{"date":"2026-08-17","repo":{"name":"github.com/hasura/graphql-engine","commit":"0ac3ac209dadfd2b9c806b944a2bb4d83aafae85"},"scorecard":{"version":"v5.5.1-0.20260815060127-d1fab88f5463","commit":"d1fab88f54636ff366076edfc5c239f97b3c8e66"},"score":5.2,"checks":[{"name":"Code-Review","score":0,"reason":"Found 0/30 approved changesets -- score normalized to 0","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/d1fab88f54636ff366076edfc5c239f97b3c8e66/docs/checks.md#code-review"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/d1fab88f54636ff366076edfc5c239f97b3c8e66/docs/checks.md#dangerous-workflow"}},{"name":"Maintained","score":10,"reason":"30 commit(s) and 1 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/d1fab88f54636ff366076edfc5c239f97b3c8e66/docs/checks.md#maintained"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/d1fab88f54636ff366076edfc5c239f97b3c8e66/docs/checks.md#packaging"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/d1fab88f54636ff366076edfc5c239f97b3c8e66/docs/checks.md#cii-best-practices"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Warn: no topLevel permission defined: .github/workflows/hlint.yml:1","Warn: no topLevel permission defined: .github/workflows/lint.yml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/d1fab88f54636ff366076edfc5c239f97b3c8e66/docs/checks.md#token-permissions"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: SECURITY.md:1","Info: Found linked content: SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: SECURITY.md:1","Info: Found text in security policy: SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/d1fab88f54636ff366076edfc5c239f97b3c8e66/docs/checks.md#security-policy"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: Apache License 2.0: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/d1fab88f54636ff366076edfc5c239f97b3c8e66/docs/checks.md#license"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/d1fab88f54636ff366076edfc5c239f97b3c8e66/docs/checks.md#branch-protection"}},{"name":"Signed-Releases","score":0,"reason":"Project has not signed or included provenance with any releases.","details":["Warn: release artifact v2.50.0 not signed: https://api.github.com/repos/hasura/graphql-engine/releases/365864675","Warn: release artifact v2.45.8 not signed: https://api.github.com/repos/hasura/graphql-engine/releases/365837311","Warn: release artifact v2.49.5 not signed: https://api.github.com/repos/hasura/graphql-engine/releases/357029024","Warn: release artifact v2.45.6 not signed: https://api.github.com/repos/hasura/graphql-engine/releases/351837664","Warn: release artifact v2.49.4 not signed: https://api.github.com/repos/hasura/graphql-engine/releases/350656142","Warn: release artifact v2.50.0 does not have provenance: https://api.github.com/repos/hasura/graphql-engine/releases/365864675","Warn: release artifact v2.45.8 does not have provenance: https://api.github.com/repos/hasura/graphql-engine/releases/365837311","Warn: release artifact v2.49.5 does not have provenance: https://api.github.com/repos/hasura/graphql-engine/releases/357029024","Warn: release artifact v2.45.6 does not have provenance: https://api.github.com/repos/hasura/graphql-engine/releases/351837664","Warn: release artifact v2.49.4 does not have provenance: https://api.github.com/repos/hasura/graphql-engine/releases/350656142"],"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/d1fab88f54636ff366076edfc5c239f97b3c8e66/docs/checks.md#signed-releases"}},{"name":"SAST","score":0,"reason":"no SAST tool detected","details":["Warn: no pull requests merged into dev branch"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/d1fab88f54636ff366076edfc5c239f97b3c8e66/docs/checks.md#sast"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/d1fab88f54636ff366076edfc5c239f97b3c8e66/docs/checks.md#binary-artifacts"}},{"name":"Fuzzing","score":10,"reason":"project