{"id":1860,"name":"geoclaw-landspill","description":"geoclaw-landspill: an oil land-spill and overland flow simulator for pipeline rupture events - Published in JOSS (2021)","url":"https://github.com/barbagroup/geoclaw-landspill","last_synced_at":"2025-09-04T16:35:32.549Z","repository":{"id":49890296,"uuid":"162697609","full_name":"barbagroup/geoclaw-landspill","owner":"barbagroup","description":"An oil land-spill and overland flow simulator for pipeline rupture events","archived":false,"fork":false,"pushed_at":"2021-06-10T16:46:52.000Z","size":14762,"stargazers_count":10,"open_issues_count":0,"forks_count":8,"subscribers_count":5,"default_branch":"master","last_synced_at":"2025-08-31T19:07:26.033Z","etag":null,"topics":["geoclaw","land-spill","overland-flow","pipeline","pipeline-ruptures","shallow-water-equations"],"latest_commit_sha":null,"homepage":"","language":"Fortran","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"bsd-3-clause","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/barbagroup.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":"CODE_OF_CONDUCT.md","threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":"codemeta.json","zenodo":null}},"created_at":"2018-12-21T09:57:28.000Z","updated_at":"2025-08-09T06:31:00.000Z","dependencies_parsed_at":"2022-08-28T03:02:01.827Z","dependency_job_id":null,"html_url":"https://github.com/barbagroup/geoclaw-landspill","commit_stats":null,"previous_names":[],"tags_count":6,"template":false,"template_full_name":null,"purl":"pkg:github/barbagroup/geoclaw-landspill","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/barbagroup%2Fgeoclaw-landspill","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/barbagroup%2Fgeoclaw-landspill/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/barbagroup%2Fgeoclaw-landspill/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/barbagroup%2Fgeoclaw-landspill/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/barbagroup","download_url":"https://codeload.github.com/barbagroup/geoclaw-landspill/tar.gz/refs/heads/master","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/barbagroup%2Fgeoclaw-landspill/sbom","scorecard":{"id":225635,"data":{"date":"2025-08-11","repo":{"name":"github.com/barbagroup/geoclaw-landspill","commit":"bbc14d10c191fd283c11c4d40f0f0d4f8a05d9fb"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":2.6,"checks":[{"name":"Maintained","score":0,"reason":"0 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Warn: no topLevel permission defined: .github/workflows/ci.yml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Code-Review","score":0,"reason":"Found 1/14 approved changesets -- score normalized to 0","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Security-Policy","score":0,"reason":"security policy file not detected","details":["Warn: no security policy file detected","Warn: no security file to analyze","Warn: no security file to analyze","Warn: no security file to analyze"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: BSD 3-Clause \"New\" or \"Revised\" License: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Signed-Releases","score":0,"reason":"Project has not signed or included provenance with any releases.","details":["Warn: release artifact v1.0 not signed: https://api.github.com/repos/barbagroup/geoclaw-landspill/releases/44309934","Warn: release artifact v1.0.dev4 not signed: https://api.github.com/repos/barbagroup/geoclaw-landspill/releases/43400980","Warn: release artifact v1.0.dev3 not signed: https://api.github.com/repos/barbagroup/geoclaw-landspill/releases/36587952","Warn: release artifact v1.0.dev2 not signed: https://api.github.com/repos/barbagroup/geoclaw-landspill/releases/36133017","Warn: release artifact v1.0.dev1 not signed: https://api.github.com/repos/barbagroup/geoclaw-landspill/releases/36059325","Warn: