{"id":390079,"url":"https://github.com/nedbat/cog","last_synced_at":"2026-10-23T20:02:56.232Z","repository":{"id":41420165,"uuid":"174532154","full_name":"nedbat/cog","owner":"nedbat","description":"Small bits of Python computation for static files","archived":false,"fork":false,"pushed_at":"2026-08-05T11:34:03.000Z","size":386,"stargazers_count":407,"open_issues_count":23,"forks_count":36,"subscribers_count":7,"default_branch":"main","last_synced_at":"2026-10-18T01:18:54.721Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":"https://cog.readthedocs.io","language":"Python","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/nedbat.png","metadata":{"files":{"readme":"README.rst","changelog":"CHANGELOG.rst","contributing":null,"funding":null,"license":"LICENSE.txt","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":"AUTHORS.txt","dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"claude":null,"gemini":null,"cursor":null,"copilot":null,"dco":null,"cla":null,"disclosure":null}},"created_at":"2019-03-08T12:14:00.000Z","updated_at":"2026-10-08T06:53:20.000Z","dependencies_parsed_at":"2026-08-13T10:34:32.693Z","dependency_job_id":null,"html_url":"https://github.com/nedbat/cog","commit_stats":{"total_commits":214,"total_committers":8,"mean_commits":26.75,"dds":0.04205607476635509,"last_synced_commit":"2f82c2703353321290a2b6e2e3f99f6b92908294"},"previous_names":[],"tags_count":12,"template":false,"template_full_name":null,"purl":"pkg:github/nedbat/cog","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/nedbat%2Fcog","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/nedbat%2Fcog/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/nedbat%2Fcog/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/nedbat%2Fcog/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/nedbat","download_url":"https://codeload.github.com/nedbat/cog/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/nedbat%2Fcog/sbom","scorecard":{"id":678349,"data":{"date":"2025-08-11","repo":{"name":"github.com/nedbat/cog","commit":"0ff1d7c1ce8331a6ebcd733523e7587df858aebd"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":5.6,"checks":[{"name":"Maintained","score":10,"reason":"21 commit(s) and 2 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Code-Review","score":0,"reason":"Found 2/27 approved changesets -- score normalized to 0","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Token-Permissions","score":10,"reason":"GitHub workflow tokens follow principle of least privilege","details":["Info: topLevel 'contents' permission set to 'read': .github/workflows/ci.yml:12","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Pinned-Dependencies","score":5,"reason":"dependency not pinned by hash detected -- score normalized to 5","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:102: update your workflow using https://app.stepsecurity.io/secureworkflow/nedbat/cog/ci.yml/main?enable=pin","Warn: pipCommand not pinned by hash: .github/workflows/ci.yml:49","Warn: pipCommand not pinned by hash: .github/workflows/ci.yml:94","Warn: pipCommand not pinned by hash: .github/workflows/ci.yml:127","Info:   8 out of   9 GitHub-owned GitHubAction dependencies pinned","Info:   2 out of   2 third-party GitHubAction dependencies pinned","Info:   0 out of   3 pipCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"Security-Policy","score":0,"reason":"security policy file not detected","details":["Warn: no security policy file detected","Warn: no security file to analyze","Warn: no security file to analyze","Warn: no security file to analyze"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE.txt:0","Info: FSF or OSI recognized license: MIT License: LICENSE.txt:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Branch-Protection","score":0,"reason":"branch protection not enabled on development/release branches","details":["Warn: branch protection not enabled for branch 'main'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 5 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-21T22:16:18.197Z","repository_id":41420165,"created_at":"2025-08-21T22:16:18.198Z","updated_at":"2025-08-21T22:16:18.198Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":345082042,"owners_count":38476485,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-10-03T21:59:58.778Z","status":"online","status_checked_at":"2026-10-22T02:00:06.372Z","response_time":122,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"owner":{"login":"nedbat","name":"Ned Batchelder","uuid":"23789","kind":"user","description":"","email":"ned@nedbatchelder.com","website":"https://nedbatchelder.com","location":"Boston, MA, USA","twitter":null,"company":null,"icon_url":"https://avatars.githubusercontent.com/u/23789?u=76b163dcfe4c4f1cdcea32b9f97be0ce037c5e4c\u0026v=4","repositories_count":146,"last_synced_at":"2026-10-18T19:41:18.204Z","metadata":{"has_sponsors_listing":true,"funding":null},"html_url":"https://github.com/nedbat","funding_links":["https://github.com/sponsors/nedbat"],"total_stars":3437,"followers":2473,"following":0,"created_at":"2022-11-02T16:21:31.275Z","updated_at":"2026-10-18T19:41:18.222Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/nedbat","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/nedbat/repositories"},"packages":[{"id":12996061,"name":"cogapp","ecosystem":"alpine","description":"Content generation tool that leverages Python","homepage":"https://github.com/nedbat/cog","licenses":"MIT","normalized_licenses":["MIT"],"repository_url":"https://github.com/nedbat/cog","keywords_array":[],"namespace":"community","versions_count":1,"first_release_published_at":"2025-10-21T06:00:49.000Z","latest_release_published_at":"2025-10-21T06:00:49.000Z","latest_release_number":"3.6.0-r0","latest_published_release_number":null,"last_synced_at":"2026-09-16T20:28:19.421Z","created_at":"2026-01-30T20:30:07.660Z","updated_at":"2026-10-10T16:41:33.267Z","registry_url":"https://pkgs.alpinelinux.org/package/v3.23/community/x86_64/cogapp","install_command":"apk add cogapp","documentation_url":null,"metadata":{"repository":"community","architecture":"x86_64"},"repo_metadata":{"id":41420165,"uuid":"174532154","full_name":"nedbat/cog","owner":"nedbat","description":"Small bits of Python computation for static files","archived":false,"fork":false,"pushed_at":"2026-08-05T11:34:03.000Z","size":386,"stargazers_count":406,"open_issues_count":23,"forks_count":36,"subscribers_count":7,"default_branch":"main","last_synced_at":"2026-10-03T11:25:44.474Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":"https://cog.readthedocs.io","language":"Python","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/nedbat.png","metadata":{"files":{"readme":"README.rst","changelog":"CHANGELOG.rst","contributing":null,"funding":null,"license":"LICENSE.txt","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":"AUTHORS.txt","dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"claude":null,"gemini":null,"cursor":null,"copilot":null,"dco":null,"cla":null,"disclosure":null}},"created_at":"2019-03-08T12:14:00.000Z","updated_at":"2026-08-20T21:01:49.000Z","dependencies_parsed_at":"2026-08-13T10:34:32.693Z","dependency_job_id":null,"html_url":"https://github.com/nedbat/cog","commit_stats":{"total_commits":214,"total_committers":8,"mean_commits":26.75,"dds":0.04205607476635509,"last_synced_commit":"2f82c2703353321290a2b6e2e3f99f6b92908294"},"previous_names":[],"tags_count":12,"template":false,"template_full_name":null,"purl":"pkg:github/nedbat/cog","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/nedbat%2Fcog","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/nedbat%2Fcog/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/nedbat%2Fcog/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/nedbat%2Fcog/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/nedbat","download_url":"https://codeload.github.com/nedbat/cog/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/nedbat%2Fcog/sbom","scorecard":{"id":678349,"data":{"date":"2025-08-11","repo":{"name":"github.com/nedbat/cog","commit":"0ff1d7c1ce8331a6ebcd733523e7587df858aebd"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":5.6,"checks":[{"name":"Maintained","score":10,"reason":"21 commit(s) and 2 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Code-Review","score":0,"reason":"Found 2/27 approved changesets -- score normalized to 0","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Token-Permissions","score":10,"reason":"GitHub workflow tokens follow principle of least privilege","details":["Info: topLevel 'contents' permission set to 'read': .github/workflows/ci.yml:12","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Pinned-Dependencies","score":5,"reason":"dependency not pinned by hash detected -- score normalized to 5","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:102: update your workflow using https://app.stepsecurity.io/secureworkflow/nedbat/cog/ci.yml/main?enable=pin","Warn: pipCommand not pinned by hash: .github/workflows/ci.yml:49","Warn: pipCommand not pinned by hash: .github/workflows/ci.yml:94","Warn: pipCommand not pinned by hash: .github/workflows/ci.yml:127","Info:   8 out of   9 GitHub-owned GitHubAction dependencies pinned","Info:   2 out of   2 third-party GitHubAction dependencies pinned","Info:   0 out of   3 pipCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"Security-Policy","score":0,"reason":"security policy file not detected","details":["Warn: no security policy file detected","Warn: no security file to analyze","Warn: no security file to analyze","Warn: no security file to analyze"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE.txt:0","Info: FSF or OSI recognized license: MIT License: LICENSE.txt:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Branch-Protection","score":0,"reason":"branch protection not enabled on development/release branches","details":["Warn: branch protection not enabled for branch 'main'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 5 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-21T22:16:18.197Z","repository_id":41420165,"created_at":"2025-08-21T22:16:18.198Z","updated_at":"2025-08-21T22:16:18.198Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":343680568,"owners_count":38152616,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-10-03T21:59:58.778Z","status":"online","status_checked_at":"2026-10-10T02:00:07.419Z","response_time":65,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"nedbat","name":"Ned Batchelder","uuid":"23789","kind":"user","description":"","email":"ned@nedbatchelder.com","website":"https://nedbatchelder.com","location":"Boston, MA, USA","twitter":null,"company":null,"icon_url":"https://avatars.githubusercontent.com/u/23789?u=76b163dcfe4c4f1cdcea32b9f97be0ce037c5e4c\u0026v=4","repositories_count":145,"last_synced_at":"2026-10-04T01:44:08.858Z","metadata":{"has_sponsors_listing":true,"funding":null},"html_url":"https://github.com/nedbat","funding_links":["https://github.com/sponsors/nedbat"],"total_stars":3427,"followers":2466,"following":0,"created_at":"2022-11-02T16:21:31.275Z","updated_at":"2026-10-04T01:44:08.952Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/nedbat","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/nedbat/repositories"},"tags":[{"name":"v3.6.0","sha":"badd4c31d77dec54f745c03ae673e753df47163d","kind":"tag","published_at":"2025-09-21T15:54:14.000Z","download_url":"https://codeload.github.com/nedbat/cog/tar.gz/v3.6.0","html_url":"https://github.com/nedbat/cog/releases/tag/v3.6.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/nedbat/cog@v3.6.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/nedbat%2Fcog/tags/v3.6.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/nedbat%2Fcog/tags/v3.6.0/manifests"},{"name":"v3.5.1","sha":"01400075981bceae02edafbbf61a77876f578b8a","kind":"tag","published_at":"2025-06-10T12:42:40.000Z","download_url":"https://codeload.github.com/nedbat/cog/tar.gz/v3.5.1","html_url":"https://github.com/nedbat/cog/releases/tag/v3.5.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/nedbat/cog@v3.5.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/nedbat%2Fcog/tags/v3.5.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/nedbat%2Fcog/tags/v3.5.1/manifests"},{"name":"v3.5.0","sha":"315b06062f37598e7830d85c2851eabffe159dd4","kind":"tag","published_at":"2025-06-05T15:18:53.000Z","download_url":"https://codeload.github.com/nedbat/cog/tar.gz/v3.5.0","html_url":"https://github.com/nedbat/cog/releases/tag/v3.5.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/nedbat/cog@v3.5.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/nedbat%2Fcog/tags/v3.5.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/nedbat%2Fcog/tags/v3.5.0/manifests"},{"name":"v3.4.1","sha":"cceb6cbbc67c7bb35758d5ba7772a8482d143b56","kind":"tag","published_at":"2024-03-07T19:06:36.000Z","download_url":"https://codeload.github.com/nedbat/cog/tar.gz/v3.4.1","html_url":"https://github.com/nedbat/cog/releases/tag/v3.4.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/nedbat/cog@v3.4.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/nedbat%2Fcog/tags/v3.4.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/nedbat%2Fcog/tags/v3.4.1/manifests"},{"name":"v3.4.0","sha":"ac58ba92184fa5ba195d06994dc202e0dedd4186","kind":"tag","published_at":"2024-03-07T18:59:32.000Z","download_url":"https://codeload.github.com/nedbat/cog/tar.gz/v3.4.0","html_url":"https://github.com/nedbat/cog/releases/tag/v3.4.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/nedbat/cog@v3.4.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/nedbat%2Fcog/tags/v3.4.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/nedbat%2Fcog/tags/v3.4.0/manifests"},{"name":"v3.3.0","sha":"1050aad948e2de6cca56d8e14b8dc1cbb7890c9e","kind":"tag","published_at":"2021-11-19T17:30:12.000Z","download_url":"https://codeload.github.com/nedbat/cog/tar.gz/v3.3.0","html_url":"https://github.com/nedbat/cog/releases/tag/v3.3.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/nedbat/cog@v3.3.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/nedbat%2Fcog/tags/v3.3.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/nedbat%2Fcog/tags/v3.3.0/manifests"},{"name":"v3.2.0","sha":"71e8ca8e35df6f5c4e09af69278462c004d3b8e8","kind":"tag","published_at":"2021-11-07T16:22:15.000Z","download_url":"https://codeload.github.com/nedbat/cog/tar.gz/v3.2.0","html_url":"https://github.com/nedbat/cog/releases/tag/v3.2.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/nedbat/cog@v3.2.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/nedbat%2Fcog/tags/v3.2.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/nedbat%2Fcog/tags/v3.2.0/manifests"},{"name":"v3.1.0","sha":"1f84704ea5a8f2769c7994a7ba81ec1c9fcb06d4","kind":"tag","published_at":"2021-08-31T21:25:12.000Z","download_url":"https://codeload.github.com/nedbat/cog/tar.gz/v3.1.0","html_url":"https://github.com/nedbat/cog/releases/tag/v3.1.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/nedbat/cog@v3.1.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/nedbat%2Fcog/tags/v3.1.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/nedbat%2Fcog/tags/v3.1.0/manifests"},{"name":"v3.0.0","sha":"0fc2819e254c9f1597db7c2a7f2e95fe0d8b0fea","kind":"commit","published_at":"2019-04-02T10:55:06.000Z","download_url":"https://codeload.github.com/nedbat/cog/tar.gz/v3.0.0","html_url":"https://github.com/nedbat/cog/releases/tag/v3.0.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/nedbat/cog@v3.0.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/nedbat%2Fcog/tags/v3.0.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/nedbat%2Fcog/tags/v3.0.0/manifests"},{"name":"v2.5.1","sha":"703910eee248ce3ae3e20f86b134167406b92bbc","kind":"commit","published_at":"2016-10-19T23:23:29.000Z","download_url":"https://codeload.github.com/nedbat/cog/tar.gz/v2.5.1","html_url":"https://github.com/nedbat/cog/releases/tag/v2.5.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/nedbat/cog@v2.5.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/nedbat%2Fcog/tags/v2.5.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/nedbat%2Fcog/tags/v2.5.1/manifests"},{"name":"v2.5","sha":"01e756416c9d974a182c1f2580836f1a1454ab32","kind":"commit","published_at":"2016-02-13T13:22:05.000Z","download_url":"https://codeload.github.com/nedbat/cog/tar.gz/v2.5","html_url":"https://github.com/nedbat/cog/releases/tag/v2.5","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/nedbat/cog@v2.5","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/nedbat%2Fcog/tags/v2.5","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/nedbat%2Fcog/tags/v2.5/manifests"},{"name":"cogapp-2.2","sha":"b67f84ae285b62b91a877b3ac6bb7ddb938919e2","kind":"commit","published_at":"2009-06-26T01:38:08.000Z","download_url":"https://codeload.github.com/nedbat/cog/tar.gz/cogapp-2.2","html_url":"https://github.com/nedbat/cog/releases/tag/cogapp-2.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/nedbat/cog@cogapp-2.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/nedbat%2Fcog/tags/cogapp-2.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/nedbat%2Fcog/tags/cogapp-2.2/manifests"}]},"repo_metadata_updated_at":"2026-10-10T16:41:33.267Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":0.0,"dependent_packages_count":0.0,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":100},"purl":"pkg:apk/alpine/cogapp?arch=x86_64\u0026repository_url=https://pkgs.alpinelinux.org/packages?branch=v3.23","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/alpine/cogapp","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/alpine/cogapp","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/alpine/cogapp/dependencies","status":null,"funding_links":["https://github.com/sponsors/nedbat"],"critical":null,"issue_metadata":{"last_synced_at":"2026-10-10T03:33:03.366Z","issues_count":31,"pull_requests_count":50,"avg_time_to_close_issue":10842473.416666666,"avg_time_to_close_pull_request":917075.1538461539,"issues_closed_count":12,"pull_requests_closed_count":39,"pull_request_authors_count":14,"issue_authors_count":24,"avg_comments_per_issue":2.0,"avg_comments_per_pull_request":0.72,"merged_pull_requests_count":34,"bot_issues_count":0,"bot_pull_requests_count":21,"past_year_issues_count":3,"past_year_pull_requests_count":14,"past_year_avg_time_to_close_issue":null,"past_year_avg_time_to_close_pull_request":80453.5,"past_year_issues_closed_count":0,"past_year_pull_requests_closed_count":14,"past_year_pull_request_authors_count":1,"past_year_issue_authors_count":2,"past_year_avg_comments_per_issue":0.6666666666666666,"past_year_avg_comments_per_pull_request":0.07142857142857142,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":14,"past_year_merged_pull_requests_count":13,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/nedbat%2Fcog/issues","maintainers":[{"login":"nedbat","count":6,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/nedbat"}],"active_maintainers":[]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.23/packages/cogapp/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.23/packages/cogapp/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.23/packages/cogapp/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.23/packages/cogapp/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.23/packages/cogapp/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.23/packages/cogapp/codemeta","maintainers":[{"uuid":"cielesti@protonmail.com","login":null,"name":"Celeste","email":"cielesti@protonmail.com","url":"https://pkgs.alpinelinux.org/packages?maintainer=Celeste","packages_count":2246,"html_url":"https://pkgs.alpinelinux.org/packages?maintainer=Celeste","role":null,"created_at":"2026-03-03T12:37:21.126Z","updated_at":"2026-03-03T12:37:21.126Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.23/maintainers/cielesti@protonmail.com/packages"}],"registry":{"name":"alpine-v3.23","url":"https://pkgs.alpinelinux.org/packages?branch=v3.23","ecosystem":"alpine","default":false,"packages_count":27577,"maintainers_count":428,"namespaces_count":2,"keywords_count":189,"github":"alpinelinux","metadata":{"repos":["main","community"],"funded_packages_count":1874},"icon_url":"https://github.com/alpinelinux.png","created_at":"2026-01-24T14:35:50.739Z","updated_at":"2026-10-22T05:05:16.674Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.23/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.23/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.23/namespaces"}},{"id":13403088,"name":"python-cogapp","ecosystem":"ubuntu","description":null,"homepage":"https://github.com/nedbat/cog","licenses":"mit","normalized_licenses":[],"repository_url":"https://github.com/nedbat/cog","keywords_array":["universe/misc"],"namespace":"universe","versions_count":1,"first_release_published_at":"2026-02-06T10:50:36.646Z","latest_release_published_at":"2026-02-06T10:50:36.646Z","latest_release_number":"3.3.0-3","latest_published_release_number":null,"last_synced_at":"2026-03-06T11:03:48.652Z","created_at":"2026-02-06T10:50:36.360Z","updated_at":"2026-10-10T16:41:33.220Z","registry_url":"https://launchpad.net/ubuntu/+source/python-cogapp","install_command":"apt-get install python-cogapp","documentation_url":null,"metadata":{"component":"universe","architecture":"all","priority":"optional","binary":"python3-cogapp","standards_version":"4.6.1","maintainer":"Debian Python Team \u003cteam+python@tracker.debian.org\u003e","build_depends":"debhelper-compat (= 13), dh-sequence-python3, python3-all-dev, python3-setuptools","build_depends_indep":null,"build_depends_arch":null},"repo_metadata":{"id":41420165,"uuid":"174532154","full_name":"nedbat/cog","owner":"nedbat","description":"Small bits of Python computation for static