection not enabled on development/release branches","details":["Warn: branch protection not enabled for branch 'master'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 19 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}}]},"last_synced_at":"2025-08-18T11:23:48.938Z","repository_id":57479292,"created_at":"2025-08-18T11:23:48.938Z","updated_at":"2025-08-18T11:23:48.938Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":343170754,"owners_count":38081418,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-10-03T21:59:58.778Z","status":"online","status_checked_at":"2026-10-06T02:00:06.537Z","response_time":86,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"repo_metadata_updated_at":"2026-10-06T11:22:56.032Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":4.93515940445008,"dependent_packages_count":4.624504289510877,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":4.779831846980478},"purl":"pkg:golang/github.com/Eapache/go-xerial-snappy","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/go/github.com/Eapache/go-xerial-snappy","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/go/github.com/Eapache/go-xerial-snappy","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/go/github.com/Eapache/go-xerial-snappy/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-10-02T22:02:28.829Z","issues_count":3,"pull_requests_count":7,"avg_time_to_close_issue":14325178.5,"avg_time_to_close_pull_request":3279791.4285714286,"issues_closed_count":2,"pull_requests_closed_count":7,"pull_request_authors_count":6,"issue_authors_count":3,"avg_comments_per_issue":0.6666666666666666,"avg_comments_per_pull_request":1.5714285714285714,"merged_pull_requests_count":5,"bot_issues_count":0,"bot_pull_requests_count":0,"past_year_issues_count":0,"past_year_pull_requests_count":0,"past_year_avg_time_to_close_issue":null,"past_year_avg_time_to_close_pull_request":null,"past_year_issues_closed_count":0,"past_year_pull_requests_closed_count":0,"past_year_pull_request_authors_count":0,"past_year_issue_authors_count":0,"past_year_avg_comments_per_issue":null,"past_year_avg_comments_per_pull_request":null,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":0,"past_year_merged_pull_requests_count":0,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/eapache%2Fgo-xerial-snappy/issues","maintainers":[{"login":"dnwe","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/dnwe"}],"active_maintainers":[]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2FEapache%2Fgo-xerial-snappy/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2FEapache%2Fgo-xerial-snappy/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2FEapache%2Fgo-xerial-snappy/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2FEapache%2Fgo-xerial-snappy/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2FEapache%2Fgo-xerial-snappy/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2FEapache%2Fgo-xerial-snappy/codemeta","maintainers":[],"registry":{"name":"proxy.golang.org","url":"https://proxy.golang.org","ecosystem":"go","default":true,"packages_count":2541048,"maintainers_count":0,"namespaces_count":853808,"keywords_count":146098,"github":"golang","metadata":{"funded_packages_count":120986,"sync_missing_packages_cursor":{"timestamp":"2026-09-29T00:04:57.155362Z","path":"github.com/virtengine/virtengine/sdk/specs","version":"v0.0.0-20260928231908-c0c887541540"},"rate_limit":5},"icon_url":"https://github.com/golang.png","created_at":"2022-04-04T15:19:22.939Z","updated_at":"2026-10-22T05:07:44.151Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/namespaces"}},{"id":13580943,"name":"golang-github-eapache-go-xerial-snappy","ecosystem":"debian","description":null,"homepage":"https://github.com/eapache/go-xerial-snappy","licenses":"mit","normalized_licenses":[],"repository_url":"https://github.com/eapache/go-xerial-snappy","keywords_array":["misc"],"namespace":"main","versions_count":1,"first_release_published_at":"2026-02-11T08:50:03.152Z","latest_release_published_at":"2026-02-11T08:50:03.152Z","latest_release_number":"0.0~git20160609.bb955e0-1","latest_published_release_number":null,"last_synced_at":"2026-03-14T05:05:02.496Z","created_at":"2026-02-11T08:50:02.950Z","updated_at":"2026-10-14T04:25:14.931Z","registry_url":"https://tracker.debian.org/pkg/golang-github-eapache-go-xerial-snappy","install_command":"apt-get install