{"id":160871,"name":null,"description":"Spatial alignment of single cell transcriptomic data. ","url":"https://github.com/broadinstitute/tangram","last_synced_at":"2025-09-09T18:14:36.308Z","repository":{"id":39744628,"uuid":"289328207","full_name":"broadinstitute/Tangram","owner":"broadinstitute","description":"Spatial alignment of single cell transcriptomic data. ","archived":false,"fork":false,"pushed_at":"2025-07-01T21:31:14.000Z","size":139219,"stargazers_count":320,"open_issues_count":58,"forks_count":60,"subscribers_count":12,"default_branch":"master","last_synced_at":"2025-09-05T00:23:53.729Z","etag":null,"topics":["computational-biology","gene-expression","scrna-seq","snrna-seq","spatial-data","visium"],"latest_commit_sha":null,"homepage":"","language":"Jupyter Notebook","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"bsd-3-clause","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/broadinstitute.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE.md","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null}},"created_at":"2020-08-21T17:33:31.000Z","updated_at":"2025-09-03T11:13:07.000Z","dependencies_parsed_at":"2022-07-09T19:46:05.795Z","dependency_job_id":"ae6b0093-80ab-4223-95fe-2c3f9d0841d7","html_url":"https://github.com/broadinstitute/Tangram","commit_stats":{"total_commits":270,"total_committers":18,"mean_commits":15.0,"dds":"0.44074074074074077","last_synced_commit":"d537ff936a1a26445a0f196c714d100d10e3e5ea"},"previous_names":[],"tags_count":10,"template":false,"template_full_name":null,"purl":"pkg:github/broadinstitute/Tangram","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/broadinstitute%2FTangram","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/broadinstitute%2FTangram/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/broadinstitute%2FTangram/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/broadinstitute%2FTangram/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/broadinstitute","download_url":"https://codeload.github.com/broadinstitute/Tangram/tar.gz/refs/heads/master","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/broadinstitute%2FTangram/sbom","scorecard":{"id":254241,"data":{"date":"2025-08-11","repo":{"name":"github.com/broadinstitute/Tangram","commit":"4c68995a418f41dc8caef567598c4d9b47781a13"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":3.2,"checks":[{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Maintained","score":8,"reason":"9 commit(s) and 1 issue activity found in the last 90 days -- score normalized to 8","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Code-Review","score":0,"reason":"Found 1/27 approved changesets -- score normalized to 0","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Warn: no topLevel permission defined: .github/workflows/release.yml:1","Warn: no topLevel permission defined: .github/workflows/test_workflow.yml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE.md:0","Info: FSF or OSI recognized license: BSD 3-Clause \"New\" or \"Revised\" License: LICENSE.md:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Branch-Protection","score":0,"reason":"branch protection not enabled on development/release branches","details":["Warn: branch protection not enabled for branch 'master'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Security-Policy","score":0,"reason":"security policy file not detected","details":["Warn: no security policy file detected","Warn: no security file to analyze","Warn: no security file to analyze","Warn: no security file to analyze"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Vulnerabilities","score":0,"reason":"16 existing vulnerabilities detected","details":["Warn: Project is vulnerable to: GHSA-6p56-wp2h-9hxr","Warn: Project is vulnerable to: GHSA-fpfv-jqm9-f5jm","Warn: Project is vulnerable to: PYSEC-2020-107 / GHSA-jjw5-xxj6-pcv5","Warn: Project is vulnerable to: PYSEC-2024-110 / GHSA-jw8x-6495-233v","Warn: Project is vulnerable to: PYSEC-2020-108","Warn: Project is vulnerable to: PYSEC-2023-102","Warn: Project is vulnerable to: PYSEC-2023-114","Warn: Project is vulnerable to: GHSA-3749-ghw9-m3mg","Warn: Project is vulnerable to: PYSEC-2022-43015 / GHSA-47fc-vmwq-366v","Warn: Project is vulnerable to: PYSEC-2025-41 / GHSA-53q9-r3pm-6pq6","Warn: Project is vulnerable to: PYSEC-2024-252 / GHSA-5pcm-hx3q-hm94","Warn: Project is vulnerable to: GHSA-887c-mr87-cxwp","Warn: Project is vulnerable to: PYSEC-2024-251 / GHSA-pg7h-5qx3-wjr3","Warn: Project is vulnerable to: PYSEC-2024-250","Warn: Project is vulnerable to: PYSEC-2024-259","Warn: Project is vulnerable to: PYSEC-2017-74"],"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/broadinstitute/Tangram/release.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/broadinstitute/Tangram/release.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test_workflow.yml:12: update your workflow using https://app.stepsecurity.io/secureworkflow/broadinstitute/Tangram/test_workflow.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test_workflow.yml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/broadinstitute/Tangram/test_workflow.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test_workflow.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/broadinstitute/Tangram/test_workflow.yml/master?enable=pin","Warn: pipCommand not pinned by hash: .github/workflows/release.yml:20","Warn: pipCommand not pinned by hash: .github/workflows/release.yml:21","Info:   0 out of   4 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of   1 third-party GitHubAction dependencies pinned","Info:   0 out of   2 pipCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 4 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-17T09:13:55.855Z","repository_id":39744628,"created_at":"2025-08-17T09:13:55.855Z","updated_at":"2025-08-17T09:13:55.855Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":274340596,"owners_count":25267294,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","status":"online","status_checked_at":"2025-09-09T02:00:10.223Z","response_time":80,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"owner":{"login":"broadinstitute","name":"Broad Institute","uuid":"393552","kind":"organization","description":"Broad Institute of MIT and Harvard","email":null,"website":"http://www.broadinstitute.org/","location":"Cambridge, MA","twitter":"broadinstitute","company":null,"icon_url":"https://avatars.githubusercontent.com/u/393552?v=4","repositories_count":1083,"last_synced_at":"2023-04-09T09:48:11.262Z","metadata":{"has_sponsors_listing":false},"html_url":"https://github.com/broadinstitute","funding_links":[],"total_stars":null,"followers":null,"following":null,"created_at":"2022-11-02T16:23:28.278Z","updated_at":"2023-04-09T09:48:11.836Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/broadinstitute","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/broadinstitute/repositories"},"packages":[{"id":11709619,"name":"github.com/broadinstitute/Tangram","ecosystem":"go","description":null,"homepage":null,"licenses":"bsd-3-clause","normalized_licenses":["BSD-3-Clause"],"repository_url":"https://github.com/broadinstitute/Tangram","keywords_array":[],"namespace":null,"versions_count":2,"first_release_published_at":"2021-01-06T16:11:00.000Z","latest_release_published_at":"2021-01-31T16:39:56.000Z","latest_release_number":"v0.2.1","last_synced_at":"2025-09-05T00:37:09.242Z","created_at":"2025-05-30T10:33:46.753Z","updated_at":"2025-09-05T16:42:17.335Z","registry_url":"https://pkg.go.dev/github.com/broadinstitute/Tangram","install_command":"go get github.com/broadinstitute/Tangram","documentation_url":"https://pkg.go.dev/github.com/broadinstitute/Tangram#section-documentation","metadata":{},"repo_metadata":{"id":39744628,"uuid":"289328207","full_name":"broadinstitute/Tangram","owner":"broadinstitute","description":"Spatial alignment of single cell transcriptomic data. ","archived":false,"fork":false,"pushed_at":"2025-07-01T21:31:14.000Z","size":139219,"stargazers_count":320,"open_issues_count":58,"forks_count":60,"subscribers_count":12,"default_branch":"master","last_synced_at":"2025-09-05T00:23:53.729Z","etag":null,"topics":["computational-biology","gene-expression","scrna-seq","snrna-seq","spatial-data","visium"],"latest_commit_sha":null,"homepage":"","language":"Jupyter Notebook","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"bsd-3-clause","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/broadinstitute.