{"id":163773,"name":null,"description":"Universal Utilities for Go","url":"https://github.com/bytedance/gopkg","last_synced_at":"2025-09-09T19:12:48.449Z","repository":{"id":37430725,"uuid":"351060524","full_name":"bytedance/gopkg","owner":"bytedance","description":"Universal Utilities for Go","archived":false,"fork":false,"pushed_at":"2025-08-13T03:51:55.000Z","size":370,"stargazers_count":1929,"open_issues_count":46,"forks_count":246,"subscribers_count":30,"default_branch":"main","last_synced_at":"2025-08-31T21:20:16.481Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":"","language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/bytedance.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":"CODE_OF_CONDUCT.md","threat_model":null,"audit":null,"citation":null,"codeowners":".github/CODEOWNERS","security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null}},"created_at":"2021-03-24T11:49:34.000Z","updated_at":"2025-08-29T15:52:46.000Z","dependencies_parsed_at":"2023-02-08T09:45:57.951Z","dependency_job_id":"234c0002-3b60-4dbd-bad2-f457593707fb","html_url":"https://github.com/bytedance/gopkg","commit_stats":{"total_commits":95,"total_committers":30,"mean_commits":"3.1666666666666665","dds":0.8315789473684211,"last_synced_commit":"5df24c0168e22d5f8723c079791eacafd82812cb"},"previous_names":[],"tags_count":4,"template":false,"template_full_name":null,"purl":"pkg:github/bytedance/gopkg","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bytedance%2Fgopkg","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bytedance%2Fgopkg/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bytedance%2Fgopkg/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bytedance%2Fgopkg/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/bytedance","download_url":"https://codeload.github.com/bytedance/gopkg/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bytedance%2Fgopkg/sbom","scorecard":{"id":260295,"data":{"date":"2025-08-11","repo":{"name":"github.com/bytedance/gopkg","commit":"c97c000df42d1e797ab1e1bc107c98f4ec442112"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":5.2,"checks":[{"name":"Code-Review","score":9,"reason":"Found 27/28 approved changesets -- score normalized to 9","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Maintained","score":3,"reason":"4 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 3","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: jobLevel 'actions' permission set to 'read': .github/workflows/codeql-analysis.yml:32","Info: jobLevel 'contents' permission set to 'read': .github/workflows/codeql-analysis.yml:33","Warn: no topLevel permission defined: .github/workflows/codeql-analysis.yml:1","Warn: no topLevel permission defined: .github/workflows/push-check.yml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:46: update your workflow using https://app.stepsecurity.io/secureworkflow/bytedance/gopkg/codeql-analysis.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:49: update your workflow using https://app.stepsecurity.io/secureworkflow/bytedance/gopkg/codeql-analysis.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:53: update your workflow using https://app.stepsecurity.io/secureworkflow/bytedance/gopkg/codeql-analysis.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:62: update your workflow using https://app.stepsecurity.io/secureworkflow/bytedance/gopkg/codeql-analysis.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:73: update your workflow using https://app.stepsecurity.io/secureworkflow/bytedance/gopkg/codeql-analysis.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:87: update your workflow using https://app.stepsecurity.io/secureworkflow/bytedance/gopkg/codeql-analysis.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/push-check.yml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/bytedance/gopkg/push-check.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/push-check.yml:18: update your workflow using https://app.stepsecurity.io/secureworkflow/bytedance/gopkg/push-check.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/push-check.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/bytedance/gopkg/push-check.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/push-check.yml:36: update your workflow using https://app.stepsecurity.io/secureworkflow/bytedance/gopkg/push-check.yml/main?enable=pin","Info:   0 out of   9 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of   1 third-party GitHubAction dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Security-Policy","score":0,"reason":"security policy file not detected","details":["Warn: no security policy file detected","Warn: no security file to analyze","Warn: no security file to analyze","Warn: no security file to analyze"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: Apache License 2.0: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Vulnerabilities","score":7,"reason":"3 existing vulnerabilities detected","details":["Warn: Project is vulnerable to: GO-2024-3333","Warn: Project is vulnerable to: GO-2025-3503 / GHSA-qxp5-gwg8-xv66","Warn: Project is vulnerable to: GO-2025-3595 / GHSA-vvgc-356p-c3xw"],"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"SAST","score":7,"reason":"SAST tool detected but not run on all commits","details":["Info: SAST configuration detected: CodeQL","Warn: 4 commits out of 30 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-17T10:41:50.136Z","repository_id":37430725,"created_at":"2025-08-17T10:41:50.136Z","updated_at":"2025-08-17T10:41:50.136Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":274347897,"owners_count":25268971,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","status":"online","status_checked_at":"2025-09-09T02:00:10.223Z","response_time":80,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"owner":{"login":"bytedance","name":"Bytedance