golang-github-eapache-go-xerial-snappy","documentation_url":"https://packages.debian.org/buster/golang-github-eapache-go-xerial-snappy","metadata":{"component":"main","architecture":"all","priority":"extra","binary":"golang-github-eapache-go-xerial-snappy-dev","standards_version":"4.1.3","maintainer":"Debian Go Packaging Team \u003cpkg-go-maintainers@lists.alioth.debian.org\u003e","build_depends":"debhelper (\u003e= 11), dh-golang, golang-any, golang-snappy-go-dev","build_depends_indep":null,"build_depends_arch":null},"repo_metadata":{"id":57479292,"uuid":"60779985","full_name":"eapache/go-xerial-snappy","owner":"eapache","description":"Xerial-compatible Snappy framing support for golang","archived":false,"fork":false,"pushed_at":"2023-07-31T22:30:53.000Z","size":26,"stargazers_count":15,"open_issues_count":1,"forks_count":18,"subscribers_count":5,"default_branch":"master","last_synced_at":"2026-10-02T17:21:26.801Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":null,"language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/eapache.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null}},"created_at":"2016-06-09T14:12:46.000Z","updated_at":"2024-05-04T10:29:40.000Z","dependencies_parsed_at":"2024-06-18T15:22:50.786Z","dependency_job_id":"199c81a9-764b-427d-b3a5-e9e614f239d5","html_url":"https://github.com/eapache/go-xerial-snappy","commit_stats":{"total_commits":18,"total_committers":5,"mean_commits":3.6,"dds":0.5555555555555556,"last_synced_commit":"c322873962e393e443b7efa5969edac6884adfa1"},"previous_names":[],"tags_count":0,"template":false,"template_full_name":null,"purl":"pkg:github/eapache/go-xerial-snappy","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/eapache%2Fgo-xerial-snappy","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/eapache%2Fgo-xerial-snappy/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/eapache%2Fgo-xerial-snappy/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/eapache%2Fgo-xerial-snappy/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/eapache","download_url":"https://codeload.github.com/eapache/go-xerial-snappy/tar.gz/refs/heads/master","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/eapache%2Fgo-xerial-snappy/sbom","scorecard":{"id":363758,"data":{"date":"2025-08-11","repo":{"name":"github.com/eapache/go-xerial-snappy","commit":"c322873962e393e443b7efa5969edac6884adfa1"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":4.6,"checks":[{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Code-Review","score":5,"reason":"Found 5/9 approved changesets -- score normalized to 5","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Dangerous-Workflow","score":-1,"reason":"no workflows found","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Token-Permissions","score":-1,"reason":"No tokens found","details":null,"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Maintained","score":0,"reason":"0 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Pinned-Dependencies","score":-1,"reason":"no dependencies found","details":null,"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Security-Policy","score":0,"reason":"security policy file not detected","details":["Warn: no security policy file detected","Warn: no security file to analyze","Warn: no security file to analyze","Warn: no security file to analyze"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Fuzzing","score":10,"reason":"project is fuzzed","details":["Info: GoBuiltInFuzzer integration found: fuzz_test.go:8","Info: GoBuiltInFuzzer integration found: fuzz_test.go:25"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: MIT License: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Branch-Protection","score":0,"reason":"branch protection not enabled on development/release branches","details":["Warn: branch protection not enabled for branch 'master'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 19 