{"id":18782,"name":"microsoft.coyote","description":"Coyote is a library and tool for testing concurrent C# code and deterministically reproducing bugs.","url":"https://github.com/microsoft/coyote","last_synced_at":"2025-09-05T00:06:04.706Z","repository":{"id":37496140,"uuid":"202449779","full_name":"microsoft/coyote","owner":"microsoft","description":"Coyote is a library and tool for testing concurrent C# code and deterministically reproducing bugs.","archived":false,"fork":false,"pushed_at":"2024-12-11T17:28:41.000Z","size":20970,"stargazers_count":1565,"open_issues_count":45,"forks_count":81,"subscribers_count":36,"default_branch":"main","last_synced_at":"2025-09-02T00:36:51.091Z","etag":null,"topics":["coyote","dotnet","fuzzing","software-reliability","systematic-testing","testing","testing-tools"],"latest_commit_sha":null,"homepage":"https://microsoft.github.io/coyote/","language":"C#","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"other","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/microsoft.png","metadata":{"files":{"readme":"README.md","changelog":"History.md","contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":"CITATION.cff","codeowners":null,"security":"SECURITY.md","support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null}},"created_at":"2019-08-15T01:09:42.000Z","updated_at":"2025-08-31T15:26:04.000Z","dependencies_parsed_at":"2023-02-18T12:01:14.888Z","dependency_job_id":"ca2274da-1964-4405-942d-1089a47c29b2","html_url":"https://github.com/microsoft/coyote","commit_stats":null,"previous_names":[],"tags_count":0,"template":false,"template_full_name":null,"purl":"pkg:github/microsoft/coyote","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/microsoft%2Fcoyote","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/microsoft%2Fcoyote/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/microsoft%2Fcoyote/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/microsoft%2Fcoyote/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/microsoft","download_url":"https://codeload.github.com/microsoft/coyote/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/microsoft%2Fcoyote/sbom","scorecard":{"id":643303,"data":{"date":"2025-08-11","repo":{"name":"github.com/microsoft/coyote","commit":"f2c135d201341ee5eff3d82cac62bdb85b25139f"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":5.2,"checks":[{"name":"Maintained","score":0,"reason":"0 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: SECURITY.md:1","Info: Found linked content: SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: SECURITY.md:1","Info: Found text in security policy: SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Code-Review","score":1,"reason":"Found 5/30 approved changesets -- score normalized to 1","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: jobLevel 'contents' permission set to 'read': .github/workflows/codeql-analysis.yml:14","Info: jobLevel 'actions' permission set to 'read': .github/workflows/codeql-analysis.yml:13","Warn: no topLevel permission defined: .github/workflows/codeql-analysis.yml:1","Warn: topLevel 'contents' permission set to 'write': .github/workflows/publish-docs.yml:10","Warn: no topLevel permission defined: .github/workflows/test-coyote.yml:1","Warn: no topLevel permission defined: .github/workflows/test-performance.yml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"License","score":9,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Warn: project license file does not contain an FSF or OSI license."],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Branch-Protection","score":8,"reason":"branch protection is not maximal on development and all release branches","details":["Info: 'allow deletion' disabled on branch 'main'","Info: 'force pushes' disabled on branch 'main'","Warn: 'branch protection settings apply to administrators' is disabled on branch 'main'","Warn: 'stale review dismissal' is disabled on branch 'main'","Warn: required approving review count is 1 on branch 'main'","Warn: codeowners review is required - but no codeowners file found in repo","Info: 'last push approval' is required to merge on branch 'main'","Info: status check found to merge onto on branch 'main'","Info: PRs are required in order to make changes on branch 'main'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Vulnerabilities","score":9,"reason":"1 existing vulnerabilities detected","details":["Warn: Project is vulnerable to: PYSEC-2020-73"],"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/microsoft/coyote/codeql-analysis.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/microsoft/coyote/codeql-analysis.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/microsoft/coyote/codeql-analysis.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/microsoft/coyote/codeql-analysis.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:48: update your workflow using https://app.stepsecurity.io/secureworkflow/microsoft/coyote/codeql-analysis.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-docs.yml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/microsoft/coyote/publish-docs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-coyote.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/microsoft/coyote/test-coyote.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-coyote.yml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/microsoft/coyote/test-coyote.