Inc.","uuid":"4158466","kind":"organization","description":"","email":null,"website":"https://opensource.bytedance.com","location":"Singapore","twitter":"ByteDanceOSS","company":null,"icon_url":"https://avatars.githubusercontent.com/u/4158466?v=4","repositories_count":255,"last_synced_at":"2024-04-16T02:59:18.813Z","metadata":{"has_sponsors_listing":false},"html_url":"https://github.com/bytedance","funding_links":[],"total_stars":88648,"followers":6017,"following":0,"created_at":"2022-11-13T11:29:28.707Z","updated_at":"2024-04-16T03:00:36.055Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/bytedance","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/bytedance/repositories"},"packages":[{"id":3911428,"name":"github.com/bytedance/gopkg","ecosystem":"go","description":"","homepage":"https://github.com/bytedance/gopkg","licenses":"Apache-2.0","normalized_licenses":["Apache-2.0"],"repository_url":"https://github.com/bytedance/gopkg","keywords_array":[],"namespace":"github.com/bytedance","versions_count":20,"first_release_published_at":"2022-01-18T07:13:34.000Z","latest_release_published_at":"2025-08-13T03:34:23.000Z","latest_release_number":"v0.1.3","last_synced_at":"2025-09-08T20:02:21.771Z","created_at":"2022-04-12T01:12:55.611Z","updated_at":"2025-09-08T20:02:21.772Z","registry_url":"https://pkg.go.dev/github.com/bytedance/gopkg","install_command":"go get github.com/bytedance/gopkg","documentation_url":"https://pkg.go.dev/github.com/bytedance/gopkg#section-documentation","metadata":{},"repo_metadata":{"id":37430725,"uuid":"351060524","full_name":"bytedance/gopkg","owner":"bytedance","description":"Universal Utilities for Go","archived":false,"fork":false,"pushed_at":"2025-08-13T03:51:55.000Z","size":370,"stargazers_count":1929,"open_issues_count":46,"forks_count":246,"subscribers_count":30,"default_branch":"main","last_synced_at":"2025-08-31T21:20:16.481Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":"","language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/bytedance.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":"CODE_OF_CONDUCT.md","threat_model":null,"audit":null,"citation":null,"codeowners":".github/CODEOWNERS","security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null}},"created_at":"2021-03-24T11:49:34.000Z","updated_at":"2025-08-29T15:52:46.000Z","dependencies_parsed_at":"2023-02-08T09:45:57.951Z","dependency_job_id":"234c0002-3b60-4dbd-bad2-f457593707fb","html_url":"https://github.com/bytedance/gopkg","commit_stats":{"total_commits":95,"total_committers":30,"mean_commits":"3.1666666666666665","dds":0.8315789473684211,"last_synced_commit":"5df24c0168e22d5f8723c079791eacafd82812cb"},"previous_names":[],"tags_count":4,"template":false,"template_full_name":null,"purl":"pkg:github/bytedance/gopkg","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bytedance%2Fgopkg","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bytedance%2Fgopkg/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bytedance%2Fgopkg/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bytedance%2Fgopkg/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/bytedance","download_url":"https://codeload.github.com/bytedance/gopkg/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bytedance%2Fgopkg/sbom","scorecard":{"id":260295,"data":{"date":"2025-08-11","repo":{"name":"github.com/bytedance/gopkg","commit":"c97c000df42d1e797ab1e1bc107c98f4ec442112"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":5.2,"checks":[{"name":"Code-Review","score":9,"reason":"Found 27/28 approved changesets -- score normalized to 9","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Maintained","score":3,"reason":"4 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 3","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: jobLevel 'actions' permission set to 'read': .github/workflows/codeql-analysis.yml:32","Info: jobLevel 'contents' permission set to 'read': .github/workflows/codeql-analysis.yml:33","Warn: no topLevel permission defined: .github/workflows/codeql-analysis.yml:1","Warn: no topLevel permission defined: .github/workflows/push-check.yml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:46: update your workflow using https://app.stepsecurity.io/secureworkflow/bytedance/gopkg/codeql-analysis.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:49: update your workflow using https://app.stepsecurity.io/secureworkflow/bytedance/gopkg/codeql-analysis.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:53: update your workflow using https://app.stepsecurity.io/secureworkflow/bytedance/gopkg/codeql-analysis.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:62: update your workflow using https://app.stepsecurity.io/secureworkflow/bytedance/gopkg/codeql-analysis.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:73: update your workflow using https://app.stepsecurity.io/secureworkflow/bytedance/gopkg/codeql-analysis.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:87: update your workflow using https://app.stepsecurity.io/secureworkflow/bytedance/gopkg/codeql-analysis.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/push-check.yml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/bytedance/gopkg/push-check.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/push-check.yml:18: update your workflow using https://app.stepsecurity.io/secureworkflow/bytedance/gopkg/push-check.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/push-check.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/bytedance/gopkg/push-check.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/push-check.yml:36: update your workflow using https://app.stepsecurity.io/secureworkflow/bytedance/gopkg/push-check.yml/main?enable=pin","Info:   0 out of   9 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of   1 third-party GitHubAction dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Security-Policy","score":0,"reason":"security policy file not detected","details":["Warn: no security policy file detected","Warn: no security file to analyze","Warn: no security file to analyze","Warn: no security file to analyze"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: Apache License 2.0: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Vulnerabilities","score":7,"reason":"3 existing vulnerabilities detected","details":["Warn: Project is vulnerable to: GO-2024-3333","Warn: Project is vulnerable to: GO-2025-3503 / GHSA-qxp5-gwg8-xv66","Warn: Project is vulnerable to: GO-2025-3595 / GHSA-vvgc-356p-c3xw"],"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"SAST","score":7,"reason":"SAST tool detected but not run on all commits","details":["Info: SAST configuration detected: CodeQL","Warn: 