{"date":"2026-11-08T22:38:33Z","repo":{"name":"github.com/safedep/vet","commit":"2eb6e8e0c85744411bf116d57a00eae400eff811"},"scorecard":{"version":"v5.6.0","commit":"61e84743356275f6ffca23b1b2f2cb945e19eb96"},"score":7.4,"checks":[{"name":"Dependency-Update-Tool","score":10,"reason":"update tool detected","details":["Info: detected update tool: Dependabot: .github/dependabot.yml:1"],"documentation":{"url":"https://github.com/ossf/scorecard/blob/61e84743356275f6ffca23b1b2f2cb945e19eb96/docs/checks.md#dependency-update-tool","short":"Determines if the project uses a dependency update tool."}},{"name":"Code-Review","score":1,"reason":"Found 3/22 approved changesets -- score normalized to 1","details":null,"documentation":{"url":"https://github.com/ossf/scorecard/blob/61e84743356275f6ffca23b1b2f2cb945e19eb96/docs/checks.md#code-review","short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged."}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"url":"https://github.com/ossf/scorecard/blob/61e84743356275f6ffca23b1b2f2cb945e19eb96/docs/checks.md#dangerous-workflow","short":"Determines if the project's GitHub Action workflows avoid dangerous patterns."}},{"name":"Maintained","score":10,"reason":"30 commit(s) and 5 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"url":"https://github.com/ossf/scorecard/blob/61e84743356275f6ffca23b1b2f2cb945e19eb96/docs/checks.md#maintained","short":"Determines if the project is \"actively maintained\"."}},{"name":"Token-Permissions","score":10,"reason":"GitHub workflow tokens follow principle of least privilege","details":["Info: jobLevel 'contents' permission set to 'read': .github/workflows/action-test.yml:135","Info: jobLevel 'actions' permission set to 'read': .github/workflows/codeql.yml:31","Info: jobLevel 'contents' permission set to 'read': .github/workflows/codeql.yml:32","Warn: jobLevel 'contents' permission set to 'write': .github/workflows/release-edge.yml:228","Warn: jobLevel 'contents' permission set to 'write': .github/workflows/release-edge.yml:40","Info: jobLevel 'pull-requests' permission set to 'read': .github/workflows/release-edge.yml:41","Info: jobLevel 'contents' permission set to 'read': .github/workflows/release-edge.yml:144","Info: topLevel 'contents' permission set to 'read': .github/workflows/acceptance.yml:34","Info: topLevel 'contents' permission set to 'read': .github/workflows/action-test.yml:22","Info: topLevel 'contents' permission set to 'read': .github/workflows/ci.yml:18","Info: topLevel 'contents' permission set to 'read': .github/workflows/codeql.yml:22","Info: topLevel 'contents' permission set to 'read': .github/workflows/dependency-review.yml:11","Info: topLevel 'contents' permission set to 'read': .github/workflows/false-positive.yml:35","Info: topLevel 'contents' permission set to 'read': .github/workflows/golangci-lint.yml:8","Info: topLevel 'pull-requests' permission set to 'read': .github/workflows/golangci-lint.yml:9","Info: topLevel 'contents' permission set to 'read': .github/workflows/mdm.yml:17","Info: topLevel 'contents' permission set to 'read': .github/workflows/release-edge.yml:22","Info: topLevel 'contents' permission set to 'read': .github/workflows/release-snapshot.yml:21","Info: topLevel permissions set to 'read-all': .github/workflows/scorecard.yml:18","Info: topLevel 'contents' permission set to 'read': .github/workflows/secret_scan.yml:9"],"documentation":{"url":"https://github.com/ossf/scorecard/blob/61e84743356275f6ffca23b1b2f2cb945e19eb96/docs/checks.md#token-permissions","short":"Determines if the project's workflows follow the principle of least privilege."