files","archived":false,"fork":false,"pushed_at":"2026-08-05T11:34:03.000Z","size":386,"stargazers_count":406,"open_issues_count":23,"forks_count":36,"subscribers_count":7,"default_branch":"main","last_synced_at":"2026-10-03T11:25:44.474Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":"https://cog.readthedocs.io","language":"Python","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/nedbat.png","metadata":{"files":{"readme":"README.rst","changelog":"CHANGELOG.rst","contributing":null,"funding":null,"license":"LICENSE.txt","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":"AUTHORS.txt","dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"claude":null,"gemini":null,"cursor":null,"copilot":null,"dco":null,"cla":null,"disclosure":null}},"created_at":"2019-03-08T12:14:00.000Z","updated_at":"2026-08-20T21:01:49.000Z","dependencies_parsed_at":"2026-08-13T10:34:32.693Z","dependency_job_id":null,"html_url":"https://github.com/nedbat/cog","commit_stats":{"total_commits":214,"total_committers":8,"mean_commits":26.75,"dds":0.04205607476635509,"last_synced_commit":"2f82c2703353321290a2b6e2e3f99f6b92908294"},"previous_names":[],"tags_count":12,"template":false,"template_full_name":null,"purl":"pkg:github/nedbat/cog","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/nedbat%2Fcog","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/nedbat%2Fcog/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/nedbat%2Fcog/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/nedbat%2Fcog/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/nedbat","download_url":"https://codeload.github.com/nedbat/cog/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/nedbat%2Fcog/sbom","scorecard":{"id":678349,"data":{"date":"2025-08-11","repo":{"name":"github.com/nedbat/cog","commit":"0ff1d7c1ce8331a6ebcd733523e7587df858aebd"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":5.6,"checks":[{"name":"Maintained","score":10,"reason":"21 commit(s) and 2 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Code-Review","score":0,"reason":"Found 2/27 approved changesets -- score normalized to 0","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Token-Permissions","score":10,"reason":"GitHub workflow tokens follow principle of least privilege","details":["Info: topLevel 'contents' permission set to 'read': .github/workflows/ci.yml:12","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Pinned-Dependencies","score":5,"reason":"dependency not pinned by hash detected -- score normalized to 5","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:102: update your workflow using https://app.stepsecurity.io/secureworkflow/nedbat/cog/ci.yml/main?enable=pin","Warn: pipCommand not pinned by hash: .github/workflows/ci.yml:49","Warn: pipCommand not pinned by hash: .github/workflows/ci.yml:94","Warn: pipCommand not pinned by hash: .github/workflows/ci.yml:127","Info:   8 out of   9 GitHub-owned GitHubAction dependencies pinned","Info:   2 out of   2 third-party GitHubAction dependencies pinned","Info:   0 out of   3 pipCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"Security-Policy","score":0,"reason":"security policy file not detected","details":["Warn: no security policy file detected","Warn: no security file to analyze","Warn: no security file to analyze","Warn: no security file to analyze"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE.txt:0","Info: FSF or OSI recognized license: MIT License: LICENSE.txt:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Branch-Protection","score":0,"reason":"branch protection not enabled on development/release branches","details":["Warn: branch protection not enabled for branch 'main'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 5 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-21T22:16:18.197Z","repository_id":41420165,"created_at":"2025-08-21T22:16:18.198Z","updated_at":"2025-08-21T22:16:18.198Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":343680568,"owners_count":38152616,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-10-03T21:59:58.778Z","status":"online","status_checked_at":"2026-10-10T02:00:07.419Z","response_time":65,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"nedbat","name":"Ned Batchelder","uuid":"23789","kind":"user","description":"","email":"ned@nedbatchelder.com","website":"https://nedbatchelder.com","location":"Boston, MA, USA","twitter":null,"company":null,"icon_url":"https://avatars.githubusercontent.com/u/23789?u=76b163dcfe4c4f1cdcea32b9f97be0ce037c5e4c\u0026v=4","repositories_count":145,"last_synced_at":"2026-10-04T01:44:08.858Z","metadata":{"has_sponsors_listing":true,"funding":null},"html_url":"https://github.com/nedbat","funding_links":["https://github.com/sponsors/nedbat"],"total_stars":3427,"followers":2466,"following":0,"created_at":"2022-11-02T16:21:31.275Z","updated_at":"2026-10-04T01:44:08.952Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/nedbat","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/nedbat/repositories"},"tags":[{"name":"v3.6.0","sha":"badd4c31d77dec54f745c03ae673e753df47163d","kind":"tag","published_at":"2025-09-21T15:54:14.000Z","download_url":"https://codeload.github.com/nedbat/cog/tar.gz/v3.6.0","html_url":"https://github.com/nedbat/cog/releases/tag/v3.6.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/nedbat/cog@v3.6.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/nedbat%2Fcog/tags/v3.6.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/nedbat%2Fcog/tags/v3.6.0/manifests"},{"name":"v3.5.1","sha":"01400075981bceae02edafbbf61a77876f578b8a","kind":"tag","published_at":"2025-06-10T12:42:40.000Z","download_url":"https://codeload.github.com/nedbat/cog/tar.gz/v3.5.1","html_url":"https://github.com/nedbat/cog/releases/tag/v3.5.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/nedbat/cog@v3.5.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/nedbat%2Fcog/tags/v3.5.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/nedbat%2Fcog/tags/v3.5.1/manifests"},{"name":"v3.5.0","sha":"315b06062f37598e7830d85c2851eabffe159dd4","kind":"tag","published_at":"2025-06-05T15:18:53.000Z","download_url":"https://codeload.github.com/nedbat/cog/tar.gz/v3.5.0","html_url":"https://github.com/nedbat/cog/releases/tag/v3.5.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/nedbat/cog@v3.5.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/nedbat%2Fcog/tags/v3.5.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/nedbat%2Fcog/tags/v3.5.0/manifests"},{"name":"v3.4.1","sha":"cceb6cbbc67c7bb35758d5ba7772a8482d143b56","kind":"tag","published_at":"2024-03-07T19:06:36.000Z","download_url":"https://codeload.github.com/nedbat/cog/tar.gz/v3.4.1","html_url":"https://github.com/nedbat/cog/releases/tag/v3.4.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/nedbat/cog@v3.4.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/nedbat%2Fcog/tags/v3.4.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/nedbat%2Fcog/tags/v3.4.1/manifests"},{"name":"v3.4.0","sha":"ac58ba92184fa5ba195d06994dc202e0dedd4186","kind":"tag","published_at":"2024-03-07T18:59:32.000Z","download_url":"https://codeload.github.com/nedbat/cog/tar.gz/v3.4.0","html_url":"https://github.com/nedbat/cog/releases/tag/v3.4.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/nedbat/cog@v3.4.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/nedbat%2Fcog/tags/v3.4.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/nedbat%2Fcog/tags/v3.4.0/manifests"},{"name":"v3.3.0","sha":"1050aad948e2de6cca56d8e14b8dc1cbb7890c9e","kind":"tag","published_at":"2021-11-19T17:30:12.000Z","download_url":"https://codeload.github.com/nedbat/cog/tar.gz/v3.3.0","html_url":"https://github.com/nedbat/cog/releases/tag/v3.3.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/nedbat/cog@v3.3.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/nedbat%2Fcog/tags/v3.3.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/nedbat%2Fcog/tags/v3.3.0/manifests"},{"name":"v3.2.0","sha":"71e8ca8e35df6f5c4e09af69278462c004d3b8e8","kind":"tag","published_at":"2021-11-07T16:22:15.000Z","download_url":"https://codeload.github.com/nedbat/cog/tar.gz/v3.2.0","html_url":"https://github.com/nedbat/cog/releases/tag/v3.2.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/nedbat/cog@v3.2.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/nedbat%2Fcog/tags/v3.2.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/nedbat%2Fcog/tags/v3.2.0/manifests"},{"name":"v3.1.0","sha":"1f84704ea5a8f2769c7994a7ba81ec1c9fcb06d4","kind":"tag","published_at":"2021-08-31T21:25:12.000Z","download_url":"https://codeload.github.com/nedbat/cog/tar.gz/v3.1.0","html_url":"https://github.com/nedbat/cog/releases/tag/v3.1.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/nedbat/cog@v3.1.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/nedbat%2Fcog/tags/v3.1.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/nedbat%2Fcog/tags/v3.1.0/manifests"},{"name":"v3.0.0","sha":"0fc2819e254c9f1597db7c2a7f2e95fe0d8b0fea","kind":"commit","published_at":"2019-04-02T10:55:06.000Z","download_url":"https://codeload.github.com/nedbat/cog/tar.gz/v3.0.0","html_url":"https://github.com/nedbat/cog/releases/tag/v3.0.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/nedbat/cog@v3.0.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/nedbat%2Fcog/tags/v3.0.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/nedbat%2Fcog/tags/v3.0.0/manifests"},{"name":"v2.5.1","sha":"703910eee248ce3ae3e20f86b134167406b92bbc","kind":"commit","published_at":"2016-10-19T23:23:29.000Z","download_url":"https://codeload.github.com/nedbat/cog/tar.gz/v2.5.1","html_url":"https://github.com/nedbat/cog/releases/tag/v2.5.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/nedbat/cog@v2.5.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/nedbat%2Fcog/tags/v2.5.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/nedbat%2Fcog/tags/v2.5.1/manifests"},{"name":"v2.5","sha":"01e756416c9d974a182c1f2580836f1a1454ab32","kind":"commit","published_at":"2016-02-13T13:22:05.000Z","download_url":"https://codeload.github.com/nedbat/cog/tar.gz/v2.5","html_url":"https://github.com/nedbat/cog/releases/tag/v2.5","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/nedbat/cog@v2.5","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/nedbat%2Fcog/tags/v2.5","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/nedbat%2Fcog/tags/v2.5/manifests"},{"name":"cogapp-2.2","sha":"b67f84ae285b62b91a877b3ac6bb7ddb938919e2","kind":"commit","published_at":"2009-06-26T01:38:08.000Z","download_url":"https://codeload.github.com/nedbat/cog/tar.gz/cogapp-2.2","html_url":"https://github.com/nedbat/cog/releases/tag/cogapp-2.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/nedbat/cog@cogapp-2.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/nedbat%2Fcog/tags/cogapp-2.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/nedbat%2Fcog/tags/cogapp-2.2/manifests"}]},"repo_metadata_updated_at":"2026-10-10T16:41:33.220Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{},"purl":"pkg:deb/ubuntu/python-cogapp?arch=source\u0026distro=ubuntu-24.04","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/ubuntu/python-cogapp","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/ubuntu/python-cogapp","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/ubuntu/python-cogapp/dependencies","status":null,"funding_links":["https://github.com/sponsors/nedbat"],"critical":null,"issue_metadata":{"last_synced_at":"2026-10-10T03:33:03.366Z","issues_count":31,"pull_requests_count":50,"avg_time_to_close_issue":10842473.416666666,"avg_time_to_close_pull_request":917075.1538461539,"issues_closed_count":12,"pull_requests_closed_count":39,"pull_request_authors_count":14,"issue_authors_count":24,"avg_comments_per_issue":2.0,"avg_comments_per_pull_request":0.72,"merged_pull_requests_count":34,"bot_issues_count":0,"bot_pull_requests_count":21,"past_year_issues_count":3,"past_year_pull_requests_count":14,"past_year_avg_time_to_close_issue":null,"past_year_avg_time_to_close_pull_request":80453.5,"past_year_issues_closed_count":0,"past_year_pull_requests_closed_count":14,"past_year_pull_request_authors_count":1,"past_year_issue_authors_count":2,"past_year_avg_comments_per_issue":0.6666666666666666,"past_year_avg_comments_per_pull_request":0.07142857142857142,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":14,"past_year_merged_pull_requests_count":13,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/nedbat%2Fcog/issues","maintainers":[{"login":"nedbat","count":6,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/nedbat"}],"active_maintainers":[]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-24.04/packages/python-cogapp/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-24.04/packages/python-cogapp/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-24.04/packages/python-cogapp/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-24.04/packages/python-cogapp/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-24.04/packages/python-cogapp/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-24.04/packages/python-cogapp/codemeta","maintainers":[],"registry":{"name":"ubuntu-24.04","url":"https://launchpad.net/ubuntu/noble","ecosystem":"ubuntu","default":true,"packages_count":37306,"maintainers_count":0,"namespaces_count":4,"keywords_count":1696,"github":"ubuntu","metadata":{"codename":"noble","funded_packages_count":2580},"icon_url":"https://github.com/ubuntu.png","created_at":"2026-02-04T11:01:45.928Z","updated_at":"2026-10-22T05:05:53.997Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-24.04/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-24.04/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-24.04/namespaces"}},{"id":12996066,"name":"cogapp-pyc","ecosystem":"alpine","description":"Precompiled Python bytecode for cogapp","homepage":"https://github.com/nedbat/cog","licenses":"MIT","normalized_licenses":["MIT"],"repository_url":"https://github.com/nedbat/cog","keywords_array":[],"namespace":"community","versions_count":1,"first_release_published_at":"2025-10-21T06:00:49.000Z","latest_release_published_at":"2025-10-21T06:00:49.000Z","latest_release_number":"3.6.0-r0","latest_published_release_number":null,"last_synced_at":"2026-04-11T01:16:09.118Z","created_at":"2026-01-30T20:30:12.935Z","updated_at":"2026-10-10T16:41:33.278Z","registry_url":"https://pkgs.alpinelinux.org/package/v3.23/community/x86_64/cogapp-pyc","install_command":"apk add cogapp-pyc","documentation_url":null,"metadata":{"repository":"community","architecture":"x86_64"},"repo_metadata":{"id":41420165,"uuid":"174532154","full_name":"nedbat/cog","owner":"nedbat","description":"Small bits of Python computation for static files","archived":false,"fork":false,"pushed_at":"2026-08-05T11:34:03.000Z","size":386,"stargazers_count":406,"open_issues_count":23,"forks_count":36,"subscribers_count":7,"default_branch":"main","last_synced_at":"2026-10-03T11:25:44.474Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":"https://cog.readthedocs.io","language":"Python","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/nedbat.png","metadata":{"files":{"readme":"README.rst","changelog":"CHANGELOG.rst","contributing":null,"funding":null,"license":"LICENSE.txt","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":"AUTHORS.txt","dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"claude":null,"gemini":null,"cursor":null,"copilot":null,"dco":null,"cla":null,"disclosure":null}},"created_at":"2019-03-08T12:14:00.000Z","updated_at":"2026-08-20T21:01:49.000Z","dependencies_parsed_at":"2026-08-13T10:34:32.693Z","dependency_job_id":null,"html_url":"https://github.com/nedbat/cog","commit_stats":{"total_commits":214,"total_committers":8,"mean_commits":26.75,"dds":0.04205607476635509,"last_synced_commit":"2f82c2703353321290a2b6e2e3f99f6b92908294"},"previous_names":[],"tags_count":12,"template":false,"template_full_name":null,"purl":"pkg:github/nedbat/cog","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/nedbat%2Fcog","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/nedbat%2Fcog/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/nedbat%2Fcog/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/nedbat%2Fcog/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/nedbat","download_url":"https://codeload.github.com/nedbat/cog/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/nedbat%2Fcog/sbom","scorecard":{"id":678349,"data":{"date":"2025-08-11","repo":{"name":"github.com/nedbat/cog","commit":"0ff1d7c1ce8331a6ebcd733523e7587df858aebd"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":5.6,"checks":[{"name":"Maintained","score":10,"reason":"21 commit(s) and 2 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Code-Review","score":0,"reason":"Found 2/27 approved changesets -- score normalized to 0","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Token-Permissions","score":10,"reason":"GitHub workflow tokens follow principle of least privilege","details":["Info: topLevel 'contents' permission set to 'read': .github/workflows/ci.yml:12","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Pinned-Dependencies","score":5,"reason":"dependency not pinned by hash detected -- score normalized to 5","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:102: update your workflow using https://app.stepsecurity.io/secureworkflow/nedbat/cog/ci.yml/main?enable=pin","Warn: pipCommand not pinned by hash: .github/workflows/ci.yml:49","Warn: pipCommand not pinned by hash: .github/workflows/ci.yml:94","Warn: pipCommand not pinned by hash: .github/workflows/ci.yml:127","Info:   8 out of   9 GitHub-owned GitHubAction dependencies pinned","Info:   2 out of   2 third-party GitHubAction dependencies pinned","Info:   0 out of   3 pipCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"Security-Policy","score":0,"reason":"security policy file not detected","details":["Warn: no security policy file detected","Warn: no security file to analyze","Warn: no security file to analyze","Warn: no security file to analyze"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE.txt:0","Info: FSF or OSI recognized license: MIT License: LICENSE.txt:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Branch-Protection","score":0,"reason":"branch protection not enabled on development/release branches","details":["Warn: branch protection not enabled for branch 'main'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 5 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-21T22:16:18.197Z","repository_id":41420165,"created_at":"2025-08-21T22:16:18.198Z","updated_at":"2025-08-21T22:16:18.198Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":343680568,"owners_count":38152616,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-10-03T21:59:58.778Z","status":"online","status_checked_at":"2026-10-10T02:00:07.419Z","response_time":65,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"nedbat","name":"Ned Batchelder","uuid":"23789","kind":"user","description":"","email":"ned@nedbatchelder.com","website":"https://nedbatchelder.com","location":"Boston, MA, USA","twitter":null,"company":null,"icon_url":"https://avatars.githubusercontent.com/u/23789?u=76b163dcfe4c4f1cdcea32b9f97be0ce037c5e4c\u0026v=4","repositories_count":145,"last_synced_at":"2026-10-04T01:44:08.858Z","metadata":{"has_sponsors_listing":true,"funding":null},"html_url":"https://github.com/nedbat","funding_links":["https://github.com/sponsors/nedbat"],"total_stars":3427,"followers":2466,"following":0,"created_at":"2022-11-02T16:21:31.275Z","updated_at":"2026-10-04T01:44:08.952Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/nedbat","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/nedbat/repositories"},"tags":[{"name":"v3.6.0","sha":"badd4c31d77dec54f745c03ae673e753df47163d","kind":"tag","published_at":"2025-09-21T15:54:14.000Z","download_url":"https://codeload.github.com/nedbat/cog/tar.gz/v3.6.0","html_url":"https://github.com/nedbat/cog/releases/tag/v3.6.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/nedbat/cog@v3.6.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/nedbat%2Fcog/tags/v3.6.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/nedbat%2Fcog/tags/v3.6.0/manifests"},{"name":"v3.5.1","sha":"01400075981bceae02edafbbf61a77876f578b8a","kind":"tag","published_at":"2025-06-10T12:42:40.000Z","download_url":"https://codeload.github.com/nedbat/cog/tar.gz/v3.5.1","html_url":"https://github.com/nedbat/cog/releases/tag/v3.5.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/nedbat/cog@v3.5.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/nedbat%2Fcog/tags/v3.5.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/nedbat%2Fcog/tags/v3.5.1/manifests"},{"name":"v3.5.0","sha":"315b06062f37598e7830d85c2851eabffe159dd4","kind":"tag","published_at":"2025-06-05T15:18:53.000Z","download_url":"https://codeload.github.com/nedbat/cog/tar.gz/v3.5.0","html_url":"https://github.com/nedbat/cog/releases/tag/v3.5.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/nedbat/cog@v3.5.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/nedbat%2Fcog/tags/v3.5.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/nedbat%2Fcog/tags/v3.5.0/manifests"},{"name":"v3.4.1","sha":"cceb6cbbc67c7bb35758d5ba7772a8482d143b56","kind":"tag","published_at":"2024-03-07T19:06:36.000Z","download_url":"https://codeload.github.com/nedbat/cog/tar.gz/v3.4.1","html_url":"https://github.com/nedbat/cog/releases/tag/v3.4.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/nedbat/cog@v3.4.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/nedbat%2Fcog/tags/v3.4.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/nedbat%2Fcog/tags/v3.4.1/manifests"},{"name":"v3.4.0","sha":"ac58ba92184fa5ba195d06994dc202e0dedd4186","kind":"tag","published_at":"2024-03-07T18:59:32.000Z","download_url":"https://codeload.github.com/nedbat/cog/tar.gz/v3.4.0","html_url":"https://github.com/nedbat/cog/releases/tag/v3.4.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/nedbat/cog@v3.4.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/nedbat%2Fcog/tags/v3.4.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/nedbat%2Fcog/tags/v3.4.0/manifests"},{"name":"v3.3.0","sha":"1050aad948e2de6cca56d8e14b8dc1cbb7890c9e","kind":"tag","published_at":"2021-11-19T17:30:12.000Z","download_url":"https://codeload.github.com/nedbat/cog/tar.gz/v3.3.0","html_url":"https://github.com/nedbat/cog/releases/tag/v3.3.