4 commits out of 30 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-17T10:41:50.136Z","repository_id":37430725,"created_at":"2025-08-17T10:41:50.136Z","updated_at":"2025-08-17T10:41:50.136Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":273046454,"owners_count":25036179,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","status":"online","status_checked_at":"2025-08-31T02:00:09.071Z","response_time":79,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"bytedance","name":"Bytedance Inc.","uuid":"4158466","kind":"organization","description":"","email":null,"website":"https://opensource.bytedance.com","location":"Singapore","twitter":"ByteDanceOSS","company":null,"icon_url":"https://avatars.githubusercontent.com/u/4158466?v=4","repositories_count":255,"last_synced_at":"2024-04-16T02:59:18.813Z","metadata":{"has_sponsors_listing":false},"html_url":"https://github.com/bytedance","funding_links":[],"total_stars":88648,"followers":6017,"following":0,"created_at":"2022-11-13T11:29:28.707Z","updated_at":"2024-04-16T03:00:36.055Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/bytedance","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/bytedance/repositories"},"tags":[{"name":"v0.1.3","sha":"c97c000df42d1e797ab1e1bc107c98f4ec442112","kind":"commit","published_at":"2025-08-13T03:34:23.000Z","download_url":"https://codeload.github.com/bytedance/gopkg/tar.gz/v0.1.3","html_url":"https://github.com/bytedance/gopkg/releases/tag/v0.1.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/bytedance/gopkg@v0.1.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bytedance%2Fgopkg/tags/v0.1.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bytedance%2Fgopkg/tags/v0.1.3/manifests"},{"name":"v0.1.2","sha":"56322a7411cd51804be11e99f2349d290b0ab898","kind":"commit","published_at":"2025-03-27T07:29:43.000Z","download_url":"https://codeload.github.com/bytedance/gopkg/tar.gz/v0.1.2","html_url":"https://github.com/bytedance/gopkg/releases/tag/v0.1.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/bytedance/gopkg@v0.1.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bytedance%2Fgopkg/tags/v0.1.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bytedance%2Fgopkg/tags/v0.1.2/manifests"},{"name":"v0.1.1","sha":"33d61f33e7edb1fecbd42fa8aacb5a9fb22c7ca1","kind":"commit","published_at":"2024-08-23T10:45:50.000Z","download_url":"https://codeload.github.com/bytedance/gopkg/tar.gz/v0.1.1","html_url":"https://github.com/bytedance/gopkg/releases/tag/v0.1.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/bytedance/gopkg@v0.1.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bytedance%2Fgopkg/tags/v0.1.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bytedance%2Fgopkg/tags/v0.1.1/manifests"},{"name":"v0.1.0","sha":"3042f73dee3056940bd7b3c5b5ea0393aabd95e6","kind":"commit","published_at":"2024-08-05T06:45:38.000Z","download_url":"https://codeload.github.com/bytedance/gopkg/tar.gz/v0.1.0","html_url":"https://github.com/bytedance/gopkg/releases/tag/v0.1.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/bytedance/gopkg@v0.1.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bytedance%2Fgopkg/tags/v0.1.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bytedance%2Fgopkg/tags/v0.1.0/manifests"}]},"repo_metadata_updated_at":"2025-08-31T21:39:02.301Z","dependent_packages_count":726,"downloads":null,"downloads_period":null,"dependent_repos_count":319,"rankings":{"downloads":null,"dependent_repos_count":0.3773181672939741,"dependent_packages_count":0.21485452968540564,"stargazers_count":1.9713499628595261,"forks_count":2.293217410781876,"docker_downloads_count":1.4600978516621919,"average":1.2633675844565948},"purl":"pkg:golang/github.com/bytedance/gopkg","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/go/github.com/bytedance/gopkg","docker_dependents_count":31,"docker_downloads_count":78498361,"usage_url":"https://repos.ecosyste.ms/usage/go/github.com/bytedance/gopkg","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/go/github.com/bytedance/gopkg/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2025-08-31T19:19:17.723Z","issues_count":42,"pull_requests_count":129,"avg_time_to_close_issue":5085465.388888889,"avg_time_to_close_pull_request":1670588.7247706421,"issues_closed_count":18,"pull_requests_closed_count":109,"pull_request_authors_count":53,"issue_authors_count":34,"avg_comments_per_issue":1.4761904761904763,"avg_comments_per_pull_request":0.8604651162790697,"merged_pull_requests_count":73,"bot_issues_count":0,"bot_pull_requests_count":1,"past_year_issues_count":5,"past_year_pull_requests_count":19,"past_year_avg_time_to_close_issue":3367126.0,"past_year_avg_time_to_close_pull_request":555869.9166666666,"past_year_issues_closed_count":2,"past_year_pull_requests_closed_count":12,"past_year_pull_request_authors_count":7,"past_year_issue_authors_count":5,"past_year_avg_comments_per_issue":0.2,"past_year_avg_comments_per_pull_request":0.21052631578947367,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":0,"past_year_merged_pull_requests_count":9,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/bytedance%2Fgopkg/issues","maintainers":[{"login":"zhangyunhao116","count":17,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/zhangyunhao116"},{"login":"joway","count":14,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/joway"},{"login":"SilverRainZ","count":13,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/SilverRainZ"},{"login":"xiaost","count":8,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/xiaost"},{"login":"lsjbd","count":5,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/lsjbd"},{"login":"jayantxie","count":5,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jayantxie"},{"login":"ppzqh","count":4,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ppzqh"},{"login":"luchsh","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/luchsh"},{"login":"PureWhiteWu","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/PureWhiteWu"},{"login":"Hchenn","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Hchenn"},{"login":"GuangmingLuo","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/GuangmingLuo"},{"login":"lyeeeeee","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/lyeeeeee"}],"active_maintainers":[{"login":"