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE.md","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null}},"created_at":"2020-08-21T17:33:31.000Z","updated_at":"2025-09-03T11:13:07.000Z","dependencies_parsed_at":"2022-07-09T19:46:05.795Z","dependency_job_id":"ae6b0093-80ab-4223-95fe-2c3f9d0841d7","html_url":"https://github.com/broadinstitute/Tangram","commit_stats":{"total_commits":270,"total_committers":18,"mean_commits":15.0,"dds":"0.44074074074074077","last_synced_commit":"d537ff936a1a26445a0f196c714d100d10e3e5ea"},"previous_names":[],"tags_count":10,"template":false,"template_full_name":null,"purl":"pkg:github/broadinstitute/Tangram","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/broadinstitute%2FTangram","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/broadinstitute%2FTangram/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/broadinstitute%2FTangram/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/broadinstitute%2FTangram/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/broadinstitute","download_url":"https://codeload.github.com/broadinstitute/Tangram/tar.gz/refs/heads/master","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/broadinstitute%2FTangram/sbom","scorecard":{"id":254241,"data":{"date":"2025-08-11","repo":{"name":"github.com/broadinstitute/Tangram","commit":"4c68995a418f41dc8caef567598c4d9b47781a13"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":3.2,"checks":[{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Maintained","score":8,"reason":"9 commit(s) and 1 issue activity found in the last 90 days -- score normalized to 8","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Code-Review","score":0,"reason":"Found 1/27 approved changesets -- score normalized to 0","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Warn: no topLevel permission defined: .github/workflows/release.yml:1","Warn: no topLevel permission defined: .github/workflows/test_workflow.yml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE.md:0","Info: FSF or OSI recognized license: BSD 3-Clause \"New\" or \"Revised\" License: LICENSE.md:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Branch-Protection","score":0,"reason":"branch protection not enabled on development/release branches","details":["Warn: branch protection not enabled for branch 'master'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Security-Policy","score":0,"reason":"security policy file not detected","details":["Warn: no security policy file detected","Warn: no security file to analyze","Warn: no security file to analyze","Warn: no security file to analyze"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Vulnerabilities","score":0,"reason":"16 existing vulnerabilities detected","details":["Warn: Project is vulnerable to: GHSA-6p56-wp2h-9hxr","Warn: Project is vulnerable to: GHSA-fpfv-jqm9-f5jm","Warn: Project is vulnerable to: PYSEC-2020-107 / GHSA-jjw5-xxj6-pcv5","Warn: Project is vulnerable to: PYSEC-2024-110 / GHSA-jw8x-6495-233v","Warn: Project is vulnerable to: PYSEC-2020-108","Warn: Project is vulnerable to: PYSEC-2023-102","Warn: Project is vulnerable to: PYSEC-2023-114","Warn: Project is vulnerable to: GHSA-3749-ghw9-m3mg","Warn: Project is vulnerable to: PYSEC-2022-43015 / GHSA-47fc-vmwq-366v","Warn: Project is vulnerable to: PYSEC-2025-41 / GHSA-53q9-r3pm-6pq6","Warn: Project is vulnerable to: PYSEC-2024-252 / GHSA-5pcm-hx3q-hm94","Warn: Project is vulnerable to: GHSA-887c-mr87-cxwp","Warn: Project is vulnerable to: PYSEC-2024-251 / GHSA-pg7h-5qx3-wjr3","Warn: Project is vulnerable to: PYSEC-2024-250","Warn: Project is vulnerable to: PYSEC-2024-259","Warn: Project is vulnerable to: PYSEC-2017-74"],"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/broadinstitute/Tangram/release.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/broadinstitute/Tangram/release.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test_workflow.yml:12: update your workflow using https://app.stepsecurity.io/secureworkflow/broadinstitute/Tangram/test_workflow.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test_workflow.yml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/broadinstitute/Tangram/test_workflow.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test_workflow.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/broadinstitute/Tangram/test_workflow.yml/master?enable=pin","Warn: pipCommand not pinned by hash: .github/workflows/release.yml:20","Warn: pipCommand not pinned by hash: .github/workflows/release.yml:21","Info:   0 out of   4 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of   1 third-party GitHubAction dependencies pinned","Info:   0 out of   2 pipCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 4 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-17T09:13:55.855Z","repository_id":39744628,"created_at":"2025-08-17T09:13:55.855Z","updated_at":"2025-08-17T09:13:55.855Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":273713607,"owners_count":25154613,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","status":"online","status_checked_at":"2025-09-05T02:00:09.113Z","response_time":402,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"broadinstitute","name":"Broad Institute","uuid":"393552","kind":"organization","description":"Broad Institute of MIT and Harvard","email":null,"website":"http://www.broadinstitute.org/","location":"Cambridge, MA","twitter":"broadinstitute","company":null,"icon_url":"https://avatars.githubusercontent.com/u/393552?v=4","repositories_count":1083,"last_synced_at":"2023-04-09T09:48:11.262Z","metadata":{"has_sponsors_listing":false},"html_url":"https://github.com/broadinstitute","funding_links":[],"total_stars":null,"followers":null,"following":null,"created_at":"2022-11-02T16:23:28.278Z","updated_at":"2023-04-09T09:48:11.836Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/broadinstitute","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/broadinstitute/repositories"},"tags":[{"name":"1.0.4","sha":"d537ff936a1a26445a0f196c714d100d10e3e5ea","kind":"commit","published_at":"2023-02-08T23:59:54.000Z","download_url":"https://codeload.github.com/broadinstitute/Tangram/tar.gz/1.0.4","html_url":"https://github.com/broadinstitute/Tangram/releases/tag/1.0.4","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/broadinstitute/Tangram@1.0.4","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/broadinstitute%2FTangram/tags/1.0.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/broadinstitute%2FTangram/tags/1.0.4/manifests"},{"name":"1.0.3","sha":"5026048e8d057f1f54ec26fa9115c693a4caf09d","kind":"commit","published_at":"2022-06-17T20:08:31.000Z","download_url":"https://codeload.github.com/broadinstitute/Tangram/tar.gz/1.0.3","html_url":"https://github.com/broadinstitute/Tangram/releases/tag/1.0.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/broadinstitute/Tangram@1.0.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/broadinstitute%2FTangram/tags/1.0.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/broadinstitute%2FTangram/tags/1.0.3/manifests"},{"name":"1.0.2","sha":"727013886310e7de7990a0d79d77c8ee0e729ce1","kind":"commit","published_at":"2021-12-03T08:34:25.000Z","download_url":"https://codeload.github.com/broadinstitute/Tangram/tar.gz/1.0.2","html_url":"https://github.com/broadinstitute/Tangram/releases/tag/1.0.