release artifact v1.0 does not have provenance: https://api.github.com/repos/barbagroup/geoclaw-landspill/releases/44309934","Warn: release artifact v1.0.dev4 does not have provenance: https://api.github.com/repos/barbagroup/geoclaw-landspill/releases/43400980","Warn: release artifact v1.0.dev3 does not have provenance: https://api.github.com/repos/barbagroup/geoclaw-landspill/releases/36587952","Warn: release artifact v1.0.dev2 does not have provenance: https://api.github.com/repos/barbagroup/geoclaw-landspill/releases/36133017","Warn: release artifact v1.0.dev1 does not have provenance: https://api.github.com/repos/barbagroup/geoclaw-landspill/releases/36059325"],"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/barbagroup/geoclaw-landspill/ci.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/barbagroup/geoclaw-landspill/ci.yml/master?enable=pin","Warn: containerImage not pinned by hash: Dockerfiles/Dockerfile:5","Warn: containerImage not pinned by hash: Dockerfiles/Dockerfile:30","Warn: containerImage not pinned by hash: Dockerfiles/Dockerfile.v0.1.bionic:4: pin your Docker image by updating ubuntu:18.04 to ubuntu:18.04@sha256:152dc042452c496007f07ca9127571cb9c29697f42acbfad72324b2bb2e43c98","Warn: containerImage not pinned by hash: Dockerfiles/Dockerfile.v0.1.trusty:4: pin your Docker image by updating ubuntu:trusty to ubuntu:trusty@sha256:64483f3496c1373bfd55348e88694d1c4d0c9b660dee6bfef5e12f43b9933b30","Warn: pipCommand not pinned by hash: Dockerfiles/Dockerfile:22","Warn: pipCommand not pinned by hash: Dockerfiles/Dockerfile.v0.1.bionic:21-22","Warn: downloadThenRun not pinned by hash: Dockerfiles/Dockerfile.v0.1.trusty:23-35","Warn: pipCommand not pinned by hash: Dockerfiles/Dockerfile.v0.1.trusty:23-35","Warn: pipCommand not pinned by hash: .github/workflows/ci.yml:36","Warn: pipCommand not pinned by hash: .github/workflows/ci.yml:37","Info:   0 out of   2 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of   4 containerImage dependencies pinned","Info:   1 out of   6 pipCommand dependencies pinned","Info:   0 out of   1 downloadThenRun dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Vulnerabilities","score":1,"reason":"9 existing vulnerabilities detected","details":["Warn: Project is vulnerable to: PYSEC-2025-49 / GHSA-5rjg-fvgr-3xxf","Warn: Project is vulnerable to: GHSA-cx63-2mw6-8hw5","Warn: Project is vulnerable to: PYSEC-2022-43012 / GHSA-r9hx-vwmv-q579","Warn: Project is vulnerable to: PYSEC-2022-43017 / GHSA-qwmp-2cf2-g9g6","Warn: Project is vulnerable to: GHSA-6p56-wp2h-9hxr","Warn: Project is vulnerable to: GHSA-fpfv-jqm9-f5jm","Warn: Project is vulnerable to: GHSA-9hjg-9r4m-mvj7","Warn: Project is vulnerable to: GHSA-9wx4-h78v-vm56","Warn: Project is vulnerable to: PYSEC-2023-74 / GHSA-j8r2-6x86-q33q"],"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 20 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-17T03:45:06.726Z","repository_id":49890296,"created_at":"2025-08-17T03:45:06.726Z","updated_at":"2025-08-17T03:45:06.726Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":273508332,"owners_count":25118357,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","status":"online","status_checked_at":"2025-09-03T02:00:09.631Z","response_time":76,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"owner":{"login":"barbagroup","name":"Barba group","uuid":"6503785","kind":"organization","description":null,"email":null,"website":"http://lorenabarba.com","location":"Washington, DC","twitter":null,"company":null,"icon_url":"https://avatars.githubusercontent.com/u/6503785?v=4","repositories_count":59,"last_synced_at":"2024-03-26T15:37:51.560Z","metadata":{"has_sponsors_listing":false},"html_url":"https://github.com/barbagroup","funding_links":[],"total_stars":4695,"followers":167,"following":0,"created_at":"2022-11-04T00:43:25.929Z","updated_at":"2024-03-26T15:37:52.568Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/barbagroup","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/barbagroup/repositories"},"packages":[{"id":2745865,"name":"geoclaw-landspill","ecosystem":"pypi","description":"A