xiaost","count":8,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/xiaost"},{"login":"jayantxie","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jayantxie"},{"login":"joway","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/joway"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fbytedance%2Fgopkg/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fbytedance%2Fgopkg/version_numbers","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fbytedance%2Fgopkg/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fbytedance%2Fgopkg/related_packages","maintainers":[],"registry":{"name":"proxy.golang.org","url":"https://proxy.golang.org","ecosystem":"go","default":true,"packages_count":1954770,"maintainers_count":0,"namespaces_count":741920,"keywords_count":109374,"github":"golang","metadata":{"funded_packages_count":49379},"icon_url":"https://github.com/golang.png","created_at":"2022-04-04T15:19:22.939Z","updated_at":"2025-09-09T06:45:13.065Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/namespaces"}},{"id":10785773,"name":"github.com/byteDance/gopkg","ecosystem":"go","description":null,"homepage":null,"licenses":"apache-2.0","normalized_licenses":["Apache-2.0"],"repository_url":"https://github.com/byteDance/gopkg","keywords_array":[],"namespace":null,"versions_count":4,"first_release_published_at":"2024-08-05T06:45:38.000Z","latest_release_published_at":"2025-08-13T03:34:23.000Z","latest_release_number":"v0.1.3","last_synced_at":"2025-08-31T21:32:36.025Z","created_at":"2024-08-06T03:21:40.879Z","updated_at":"2025-08-31T21:39:04.616Z","registry_url":"https://pkg.go.dev/github.com/byteDance/gopkg","install_command":"go get github.com/byteDance/gopkg","documentation_url":"https://pkg.go.dev/github.com/byteDance/gopkg#section-documentation","metadata":{},"repo_metadata":{"id":37430725,"uuid":"351060524","full_name":"bytedance/gopkg","owner":"bytedance","description":"Universal Utilities for Go","archived":false,"fork":false,"pushed_at":"2025-08-13T03:51:55.000Z","size":370,"stargazers_count":1929,"open_issues_count":46,"forks_count":246,"subscribers_count":30,"default_branch":"main","last_synced_at":"2025-08-31T21:20:16.481Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":"","language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/bytedance.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":"CODE_OF_CONDUCT.md","threat_model":null,"audit":null,"citation":null,"codeowners":".github/CODEOWNERS","security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null}},"created_at":"2021-03-24T11:49:34.000Z","updated_at":"2025-08-29T15:52:46.000Z","dependencies_parsed_at":"2023-02-08T09:45:57.951Z","dependency_job_id":"234c0002-3b60-4dbd-bad2-f457593707fb","html_url":"https://github.com/bytedance/gopkg","commit_stats":{"total_commits":95,"total_committers":30,"mean_commits":"3.1666666666666665","dds":0.8315789473684211,"last_synced_commit":"5df24c0168e22d5f8723c079791eacafd82812cb"},"previous_names":[],"tags_count":4,"template":false,"template_full_name":null,"purl":"pkg:github/bytedance/gopkg","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bytedance%2Fgopkg","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bytedance%2Fgopkg/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bytedance%2Fgopkg/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bytedance%2Fgopkg/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/bytedance","download_url":"https://codeload.github.com/bytedance/gopkg/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bytedance%2Fgopkg/sbom","scorecard":{"id":260295,"data":{"date":"2025-08-11","repo":{"name":"github.com/bytedance/gopkg","commit":"c97c000df42d1e797ab1e1bc107c98f4ec442112"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":5.2,"checks":[{"name":"Code-Review","score":9,"reason":"Found 27/28 approved changesets -- score normalized to 9","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Maintained","score":3,"reason":"4 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 3","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: jobLevel 'actions' permission set to 'read': .github/workflows/codeql-analysis.yml:32","Info: jobLevel 'contents' permission set to 'read': .github/workflows/codeql-analysis.yml:33","Warn: no topLevel permission defined: .github/workflows/codeql-analysis.yml:1","Warn: no topLevel permission defined: .github/workflows/push-check.yml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:46: update your workflow using https://app.stepsecurity.io/secureworkflow/bytedance/gopkg/codeql-analysis.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:49: update your workflow using https://app.stepsecurity.io/secureworkflow/bytedance/gopkg/codeql-analysis.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:53: update your workflow using https://app.stepsecurity.io/secureworkflow/bytedance/gopkg/codeql-analysis.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:62: update your workflow using https://app.stepsecurity.io/secureworkflow/bytedance/gopkg/codeql-analysis.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:73: update your workflow using https://app.stepsecurity.io/secureworkflow/bytedance/gopkg/codeql-analysis.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:87: update your workflow using https://app.stepsecurity.io/secureworkflow/bytedance/gopkg/codeql-analysis.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/push-check.yml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/bytedance/gopkg/push-check.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/push-check.yml:18: update your workflow using https://app.stepsecurity.io/secureworkflow/bytedance/gopkg/push-check.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/push-check.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/bytedance/gopkg/push-check.