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-coyote.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/microsoft/coyote/test-coyote.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-coyote.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/microsoft/coyote/test-coyote.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-coyote.yml:59: update your workflow using https://app.stepsecurity.io/secureworkflow/microsoft/coyote/test-coyote.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-coyote.yml:65: update your workflow using https://app.stepsecurity.io/secureworkflow/microsoft/coyote/test-coyote.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-coyote.yml:79: update your workflow using https://app.stepsecurity.io/secureworkflow/microsoft/coyote/test-coyote.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-coyote.yml:81: update your workflow using https://app.stepsecurity.io/secureworkflow/microsoft/coyote/test-coyote.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-coyote.yml:85: update your workflow using https://app.stepsecurity.io/secureworkflow/microsoft/coyote/test-coyote.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-performance.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/microsoft/coyote/test-performance.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-performance.yml:23: update your workflow using https://app.stepsecurity.io/secureworkflow/microsoft/coyote/test-performance.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-performance.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/microsoft/coyote/test-performance.yml/main?enable=pin","Warn: pipCommand not pinned by hash: .github/workflows/publish-docs.yml:18","Warn: pipCommand not pinned by hash: .github/workflows/publish-docs.yml:20","Warn: pipCommand not pinned by hash: .github/workflows/publish-docs.yml:21","Info:   0 out of  15 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of   3 third-party GitHubAction dependencies pinned","Info:   0 out of   3 pipCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"SAST","score":7,"reason":"SAST tool detected but not run on all commits","details":["Info: SAST configuration detected: CodeQL","Warn: 0 commits out of 29 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-21T11:24:17.379Z","repository_id":37496140,"created_at":"2025-08-21T11:24:17.379Z","updated_at":"2025-08-21T11:24:17.379Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":273690671,"owners_count":25150633,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","status":"online","status_checked_at":"2025-09-04T02:00:08.968Z","response_time":61,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"owner":{"login":"microsoft","name":"Microsoft","uuid":"6154722","kind":"organization","description":"Open source projects and samples from Microsoft","email":"opensource@microsoft.com","website":"https://opensource.microsoft.com","location":"Redmond, WA","twitter":"OpenAtMicrosoft","company":null,"icon_url":"https://avatars.githubusercontent.com/u/6154722?v=4","repositories_count":7257,"last_synced_at":"2025-09-02T00:27:42.371Z","metadata":{"has_sponsors_listing":false},"html_url":"https://github.com/microsoft","funding_links":[],"total_stars":3460437,"followers":101241,"following":0,"created_at":"2022-11-02T16:20:12.368Z","updated_at":"2025-09-02T00:27:42.372Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/microsoft","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/microsoft/repositories"},"packages":[{"id":9015378,"name":"microsoft.coyote.actors","ecosystem":"nuget","description":"The Coyote actor runtime and library.","homepage":"https://microsoft.github.io/coyote/","licenses":"other","normalized_licenses":["GPL-1.0+"],"repository_url":"https://github.com/microsoft/coyote","keywords_array":["actors","state-machines","asynchronous","reactive","systematic-testing"],"namespace":null,"versions_count":12,"first_release_published_at":"2022-10-31T20:02:59.750Z","latest_release_published_at":"2024-03-18T19:30:54.667Z","latest_release_number":"1.7.11","last_synced_at":"2025-09-02T00:51:33.175Z","created_at":"2024-02-27T02:06:35.809Z","updated_at":"2025-09-02T01:26:28.295Z","registry_url":"https://www.nuget.org/packages/microsoft.coyote.actors/","install_command":"Install-Package microsoft.coyote.actors","documentation_url":null,"metadata":{"copyright":"© Microsoft Corporation. All rights reserved.","license_info":{"type":"file","text":"LICENSE","version":null},"license_url":"https://aka.ms/deprecateLicenseUrl","require_license_acceptance":false,"icon":"images\\icon.png","readme":"docs\\readme.md","repository":{"type":"git","url":"https://github.com/microsoft/coyote","branch":null,"commit":"4d2f9dd4e0fdeb528557e7058f3e4379c184c6da"},"development_dependency":false,"serviceable":false,"framework_assemblies":[],"package_types":[],"release_notes":"https://github.com/microsoft/coyote/blob/main/History.md","dependency_summary":{"total_dependency_groups":4,"target_frameworks":[".NETCoreApp3.1","net6.0","net8.0",".NETStandard2.0"],"total_dependencies":4}},"repo_metadata":{"id":37496140,"uuid":"202449779","full_name":"microsoft/coyote","owner":"microsoft","description":"Coyote is a library and tool for testing concurrent C# code and deterministically reproducing