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/nedbat/cog@v3.3.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/nedbat%2Fcog/tags/v3.3.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/nedbat%2Fcog/tags/v3.3.0/manifests"},{"name":"v3.2.0","sha":"71e8ca8e35df6f5c4e09af69278462c004d3b8e8","kind":"tag","published_at":"2021-11-07T16:22:15.000Z","download_url":"https://codeload.github.com/nedbat/cog/tar.gz/v3.2.0","html_url":"https://github.com/nedbat/cog/releases/tag/v3.2.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/nedbat/cog@v3.2.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/nedbat%2Fcog/tags/v3.2.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/nedbat%2Fcog/tags/v3.2.0/manifests"},{"name":"v3.1.0","sha":"1f84704ea5a8f2769c7994a7ba81ec1c9fcb06d4","kind":"tag","published_at":"2021-08-31T21:25:12.000Z","download_url":"https://codeload.github.com/nedbat/cog/tar.gz/v3.1.0","html_url":"https://github.com/nedbat/cog/releases/tag/v3.1.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/nedbat/cog@v3.1.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/nedbat%2Fcog/tags/v3.1.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/nedbat%2Fcog/tags/v3.1.0/manifests"},{"name":"v3.0.0","sha":"0fc2819e254c9f1597db7c2a7f2e95fe0d8b0fea","kind":"commit","published_at":"2019-04-02T10:55:06.000Z","download_url":"https://codeload.github.com/nedbat/cog/tar.gz/v3.0.0","html_url":"https://github.com/nedbat/cog/releases/tag/v3.0.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/nedbat/cog@v3.0.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/nedbat%2Fcog/tags/v3.0.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/nedbat%2Fcog/tags/v3.0.0/manifests"},{"name":"v2.5.1","sha":"703910eee248ce3ae3e20f86b134167406b92bbc","kind":"commit","published_at":"2016-10-19T23:23:29.000Z","download_url":"https://codeload.github.com/nedbat/cog/tar.gz/v2.5.1","html_url":"https://github.com/nedbat/cog/releases/tag/v2.5.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/nedbat/cog@v2.5.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/nedbat%2Fcog/tags/v2.5.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/nedbat%2Fcog/tags/v2.5.1/manifests"},{"name":"v2.5","sha":"01e756416c9d974a182c1f2580836f1a1454ab32","kind":"commit","published_at":"2016-02-13T13:22:05.000Z","download_url":"https://codeload.github.com/nedbat/cog/tar.gz/v2.5","html_url":"https://github.com/nedbat/cog/releases/tag/v2.5","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/nedbat/cog@v2.5","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/nedbat%2Fcog/tags/v2.5","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/nedbat%2Fcog/tags/v2.5/manifests"},{"name":"cogapp-2.2","sha":"b67f84ae285b62b91a877b3ac6bb7ddb938919e2","kind":"commit","published_at":"2009-06-26T01:38:08.000Z","download_url":"https://codeload.github.com/nedbat/cog/tar.gz/cogapp-2.2","html_url":"https://github.com/nedbat/cog/releases/tag/cogapp-2.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/nedbat/cog@cogapp-2.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/nedbat%2Fcog/tags/cogapp-2.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/nedbat%2Fcog/tags/cogapp-2.2/manifests"}]},"repo_metadata_updated_at":"2026-10-10T16:41:33.277Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":0.0,"dependent_packages_count":0.0,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":100},"purl":"pkg:apk/alpine/cogapp-pyc?arch=x86_64\u0026repository_url=https://pkgs.alpinelinux.org/packages?branch=v3.23","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/alpine/cogapp-pyc","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/alpine/cogapp-pyc","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/alpine/cogapp-pyc/dependencies","status":null,"funding_links":["https://github.com/sponsors/nedbat"],"critical":null,"issue_metadata":{"last_synced_at":"2026-10-10T03:33:03.366Z","issues_count":31,"pull_requests_count":50,"avg_time_to_close_issue":10842473.416666666,"avg_time_to_close_pull_request":917075.1538461539,"issues_closed_count":12,"pull_requests_closed_count":39,"pull_request_authors_count":14,"issue_authors_count":24,"avg_comments_per_issue":2.0,"avg_comments_per_pull_request":0.72,"merged_pull_requests_count":34,"bot_issues_count":0,"bot_pull_requests_count":21,"past_year_issues_count":3,"past_year_pull_requests_count":14,"past_year_avg_time_to_close_issue":null,"past_year_avg_time_to_close_pull_request":80453.5,"past_year_issues_closed_count":0,"past_year_pull_requests_closed_count":14,"past_year_pull_request_authors_count":1,"past_year_issue_authors_count":2,"past_year_avg_comments_per_issue":0.6666666666666666,"past_year_avg_comments_per_pull_request":0.07142857142857142,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":14,"past_year_merged_pull_requests_count":13,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/nedbat%2Fcog/issues","maintainers":[{"login":"nedbat","count":6,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/nedbat"}],"active_maintainers":[]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.23/packages/cogapp-pyc/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.23/packages/cogapp-pyc/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.23/packages/cogapp-pyc/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.23/packages/cogapp-pyc/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.23/packages/cogapp-pyc/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.23/packages/cogapp-pyc/codemeta","maintainers":[{"uuid":"cielesti@protonmail.com","login":null,"name":"Celeste","email":"cielesti@protonmail.com","url":"https://pkgs.alpinelinux.org/packages?maintainer=Celeste","packages_count":2246,"html_url":"https://pkgs.alpinelinux.org/packages?maintainer=Celeste","role":null,"created_at":"2026-03-03T22:53:39.449Z","updated_at":"2026-03-03T22:53:39.449Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.23/maintainers/cielesti@protonmail.com/packages"}],"registry":{"name":"alpine-v3.23","url":"https://pkgs.alpinelinux.org/packages?branch=v3.23","ecosystem":"alpine","default":false,"packages_count":27577,"maintainers_count":428,"namespaces_count":2,"keywords_count":189,"github":"alpinelinux","metadata":{"repos":["main","community"],"funded_packages_count":1874},"icon_url":"https://github.com/alpinelinux.png","created_at":"2026-01-24T14:35:50.739Z","updated_at":"2026-10-22T05:05:16.674Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.23/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.23/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.23/namespaces"}},{"id":13799305,"name":"python-cogapp","ecosystem":"ubuntu","description":null,"homepage":"https://github.com/nedbat/cog","licenses":"mit","normalized_licenses":[],"repository_url":"https://github.com/nedbat/cog","keywords_array":["universe/misc"],"namespace":"universe","versions_count":1,"first_release_published_at":"2026-02-13T17:13:39.962Z","latest_release_published_at":"2026-02-13T17:13:39.962Z","latest_release_number":"3.3.0-3","latest_published_release_number":null,"last_synced_at":"2026-10-03T05:30:57.519Z","created_at":"2026-02-13T17:13:39.678Z","updated_at":"2026-10-10T16:41:33.290Z","registry_url":"https://launchpad.net/ubuntu/+source/python-cogapp","install_command":"apt-get install python-cogapp","documentation_url":null,"metadata":{"component":"universe","architecture":"all","priority":"optional","binary":"python3-cogapp","standards_version":"4.6.1","maintainer":"Debian Python Team \u003cteam+python@tracker.debian.org\u003e","build_depends":"debhelper-compat (= 13), dh-sequence-python3, python3-all-dev, python3-setuptools","build_depends_indep":null,"build_depends_arch":null},"repo_metadata":{"id":41420165,"uuid":"174532154","full_name":"nedbat/cog","owner":"nedbat","description":"Small bits of Python computation for static files","archived":false,"fork":false,"pushed_at":"2026-08-05T11:34:03.000Z","size":386,"stargazers_count":406,"open_issues_count":23,"forks_count":36,"subscribers_count":7,"default_branch":"main","last_synced_at":"2026-10-03T11:25:44.474Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":"https://cog.readthedocs.io","language":"Python","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/nedbat.png","metadata":{"files":{"readme":"README.rst","changelog":"CHANGELOG.rst","contributing":null,"funding":null,"license":"LICENSE.txt","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":"AUTHORS.txt","dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"claude":null,"gemini":null,"cursor":null,"copilot":null,"dco":null,"cla":null,"disclosure":null}},"created_at":"2019-03-08T12:14:00.000Z","updated_at":"2026-08-20T21:01:49.000Z","dependencies_parsed_at":"2026-08-13T10:34:32.693Z","dependency_job_id":null,"html_url":"https://github.com/nedbat/cog","commit_stats":{"total_commits":214,"total_committers":8,"mean_commits":26.75,"dds":0.04205607476635509,"last_synced_commit":"2f82c2703353321290a2b6e2e3f99f6b92908294"},"previous_names":[],"tags_count":12,"template":false,"template_full_name":null,"purl":"pkg:github/nedbat/cog","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/nedbat%2Fcog","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/nedbat%2Fcog/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/nedbat%2Fcog/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/nedbat%2Fcog/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/nedbat","download_url":"https://codeload.github.com/nedbat/cog/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/nedbat%2Fcog/sbom","scorecard":{"id":678349,"data":{"date":"2025-08-11","repo":{"name":"github.com/nedbat/cog","commit":"0ff1d7c1ce8331a6ebcd733523e7587df858aebd"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":5.6,"checks":[{"name":"Maintained","score":10,"reason":"21 commit(s) and 2 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Code-Review","score":0,"reason":"Found 2/27 approved changesets -- score normalized to 0","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Token-Permissions","score":10,"reason":"GitHub workflow tokens follow principle of least privilege","details":["Info: topLevel 'contents' permission set to 'read': .github/workflows/ci.yml:12","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Pinned-Dependencies","score":5,"reason":"dependency not pinned by hash detected -- score normalized to 5","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:102: update your workflow using https://app.stepsecurity.io/secureworkflow/nedbat/cog/ci.yml/main?enable=pin","Warn: pipCommand not pinned by hash: .github/workflows/ci.yml:49","Warn: pipCommand not pinned by hash: .github/workflows/ci.yml:94","Warn: pipCommand not pinned by hash: .github/workflows/ci.yml:127","Info:   8 out of   9 GitHub-owned GitHubAction dependencies pinned","Info:   2 out of   2 third-party GitHubAction dependencies pinned","Info:   0 out of   3 pipCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"Security-Policy","score":0,"reason":"security policy file not detected","details":["Warn: no security policy file detected","Warn: no security file to analyze","Warn: no security file to analyze","Warn: no security file to analyze"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE.txt:0","Info: FSF or OSI recognized license: MIT License: LICENSE.txt:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Branch-Protection","score":0,"reason":"branch protection not enabled on development/release branches","details":["Warn: branch protection not enabled for branch 'main'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 5 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-21T22:16:18.197Z","repository_id":41420165,"created_at":"2025-08-21T22:16:18.198Z","updated_at":"2025-08-21T22:16:18.198Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":343680568,"owners_count":38152616,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-10-03T21:59:58.778Z","status":"online","status_checked_at":"2026-10-10T02:00:07.419Z","response_time":65,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"nedbat","name":"Ned Batchelder","uuid":"23789","kind":"user","description":"","email":"ned@nedbatchelder.com","website":"https://nedbatchelder.com","location":"Boston, MA, USA","twitter":null,"company":null,"icon_url":"https://avatars.githubusercontent.com/u/23789?u=76b163dcfe4c4f1cdcea32b9f97be0ce037c5e4c\u0026v=4","repositories_count":145,"last_synced_at":"2026-10-04T01:44:08.858Z","metadata":{"has_sponsors_listing":true,"funding":null},"html_url":"https://github.com/nedbat","funding_links":["https://github.com/sponsors/nedbat"],"total_stars":3427,"followers":2466,"following":0,"created_at":"2022-11-02T16:21:31.275Z","updated_at":"2026-10-04T01:44:08.952Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/nedbat","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/nedbat/repositories"},"tags":[{"name":"v3.6.0","sha":"badd4c31d77dec54f745c03ae673e753df47163d","kind":"tag","published_at":"2025-09-21T15:54:14.000Z","download_url":"https://codeload.github.com/nedbat/cog/tar.gz/v3.6.0","html_url":"https://github.com/nedbat/cog/releases/tag/v3.6.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/nedbat/cog@v3.6.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/nedbat%2Fcog/tags/v3.6.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/nedbat%2Fcog/tags/v3.6.0/manifests"},{"name":"v3.5.1","sha":"01400075981bceae02edafbbf61a77876f578b8a","kind":"tag","published_at":"2025-06-10T12:42:40.000Z","download_url":"https://codeload.github.com/nedbat/cog/tar.gz/v3.5.1","html_url":"https://github.com/nedbat/cog/releases/tag/v3.5.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/nedbat/cog@v3.5.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/nedbat%2Fcog/tags/v3.5.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/nedbat%2Fcog/tags/v3.5.1/manifests"},{"name":"v3.5.0","sha":"315b06062f37598e7830d85c2851eabffe159dd4","kind":"tag","published_at":"2025-06-05T15:18:53.000Z","download_url":"https://codeload.github.com/nedbat/cog/tar.gz/v3.5.0","html_url":"https://github.com/nedbat/cog/releases/tag/v3.5.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/nedbat/cog@v3.5.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/nedbat%2Fcog/tags/v3.5.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/nedbat%2Fcog/tags/v3.5.0/manifests"},{"name":"v3.4.1","sha":"cceb6cbbc67c7bb35758d5ba7772a8482d143b56","kind":"tag","published_at":"2024-03-07T19:06:36.000Z","download_url":"https://codeload.github.com/nedbat/cog/tar.gz/v3.4.1","html_url":"https://github.com/nedbat/cog/releases/tag/v3.4.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/nedbat/cog@v3.4.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/nedbat%2Fcog/tags/v3.4.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/nedbat%2Fcog/tags/v3.4.1/manifests"},{"name":"v3.4.0","sha":"ac58ba92184fa5ba195d06994dc202e0dedd4186","kind":"tag","published_at":"2024-03-07T18:59:32.000Z","download_url":"https://codeload.github.com/nedbat/cog/tar.gz/v3.4.0","html_url":"https://github.com/nedbat/cog/releases/tag/v3.4.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/nedbat/cog@v3.4.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/nedbat%2Fcog/tags/v3.4.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/nedbat%2Fcog/tags/v3.4.0/manifests"},{"name":"v3.3.0","sha":"1050aad948e2de6cca56d8e14b8dc1cbb7890c9e","kind":"tag","published_at":"2021-11-19T17:30:12.000Z","download_url":"https://codeload.github.com/nedbat/cog/tar.gz/v3.3.0","html_url":"https://github.com/nedbat/cog/releases/tag/v3.3.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/nedbat/cog@v3.3.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/nedbat%2Fcog/tags/v3.3.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/nedbat%2Fcog/tags/v3.3.0/manifests"},{"name":"v3.2.0","sha":"71e8ca8e35df6f5c4e09af69278462c004d3b8e8","kind":"tag","published_at":"2021-11-07T16:22:15.000Z","download_url":"https://codeload.github.com/nedbat/cog/tar.gz/v3.2.0","html_url":"https://github.com/nedbat/cog/releases/tag/v3.2.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/nedbat/cog@v3.2.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/nedbat%2Fcog/tags/v3.2.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/nedbat%2Fcog/tags/v3.2.0/manifests"},{"name":"v3.1.0","sha":"1f84704ea5a8f2769c7994a7ba81ec1c9fcb06d4","kind":"tag","published_at":"2021-08-31T21:25:12.000Z","download_url":"https://codeload.github.com/nedbat/cog/tar.gz/v3.1.0","html_url":"https://github.com/nedbat/cog/releases/tag/v3.1.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/nedbat/cog@v3.1.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/nedbat%2Fcog/tags/v3.1.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/nedbat%2Fcog/tags/v3.1.0/manifests"},{"name":"v3.0.0","sha":"0fc2819e254c9f1597db7c2a7f2e95fe0d8b0fea","kind":"commit","published_at":"2019-04-02T10:55:06.000Z","download_url":"https://codeload.github.com/nedbat/cog/tar.gz/v3.0.0","html_url":"https://github.com/nedbat/cog/releases/tag/v3.0.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/nedbat/cog@v3.0.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/nedbat%2Fcog/tags/v3.0.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/nedbat%2Fcog/tags/v3.0.0/manifests"},{"name":"v2.5.1","sha":"703910eee248ce3ae3e20f86b134167406b92bbc","kind":"commit","published_at":"2016-10-19T23:23:29.000Z","download_url":"https://codeload.github.com/nedbat/cog/tar.gz/v2.5.1","html_url":"https://github.com/nedbat/cog/releases/tag/v2.5.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/nedbat/cog@v2.5.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/nedbat%2Fcog/tags/v2.5.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/nedbat%2Fcog/tags/v2.5.1/manifests"},{"name":"v2.5","sha":"01e756416c9d974a182c1f2580836f1a1454ab32","kind":"commit","published_at":"2016-02-13T13:22:05.000Z","download_url":"https://codeload.github.com/nedbat/cog/tar.gz/v2.5","html_url":"https://github.com/nedbat/cog/releases/tag/v2.5","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/nedbat/cog@v2.5","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/nedbat%2Fcog/tags/v2.5","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/nedbat%2Fcog/tags/v2.5/manifests"},{"name":"cogapp-2.2","sha":"b67f84ae285b62b91a877b3ac6bb7ddb938919e2","kind":"commit","published_at":"2009-06-26T01:38:08.000Z","download_url":"https://codeload.github.com/nedbat/cog/tar.gz/cogapp-2.2","html_url":"https://github.com/nedbat/cog/releases/tag/cogapp-2.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/nedbat/cog@cogapp-2.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/nedbat%2Fcog/tags/cogapp-2.