}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"url":"https://github.com/ossf/scorecard/blob/61e84743356275f6ffca23b1b2f2cb945e19eb96/docs/checks.md#binary-artifacts","short":"Determines if the project has generated executable (binary) artifacts in the source repository."}},{"name":"Pinned-Dependencies","score":9,"reason":"dependency not pinned by hash detected -- score normalized to 9","details":["Warn: goCommand not pinned by hash: .github/workflows/ci.yml:37","Info:  36 out of  36 GitHub-owned GitHubAction dependencies pinned","Info:   7 out of   7 third-party GitHubAction dependencies pinned","Info:   1 out of   2 goCommand dependencies pinned","Info:   2 out of   2 containerImage dependencies pinned"],"documentation":{"url":"https://github.com/ossf/scorecard/blob/61e84743356275f6ffca23b1b2f2cb945e19eb96/docs/checks.md#pinned-dependencies","short":"Determines if the project has declared and pinned the dependencies of its build process."}},{"name":"CII-Best-Practices","score":2,"reason":"badge detected: InProgress","details":null,"documentation":{"url":"https://github.com/ossf/scorecard/blob/61e84743356275f6ffca23b1b2f2cb945e19eb96/docs/checks.md#cii-best-practices","short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge."}},{"name":"SAST","score":10,"reason":"SAST tool is run on all commits","details":["Info: SAST configuration detected: CodeQL","Info: all commits (30) are checked with a SAST tool"],"documentation":{"url":"https://github.com/ossf/scorecard/blob/61e84743356275f6ffca23b1b2f2cb945e19eb96/docs/checks.md#sast","short":"Determines if the project uses static code analysis."}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: Apache License 2.0: LICENSE:0"],"documentation":{"url":"https://github.com/ossf/scorecard/blob/61e84743356275f6ffca23b1b2f2cb945e19eb96/docs/checks.md#license","short":"Determines if the project has defined a license."}},{"name":"Vulnerabilities","score":0,"reason":"156 existing vulnerabilities detected","details":["Warn: Project is vulnerable to: https://osv.dev/GO-2026-6888","Warn: Project is vulnerable to: https://osv.dev/GO-2026-4514","Warn: Project is vulnerable to: https://osv.dev/GO-2026-5841","Warn: Project is vulnerable to: https://osv.dev/GO-2026-6865","Warn: Project is vulnerable to: https://osv.dev/GO-2026-4858","Warn: Project is vulnerable to: https://osv.dev/GO-2026-4859","Warn: Project is vulnerable to: https://osv.dev/GO-2026-6255","Warn: Project is vulnerable to: https://osv.dev/GO-2026-6256","Warn: Project is vulnerable to: https://osv.dev/GO-2026-5932","Warn: Project is vulnerable to: https://osv.dev/GO-2026-6860","Warn: Project is vulnerable to: https://osv.dev/GO-2026-6866","Warn: Project is vulnerable to: https://osv.dev/GO-2026-5970","Warn: Project is vulnerable to: https://osv.dev/GO-2026-6629","Warn: Project is vulnerable to: https://osv.dev/GHSA-3pjw-73gf-8qr5","Warn: Project is vulnerable to: https://osv.dev/GHSA-5gvw-p9qm-jgwh","Warn: Project is vulnerable to: https://osv.dev/GHSA-5jmj-h7xm-6q6v","Warn: Project is vulnerable to: https://osv.dev/GHSA-cxp5-3px4-pw24","Warn: Project is vulnerable to: https://osv.dev/GHSA-gx83-3vf8-gh7j","Warn: Project is vulnerable to: https://osv.dev/GHSA-hgj6-7826-r7m5","Warn: Project is vulnerable to: https://osv.dev/GHSA-j3rv-43j4-c7qm","Warn: Project is vulnerable to: https://osv.dev/GHSA-q4xh-88c3-wmh7","Warn: Project is vulnerable to: https://osv.dev/GHSA-rmj7-2vxq-3g9f","Warn: Project is vulnerable to: https://osv.dev/GHSA-vvgp-rfg2-7rr6","Warn: Project is vulnerable to: https://osv.dev/GHSA-wjgm-6hv5-3cvf","Warn: Project is vulnerable to: https://osv.dev/GHSA-wv8q-qhhj-9h54","Warn: Project is vulnerable