hydrocarbon overland flow simulator for pipeline rupture events.","homepage":"https://github.com/barbagroup/geoclaw-landspill","licenses":"BSD 3-Clause License","normalized_licenses":["BSD-1-Clause"],"repository_url":"https://github.com/barbagroup/geoclaw-landspill","keywords_array":["landspill","overland flow","pipeline","geoclaw","clawpack"],"namespace":null,"versions_count":5,"first_release_published_at":"2021-01-06T18:39:39.000Z","latest_release_published_at":"2021-06-08T21:38:52.000Z","latest_release_number":"1.0","last_synced_at":"2025-09-03T20:49:55.976Z","created_at":"2022-04-10T11:07:12.209Z","updated_at":"2025-09-04T07:08:09.820Z","registry_url":"https://pypi.org/project/geoclaw-landspill/","install_command":"pip install geoclaw-landspill --index-url https://pypi.org/simple","documentation_url":"https://geoclaw-landspill.readthedocs.io/","metadata":{"funding":null,"documentation":null,"classifiers":["Development Status :: 1 - Planning","Environment :: Console","Intended Audience :: Science/Research","License :: OSI Approved :: BSD License","Operating System :: Unix","Programming Language :: Fortran","Programming Language :: Python :: 3","Topic :: Scientific/Engineering"],"normalized_name":"geoclaw-landspill","project_status":null},"repo_metadata":{"id":49890296,"uuid":"162697609","full_name":"barbagroup/geoclaw-landspill","owner":"barbagroup","description":"An oil land-spill and overland flow simulator for pipeline rupture events","archived":false,"fork":false,"pushed_at":"2021-06-10T16:46:52.000Z","size":14762,"stargazers_count":10,"open_issues_count":0,"forks_count":8,"subscribers_count":5,"default_branch":"master","last_synced_at":"2025-08-31T19:07:26.033Z","etag":null,"topics":["geoclaw","land-spill","overland-flow","pipeline","pipeline-ruptures","shallow-water-equations"],"latest_commit_sha":null,"homepage":"","language":"Fortran","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"bsd-3-clause","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/barbagroup.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":"CODE_OF_CONDUCT.md","threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":"codemeta.json","zenodo":null}},"created_at":"2018-12-21T09:57:28.000Z","updated_at":"2025-08-09T06:31:00.000Z","dependencies_parsed_at":"2022-08-28T03:02:01.827Z","dependency_job_id":null,"html_url":"https://github.com/barbagroup/geoclaw-landspill","commit_stats":null,"previous_names":[],"tags_count":6,"template":false,"template_full_name":null,"purl":"pkg:github/barbagroup/geoclaw-landspill","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/barbagroup%2Fgeoclaw-landspill","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/barbagroup%2Fgeoclaw-landspill/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/barbagroup%2Fgeoclaw-landspill/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/barbagroup%2Fgeoclaw-landspill/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/barbagroup","download_url":"https://codeload.github.com/barbagroup/geoclaw-landspill/tar.gz/refs/heads/master","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/barbagroup%2Fgeoclaw-landspill/sbom","scorecard":{"id":225635,"data":{"date":"2025-08-11","repo":{"name":"github.com/barbagroup/geoclaw-landspill","commit":"bbc14d10c191fd283c11c4d40f0f0d4f8a05d9fb"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":2.6,"checks":[{"name":"Maintained","score":0,"reason":"0 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Warn: no topLevel permission defined: .github/workflows/ci.yml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Code-Review","score":0,"reason":"Found 