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/nedbat%2Fcog/tags/cogapp-2.2/manifests"}]},"repo_metadata_updated_at":"2026-10-10T16:41:33.290Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":0.0,"dependent_packages_count":0.0,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":100},"purl":"pkg:deb/ubuntu/python-cogapp?arch=source\u0026distro=ubuntu-23.10\u0026repository_url=https://launchpad.net/ubuntu/mantic","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/ubuntu/python-cogapp","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/ubuntu/python-cogapp","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/ubuntu/python-cogapp/dependencies","status":null,"funding_links":["https://github.com/sponsors/nedbat"],"critical":null,"issue_metadata":{"last_synced_at":"2026-10-10T03:33:03.366Z","issues_count":31,"pull_requests_count":50,"avg_time_to_close_issue":10842473.416666666,"avg_time_to_close_pull_request":917075.1538461539,"issues_closed_count":12,"pull_requests_closed_count":39,"pull_request_authors_count":14,"issue_authors_count":24,"avg_comments_per_issue":2.0,"avg_comments_per_pull_request":0.72,"merged_pull_requests_count":34,"bot_issues_count":0,"bot_pull_requests_count":21,"past_year_issues_count":3,"past_year_pull_requests_count":14,"past_year_avg_time_to_close_issue":null,"past_year_avg_time_to_close_pull_request":80453.5,"past_year_issues_closed_count":0,"past_year_pull_requests_closed_count":14,"past_year_pull_request_authors_count":1,"past_year_issue_authors_count":2,"past_year_avg_comments_per_issue":0.6666666666666666,"past_year_avg_comments_per_pull_request":0.07142857142857142,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":14,"past_year_merged_pull_requests_count":13,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/nedbat%2Fcog/issues","maintainers":[{"login":"nedbat","count":6,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/nedbat"}],"active_maintainers":[]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-23.10/packages/python-cogapp/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-23.10/packages/python-cogapp/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-23.10/packages/python-cogapp/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-23.10/packages/python-cogapp/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-23.10/packages/python-cogapp/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-23.10/packages/python-cogapp/codemeta","maintainers":[],"registry":{"name":"ubuntu-23.10","url":"https://launchpad.net/ubuntu/mantic","ecosystem":"ubuntu","default":false,"packages_count":36642,"maintainers_count":0,"namespaces_count":4,"keywords_count":2188,"github":"ubuntu","metadata":{"codename":"mantic","mirror":"http://old-releases.ubuntu.com/ubuntu","funded_packages_count":2474},"icon_url":"https://github.com/ubuntu.png","created_at":"2026-02-04T11:01:48.636Z","updated_at":"2026-10-22T05:06:04.745Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-23.10/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-23.10/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-23.10/namespaces"}},{"id":13664168,"name":"python-cogapp","ecosystem":"debian","description":null,"homepage":"https://github.com/nedbat/cog","licenses":"mit","normalized_licenses":[],"repository_url":"https://github.com/nedbat/cog","keywords_array":["misc"],"namespace":"main","versions_count":1,"first_release_published_at":"2026-02-12T09:59:50.886Z","latest_release_published_at":"2026-02-12T09:59:50.886Z","latest_release_number":"3.4.1-1","latest_published_release_number":null,"last_synced_at":"2026-03-14T15:27:30.103Z","created_at":"2026-02-12T09:59:50.646Z","updated_at":"2026-10-10T16:41:33.341Z","registry_url":"https://tracker.debian.org/pkg/python-cogapp","install_command":"apt-get install python-cogapp","documentation_url":"https://packages.debian.org/trixie/python-cogapp","metadata":{"component":"main","architecture":"all","priority":"optional","binary":"python3-cogapp","standards_version":"4.6.1","maintainer":"Debian Python Team \u003cteam+python@tracker.debian.org\u003e","build_depends":"debhelper-compat (= 13), dh-sequence-python3, python3-all-dev, python3-setuptools, pybuild-plugin-pyproject","build_depends_indep":null,"build_depends_arch":null},"repo_metadata":{"id":41420165,"uuid":"174532154","full_name":"nedbat/cog","owner":"nedbat","description":"Small bits of Python computation for static files","archived":false,"fork":false,"pushed_at":"2026-08-05T11:34:03.000Z","size":386,"stargazers_count":406,"open_issues_count":23,"forks_count":36,"subscribers_count":7,"default_branch":"main","last_synced_at":"2026-10-03T11:25:44.474Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":"https://cog.readthedocs.io","language":"Python","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/nedbat.png","metadata":{"files":{"readme":"README.rst","changelog":"CHANGELOG.rst","contributing":null,"funding":null,"license":"LICENSE.txt","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":"AUTHORS.txt","dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"claude":null,"gemini":null,"cursor":null,"copilot":null,"dco":null,"cla":null,"disclosure":null}},"created_at":"2019-03-08T12:14:00.000Z","updated_at":"2026-08-20T21:01:49.000Z","dependencies_parsed_at":"2026-08-13T10:34:32.693Z","dependency_job_id":null,"html_url":"https://github.com/nedbat/cog","commit_stats":{"total_commits":214,"total_committers":8,"mean_commits":26.75,"dds":0.04205607476635509,"last_synced_commit":"2f82c2703353321290a2b6e2e3f99f6b92908294"},"previous_names":[],"tags_count":12,"template":false,"template_full_name":null,"purl":"pkg:github/nedbat/cog","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/nedbat%2Fcog","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/nedbat%2Fcog/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/nedbat%2Fcog/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/nedbat%2Fcog/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/nedbat","download_url":"https://codeload.github.com/nedbat/cog/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/nedbat%2Fcog/sbom","scorecard":{"id":678349,"data":{"date":"2025-08-11","repo":{"name":"github.com/nedbat/cog","commit":"0ff1d7c1ce8331a6ebcd733523e7587df858aebd"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":5.6,"checks":[{"name":"Maintained","score":10,"reason":"21 commit(s) and 2 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Code-Review","score":0,"reason":"Found 2/27 approved changesets -- score normalized to 0","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Token-Permissions","score":10,"reason":"GitHub workflow tokens follow principle of least privilege","details":["Info: topLevel 'contents' permission set to 'read': .github/workflows/ci.yml:12","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Pinned-Dependencies","score":5,"reason":"dependency not pinned by hash detected -- score normalized to 5","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:102: update your workflow using https://app.stepsecurity.io/secureworkflow/nedbat/cog/ci.yml/main?enable=pin","Warn: pipCommand not pinned by hash: .github/workflows/ci.yml:49","Warn: pipCommand not pinned by hash: .github/workflows/ci.yml:94","Warn: pipCommand not pinned by hash: .github/workflows/ci.yml:127","Info:   8 out of   9 GitHub-owned GitHubAction dependencies pinned","Info:   2 out of   2 third-party GitHubAction dependencies pinned","Info:   0 out of   3 pipCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"Security-Policy","score":0,"reason":"security policy file not detected","details":["Warn: no security policy file detected","Warn: no security file to analyze","Warn: no security file to analyze","Warn: no security file to analyze"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE.txt:0","Info: FSF or OSI recognized license: MIT License: LICENSE.txt:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Branch-Protection","score":0,"reason":"branch protection not enabled on development/release branches","details":["Warn: branch protection not enabled for branch 'main'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 5 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-21T22:16:18.197Z","repository_id":41420165,"created_at":"2025-08-21T22:16:18.198Z","updated_at":"2025-08-21T22:16:18.198Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":343680568,"owners_count":38152616,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-10-03T21:59:58.778Z","status":"online","status_checked_at":"2026-10-10T02:00:07.419Z","response_time":65,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"nedbat","name":"Ned Batchelder","uuid":"23789","kind":"user","description":"","email":"ned@nedbatchelder.com","website":"https://nedbatchelder.com","location":"Boston, MA, USA","twitter":null,"company":null,"icon_url":"https://avatars.githubusercontent.com/u/23789?u=76b163dcfe4c4f1cdcea32b9f97be0ce037c5e4c\u0026v=4","repositories_count":145,"last_synced_at":"2026-10-04T01:44:08.858Z","metadata":{"has_sponsors_listing":true,"funding":null},"html_url":"https://github.com/nedbat","funding_links":["https://github.com/sponsors/nedbat"],"total_stars":3427,"followers":2466,"following":0,"created_at":"2022-11-02T16:21:31.275Z","updated_at":"2026-10-04T01:44:08.952Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/nedbat","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/nedbat/repositories"},"tags":[{"name":"v3.6.0","sha":"badd4c31d77dec54f745c03ae673e753df47163d","kind":"tag","published_at":"2025-09-21T15:54:14.000Z","download_url":"https://codeload.github.com/nedbat/cog/tar.gz/v3.6.0","html_url":"https://github.com/nedbat/cog/releases/tag/v3.6.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/nedbat/cog@v3.6.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/nedbat%2Fcog/tags/v3.6.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/nedbat%2Fcog/tags/v3.6.0/manifests"},{"name":"v3.5.1","sha":"01400075981bceae02edafbbf61a77876f578b8a","kind":"tag","published_at":"2025-06-10T12:42:40.000Z","download_url":"https://codeload.github.com/nedbat/cog/tar.gz/v3.5.1","html_url":"https://github.com/nedbat/cog/releases/tag/v3.5.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/nedbat/cog@v3.5.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/nedbat%2Fcog/tags/v3.5.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/nedbat%2Fcog/tags/v3.5.1/manifests"},{"name":"v3.5.0","sha":"315b06062f37598e7830d85c2851eabffe159dd4","kind":"tag","published_at":"2025-06-05T15:18:53.000Z","download_url":"https://codeload.github.com/nedbat/cog/tar.gz/v3.5.0","html_url":"https://github.com/nedbat/cog/releases/tag/v3.5.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/nedbat/cog@v3.5.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/nedbat%2Fcog/tags/v3.5.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/nedbat%2Fcog/tags/v3.5.0/manifests"},{"name":"v3.4.1","sha":"cceb6cbbc67c7bb35758d5ba7772a8482d143b56","kind":"tag","published_at":"2024-03-07T19:06:36.000Z","download_url":"https://codeload.github.com/nedbat/cog/tar.gz/v3.4.1","html_url":"https://github.com/nedbat/cog/releases/tag/v3.4.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/nedbat/cog@v3.4.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/nedbat%2Fcog/tags/v3.4.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/nedbat%2Fcog/tags/v3.4.1/manifests"},{"name":"v3.4.0","sha":"ac58ba92184fa5ba195d06994dc202e0dedd4186","kind":"tag","published_at":"2024-03-07T18:59:32.000Z","download_url":"https://codeload.github.com/nedbat/cog/tar.gz/v3.4.0","html_url":"https://github.com/nedbat/cog/releases/tag/v3.4.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/nedbat/cog@v3.4.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/nedbat%2Fcog/tags/v3.4.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/nedbat%2Fcog/tags/v3.4.0/manifests"},{"name":"v3.3.0","sha":"1050aad948e2de6cca56d8e14b8dc1cbb7890c9e","kind":"tag","published_at":"2021-11-19T17:30:12.000Z","download_url":"https://codeload.github.com/nedbat/cog/tar.gz/v3.3.0","html_url":"https://github.com/nedbat/cog/releases/tag/v3.3.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/nedbat/cog@v3.3.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/nedbat%2Fcog/tags/v3.3.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/nedbat%2Fcog/tags/v3.3.0/manifests"},{"name":"v3.2.0","sha":"71e8ca8e35df6f5c4e09af69278462c004d3b8e8","kind":"tag","published_at":"2021-11-07T16:22:15.000Z","download_url":"https://codeload.github.com/nedbat/cog/tar.gz/v3.2.0","html_url":"https://github.com/nedbat/cog/releases/tag/v3.2.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/nedbat/cog@v3.2.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/nedbat%2Fcog/tags/v3.2.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/nedbat%2Fcog/tags/v3.2.0/manifests"},{"name":"v3.1.0","sha":"1f84704ea5a8f2769c7994a7ba81ec1c9fcb06d4","kind":"tag","published_at":"2021-08-31T21:25:12.000Z","download_url":"https://codeload.github.com/nedbat/cog/tar.gz/v3.1.0","html_url":"https://github.com/nedbat/cog/releases/tag/v3.1.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/nedbat/cog@v3.1.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/nedbat%2Fcog/tags/v3.1.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/nedbat%2Fcog/tags/v3.1.0/manifests"},{"name":"v3.0.0","sha":"0fc2819e254c9f1597db7c2a7f2e95fe0d8b0fea","kind":"commit","published_at":"2019-04-02T10:55:06.000Z","download_url":"https://codeload.github.com/nedbat/cog/tar.gz/v3.0.0","html_url":"https://github.com/nedbat/cog/releases/tag/v3.0.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/nedbat/cog@v3.0.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/nedbat%2Fcog/tags/v3.0.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/nedbat%2Fcog/tags/v3.0.0/manifests"},{"name":"v2.5.1","sha":"703910eee248ce3ae3e20f86b134167406b92bbc","kind":"commit","published_at":"2016-10-19T23:23:29.000Z","download_url":"https://codeload.github.com/nedbat/cog/tar.gz/v2.5.1","html_url":"https://github.com/nedbat/cog/releases/tag/v2.5.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/nedbat/cog@v2.5.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/nedbat%2Fcog/tags/v2.5.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/nedbat%2Fcog/tags/v2.5.1/manifests"},{"name":"v2.5","sha":"01e756416c9d974a182c1f2580836f1a1454ab32","kind":"commit","published_at":"2016-02-13T13:22:05.000Z","download_url":"https://codeload.github.com/nedbat/cog/tar.gz/v2.5","html_url":"https://github.com/nedbat/cog/releases/tag/v2.5","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/nedbat/cog@v2.5","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/nedbat%2Fcog/tags/v2.5","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/nedbat%2Fcog/tags/v2.5/manifests"},{"name":"cogapp-2.2","sha":"b67f84ae285b62b91a877b3ac6bb7ddb938919e2","kind":"commit","published_at":"2009-06-26T01:38:08.000Z","download_url":"https://codeload.github.com/nedbat/cog/tar.gz/cogapp-2.2","html_url":"https://github.com/nedbat/cog/releases/tag/cogapp-2.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/nedbat/cog@cogapp-2.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/nedbat%2Fcog/tags/cogapp-2.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/nedbat%2Fcog/tags/cogapp-2.2/manifests"}]},"repo_metadata_updated_at":"2026-10-10T16:41:33.341Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":0.0,"dependent_packages_count":0.0,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":100},"purl":"pkg:deb/debian/python-cogapp?arch=source\u0026distro=debian-13\u0026repository_url=https://packages.debian.org/trixie","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/debian/python-cogapp","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/debian/python-cogapp","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/debian/python-cogapp/dependencies","status":null,"funding_links":["https://github.com/sponsors/nedbat"],"critical":null,"issue_metadata":{"last_synced_at":"2026-10-10T03:33:03.366Z","issues_count":31,"pull_requests_count":50,"avg_time_to_close_issue":10842473.416666666,"avg_time_to_close_pull_request":917075.1538461539,"issues_closed_count":12,"pull_requests_closed_count":39,"pull_request_authors_count":14,"issue_authors_count":24,"avg_comments_per_issue":2.0,"avg_comments_per_pull_request":0.72,"merged_pull_requests_count":34,"bot_issues_count":0,"bot_pull_requests_count":21,"past_year_issues_count":3,"past_year_pull_requests_count":14,"past_year_avg_time_to_close_issue":null,"past_year_avg_time_to_close_pull_request":80453.5,"past_year_issues_closed_count":0,"past_year_pull_requests_closed_count":14,"past_year_pull_request_authors_count":1,"past_year_issue_authors_count":2,"past_year_avg_comments_per_issue":0.6666666666666666,"past_year_avg_comments_per_pull_request":0.07142857142857142,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":14,"past_year_merged_pull_requests_count":13,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/nedbat%2Fcog/issues","maintainers":[{"login":"nedbat","count":6,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/nedbat"}],"active_maintainers":[]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/debian-13/packages/python-cogapp/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/debian-13/packages/python-cogapp/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/debian-13/packages/python-cogapp/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/debian-13/packages/python-cogapp/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/debian-13/packages/python-cogapp/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/debian-13/packages/python-cogapp/codemeta","maintainers":[],"registry":{"name":"debian-13","url":"https://packages.debian.org/trixie","ecosystem":"debian","default":false,"packages_count":38027,"maintainers_count":0,"namespaces_count":4,"keywords_count":1978,"github":"debian","metadata":{"codename":"trixie","funded_packages_count":3248},"icon_url":"https://github.com/debian.png","created_at":"2026-02-04T11:01:50.448Z","updated_at":"2026-10-23T05:03:14.460Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/debian-13/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/debian-13/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/debian-13/namespaces"}},{"id":12002045,"name":"cogapp-pyc","ecosystem":"alpine","description":"Precompiled Python bytecode for cogapp","homepage":"https://github.com/nedbat/cog","licenses":"MIT","normalized_licenses":["MIT"],"repository_url":"https://github.com/nedbat/cog","keywords_array":[],"namespace":"community","versions_count":3,"first_release_published_at":"2025-08-12T18:37:06.000Z","latest_release_published_at":"2026-02-15T12:54:51.000Z","latest_release_number":"3.6.0-r1","latest_published_release_number":null,"last_synced_at":"2026-03-22T12:06:04.966Z","created_at":"2025-08-12T18:45:53.050Z","updated_at":"2026-10-10T16:41:33.384Z","registry_url":"https://pkgs.alpinelinux.org/package/edge/community/x86_64/cogapp-pyc","install_command":"apk add cogapp-pyc","documentation_url":null,"metadata":{"repository":"community","architecture":"x86_64"},"repo_metadata":{"id":41420165,"uuid":"174532154","full_name":"nedbat/cog","owner":"nedbat","description":"Small bits of Python computation for static files","archived":false,"fork":false,"pushed_at":"2026-08-05T11:34:03.000Z","size":386,"stargazers_count":406,"open_issues_count":23,"forks_count":36,"subscribers_count":7,"default_branch":"main","last_synced_at":"2026-10-03T11:25:44.474Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":"https://cog.readthedocs.io","language":"Python","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/nedbat.png","metadata":{"files":{"readme":"README.rst","changelog":"CHANGELOG.rst","contributing":null,"funding":null,"license":"LICENSE.txt","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":"AUTHORS.txt","dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"claude":null,"gemini":null,"cursor":null,"copilot":null,"dco":null,"cla":null,"disclosure":null}},"created_at":"2019-03-08T12:14:00.000Z","updated_at":"2026-08-20T21:01:49.000Z","dependencies_parsed_at":"2026-08-13T10:34:32.693Z","dependency_job_id":null,"html_url":"https://github.com/nedbat/cog","commit_stats":{"total_commits":214,"total_committers":8,"mean_commits":26.75,"dds":0.04205607476635509,"last_synced_commit":"2f82c2703353321290a2b6e2e3f99f6b92908294"},"previous_names":[],"tags_count":12,"template":false,"template_full_name":null,"purl":"pkg:github/nedbat/cog","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/nedbat%2Fcog","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/nedbat%2Fcog/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/nedbat%2Fcog/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/nedbat%2Fcog/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/nedbat","download_url":"https://codeload.github.com/nedbat/cog/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/nedbat%2Fcog/sbom","scorecard":{"id":678349,"data":{"date":"2025-08-11","repo":{"name":"github.com/nedbat/cog","commit":"0ff1d7c1ce8331a6ebcd733523e7587df858aebd"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":5.6,"checks":[{"name":"Maintained","score":10,"reason":"21 commit(s) and 2 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Code-Review","score":0,"reason":"Found 2/27 approved changesets -- score normalized to 0","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Token-Permissions","score":10,"reason":"GitHub workflow tokens follow principle of least privilege","details":["Info: topLevel 'contents' permission set to 'read': .github/workflows/ci.yml:12","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Pinned-Dependencies","score":5,"reason":"dependency not pinned by hash detected -- score normalized to 5","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:102: update your workflow using https://app.stepsecurity.io/secureworkflow/nedbat/cog/ci.yml/main?enable=pin","Warn: pipCommand not pinned by hash: .github/workflows/ci.yml:49","Warn: pipCommand not pinned by hash: .github/workflows/ci.yml:94","Warn: pipCommand not pinned by hash: .github/workflows/ci.yml:127","Info:   8 out of   9 GitHub-owned GitHubAction dependencies pinned","Info:   2 out of   2 third-party GitHubAction dependencies pinned","Info:   0 out of   3 pipCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"Security-Policy","score":0,"reason":"security policy file not detected","details":["Warn: no security policy file detected","Warn: no security file to analyze","Warn: no security file to analyze","Warn: no security file to analyze"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE.txt:0","Info: FSF or OSI recognized license: MIT License: LICENSE.txt:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Branch-Protection","score":0,"reason":"branch protection not enabled on development/release branches","details":["Warn: branch protection not enabled for branch 'main'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 5 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-21T22:16:18.197Z","repository_id":41420165,"created_at":"2025-08-21T22:16:18.198Z","updated_at":"2025-08-21T22:16:18.198Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":343680568,"owners_count":38152616,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-10-03T21:59:58.778Z","status":"online","status_checked_at":"2026-10-10T02:00:07.419Z","response_time":65,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"nedbat","name":"Ned Batchelder","uuid":"23789","kind":"user","description":"","email":"ned@nedbatchelder.com","website":"https://nedbatchelder.com","location":"Boston, MA, USA","twitter":null,"company":null,"icon_url":"https://avatars.githubusercontent.com/u/23789?u=76b163dcfe4c4f1cdcea32b9f97be0ce037c5e4c\u0026v=4","repositories_count":145,"last_synced_at":"2026-10-04T01:44:08.858Z","metadata":{"has_sponsors_listing":true,"funding":null},"html_url":"https://github.com/nedbat","funding_links":["https://github.com/sponsors/nedbat"],"total_stars":3427,"followers":2466,"following":0,"created_at":"2022-11-02T16:21:31.275Z","updated_at":"2026-10-04T01:44:08.952Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/nedbat","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/nedbat/repositories"},"tags":[{"name":"v3.6.0","sha":"badd4c31d77dec54f745c03ae673e753df47163d","kind":"tag","published_at":"2025-09-21T15:54:14.000Z","download_url":"https://codeload.github.com/nedbat/cog/tar.gz/v3.6.0","html_url":"https://github.com/nedbat/cog/releases/tag/v3.6.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/nedbat/cog@v3.6.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/nedbat%2Fcog/tags/v3.6.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/nedbat%2Fcog/tags/v3.6.0/manifests"},{"name":"v3.5.1","sha":"01400075981bceae02edafbbf61a77876f578b8a","kind":"tag","published_at":"2025-06-10T12:42:40.000Z","download_url":"https://codeload.github.com/nedbat/cog/tar.gz/v3.5.1","html_url":"https://github.com/nedbat/cog/releases/tag/v3.5.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/nedbat/cog@v3.5.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/nedbat%2Fcog/tags/v3.5.