to: https://osv.dev/GHSA-r5fr-rjxr-66jc","Warn: Project is vulnerable to: https://osv.dev/GHSA-xxjr-mmjv-4gpg","Warn: Project is vulnerable to: https://osv.dev/GO-2022-0493","Warn: Project is vulnerable to: https://osv.dev/GO-2026-5024","Warn: Project is vulnerable to: https://osv.dev/PYSEC-2021-439","Warn: Project is vulnerable to: https://osv.dev/PYSEC-2022-1","Warn: Project is vulnerable to: https://osv.dev/PYSEC-2022-19","Warn: Project is vulnerable to: https://osv.dev/PYSEC-2022-190","Warn: Project is vulnerable to: https://osv.dev/PYSEC-2022-191","Warn: Project is vulnerable to: https://osv.dev/PYSEC-2022-2","Warn: Project is vulnerable to: https://osv.dev/PYSEC-2022-20","Warn: Project is vulnerable to: https://osv.dev/PYSEC-2022-3","Warn: Project is vulnerable to: https://osv.dev/PYSEC-2026-1297","Warn: Project is vulnerable to: https://osv.dev/PYSEC-2026-3717","Warn: Project is vulnerable to: https://osv.dev/PYSEC-2026-4035","Warn: Project is vulnerable to: https://osv.dev/GHSA-3h9f-r86x-qvjx","Warn: Project is vulnerable to: https://osv.dev/GHSA-6w2r-r2m5-xq5w","Warn: Project is vulnerable to: https://osv.dev/GHSA-7xr5-9hcq-chf9","Warn: Project is vulnerable to: https://osv.dev/GHSA-8cjm-8mp7-r2xf","Warn: Project is vulnerable to: https://osv.dev/GHSA-8qcx-xf44-272x","Warn: Project is vulnerable to: https://osv.dev/GHSA-8x94-hmjh-97hq","Warn: Project is vulnerable to: https://osv.dev/GHSA-923m-gv2p-w5qp","Warn: Project is vulnerable to: https://osv.dev/GHSA-crhf-3pfg-w68w","Warn: Project is vulnerable to: https://osv.dev/GHSA-frmv-pr5f-9mcr","Warn: Project is vulnerable to: https://osv.dev/GHSA-h7pc-vwp9-298g","Warn: Project is vulnerable to: https://osv.dev/GHSA-qw25-v68c-qjf3","Warn: Project is vulnerable to: https://osv.dev/GHSA-3pq3-5fj3-cg6v","Warn: Project is vulnerable to: https://osv.dev/GHSA-44g4-m2mj-wpvx","Warn: Project is vulnerable to: https://osv.dev/GHSA-4hqw-qxg8-jxx2","Warn: Project is vulnerable to: https://osv.dev/GHSA-542g-h47m-68v8","Warn: Project is vulnerable to: https://osv.dev/GHSA-9fr6-4gfg-395g","Warn: Project is vulnerable to: https://osv.dev/GHSA-c29m-xwm3-cm6r","Warn: Project is vulnerable to: https://osv.dev/GHSA-j8rh-479h-cp32","Warn: Project is vulnerable to: https://osv.dev/GHSA-m8m8-qj5v-23w3","Warn: Project is vulnerable to: https://osv.dev/GHSA-mghh-pgcx-3jjj","Warn: Project is vulnerable to: https://osv.dev/GHSA-r4gj-5m52-g5wh","Warn: Project is vulnerable to: https://osv.dev/GHSA-vh66-26gq-q6x8","Warn: Project is vulnerable to: https://osv.dev/GHSA-x97p-jq2g-jp4f","Warn: Project is vulnerable to: https://osv.dev/GHSA-6j4f-fj2g-mc7p","Warn: Project is vulnerable to: https://osv.dev/GHSA-q2hr-2g5m-vwhr","Warn: Project is vulnerable to: https://osv.dev/GHSA-qhr7-859c-m2p7","Warn: Project is vulnerable to: https://osv.dev/GHSA-8r9p-f939-6h3c","Warn: Project is vulnerable to: https://osv.dev/GHSA-mrwp-f3q8-3g9p","Warn: Project is vulnerable to: https://osv.dev/GHSA-q3jh-wrc6-jgq8","Warn: Project is vulnerable to: https://osv.dev/GHSA-g3hv-75wg-m249","Warn: Project is vulnerable to: https://osv.dev/GHSA-hrvq-x7jp-36xv","Warn: Project is vulnerable to: https://osv.dev/GHSA-w3vv-58gj-gw77","Warn: Project is vulnerable to: https://osv.dev/GHSA-7w5x-hrqm-74c2","Warn: Project is vulnerable to: https://osv.dev/GHSA-r4xh-jqrq-34v2","Warn: Project is vulnerable to: https://osv.dev/PYSEC-2023-108","Warn: Project is vulnerable to: https://osv.dev/PYSEC-2022-42986","Warn: Project is vulnerable to: https://osv.dev/PYSEC-2023-135","Warn: Project is vulnerable to: https://osv.dev/PYSEC-2024-230","Warn: Project is vulnerable to: https://osv.dev/PYSEC-2026-4320","Warn: Project is vulnerable to: https://osv.dev/PYSEC-2021-63","Warn: Project is vulnerable to: https://osv.dev/PYSEC-2023-11","Warn: Project is vulnerable to: https://osv.dev/PYSEC-2023-254","Warn: Project is vulnerable to: https://osv.dev/PYSEC-2026-1283","Warn: Project is vulnerable to: https://osv.dev/PYSEC-2026-1285","Warn: Project is vulnerable to: https://osv.dev/PYSEC-2026-2141","Warn: Project is vulnerable to: https://osv.dev/PYSEC-2026-35","Warn: Project is vulnerable to: https://osv.dev/PYSEC-2026-3553","Warn: Project is vulnerable to: https://osv.dev/PYSEC-2026-3554","Warn: Project is vulnerable to: https://osv.dev/PYSEC-2026-800","Warn: Project is vulnerable to: https://osv.dev/GHSA-537c-gmf6-5ccf","Warn: Project is vulnerable to: https://osv.dev/GHSA-5cpq-8wj7-hf2v","Warn: Project is vulnerable to: https://osv.dev/GHSA-jm77-qphf-c4w8","Warn: Project is vulnerable to: https://osv.dev/GHSA-v8gr-m533-ghj9","Warn: Project is vulnerable to: https://osv.dev/PYSEC-2026-1374","Warn: Project is vulnerable to: https://osv.dev/PYSEC-2026-1375","Warn: Project is vulnerable to: https://osv.dev/GHSA-69hj-f68j-2879","Warn: Project is vulnerable to: https://osv.dev/PYSEC-2021-16","Warn: Project is vulnerable to: https://osv.dev/PYSEC-2026-3444","Warn: Project is vulnerable to: https://osv.dev/PYSEC-2024-60","Warn: Project is vulnerable to: https://osv.dev/PYSEC-2026-215","Warn: Project is vulnerable to: https://osv.dev/PYSEC-2022-288","Warn: Project is vulnerable to: https://osv.dev/PYSEC-2020-62","Warn: Project is vulnerable to: https://osv.dev/PYSEC-2021-19","Warn: Project is vulnerable to: https://osv.dev/PYSEC-2021-852","Warn: Project is vulnerable to: https://osv.dev/PYSEC-2022-230","Warn: Project is vulnerable to: https://osv.dev/PYSEC-2026-87","Warn: Project is vulnerable to: https://osv.dev/GHSA-6p56-wp2h-9hxr","Warn: Project is vulnerable to: https://osv.dev/GHSA-fpfv-jqm9-f5jm","Warn: Project is vulnerable to: https://osv.dev/PYSEC-2020-92","Warn: Project is vulnerable to: https://osv.dev/PYSEC-2026-2268","Warn: Project is vulnerable to: https://osv.dev/PYSEC-2023-74","Warn: Project is vulnerable to: https://osv.dev/PYSEC-2026-1872","Warn: Project is vulnerable to: https://osv.dev/PYSEC-2026-1873","Warn: Project is vulnerable to: https://osv.dev/PYSEC-2026-2275","Warn: Project is vulnerable to: https://osv.dev/PYSEC-2020-108","Warn: Project is vulnerable to: https://osv.dev/PYSEC-2024-110","Warn: Project is vulnerable to: https://osv.dev/PYSEC-2023-102","Warn: Project is vulnerable to: https://osv.dev/PYSEC-2023-114","Warn: Project is vulnerable to: https://osv.dev/PYSEC-2022-43167","Warn: Project is vulnerable to: https://osv.dev/PYSEC-2023-206","Warn: Project is vulnerable to: https://osv.dev/PYSEC-2026-3071","Warn: Project is vulnerable to: https://osv.dev/PYSEC-2026-3072","Warn: Project is vulnerable to: https://osv.dev/PYSEC-2026-4170","Warn: Project is vulnerable to: https://osv.dev/PYSEC-2026-4171","Warn: Project is vulnerable to: https://osv.dev/PYSEC-2026-1976","Warn: Project is vulnerable to: https://osv.dev/PYSEC-2021-108","Warn: Project is vulnerable to: https://osv.dev/PYSEC-2023-192","Warn: Project is vulnerable to: https://osv.dev/PYSEC-2023-212","Warn: Project is vulnerable to: https://osv.dev/PYSEC-2026-141","Warn: Project is vulnerable to: https://osv.dev/PYSEC-2026-1994","Warn: Project is vulnerable to: https://osv.dev/PYSEC-2026-1995","Warn: Project is vulnerable to: https://osv.dev/PYSEC-2026-1996","Warn: Project is vulnerable to: https://osv.dev/PYSEC-2026-1998","Warn: Project is vulnerable to: https://osv.dev/PYSEC-2026-1999","Warn: Project is vulnerable