1/14 approved changesets -- score normalized to 0","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Security-Policy","score":0,"reason":"security policy file not detected","details":["Warn: no security policy file detected","Warn: no security file to analyze","Warn: no security file to analyze","Warn: no security file to analyze"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: BSD 3-Clause \"New\" or \"Revised\" License: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Signed-Releases","score":0,"reason":"Project has not signed or included provenance with any releases.","details":["Warn: release artifact v1.0 not signed: https://api.github.com/repos/barbagroup/geoclaw-landspill/releases/44309934","Warn: release artifact v1.0.dev4 not signed: https://api.github.com/repos/barbagroup/geoclaw-landspill/releases/43400980","Warn: release artifact v1.0.dev3 not signed: https://api.github.com/repos/barbagroup/geoclaw-landspill/releases/36587952","Warn: release artifact v1.0.dev2 not signed: https://api.github.com/repos/barbagroup/geoclaw-landspill/releases/36133017","Warn: release artifact v1.0.dev1 not signed: https://api.github.com/repos/barbagroup/geoclaw-landspill/releases/36059325","Warn: release artifact v1.0 does not have provenance: https://api.github.com/repos/barbagroup/geoclaw-landspill/releases/44309934","Warn: release artifact v1.0.dev4 does not have provenance: https://api.github.com/repos/barbagroup/geoclaw-landspill/releases/43400980","Warn: release artifact v1.0.dev3 does not have provenance: https://api.github.com/repos/barbagroup/geoclaw-landspill/releases/36587952","Warn: release artifact v1.0.dev2 does not have provenance: https://api.github.com/repos/barbagroup/geoclaw-landspill/releases/36133017","Warn: release artifact v1.0.dev1 does not have provenance: https://api.github.com/repos/barbagroup/geoclaw-landspill/releases/36059325"],"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/barbagroup/geoclaw-landspill/ci.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/barbagroup/geoclaw-landspill/ci.yml/master?enable=pin","Warn: containerImage not pinned by hash: Dockerfiles/Dockerfile:5","Warn: containerImage not pinned by hash: Dockerfiles/Dockerfile:30","Warn: containerImage not pinned by hash: Dockerfiles/Dockerfile.v0.1.bionic:4: pin your Docker image by updating ubuntu:18.04 to ubuntu:18.04@sha256:152dc042452c496007f07ca9127571cb9c29697f42acbfad72324b2bb2e43c98","Warn: containerImage not pinned by hash: Dockerfiles/Dockerfile.v0.1.trusty:4: pin your Docker image by updating ubuntu:trusty to ubuntu:trusty@sha256:64483f3496c1373bfd55348e88694d1c4d0c9b660dee6bfef5e12f43b9933b30","Warn: pipCommand not pinned by hash: Dockerfiles/Dockerfile:22","Warn: pipCommand not pinned by hash: Dockerfiles/Dockerfile.v0.1.bionic:21-22","Warn: downloadThenRun not pinned by hash: Dockerfiles/Dockerfile.v0.1.trusty:23-35","Warn: pipCommand not pinned by hash: Dockerfiles/Dockerfile.v0.1.trusty:23-35","Warn: pipCommand not pinned by hash: .github/workflows/ci.yml:36","Warn: pipCommand not pinned by hash: .github/workflows/ci.yml:37","Info:   0 out of   2 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of   4 containerImage dependencies pinned","Info:   1 out of   6 pipCommand dependencies pinned","Info:   0 out of   1 downloadThenRun dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Vulnerabilities","score":1,"reason":"9 existing vulnerabilities detected","details":["Warn: Project is vulnerable to: PYSEC-2025-49 / GHSA-5rjg-fvgr-3xxf","Warn: Project is vulnerable to: GHSA-cx63-2mw6-8hw5","Warn: Project is vulnerable to: PYSEC-2022-43012 / GHSA-r9hx-vwmv-q579","Warn: Project is vulnerable to: PYSEC-2022-43017 / GHSA-qwmp-2cf2-g9g6","Warn: Project is vulnerable to: GHSA-6p56-wp2h-9hxr","Warn: Project is vulnerable to: GHSA-fpfv-jqm9-f5jm","Warn: Project is vulnerable to: GHSA-9hjg-9r4m-mvj7","Warn: Project is vulnerable to: GHSA-9wx4-h78v-vm56","Warn: Project is vulnerable to: PYSEC-2023-74 / GHSA-j8r2-6x86-q33q"],"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 20 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-17T03:45:06.726Z","repository_id":49890296,"created_at":"2025-08-17T03:45:06.726Z","updated_at":"2025-08-17T03:45:06.726Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":273508332,"owners_count":25118357,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","status":"online","status_checked_at":"2025-09-03T02:00:09.631Z","response_time":76,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"barbagroup","name":"Barba group","uuid":"6503785","kind":"organization","description":null,"email":null,"website":"http://lorenabarba.com","location":"Washington, DC","twitter":null,"company":null,"icon_url":"https://avatars.githubusercontent.com/u/6503785?v=4","repositories_count":59,"last_synced_at":"2024-03-26T15:37:51.560Z","metadata":{"has_sponsors_listing":false},"html_url":"https://github.com/barbagroup","funding_links":[],"total_stars":4695,"followers":167,"following":0,"created_at":"2022-11-04T00:43:25.929Z","updated_at":"2024-03-26T15:37:52.568Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/barbagroup","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/barbagroup/repositories"},"tags":[{"name":"v1.0","sha":"8cea6751677820138aab2538f90163a0e2166f62","kind":"commit","published_at":"2021-06-08T21:59:40.000Z","download_url":"https://codeload.github.com/barbagroup/geoclaw-landspill/tar.gz/v1.0","html_url":"https://github.com/barbagroup/geoclaw-landspill/releases/tag/v1.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/barbagroup/geoclaw-landspill@v1.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/barbagroup%2Fgeoclaw-landspill/tags/v1.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/barbagroup%2Fgeoclaw-landspill/tags/v1.0/manifests"},{"name":"v1.0.dev4","sha":"e98c77368c54efd6770cf2aaac35188b18f27c4a","kind":"commit","published_at":"2021-05-22T01:53:56.000Z","download_url":"https://codeload.github.com/barbagroup/geoclaw-landspill/tar.gz/v1.0.dev4","html_url":"https://github.com/barbagroup/geoclaw-landspill/releases/tag/v1.0.dev4","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/barbagroup/geoclaw-landspill@v1.0.dev4","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/barbagroup%2Fgeoclaw-landspill/tags/v1.0.dev4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/barbagroup%2Fgeoclaw-landspill/tags/v1.0.dev4/manifests"},{"name":"v1.0.dev3","sha":"f71e1309c4aa8f3890fb3bc2e3d1049b13e950f2","kind":"commit","published_at":"2021-01-19T09:21:18.000Z","download_url":"https://codeload.github.com/barbagroup/geoclaw-landspill/tar.gz/v1.0.dev3","html_url":"https://github.com/barbagroup/geoclaw-landspill/releases/tag/v1.0.dev3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/barbagroup/geoclaw-landspill@v1.0.dev3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/barbagroup%2Fgeoclaw-landspill/tags/v1.0.dev3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/barbagroup%2Fgeoclaw-landspill/tags/v1.0.dev3/manifests"},{"name":"v1.0.dev2","sha":"dc8544182509256a36271e9b255b266dc52b1408","kind":"commit","published_at":"2021-01-08T09:11:01.000Z","download_url":"https://codeload.github.com/barbagroup/geoclaw-landspill/tar.gz/v1.0.dev2","html_url":"https://github.com/barbagroup/geoclaw-landspill/releases/tag/v1.0.dev2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/barbagroup/geoclaw-landspill@v1.0.dev2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/barbagroup%2Fgeoclaw-landspill/tags/v1.0.dev2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/barbagroup%2Fgeoclaw-landspill/tags/v1.0.dev2/manifests"},{"name":"v1.0.dev1","sha":"6bed5f59532bce53b57d