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/nedbat%2Fcog/tags/v3.5.1/manifests"},{"name":"v3.5.0","sha":"315b06062f37598e7830d85c2851eabffe159dd4","kind":"tag","published_at":"2025-06-05T15:18:53.000Z","download_url":"https://codeload.github.com/nedbat/cog/tar.gz/v3.5.0","html_url":"https://github.com/nedbat/cog/releases/tag/v3.5.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/nedbat/cog@v3.5.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/nedbat%2Fcog/tags/v3.5.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/nedbat%2Fcog/tags/v3.5.0/manifests"},{"name":"v3.4.1","sha":"cceb6cbbc67c7bb35758d5ba7772a8482d143b56","kind":"tag","published_at":"2024-03-07T19:06:36.000Z","download_url":"https://codeload.github.com/nedbat/cog/tar.gz/v3.4.1","html_url":"https://github.com/nedbat/cog/releases/tag/v3.4.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/nedbat/cog@v3.4.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/nedbat%2Fcog/tags/v3.4.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/nedbat%2Fcog/tags/v3.4.1/manifests"},{"name":"v3.4.0","sha":"ac58ba92184fa5ba195d06994dc202e0dedd4186","kind":"tag","published_at":"2024-03-07T18:59:32.000Z","download_url":"https://codeload.github.com/nedbat/cog/tar.gz/v3.4.0","html_url":"https://github.com/nedbat/cog/releases/tag/v3.4.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/nedbat/cog@v3.4.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/nedbat%2Fcog/tags/v3.4.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/nedbat%2Fcog/tags/v3.4.0/manifests"},{"name":"v3.3.0","sha":"1050aad948e2de6cca56d8e14b8dc1cbb7890c9e","kind":"tag","published_at":"2021-11-19T17:30:12.000Z","download_url":"https://codeload.github.com/nedbat/cog/tar.gz/v3.3.0","html_url":"https://github.com/nedbat/cog/releases/tag/v3.3.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/nedbat/cog@v3.3.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/nedbat%2Fcog/tags/v3.3.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/nedbat%2Fcog/tags/v3.3.0/manifests"},{"name":"v3.2.0","sha":"71e8ca8e35df6f5c4e09af69278462c004d3b8e8","kind":"tag","published_at":"2021-11-07T16:22:15.000Z","download_url":"https://codeload.github.com/nedbat/cog/tar.gz/v3.2.0","html_url":"https://github.com/nedbat/cog/releases/tag/v3.2.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/nedbat/cog@v3.2.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/nedbat%2Fcog/tags/v3.2.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/nedbat%2Fcog/tags/v3.2.0/manifests"},{"name":"v3.1.0","sha":"1f84704ea5a8f2769c7994a7ba81ec1c9fcb06d4","kind":"tag","published_at":"2021-08-31T21:25:12.000Z","download_url":"https://codeload.github.com/nedbat/cog/tar.gz/v3.1.0","html_url":"https://github.com/nedbat/cog/releases/tag/v3.1.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/nedbat/cog@v3.1.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/nedbat%2Fcog/tags/v3.1.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/nedbat%2Fcog/tags/v3.1.0/manifests"},{"name":"v3.0.0","sha":"0fc2819e254c9f1597db7c2a7f2e95fe0d8b0fea","kind":"commit","published_at":"2019-04-02T10:55:06.000Z","download_url":"https://codeload.github.com/nedbat/cog/tar.gz/v3.0.0","html_url":"https://github.com/nedbat/cog/releases/tag/v3.0.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/nedbat/cog@v3.0.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/nedbat%2Fcog/tags/v3.0.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/nedbat%2Fcog/tags/v3.0.0/manifests"},{"name":"v2.5.1","sha":"703910eee248ce3ae3e20f86b134167406b92bbc","kind":"commit","published_at":"2016-10-19T23:23:29.000Z","download_url":"https://codeload.github.com/nedbat/cog/tar.gz/v2.5.1","html_url":"https://github.com/nedbat/cog/releases/tag/v2.5.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/nedbat/cog@v2.5.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/nedbat%2Fcog/tags/v2.5.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/nedbat%2Fcog/tags/v2.5.1/manifests"},{"name":"v2.5","sha":"01e756416c9d974a182c1f2580836f1a1454ab32","kind":"commit","published_at":"2016-02-13T13:22:05.000Z","download_url":"https://codeload.github.com/nedbat/cog/tar.gz/v2.5","html_url":"https://github.com/nedbat/cog/releases/tag/v2.5","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/nedbat/cog@v2.5","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/nedbat%2Fcog/tags/v2.5","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/nedbat%2Fcog/tags/v2.5/manifests"},{"name":"cogapp-2.2","sha":"b67f84ae285b62b91a877b3ac6bb7ddb938919e2","kind":"commit","published_at":"2009-06-26T01:38:08.000Z","download_url":"https://codeload.github.com/nedbat/cog/tar.gz/cogapp-2.2","html_url":"https://github.com/nedbat/cog/releases/tag/cogapp-2.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/nedbat/cog@cogapp-2.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/nedbat%2Fcog/tags/cogapp-2.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/nedbat%2Fcog/tags/cogapp-2.2/manifests"}]},"repo_metadata_updated_at":"2026-10-10T16:41:33.384Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":0.0,"dependent_packages_count":13.18901366526857,"stargazers_count":15.129211202814233,"forks_count":20.79826816398322,"docker_downloads_count":null,"average":12.279123258016506},"purl":"pkg:apk/alpine/cogapp-pyc?arch=x86_64\u0026repository_url=https://pkgs.alpinelinux.org/packages?branch=edge","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/alpine/cogapp-pyc","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/alpine/cogapp-pyc","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/alpine/cogapp-pyc/dependencies","status":null,"funding_links":["https://github.com/sponsors/nedbat"],"critical":null,"issue_metadata":{"last_synced_at":"2026-10-10T03:33:03.366Z","issues_count":31,"pull_requests_count":50,"avg_time_to_close_issue":10842473.416666666,"avg_time_to_close_pull_request":917075.1538461539,"issues_closed_count":12,"pull_requests_closed_count":39,"pull_request_authors_count":14,"issue_authors_count":24,"avg_comments_per_issue":2.0,"avg_comments_per_pull_request":0.72,"merged_pull_requests_count":34,"bot_issues_count":0,"bot_pull_requests_count":21,"past_year_issues_count":3,"past_year_pull_requests_count":14,"past_year_avg_time_to_close_issue":null,"past_year_avg_time_to_close_pull_request":80453.5,"past_year_issues_closed_count":0,"past_year_pull_requests_closed_count":14,"past_year_pull_request_authors_count":1,"past_year_issue_authors_count":2,"past_year_avg_comments_per_issue":0.6666666666666666,"past_year_avg_comments_per_pull_request":0.07142857142857142,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":14,"past_year_merged_pull_requests_count":13,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/nedbat%2Fcog/issues","maintainers":[{"login":"nedbat","count":6,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/nedbat"}],"active_maintainers":[]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-edge/packages/cogapp-pyc/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-edge/packages/cogapp-pyc/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-edge/packages/cogapp-pyc/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-edge/packages/cogapp-pyc/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-edge/packages/cogapp-pyc/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-edge/packages/cogapp-pyc/codemeta","maintainers":[{"uuid":"cielesti@protonmail.com","login":null,"name":"Celeste","email":null,"url":"https://pkgs.alpinelinux.org/packages?maintainer=Celeste","packages_count":1753,"html_url":"https://pkgs.alpinelinux.org/packages?maintainer=Celeste","role":null,"created_at":"2025-08-13T03:59:40.440Z","updated_at":"2025-08-13T03:59:40.440Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-edge/maintainers/cielesti@protonmail.com/packages"}],"registry":{"name":"alpine-edge","url":"https://pkgs.alpinelinux.org/packages?branch=edge","ecosystem":"alpine","default":false,"packages_count":40387,"maintainers_count":923,"namespaces_count":3,"keywords_count":6595,"github":"alpinelinux","metadata":{"repos":["main","community","testing"],"funded_packages_count":3255},"icon_url":"https://github.com/alpinelinux.png","created_at":"2023-01-31T17:27:50.616Z","updated_at":"2026-10-22T05:07:49.564Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-edge/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-edge/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-edge/namespaces"}},{"id":12002046,"name":"cogapp","ecosystem":"alpine","description":"Content generation tool that leverages Python","homepage":"https://github.com/nedbat/cog","licenses":"MIT","normalized_licenses":["MIT"],"repository_url":"https://github.com/nedbat/cog","keywords_array":[],"namespace":"community","versions_count":3,"first_release_published_at":"2025-08-12T18:37:06.000Z","latest_release_published_at":"2026-02-15T12:54:51.000Z","latest_release_number":"3.6.0-r1","latest_published_release_number":null,"last_synced_at":"2026-03-22T12:06:28.391Z","created_at":"2025-08-12T18:45:53.057Z","updated_at":"2026-10-10T16:41:33.226Z","registry_url":"https://pkgs.alpinelinux.org/package/edge/community/x86_64/cogapp","install_command":"apk add cogapp","documentation_url":null,"metadata":{"repository":"community","architecture":"x86_64"},"repo_metadata":{"id":41420165,"uuid":"174532154","full_name":"nedbat/cog","owner":"nedbat","description":"Small bits of Python computation for static files","archived":false,"fork":false,"pushed_at":"2026-08-05T11:34:03.000Z","size":386,"stargazers_count":406,"open_issues_count":23,"forks_count":36,"subscribers_count":7,"default_branch":"main","last_synced_at":"2026-10-03T11:25:44.474Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":"https://cog.readthedocs.io","language":"Python","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/nedbat.png","metadata":{"files":{"readme":"README.rst","changelog":"CHANGELOG.rst","contributing":null,"funding":null,"license":"LICENSE.txt","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":"AUTHORS.txt","dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"claude":null,"gemini":null,"cursor":null,"copilot":null,"dco":null,"cla":null,"disclosure":null}},"created_at":"2019-03-08T12:14:00.000Z","updated_at":"2026-08-20T21:01:49.000Z","dependencies_parsed_at":"2026-08-13T10:34:32.693Z","dependency_job_id":null,"html_url":"https://github.com/nedbat/cog","commit_stats":{"total_commits":214,"total_committers":8,"mean_commits":26.75,"dds":0.04205607476635509,"last_synced_commit":"2f82c2703353321290a2b6e2e3f99f6b92908294"},"previous_names":[],"tags_count":12,"template":false,"template_full_name":null,"purl":"pkg:github/nedbat/cog","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/nedbat%2Fcog","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/nedbat%2Fcog/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/nedbat%2Fcog/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/nedbat%2Fcog/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/nedbat","download_url":"https://codeload.github.com/nedbat/cog/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/nedbat%2Fcog/sbom","scorecard":{"id":678349,"data":{"date":"2025-08-11","repo":{"name":"github.com/nedbat/cog","commit":"0ff1d7c1ce8331a6ebcd733523e7587df858aebd"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":5.6,"checks":[{"name":"Maintained","score":10,"reason":"21 commit(s) and 2 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Code-Review","score":0,"reason":"Found 2/27 approved changesets -- score normalized to 0","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Token-Permissions","score":10,"reason":"GitHub workflow tokens follow principle of least privilege","details":["Info: topLevel 'contents' permission set to 'read': .github/workflows/ci.yml:12","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Pinned-Dependencies","score":5,"reason":"dependency not pinned by hash detected -- score normalized to 5","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:102: update your workflow using https://app.stepsecurity.io/secureworkflow/nedbat/cog/ci.yml/main?enable=pin","Warn: pipCommand not pinned by hash: .github/workflows/ci.yml:49","Warn: pipCommand not pinned by hash: .github/workflows/ci.yml:94","Warn: pipCommand not pinned by hash: .github/workflows/ci.yml:127","Info:   8 out of   9 GitHub-owned GitHubAction dependencies pinned","Info:   2 out of   2 third-party GitHubAction dependencies pinned","Info:   0 out of   3 pipCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"Security-Policy","score":0,"reason":"security policy file not detected","details":["Warn: no security policy file detected","Warn: no security file to analyze","Warn: no security file to analyze","Warn: no security file to analyze"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE.txt:0","Info: FSF or OSI recognized license: MIT License: LICENSE.txt:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Branch-Protection","score":0,"reason":"branch protection not enabled on development/release branches","details":["Warn: branch protection not enabled for branch 'main'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 5 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-21T22:16:18.197Z","repository_id":41420165,"created_at":"2025-08-21T22:16:18.198Z","updated_at":"2025-08-21T22:16:18.198Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":343680568,"owners_count":38152616,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-10-03T21:59:58.778Z","status":"online","status_checked_at":"2026-10-10T02:00:07.419Z","response_time":65,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"nedbat","name":"Ned Batchelder","uuid":"23789","kind":"user","description":"","email":"ned@nedbatchelder.com","website":"https://nedbatchelder.com","location":"Boston, MA, USA","twitter":null,"company":null,"icon_url":"https://avatars.githubusercontent.com/u/23789?u=76b163dcfe4c4f1cdcea32b9f97be0ce037c5e4c\u0026v=4","repositories_count":145,"last_synced_at":"2026-10-04T01:44:08.858Z","metadata":{"has_sponsors_listing":true,"funding":null},"html_url":"https://github.com/nedbat","funding_links":["https://github.com/sponsors/nedbat"],"total_stars":3427,"followers":2466,"following":0,"created_at":"2022-11-02T16:21:31.275Z","updated_at":"2026-10-04T01:44:08.952Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/nedbat","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/nedbat/repositories"},"tags":[{"name":"v3.6.0","sha":"badd4c31d77dec54f745c03ae673e753df47163d","kind":"tag","published_at":"2025-09-21T15:54:14.000Z","download_url":"https://codeload.github.com/nedbat/cog/tar.gz/v3.6.0","html_url":"https://github.com/nedbat/cog/releases/tag/v3.6.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/nedbat/cog@v3.6.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/nedbat%2Fcog/tags/v3.6.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/nedbat%2Fcog/tags/v3.6.0/manifests"},{"name":"v3.5.1","sha":"01400075981bceae02edafbbf61a77876f578b8a","kind":"tag","published_at":"2025-06-10T12:42:40.000Z","download_url":"https://codeload.github.com/nedbat/cog/tar.gz/v3.5.1","html_url":"https://github.com/nedbat/cog/releases/tag/v3.5.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/nedbat/cog@v3.5.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/nedbat%2Fcog/tags/v3.5.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/nedbat%2Fcog/tags/v3.5.1/manifests"},{"name":"v3.5.0","sha":"315b06062f37598e7830d85c2851eabffe159dd4","kind":"tag","published_at":"2025-06-05T15:18:53.000Z","download_url":"https://codeload.github.com/nedbat/cog/tar.gz/v3.5.0","html_url":"https://github.com/nedbat/cog/releases/tag/v3.5.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/nedbat/cog@v3.5.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/nedbat%2Fcog/tags/v3.5.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/nedbat%2Fcog/tags/v3.5.0/manifests"},{"name":"v3.4.1","sha":"cceb6cbbc67c7bb35758d5ba7772a8482d143b56","kind":"tag","published_at":"2024-03-07T19:06:36.000Z","download_url":"https://codeload.github.com/nedbat/cog/tar.gz/v3.4.1","html_url":"https://github.com/nedbat/cog/releases/tag/v3.4.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/nedbat/cog@v3.4.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/nedbat%2Fcog/tags/v3.4.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/nedbat%2Fcog/tags/v3.4.1/manifests"},{"name":"v3.4.0","sha":"ac58ba92184fa5ba195d06994dc202e0dedd4186","kind":"tag","published_at":"2024-03-07T18:59:32.000Z","download_url":"https://codeload.github.com/nedbat/cog/tar.gz/v3.4.0","html_url":"https://github.com/nedbat/cog/releases/tag/v3.4.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/nedbat/cog@v3.4.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/nedbat%2Fcog/tags/v3.4.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/nedbat%2Fcog/tags/v3.4.0/manifests"},{"name":"v3.3.0","sha":"1050aad948e2de6cca56d8e14b8dc1cbb7890c9e","kind":"tag","published_at":"2021-11-19T17:30:12.000Z","download_url":"https://codeload.github.com/nedbat/cog/tar.gz/v3.3.0","html_url":"https://github.com/nedbat/cog/releases/tag/v3.3.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/nedbat/cog@v3.3.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/nedbat%2Fcog/tags/v3.3.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/nedbat%2Fcog/tags/v3.3.0/manifests"},{"name":"v3.2.0","sha":"71e8ca8e35df6f5c4e09af69278462c004d3b8e8","kind":"tag","published_at":"2021-11-07T16:22:15.000Z","download_url":"https://codeload.github.com/nedbat/cog/tar.gz/v3.2.0","html_url":"https://github.com/nedbat/cog/releases/tag/v3.2.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/nedbat/cog@v3.2.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/nedbat%2Fcog/tags/v3.2.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/nedbat%2Fcog/tags/v3.2.0/manifests"},{"name":"v3.1.0","sha":"1f84704ea5a8f2769c7994a7ba81ec1c9fcb06d4","kind":"tag","published_at":"2021-08-31T21:25:12.000Z","download_url":"https://codeload.github.com/nedbat/cog/tar.gz/v3.1.0","html_url":"https://github.com/nedbat/cog/releases/tag/v3.1.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/nedbat/cog@v3.1.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/nedbat%2Fcog/tags/v3.1.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/nedbat%2Fcog/tags/v3.1.0/manifests"},{"name":"v3.0.0","sha":"0fc2819e254c9f1597db7c2a7f2e95fe0d8b0fea","kind":"commit","published_at":"2019-04-02T10:55:06.000Z","download_url":"https://codeload.github.com/nedbat/cog/tar.gz/v3.0.0","html_url":"https://github.com/nedbat/cog/releases/tag/v3.0.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/nedbat/cog@v3.0.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/nedbat%2Fcog/tags/v3.0.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/nedbat%2Fcog/tags/v3.0.0/manifests"},{"name":"v2.5.1","sha":"703910eee248ce3ae3e20f86b134167406b92bbc","kind":"commit","published_at":"2016-10-19T23:23:29.000Z","download_url":"https://codeload.github.com/nedbat/cog/tar.gz/v2.5.1","html_url":"https://github.com/nedbat/cog/releases/tag/v2.5.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/nedbat/cog@v2.5.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/nedbat%2Fcog/tags/v2.5.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/nedbat%2Fcog/tags/v2.5.1/manifests"},{"name":"v2.5","sha":"01e756416c9d974a182c1f2580836f1a1454ab32","kind":"commit","published_at":"2016-02-13T13:22:05.000Z","download_url":"https://codeload.github.com/nedbat/cog/tar.gz/v2.5","html_url":"https://github.com/nedbat/cog/releases/tag/v2.5","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/nedbat/cog@v2.5","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/nedbat%2Fcog/tags/v2.5","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/nedbat%2Fcog/tags/v2.5/manifests"},{"name":"cogapp-2.2","sha":"b67f84ae285b62b91a877b3ac6bb7ddb938919e2","kind":"commit","published_at":"2009-06-26T01:38:08.000Z","download_url":"https://codeload.github.com/nedbat/cog/tar.gz/cogapp-2.2","html_url":"https://github.com/nedbat/cog/releases/tag/cogapp-2.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/nedbat/cog@cogapp-2.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/nedbat%2Fcog/tags/cogapp-2.