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/broadinstitute/Tangram@1.0.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/broadinstitute%2FTangram/tags/1.0.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/broadinstitute%2FTangram/tags/1.0.2/manifests"},{"name":"1.0.1","sha":"82646d0267a5d00fb298284b84e913d6cd1607a9","kind":"commit","published_at":"2021-11-11T04:06:38.000Z","download_url":"https://codeload.github.com/broadinstitute/Tangram/tar.gz/1.0.1","html_url":"https://github.com/broadinstitute/Tangram/releases/tag/1.0.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/broadinstitute/Tangram@1.0.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/broadinstitute%2FTangram/tags/1.0.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/broadinstitute%2FTangram/tags/1.0.1/manifests"},{"name":"1.0.0","sha":"80caba61b6a83b12ca7c851321ce84f4cf11ab56","kind":"commit","published_at":"2021-08-30T15:59:50.000Z","download_url":"https://codeload.github.com/broadinstitute/Tangram/tar.gz/1.0.0","html_url":"https://github.com/broadinstitute/Tangram/releases/tag/1.0.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/broadinstitute/Tangram@1.0.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/broadinstitute%2FTangram/tags/1.0.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/broadinstitute%2FTangram/tags/1.0.0/manifests"},{"name":"0.4.0","sha":"9305f4e27338b49eff2f8909a2358ce8a39af314","kind":"commit","published_at":"2021-06-21T20:45:37.000Z","download_url":"https://codeload.github.com/broadinstitute/Tangram/tar.gz/0.4.0","html_url":"https://github.com/broadinstitute/Tangram/releases/tag/0.4.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/broadinstitute/Tangram@0.4.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/broadinstitute%2FTangram/tags/0.4.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/broadinstitute%2FTangram/tags/0.4.0/manifests"},{"name":"0.3.0","sha":"909d70b04ec57b4edaf11bb55b7f44df6c6c227d","kind":"commit","published_at":"2021-03-09T14:04:40.000Z","download_url":"https://codeload.github.com/broadinstitute/Tangram/tar.gz/0.3.0","html_url":"https://github.com/broadinstitute/Tangram/releases/tag/0.3.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/broadinstitute/Tangram@0.3.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/broadinstitute%2FTangram/tags/0.3.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/broadinstitute%2FTangram/tags/0.3.0/manifests"},{"name":"0.2.1","sha":"bcfbfb3822ed5a306ad04be0f12ef68ef1d512e7","kind":"commit","published_at":"2021-01-31T16:39:56.000Z","download_url":"https://codeload.github.com/broadinstitute/Tangram/tar.gz/0.2.1","html_url":"https://github.com/broadinstitute/Tangram/releases/tag/0.2.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/broadinstitute/Tangram@0.2.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/broadinstitute%2FTangram/tags/0.2.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/broadinstitute%2FTangram/tags/0.2.1/manifests"},{"name":"v0.2.1","sha":"bcfbfb3822ed5a306ad04be0f12ef68ef1d512e7","kind":"commit","published_at":"2021-01-31T16:39:56.000Z","download_url":"https://codeload.github.com/broadinstitute/Tangram/tar.gz/v0.2.1","html_url":"https://github.com/broadinstitute/Tangram/releases/tag/v0.2.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/broadinstitute/Tangram@v0.2.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/broadinstitute%2FTangram/tags/v0.2.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/broadinstitute%2FTangram/tags/v0.2.1/manifests"},{"name":"v0.2.0","sha":"640a177e2f2e06e751a36a326ea22f33ed4329d0","kind":"commit","published_at":"2021-01-06T16:11:00.000Z","download_url":"https://codeload.github.com/broadinstitute/Tangram/tar.gz/v0.2.0","html_url":"https://github.com/broadinstitute/Tangram/releases/tag/v0.2.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/broadinstitute/Tangram@v0.2.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/broadinstitute%2FTangram/tags/v0.2.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/broadinstitute%2FTangram/tags/v0.2.0/manifests"}]},"repo_metadata_updated_at":"2025-09-05T16:42:17.334Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":5.784814001734242,"dependent_packages_count":5.420815499828766,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":5.602814750781504},"purl":"pkg:golang/github.com/broadinstitute/%21tangram","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/go/github.com/broadinstitute/Tangram","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/go/github.com/broadinstitute/Tangram","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/go/github.com/broadinstitute/Tangram/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2025-09-05T05:01:48.975Z","issues_count":95,"pull_requests_count":36,"avg_time_to_close_issue":10083540.93478261,"avg_time_to_close_pull_request":1045462.7666666667,"issues_closed_count":46,"pull_requests_closed_count":30,"pull_request_authors_count":10,"issue_authors_count":77,"avg_comments_per_issue":2.1157894736842104,"avg_comments_per_pull_request":0.05555555555555555,"merged_pull_requests_count":25,"bot_issues_count":0,"bot_pull_requests_count":0,"past_year_issues_count":10,"past_year_pull_requests_count":3,"past_year_avg_time_to_close_issue":null,"past_year_avg_time_to_close_pull_request":10244780.0,"past_year_issues_closed_count":0,"past_year_pull_requests_closed_count":1,"past_year_pull_request_authors_count":2,"past_year_issue_authors_count":9,"past_year_avg_comments_per_issue":0.4,"past_year_avg_comments_per_pull_request":0.0,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":0,"past_year_merged_pull_requests_count":1,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/broadinstitute%2FTangram/issues","maintainers":[{"login":"ziqlu0722","count":23,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ziqlu0722"},{"login":"lewlin","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/lewlin"},{"login":"gaddamshreya","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gaddamshreya"}],"active_maintainers":[]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fbroadinstitute%2FTangram/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fbroadinstitute%2FTangram/version_numbers","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fbroadinstitute%2FTangram/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fbroadinstitute%2FTangram/related_packages","maintainers":[],"registry":{"name":"proxy.golang.org","url":"https://proxy.golang.org","ecosystem":"go","default":true,"packages_count":1954770,"maintainers_count":0,"namespaces_count":741920,"keywords_count":109374,"github":"golang","metadata":{"funded_packages_count":49379},"icon_url":"https://github.com/golang.png","created_at":"2022-04-04T15:19:22.939Z","updated_at":"2025-09-09T06:45:13.065Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/namespaces"}},{"id":2939301,"name":"tangram-sc","ecosystem":"pypi","description":"Spatial alignment of single cell transcriptomic data.","homepage":"https://github.com/broadinstitute/Tangram","licenses":"bsd-3-clause","normalized_licenses":["BSD-3-Clause"],"repository_url":"https://github.com/broadinstitute/Tangram","keywords_array":[],"namespace":null,"versions_count":9,"first_release_published_at":"2021-01-19T03:20:45.000Z","latest_release_published_at":"2023-02-09T00:01:38.000Z","latest_release_number":"1.0.4","last_synced_at":"2025-09-04T10:21:16.383Z","created_at":"2022-04-10T12:46:37.273Z","updated_at":"2025-09-05T16:42:18.183Z","registry_url":"https://pypi.org/project/tangram-sc/","install_command":"pip install tangram-sc --index-url https://pypi.org/simple","documentation_url":"https://tangram-sc.readthedocs.io/","metadata":{"funding":null,"documentation":null,"classifiers":["Operating System :: MacOS","Programming Language :: Python :: 3.8"],"normalized_name":"tangram-sc","project_status":null},"repo_metadata":{"id":39744628,"uuid":"289328207","full_name":"broadinstitute/Tangram","owner":"broadinstitute","description":"Spatial alignment of single cell transcriptomic data. ","archived":false,"fork":false,"pushed_at":"2025-07-01T21:31:14.000Z","size":139219,"stargazers_count":320,"open_issues_count":58,"forks_count":60,"subscribers_count":12,"default_branch":"master","last_synced_at":"2025-09-05T00:23:53.729Z","etag":null,"topics":["computational-biology","gene-expression","scrna-seq","snrna-seq","spatial-data","visium"],"latest_commit_sha":null,"homepage":"","language":"Jupyter Notebook","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"bsd-3-clause","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/broadinstitute.