019e621d6c8a89903673","kind":"commit","published_at":"2021-01-06T17:50:51.000Z","download_url":"https://codeload.github.com/barbagroup/geoclaw-landspill/tar.gz/v1.0.dev1","html_url":"https://github.com/barbagroup/geoclaw-landspill/releases/tag/v1.0.dev1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/barbagroup/geoclaw-landspill@v1.0.dev1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/barbagroup%2Fgeoclaw-landspill/tags/v1.0.dev1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/barbagroup%2Fgeoclaw-landspill/tags/v1.0.dev1/manifests"},{"name":"v0.1","sha":"a5e5f0f2be45536d98d9c6c9ef5920911e657eee","kind":"tag","published_at":"2020-12-12T06:44:50.000Z","download_url":"https://codeload.github.com/barbagroup/geoclaw-landspill/tar.gz/v0.1","html_url":"https://github.com/barbagroup/geoclaw-landspill/releases/tag/v0.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/barbagroup/geoclaw-landspill@v0.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/barbagroup%2Fgeoclaw-landspill/tags/v0.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/barbagroup%2Fgeoclaw-landspill/tags/v0.1/manifests"}]},"repo_metadata_updated_at":"2025-09-04T07:08:09.820Z","dependent_packages_count":0,"downloads":11,"downloads_period":"last-month","dependent_repos_count":1,"rankings":{"downloads":41.35372628622884,"dependent_repos_count":21.607168748712237,"dependent_packages_count":10.102944879846767,"stargazers_count":20.376482349170495,"forks_count":13.348303202814385,"docker_downloads_count":null,"average":21.357725093354546},"purl":"pkg:pypi/geoclaw-landspill","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/pypi/geoclaw-landspill","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/pypi/geoclaw-landspill","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/pypi/geoclaw-landspill/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2025-08-31T19:10:19.229Z","issues_count":12,"pull_requests_count":11,"avg_time_to_close_issue":684211.0833333334,"avg_time_to_close_pull_request":1072916.8181818181,"issues_closed_count":12,"pull_requests_closed_count":11,"pull_request_authors_count":3,"issue_authors_count":2,"avg_comments_per_issue":0.5833333333333334,"avg_comments_per_pull_request":0.09090909090909091,"merged_pull_requests_count":11,"bot_issues_count":0,"bot_pull_requests_count":0,"past_year_issues_count":0,"past_year_pull_requests_count":0,"past_year_avg_time_to_close_issue":null,"past_year_avg_time_to_close_pull_request":null,"past_year_issues_closed_count":0,"past_year_pull_requests_closed_count":0,"past_year_pull_request_authors_count":0,"past_year_issue_authors_count":0,"past_year_avg_comments_per_issue":null,"past_year_avg_comments_per_pull_request":null,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":0,"past_year_merged_pull_requests_count":0,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/barbagroup%2Fgeoclaw-landspill/issues","maintainers":[{"login":"piyueh","count":20,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/piyueh"}],"active_maintainers":[]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/pypi.org/packages/geoclaw-landspill/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/pypi.org/packages/geoclaw-landspill/version_numbers","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/pypi.org/packages/geoclaw-landspill/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/pypi.org/packages/geoclaw-landspill/related_packages","maintainers":[{"uuid":"pychuang","login":"pychuang","name":null,"email":null,"url":null,"packages_count":1,"html_url":"https://pypi.org/user/pychuang/","role":null,"created_at":"2023-02-24T07:36:31.446Z","updated_at":"2023-02-24T07:36:31.446Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/pypi.org/maintainers/pychuang/packages"}],"registry":{"name":"pypi.org","url":"https://pypi.org","ecosystem":"pypi","default":true,"packages_count":724831,"maintainers_count":308212,"namespaces_count":0,"keywords_count":237984,"github":"pypi","metadata":{"funded_packages_count":50481},"icon_url":"https://github.com/pypi.png","created_at":"2022-04-04T15:19:23.364Z","updated_at":"2025-09-04T05:23:51.177Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/pypi.