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/nedbat%2Fcog/tags/cogapp-2.2/manifests"}]},"repo_metadata_updated_at":"2026-10-10T16:41:33.226Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":0.0,"dependent_packages_count":13.18901366526857,"stargazers_count":15.129211202814233,"forks_count":20.79826816398322,"docker_downloads_count":null,"average":12.279123258016506},"purl":"pkg:apk/alpine/cogapp?arch=x86_64\u0026repository_url=https://pkgs.alpinelinux.org/packages?branch=edge","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/alpine/cogapp","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/alpine/cogapp","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/alpine/cogapp/dependencies","status":null,"funding_links":["https://github.com/sponsors/nedbat"],"critical":null,"issue_metadata":{"last_synced_at":"2026-10-10T03:33:03.366Z","issues_count":31,"pull_requests_count":50,"avg_time_to_close_issue":10842473.416666666,"avg_time_to_close_pull_request":917075.1538461539,"issues_closed_count":12,"pull_requests_closed_count":39,"pull_request_authors_count":14,"issue_authors_count":24,"avg_comments_per_issue":2.0,"avg_comments_per_pull_request":0.72,"merged_pull_requests_count":34,"bot_issues_count":0,"bot_pull_requests_count":21,"past_year_issues_count":3,"past_year_pull_requests_count":14,"past_year_avg_time_to_close_issue":null,"past_year_avg_time_to_close_pull_request":80453.5,"past_year_issues_closed_count":0,"past_year_pull_requests_closed_count":14,"past_year_pull_request_authors_count":1,"past_year_issue_authors_count":2,"past_year_avg_comments_per_issue":0.6666666666666666,"past_year_avg_comments_per_pull_request":0.07142857142857142,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":14,"past_year_merged_pull_requests_count":13,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/nedbat%2Fcog/issues","maintainers":[{"login":"nedbat","count":6,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/nedbat"}],"active_maintainers":[]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-edge/packages/cogapp/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-edge/packages/cogapp/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-edge/packages/cogapp/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-edge/packages/cogapp/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-edge/packages/cogapp/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-edge/packages/cogapp/codemeta","maintainers":[{"uuid":"cielesti@protonmail.com","login":null,"name":"Celeste","email":null,"url":"https://pkgs.alpinelinux.org/packages?maintainer=Celeste","packages_count":1753,"html_url":"https://pkgs.alpinelinux.org/packages?maintainer=Celeste","role":null,"created_at":"2025-08-13T03:59:41.025Z","updated_at":"2025-08-13T03:59:41.025Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-edge/maintainers/cielesti@protonmail.com/packages"}],"registry":{"name":"alpine-edge","url":"https://pkgs.alpinelinux.org/packages?branch=edge","ecosystem":"alpine","default":false,"packages_count":40387,"maintainers_count":923,"namespaces_count":3,"keywords_count":6595,"github":"alpinelinux","metadata":{"repos":["main","community","testing"],"funded_packages_count":3255},"icon_url":"https://github.com/alpinelinux.png","created_at":"2023-01-31T17:27:50.616Z","updated_at":"2026-10-22T05:07:49.564Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-edge/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-edge/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-edge/namespaces"}},{"id":13463121,"name":"python-cogapp","ecosystem":"ubuntu","description":null,"homepage":"https://github.com/nedbat/cog","licenses":"mit","normalized_licenses":[],"repository_url":"https://github.com/nedbat/cog","keywords_array":["universe/misc"],"namespace":"universe","versions_count":1,"first_release_published_at":"2026-02-09T11:41:20.505Z","latest_release_published_at":"2026-02-09T11:41:20.505Z","latest_release_number":"3.3.0-3","latest_published_release_number":null,"last_synced_at":"2026-03-09T12:04:49.045Z","created_at":"2026-02-09T11:41:20.237Z","updated_at":"2026-10-10T16:41:33.228Z","registry_url":"https://launchpad.net/ubuntu/+source/python-cogapp","install_command":"apt-get install python-cogapp","documentation_url":null,"metadata":{"component":"universe","architecture":"all","priority":"optional","binary":"python3-cogapp","standards_version":"4.6.1","maintainer":"Debian Python Team \u003cteam+python@tracker.debian.org\u003e","build_depends":"debhelper-compat (= 13), dh-sequence-python3, python3-all-dev, python3-setuptools","build_depends_indep":null,"build_depends_arch":null},"repo_metadata":{"id":41420165,"uuid":"174532154","full_name":"nedbat/cog","owner":"nedbat","description":"Small bits of Python computation for static files","archived":false,"fork":false,"pushed_at":"2026-08-05T11:34:03.000Z","size":386,"stargazers_count":406,"open_issues_count":23,"forks_count":36,"subscribers_count":7,"default_branch":"main","last_synced_at":"2026-10-03T11:25:44.474Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":"https://cog.readthedocs.io","language":"Python","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/nedbat.png","metadata":{"files":{"readme":"README.rst","changelog":"CHANGELOG.rst","contributing":null,"funding":null,"license":"LICENSE.txt","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":"AUTHORS.txt","dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"claude":null,"gemini":null,"cursor":null,"copilot":null,"dco":null,"cla":null,"disclosure":null}},"created_at":"2019-03-08T12:14:00.000Z","updated_at":"2026-08-20T21:01:49.000Z","dependencies_parsed_at":"2026-08-13T10:34:32.693Z","dependency_job_id":null,"html_url":"https://github.com/nedbat/cog","commit_stats":{"total_commits":214,"total_committers":8,"mean_commits":26.75,"dds":0.04205607476635509,"last_synced_commit":"2f82c2703353321290a2b6e2e3f99f6b92908294"},"previous_names":[],"tags_count":12,"template":false,"template_full_name":null,"purl":"pkg:github/nedbat/cog","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/nedbat%2Fcog","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/nedbat%2Fcog/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/nedbat%2Fcog/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/nedbat%2Fcog/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/nedbat","download_url":"https://codeload.github.com/nedbat/cog/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/nedbat%2Fcog/sbom","scorecard":{"id":678349,"data":{"date":"2025-08-11","repo":{"name":"github.com/nedbat/cog","commit":"0ff1d7c1ce8331a6ebcd733523e7587df858aebd"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":5.6,"checks":[{"name":"Maintained","score":10,"reason":"21 commit(s) and 2 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Code-Review","score":0,"reason":"Found 2/27 approved changesets -- score normalized to 0","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Token-Permissions","score":10,"reason":"GitHub workflow tokens follow principle of least privilege","details":["Info: topLevel 'contents' permission set to 'read': .github/workflows/ci.yml:12","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Pinned-Dependencies","score":5,"reason":"dependency not pinned by hash detected -- score normalized to 5","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:102: update your workflow using https://app.stepsecurity.io/secureworkflow/nedbat/cog/ci.yml/main?enable=pin","Warn: pipCommand not pinned by hash: .github/workflows/ci.yml:49","Warn: pipCommand not pinned by hash: .github/workflows/ci.yml:94","Warn: pipCommand not pinned by hash: .github/workflows/ci.yml:127","Info:   8 out of   9 GitHub-owned GitHubAction dependencies pinned","Info:   2 out of   2 third-party GitHubAction dependencies pinned","Info:   0 out of   3 pipCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"Security-Policy","score":0,"reason":"security policy file not detected","details":["Warn: no security policy file detected","Warn: no security file to analyze","Warn: no security file to analyze","Warn: no security file to analyze"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE.txt:0","Info: FSF or OSI recognized license: MIT License: LICENSE.txt:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Branch-Protection","score":0,"reason":"branch protection not enabled on development/release branches","details":["Warn: branch protection not enabled for branch 'main'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 5 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-21T22:16:18.197Z","repository_id":41420165,"created_at":"2025-08-21T22:16:18.198Z","updated_at":"2025-08-21T22:16:18.198Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":343680568,"owners_count":38152616,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-10-03T21:59:58.778Z","status":"online","status_checked_at":"2026-10-10T02:00:07.419Z","response_time":65,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"nedbat","name":"Ned Batchelder","uuid":"23789","kind":"user","description":"","email":"ned@nedbatchelder.com","website":"https://nedbatchelder.com","location":"Boston, MA, USA","twitter":null,"company":null,"icon_url":"https://avatars.githubusercontent.com/u/23789?u=76b163dcfe4c4f1cdcea32b9f97be0ce037c5e4c\u0026v=4","repositories_count":145,"last_synced_at":"2026-10-04T01:44:08.858Z","metadata":{"has_sponsors_listing":true,"funding":null},"html_url":"https://github.com/nedbat","funding_links":["https://github.com/sponsors/nedbat"],"total_stars":3427,"followers":2466,"following":0,"created_at":"2022-11-02T16:21:31.275Z","updated_at":"2026-10-04T01:44:08.952Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/nedbat","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/nedbat/repositories"},"tags":[{"name":"v3.6.0","sha":"badd4c31d77dec54f745c03ae673e753df47163d","kind":"tag","published_at":"2025-09-21T15:54:14.000Z","download_url":"https://codeload.github.com/nedbat/cog/tar.gz/v3.6.0","html_url":"https://github.com/nedbat/cog/releases/tag/v3.6.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/nedbat/cog@v3.6.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/nedbat%2Fcog/tags/v3.6.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/nedbat%2Fcog/tags/v3.6.0/manifests"},{"name":"v3.5.1","sha":"01400075981bceae02edafbbf61a77876f578b8a","kind":"tag","published_at":"2025-06-10T12:42:40.000Z","download_url":"https://codeload.github.com/nedbat/cog/tar.gz/v3.5.1","html_url":"https://github.com/nedbat/cog/releases/tag/v3.5.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/nedbat/cog@v3.5.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/nedbat%2Fcog/tags/v3.5.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/nedbat%2Fcog/tags/v3.5.1/manifests"},{"name":"v3.5.0","sha":"315b06062f37598e7830d85c2851eabffe159dd4","kind":"tag","published_at":"2025-06-05T15:18:53.000Z","download_url":"https://codeload.github.com/nedbat/cog/tar.gz/v3.5.0","html_url":"https://github.com/nedbat/cog/releases/tag/v3.5.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/nedbat/cog@v3.5.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/nedbat%2Fcog/tags/v3.5.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/nedbat%2Fcog/tags/v3.5.0/manifests"},{"name":"v3.4.1","sha":"cceb6cbbc67c7bb35758d5ba7772a8482d143b56","kind":"tag","published_at":"2024-03-07T19:06:36.000Z","download_url":"https://codeload.github.com/nedbat/cog/tar.gz/v3.4.1","html_url":"https://github.com/nedbat/cog/releases/tag/v3.4.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/nedbat/cog@v3.4.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/nedbat%2Fcog/tags/v3.4.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/nedbat%2Fcog/tags/v3.4.1/manifests"},{"name":"v3.4.0","sha":"ac58ba92184fa5ba195d06994dc202e0dedd4186","kind":"tag","published_at":"2024-03-07T18:59:32.000Z","download_url":"https://codeload.github.com/nedbat/cog/tar.gz/v3.4.0","html_url":"https://github.com/nedbat/cog/releases/tag/v3.4.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/nedbat/cog@v3.4.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/nedbat%2Fcog/tags/v3.4.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/nedbat%2Fcog/tags/v3.4.0/manifests"},{"name":"v3.3.0","sha":"1050aad948e2de6cca56d8e14b8dc1cbb7890c9e","kind":"tag","published_at":"2021-11-19T17:30:12.000Z","download_url":"https://codeload.github.com/nedbat/cog/tar.gz/v3.3.0","html_url":"https://github.com/nedbat/cog/releases/tag/v3.3.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/nedbat/cog@v3.3.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/nedbat%2Fcog/tags/v3.3.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/nedbat%2Fcog/tags/v3.3.0/manifests"},{"name":"v3.2.0","sha":"71e8ca8e35df6f5c4e09af69278462c004d3b8e8","kind":"tag","published_at":"2021-11-07T16:22:15.000Z","download_url":"https://codeload.github.com/nedbat/cog/tar.gz/v3.2.0","html_url":"https://github.com/nedbat/cog/releases/tag/v3.2.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/nedbat/cog@v3.2.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/nedbat%2Fcog/tags/v3.2.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/nedbat%2Fcog/tags/v3.2.0/manifests"},{"name":"v3.1.0","sha":"1f84704ea5a8f2769c7994a7ba81ec1c9fcb06d4","kind":"tag","published_at":"2021-08-31T21:25:12.000Z","download_url":"https://codeload.github.com/nedbat/cog/tar.gz/v3.1.0","html_url":"https://github.com/nedbat/cog/releases/tag/v3.1.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/nedbat/cog@v3.1.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/nedbat%2Fcog/tags/v3.1.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/nedbat%2Fcog/tags/v3.1.0/manifests"},{"name":"v3.0.0","sha":"0fc2819e254c9f1597db7c2a7f2e95fe0d8b0fea","kind":"commit","published_at":"2019-04-02T10:55:06.000Z","download_url":"https://codeload.github.com/nedbat/cog/tar.gz/v3.0.0","html_url":"https://github.com/nedbat/cog/releases/tag/v3.0.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/nedbat/cog@v3.0.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/nedbat%2Fcog/tags/v3.0.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/nedbat%2Fcog/tags/v3.0.0/manifests"},{"name":"v2.5.1","sha":"703910eee248ce3ae3e20f86b134167406b92bbc","kind":"commit","published_at":"2016-10-19T23:23:29.000Z","download_url":"https://codeload.github.com/nedbat/cog/tar.gz/v2.5.1","html_url":"https://github.com/nedbat/cog/releases/tag/v2.5.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/nedbat/cog@v2.5.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/nedbat%2Fcog/tags/v2.5.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/nedbat%2Fcog/tags/v2.5.1/manifests"},{"name":"v2.5","sha":"01e756416c9d974a182c1f2580836f1a1454ab32","kind":"commit","published_at":"2016-02-13T13:22:05.000Z","download_url":"https://codeload.github.com/nedbat/cog/tar.gz/v2.5","html_url":"https://github.com/nedbat/cog/releases/tag/v2.5","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/nedbat/cog@v2.5","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/nedbat%2Fcog/tags/v2.5","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/nedbat%2Fcog/tags/v2.5/manifests"},{"name":"cogapp-2.2","sha":"b67f84ae285b62b91a877b3ac6bb7ddb938919e2","kind":"commit","published_at":"2009-06-26T01:38:08.000Z","download_url":"https://codeload.github.com/nedbat/cog/tar.gz/cogapp-2.2","html_url":"https://github.com/nedbat/cog/releases/tag/cogapp-2.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/nedbat/cog@cogapp-2.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/nedbat%2Fcog/tags/cogapp-2.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/nedbat%2Fcog/tags/cogapp-2.2/manifests"}]},"repo_metadata_updated_at":"2026-10-10T16:41:33.228Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":0.0,"dependent_packages_count":0.0,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":100},"purl":"pkg:deb/ubuntu/python-cogapp?arch=source\u0026distro=ubuntu-24.10\u0026repository_url=https://launchpad.net/ubuntu/oracular","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/ubuntu/python-cogapp","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/ubuntu/python-cogapp","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/ubuntu/python-cogapp/dependencies","status":null,"funding_links":["https://github.com/sponsors/nedbat"],"critical":null,"issue_metadata":{"last_synced_at":"2026-10-10T03:33:03.366Z","issues_count":31,"pull_requests_count":50,"avg_time_to_close_issue":10842473.416666666,"avg_time_to_close_pull_request":917075.1538461539,"issues_closed_count":12,"pull_requests_closed_count":39,"pull_request_authors_count":14,"issue_authors_count":24,"avg_comments_per_issue":2.0,"avg_comments_per_pull_request":0.72,"merged_pull_requests_count":34,"bot_issues_count":0,"bot_pull_requests_count":21,"past_year_issues_count":3,"past_year_pull_requests_count":14,"past_year_avg_time_to_close_issue":null,"past_year_avg_time_to_close_pull_request":80453.5,"past_year_issues_closed_count":0,"past_year_pull_requests_closed_count":14,"past_year_pull_request_authors_count":1,"past_year_issue_authors_count":2,"past_year_avg_comments_per_issue":0.6666666666666666,"past_year_avg_comments_per_pull_request":0.07142857142857142,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":14,"past_year_merged_pull_requests_count":13,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/nedbat%2Fcog/issues","maintainers":[{"login":"nedbat","count":6,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/nedbat"}],"active_maintainers":[]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-24.10/packages/python-cogapp/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-24.10/packages/python-cogapp/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-24.10/packages/python-cogapp/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-24.10/packages/python-cogapp/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-24.10/packages/python-cogapp/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-24.10/packages/python-cogapp/codemeta","maintainers":[],"registry":{"name":"ubuntu-24.10","url":"https://launchpad.net/ubuntu/oracular","ecosystem":"ubuntu","default":false,"packages_count":38437,"maintainers_count":0,"namespaces_count":4,"keywords_count":1430,"github":"ubuntu","metadata":{"codename":"oracular","mirror":"http://old-releases.ubuntu.com/ubuntu","funded_packages_count":2744},"icon_url":"https://github.com/ubuntu.png","created_at":"2026-02-04T11:01:48.028Z","updated_at":"2026-10-23T05:03:18.611Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-24.10/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-24.10/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-24.10/namespaces"}},{"id":2675203,"name":"cogapp","ecosystem":"pypi","description":"Cog: A content generator for executing Python snippets in source files.","homepage":null,"licenses":"MIT","normalized_licenses":["MIT"],"repository_url":"https://github.com/nedbat/cog","keywords_array":[],"namespace":null,"versions_count":15,"first_release_published_at":"2009-06-26T03:36:23.000Z","latest_release_published_at":"2025-09-21T15:54:12.000Z","latest_release_number":"3.6.0","latest_published_release_number":"3.6.0","last_synced_at":"2026-10-22T16:47:08.083Z","created_at":"2022-04-10T10:24:03.285Z","updated_at":"2026-10-22T16:47:08.083Z","registry_url":"https://pypi.org/project/cogapp/","install_command":"pip install cogapp --index-url https://pypi.org/simple","documentation_url":"https://cog.readthedocs.io/","metadata":{"funding":"https://github.com/users/nedbat/sponsorship","documentation":"https://cog.readthedocs.io/","classifiers":["Development Status :: 5 - Production/Stable","Environment :: Console","Intended Audience :: Developers","Operating System :: OS Independent","Programming Language :: Python :: 3.10","Programming Language :: Python :: 3.11","Programming Language :: Python :: 3.12","Programming Language :: Python :: 3.13","Programming Language :: Python :: 3.14","Programming Language :: Python :: 3.9","Topic :: Software Development :: Code Generators"],"normalized_name":"cogapp","project_status":null},"repo_metadata":{"id":41420165,"uuid":"174532154","full_name":"nedbat/cog","owner":"nedbat","description":"Small bits of Python computation for static files","archived":false,"fork":false,"pushed_at":"2026-08-05T11:34:03.000Z","size":386,"stargazers_count":406,"open_issues_count":23,"forks_count":36,"subscribers_count":7,"default_branch":"main","last_synced_at":"2026-10-03T11:25:44.474Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":"https://cog.readthedocs.io","language":"Python","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/nedbat.png","metadata":{"files":{"readme":"README.rst","changelog":"CHANGELOG.rst","contributing":null,"funding":null,"license":"LICENSE.txt","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":"AUTHORS.txt","dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"claude":null,"gemini":null,"cursor":null,"copilot":null,"dco":null,"cla":null,"disclosure":null}},"created_at":"2019-03-08T12:14:00.000Z","updated_at":"2026-08-20T21:01:49.000Z","dependencies_parsed_at":"2026-08-13T10:34:32.693Z","dependency_job_id":null,"html_url":"https://github.com/nedbat/cog","commit_stats":{"total_commits":214,"total_committers":8,"mean_commits":26.75,"dds":0.04205607476635509,"last_synced_commit":"2f82c2703353321290a2b6e2e3f99f6b92908294"},"previous_names":[],"tags_count":12,"template":false,"template_full_name":null,"purl":"pkg:github/nedbat/cog","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/nedbat%2Fcog","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/nedbat%2Fcog/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/nedbat%2Fcog/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/nedbat%2Fcog/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/nedbat","download_url":"https://codeload.github.com/nedbat/cog/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/nedbat%2Fcog/sbom","scorecard":{"id":678349,"data":{"date":"2025-08-11","repo":{"name":"github.com/nedbat/cog","commit":"0ff1d7c1ce8331a6ebcd733523e7587df858aebd"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":5.6,"checks":[{"name":"Maintained","score":10,"reason":"21 commit(s) and 2 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Code-Review","score":0,"reason":"Found 2/27 approved changesets -- score normalized to 0","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Token-Permissions","score":10,"reason":"GitHub workflow tokens follow principle of least privilege","details":["Info: topLevel 'contents' permission set to 'read': .github/workflows/ci.yml:12","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Pinned-Dependencies","score":5,"reason":"dependency not pinned by hash detected -- score normalized to 5","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:102: update your workflow using https://app.stepsecurity.io/secureworkflow/nedbat/cog/ci.yml/main?enable=pin","Warn: pipCommand not pinned by hash: .github/workflows/ci.yml:49","Warn: pipCommand not pinned by hash: .github/workflows/ci.yml:94","Warn: pipCommand not pinned by hash: .github/workflows/ci.yml:127","Info:   8 out of   9 GitHub-owned GitHubAction dependencies pinned","Info:   2 out of   2 third-party GitHubAction dependencies pinned","Info:   0 out of   3 pipCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"Security-Policy","score":0,"reason":"security policy file not detected","details":["Warn: no security policy file detected","Warn: no security file to analyze","Warn: no security file to analyze","Warn: no security file to analyze"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE.txt:0","Info: FSF or OSI recognized license: MIT License: LICENSE.txt:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Branch-Protection","score":0,"reason":"branch protection not enabled on development/release branches","details":["Warn: branch protection not enabled for branch 'main'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 5 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-21T22:16:18.197Z","repository_id":41420165,"created_at":"2025-08-21T22:16:18.198Z","updated_at":"2025-08-21T22:16:18.198Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":343680568,"owners_count":38152616,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-10-03T21:59:58.778Z","status":"online","status_checked_at":"2026-10-10T02:00:07.419Z","response_time":65,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"nedbat","name":"Ned Batchelder","uuid":"23789","kind":"user","description":"","email":"ned@nedbatchelder.com","website":"https://nedbatchelder.com","location":"Boston, MA, USA","twitter":null,"company":null,"icon_url":"https://avatars.githubusercontent.com/u/23789?u=76b163dcfe4c4f1cdcea32b9f97be0ce037c5e4c\u0026v=4","repositories_count":145,"last_synced_at":"2026-10-04T01:44:08.858Z","metadata":{"has_sponsors_listing":true,"funding":null},"html_url":"https://github.com/nedbat","funding_links":["https://github.com/sponsors/nedbat"],"total_stars":3427,"followers":2466,"following":0,"created_at":"2022-11-02T16:21:31.275Z","updated_at":"2026-10-04T01:44:08.952Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/nedbat","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/nedbat/repositories"},"tags":[{"name":"v3.6.0","sha":"badd4c31d77dec54f745c03ae673e753df47163d","kind":"tag","published_at":"2025-09-21T15:54:14.000Z","download_url":"https://codeload.github.com/nedbat/cog/tar.gz/v3.6.0","html_url":"https://github.com/nedbat/cog/releases/tag/v3.6.