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE.md","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null}},"created_at":"2020-08-21T17:33:31.000Z","updated_at":"2025-09-03T11:13:07.000Z","dependencies_parsed_at":"2022-07-09T19:46:05.795Z","dependency_job_id":"ae6b0093-80ab-4223-95fe-2c3f9d0841d7","html_url":"https://github.com/broadinstitute/Tangram","commit_stats":{"total_commits":270,"total_committers":18,"mean_commits":15.0,"dds":"0.44074074074074077","last_synced_commit":"d537ff936a1a26445a0f196c714d100d10e3e5ea"},"previous_names":[],"tags_count":10,"template":false,"template_full_name":null,"purl":"pkg:github/broadinstitute/Tangram","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/broadinstitute%2FTangram","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/broadinstitute%2FTangram/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/broadinstitute%2FTangram/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/broadinstitute%2FTangram/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/broadinstitute","download_url":"https://codeload.github.com/broadinstitute/Tangram/tar.gz/refs/heads/master","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/broadinstitute%2FTangram/sbom","scorecard":{"id":254241,"data":{"date":"2025-08-11","repo":{"name":"github.com/broadinstitute/Tangram","commit":"4c68995a418f41dc8caef567598c4d9b47781a13"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":3.2,"checks":[{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Maintained","score":8,"reason":"9 commit(s) and 1 issue activity found in the last 90 days -- score normalized to 8","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Code-Review","score":0,"reason":"Found 1/27 approved changesets -- score normalized to 0","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Warn: no topLevel permission defined: .github/workflows/release.yml:1","Warn: no topLevel permission defined: .github/workflows/test_workflow.yml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE.md:0","Info: FSF or OSI recognized license: BSD 3-Clause \"New\" or \"Revised\" License: LICENSE.md:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Branch-Protection","score":0,"reason":"branch protection not enabled on development/release branches","details":["Warn: branch protection not enabled for branch 'master'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Security-Policy","score":0,"reason":"security policy file not detected","details":["Warn: no security policy file detected","Warn: no security file to analyze","Warn: no security file to analyze","Warn: no security file to analyze"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Vulnerabilities","score":0,"reason":"16 existing vulnerabilities detected","details":["Warn: Project is vulnerable to: GHSA-6p56-wp2h-9hxr","Warn: Project is vulnerable to: GHSA-fpfv-jqm9-f5jm","Warn: Project is vulnerable to: PYSEC-2020-107 / GHSA-jjw5-xxj6-pcv5","Warn: Project is vulnerable to: PYSEC-2024-110 / GHSA-jw8x-6495-233v","Warn: Project is vulnerable to: PYSEC-2020-108","Warn: Project is vulnerable to: PYSEC-2023-102","Warn: Project is vulnerable to: PYSEC-2023-114","Warn: Project is vulnerable to: GHSA-3749-ghw9-m3mg","Warn: Project is vulnerable to: PYSEC-2022-43015 / GHSA-47fc-vmwq-366v","Warn: Project is vulnerable to: PYSEC-2025-41 / GHSA-53q9-r3pm-6pq6","Warn: Project is vulnerable to: PYSEC-2024-252 / GHSA-5pcm-hx3q-hm94","Warn: Project is vulnerable to: GHSA-887c-mr87-cxwp","Warn: Project is vulnerable to: PYSEC-2024-251 / GHSA-pg7h-5qx3-wjr3","Warn: Project is vulnerable to: PYSEC-2024-250","Warn: Project is vulnerable to: PYSEC-2024-259","Warn: Project is vulnerable to: PYSEC-2017-74"],"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/broadinstitute/Tangram/release.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/broadinstitute/Tangram/release.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test_workflow.yml:12: update your workflow using https://app.stepsecurity.io/secureworkflow/broadinstitute/Tangram/test_workflow.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test_workflow.yml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/broadinstitute/Tangram/test_workflow.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test_workflow.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/broadinstitute/Tangram/test_workflow.yml/master?enable=pin","Warn: pipCommand not pinned by hash: .github/workflows/release.yml:20","Warn: pipCommand not pinned by hash: .github/workflows/release.yml:21","Info:   0 out of   4 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of   1 third-party GitHubAction dependencies pinned","Info:   0 out of   2 pipCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 4 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-17T09:13:55.855Z","repository_id":39744628,"created_at":"2025-08-17T09:13:55.855Z","updated_at":"2025-08-17T09:13:55.855Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":273713607,"owners_count":25154613,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","status":"online","status_checked_at":"2025-09-05T02:00:09.113Z","response_time":402,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"broadinstitute","name":"Broad Institute","uuid":"393552","kind":"organization","description":"Broad Institute of MIT and Harvard","email":null,"website":"http://www.broadinstitute.org/","location":"Cambridge, MA","twitter":"broadinstitute","company":null,"icon_url":"https://avatars.githubusercontent.com/u/393552?v=4","repositories_count":1083,"last_synced_at":"2023-04-09T09:48:11.262Z","metadata":{"has_sponsors_listing":false},"html_url":"https://github.com/broadinstitute","funding_links":[],"total_stars":null,"followers":null,"following":null,"created_at":"2022-11-02T16:23:28.278Z","updated_at":"2023-04-09T09:48:11.836Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/broadinstitute","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/broadinstitute/repositories"},"tags":[{"name":"1.0.4","sha":"d537ff936a1a26445a0f196c714d100d10e3e5ea","kind":"commit","published_at":"2023-02-08T23:59:54.000Z","download_url":"https://codeload.github.com/broadinstitute/Tangram/tar.gz/1.0.4","html_url":"https://github.com/broadinstitute/Tangram/releases/tag/1.0.4","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/broadinstitute/Tangram@1.0.4","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/broadinstitute%2FTangram/tags/1.0.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/broadinstitute%2FTangram/tags/1.0.4/manifests"},{"name":"1.0.3","sha":"5026048e8d057f1f54ec26fa9115c693a4caf09d","kind":"commit","published_at":"2022-06-17T20:08:31.000Z","download_url":"https://codeload.github.com/broadinstitute/Tangram/tar.gz/1.0.3","html_url":"https://github.com/broadinstitute/Tangram/releases/tag/1.0.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/broadinstitute/Tangram@1.0.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/broadinstitute%2FTangram/tags/1.0.