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/pypi.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/pypi.org/namespaces"}}],"commits":{"id":585834,"full_name":"barbagroup/geoclaw-landspill","default_branch":"master","committers":[{"name":"Pi-Yueh Chuang","email":"pychuang@gwu.edu","login":"piyueh","count":160},{"name":"Tracy Thorleifson","email":"tracy.thorleifson@g2-is.com","login":null,"count":10},{"name":"Lorena A. Barba","email":"labarba@gwu.edu","login":"labarba","count":3},{"name":"Katy Barnhart","email":"krbarnhart@usgs.gov","login":"kbarnhart","count":1}],"total_commits":174,"total_committers":4,"total_bot_commits":0,"total_bot_committers":0,"mean_commits":43.5,"dds":0.08045977011494254,"past_year_committers":[],"past_year_total_commits":0,"past_year_total_committers":0,"past_year_total_bot_commits":0,"past_year_total_bot_committers":0,"past_year_mean_commits":0.0,"past_year_dds":0.0,"last_synced_at":"2025-08-07T06:40:03.561Z","last_synced_commit":"bbc14d10c191fd283c11c4d40f0f0d4f8a05d9fb","created_at":"2023-03-09T06:05:02.204Z","updated_at":"2025-08-07T06:40:03.561Z","commits_url":"https://commits.ecosyste.ms/api/v1/hosts/GitHub/repositories/barbagroup%2Fgeoclaw-landspill/commits","host":{"name":"GitHub","url":"https://github.com","kind":"github","last_synced_at":"2025-08-21T00:00:20.603Z","repositories_count":5479765,"commits_count":853308117,"contributors_count":31095153,"owners_count":906558,"icon_url":"https://github.com/github.png","host_url":"https://commits.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://commits.ecosyste.ms/api/v1/hosts/GitHub/repositories"}},"issues_stats":{"full_name":"barbagroup/geoclaw-landspill","html_url":"https://github.com/barbagroup/geoclaw-landspill","last_synced_at":"2025-08-31T19:10:19.229Z","status":"error","issues_count":12,"pull_requests_count":11,"avg_time_to_close_issue":684211.0833333334,"avg_time_to_close_pull_request":1072916.8181818181,"issues_closed_count":12,"pull_requests_closed_count":11,"pull_request_authors_count":3,"issue_authors_count":2,"avg_comments_per_issue":0.5833333333333334,"avg_comments_per_pull_request":0.09090909090909091,"merged_pull_requests_count":11,"bot_issues_count":0,"bot_pull_requests_count":0,"past_year_issues_count":0,"past_year_pull_requests_count":0,"past_year_avg_time_to_close_issue":null,"past_year_avg_time_to_close_pull_request":null,"past_year_issues_closed_count":0,"past_year_pull_requests_closed_count":0,"past_year_pull_request_authors_count":0,"past_year_issue_authors_count":0,"past_year_avg_comments_per_issue":null,"past_year_avg_comments_per_pull_request":null,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":0,"past_year_merged_pull_requests_count":0,"created_at":"2023-05-14T14:44:07.239Z","updated_at":"2025-08-31T19:10:19.230Z","repository_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/barbagroup%2Fgeoclaw-landspill","issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/barbagroup%2Fgeoclaw-landspill/issues","issue_labels_count":{"enhancement":4,"bug":1},"pull_request_labels_count":{},"issue_author_associations_count":{"MEMBER":11,"NONE":1},"pull_request_author_associations_count":{"MEMBER":9,"CONTRIBUTOR":2},"issue_authors":{"piyueh":11,"jmansour":1},"pull_request_authors":{"piyueh":9,"kbarnhart":1,"tthorleifson":1},"host":{"name":"GitHub","url":"https://github.com","kind":"github","last_synced_at":"2025-09-01T00:00:07.725Z","repositories_count":9897400,"issues_count":29061701,"pull_requests_count":83189859,"authors_count":8742