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}}]},"last_synced_at":"2025-08-18T11:23:48.938Z","repository_id":57479292,"created_at":"2025-08-18T11:23:48.938Z","updated_at":"2025-08-18T11:23:48.938Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":343170754,"owners_count":38081417,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-10-03T21:59:58.778Z","status":"online","status_checked_at":"2026-10-06T02:00:06.537Z","response_time":86,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"repo_metadata_updated_at":"2026-10-14T04:25:14.931Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":0.0,"dependent_packages_count":0.0,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":100},"purl":"pkg:deb/debian/golang-github-eapache-go-xerial-snappy?arch=source\u0026distro=debian-10\u0026repository_url=https://packages.debian.org/buster","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/debian/golang-github-eapache-go-xerial-snappy","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/debian/golang-github-eapache-go-xerial-snappy","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/debian/golang-github-eapache-go-xerial-snappy/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-10-13T13:33:51.737Z","issues_count":3,"pull_requests_count":7,"avg_time_to_close_issue":14325178.5,"avg_time_to_close_pull_request":3279791.4285714286,"issues_closed_count":2,"pull_requests_closed_count":7,"pull_request_authors_count":6,"issue_authors_count":3,"avg_comments_per_issue":0.6666666666666666,"avg_comments_per_pull_request":1.5714285714285714,"merged_pull_requests_count":5,"bot_issues_count":0,"bot_pull_requests_count":0,"past_year_issues_count":0,"past_year_pull_requests_count":0,"past_year_avg_time_to_close_issue":null,"past_year_avg_time_to_close_pull_request":null,"past_year_issues_closed_count":0,"past_year_pull_requests_closed_count":0,"past_year_pull_request_authors_count":0,"past_year_issue_authors_count":0,"past_year_avg_comments_per_issue":null,"past_year_avg_comments_per_pull_request":null,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":0,"past_year_merged_pull_requests_count":0,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/eapache%2Fgo-xerial-snappy/issues","maintainers":[{"login":"dnwe","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/dnwe"}],"active_maintainers":[]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/debian-10/packages/golang-github-eapache-go-xerial-snappy/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/debian-10/packages/golang-github-eapache-go-xerial-snappy/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/debian-10/packages/golang-github-eapache-go-xerial-snappy/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/debian-10/packages/golang-github-eapache-go-xerial-snappy/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/debian-10/packages/golang-github-eapache-go-xerial-snappy/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/debian-10/packages/golang-github-eapache-go-xerial-snappy/codemeta","maintainers":[],"registry":{"name":"debian-10","url":"https://packages.debian.org/buster","ecosystem":"debian","default":false,"packages_count":28836,"maintainers_count":0,"namespaces_count":3,"keywords_count":903,"github":"debian","metadata":{"codename":"buster","mirror":"http://archive.debian.org/debian","funded_packages_count":1389},"icon_url":"https://github.com/debian.png","created_at":"2026-02-04T11:01:50.156Z","updated_at":"2026-10-23T05:00:43.812Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/debian-10/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/debian-10/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/debian-10/namespaces"}},{"id":3493028,"name":"github.com/eapache/go-xerial-snappy","ecosystem":"go","description":"","homepage":"https://github.com/eapache/go-xerial-snappy","licenses":"MIT","normalized_licenses":["MIT"],"repository_url":"https://github.com/eapache/go-xerial-snappy","keywords_array":[],"namespace":"github.com/eapache","versions_count":4,"first_release_published_at":"2016-06-09T14:24:08.000Z","latest_release_published_at":"2023-07-31T22:30:53.000Z","latest_release_number":"v0.0.0-20230731223053-c322873962e3","latest_published_release_number":"v0.0.0-20230731223053-c322873962e3","last_synced_at":"2026-10-22T18:01:01.357Z","created_at":"2022-04-10T19:14:09.786Z","updated_at":"2026-10-22T18:01:01.358Z","registry_url":"https://pkg.go.dev/github.com/eapache/go-xerial-snappy","install_command":"go get github.com/eapache/go-xerial-snappy","documentation_url":"https://pkg.go.dev/github.com/eapache/go-xerial-snappy#section-documentation","metadata":null,"repo_metadata":{"id":57479292,"uuid":"60779985","full_name":"eapache/go-xerial-snappy","owner":"eapache","description":"Xerial-compatible Snappy framing support for golang","archived":false,"fork":false,"pushed_at":"2023-07-31T22:30:53.000Z","size":26,"stargazers_count":15,"open_issues_count":1,"forks_count":18,"subscribers_count":5,"default_branch":"master","last_synced_at":"2026-10-02T17:21:26.801Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":null,"language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/eapache.