https://github.com/russellhaering/goxmldsig
Score: 31.754203221357127
Last synced: about 15 hours ago
JSON representation
Repository metadata:
Pure Go implementation of XML Digital Signatures
- Host: GitHub
- URL: https://github.com/russellhaering/goxmldsig
- Owner: russellhaering
- License: apache-2.0
- Created: 2016-03-15T16:45:33.000Z (over 10 years ago)
- Default Branch: main
- Last Pushed: 2026-09-28T16:02:48.000Z (about 1 month ago)
- Last Synced: 2026-10-22T20:04:19.178Z (8 days ago)
- Language: Go
- Size: 329 KB
- Stars: 181
- Watchers: 13
- Forks: 147
- Open Issues: 49
-
Metadata Files:
- Readme: README.md
- License: LICENSE
- Security: SECURITY.md
Owner metadata:
- Name: Russell Haering
- Login: russellhaering
- Email:
- Kind: user
- Description:
- Website: http://russellhaering.com
- Location: Pacific Northwest
- Twitter: russell_h
- Company:
- Icon url: https://avatars.githubusercontent.com/u/81445?u=4c8090d6cbc4d3afc5bebbd7279d2660826ceab5&v=4
- Repositories: 73
- Last Synced at: 2023-04-16T21:02:13.486Z
- Profile URL: https://github.com/russellhaering
GitHub Events
Total
- Create event: 18
- Delete event: 23
- Fork event: 11
- Issue comment event: 22
- Issues event: 2
- Pull request event: 43
- Pull request review event: 1
- Push event: 11
- Release event: 1
- Watch event: 20
- Total: 152
Last Year
- Pull request event: 1
- Push event: 6
- Watch event: 2
- Total: 9
Committers metadata
Last synced: 8 days ago
Total Commits: 163
Total Committers: 32
Avg Commits per committer: 5.094
Development Distribution Score (DDS): 0.546
Commits in past year: 13
Committers in past year: 3
Avg Commits per committer in past year: 4.333
Development Distribution Score (DDS) in past year: 0.154
| Name | Commits | |
|---|---|---|
| Russell Haering | r****g@g****m | 74 |
| dependabot[bot] | 4****] | 22 |
| Phoebe Simon | p****n@g****m | 15 |
| Russell Haering | r****l@e****o | 7 |
| Andrew Stuart | a****2@g****m | 5 |
| Paul Fraley | p****l@s****m | 4 |
| Mark Sagi-Kazar | m****r@g****m | 4 |
| santosh653 | 7****3 | 3 |
| Adam Shannon | a****n@g****m | 2 |
| Agniva De Sarker | a****e@y****n | 2 |
| Patrick Boyd | p****4@g****m | 2 |
| SecureSAML | a****x@s****m | 2 |
| rowland | r****d@m****o | 2 |
| Mike Wilson | m****n@g****m | 1 |
| Toby Bristow | t****y@a****k | 1 |
| Aidan Steele | a****e@g****u | 1 |
| Andrew Pilloud | a****d@i****m | 1 |
| Arun Bhalla | a****n@l****m | 1 |
| Ayke van Laethem | a****m@g****m | 1 |
| Danikarik | b****2@g****m | 1 |
| David Illsley | d****d@i****g | 1 |
| Elwin Tamminga | e****a@u****l | 1 |
| Eric Chiang | e****c@o****y | 1 |
| Holger Koser | h****r@s****m | 1 |
| Jeremy Archer | o****e@f****m | 1 |
| Otto Bretz | 3****d | 1 |
| Paul Querna | p****a@o****m | 1 |
| Phu Kieu | p****u@j****v | 1 |
| Russell Haering | r****g@o****m | 1 |
| Russell Jones | r****s@g****m | 1 |
| and 2 more... | ||
Issue and Pull Request metadata
Last synced: 8 days ago
Total issues: 39
Total pull requests: 157
Average time to close issues: 8 months
Average time to close pull requests: 4 months