to: https://osv.dev/PYSEC-2026-4177","Warn: Project is vulnerable to: https://osv.dev/PYSEC-2024-187","Warn: Project is vulnerable to: https://osv.dev/PYSEC-2026-2009","Warn: Project is vulnerable to: https://osv.dev/PYSEC-2026-4011","Warn: Project is vulnerable to: https://osv.dev/PYSEC-2026-4012","Warn: Project is vulnerable to: https://osv.dev/PYSEC-2026-4013","Warn: Project is vulnerable to: https://osv.dev/PYSEC-2026-4014","Warn: Project is vulnerable to: https://osv.dev/GHSA-394h-qwmc-48pf","Warn: Project is vulnerable to: https://osv.dev/GHSA-43mp-35q3-x3fq","Warn: Project is vulnerable to: https://osv.dev/GHSA-494p-63j8-28p3","Warn: Project is vulnerable to: https://osv.dev/GHSA-558c-9hv2-4prj","Warn: Project is vulnerable to: https://osv.dev/GHSA-5vjq-rrrf-7h2q","Warn: Project is vulnerable to: https://osv.dev/GHSA-6w3r-xr62-4xcp","Warn: Project is vulnerable to: https://osv.dev/GHSA-c947-3pg5-gm8q","Warn: Project is vulnerable to: https://osv.dev/GHSA-c978-59m8-c77v","Warn: Project is vulnerable to: https://osv.dev/GHSA-cw65-gx24-rc82","Warn: Project is vulnerable to: https://osv.dev/GHSA-cx28-75q4-x26q","Warn: Project is vulnerable to: https://osv.dev/GHSA-fc2g-4w5p-6whm","Warn: Project is vulnerable to: https://osv.dev/GHSA-hhxq-47xx-j5xx","Warn: Project is vulnerable to: https://osv.dev/GHSA-qmx5-4p3x-wvqf","Warn: Project is vulnerable to: https://osv.dev/GHSA-vxj4-q4g9-crj7","Warn: Project is vulnerable to: https://osv.dev/PYSEC-2026-2074"],"documentation":{"url":"https://github.com/ossf/scorecard/blob/61e84743356275f6ffca23b1b2f2cb945e19eb96/docs/checks.md#vulnerabilities","short":"Determines if the project has open, known unfixed vulnerabilities."}},{"name":"Fuzzing","score":10,"reason":"project is fuzzed","details":["Info: GoBuiltInFuzzer integration found: internal/plugins/controls/agentconfig/shell_test.go:144","Info: GoBuiltInFuzzer integration found: internal/plugins/internal/hiddencode/dynamic_cgo_test.go:149"],"documentation":{"url":"https://github.com/ossf/scorecard/blob/61e84743356275f6ffca23b1b2f2cb945e19eb96/docs/checks.md#fuzzing","short":"Determines if the project uses fuzzing."}},{"name":"Packaging","score":10,"reason":"packaging workflow detected","details":["Info: Project packages its releases by way of GitHub Actions.: .github/workflows/release-edge.yml:139"],"documentation":{"url":"https://github.com/ossf/scorecard/blob/61e84743356275f6ffca23b1b2f2cb945e19eb96/docs/checks.md#packaging","short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall."}},{"name":"Signed-Releases","score":0,"reason":"Project has not signed or included provenance with any releases.","details":["Warn: release artifact v2.0.0-alpha.20261104152357 not signed: https://api.github.com/repos/safedep/vet/releases/434113933","Warn: release artifact v2.0.0-alpha.20261104150130 not signed: https://api.github.com/repos/safedep/vet/releases/434083309","Warn: release artifact v2.0.0-alpha.20261023182239 not signed: https://api.github.com/repos/safedep/vet/releases/422181739","Warn: release artifact v2.0.0-alpha.20261014124335 not signed: https://api.github.com/repos/safedep/vet/releases/412713647","Warn: release artifact v2.0.0-alpha.20261012091446 not signed: https://api.github.com/repos/safedep/vet/releases/410426137","Warn: release artifact v2.0.0-alpha.20261104152357 does not have provenance: https://api.github.com/repos/safedep/vet/releases/434113933","Warn: release artifact v2.0.0-alpha.20261104150130 does not have provenance: https://api.github.com/repos/safedep/vet/releases/434083309","Warn: release artifact v2.0.0-alpha.20261023182239 does not have provenance: https://api.github.com/repos/safedep/vet/releases/422181739","Warn: release artifact v2.0.0-alpha.20261014124335 does not have provenance: https://api.github.com/repos/safedep/vet/releases/412713647","Warn: release artifact v2.0.0-alpha.20261012091446 does not have provenance: https://api.github.com/repos/safedep/vet/releases/410426137"],"documentation":{"url":"https://github.com/ossf/scorecard/blob/61e84743356275f6ffca23b1b2f2cb945e19eb96/docs/checks.md#signed-releases","short":"Determines if the project cryptographically signs release artifacts."