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/push-check.yml:36: update your workflow using https://app.stepsecurity.io/secureworkflow/bytedance/gopkg/push-check.yml/main?enable=pin","Info:   0 out of   9 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of   1 third-party GitHubAction dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Security-Policy","score":0,"reason":"security policy file not detected","details":["Warn: no security policy file detected","Warn: no security file to analyze","Warn: no security file to analyze","Warn: no security file to analyze"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: Apache License 2.0: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Vulnerabilities","score":7,"reason":"3 existing vulnerabilities detected","details":["Warn: Project is vulnerable to: GO-2024-3333","Warn: Project is vulnerable to: GO-2025-3503 / GHSA-qxp5-gwg8-xv66","Warn: Project is vulnerable to: GO-2025-3595 / GHSA-vvgc-356p-c3xw"],"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"SAST","score":7,"reason":"SAST tool detected but not run on all commits","details":["Info: SAST configuration detected: CodeQL","Warn: 4 commits out of 30 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-17T10:41:50.136Z","repository_id":37430725,"created_at":"2025-08-17T10:41:50.136Z","updated_at":"2025-08-17T10:41:50.136Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":273046453,"owners_count":25036179,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","status":"online","status_checked_at":"2025-08-31T02:00:09.071Z","response_time":79,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"bytedance","name":"Bytedance Inc.","uuid":"4158466","kind":"organization","description":"","email":null,"website":"https://opensource.bytedance.com","location":"Singapore","twitter":"ByteDanceOSS","company":null,"icon_url":"https://avatars.githubusercontent.com/u/4158466?v=4","repositories_count":255,"last_synced_at":"2024-04-16T02:59:18.813Z","metadata":{"has_sponsors_listing":false},"html_url":"https://github.com/bytedance","funding_links":[],"total_stars":88648,"followers":6017,"following":0,"created_at":"2022-11-13T11:29:28.707Z","updated_at":"2024-04-16T03:00:36.055Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/bytedance","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/bytedance/repositories"},"tags":[{"name":"v0.1.3","sha":"c97c000df42d1e797ab1e1bc107c98f4ec442112","kind":"commit","published_at":"2025-08-13T03:34:23.000Z","download_url":"https://codeload.github.com/bytedance/gopkg/tar.gz/v0.1.3","html_url":"https://github.com/bytedance/gopkg/releases/tag/v0.1.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/bytedance/gopkg@v0.1.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bytedance%2Fgopkg/tags/v0.1.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bytedance%2Fgopkg/tags/v0.1.3/manifests"},{"name":"v0.1.2","sha":"56322a7411cd51804be11e99f2349d290b0ab898","kind":"commit","published_at":"2025-03-27T07:29:43.000Z","download_url":"https://codeload.github.com/bytedance/gopkg/tar.gz/v0.1.2","html_url":"https://github.com/bytedance/gopkg/releases/tag/v0.1.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/bytedance/gopkg@v0.1.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bytedance%2Fgopkg/tags/v0.1.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bytedance%2Fgopkg/tags/v0.1.2/manifests"},{"name":"v0.1.1","sha":"33d61f33e7edb1fecbd42fa8aacb5a9fb22c7ca1","kind":"commit","published_at":"2024-08-23T10:45:50.000Z","download_url":"https://codeload.github.com/bytedance/gopkg/tar.gz/v0.1.1","html_url":"https://github.com/bytedance/gopkg/releases/tag/v0.1.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/bytedance/gopkg@v0.1.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bytedance%2Fgopkg/tags/v0.1.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bytedance%2Fgopkg/tags/v0.1.1/manifests"},{"name":"v0.1.0","sha":"3042f73dee3056940bd7b3c5b5ea0393aabd95e6","kind":"commit","published_at":"2024-08-05T06:45:38.000Z","download_url":"https://codeload.github.com/bytedance/gopkg/tar.gz/v0.1.0","html_url":"https://github.com/bytedance/gopkg/releases/tag/v0.1.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/bytedance/gopkg@v0.1.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bytedance%2Fgopkg/tags/v0.1.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bytedance%2Fgopkg/tags/v0.1.0/manifests"}]},"repo_metadata_updated_at":"2025-08-31T21:39:04.616Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":6.729255038392937,"dependent_packages_count":6.304262545391698,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":6.516758791892317},"purl":"pkg:golang/github.com/byte%21dance/gopkg","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/go/github.com/byteDance/gopkg","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/go/github.com/byteDance/gopkg","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/go/github.com/byteDance/gopkg/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2025-08-31T19:19:17.723Z","issues_count":42,"pull_requests_count":129,"avg_time_to_close_issue":5085465.388888889,"avg_time_to_close_pull_request":1670588.7247706421,"issues_closed_count":18,"pull_requests_closed_count":109,"pull_request_authors_count":53,"issue_authors_count":34,"avg_comments_per_issue":1.4761904761904763,"avg_comments_per_pull_request":0.8604651162790697,"merged_pull_requests_count":73,"bot_issues_count":0,"bot_pull_requests_count":1,"past_year_issues_count":5,"past_year_pull_requests_count":19,"past_year_avg_time_to_close_issue":3367126.0,"past_year_avg_time_to_close_pull_request":555869.9166666666,"past_year_issues_closed_count":2,"past_year_pull_requests_closed_count":12,"past_year_pull_request_authors_count":7,"past_year_issue_authors_count":5,"past_year_avg_comments_per_issue":0.2,"past_year_avg_comments_per_pull_request":0.21052631578947367,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":0,"past_year_merged_pull_requests_count":9,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/bytedance%2Fgopkg/issues","maintainers":[{"login":"zhangyunhao116","count":17,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/zhangyunhao116"},{"login":"joway","count":14,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/joway"},{"login":"SilverRainZ","count":13,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/SilverRainZ"},{"login":"xiaost","count":8,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/xiaost"},{"login":"lsjbd","count":5,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/lsjbd"},{"login":"jayantxie","count":5,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jayantxie"},{"login":"ppzqh","count":4,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