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null}},"created_at":"2016-06-09T14:12:46.000Z","updated_at":"2024-05-04T10:29:40.000Z","dependencies_parsed_at":"2024-06-18T15:22:50.786Z","dependency_job_id":"199c81a9-764b-427d-b3a5-e9e614f239d5","html_url":"https://github.com/eapache/go-xerial-snappy","commit_stats":{"total_commits":18,"total_committers":5,"mean_commits":3.6,"dds":0.5555555555555556,"last_synced_commit":"c322873962e393e443b7efa5969edac6884adfa1"},"previous_names":[],"tags_count":0,"template":false,"template_full_name":null,"purl":"pkg:github/eapache/go-xerial-snappy","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/eapache%2Fgo-xerial-snappy","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/eapache%2Fgo-xerial-snappy/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/eapache%2Fgo-xerial-snappy/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/eapache%2Fgo-xerial-snappy/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/eapache","download_url":"https://codeload.github.com/eapache/go-xerial-snappy/tar.gz/refs/heads/master","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/eapache%2Fgo-xerial-snappy/sbom","scorecard":{"id":363758,"data":{"date":"2025-08-11","repo":{"name":"github.com/eapache/go-xerial-snappy","commit":"c322873962e393e443b7efa5969edac6884adfa1"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":4.6,"checks":[{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Code-Review","score":5,"reason":"Found 5/9 approved changesets -- score normalized to 5","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Dangerous-Workflow","score":-1,"reason":"no workflows found","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Token-Permissions","score":-1,"reason":"No tokens found","details":null,"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Maintained","score":0,"reason":"0 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Pinned-Dependencies","score":-1,"reason":"no dependencies found","details":null,"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Security-Policy","score":0,"reason":"security policy file not detected","details":["Warn: no security policy file detected","Warn: no security file to analyze","Warn: no security file to analyze","Warn: no security file to analyze"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Fuzzing","score":10,"reason":"project is fuzzed","details":["Info: GoBuiltInFuzzer integration found: fuzz_test.go:8","Info: GoBuiltInFuzzer integration found: fuzz_test.go:25"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: MIT License: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Branch-Protection","score":0,"reason":"branch protection not enabled on development/release branches","details":["Warn: branch protection not enabled for branch 'master'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 19 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}}]},"last_synced_at":"2025-08-18T11:23:48.938Z","repository_id":57479292,"created_at":"2025-08-18T11:23:48.938Z","updated_at":"2025-08-18T11:23:48.938Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":343170754,"owners_count":38081417,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-10-03T21:59:58.778Z","status":"online","status_checked_at":"2026-10-06T02:00:06.537Z","response_time":86,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"eapache","name":"Evan Huus","uuid":"1706826","kind":"user","description":"Amateur musician and actor. Trying to end up with the right