021,"icon_url":"https://github.com/github.png","host_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories","owners_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/owners","authors_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors"},"past_year_issue_labels_count":{},"past_year_pull_request_labels_count":{},"past_year_issue_author_associations_count":{},"past_year_pull_request_author_associations_count":{},"past_year_issue_authors":{},"past_year_pull_request_authors":{},"maintainers":[{"login":"piyueh","count":20,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/piyueh"}],"active_maintainers":[]},"events":{"total":{"WatchEvent":3},"last_year":{"WatchEvent":3}},"keywords":["geoclaw","land-spill","overland-flow","pipeline","pipeline-ruptures","shallow-water-equations"],"dependencies":[{"ecosystem":"pypi","filepath":"requirements-build.txt","sha":null,"kind":"manifest","created_at":"2022-08-28T03:02:01.368Z","updated_at":"2022-08-28T03:02:01.368Z","repository_link":"https://github.com/barbagroup/geoclaw-landspill/blob/master/requirements-build.txt","dependencies":[{"id":3001430025,"package_name":"setuptools","ecosystem":"pypi","requirements":"\u003e=51.0","direct":true,"kind":"runtime","optional":false},{"id":3001430026,"package_name":"wheel","ecosystem":"pypi","requirements":"\u003e=0.36","direct":true,"kind":"runtime","optional":false},{"id":3001430027,"package_name":"scikit-build","ecosystem":"pypi","requirements":"\u003e=0.11.1","direct":true,"kind":"runtime","optional":false},{"id":3001430028,"package_name":"cmake","ecosystem":"pypi","requirements":"\u003e=3.18.4","direct":true,"kind":"runtime","optional":false},{"id":3001430029,"package_name":"ninja","ecosystem":"pypi","requirements":"\u003e=1.10","direct":true,"kind":"runtime","optional":false},{"id":3001430030,"package_name":"pytest","ecosystem":"pypi","requirements":"\u003e=6.2.1","direct":true,"kind":"runtime","optional":false}]},{"ecosystem":"pypi","filepath":"requirements.txt","sha":null,"kind":"manifest","created_at":"2022-08-28T03:02:01.727Z","updated_at":"2022-08-28T03:02:01.727Z","repository_link":"https://github.com/barbagroup/geoclaw-landspill/blob/master/requirements.txt","dependencies":[{"id":3001434701,"package_name":"six","ecosystem":"pypi","requirements":"\u003e=1.15.0","direct":true,"kind":"runtime","optional":false},{"id":3001434702,"package_name":"psutil","ecosystem":"pypi","requirements":"\u003e=5.8.0","direct":true,"kind":"runtime","optional":false},{"id":3001434703,"package_name":"requests","ecosystem":"pypi","requirements":"\u003e=2.25.1","direct":true,"kind":"runtime","optional":false},{"id":3001434704,"package_name":"numpy","ecosystem":"pypi","requirements":"\u003e=1.19.4","direct":true,"kind":"runtime","optional":false},{"id":3001434705,"package_name":"rasterio","ecosystem":"pypi","requirements":"\u003e=1.1.8","direct":true,"kind":"runtime","optional":false},{"id":3001434706,"package_name":"netCDF4","ecosystem":"pypi","requirements":"\u003e=1.5.5.1","direct":true,"kind":"runtime","optional":false},{"id":3001434707,"package_name":"matplotlib","ecosystem":"pypi","requirements":"\u003e=3.3.3","direct":true,"kind":"runtime","optional":false},{"id":3001434708,"package_name":"typing_extensions","ecosystem":"pypi","requirements":"\u003e=3.7","direct":true,"kind":"runtime","optional":false}]}],"score":6.253828811575473,"created_at":"2025-09-04T09:17:53.516Z","updated_at":"2025-11-04T15:50:35.996Z","avatar_url":"https://github.com/barbagroup.png","language":"Fortran","category":"Scientific Software","sub_category":"Peer-reviewed","monthly_downloads":11,"funding_links":[],"readme_doi_urls":[],"works":{},"citation_counts":{},"total_citations":0,"keywords_from_contributors":[],"project_url":"https://science.ecosyste.ms/api/v1/projects/1860","html_url":"https://science.ecosyste.ms/projects/1860"}