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/nedbat/cog@v3.6.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/nedbat%2Fcog/tags/v3.6.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/nedbat%2Fcog/tags/v3.6.0/manifests"},{"name":"v3.5.1","sha":"01400075981bceae02edafbbf61a77876f578b8a","kind":"tag","published_at":"2025-06-10T12:42:40.000Z","download_url":"https://codeload.github.com/nedbat/cog/tar.gz/v3.5.1","html_url":"https://github.com/nedbat/cog/releases/tag/v3.5.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/nedbat/cog@v3.5.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/nedbat%2Fcog/tags/v3.5.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/nedbat%2Fcog/tags/v3.5.1/manifests"},{"name":"v3.5.0","sha":"315b06062f37598e7830d85c2851eabffe159dd4","kind":"tag","published_at":"2025-06-05T15:18:53.000Z","download_url":"https://codeload.github.com/nedbat/cog/tar.gz/v3.5.0","html_url":"https://github.com/nedbat/cog/releases/tag/v3.5.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/nedbat/cog@v3.5.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/nedbat%2Fcog/tags/v3.5.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/nedbat%2Fcog/tags/v3.5.0/manifests"},{"name":"v3.4.1","sha":"cceb6cbbc67c7bb35758d5ba7772a8482d143b56","kind":"tag","published_at":"2024-03-07T19:06:36.000Z","download_url":"https://codeload.github.com/nedbat/cog/tar.gz/v3.4.1","html_url":"https://github.com/nedbat/cog/releases/tag/v3.4.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/nedbat/cog@v3.4.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/nedbat%2Fcog/tags/v3.4.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/nedbat%2Fcog/tags/v3.4.1/manifests"},{"name":"v3.4.0","sha":"ac58ba92184fa5ba195d06994dc202e0dedd4186","kind":"tag","published_at":"2024-03-07T18:59:32.000Z","download_url":"https://codeload.github.com/nedbat/cog/tar.gz/v3.4.0","html_url":"https://github.com/nedbat/cog/releases/tag/v3.4.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/nedbat/cog@v3.4.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/nedbat%2Fcog/tags/v3.4.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/nedbat%2Fcog/tags/v3.4.0/manifests"},{"name":"v3.3.0","sha":"1050aad948e2de6cca56d8e14b8dc1cbb7890c9e","kind":"tag","published_at":"2021-11-19T17:30:12.000Z","download_url":"https://codeload.github.com/nedbat/cog/tar.gz/v3.3.0","html_url":"https://github.com/nedbat/cog/releases/tag/v3.3.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/nedbat/cog@v3.3.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/nedbat%2Fcog/tags/v3.3.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/nedbat%2Fcog/tags/v3.3.0/manifests"},{"name":"v3.2.0","sha":"71e8ca8e35df6f5c4e09af69278462c004d3b8e8","kind":"tag","published_at":"2021-11-07T16:22:15.000Z","download_url":"https://codeload.github.com/nedbat/cog/tar.gz/v3.2.0","html_url":"https://github.com/nedbat/cog/releases/tag/v3.2.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/nedbat/cog@v3.2.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/nedbat%2Fcog/tags/v3.2.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/nedbat%2Fcog/tags/v3.2.0/manifests"},{"name":"v3.1.0","sha":"1f84704ea5a8f2769c7994a7ba81ec1c9fcb06d4","kind":"tag","published_at":"2021-08-31T21:25:12.000Z","download_url":"https://codeload.github.com/nedbat/cog/tar.gz/v3.1.0","html_url":"https://github.com/nedbat/cog/releases/tag/v3.1.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/nedbat/cog@v3.1.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/nedbat%2Fcog/tags/v3.1.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/nedbat%2Fcog/tags/v3.1.0/manifests"},{"name":"v3.0.0","sha":"0fc2819e254c9f1597db7c2a7f2e95fe0d8b0fea","kind":"commit","published_at":"2019-04-02T10:55:06.000Z","download_url":"https://codeload.github.com/nedbat/cog/tar.gz/v3.0.0","html_url":"https://github.com/nedbat/cog/releases/tag/v3.0.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/nedbat/cog@v3.0.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/nedbat%2Fcog/tags/v3.0.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/nedbat%2Fcog/tags/v3.0.0/manifests"},{"name":"v2.5.1","sha":"703910eee248ce3ae3e20f86b134167406b92bbc","kind":"commit","published_at":"2016-10-19T23:23:29.000Z","download_url":"https://codeload.github.com/nedbat/cog/tar.gz/v2.5.1","html_url":"https://github.com/nedbat/cog/releases/tag/v2.5.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/nedbat/cog@v2.5.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/nedbat%2Fcog/tags/v2.5.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/nedbat%2Fcog/tags/v2.5.1/manifests"},{"name":"v2.5","sha":"01e756416c9d974a182c1f2580836f1a1454ab32","kind":"commit","published_at":"2016-02-13T13:22:05.000Z","download_url":"https://codeload.github.com/nedbat/cog/tar.gz/v2.5","html_url":"https://github.com/nedbat/cog/releases/tag/v2.5","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/nedbat/cog@v2.5","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/nedbat%2Fcog/tags/v2.5","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/nedbat%2Fcog/tags/v2.5/manifests"},{"name":"cogapp-2.2","sha":"b67f84ae285b62b91a877b3ac6bb7ddb938919e2","kind":"commit","published_at":"2009-06-26T01:38:08.000Z","download_url":"https://codeload.github.com/nedbat/cog/tar.gz/cogapp-2.2","html_url":"https://github.com/nedbat/cog/releases/tag/cogapp-2.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/nedbat/cog@cogapp-2.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/nedbat%2Fcog/tags/cogapp-2.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/nedbat%2Fcog/tags/cogapp-2.2/manifests"}]},"repo_metadata_updated_at":"2026-10-10T16:41:33.371Z","dependent_packages_count":55,"downloads":245827,"downloads_period":"last-month","dependent_repos_count":396,"rankings":{"downloads":1.2543538012199251,"dependent_repos_count":0.7310369363010908,"dependent_packages_count":0.3387742531567601,"stargazers_count":3.682345132827996,"forks_count":8.11128751506341,"docker_downloads_count":1.988833611632324,"average":2.684438541700251},"purl":"pkg:pypi/cogapp","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/pypi/cogapp","docker_dependents_count":19,"docker_downloads_count":5558,"usage_url":"https://repos.ecosyste.ms/usage/pypi/cogapp","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/pypi/cogapp/dependencies","status":null,"funding_links":["https://github.com/users/nedbat/sponsorship","https://github.com/sponsors/nedbat"],"critical":null,"issue_metadata":{"last_synced_at":"2026-10-10T03:33:03.366Z","issues_count":31,"pull_requests_count":50,"avg_time_to_close_issue":10842473.416666666,"avg_time_to_close_pull_request":917075.1538461539,"issues_closed_count":12,"pull_requests_closed_count":39,"pull_request_authors_count":14,"issue_authors_count":24,"avg_comments_per_issue":2.0,"avg_comments_per_pull_request":0.72,"merged_pull_requests_count":34,"bot_issues_count":0,"bot_pull_requests_count":21,"past_year_issues_count":3,"past_year_pull_requests_count":14,"past_year_avg_time_to_close_issue":null,"past_year_avg_time_to_close_pull_request":80453.5,"past_year_issues_closed_count":0,"past_year_pull_requests_closed_count":14,"past_year_pull_request_authors_count":1,"past_year_issue_authors_count":2,"past_year_avg_comments_per_issue":0.6666666666666666,"past_year_avg_comments_per_pull_request":0.07142857142857142,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":14,"past_year_merged_pull_requests_count":13,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/nedbat%2Fcog/issues","maintainers":[{"login":"nedbat","count":6,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/nedbat"}],"active_maintainers":[]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/pypi.org/packages/cogapp/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/pypi.org/packages/cogapp/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/pypi.org/packages/cogapp/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/pypi.org/packages/cogapp/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/pypi.org/packages/cogapp/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/pypi.org/packages/cogapp/codemeta","maintainers":[{"uuid":"nedbatchelder","login":"nedbatchelder","name":null,"email":null,"url":null,"packages_count":14,"html_url":"https://pypi.org/user/nedbatchelder/","role":null,"created_at":"2022-12-16T23:25:12.608Z","updated_at":"2022-12-16T23:25:12.608Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/pypi.org/maintainers/nedbatchelder/packages"}],"registry":{"name":"pypi.org","url":"https://pypi.org","ecosystem":"pypi","default":true,"packages_count":944306,"maintainers_count":406420,"namespaces_count":0,"keywords_count":326592,"github":"pypi","metadata":{"funded_packages_count":64107,"rate_limit":2},"icon_url":"https://github.com/pypi.png","created_at":"2022-04-04T15:19:23.364Z","updated_at":"2026-10-23T05:03:09.661Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/pypi.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/pypi.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/pypi.org/namespaces"}},{"id":15394665,"name":"github.com/nedbat/cog","ecosystem":"go","description":null,"homepage":null,"licenses":"mit","normalized_licenses":["MIT"],"repository_url":"https://github.com/nedbat/cog","keywords_array":[],"namespace":null,"versions_count":11,"first_release_published_at":"2016-10-19T23:23:29.000Z","latest_release_published_at":"2025-09-21T15:46:21.000Z","latest_release_number":"v3.6.0+incompatible","latest_published_release_number":"v3.6.1-0.20260805113355-c041e71ae66f+incompatible","last_synced_at":"2026-10-22T16:47:09.971Z","created_at":"2026-09-23T06:51:06.656Z","updated_at":"2026-10-22T16:47:09.972Z","registry_url":"https://pkg.go.dev/github.com/nedbat/cog","install_command":"go get github.com/nedbat/cog","documentation_url":"https://pkg.go.dev/github.com/nedbat/cog#section-documentation","metadata":{},"repo_metadata":{"id":41420165,"uuid":"174532154","full_name":"nedbat/cog","owner":"nedbat","description":"Small bits of Python computation for static files","archived":false,"fork":false,"pushed_at":"2026-08-05T11:34:03.000Z","size":386,"stargazers_count":406,"open_issues_count":23,"forks_count":36,"subscribers_count":7,"default_branch":"main","last_synced_at":"2026-10-03T11:25:44.474Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":"https://cog.readthedocs.io","language":"Python","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/nedbat.png","metadata":{"files":{"readme":"README.rst","changelog":"CHANGELOG.rst","contributing":null,"funding":null,"license":"LICENSE.txt","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":"AUTHORS.txt","dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"claude":null,"gemini":null,"cursor":null,"copilot":null,"dco":null,"cla":null,"disclosure":null}},"created_at":"2019-03-08T12:14:00.000Z","updated_at":"2026-08-20T21:01:49.000Z","dependencies_parsed_at":"2026-08-13T10:34:32.693Z","dependency_job_id":null,"html_url":"https://github.com/nedbat/cog","commit_stats":{"total_commits":214,"total_committers":8,"mean_commits":26.75,"dds":0.04205607476635509,"last_synced_commit":"2f82c2703353321290a2b6e2e3f99f6b92908294"},"previous_names":[],"tags_count":12,"template":false,"template_full_name":null,"purl":"pkg:github/nedbat/cog","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/nedbat%2Fcog","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/nedbat%2Fcog/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/nedbat%2Fcog/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/nedbat%2Fcog/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/nedbat","download_url":"https://codeload.github.com/nedbat/cog/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/nedbat%2Fcog/sbom","scorecard":{"id":678349,"data":{"date":"2025-08-11","repo":{"name":"github.com/nedbat/cog","commit":"0ff1d7c1ce8331a6ebcd733523e7587df858aebd"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":5.6,"checks":[{"name":"Maintained","score":10,"reason":"21 commit(s) and 2 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Code-Review","score":0,"reason":"Found 2/27 approved changesets -- score normalized to 0","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Token-Permissions","score":10,"reason":"GitHub workflow tokens follow principle of least privilege","details":["Info: topLevel 'contents' permission set to 'read': .github/workflows/ci.yml:12","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Pinned-Dependencies","score":5,"reason":"dependency not pinned by hash detected -- score normalized to 5","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:102: update your workflow using https://app.stepsecurity.io/secureworkflow/nedbat/cog/ci.yml/main?enable=pin","Warn: pipCommand not pinned by hash: .github/workflows/ci.yml:49","Warn: pipCommand not pinned by hash: .github/workflows/ci.yml:94","Warn: pipCommand not pinned by hash: .github/workflows/ci.yml:127","Info:   8 out of   9 GitHub-owned GitHubAction dependencies pinned","Info:   2 out of   2 third-party GitHubAction dependencies pinned","Info:   0 out of   3 pipCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"Security-Policy","score":0,"reason":"security policy file not detected","details":["Warn: no security policy file detected","Warn: no security file to analyze","Warn: no security file to analyze","Warn: no security file to analyze"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE.txt:0","Info: FSF or OSI recognized license: MIT License: LICENSE.txt:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Branch-Protection","score":0,"reason":"branch protection not enabled on development/release branches","details":["Warn: branch protection not enabled for branch 'main'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 5 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-21T22:16:18.197Z","repository_id":41420165,"created_at":"2025-08-21T22:16:18.198Z","updated_at":"2025-08-21T22:16:18.198Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":343680568,"owners_count":38152616,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-10-03T21:59:58.778Z","status":"online","status_checked_at":"2026-10-10T02:00:07.419Z","response_time":65,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"nedbat","name":"Ned Batchelder","uuid":"23789","kind":"user","description":"","email":"ned@nedbatchelder.com","website":"https://nedbatchelder.com","location":"Boston, MA, USA","twitter":null,"company":null,"icon_url":"https://avatars.githubusercontent.com/u/23789?u=76b163dcfe4c4f1cdcea32b9f97be0ce037c5e4c\u0026v=4","repositories_count":145,"last_synced_at":"2026-10-04T01:44:08.858Z","metadata":{"has_sponsors_listing":true,"funding":null},"html_url":"https://github.com/nedbat","funding_links":["https://github.com/sponsors/nedbat"],"total_stars":3427,"followers":2466,"following":0,"created_at":"2022-11-02T16:21:31.275Z","updated_at":"2026-10-04T01:44:08.952Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/nedbat","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/nedbat/repositories"},"tags":[{"name":"v3.6.0","sha":"badd4c31d77dec54f745c03ae673e753df47163d","kind":"tag","published_at":"2025-09-21T15:54:14.000Z","download_url":"https://codeload.github.com/nedbat/cog/tar.gz/v3.6.0","html_url":"https://github.com/nedbat/cog/releases/tag/v3.6.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/nedbat/cog@v3.6.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/nedbat%2Fcog/tags/v3.6.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/nedbat%2Fcog/tags/v3.6.0/manifests"},{"name":"v3.5.1","sha":"01400075981bceae02edafbbf61a77876f578b8a","kind":"tag","published_at":"2025-06-10T12:42:40.000Z","download_url":"https://codeload.github.com/nedbat/cog/tar.gz/v3.5.1","html_url":"https://github.com/nedbat/cog/releases/tag/v3.5.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/nedbat/cog@v3.5.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/nedbat%2Fcog/tags/v3.5.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/nedbat%2Fcog/tags/v3.5.1/manifests"},{"name":"v3.5.0","sha":"315b06062f37598e7830d85c2851eabffe159dd4","kind":"tag","published_at":"2025-06-05T15:18:53.000Z","download_url":"https://codeload.github.com/nedbat/cog/tar.gz/v3.5.0","html_url":"https://github.com/nedbat/cog/releases/tag/v3.5.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/nedbat/cog@v3.5.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/nedbat%2Fcog/tags/v3.5.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/nedbat%2Fcog/tags/v3.5.0/manifests"},{"name":"v3.4.1","sha":"cceb6cbbc67c7bb35758d5ba7772a8482d143b56","kind":"tag","published_at":"2024-03-07T19:06:36.000Z","download_url":"https://codeload.github.com/nedbat/cog/tar.gz/v3.4.1","html_url":"https://github.com/nedbat/cog/releases/tag/v3.4.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/nedbat/cog@v3.4.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/nedbat%2Fcog/tags/v3.4.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/nedbat%2Fcog/tags/v3.4.1/manifests"},{"name":"v3.4.0","sha":"ac58ba92184fa5ba195d06994dc202e0dedd4186","kind":"tag","published_at":"2024-03-07T18:59:32.000Z","download_url":"https://codeload.github.com/nedbat/cog/tar.gz/v3.4.0","html_url":"https://github.com/nedbat/cog/releases/tag/v3.4.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/nedbat/cog@v3.4.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/nedbat%2Fcog/tags/v3.4.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/nedbat%2Fcog/tags/v3.4.0/manifests"},{"name":"v3.3.0","sha":"1050aad948e2de6cca56d8e14b8dc1cbb7890c9e","kind":"tag","published_at":"2021-11-19T17:30:12.000Z","download_url":"https://codeload.github.com/nedbat/cog/tar.gz/v3.3.0","html_url":"https://github.com/nedbat/cog/releases/tag/v3.3.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/nedbat/cog@v3.3.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/nedbat%2Fcog/tags/v3.3.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/nedbat%2Fcog/tags/v3.3.0/manifests"},{"name":"v3.2.0","sha":"71e8ca8e35df6f5c4e09af69278462c004d3b8e8","kind":"tag","published_at":"2021-11-07T16:22:15.000Z","download_url":"https://codeload.github.com/nedbat/cog/tar.gz/v3.2.0","html_url":"https://github.com/nedbat/cog/releases/tag/v3.2.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/nedbat/cog@v3.2.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/nedbat%2Fcog/tags/v3.2.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/nedbat%2Fcog/tags/v3.2.0/manifests"},{"name":"v3.1.0","sha":"1f84704ea5a8f2769c7994a7ba81ec1c9fcb06d4","kind":"tag","published_at":"2021-08-31T21:25:12.000Z","download_url":"https://codeload.github.com/nedbat/cog/tar.gz/v3.1.0","html_url":"https://github.com/nedbat/cog/releases/tag/v3.1.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/nedbat/cog@v3.1.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/nedbat%2Fcog/tags/v3.1.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/nedbat%2Fcog/tags/v3.1.0/manifests"},{"name":"v3.0.0","sha":"0fc2819e254c9f1597db7c2a7f2e95fe0d8b0fea","kind":"commit","published_at":"2019-04-02T10:55:06.000Z","download_url":"https://codeload.github.com/nedbat/cog/tar.gz/v3.0.0","html_url":"https://github.com/nedbat/cog/releases/tag/v3.0.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/nedbat/cog@v3.0.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/nedbat%2Fcog/tags/v3.0.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/nedbat%2Fcog/tags/v3.0.0/manifests"},{"name":"v2.5.1","sha":"703910eee248ce3ae3e20f86b134167406b92bbc","kind":"commit","published_at":"2016-10-19T23:23:29.000Z","download_url":"https://codeload.github.com/nedbat/cog/tar.gz/v2.5.1","html_url":"https://github.com/nedbat/cog/releases/tag/v2.5.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/nedbat/cog@v2.5.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/nedbat%2Fcog/tags/v2.5.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/nedbat%2Fcog/tags/v2.5.1/manifests"},{"name":"v2.5","sha":"01e756416c9d974a182c1f2580836f1a1454ab32","kind":"commit","published_at":"2016-02-13T13:22:05.000Z","download_url":"https://codeload.github.com/nedbat/cog/tar.gz/v2.5","html_url":"https://github.com/nedbat/cog/releases/tag/v2.5","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/nedbat/cog@v2.5","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/nedbat%2Fcog/tags/v2.5","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/nedbat%2Fcog/tags/v2.5/manifests"},{"name":"cogapp-2.2","sha":"b67f84ae285b62b91a877b3ac6bb7ddb938919e2","kind":"commit","published_at":"2009-06-26T01:38:08.000Z","download_url":"https://codeload.github.com/nedbat/cog/tar.gz/cogapp-2.2","html_url":"https://github.com/nedbat/cog/releases/tag/cogapp-2.