Total issue authors: 34
Total pull request authors: 47
Average comments per issue: 1.51
Average comments per pull request: 0.92
Merged pull request: 56
Bot issues: 0
Bot pull requests: 87
Past year issues: 1
Past year pull requests: 13
Past year average time to close issues: N/A
Past year average time to close pull requests: 7 days
Past year issue authors: 1
Past year pull request authors: 6
Past year average comments per issue: 1.0
Past year average comments per pull request: 0.38
Past year merged pull request: 2
Past year bot issues: 0
Past year bot pull requests: 7
Top Issue Authors
- markwallsgrove (2)
- nejcgorsic (2)
- Calpicow (2)
- adamdecaf (2)
- zveinn (2)
- toshok (1)
- caraarslan (1)
- arun251 (1)
- ericchiang (1)
- ShivaliBandi (1)
- rodrigorodriguescosta (1)
- danikarik (1)
- mrinalwahal (1)
- omercnet (1)
- joesiltberg (1)
Top Pull Request Authors
- dependabot[bot] (87)
- russellhaering (10)
- evtr (5)
- simonbrynych (3)
- pboyd04 (3)
- aodhan-domhnaill (2)
- phoebesimon (2)
- davrux (2)
- jupenur (2)
- otto-md (2)
- spspaul (2)
- adamdecaf (2)
- nicksnyder (1)
- sagikazarmark (1)
- russjones (1)
Top Issue Labels
Top Pull Request Labels
- dependencies (87)
- github_actions (66)
- go (21)
Package metadata
- Total packages: 12
- Total downloads: unknown
- Total docker downloads: 8,390,682,563
- Total dependent packages: 466 (may contain duplicates)
- Total dependent repositories: 1,514 (may contain duplicates)
- Total versions: 17
- Total advisories: 7
proxy.golang.org: github.com/russellhaering/goxmldsig
- Homepage: https://github.com/russellhaering/goxmldsig
- Documentation: https://pkg.go.dev/github.com/russellhaering/goxmldsig#section-documentation
- Licenses: Apache-2.0
- Latest release: v1.6.1 (published 3 months ago)
- Last Synced: 2026-10-29T13:23:00.328Z (about 21 hours ago)
- Versions: 8
- Dependent Packages: 466
- Dependent Repositories: 1,514
- Docker Downloads: 8,390,682,563
-
Rankings:
- Docker downloads count: 0.037%
- Dependent packages count: 0.193%
- Dependent repos count: 0.206%
- Average: 1.423%
- Forks count: 2.506%
- Stargazers count: 4.171%
-
Advisories:
- validateSignature Loop Variable Capture Signature Bypass in goxmldsig
- github.com/russellhaering/gosaml2 is vulnerable to NULL Pointer Dereference
- goxmldsig vulnerable to crash on nil-pointer dereference caused by sending malformed XML signatures
- Critical security issues in XML encoding in github.com/dexidp/dex
- Duplicate Advisory: gosaml2 is vulnerable to NULL Pointer Dereference from malformed XML signatures
- Signature Validation Bypass
- github.com/russellhaering/goxmldsig vulnerable to Signature Validation Bypass
proxy.golang.org: github.com/russellhaering/goxmldsig/v2
- Homepage: https://github.com/russellhaering/goxmldsig
- Documentation: https://pkg.go.dev/github.com/russellhaering/goxmldsig/v2#section-documentation
- Licenses: Apache-2.0
- Latest release: (published 8 days ago)
- Last Synced: 2026-10-22T20:07:58.575Z (8 days ago)
- Versions: 0
- Dependent Packages: 0
- Dependent Repositories: 0