}},{"name":"Branch-Protection","score":7,"reason":"branch protection is not maximal on development and all release branches","details":["Info: 'allow deletion' disabled on branch 'v2'","Info: 'allow deletion' disabled on branch 'main'","Info: 'force pushes' disabled on branch 'v2'","Info: 'force pushes' disabled on branch 'main'","Warn: 'branch protection settings apply to administrators' is disabled on branch 'v2'","Warn: 'branch protection settings apply to administrators' is disabled on branch 'main'","Info: 'stale review dismissal' is required to merge on branch 'v2'","Info: 'stale review dismissal' is required to merge on branch 'main'","Warn: required approving review count is 1 on branch 'v2'","Warn: required approving review count is 1 on branch 'main'","Warn: codeowners review is not required on branch 'v2'","Warn: codeowners review is not required on branch 'main'","Info: 'last push approval' is required to merge on branch 'v2'","Info: 'last push approval' is required to merge on branch 'main'","Warn: no status checks found to merge onto branch 'v2'","Info: status check found to merge onto on branch 'main'","Info: PRs are required in order to make changes on branch 'v2'","Info: PRs are required in order to make changes on branch 'main'"],"documentation":{"url":"https://github.com/ossf/scorecard/blob/61e84743356275f6ffca23b1b2f2cb945e19eb96/docs/checks.md#branch-protection","short":"Determines if the default and release branches are protected with GitHub's branch protection settings."}},{"name":"Security-Policy","score":9,"reason":"security policy file detected","details":["Info: security policy file detected: github.com/safedep/.github/SECURITY.md:1","Info: Found linked content: github.com/safedep/.github/SECURITY.md:1","Warn: One or no descriptive hints of disclosure, vulnerability, and/or timelines in security policy","Info: Found text in security policy: github.com/safedep/.github/SECURITY.md:1"],"documentation":{"url":"https://github.com/ossf/scorecard/blob/61e84743356275f6ffca23b1b2f2cb945e19eb96/docs/checks.md#security-policy","short":"Determines if the project has published a security policy."}},{"name":"CI-Tests","score":10,"reason":"22 out of 22 merged PRs checked by a CI test -- score normalized to 10","details":null,"documentation":{"url":"https://github.com/ossf/scorecard/blob/61e84743356275f6ffca23b1b2f2cb945e19eb96/docs/checks.md#ci-tests","short":"Determines if the project runs tests before pull requests are merged."}},{"name":"Contributors","score":10,"reason":"project has 17 contributing companies or organizations","details":["Info: found contributions from: 3SLabs, EddieHubCommunity, OWASP, all-stackers, anthropics, boringtools, code-bloodead, code-squads, community-snyk, k9exp, layer5io, null-open-security-community, ravenmail, safedep, safedep @nexb @litwizlabs-wizstudio-v1, tldrrun, ubercoolsec"],"documentation":{"url":"https://github.com/ossf/scorecard/blob/61e84743356275f6ffca23b1b2f2cb945e19eb96/docs/checks.md#contributors","short":"Determines if the project has a set of contributors from multiple organizations (e.g., companies)."}}]}