ppzqh"},{"login":"luchsh","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/luchsh"},{"login":"PureWhiteWu","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/PureWhiteWu"},{"login":"Hchenn","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Hchenn"},{"login":"GuangmingLuo","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/GuangmingLuo"},{"login":"lyeeeeee","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/lyeeeeee"}],"active_maintainers":[{"login":"xiaost","count":8,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/xiaost"},{"login":"jayantxie","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jayantxie"},{"login":"joway","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/joway"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2FbyteDance%2Fgopkg/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2FbyteDance%2Fgopkg/version_numbers","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2FbyteDance%2Fgopkg/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2FbyteDance%2Fgopkg/related_packages","maintainers":[],"registry":{"name":"proxy.golang.org","url":"https://proxy.golang.org","ecosystem":"go","default":true,"packages_count":1954770,"maintainers_count":0,"namespaces_count":741920,"keywords_count":109374,"github":"golang","metadata":{"funded_packages_count":49379},"icon_url":"https://github.com/golang.png","created_at":"2022-04-04T15:19:22.939Z","updated_at":"2025-09-09T06:45:13.065Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/namespaces"}}],"commits":{"id":8998,"full_name":"bytedance/gopkg","default_branch":"main","committers":[{"name":"ZhangYunHao","email":"zhangyunhao@bytedance.com","login":"zhangyunhao116","count":27},{"name":"Joway","email":"wangzhuowei@bytedance.com","login":"joway","count":13},{"name":"Pure White","email":"wudi.daniel@bytedance.com","login":"PureWhiteWu","count":12},{"name":"Shengyu Zhang","email":"zhangshengyu.0@bytedance.com","login":"SilverRainZ","count":10},{"name":"lsjbd","email":"44455379+lsjbd","login":"lsjbd","count":9},{"name":"Kyle Xiao","email":"xiaoguoqiao@bytedance.com","login":"xiaost","count":4},{"name":"lyeeeeee","email":"awesomeyeli@gmail.com","login":"lyeeeeee","count":4},{"name":"Hchen","email":"928572361@qq.com","login":"Hchenn","count":3},{"name":"kaixiang zhong","email":"xiang.ace@gmail.com","login":"kaka19ace","count":2},{"name":"Jayant","email":"xiezhengyao@bytedance.com","login":"jayantxie","count":2},{"name":"cg33","email":"chg80333@163.com","login":null,"count":1},{"name":"Crimson_Loves_Code","email":"39024757+crimson-gao","login":"crimson-gao","count":1},{"name":"Guangming Luo","email":"luoguangming.ivan@bytedance.com","login":"GuangmingLuo","count":1},{"name":"Holen","email":"llhhll1210@gmail.com","login":"holenlv","count":1},{"name":"Hongkai","email":"2523272490@qq.com","login":"HuangHongkai","count":1},{"name":"Nick Xu","email":"nx@nickxu.me","login":"NX-Official","count":1},{"name":"纪卓志","email":"jizhuozhi.george@gmail.com","login":"jizhuozhi","count":1},{"name":"ziposcar","email":"499581494@qq.com","login":"ziposcar","count":1},{"name":"zhaixiaojuan","email":"67671683+zhaixiaojuan","login":"zhaixiaojuan","count":1},{"name":"zekin","email":"wzekin@gmail.com","login":"wzekin","count":1},{"name":"yudecheng","email":"yudechengscut@gmail.com","login":"yudecheng","count":1},{"name":"lvsz1","email":"1020444738@qq.com","login":"lvsz1","count":1},{"name":"dingo","email":"do_web@163.com","login":"doaspx","count":1},{"name":"cui fliter","email":"imcusg@gmail.com","login":"cuishuang","count":1},{"name":"chyroc","email":"chyroc@qq.com","login":"chyroc","count":1},{"name":"caimufu","email":"111740597+caimufu","login":"caimufu","count":1},{"name":"Yu Chengye","email":"60293095+kabu1204","login":"kabu1204","count":1},{"name":"Yi Duan","email":"duanyi.aster@bytedance.com","login":"AsterDY","count":1},{"name":"Xiangyu Tan","email":"106504609+Andello","login":"Andello","count":1},{"name":"Thoren-byte","email":"56618562+Thoren-byte","login":"Thoren-byte","count":1},{"name":"QihengZhou","email":"qiheng.zhou@bytedance.com","login":"ppzqh","count":1}],"total_commits":107,"total_committers":31,"total_bot_commits":0,"total_bot_committers":0,"mean_commits":3.4516129032258065,"dds":0.7476635514018692,"past_year_committers":[{"name":"Kyle Xiao","email":"xiaoguoqiao@bytedance.com","login":"xiaost","count":4},{"name":"Joway","email":"wangzhuowei@bytedance.com","login":"joway","count":3},{"name":"纪卓志","email":"jizhuozhi.george@gmail.com","login":"jizhuozhi","count":1},{"name":"zhaixiaojuan","email":"67671683+zhaixiaojuan","login":"zhaixiaojuan","count":1},{"name":"ZhangYunHao","email":"zhangyunhao@bytedance.com","login":"zhangyunhao116","count":1},{"name":"Thoren-byte","email":"56618562+Thoren-byte","login":"Thoren-byte","count":1},{"name":"QihengZhou","email":"qiheng.zhou@bytedance.com","login":"ppzqh","count":1},{"name":"Guangming Luo","email":"luoguangming.ivan@bytedance.com","login":"GuangmingLuo","count":1}],"past_year_total_commits":13,"past_year_total_committers":8,"past_year_total_bot_commits":0,"past_year_total_bot_committers":0,"past_year_mean_commits":1.625,"past_year_dds":0.6923076923076923,"last_synced_at":"2025-05-17T01:39:06.027Z","last_synced_commit":"56322a7411cd51804be11e99f2349d290b0ab898","created_at":"2023-03-07T09:49:50.966Z","updated_at":"2025-05-17T01:39:06.058Z","commits_url":"https://commits.ecosyste.ms/api/v1/hosts/GitHub/repositories/bytedance%2Fgopkg/commits","host":{"name":"GitHub","url":"https://github.com","kind":"github","last_synced_at":"2025-09-09T00:17:06.873Z","repositories_count":5534301,"commits_count":872232494,"contributors_count":32156303,"owners_count":918527,"icon_url":"https://github.com/github.png","host_url":"https://commits.