openbooks

• Dangerous-Workflow · 10/10

  no dangerous workflow patterns detected

• Maintained · 0/10

  0 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0

• Binary-Artifacts · 10/10

  no binaries found in the repo

• Code-Review · 2/10

  Found 3/15 approved changesets -- score normalized to 2

• Token-Permissions · 0/10

  detected GitHub workflow tokens with excessive permissions

• CII-Best-Practices · 0/10

  no effort to earn an OpenSSF best practices badge detected

• Security-Policy · 0/10

  security policy file not detected

• Fuzzing · 0/10

  project is not fuzzed

• Packaging · Inconclusive

  packaging workflow not detected

• License · 10/10

  license file detected

• Signed-Releases · 0/10

  Project has not signed or included provenance with any releases.

• Branch-Protection · 3/10

  branch protection is not maximal on development and all release branches

• Pinned-Dependencies · 1/10

  dependency not pinned by hash detected -- score normalized to 1

• SAST · 0/10

  SAST tool is not run on all commits -- score normalized to 0

Repository commit ad12382c4c00 · Scorecard v5.6.0

Checked 2026-11-03T07:55:50Z · Last successful fetch 2026-11-03T07:55:50Z · Value fetched 2026-11-03T07:55:50Z · Provider source