regrets.","email":"eapache@gmail.com","website":"https://eapache.github.io/","location":"Ottawa, Canada","twitter":null,"company":null,"icon_url":"https://avatars.githubusercontent.com/u/1706826?u=fc6b0661133ba2128ce555a6f32894608bb949c7\u0026v=4","repositories_count":31,"last_synced_at":"2026-10-02T08:49:23.303Z","metadata":{"has_sponsors_listing":false,"funding":null},"html_url":"https://github.com/eapache","funding_links":[],"total_stars":4213,"followers":528,"following":10,"created_at":"2022-11-04T05:34:02.064Z","updated_at":"2026-10-02T08:49:23.501Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/eapache","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/eapache/repositories"},"tags":[]},"repo_metadata_updated_at":"2026-10-06T11:22:56.074Z","dependent_packages_count":3522,"downloads":null,"downloads_period":null,"dependent_repos_count":37215,"rankings":{"downloads":null,"dependent_repos_count":0.029098254104753713,"dependent_packages_count":0.06779593224406535,"stargazers_count":9.76962214028786,"forks_count":5.197984881609293,"docker_downloads_count":0.04919704817710937,"average":3.022739651284616},"purl":"pkg:golang/github.com/eapache/go-xerial-snappy","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/go/github.com/eapache/go-xerial-snappy","docker_dependents_count":1429,"docker_downloads_count":7414601864,"usage_url":"https://repos.ecosyste.ms/usage/go/github.com/eapache/go-xerial-snappy","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/go/github.com/eapache/go-xerial-snappy/dependencies","status":null,"funding_links":[],"critical":true,"issue_metadata":{"last_synced_at":"2026-10-02T22:02:28.829Z","issues_count":3,"pull_requests_count":7,"avg_time_to_close_issue":14325178.5,"avg_time_to_close_pull_request":3279791.4285714286,"issues_closed_count":2,"pull_requests_closed_count":7,"pull_request_authors_count":6,"issue_authors_count":3,"avg_comments_per_issue":0.6666666666666666,"avg_comments_per_pull_request":1.5714285714285714,"merged_pull_requests_count":5,"bot_issues_count":0,"bot_pull_requests_count":0,"past_year_issues_count":0,"past_year_pull_requests_count":0,"past_year_avg_time_to_close_issue":null,"past_year_avg_time_to_close_pull_request":null,"past_year_issues_closed_count":0,"past_year_pull_requests_closed_count":0,"past_year_pull_request_authors_count":0,"past_year_issue_authors_count":0,"past_year_avg_comments_per_issue":null,"past_year_avg_comments_per_pull_request":null,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":0,"past_year_merged_pull_requests_count":0,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/eapache%2Fgo-xerial-snappy/issues","maintainers":[{"login":"dnwe","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/dnwe"}],"active_maintainers":[]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Feapache%2Fgo-xerial-snappy/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Feapache%2Fgo-xerial-snappy/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Feapache%2Fgo-xerial-snappy/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Feapache%2Fgo-xerial-snappy/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Feapache%2Fgo-xerial-snappy/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Feapache%2Fgo-xerial-snappy/codemeta","maintainers":[],"registry":{"name":"proxy.golang.org","url":"https://proxy.golang.org","ecosystem":"go","default":true,"packages_count":2541048,"maintainers_count":0,"namespaces_count":853808,"keywords_count":146098,"github":"golang","metadata":{"funded_packages_count":120986,"sync_missing_packages_cursor":{"timestamp":"2026-09-29T00:04:57.155362Z","path":"github.com/virtengine/virtengine/sdk/specs","version":"v0.0.0-20260928231908-c0c887541540"},"rate_limit":5},"icon_url":"https://github.com/golang.png","created_at":"2022-04-04T15:19:22.939Z","updated_at":"2026-10-22T05:07:44.151Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/namespaces"}}],"commits":{"id":488418,"full_name":"eapache/go-xerial-snappy","default_branch":"master","total_commits":18,"total_committers":5,"total_bot_commits":0,"total_bot_committers":0,"mean_commits":3.6,"dds":0.5555555555555556,"past_year_total_commits":0,"past_year_total_committers":0,"past_year_total_bot_commits":0,"past_year_total_bot_committers":0,"past_year_mean_commits":0.0,"past_year_dds":0.0,"last_synced_at":"2026-10-22T18:01:13.282Z","last_synced_commit":"c322873962e393e443b7efa5969edac6884adfa1","created_at":"2023-03-09T01:48:03.023Z","updated_at":"2026-10-22T18:01:13.164Z","committers":[{"name":"Sean Hanson","email":"shanson7@bloomberg.net","login":"shanson7","count":8},{"name":"Evan Huus","email":"eapache@gmail.com","login":"eapache","count":4},{"name":"Dominic Evans","email":"dominic.evans@uk.ibm.com","login":"dnwe","count":3},{"name":"Stevie Johnstone","email":"stevie@jazznetworks.com","login":null,"count":2},{"name":"Klaus Post","email":"klauspost@gmail.com","login":"klauspost","count":1}],"past_year_committers":[],"commits_url":"https://commits.ecosyste.ms/api/v1/hosts/GitHub/repositories/eapache%2Fgo-xerial-snappy/commits","host":{"name":"GitHub","url":"https://github.com","kind":"github","last_synced_at":"2026-10-23T00:00:05.965Z","repositories_count":8561617,"commits_count":1302325003,"contributors_count":59735796,"owners_count":1841463,"committers_count":3884413,"icon_url":"https://github.com/github.png","host_url":"https://commits.