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/broadinstitute%2FTangram/tags/1.0.3/manifests"},{"name":"1.0.2","sha":"727013886310e7de7990a0d79d77c8ee0e729ce1","kind":"commit","published_at":"2021-12-03T08:34:25.000Z","download_url":"https://codeload.github.com/broadinstitute/Tangram/tar.gz/1.0.2","html_url":"https://github.com/broadinstitute/Tangram/releases/tag/1.0.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/broadinstitute/Tangram@1.0.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/broadinstitute%2FTangram/tags/1.0.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/broadinstitute%2FTangram/tags/1.0.2/manifests"},{"name":"1.0.1","sha":"82646d0267a5d00fb298284b84e913d6cd1607a9","kind":"commit","published_at":"2021-11-11T04:06:38.000Z","download_url":"https://codeload.github.com/broadinstitute/Tangram/tar.gz/1.0.1","html_url":"https://github.com/broadinstitute/Tangram/releases/tag/1.0.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/broadinstitute/Tangram@1.0.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/broadinstitute%2FTangram/tags/1.0.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/broadinstitute%2FTangram/tags/1.0.1/manifests"},{"name":"1.0.0","sha":"80caba61b6a83b12ca7c851321ce84f4cf11ab56","kind":"commit","published_at":"2021-08-30T15:59:50.000Z","download_url":"https://codeload.github.com/broadinstitute/Tangram/tar.gz/1.0.0","html_url":"https://github.com/broadinstitute/Tangram/releases/tag/1.0.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/broadinstitute/Tangram@1.0.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/broadinstitute%2FTangram/tags/1.0.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/broadinstitute%2FTangram/tags/1.0.0/manifests"},{"name":"0.4.0","sha":"9305f4e27338b49eff2f8909a2358ce8a39af314","kind":"commit","published_at":"2021-06-21T20:45:37.000Z","download_url":"https://codeload.github.com/broadinstitute/Tangram/tar.gz/0.4.0","html_url":"https://github.com/broadinstitute/Tangram/releases/tag/0.4.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/broadinstitute/Tangram@0.4.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/broadinstitute%2FTangram/tags/0.4.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/broadinstitute%2FTangram/tags/0.4.0/manifests"},{"name":"0.3.0","sha":"909d70b04ec57b4edaf11bb55b7f44df6c6c227d","kind":"commit","published_at":"2021-03-09T14:04:40.000Z","download_url":"https://codeload.github.com/broadinstitute/Tangram/tar.gz/0.3.0","html_url":"https://github.com/broadinstitute/Tangram/releases/tag/0.3.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/broadinstitute/Tangram@0.3.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/broadinstitute%2FTangram/tags/0.3.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/broadinstitute%2FTangram/tags/0.3.0/manifests"},{"name":"0.2.1","sha":"bcfbfb3822ed5a306ad04be0f12ef68ef1d512e7","kind":"commit","published_at":"2021-01-31T16:39:56.000Z","download_url":"https://codeload.github.com/broadinstitute/Tangram/tar.gz/0.2.1","html_url":"https://github.com/broadinstitute/Tangram/releases/tag/0.2.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/broadinstitute/Tangram@0.2.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/broadinstitute%2FTangram/tags/0.2.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/broadinstitute%2FTangram/tags/0.2.1/manifests"},{"name":"v0.2.1","sha":"bcfbfb3822ed5a306ad04be0f12ef68ef1d512e7","kind":"commit","published_at":"2021-01-31T16:39:56.000Z","download_url":"https://codeload.github.com/broadinstitute/Tangram/tar.gz/v0.2.1","html_url":"https://github.com/broadinstitute/Tangram/releases/tag/v0.2.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/broadinstitute/Tangram@v0.2.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/broadinstitute%2FTangram/tags/v0.2.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/broadinstitute%2FTangram/tags/v0.2.1/manifests"},{"name":"v0.2.0","sha":"640a177e2f2e06e751a36a326ea22f33ed4329d0","kind":"commit","published_at":"2021-01-06T16:11:00.000Z","download_url":"https://codeload.github.com/broadinstitute/Tangram/tar.gz/v0.2.0","html_url":"https://github.com/broadinstitute/Tangram/releases/tag/v0.2.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/broadinstitute/Tangram@v0.2.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/broadinstitute%2FTangram/tags/v0.2.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/broadinstitute%2FTangram/tags/v0.2.0/manifests"}]},"repo_metadata_updated_at":"2025-09-05T16:42:18.182Z","dependent_packages_count":5,"downloads":1326,"downloads_period":"last-month","dependent_repos_count":9,"rankings":{"downloads":14.81284992756744,"dependent_repos_count":4.934638795403865,"dependent_packages_count":7.31012528119255,"stargazers_count":5.1581770486668495,"forks_count":6.708145549373314,"docker_downloads_count":1.4263341294389413,"average":6.725045121940493},"purl":"pkg:pypi/tangram-sc","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/pypi/tangram-sc","docker_dependents_count":0,"docker_downloads_count":0,"usage_url":"https://repos.ecosyste.ms/usage/pypi/tangram-sc","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/pypi/tangram-sc/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2025-09-05T05:01:48.975Z","issues_count":95,"pull_requests_count":36,"avg_time_to_close_issue":10083540.93478261,"avg_time_to_close_pull_request":1045462.7666666667,"issues_closed_count":46,"pull_requests_closed_count":30,"pull_request_authors_count":10,"issue_authors_count":77,"avg_comments_per_issue":2.1157894736842104,"avg_comments_per_pull_request":0.05555555555555555,"merged_pull_requests_count":25,"bot_issues_count":0,"bot_pull_requests_count":0,"past_year_issues_count":10,"past_year_pull_requests_count":3,"past_year_avg_time_to_close_issue":null,"past_year_avg_time_to_close_pull_request":10244780.0,"past_year_issues_closed_count":0,"past_year_pull_requests_closed_count":1,"past_year_pull_request_authors_count":2,"past_year_issue_authors_count":9,"past_year_avg_comments_per_issue":0.4,"past_year_avg_comments_per_pull_request":0.0,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":0,"past_year_merged_pull_requests_count":1,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/broadinstitute%2FTangram/issues","maintainers":[{"login":"ziqlu0722","count":23,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ziqlu0722"},{"login":"lewlin","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/lewlin"},{"login":"gaddamshreya","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gaddamshreya"}],"active_maintainers":[]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/pypi.org/packages/tangram-sc/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/pypi.org/packages/tangram-sc/version_numbers","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/pypi.org/packages/tangram-sc/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/pypi.org/packages/tangram-sc/related_packages","maintainers":[{"uuid":"tbiancalani","login":"tbiancalani","name":null,"email":null,"url":null,"packages_count":1,"html_url":"https://pypi.org/user/tbiancalani/","role":null,"created_at":"2023-01-28T14:23:50.983Z","updated_at":"2023-01-28T14:23:50.983Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/pypi.org/maintainers/tbiancalani/packages"},{"uuid":"ziqlu","login":"ziqlu","name":null,"email":null,"url":null,"packages_count":1,"html_url":"https://pypi.org/user/ziqlu/","role":null,"created_at":"2023-01-28T14:23:50.985Z","updated_at":"2023-01-28T14:23:50.985Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/pypi.org/maintainers/ziqlu/packages"}],"registry":{"name":"pypi.org","url":"https://pypi.org","ecosystem":"pypi","default":true,"packages_count":726649,"maintainers_count":308881,"namespaces_count":0,"keywords_count":238369,"github":"pypi","metadata":{"funded_packages_count":50594},"icon_url":"https://github.com/pypi.png","created_at":"2022-04-04T15:19:23.364Z","updated_at":"2025-09-09T06:31:19.922Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/pypi.