OpenBoxes

• Maintained · 10/10

  30 commit(s) and 23 issue activity found in the last 90 days -- score normalized to 10

• Code-Review · 10/10

  all changesets reviewed

• Security-Policy · 10/10

  security policy file detected

• Dangerous-Workflow · 10/10

  no dangerous workflow patterns detected

• Token-Permissions · 0/10

  detected GitHub workflow tokens with excessive permissions

• CII-Best-Practices · 2/10

  badge detected: InProgress

• Binary-Artifacts · 8/10

  binaries present in source code

• License · 10/10

  license file detected

• Pinned-Dependencies · 2/10

  dependency not pinned by hash detected -- score normalized to 2

• Branch-Protection · Inconclusive

  internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md

• Packaging · 10/10

  packaging workflow detected

• Signed-Releases · 0/10

  Project has not signed or included provenance with any releases.

• Fuzzing · 0/10

  project is not fuzzed

• SAST · 0/10

  SAST tool is not run on all commits -- score normalized to 0

Repository commit c89028fcde96 · Scorecard v5.6.0

Checked 2026-10-31T03:25:05Z · Last successful fetch 2026-10-31T03:25:05Z · Value fetched 2026-10-31T03:25:05Z · Provider source