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://commits.ecosyste.ms/api/v1/hosts/GitHub/repositories"}},"issues":{"table":{"full_name":"eapache/go-xerial-snappy","html_url":"https://github.com/eapache/go-xerial-snappy","last_synced_at":"2026-10-22T18:00:49.540Z","status":null,"issues_count":3,"pull_requests_count":7,"avg_time_to_close_issue":14325178.5,"avg_time_to_close_pull_request":3279791.4285714286,"issues_closed_count":2,"pull_requests_closed_count":7,"pull_request_authors_count":6,"issue_authors_count":3,"avg_comments_per_issue":0.6666666666666666,"avg_comments_per_pull_request":1.5714285714285714,"merged_pull_requests_count":5,"bot_issues_count":0,"bot_pull_requests_count":0,"past_year_issues_count":0,"past_year_pull_requests_count":0,"past_year_avg_time_to_close_issue":null,"past_year_avg_time_to_close_pull_request":null,"past_year_issues_closed_count":0,"past_year_pull_requests_closed_count":0,"past_year_pull_request_authors_count":0,"past_year_issue_authors_count":0,"past_year_avg_comments_per_issue":null,"past_year_avg_comments_per_pull_request":null,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":0,"past_year_merged_pull_requests_count":0,"created_at":"2023-05-16T03:49:19.343Z","updated_at":"2026-10-22T18:00:49.540Z","repository_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/eapache%2Fgo-xerial-snappy","issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/eapache%2Fgo-xerial-snappy/issues","issue_labels_count":{"table":{}},"pull_request_labels_count":{"table":{}},"issue_author_associations_count":{"table":{"NONE":3}},"pull_request_author_associations_count":{"table":{"CONTRIBUTOR":4,"NONE":2,"COLLABORATOR":1}},"issue_authors":{"table":{"cocotyty":1,"AlekSi":1,"ferrirW":1}},"pull_request_authors":{"table":{"shanson7":2,"dnwe":1,"cocotyty":1,"klauspost":1,"stevenjohnstone":1,"nagesh4193":1}},"host":{"table":{"name":"GitHub","url":"https://github.com","kind":"github","last_synced_at":"2026-10-23T00:00:07.020Z","repositories_count":18191027,"issues_count":48998720,"pull_requests_count":150943336,"authors_count":12102308,"icon_url":"https://github.com/github.png","host_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories","owners_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/owners","authors_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors"}},"past_year_issue_labels_count":{"table":{}},"past_year_pull_request_labels_count":{"table":{}},"past_year_issue_author_associations_count":{"table":{}},"past_year_pull_request_author_associations_count":{"table":{}},"past_year_issue_authors":{"table":{}},"past_year_pull_request_authors":{"table":{}},"maintainers":[{"table":{"login":"dnwe","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/dnwe"}}],"active_maintainers":[]}},"events":{"total":{},"last_year":{}},"keywords":[],"dependencies":[{"ecosystem":"go","filepath":"go.mod","sha":null,"kind":"manifest","created_at":"2023-02-09T00:15:57.310Z","updated_at":"2023-02-09T00:15:57.310Z","repository_link":"https://github.com/eapache/go-xerial-snappy/blob/master/go.mod","dependencies":[{"id":7471361290,"package_name":"github.com/golang/snappy","ecosystem":"go","requirements":"v0.0.4","direct":true,"kind":"runtime","optional":false}]},{"ecosystem":"go","filepath":"go.sum","sha":null,"kind":"lockfile","created_at":"2023-02-09T00:15:57.332Z","updated_at":"2023-02-09T00:15:57.332Z","repository_link":"https://github.com/eapache/go-xerial-snappy/blob/master/go.sum","dependencies":[{"id":7471361291,"package_name":"github.com/golang/snappy","ecosystem":"go","requirements":"v0.0.4","direct":false,"kind":"runtime","optional":false}]}],"score":27.10874943931474,"created_at":"2026-10-06T11:21:57.902Z","updated_at":"2026-10-23T21:02:42.796Z","avatar_url":"https://github.com/eapache.png","language":"Go","codemeta":null,"publiccode":null,"project_url":"https://summary.ecosyste.ms/api/v1/projects/389644","html_url":"https://summary.ecosyste.ms/projects/389644"}