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/pypi.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/pypi.org/namespaces"}},{"id":11709622,"name":"github.com/broadinstitute/tangram","ecosystem":"go","description":null,"homepage":null,"licenses":"bsd-3-clause","normalized_licenses":["BSD-3-Clause"],"repository_url":"https://github.com/broadinstitute/tangram","keywords_array":[],"namespace":null,"versions_count":2,"first_release_published_at":"2021-01-06T16:11:00.000Z","latest_release_published_at":"2021-01-31T16:39:56.000Z","latest_release_number":"v0.2.1","last_synced_at":"2025-09-05T00:37:09.360Z","created_at":"2025-05-30T10:33:47.105Z","updated_at":"2025-09-05T16:42:06.565Z","registry_url":"https://pkg.go.dev/github.com/broadinstitute/tangram","install_command":"go get github.com/broadinstitute/tangram","documentation_url":"https://pkg.go.dev/github.com/broadinstitute/tangram#section-documentation","metadata":{},"repo_metadata":{"id":39744628,"uuid":"289328207","full_name":"broadinstitute/Tangram","owner":"broadinstitute","description":"Spatial alignment of single cell transcriptomic data. ","archived":false,"fork":false,"pushed_at":"2025-07-01T21:31:14.000Z","size":139219,"stargazers_count":320,"open_issues_count":58,"forks_count":60,"subscribers_count":12,"default_branch":"master","last_synced_at":"2025-09-05T00:23:53.729Z","etag":null,"topics":["computational-biology","gene-expression","scrna-seq","snrna-seq","spatial-data","visium"],"latest_commit_sha":null,"homepage":"","language":"Jupyter Notebook","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"bsd-3-clause","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/broadinstitute.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE.md","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null}},"created_at":"2020-08-21T17:33:31.000Z","updated_at":"2025-09-03T11:13:07.000Z","dependencies_parsed_at":"2022-07-09T19:46:05.795Z","dependency_job_id":"ae6b0093-80ab-4223-95fe-2c3f9d0841d7","html_url":"https://github.com/broadinstitute/Tangram","commit_stats":{"total_commits":270,"total_committers":18,"mean_commits":15.0,"dds":"0.44074074074074077","last_synced_commit":"d537ff936a1a26445a0f196c714d100d10e3e5ea"},"previous_names":[],"tags_count":10,"template":false,"template_full_name":null,"purl":"pkg:github/broadinstitute/Tangram","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/broadinstitute%2FTangram","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/broadinstitute%2FTangram/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/broadinstitute%2FTangram/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/broadinstitute%2FTangram/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/broadinstitute","download_url":"https://codeload.github.com/broadinstitute/Tangram/tar.gz/refs/heads/master","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/broadinstitute%2FTangram/sbom","scorecard":{"id":254241,"data":{"date":"2025-08-11","repo":{"name":"github.com/broadinstitute/Tangram","commit":"4c68995a418f41dc8caef567598c4d9b47781a13"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":3.2,"checks":[{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Maintained","score":8,"reason":"9 commit(s) and 1 issue activity found in the last 90 days -- score normalized to 8","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Code-Review","score":0,"reason":"Found 1/27 approved changesets -- score normalized to 0","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Warn: no topLevel permission defined: .github/workflows/release.yml:1","Warn: no topLevel permission defined: .github/workflows/test_workflow.yml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE.md:0","Info: FSF or OSI recognized license: BSD 3-Clause \"New\" or \"Revised\" License: LICENSE.md:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Branch-Protection","score":0,"reason":"branch protection not enabled on development/release branches","details":["Warn: branch protection not enabled for branch 'master'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Security-Policy","score":0,"reason":"security policy file not detected","details":["Warn: no security policy file detected","Warn: no security file to analyze","Warn: no security file to analyze","Warn: no security file to analyze"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Vulnerabilities","score":0,"reason":"16 existing vulnerabilities detected","details":["Warn: Project is vulnerable to: GHSA-6p56-wp2h-9hxr","Warn: Project is vulnerable to: GHSA-fpfv-jqm9-f5jm","Warn: Project is vulnerable to: PYSEC-2020-107 / GHSA-jjw5-xxj6-pcv5","Warn: Project is vulnerable to: PYSEC-2024-110 / GHSA-jw8x-6495-233v","Warn: Project is vulnerable to: PYSEC-2020-108","Warn: Project is vulnerable to: PYSEC-2023-102","Warn: Project is vulnerable to: PYSEC-2023-114","Warn: Project is vulnerable to: GHSA-3749-ghw9-m3mg","Warn: Project is vulnerable to: PYSEC-2022-43015 / GHSA-47fc-vmwq-366v","Warn: Project is vulnerable to: PYSEC-2025-41 / GHSA-53q9-r3pm-6pq6","Warn: Project is vulnerable to: PYSEC-2024-252 / GHSA-5pcm-hx3q-hm94","Warn: Project is vulnerable to: GHSA-887c-mr87-cxwp","Warn: Project is vulnerable to: PYSEC-2024-251 / GHSA-pg7h-5qx3-wjr3","Warn: Project is vulnerable to: PYSEC-2024-250","Warn: Project is vulnerable to: PYSEC-2024-259","Warn: Project is vulnerable to: PYSEC-2017-74"],"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/broadinstitute/Tangram/release.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/broadinstitute/Tangram/release.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test_workflow.yml:12: update your workflow using https://app.stepsecurity.io/secureworkflow/broadinstitute/Tangram/test_workflow.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test_workflow.yml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/broadinstitute/Tangram/test_workflow.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test_workflow.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/broadinstitute/Tangram/test_workflow.yml/master?enable=pin","Warn: pipCommand not pinned by hash: .github/workflows/release.yml:20","Warn: pipCommand not pinned by hash: .github/workflows/release.yml:21","Info:   0 out of   4 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of   1 third-party GitHubAction dependencies pinned","Info:   0 out of   2 pipCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 4 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-17T09:13:55.855Z","repository_id":39744628,"created_at":"2025-08-17T09:13:55.855Z","updated_at":"2025-08-17T09:13:55.855Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":273787190,"owners_count":25168296,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","status":"online","status_checked_at":"2025-09-05T02:00:09.113Z","response_time":402,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"broadinstitute","name":"Broad Institute","uuid":"393552","kind":"organization","description":"Broad Institute of MIT and Harvard","email":null,"website":"http://www.broadinstitute.org/","location":"Cambridge, MA","twitter":"broadinstitute","company":null,"icon_url":"https://avatars.githubusercontent.com/u/393552?v=4","repositories_count":1083,"last_synced_at":"2023-04-09T09:48:11.262Z","metadata":{"has_sponsors_listing":false},"html_url":"https://github.com/broadinstitute","funding_links":[],"total_stars":null,"followers":null,"following":null,"created_at":"2022-11-02T16:23:28.278Z","updated_at":"2023-04-09T09:48:11.836Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/broadinstitute","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/broadinstitute/repositories"},"tags":[{"name":"1.0.4","sha":"d537ff936a1a26445a0f196c714d100d10e3e5ea","kind":"commit","published_at":"2023-02-08T23:59:54.000Z","download_url":"https://codeload.github.com/broadinstitute/Tangram/tar.gz/1.0.4","html_url":"https://github.com/broadinstitute/Tangram/releases/tag/1.0.4","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/broadinstitute/Tangram@1.0.4","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/broadinstitute%2FTangram/tags/1.0.