-
Rankings:
- Dependent packages count: 4.829%
- Average: 4.992%
- Dependent repos count: 5.154%
proxy.golang.org: github.com/mohammed-alhashem/goxmldsig
- Homepage: https://github.com/russellhaering/goxmldsig
- Status: removed
- Documentation: https://pkg.go.dev/github.com/mohammed-alhashem/goxmldsig#section-documentation
- Licenses: Apache-2.0
- Latest release: (published 8 months ago)
- Last Synced: 2026-10-22T20:07:57.271Z (8 days ago)
- Versions: 0
- Dependent Packages: 0
- Dependent Repositories: 0
-
Rankings:
- Dependent packages count: 6.678%
- Average: 6.901%
- Dependent repos count: 7.125%
ubuntu-24.04: golang-github-russellhaering-goxmldsig
- Homepage: https://github.com/russellhaering/goxmldsig
- Status: removed
- Licenses: apache-2.0
- Latest release: 1.2.0-1 (published 9 months ago)
- Last Synced: 2026-08-13T23:26:12.340Z (3 months ago)
- Versions: 1
- Dependent Packages: 0
- Dependent Repositories: 0
-
Rankings:
- Dependent repos count: 0.0%
- Dependent packages count: 0.0%
- Average: 100%
debian-11: golang-github-russellhaering-goxmldsig
- Homepage: https://github.com/russellhaering/goxmldsig
- Documentation: https://packages.debian.org/bullseye/golang-github-russellhaering-goxmldsig
- Licenses: apache-2.0
- Latest release: 1.1.0-1+deb11u1 (published 9 months ago)
- Last Synced: 2026-09-29T22:28:31.204Z (about 1 month ago)
- Versions: 1
- Dependent Packages: 0
- Dependent Repositories: 0
-
Rankings:
- Dependent repos count: 0.0%
- Dependent packages count: 0.0%
- Average: 100%
ubuntu-24.10: golang-github-russellhaering-goxmldsig
- Homepage: https://github.com/russellhaering/goxmldsig
- Licenses: apache-2.0
- Latest release: 1.2.0-1 (published 9 months ago)
- Last Synced: 2026-03-08T16:51:47.307Z (8 months ago)
- Versions: 1
- Dependent Packages: 0
- Dependent Repositories: 0
-
Rankings:
- Dependent repos count: 0.0%
- Dependent packages count: 0.0%
- Average: 100%
ubuntu-22.04: golang-github-russellhaering-goxmldsig
- Homepage: https://github.com/russellhaering/goxmldsig
- Licenses: apache-2.0
- Latest release: 1.1.1-1 (published 9 months ago)
- Last Synced: 2026-09-29T07:28:35.546Z (about 1 month ago)
- Versions: 1
- Dependent Packages: 0
- Dependent Repositories: 0
-
Rankings:
- Dependent repos count: 0.0%
- Dependent packages count: 0.0%
- Average: 100%
debian-12: golang-github-russellhaering-goxmldsig
- Homepage: https://github.com/russellhaering/goxmldsig
- Documentation: https://packages.debian.org/bookworm/golang-github-russellhaering-goxmldsig
- Licenses: apache-2.0
- Latest release: 1.2.0-1 (published 9 months ago)
- Last Synced: 2026-03-12T21:07:29.116Z (8 months ago)
- Versions: 1
- Dependent Packages: 0
- Dependent Repositories: 0
-
Rankings:
- Dependent repos count: 0.0%
- Dependent packages count: 0.0%
- Average: 100%
ubuntu-23.04: golang-github-russellhaering-goxmldsig
- Homepage: https://github.com/russellhaering/goxmldsig
- Licenses: apache-2.0
- Latest release: 1.2.0-1 (published 9 months ago)
- Last Synced: 2026-09-29T22:29:04.338Z (about 1 month ago)