is fuzzed","details":["Info: HaskellPropertyBasedTesting integration found: server/lib/ekg-prometheus/test/State.hs:22","Info: HaskellPropertyBasedTesting integration found: server/lib/ekg-prometheus/test/State.hs:23","Info: HaskellPropertyBasedTesting integration found: server/lib/ekg-prometheus/test/State.hs:24","Info: HaskellPropertyBasedTesting integration found: server/lib/ekg-prometheus/test/State.hs:25","Info: HaskellPropertyBasedTesting integration found: server/lib/hasura-extras/src/Data/Text/NonEmpty.hs:22","Info: HaskellPropertyBasedTesting integration found: server/lib/hasura-extras/src/Data/URL/Template.hs:23","Info: HaskellPropertyBasedTesting integration found: server/src-lib/Hasura/Backends/Postgres/Connection/MonadTx.hs:50","Info: HaskellPropertyBasedTesting integration found: server/src-lib/Hasura/Backends/Postgres/Connection/MonadTx.hs:51","Info: HaskellPropertyBasedTesting integration found: server/src-lib/Hasura/Backends/Postgres/Connection/Settings.hs:60","Info: HaskellPropertyBasedTesting integration found: server/src-lib/Hasura/Backends/Postgres/Connection/Settings.hs:61","Info: HaskellPropertyBasedTesting integration found: server/src-test/Data/HashMap/Strict/ExtendedSpec.hs:9","Info: HaskellPropertyBasedTesting integration found: server/src-test/Data/Parser/JSONPathSpec.hs:10","Info: HaskellPropertyBasedTesting integration found: server/src-test/Data/Parser/TemplateSpec.hs:6","Info: HaskellPropertyBasedTesting integration found: server/src-test/Data/TrieSpec.hs:8","Info: HaskellPropertyBasedTesting integration found: server/src-test/Hasura/Authentication/SessionSpec.hs:7","Info: HaskellPropertyBasedTesting integration found: server/src-test/Hasura/Generator/Common.hs:28","Info: HaskellPropertyBasedTesting integration found: server/src-test/Hasura/GraphQL/NamespaceSpec.hs:13","Info: HaskellPropertyBasedTesting integration found: server/src-test/Hasura/QuickCheck/Instances.hs:38","Info: HaskellPropertyBasedTesting integration found: server/src-test/Hasura/RQL/IR/SelectSpec.hs:12","Info: HaskellPropertyBasedTesting integration found: server/src-test/Hasura/RQL/MetadataSpec.hs:36","Info: HaskellPropertyBasedTesting integration found: server/src-test/Hasura/RQL/Types/CommonSpec.hs:23","Info: HaskellPropertyBasedTesting integration found: server/src-test/Hasura/RQL/Types/CommonSpec.hs:24","Info: HaskellPropertyBasedTesting integration found: server/src-test/Hasura/RQL/Types/EndpointSpec.hs:15","Info: HaskellPropertyBasedTesting integration found: server/src-test/Hasura/RQL/Types/EndpointSpec.hs:16","Info: HaskellPropertyBasedTesting integration found: server/src-test/Hasura/RQL/Types/TableSpec.hs:19","Info: HaskellPropertyBasedTesting integration found: server/src-test/Hasura/RQL/WebhookTransformsSpec.hs:29","Info: HaskellPropertyBasedTesting integration found: server/src-test/Hasura/Server/Migrate/VersionSpec.hs:11","Info: HaskellPropertyBasedTesting integration found: server/src-test/Network/HTTP/Client/TransformableSpec.hs:5","Info: HaskellPropertyBasedTesting integration found: server/src-test/Test/Aeson/Utils.hs:29","Info: HaskellPropertyBasedTesting integration found: server/src-test/Test/QuickCheck/Extended.hs:18","Info: HaskellPropertyBasedTesting integration found: server/lib/ekg-prometheus/test/State.hs:22","Info: HaskellPropertyBasedTesting integration found: server/lib/ekg-prometheus/test/State.hs:23","Info: HaskellPropertyBasedTesting integration found: server/lib/ekg-prometheus/test/State.hs:24","Info: HaskellPropertyBasedTesting integration found: server/lib/ekg-prometheus/test/State.hs:25","Info: HaskellPropertyBasedTesting integration found: server/lib/hasura-extras/src/Data/Text/NonEmpty.hs:22","Info: HaskellPropertyBasedTesting integration found: server/lib/hasura-extras/src/Data/URL/Template.hs:23","Info: HaskellPropertyBasedTesting integration found: server/src-lib/Hasura/Backends/Postgres/Connection/MonadTx.hs:50","Info: HaskellPropertyBasedTesting integration found: server/src-lib/Hasura/Backends/Postgres/Connection/MonadTx.hs:51","Info: HaskellPropertyBasedTesting integration found: server/src-lib/Hasura/Backends/Postgres/Connection/Settings.hs:60","Info: HaskellPropertyBasedTesting integration found: server/src-lib/Hasura/Backends/Postgres/Connection/Settings.hs:61","Info: HaskellPropertyBasedTesting integration found: server/src-test/Data/HashMap/Strict/ExtendedSpec.hs:9","Info: HaskellPropertyBasedTesting integration found: server/src-test/Data/Parser/JSONPathSpec.hs:10","Info: HaskellPropertyBasedTesting integration found: server/src-test/Data/Parser/TemplateSpec.hs:6","Info: HaskellPropertyBasedTesting integration found: server/src-test/Data/TrieSpec.hs:8","Info: HaskellPropertyBasedTesting integration found: server/src-test/Hasura/Authentication/SessionSpec.hs:7","Info: HaskellPropertyBasedTesting integration found: server/src-test/Hasura/Generator/Common.hs:28","Info: HaskellPropertyBasedTesting integration found: server/src-test/Hasura/GraphQL/NamespaceSpec.hs:13","Info: HaskellPropertyBasedTesting integration found: server/src-test/Hasura/QuickCheck/Instances.hs:38","Info: HaskellPropertyBasedTesting integration found: server/src-test/Hasura/RQL/IR/SelectSpec.hs:12","Info: HaskellPropertyBasedTesting integration found: server/src-test/Hasura/RQL/MetadataSpec.hs:36","Info: HaskellPropertyBasedTesting integration found: server/src-test/Hasura/RQL/Types/CommonSpec.hs:23","Info: HaskellPropertyBasedTesting integration found: server/src-test/Hasura/RQL/Types/CommonSpec.hs:24","Info: HaskellPropertyBasedTesting integration found: server/src-test/Hasura/RQL/Types/EndpointSpec.hs:15","Info: HaskellPropertyBasedTesting integration found: server/src-test/Hasura/RQL/Types/EndpointSpec.hs:16","Info: HaskellPropertyBasedTesting integration found: server/src-test/Hasura/RQL/Types/TableSpec.hs:19","Info: HaskellPropertyBasedTesting integration found: server/src-test/Hasura/RQL/WebhookTransformsSpec.hs:29","Info: HaskellPropertyBasedTesting integration found: server/src-test/Hasura/Server/Migrate/VersionSpec.hs:11","Info: HaskellPropertyBasedTesting integration found: server/src-test/Network/HTTP/Client/TransformableSpec.hs:5","Info: HaskellPropertyBasedTesting integration found: server/src-test/Test/Aeson/Utils.hs:29","Info: HaskellPropertyBasedTesting integration found: server/src-test/Test/QuickCheck/Extended.hs:18"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/d1fab88f54636ff366076edfc5c239f97b3c8e66/docs/checks.md#fuzzing"}},{"name":"Pinned-Dependencies","score":1,"reason":"dependency not pinned by hash detected -- score normalized to 1","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/hlint.yml:19: update your workflow using https://app.stepsecurity.io/secureworkflow/hasura/graphql-engine/hlint.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/lint.yml:14: update your workflow using https://app.stepsecurity.io/secureworkflow/hasura/graphql-engine/lint.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/lint.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/hasura/graphql-engine/lint.yml/master?enable=pin","Warn: containerImage not pinned by hash: .circleci/cli-migrations-builder.dockerfile:1: pin your Docker image by updating ubuntu:16.04 to ubuntu:16.04@sha256:1f1a2d56de1d604801a9671f301190704c25d604a416f59e03c04f5c6ffee0d6","Warn: containerImage not pinned by hash: .circleci/postgres-12.0-alpine-postgis3/Dockerfile:3: pin your Docker image by updating circleci/postgres:12.0-alpine to circleci/postgres:12.0-alpine@sha256:80519fdcb0a38397912fba4f567051dae21ec20798865f63ef07ea5690bf67ac","Warn: containerImage not pinned by hash: .circleci/postgres-13.0-alpine-postgis3/Dockerfile:1: pin your Docker image by updating circleci/postgres:13.0-postgis to