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/broadinstitute%2FTangram/tags/1.0.4/manifests"},{"name":"1.0.3","sha":"5026048e8d057f1f54ec26fa9115c693a4caf09d","kind":"commit","published_at":"2022-06-17T20:08:31.000Z","download_url":"https://codeload.github.com/broadinstitute/Tangram/tar.gz/1.0.3","html_url":"https://github.com/broadinstitute/Tangram/releases/tag/1.0.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/broadinstitute/Tangram@1.0.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/broadinstitute%2FTangram/tags/1.0.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/broadinstitute%2FTangram/tags/1.0.3/manifests"},{"name":"1.0.2","sha":"727013886310e7de7990a0d79d77c8ee0e729ce1","kind":"commit","published_at":"2021-12-03T08:34:25.000Z","download_url":"https://codeload.github.com/broadinstitute/Tangram/tar.gz/1.0.2","html_url":"https://github.com/broadinstitute/Tangram/releases/tag/1.0.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/broadinstitute/Tangram@1.0.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/broadinstitute%2FTangram/tags/1.0.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/broadinstitute%2FTangram/tags/1.0.2/manifests"},{"name":"1.0.1","sha":"82646d0267a5d00fb298284b84e913d6cd1607a9","kind":"commit","published_at":"2021-11-11T04:06:38.000Z","download_url":"https://codeload.github.com/broadinstitute/Tangram/tar.gz/1.0.1","html_url":"https://github.com/broadinstitute/Tangram/releases/tag/1.0.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/broadinstitute/Tangram@1.0.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/broadinstitute%2FTangram/tags/1.0.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/broadinstitute%2FTangram/tags/1.0.1/manifests"},{"name":"1.0.0","sha":"80caba61b6a83b12ca7c851321ce84f4cf11ab56","kind":"commit","published_at":"2021-08-30T15:59:50.000Z","download_url":"https://codeload.github.com/broadinstitute/Tangram/tar.gz/1.0.0","html_url":"https://github.com/broadinstitute/Tangram/releases/tag/1.0.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/broadinstitute/Tangram@1.0.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/broadinstitute%2FTangram/tags/1.0.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/broadinstitute%2FTangram/tags/1.0.0/manifests"},{"name":"0.4.0","sha":"9305f4e27338b49eff2f8909a2358ce8a39af314","kind":"commit","published_at":"2021-06-21T20:45:37.000Z","download_url":"https://codeload.github.com/broadinstitute/Tangram/tar.gz/0.4.0","html_url":"https://github.com/broadinstitute/Tangram/releases/tag/0.4.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/broadinstitute/Tangram@0.4.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/broadinstitute%2FTangram/tags/0.4.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/broadinstitute%2FTangram/tags/0.4.0/manifests"},{"name":"0.3.0","sha":"909d70b04ec57b4edaf11bb55b7f44df6c6c227d","kind":"commit","published_at":"2021-03-09T14:04:40.000Z","download_url":"https://codeload.github.com/broadinstitute/Tangram/tar.gz/0.3.0","html_url":"https://github.com/broadinstitute/Tangram/releases/tag/0.3.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/broadinstitute/Tangram@0.3.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/broadinstitute%2FTangram/tags/0.3.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/broadinstitute%2FTangram/tags/0.3.0/manifests"},{"name":"0.2.1","sha":"bcfbfb3822ed5a306ad04be0f12ef68ef1d512e7","kind":"commit","published_at":"2021-01-31T16:39:56.000Z","download_url":"https://codeload.github.com/broadinstitute/Tangram/tar.gz/0.2.1","html_url":"https://github.com/broadinstitute/Tangram/releases/tag/0.2.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/broadinstitute/Tangram@0.2.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/broadinstitute%2FTangram/tags/0.2.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/broadinstitute%2FTangram/tags/0.2.1/manifests"},{"name":"v0.2.1","sha":"bcfbfb3822ed5a306ad04be0f12ef68ef1d512e7","kind":"commit","published_at":"2021-01-31T16:39:56.000Z","download_url":"https://codeload.github.com/broadinstitute/Tangram/tar.gz/v0.2.1","html_url":"https://github.com/broadinstitute/Tangram/releases/tag/v0.2.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/broadinstitute/Tangram@v0.2.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/broadinstitute%2FTangram/tags/v0.2.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/broadinstitute%2FTangram/tags/v0.2.1/manifests"},{"name":"v0.2.0","sha":"640a177e2f2e06e751a36a326ea22f33ed4329d0","kind":"commit","published_at":"2021-01-06T16:11:00.000Z","download_url":"https://codeload.github.com/broadinstitute/Tangram/tar.gz/v0.2.0","html_url":"https://github.com/broadinstitute/Tangram/releases/tag/v0.2.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/broadinstitute/Tangram@v0.2.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/broadinstitute%2FTangram/tags/v0.2.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/broadinstitute%2FTangram/tags/v0.2.0/manifests"}]},"repo_metadata_updated_at":"2025-09-05T16:42:06.564Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":5.784814001734242,"dependent_packages_count":5.420815499828766,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":5.602814750781504},"purl":"pkg:golang/github.com/broadinstitute/tangram","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/go/github.com/broadinstitute/tangram","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/go/github.com/broadinstitute/tangram","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/go/github.com/broadinstitute/tangram/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2025-09-05T05:01:48.975Z","issues_count":95,"pull_requests_count":36,"avg_time_to_close_issue":10083540.93478261,"avg_time_to_close_pull_request":1045462.7666666667,"issues_closed_count":46,"pull_requests_closed_count":30,"pull_request_authors_count":10,"issue_authors_count":77,"avg_comments_per_issue":2.1157894736842104,"avg_comments_per_pull_request":0.05555555555555555,"merged_pull_requests_count":25,"bot_issues_count":0,"bot_pull_requests_count":0,"past_year_issues_count":10,"past_year_pull_requests_count":3,"past_year_avg_time_to_close_issue":null,"past_year_avg_time_to_close_pull_request":10244780.0,"past_year_issues_closed_count":0,"past_year_pull_requests_closed_count":1,"past_year_pull_request_authors_count":2,"past_year_issue_authors_count":9,"past_year_avg_comments_per_issue":0.4,"past_year_avg_comments_per_pull_request":0.0,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":0,"past_year_merged_pull_requests_count":1,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/broadinstitute%2FTangram/issues","maintainers":[{"login":"ziqlu0722","count":23,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ziqlu0722"},{"login":"lewlin","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/lewlin"},{"login":"gaddamshreya","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gaddamshreya"}],"active_maintainers":[]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fbroadinstitute%2Ftangram/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fbroadinstitute%2Ftangram/version_numbers","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fbroadinstitute%2Ftangram/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fbroadinstitute%2Ftangram/related_packages","maintainers":[],"registry":{"name":"proxy.golang.org","url":"https://proxy.golang.org","ecosystem":"go","default":true,"packages_count":1954770,"maintainers_count":0,"namespaces_count":741920,"keywords_count":109374,"github":"golang","metadata":{"funded_packages_count":49379},"icon_url":"https://github.com/golang.png","created_at":"2022-04-04T15:19:22.939Z","updated_at":"2025-09-09T06:45:13.065Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/namespaces"}}],"commits":{"id":668686,"full_name":"broadinstitute/Tangram","default_branch":"master","committers":[{"name":"ziqlu0722","email":"ritalu0722@gmail.com","login":"ziqlu0722","count":160},{"name":"Tommaso