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://commits.ecosyste.ms/api/v1/hosts/GitHub/repositories"}},"issues_stats":{"full_name":"bytedance/gopkg","html_url":"https://github.com/bytedance/gopkg","last_synced_at":"2025-08-31T19:19:17.723Z","status":null,"issues_count":42,"pull_requests_count":129,"avg_time_to_close_issue":5085465.388888889,"avg_time_to_close_pull_request":1670588.7247706421,"issues_closed_count":18,"pull_requests_closed_count":109,"pull_request_authors_count":53,"issue_authors_count":34,"avg_comments_per_issue":1.4761904761904763,"avg_comments_per_pull_request":0.8604651162790697,"merged_pull_requests_count":73,"bot_issues_count":0,"bot_pull_requests_count":1,"past_year_issues_count":5,"past_year_pull_requests_count":19,"past_year_avg_time_to_close_issue":3367126.0,"past_year_avg_time_to_close_pull_request":555869.9166666666,"past_year_issues_closed_count":2,"past_year_pull_requests_closed_count":12,"past_year_pull_request_authors_count":7,"past_year_issue_authors_count":5,"past_year_avg_comments_per_issue":0.2,"past_year_avg_comments_per_pull_request":0.21052631578947367,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":0,"past_year_merged_pull_requests_count":9,"created_at":"2023-05-16T21:34:09.340Z","updated_at":"2025-09-03T05:27:33.627Z","repository_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/bytedance%2Fgopkg","issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/bytedance%2Fgopkg/issues","issue_labels_count":{"question":14,"enhancement":12,"bug":11,"documentation":1,"invalid":1},"pull_request_labels_count":{"documentation":2,"bug":1,"enhancement":1,"dependencies":1},"issue_author_associations_count":{"NONE":36,"MEMBER":3,"CONTRIBUTOR":3,"COLLABORATOR":3},"pull_request_author_associations_count":{"NONE":47,"COLLABORATOR":46,"MEMBER":30,"CONTRIBUTOR":29},"issue_authors":{"hiqsociety":4,"zhangyunhao116":3,"luchsh":3,"zhongxinghong":2,"nepp-an":1,"igibek":1,"crimson-gao":1,"icetech233":1,"ramapriyan912001":1,"snakorse":1,"jizhuozhi":1,"Java-knight":1,"Mstch":1,"amazingchow":1,"alphadose":1,"zhiyongzhang663":1,"tuhaihe":1,"yaohanlan":1,"chenxiang105":1,"newbietao":1,"daidai21":1,"lvsz1":1,"CGongsz":1,"helios741":1,"denmushi":1,"Yanhao":1,"VEDANTDOKANIA":1,"ryan961":1,"TLGits":1,"CC-Cheunggg":1,"chyroc":1,"GuoGuiRong":1,"shadw3002":1,"Thoren-byte":1,"ice-rider":1,"chgz":1,"test1389931913fj":1},"pull_request_authors":{"joway":27,"zhangyunhao116":15,"SilverRainZ":13,"xiaost":10,"test1389931913fj":7,"ppzqh":6,"jayantxie":6,"lsjbd":5,"zchee":4,"jizhuozhi":3,"Thoren-byte":2,"GuangmingLuo":2,"NX-Official":2,"Hchenn":2,"zhaixiaojuan":2,"17hao":2,"xalanq":2,"PureWhiteWu":2,"arunsathiya":2,"0xCA":2,"myoung34":2,"AsterDY":2,"doaspx":1,"kabu1204":1,"Andello":1,"baijinping":1,"kezhenxu94":1,"liu-song":1,"add-apt-repository":1,"chenhg5":1,"ag9920":1,"caimufu":1,"cuishuang":1,"jackedelic":1,"lyeeeeee":1,"wangzhione":1,"chyroc":1,"HuangHongkai":1,"qimengxingyuan":1,"ziposcar":1,"kallydev":1,"choleraehyq":1,"crimson-gao":1,"HeyJavaBean":1,"songzhibin97":1,"rfyiamcool":1,"kongtianyi":1,"Ccheers":1,"lvsz1":1,"testerofpen":1,"dependabot[bot]":1,"wzekin":1,"abner-chenc":1,"tianxiaogu":1},"host":{"name":"GitHub","url":"https://github.com","kind":"github","last_synced_at":"2025-09-09T00:00:11.778Z","repositories_count":10197929,"issues_count":32275653,"pull_requests_count":101879419,"authors_count":10740965,"icon_url":"https://github.com/github.png","host_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories","owners_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/owners","authors_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors"},"past_year_issue_labels_count":{"bug":3,"enhancement":1,"question":1},"past_year_pull_request_labels_count":{},"past_year_issue_author_associations_count":{"NONE":5},"past_year_pull_request_author_associations_count":{"COLLABORATOR":12,"NONE":6,"CONTRIBUTOR":3,"MEMBER":1},"past_year_issue_authors":{"denmushi":1,"ice-rider":1,"icetech233":1,"Thoren-byte":1,"VEDANTDOKANIA":1},"past_year_pull_request_authors":{"xiaost":9,"jayantxie":3,"0xCA":2,"Thoren-byte":2,"jizhuozhi":2,"wangzhione":1,"joway":1,"zhangyunhao116":1,"HeyJavaBean":1},"maintainers":[{"login":"joway","count":19,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/joway"},{"login":"zhangyunhao116","count":18,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/zhangyunhao116"},{"login":"SilverRainZ","count":13,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/SilverRainZ"},{"login":"xiaost","count":8,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/xiaost"},{"login":"lsjbd","count":5,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/lsjbd"},{"login":"jayantxie","count":5,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jayantxie"},{"login":"ppzqh","count":4,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ppzqh"},{"login":"luchsh","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/luchsh"},{"login":"GuangmingLuo","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/GuangmingLuo"},{"login":"PureWhiteWu","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/PureWhiteWu"},{"login":"Hchenn","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Hchenn"},{"login":"lyeeeeee","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/lyeeeeee"}],"active_maintainers":[{"login":"xiaost","count":8,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/xiaost"},{"login":"jayantxie","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jayantxie"},{"login":"joway","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/joway"},{"login":"zhangyunhao116","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/zhangyunhao116"}]},"events":{"total":{"CreateEvent":4,"ReleaseEvent":2,"IssuesEvent":8,"WatchEvent":213,"DeleteEvent":1,"IssueCommentEvent":8,"MemberEvent":1,"PushEvent":12,"PullRequestReviewCommentEvent":4,"PullRequestReviewEvent":34,"PullRequestEvent":20,"ForkEvent":21},"last_year":{"CreateEvent":4,"ReleaseEvent":2,"IssuesEvent":8,"WatchEvent":213,"DeleteEvent":1,"IssueCommentEvent":8,"MemberEvent":1,"PushEvent":12,"PullRequestReviewCommentEvent":4,"PullRequestReviewEvent":34,"PullRequestEvent":20,"ForkEvent":21}},"keywords":[],"dependencies":[{"ecosystem":"actions","filepath":".github/workflows/codeql-analysis.yml","sha":null,"kind":"manifest","created_at":"2023-02-08T09:45:57.900Z","updated_at":"2023-02-08T09:45:57.900Z","repository_link":"https://github.com/bytedance/gopkg/blob/main/.github/workflows/codeql-analysis.yml","dependencies":[{"id":7447722001,"package_name":"actions/checkout","ecosystem":"actions","requirements":"v2","direct":true,"kind":"composite","optional":false},{"id":7447722002,"package_name":"actions/setup-go","ecosystem":"actions","requirements":"v2","direct":true,"kind":"composite","optional":false},{"id":7447722003,"package_name":"actions/cache","ecosystem":"actions","requirements":"v2","direct":true,"kind":"composite","optional":false},{"id":7447722004,"package_name":"github/codeql-action/init","ecosystem":"actions","requirements":"v1","direct":true,"kind":"composite","optional":false},{"id":7447722005,"package_name":"github/codeql-action/autobuild","ecosystem":"actions","requirements":"v1","direct":true,"kind":"composite","optional":false},{"id":7447722006,"package_name":"github/codeql-action/analyze","ecosystem":"actions","requirements":"v1","direct":true,"kind":"composite","optional":false}]},{"ecosystem":"actions","filepath":".github/workflows/pr-benchdiff.yml","sha":null,"kind":"manifest","created_at":"2023-02-08T09:45:57.906Z","updated_at":"2023-02-08T09:45:57.906Z","repository_link":"https://github.com/bytedance/gopkg/blob/main/.github/workflows/pr-benchdiff.yml","dependencies":[{"id":7447722007,"package_name":"khan/pull-request-comment-trigger","ecosystem":"actions","requirements":"master","direct":true,"kind":"composite","optional":false},{"id":7447722008,"package_name":"peter-evans/create-or-update-comment","ecosystem":"actions","requirements":"v1","direct":true,"kind":"composite","optional":false},{"id":7447722009,"package_name":"actions/checkout","ecosystem":"actions","requirements":"v2","direct":true,"kind":"composite","optional":false},{"id":7447722010,"package_name":"actions/setup-go","ecosystem":"actions","requirements":"v2","direct":true,"kind":"composite","optional":false},{"id":7447722011,"package_name":"WillAbides/benchdiff-action","ecosystem":"actions","requirements":"v0.3.3","direct":true,"kind":"composite","optional":false}]},{"ecosystem":"actions","filepath":".github/workflows/pr-check.yml","sha":null,"kind":"manifest","created_at":"2023-02-08T09:45:57.918Z","updated_at":"2023-02-08T09:45:57.918Z","repository_link":"https://github.com/bytedance/gopkg/blob/main/.github/workflows/pr-check.yml","dependencies":[{"id":7447722012,"package_name":"actions/checkout","ecosystem":"actions","requirements":"v2","direct":true,"kind":"composite","optional":false},{"id":7447722013,"package_name":"actions/setup-go","ecosystem":"actions","requirements":"v2","direct":true,"kind":"composite","optional":false},{"id":7447722014,"package_name":"actions/cache","ecosystem":"actions","requirements":"v2","direct":true,"kind":"composite","optional":false}]},{"ecosystem":"actions","filepath":".github/workflows/push-check.yml","sha":null,"kind":"manifest","created_at":"2023-02-08T09:45:57.925Z","updated_at":"2023-02-08T09:45:57.925Z","repository_link":"https://github.com/bytedance/gopkg/blob/main/.github/workflows/push-check.yml","dependencies":[{"id":7447722033,"package_name":"actions/checkout","ecosystem":"actions","requirements":"v2","direct":true,"kind":"composite","optional":false},{"id":7447722034,"package_name":"actions/setup-go","ecosystem":"actions","requirements":"v2","direct":true,"kind":"composite","optional":false},{"id":7447722035,"package_name":"actions/cache","ecosystem":"actions","requirements":"v2","direct":true,"kind":"composite","optional":false},{"id":7447722036,"package_name":"apache/skywalking-eyes","ecosystem":"actions","requirements":"main","direct":true,"kind":"composite","optional":false}]},{"ecosystem":"go","filepath":"go.mod","sha":null,"kind":"manifest","created_at":"2023-02-08T09:45:57.934Z","updated_at":"2023-02-08T09:45:57.934Z","repository_link":"https://github.com/bytedance/gopkg/blob/main/go.mod","dependencies":[{"id":7447722040,"package_name":"github.com/stretchr/testify","ecosystem":"go","requirements":"v1.7.0","direct":true,"kind":"runtime","optional":false},{"id":7447722041,"package_name":"golang.org/x/sync","ecosystem":"go","requirements":"v0.0.0-20210220032951-036812b2e83c","direct":true,"kind":"runtime","optional":false},{"id":7447722042,"package_name":"golang.org/x/sys","ecosystem":"go","requirements":"v0.0.0-20221010170243-090e33056c14","direct":true,"kind":"runtime","optional":false}]},{"ecosystem":"go","filepath":"go.sum","sha":null,"kind":"lockfile","created_at":"2023-02-08T09:45:57.942Z","updated_at":"2023-02-08T09:45:57.942Z","repository_link":"https://github.com/bytedance/gopkg/blob/main/go.sum","dependencies":[{"id":7447722047,"package_name":"github.com/davecgh/go-spew","ecosystem":"go","requirements":"v1.1.0","direct":false,"kind":"runtime","optional":false},{"id":7447722048,"package_name":"github.com/pmezard/go-difflib","ecosystem":"go","requirements":"v1.0.0","direct":false,"kind":"runtime","optional":false},{"id":7447722049,"package_name":"github.com/stretchr/objx","ecosystem":"go","requirements":"v0.1.0","direct":false,"kind":"runtime","optional":false},{"id":7447722050,"package_name":"github.com/stretchr/testify","ecosystem":"go","requirements":"v1.7.0","direct":false,"kind":"runtime","optional":false},{"id":7447722051,"package_name":"golang.org/x/sync","ecosystem":"go","requirements":"v0.0.0-20210220032951-036812b2e83c","direct":false,"kind":"runtime","optional":false},{"id":7447722052,"package_name":"golang.org/x/sys","ecosystem":"go","requirements":"v0.0.0-20220110181412-a018aaa089fe","direct":false,"kind":"runtime","optional":false},{"id":7447722053,"package_name":"golang.org/x/sys","ecosystem":"go","requirements":"v0.0.0-20220907062415-87db552b00fd","direct":false,"kind":"runtime","optional":false},{"id":7447722054,"package_name":"golang.org/x/sys","ecosystem":"go","requirements":"v0.0.0-20221010170243-090e33056c14","direct":false,"kind":"runtime","optional":false},{"id":7447722055,"package_name":"gopkg.in/check.v1","ecosystem":"go","requirements":"v0.0.0-20161208181325-20d25e280405","direct":false,"kind":"runtime","optional":false},{"id":7447722056,"package_name":"gopkg.in/yaml.v3","ecosystem":"go","requirements":"v3.0.0-20200313102051-9f266ea9e77c","direct":false,"kind":"runtime","optional":false}]}],"score":29.200912892572767,"created_at":"2025-09-09T01:06:23.299Z","updated_at":"2025-10-07T08:38:54.300Z","avatar_url":"https://github.com/bytedance.png","language":"Go","category":null,"sub_category":null,"monthly_downloads":0,"funding_links":[],"readme_doi_urls":[],"works":{},"citation_counts":{},"total_citations":0,"keywords_from_contributors":[],"project_url":"https://science.ecosyste.ms/api/v1/projects/163773","html_url":"https://science.ecosyste.ms/projects/163773"}