- Versions: 1
- Dependent Packages: 0
- Dependent Repositories: 0
-
Rankings:
- Dependent repos count: 0.0%
- Dependent packages count: 0.0%
- Average: 100%
ubuntu-20.04: golang-github-russellhaering-goxmldsig
- Homepage: https://github.com/russellhaering/goxmldsig
- Licenses: apache-2.0
- Latest release: 0.0~git20180430.7acd5e4-1 (published 9 months ago)
- Last Synced: 2026-09-29T22:28:49.434Z (about 1 month ago)
- Versions: 1
- Dependent Packages: 0
- Dependent Repositories: 0
-
Rankings:
- Dependent repos count: 0.0%
- Dependent packages count: 0.0%
- Average: 100%
ubuntu-23.10: golang-github-russellhaering-goxmldsig
- Homepage: https://github.com/russellhaering/goxmldsig
- Licenses: apache-2.0
- Latest release: 1.2.0-1 (published 9 months ago)
- Last Synced: 2026-03-10T05:03:32.302Z (8 months ago)
- Versions: 1
- Dependent Packages: 0
- Dependent Repositories: 0
-
Rankings:
- Dependent repos count: 0.0%
- Dependent packages count: 0.0%
- Average: 100%
debian-10: golang-github-russellhaering-goxmldsig
- Homepage: https://github.com/russellhaering/goxmldsig
- Documentation: https://packages.debian.org/buster/golang-github-russellhaering-goxmldsig
- Licenses: apache-2.0
- Latest release: 0.0~git20170911.b7efc62-1+deb10u1 (published 9 months ago)
- Last Synced: 2026-08-09T11:54:51.018Z (3 months ago)
- Versions: 1
- Dependent Packages: 0
- Dependent Repositories: 0
-
Rankings:
- Dependent repos count: 0.0%
- Dependent packages count: 0.0%
- Average: 100%
Dependencies
- github.com/beevik/etree v1.1.0
- github.com/creack/pty v1.1.9
- github.com/davecgh/go-spew v1.1.0
- github.com/jonboulle/clockwork v0.2.0
- github.com/jonboulle/clockwork v0.2.2
- github.com/kr/pretty v0.1.0
- github.com/kr/pretty v0.2.1
- github.com/kr/pretty v0.3.0
- github.com/kr/pty v1.1.1
- github.com/kr/text v0.1.0
- github.com/kr/text v0.2.0
- github.com/pkg/diff v0.0.0-20210226163009-20ebb0f2a09e
- github.com/pmezard/go-difflib v1.0.0
- github.com/rogpeppe/go-internal v1.6.1
- github.com/rogpeppe/go-internal v1.8.0
- github.com/stretchr/objx v0.1.0
- github.com/stretchr/testify v1.6.1
- gopkg.in/check.v1 v0.0.0-20161208181325-20d25e280405
- gopkg.in/check.v1 v1.0.0-20180628173108-788fd7840127
- gopkg.in/check.v1 v1.0.0-20201130134442-10cb98267c6c
- gopkg.in/errgo.v2 v2.1.0
- gopkg.in/yaml.v3 v3.0.0-20200313102051-9f266ea9e77c
- gopkg.in/yaml.v3 v3.0.0-20210107192922-496545a6307b
- actions/checkout v2 composite
- actions/setup-go v2 composite
- github.com/beevik/etree v1.1.0
- github.com/jonboulle/clockwork v0.2.2
- github.com/kr/pretty v0.3.0
- github.com/rogpeppe/go-internal v1.8.0
- github.com/stretchr/testify v1.6.1
- gopkg.in/check.v1 v1.0.0-20201130134442-10cb98267c6c
- gopkg.in/yaml.v3 v3.0.0-20210107192922-496545a6307b
- actions/checkout 8ade135a41bc03ea155e62e844d188df1ea18608 composite
- actions/upload-artifact 5d5d22a31266ced268874388b861e4b58bb5c2f3 composite
- github/codeql-action/upload-sarif cdcdbb579706841c47f7063dda365e292e5cad7a composite
- ossf/scorecard-action 0864cf19026789058feabb7e87baa5f140aac736 composite