Biancalani","email":"tbiancal@broadinstitute.org","login":"lewlin","count":22},{"name":"gaddams","email":"sgaddam@broadinstitute.org","login":null,"count":17},{"name":"Tommaso Biancalani","email":"tbiancal@tommaso-gpu-6","login":null,"count":13},{"name":"gscalia","email":"gabri.scalia@gmail.com","login":"gscalia","count":12},{"name":"gaddamshreya","email":"gaddams@gene.com","login":"gaddamshreya1","count":9},{"name":"Tommaso Biancalani","email":"tbiancal@pycharm","login":null,"count":9},{"name":"Gaddam","email":"gaddams@nl003.eth.ghpc1.sc1.roche.com","login":null,"count":7},{"name":"Hejin Huang","email":"huangh83","login":null,"count":6},{"name":"Tommaso Biancalani","email":"tbiancal@tommaso-gpu","login":null,"count":5},{"name":"hejinhuang","email":"huanghejin1990@gmail.com","login":"hejinhuang","count":2},{"name":"Tommaso Biancalani","email":"tbiancal@quattrop","login":null,"count":2},{"name":"Gaddam","email":"gaddams@ng047.eth.ghpc1.sc1.roche.com","login":null,"count":2},{"name":"Gaddam","email":"gaddams@nl004.eth.ghpc1.sc1.roche.com","login":null,"count":1},{"name":"Tommaso Biancalani","email":"tbiancal@Quattrop.local","login":null,"count":1},{"name":"Tommaso Biancalani","email":"tbiancal@bestio","login":null,"count":1},{"name":"Hejin0701","email":"96504389+Hejin0701","login":"Hejin0701","count":1}],"total_commits":270,"total_committers":17,"total_bot_commits":0,"total_bot_committers":0,"mean_commits":15.882352941176471,"dds":0.40740740740740744,"past_year_committers":[],"past_year_total_commits":0,"past_year_total_committers":0,"past_year_total_bot_commits":0,"past_year_total_bot_committers":0,"past_year_mean_commits":0.0,"past_year_dds":0.0,"last_synced_at":"2025-05-18T21:58:27.721Z","last_synced_commit":"d537ff936a1a26445a0f196c714d100d10e3e5ea","created_at":"2023-03-09T10:22:56.137Z","updated_at":"2025-05-18T21:58:30.728Z","commits_url":"https://commits.ecosyste.ms/api/v1/hosts/GitHub/repositories/broadinstitute%2FTangram/commits","host":{"name":"GitHub","url":"https://github.com","kind":"github","last_synced_at":"2025-09-03T00:00:08.276Z","repositories_count":5480019,"commits_count":853389012,"contributors_count":31098138,"owners_count":906558,"icon_url":"https://github.com/github.png","host_url":"https://commits.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://commits.ecosyste.ms/api/v1/hosts/GitHub/repositories"}},"issues_stats":{"full_name":"broadinstitute/Tangram","html_url":"https://github.com/broadinstitute/Tangram","last_synced_at":"2025-09-05T05:01:48.975Z","status":"active","issues_count":95,"pull_requests_count":36,"avg_time_to_close_issue":10083540.93478261,"avg_time_to_close_pull_request":1045462.7666666667,"issues_closed_count":46,"pull_requests_closed_count":30,"pull_request_authors_count":10,"issue_authors_count":77,"avg_comments_per_issue":2.1157894736842104,"avg_comments_per_pull_request":0.05555555555555555,"merged_pull_requests_count":25,"bot_issues_count":0,"bot_pull_requests_count":0,"past_year_issues_count":10,"past_year_pull_requests_count":3,"past_year_avg_time_to_close_issue":null,"past_year_avg_time_to_close_pull_request":10244780.0,"past_year_issues_closed_count":0,"past_year_pull_requests_closed_count":1,"past_year_pull_request_authors_count":2,"past_year_issue_authors_count":9,"past_year_avg_comments_per_issue":0.4,"past_year_avg_comments_per_pull_request":0.0,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":0,"past_year_merged_pull_requests_count":1,"created_at":"2023-05-15T01:06:13.244Z","updated_at":"2025-09-05T05:01:48.975Z","repository_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/broadinstitute%2FTangram","issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/broadinstitute%2FTangram/issues","issue_labels_count":{},"pull_request_labels_count":{},"issue_author_associations_count":{"NONE":95},"pull_request_author_associations_count":{"COLLABORATOR":27,"NONE":8,"CONTRIBUTOR":1},"issue_authors":{"kguion1":5,"giovp":4,"Lena926":3,"abhishekmaj08":3,"simonmfr":3,"jayypaul":2,"KunHHE":2,"Nick-Eagles":2,"asmlgkj":2,"quentinblampey":2,"pengjini":1,"chandraS76":1,"peizyi":1,"VivianQM":1,"boyangzhang1993":1,"ankitbioinfo":1,"lijinbio":1,"EronHou":1,"shashkat":1,"Dillon214":1,"pakiessling":1,"scseeman":1,"HelloWorldLTY":1,"brianysoong":1,"witchhead":1,"tlz4320":1,"daixinap":1,"jonathanperrie":1,"tvegawaichman":1,"ParitoshP702":1,"caiquanyou":1,"vanhoan310":1,"spatts14":1,"PietroD":1,"Sverreg":1,"cindyway":1,"carloelle":1,"Smilenone":1,"dhy2002":1,"dbdimitrov":1,"lvmt":1,"vicmuck":1,"smorabit":1,"1liuchunlong":1,"HeesooSong":1,"edward130603":1,"boyiguo1":1,"johnyaku":1,"aaronkwong":1,"junyho486":1,"s849":1,"yuxiaokang-source":1,"gboscagli":1,"wangjiawen2013":1,"torgheh":1,"Fclef":1,"Laura-Waechter":1,"KyrosWang":1,"VPetukhov":1,"rimelof":1,"capuddddd":1,"MIAO803":1,"pvtodorov":1,"Epoch1128":1,"annaminyifeng":1,"yinan-wan0":1,"longfeili5170":1,"cuicathy":1,"mortunco":1,"Zach-Sten":1,"cartal":1,"gebdu":1,"wdg118":1,"Changzhanhe":1,"aseyedia":1,"NingWang1729":1,"Qirongmao97":1},"pull_request_authors":{"ziqlu0722":23,"lewlin":3,"almaan":2,"merlestahl":2,"whatever60":1,"alexanderchang1":1,"HelloWorldLTY":1,"gaddamshreya":1,"anupriyatripathi":1,"giovp":1},"host":{"name":"GitHub","url":"https://github.com","kind":"github","last_synced_at":"2025-09-05T00:00:10.444Z","repositories_count":10095926,"issues_count":31397479,"pull_requests_count":97150418,"authors_count":10700329,"icon_url":"https://github.com/github.png","host_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories","owners_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/owners","authors_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors"},"past_year_issue_labels_count":{},"past_year_pull_request_labels_count":{},"past_year_issue_author_associations_count":{"NONE":10},"past_year_pull_request_author_associations_count":{"NONE":2,"CONTRIBUTOR":1},"past_year_issue_authors":{"KunHHE":2,"1liuchunlong":1,"asmlgkj":1,"capuddddd":1,"Changzhanhe":1,"KyrosWang":1,"PietroD":1,"Sverreg":1,"Zach-Sten":1},"past_year_pull_request_authors":{"merlestahl":2,"HelloWorldLTY":1},"maintainers":[{"login":"ziqlu0722","count":23,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ziqlu0722"},{"login":"lewlin","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/lewlin"},{"login":"gaddamshreya","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gaddamshreya"}],"active_maintainers":[]},"events":{"total":{"IssuesEvent":9,"WatchEvent":56,"IssueCommentEvent":16,"PushEvent":3,"PullRequestEvent":2,"ForkEvent":11},"last_year":{"IssuesEvent":9,"WatchEvent":56,"IssueCommentEvent":16,"PushEvent":3,"PullRequestEvent":2,"ForkEvent":11}},"keywords":["computational-biology","gene-expression","scrna-seq","snrna-seq","spatial-data","visium"],"dependencies":[],"score":15.970023857207432,"created_at":"2025-09-09T00:56:39.037Z","updated_at":"2025-10-07T08:38:28.819Z","avatar_url":"https://github.com/broadinstitute.png","language":"Jupyter Notebook","category":null,"sub_category":null,"monthly_downloads":1326,"funding_links":[],"readme_doi_urls":[],"works":{},"citation_counts":{},"total_citations":0,"keywords_from_contributors":[],"project_url":"https://science.ecosyste.ms/api/v1/projects/160871","html_url":"https://science.ecosyste.ms/projects/160871"}