circleci/postgres:13.0-postgis@sha256:5f210377e2c4d20460c23acf7aa48bd70c40914ec1d9c25f33cfd8fa489f6a3a","Warn: containerImage not pinned by hash: cli/build/builder.dockerfile:1: pin your Docker image by updating golang:1.18-bullseye to golang:1.18-bullseye@sha256:2cf761b45e5e3f150e332e60275cd092fb50b05fff4feec0a2856a09f9fe6b2b","Warn: containerImage not pinned by hash: community/boilerplates/auth-servers/passportjs-jwt-roles/Dockerfile:1: pin your Docker image by updating node:24-alpine to node:24-alpine@sha256:d32cdf619f63fe0471182d08996dd516c6275bb5fd31ae06e55a570bd9e1ad43","Warn: containerImage not pinned by hash: community/boilerplates/auth-webhooks/python-flask/Dockerfile:1: pin your Docker image by updating python:3-alpine to python:3-alpine@sha256:05b2b8b732ecd268fee8727a369f936f022d1321b59befd13c30ede22769dcdc","Warn: containerImage not pinned by hash: community/boilerplates/observability/enterprise/examples/auth-hook/Dockerfile:1: pin your Docker image by updating denoland/deno to denoland/deno@sha256:b429777c3dcff34a6488f365a1537db1640b2d48379b60f5e6206be034472463","Warn: containerImage not pinned by hash: community/boilerplates/remote-schemas/zeit-now/nodejs/Dockerfile:1: pin your Docker image by updating node:8 to node:8@sha256:a681bf74805b80d03eb21a6c0ef168a976108a287a74167ab593fc953aac34df","Warn: containerImage not pinned by hash: community/boilerplates/remote-schemas/zeit-now/python/flask-graphene-sqlalchemy/Dockerfile:1: pin your Docker image by updating python:3.12-alpine to python:3.12-alpine@sha256:d09d15e60962ca365d1cd544a48773bac9d33f2fb1b00f2aa0deec78ade7dc31","Warn: containerImage not pinned by hash: dc-agents/Dockerfile-reference:1: pin your Docker image by updating node:24-alpine to node:24-alpine@sha256:d32cdf619f63fe0471182d08996dd516c6275bb5fd31ae06e55a570bd9e1ad43","Warn: containerImage not pinned by hash: dc-agents/Dockerfile-sqlite:1: pin your Docker image by updating node:24-alpine to node:24-alpine@sha256:d32cdf619f63fe0471182d08996dd516c6275bb5fd31ae06e55a570bd9e1ad43","Warn: containerImage not pinned by hash: dc-agents/reference/Dockerfile:1: pin your Docker image by updating node:24-alpine to node:24-alpine@sha256:d32cdf619f63fe0471182d08996dd516c6275bb5fd31ae06e55a570bd9e1ad43","Warn: containerImage not pinned by hash: dc-agents/sqlite/Dockerfile:1: pin your Docker image by updating node:24-alpine to node:24-alpine@sha256:d32cdf619f63fe0471182d08996dd516c6275bb5fd31ae06e55a570bd9e1ad43","Warn: containerImage not pinned by hash: docs/Dockerfile:3: pin your Docker image by updating node:24-alpine to node:24-alpine@sha256:d32cdf619f63fe0471182d08996dd516c6275bb5fd31ae06e55a570bd9e1ad43","Warn: containerImage not pinned by hash: packaging/cli-migrations/v2/Dockerfile:2","Warn: containerImage not pinned by hash: packaging/cli-migrations/v3/Dockerfile:2","Warn: containerImage not pinned by hash: packaging/dc-tests/Dockerfile:3","Warn: containerImage not pinned by hash: packaging/graphql-engine-base/ubi.dockerfile:4: pin your Docker image by updating registry.access.redhat.com/ubi10-minimal:10.2-1784094212 to registry.access.redhat.com/ubi10-minimal:10.2-1784094212@sha256:af74bce19b9ab6446362310c9d18ffb4671ac11b2a4d36263047d9f57a653d80","Warn: containerImage not pinned by hash: packaging/graphql-engine-base/ubi.dockerfile:16: pin your Docker image by updating registry.access.redhat.com/ubi10-minimal:10.2-1784094212 to registry.access.redhat.com/ubi10-minimal:10.2-1784094212@sha256:af74bce19b9ab6446362310c9d18ffb4671ac11b2a4d36263047d9f57a653d80","Warn: containerImage not pinned by hash: packaging/graphql-engine-base/ubuntu.dockerfile:1: pin your Docker image by updating ubuntu:noble-20260610 to ubuntu:noble-20260610@sha256:4fbb8e6a8395de5a7550b33509421a2bafbc0aab6c06ba2cef9ebffbc7092d90","Warn: containerImage not pinned by hash: packaging/graphql-engine/Dockerfile:2","Warn: containerImage not pinned by hash: v3/Dockerfile:2: pin