OpenArtifact

• Dependency-Update-Tool · 10/10

  update tool detected

• Code-Review · 1/10

  Found 3/30 approved changesets -- score normalized to 1

• Security-Policy · 10/10

  security policy file detected

• Maintained · 10/10

  30 commit(s) and 29 issue activity found in the last 90 days -- score normalized to 10

• Dangerous-Workflow · 10/10

  no dangerous workflow patterns detected

• Token-Permissions · 10/10

  GitHub workflow tokens follow principle of least privilege

• License · 10/10

  license file detected

• Binary-Artifacts · 10/10

  no binaries found in the repo

• CII-Best-Practices · 2/10

  badge detected: InProgress

• Pinned-Dependencies · 10/10

  all dependencies are pinned

• Vulnerabilities · 7/10

  3 existing vulnerabilities detected

• SAST · 9/10

  SAST tool detected but not run on all commits

• Packaging · 10/10

  packaging workflow detected

• Fuzzing · 10/10

  project is fuzzed

• Branch-Protection · 3/10

  branch protection is not maximal on development and all release branches

• Signed-Releases · 10/10

  5 out of the last 5 releases have a total of 10 signed artifacts.

• Contributors · 0/10

  project has 0 contributing companies or organizations -- score normalized to 0

• CI-Tests · 10/10

  30 out of 30 merged PRs checked by a CI test -- score normalized to 10

Repository commit 8cea36c51a98 · Scorecard v5.6.0

Checked 2026-10-29T03:12:11Z · Last successful fetch 2026-10-29T03:12:11Z · Value fetched 2026-10-29T03:12:11Z · Provider source