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/nedbat/cog@cogapp-2.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/nedbat%2Fcog/tags/cogapp-2.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/nedbat%2Fcog/tags/cogapp-2.2/manifests"}]},"repo_metadata_updated_at":"2026-10-10T16:41:33.266Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":4.439911932265863,"dependent_packages_count":4.151537744565295,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":4.295724838415579},"purl":"pkg:golang/github.com/nedbat/cog","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/go/github.com/nedbat/cog","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/go/github.com/nedbat/cog","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/go/github.com/nedbat/cog/dependencies","status":null,"funding_links":["https://github.com/sponsors/nedbat"],"critical":null,"issue_metadata":{"last_synced_at":"2026-10-10T03:33:03.366Z","issues_count":31,"pull_requests_count":50,"avg_time_to_close_issue":10842473.416666666,"avg_time_to_close_pull_request":917075.1538461539,"issues_closed_count":12,"pull_requests_closed_count":39,"pull_request_authors_count":14,"issue_authors_count":24,"avg_comments_per_issue":2.0,"avg_comments_per_pull_request":0.72,"merged_pull_requests_count":34,"bot_issues_count":0,"bot_pull_requests_count":21,"past_year_issues_count":3,"past_year_pull_requests_count":14,"past_year_avg_time_to_close_issue":null,"past_year_avg_time_to_close_pull_request":80453.5,"past_year_issues_closed_count":0,"past_year_pull_requests_closed_count":14,"past_year_pull_request_authors_count":1,"past_year_issue_authors_count":2,"past_year_avg_comments_per_issue":0.6666666666666666,"past_year_avg_comments_per_pull_request":0.07142857142857142,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":14,"past_year_merged_pull_requests_count":13,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/nedbat%2Fcog/issues","maintainers":[{"login":"nedbat","count":6,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/nedbat"}],"active_maintainers":[]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fnedbat%2Fcog/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fnedbat%2Fcog/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fnedbat%2Fcog/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fnedbat%2Fcog/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fnedbat%2Fcog/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fnedbat%2Fcog/codemeta","maintainers":[],"registry":{"name":"proxy.golang.org","url":"https://proxy.golang.org","ecosystem":"go","default":true,"packages_count":2541048,"maintainers_count":0,"namespaces_count":853808,"keywords_count":146098,"github":"golang","metadata":{"funded_packages_count":120986,"sync_missing_packages_cursor":{"timestamp":"2026-09-29T00:04:57.155362Z","path":"github.com/virtengine/virtengine/sdk/specs","version":"v0.0.0-20260928231908-c0c887541540"},"rate_limit":5},"icon_url":"https://github.com/golang.png","created_at":"2022-04-04T15:19:22.939Z","updated_at":"2026-10-22T05:07:44.151Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/namespaces"}}],"commits":{"id":550735,"full_name":"nedbat/cog","default_branch":"main","total_commits":321,"total_committers":19,"total_bot_commits":31,"total_bot_committers":1,"mean_commits":16.894736842105264,"dds":0.17445482866043616,"past_year_total_commits":44,"past_year_total_committers":6,"past_year_total_bot_commits":26,"past_year_total_bot_committers":1,"past_year_mean_commits":7.333333333333333,"past_year_dds":0.40909090909090906,"last_synced_at":"2026-10-22T16:47:05.776Z","last_synced_commit":"b52f1f75ff3d2b491595d0806e823a8a8cc945ca","created_at":"2023-03-09T04:38:44.953Z","updated_at":"2026-10-22T16:47:05.668Z","committers":[{"name":"Ned Batchelder","email":"ned@nedbatchelder.com","login":"nedbat","count":265},{"name":"dependabot[bot]","email":"49699333+dependabot[bot]","login":"dependabot[bot]","count":31},{"name":"Tim Vergenz","email":"vergenzt@gmail.com","login":"vergenzt","count":7},{"name":"Daniel Murdin","email":"daniel.murdin@niradynamics.se","login":"dmurdin","count":2},{"name":"Doug Hellmann","email":"dhellman@redhat.com","login":"dhellmann","count":2},{"name":"jfgiraud","email":"jfgiraud@archimede","login":null,"count":1},{"name":"Anders Hovmöller","email":"boxed@killingar.net","login":"boxed","count":1},{"name":"Ellie","email":"1447600+ellieayla","login":"ellieayla","count":1},{"name":"Hugh Perkins","email":"hughperkins@gmail.com","login":"hughperkins","count":1},{"name":"Hugo van Kemenade","email":"1324225+hugovk","login":"hugovk","count":1},{"name":"Kurt McKee","email":"contactme@kurtmckee.org","login":"kurtmckee","count":1},{"name":"Mike Fiedler","email":"miketheman@gmail.com","login":"miketheman","count":1},{"name":"Panayiotis Gavriil","email":"Pan.Gavriil@deshaw.com","login":"gavriil-deshaw","count":1},{"name":"Petr Gladkiy","email":"petr.gladkiy@gmail.com","login":"don-pit","count":1},{"name":"RA-Phil-K","email":"122104365+RA-Phil-K","login":"RA-Phil-K","count":1},{"name":"Ryan Santos","email":"khanfluence","login":"khanfluence","count":1},{"name":"Stephen Rosen","email":"sirosen@globus.org","login":"sirosen","count":1},{"name":"Tiago Nobrega","email":"tiago.nobrega@canonical.com","login":"tigarmo","count":1},{"name":"luz paz","email":"luzpaz","login":"luzpaz","count":1}],"past_year_committers":[{"name":"dependabot[bot]","email":"49699333+dependabot[bot]","login":"dependabot[bot]","count":26},{"name":"Ned Batchelder","email":"ned@nedbatchelder.com","login":"nedbat","count":14},{"name":"Tim Vergenz","email":"vergenzt@gmail.com","login":"vergenzt","count":1},{"name":"Stephen Rosen","email":"sirosen@globus.org","login":"sirosen","count":1},{"name":"Kurt McKee","email":"contactme@kurtmckee.org","login":"kurtmckee","count":1},{"name":"Ellie","email":"1447600+ellieayla","login":"ellieayla","count":1}],"commits_url":"https://commits.ecosyste.ms/api/v1/hosts/GitHub/repositories/nedbat%2Fcog/commits","host":{"name":"GitHub","url":"https://github.com","kind":"github","last_synced_at":"2026-10-23T00:00:05.965Z","repositories_count":8560267,"commits_count":1301760511,"contributors_count":59699096,"owners_count":1841410,"committers_count":3884127,"icon_url":"https://github.com/github.png","host_url":"https://commits.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://commits.ecosyste.ms/api/v1/hosts/GitHub/repositories"}},"issues":{"table":{"full_name":"nedbat/cog","html_url":"https://github.com/nedbat/cog","last_synced_at":"2026-10-22T16:47:06.436Z","status":null,"issues_count":31,"pull_requests_count":54,"avg_time_to_close_issue":10842473.416666666,"avg_time_to_close_pull_request":851615.3095238095,"issues_closed_count":12,"pull_requests_closed_count":42,"pull_request_authors_count":15,"issue_authors_count":24,"avg_comments_per_issue":2.0,"avg_comments_per_pull_request":0.7037037037037037,"merged_pull_requests_count":35,"bot_issues_count":0,"bot_pull_requests_count":24,"past_year_issues_count":3,"past_year_pull_requests_count":18,"past_year_avg_time_to_close_issue":null,"past_year_avg_time_to_close_pull_request":66368.29411764706,"past_year_issues_closed_count":0,"past_year_pull_requests_closed_count":17,"past_year_pull_request_authors_count":2,"past_year_issue_authors_count":2,"past_year_avg_comments_per_issue":0.6666666666666666,"past_year_avg_comments_per_pull_request":0.16666666666666666,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":17,"past_year_merged_pull_requests_count":14,"created_at":"2023-05-14T10:49:43.756Z","updated_at":"2026-10-22T16:47:06.436Z","repository_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/nedbat%2Fcog","issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/nedbat%2Fcog/issues","issue_labels_count":{"table":{}},"pull_request_labels_count":{"table":{"dependencies":24,"github_actions":17,"python":7}},"issue_author_associations_count":{"table":{"NONE":28,"OWNER":2,"CONTRIBUTOR":1}},"pull_request_author_associations_count":{"table":{"CONTRIBUTOR":37,"NONE":13,"OWNER":4}},"issue_authors":{"table":{"42sol-eu":3,"dkogan":2,"nedbat":2,"evandrocoan":2,"nestor013":2,"ekohilas":2,"sco1":1,"ro-oliveira95":1,"fmaida":1,"charanjith-anet":1,"webknjaz":1,"vergenzt":1,"aidan-gallagher":1,"bnavigator":1,"katrinafyi":1,"gavriil-deshaw":1,"LecrisUT":1,"tw39124-1":1,"nialov":1,"karolzlot":1,"khanfluence":1,"dreftymac":1,"belene":1,"williamjamir":1}},"pull_request_authors":{"table":{"dependabot[bot]":24,"vergenzt":9,"nedbat":4,"hugovk":3,"gavriil-deshaw":2,"katrinafyi":2,"tigarmo":2,"luzpaz":1,"khanfluence":1,"beniamin-levin":1,"miketheman":1,"RA-Phil-K":1,"thejcannon":1,"kstrafe":1,"dmurdin":1}},"host":{"table":{"name":"GitHub","url":"https://github.com","kind":"github","last_synced_at":"2026-10-23T00:00:07.020Z","repositories_count":18190841,"issues_count":48982590,"pull_requests_count":150897780,"authors_count":12098237,"icon_url":"https://github.com/github.png","host_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories","owners_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/owners","authors_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors"}},"past_year_issue_labels_count":{"table":{}},"past_year_pull_request_labels_count":{"table":{"dependencies":17,"github_actions":10,"python":7}},"past_year_issue_author_associations_count":{"table":{"NONE":3}},"past_year_pull_request_author_associations_count":{"table":{"CONTRIBUTOR":17,"NONE":1}},"past_year_issue_authors":{"table":{"ekohilas":2,"nestor013":1}},"past_year_pull_request_authors":{"table":{"dependabot[bot]":17,"beniamin-levin":1}},"maintainers":[{"table":{"login":"nedbat","count":6,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/nedbat"}}],"active_maintainers":[]}},"events":{"total":{"CreateEvent":17,"DeleteEvent":18,"ForkEvent":4,"IssueCommentEvent":19,"IssuesEvent":10,"PullRequestEvent":30,"PullRequestReviewCommentEvent":5,"PullRequestReviewEvent":5,"PushEvent":38,"WatchEvent":40},"last_year":{"CreateEvent":9,"DeleteEvent":12,"ForkEvent":2,"IssueCommentEvent":3,"IssuesEvent":4,"PullRequestEvent":17,"PullRequestReviewCommentEvent":2,"PullRequestReviewEvent":2,"PushEvent":18,"WatchEvent":4}},"keywords":[],"dependencies":[{"ecosystem":"actions","filepath":".github/workflows/ci.yml","sha":null,"kind":"manifest","created_at":"2023-02-16T20:01:25.456Z","updated_at":"2023-02-16T20:01:25.456Z","repository_link":"https://github.com/nedbat/cog/blob/main/.github/workflows/ci.yml","dependencies":[{"id":7722867855,"package_name":"actions/checkout","ecosystem":"actions","requirements":"v2","direct":true,"kind":"composite","optional":false},{"id":7722867858,"package_name":"actions/setup-python","ecosystem":"actions","requirements":"v2","direct":true,"kind":"composite","optional":false},{"id":7722867859,"package_name":"actions/upload-artifact","ecosystem":"actions","requirements":"v2","direct":true,"kind":"composite","optional":false},{"id":7722867861,"package_name":"actions/download-artifact","ecosystem":"actions","requirements":"v2","direct":true,"kind":"composite","optional":false}]},{"ecosystem":"pypi","filepath":"pyproject.toml","sha":null,"kind":"manifest","created_at":"2023-11-24T04:22:23.758Z","updated_at":"2023-11-24T04:22:23.758Z","repository_link":"https://github.com/nedbat/cog/blob/main/pyproject.toml","dependencies":[]},{"ecosystem":"pypi","filepath":"dev-requirements.txt","sha":null,"kind":"manifest","created_at":"2026-08-13T10:34:32.451Z","updated_at":"2026-08-13T10:34:32.451Z","repository_link":"https://github.com/nedbat/cog/blob/main/dev-requirements.txt","dependencies":[{"id":26087590927,"package_name":"alabaster","ecosystem":"pypi","requirements":"==1.0.0","direct":true,"kind":"development","optional":false},{"id":26087590929,"package_name":"babel","ecosystem":"pypi","requirements":"==2.17.0","direct":true,"kind":"development","optional":false},{"id":26087590931,"package_name":"backports-tarfile","ecosystem":"pypi","requirements":"==1.2.0","direct":true,"kind":"development","optional":false},{"id":26087590933,"package_name":"build","ecosystem":"pypi","requirements":"==1.4.0","direct":true,"kind":"development","optional":false},{"id":26087590934,"package_name":"cachetools","ecosystem":"pypi","requirements":"==6.2.6","direct":true,"kind":"development","optional":false},{"id":26087590935,"package_name":"certifi","ecosystem":"pypi","requirements":"==2026.1.4","direct":true,"kind":"development","optional":false},{"id":26087590936,"package_name":"cffi","ecosystem":"pypi","requirements":"==2.0.0","direct":true,"kind":"development","optional":false},{"id":26087590937,"package_name":"chardet","ecosystem":"pypi","requirements":"==5.2.0","direct":true,"kind":"development","optional":false},{"id":26087590938,"package_name":"charset-normalizer","ecosystem":"pypi","requirements":"==3.4.4","direct":true,"kind":"development","optional":false},{"id":26087590939,"package_name":"check-manifest","ecosystem":"pypi","requirements":"==0.51","direct":true,"kind":"development","optional":false},{"id":26087590940,"package_name":"colorama","ecosystem":"pypi","requirements":"==0.4.6","direct":true,"kind":"development","optional":false},{"id":26087590941,"package_name":"coverage","ecosystem":"pypi","requirements":"==7.13.4","direct":true,"kind":"development","optional":false},{"id":26087590942,"package_name":"cryptography","ecosystem":"pypi","requirements":"==50.0.0","direct":true,"kind":"development","optional":false},{"id":26087590943,"package_name":"distlib","ecosystem":"pypi","requirements":"==0.4.0","direct":true,"kind":"development","optional":false},{"id":26087590944,"package_name":"docutils","ecosystem":"pypi","requirements":"==0.21.2","direct":true,"kind":"development","optional":false},{"id":26087590945,"package_name":"filelock","ecosystem":"pypi","requirements":"==3.20.3","direct":true,"kind":"development","optional":false},{"id":26087590946,"package_name":"id","ecosystem":"pypi","requirements":"==1.5.0","direct":true,"kind":"development","optional":false},{"id":26087590947,"package_name":"idna","ecosystem":"pypi","requirements":"==3.15","direct":true,"kind":"development","optional":false},{"id":26087590948,"package_name":"imagesize","ecosystem":"pypi","requirements":"==1.4.1","direct":true,"kind":"development","optional":false},{"id":26087590949,"package_name":"importlib-metadata","ecosystem":"pypi","requirements":"==8.7.1","direct":true,"kind":"development","optional":false},{"id":26087590950,"package_name":"jaraco-classes","ecosystem":"pypi","requirements":"==3.4.0","direct":true,"kind":"development","optional":false},{"id":26087590951,"package_name":"jaraco-context","ecosystem":"pypi","requirements":"==6.1.0","direct":true,"kind":"development","optional":false},{"id":26087590952,"package_name":"jaraco-functools","ecosystem":"pypi","requirements":"==4.4.0","direct":true,"kind":"development","optional":false},{"id":26087590953,"package_name":"jeepney","ecosystem":"pypi","requirements":"==0.9.0","direct":true,"kind":"development","optional":false},{"id":26087590954,"package_name":"jinja2","ecosystem":"pypi","requirements":"==3.1.6","direct":true,"kind":"development","optional":false},{"id":26087590955,"package_name":"keyring","ecosystem":"pypi","requirements":"==25.7.0","direct":true,"kind":"development","optional":false},{"id":26087590956,"package_name":"markdown-it-py","ecosystem":"pypi","requirements":"==4.0.0","direct":true,"kind":"development","optional":false},{"id":26087590957,"package_name":"markupsafe","ecosystem":"pypi","requirements":"==3.0.3","direct":true,"kind":"development","optional":false},{"id":26087590958,"package_name":"mdurl","ecosystem":"pypi","requirements":"==0.1.2","direct":true,"kind":"development","optional":false},{"id":26087590959,"package_name":"more-itertools","ecosystem":"pypi","requirements":"==10.8.0","direct":true,"kind":"development","optional":false},{"id":26087590960,"package_name":"nh3","ecosystem":"pypi","requirements":"==0.3.2","direct":true,"kind":"development","optional":false},{"id":26087590961,"package_name":"packaging","ecosystem":"pypi","requirements":"==26.0","direct":true,"kind":"development","optional":false},{"id":26087590962,"package_name":"platformdirs","ecosystem":"pypi","requirements":"==4.5.1","direct":true,"kind":"development","optional":false},{"id":26087590963,"package_name":"pluggy","ecosystem":"pypi","requirements":"==1.6.0","direct":true,"kind":"development","optional":false},{"id":26087590964,"package_name":"pycparser","ecosystem":"pypi","requirements":"==3.0","direct":true,"kind":"development","optional":false},{"id":26087590965,"package_name":"pygments","ecosystem":"pypi","requirements":"==2.20.0","direct":true,"kind":"development","optional":false},{"id":26087590966,"package_name":"pyproject-api","ecosystem":"pypi","requirements":"==1.10.0","direct":true,"kind":"development","optional":false},{"id":26087590967,"package_name":"pyproject-hooks","ecosystem":"pypi","requirements":"==1.2.0","direct":true,"kind":"development","optional":false},{"id":26087590968,"package_name":"readme-renderer","ecosystem":"pypi","requirements":"==44.0","direct":true,"kind":"development","optional":false},{"id":26087590969,"package_name":"requests","ecosystem":"pypi","requirements":"==2.33.0","direct":true,"kind":"development","optional":false},{"id":26087590970,"package_name":"requests-toolbelt","ecosystem":"pypi","requirements":"==1.0.0","direct":true,"kind":"development","optional":false},{"id":26087590971,"package_name":"rfc3986","ecosystem":"pypi","requirements":"==2.0.0","direct":true,"kind":"development","optional":false},{"id":26087590972,"package_name":"rich","ecosystem":"pypi","requirements":"==14.3.1","direct":true,"kind":"development","optional":false},{"id":26087590973,"package_name":"secretstorage","ecosystem":"pypi","requirements":"==3.5.0","direct":true,"kind":"development","optional":false},{"id":26087590974,"package_name":"snowballstemmer","ecosystem":"pypi","requirements":"==3.0.1","direct":true,"kind":"development","optional":false},{"id":26087590975,"package_name":"sphinx","ecosystem":"pypi","requirements":"==8.1.3","direct":true,"kind":"development","optional":false},{"id":26087590976,"package_name":"sphinxcontrib-applehelp","ecosystem":"pypi","requirements":"==2.0.0","direct":true,"kind":"development","optional":false},{"id":26087590977,"package_name":"sphinxcontrib-devhelp","ecosystem":"pypi","requirements":"==2.0.0","direct":true,"kind":"development","optional":false},{"id":26087590978,"package_name":"sphinxcontrib-htmlhelp","ecosystem":"pypi","requirements":"==2.1.0","direct":true,"kind":"development","optional":false},{"id":26087590979,"package_name":"sphinxcontrib-jsmath","ecosystem":"pypi","requirements":"==1.0.1","direct":true,"kind":"development","optional":false},{"id":26087590980,"package_name":"sphinxcontrib-qthelp","ecosystem":"pypi","requirements":"==2.0.0","direct":true,"kind":"development","optional":false},{"id":26087590981,"package_name":"sphinxcontrib-serializinghtml","ecosystem":"pypi","requirements":"==2.0.0","direct":true,"kind":"development","optional":false},{"id":26087590982,"package_name":"tomli","ecosystem":"pypi","requirements":"==2.4.0","direct":true,"kind":"development","optional":false},{"id":26087590983,"package_name":"tox","ecosystem":"pypi","requirements":"==4.34.1","direct":true,"kind":"development","optional":false},{"id":26087590984,"package_name":"tox-gh","ecosystem":"pypi","requirements":"==1.6.1","direct":true,"kind":"development","optional":false},{"id":26087590985,"package_name":"twine","ecosystem":"pypi","requirements":"==6.2.0","direct":true,"kind":"development","optional":false},{"id":26087590986,"package_name":"typing-extensions","ecosystem":"pypi","requirements":"==4.15.0","direct":true,"kind":"development","optional":false},{"id":26087590987,"package_name":"urllib3","ecosystem":"pypi","requirements":"==2.7.0","direct":true,"kind":"development","optional":false},{"id":26087590988,"package_name":"virtualenv","ecosystem":"pypi","requirements":"==20.36.1","direct":true,"kind":"development","optional":false},{"id":26087590990,"package_name":"zipp","ecosystem":"pypi","requirements":"==3.23.0","direct":true,"kind":"development","optional":false}]},{"ecosystem":"pypi","filepath":"dev-requirements.in","sha":null,"kind":"manifest","created_at":"2026-08-13T10:34:32.156Z","updated_at":"2026-08-13T10:34:32.156Z","repository_link":"https://github.com/nedbat/cog/blob/main/dev-requirements.in","dependencies":[{"id":26087590760,"package_name":"build","ecosystem":"pypi","requirements":"*","direct":true,"kind":"development","optional":false},{"id":26087590761,"package_name":"check-manifest","ecosystem":"pypi","requirements":"*","direct":true,"kind":"development","optional":false},{"id":26087590766,"package_name":"coverage","ecosystem":"pypi","requirements":"*","direct":true,"kind":"development","optional":false},{"id":26087590767,"package_name":"Sphinx","ecosystem":"pypi","requirements":"*","direct":true,"kind":"development","optional":false},{"id":26087590768,"package_name":"tox","ecosystem":"pypi","requirements":"*","direct":true,"kind":"development","optional":false},{"id":26087590769,"package_name":"tox-gh","ecosystem":"pypi","requirements":"*","direct":true,"kind":"development","optional":false},{"id":26087590849,"package_name":"twine","ecosystem":"pypi","requirements":"*","direct":true,"kind":"development","optional":false}]}],"score":21.444840932963608,"created_at":"2026-10-22T16:47:01.359Z","updated_at":"2026-10-23T20:02:56.232Z","avatar_url":"https://github.com/nedbat.png","language":"Python","codemeta":null,"publiccode":null,"project_url":"https://summary.ecosyste.ms/api/v1/projects/390079","html_url":"https://summary.ecosyste.ms/projects/390079"}