your Docker image by updating rust:1.94.1 to rust:1.94.1@sha256:652612f07bfbbdfa3af34761c1e435094c00dde4a98036132fca28c7bb2b165c","Warn: containerImage not pinned by hash: v3/Dockerfile:32","Warn: containerImage not pinned by hash: v3/Dockerfile:44","Warn: containerImage not pinned by hash: v3/Dockerfile:62: pin your Docker image by updating ubuntu:jammy to ubuntu:jammy@sha256:2edbbc5dc405e9612ba3584ce95480277e3eb374407b5505fe26f17df77c7dbc","Warn: containerImage not pinned by hash: v3/custom-connector.Dockerfile:2: pin your Docker image by updating rust:1.94.1 to rust:1.94.1@sha256:652612f07bfbbdfa3af34761c1e435094c00dde4a98036132fca28c7bb2b165c","Warn: containerImage not pinned by hash: v3/custom-connector.Dockerfile:32","Warn: containerImage not pinned by hash: v3/custom-connector.Dockerfile:44","Warn: containerImage not pinned by hash: v3/custom-connector.Dockerfile:62: pin your Docker image by updating ubuntu:jammy to ubuntu:jammy@sha256:2edbbc5dc405e9612ba3584ce95480277e3eb374407b5505fe26f17df77c7dbc","Warn: containerImage not pinned by hash: v3/dev-auth-webhook.Dockerfile:2: pin your Docker image by updating rust:1.94.1 to rust:1.94.1@sha256:652612f07bfbbdfa3af34761c1e435094c00dde4a98036132fca28c7bb2b165c","Warn: containerImage not pinned by hash: v3/dev-auth-webhook.Dockerfile:12: pin your Docker image by updating debian:bookworm-slim to debian:bookworm-slim@sha256:abd67ffcfa541b485a3dff59865ab629aa048a6c613e639d36e7456b0b229241","Warn: containerImage not pinned by hash: v3/pre-ndc-request-plugin-example.Dockerfile:3: pin your Docker image by updating rust:1.94.1 to rust:1.94.1@sha256:652612f07bfbbdfa3af34761c1e435094c00dde4a98036132fca28c7bb2b165c","Warn: containerImage not pinned by hash: v3/pre-ndc-request-plugin-example.Dockerfile:13: pin your Docker image by updating debian:bookworm-slim to debian:bookworm-slim@sha256:abd67ffcfa541b485a3dff59865ab629aa048a6c613e639d36e7456b0b229241","Warn: containerImage not pinned by hash: v3/pre-ndc-response-plugin-example.Dockerfile:3: pin your Docker image by updating rust:1.94.1 to rust:1.94.1@sha256:652612f07bfbbdfa3af34761c1e435094c00dde4a98036132fca28c7bb2b165c","Warn: containerImage not pinned by hash: v3/pre-ndc-response-plugin-example.Dockerfile:13: pin your Docker image by updating debian:bookworm-slim to debian:bookworm-slim@sha256:abd67ffcfa541b485a3dff59865ab629aa048a6c613e639d36e7456b0b229241","Warn: containerImage not pinned by hash: v3/pre-parse-plugin-example.Dockerfile:3: pin your Docker image by updating rust:1.94.1 to rust:1.94.1@sha256:652612f07bfbbdfa3af34761c1e435094c00dde4a98036132fca28c7bb2b165c","Warn: containerImage not pinned by hash: v3/pre-parse-plugin-example.Dockerfile:13: pin your Docker image by updating debian:bookworm-slim to debian:bookworm-slim@sha256:abd67ffcfa541b485a3dff59865ab629aa048a6c613e639d36e7456b0b229241","Warn: npmCommand not pinned by hash: community/boilerplates/auth-servers/passportjs-jwt-roles/Dockerfile:4","Warn: pipCommand not pinned by hash: community/boilerplates/auth-webhooks/python-flask/Dockerfile:4","Warn: npmCommand not pinned by hash: community/boilerplates/remote-schemas/zeit-now/nodejs/Dockerfile:7","Warn: pipCommand not pinned by hash: community/boilerplates/remote-schemas/zeit-now/python/flask-graphene-sqlalchemy/Dockerfile:7","Warn: npmCommand not pinned by hash: dc-agents/scripts/update-api-types-deps.sh:22","Warn: pipCommand not pinned by hash: server/benchmarks/benchmark_sets/remote_schema/graphql_server/run_graphql_server.sh:5","Info:   0 out of   3 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of  37 containerImage dependencies pinned","Info:   5 out of   8 npmCommand dependencies pinned","Info:   0 out of   3 pipCommand dependencies pinned","Info:   2 out of   2 goCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/d1fab88f54636ff366076edfc5c239f97b3c8e66/docs/checks.md#pinned-dependencies"}}]}