bugs.","archived":false,"fork":false,"pushed_at":"2024-12-11T17:28:41.000Z","size":20970,"stargazers_count":1565,"open_issues_count":45,"forks_count":81,"subscribers_count":36,"default_branch":"main","last_synced_at":"2025-09-02T00:36:51.091Z","etag":null,"topics":["coyote","dotnet","fuzzing","software-reliability","systematic-testing","testing","testing-tools"],"latest_commit_sha":null,"homepage":"https://microsoft.github.io/coyote/","language":"C#","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"other","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/microsoft.png","metadata":{"files":{"readme":"README.md","changelog":"History.md","contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":"CITATION.cff","codeowners":null,"security":"SECURITY.md","support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null}},"created_at":"2019-08-15T01:09:42.000Z","updated_at":"2025-08-31T15:26:04.000Z","dependencies_parsed_at":"2023-02-18T12:01:14.888Z","dependency_job_id":"ca2274da-1964-4405-942d-1089a47c29b2","html_url":"https://github.com/microsoft/coyote","commit_stats":null,"previous_names":[],"tags_count":0,"template":false,"template_full_name":null,"purl":"pkg:github/microsoft/coyote","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/microsoft%2Fcoyote","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/microsoft%2Fcoyote/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/microsoft%2Fcoyote/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/microsoft%2Fcoyote/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/microsoft","download_url":"https://codeload.github.com/microsoft/coyote/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/microsoft%2Fcoyote/sbom","scorecard":{"id":643303,"data":{"date":"2025-08-11","repo":{"name":"github.com/microsoft/coyote","commit":"f2c135d201341ee5eff3d82cac62bdb85b25139f"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":5.2,"checks":[{"name":"Maintained","score":0,"reason":"0 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: SECURITY.md:1","Info: Found linked content: SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: SECURITY.md:1","Info: Found text in security policy: SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Code-Review","score":1,"reason":"Found 5/30 approved changesets -- score normalized to 1","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: jobLevel 'contents' permission set to 'read': .github/workflows/codeql-analysis.yml:14","Info: jobLevel 'actions' permission set to 'read': .github/workflows/codeql-analysis.yml:13","Warn: no topLevel permission defined: .github/workflows/codeql-analysis.yml:1","Warn: topLevel 'contents' permission set to 'write': .github/workflows/publish-docs.yml:10","Warn: no topLevel permission defined: .github/workflows/test-coyote.yml:1","Warn: no topLevel permission defined: .github/workflows/test-performance.yml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"License","score":9,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Warn: project license file does not contain an FSF or OSI license."],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Branch-Protection","score":8,"reason":"branch protection is not maximal on development and all release branches","details":["Info: 'allow deletion' disabled on branch 'main'","Info: 'force pushes' disabled on branch 'main'","Warn: 'branch protection settings apply to administrators' is disabled on branch 'main'","Warn: 'stale review dismissal' is disabled on branch 'main'","Warn: required approving review count is 1 on branch 'main'","Warn: codeowners review is required - but no codeowners file found in repo","Info: 'last push approval' is required to merge on branch 'main'","Info: status check found to merge onto on branch 'main'","Info: PRs are required in order to make changes on branch 'main'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Vulnerabilities","score":9,"reason":"1 existing vulnerabilities detected","details":["Warn: Project is vulnerable to: PYSEC-2020-73"],"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/microsoft/coyote/codeql-analysis.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/microsoft/coyote/codeql-analysis.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/microsoft/coyote/codeql-analysis.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/microsoft/coyote/codeql-analysis.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:48: update your workflow using https://app.stepsecurity.io/secureworkflow/microsoft/coyote/codeql-analysis.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-docs.yml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/microsoft/coyote/publish-docs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-coyote.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/microsoft/coyote/test-coyote.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-coyote.yml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/microsoft/coyote/test-coyote.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-coyote.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/microsoft/coyote/test-coyote.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-coyote.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/microsoft/coyote/test-coyote.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-coyote.yml:59: update your workflow using https://app.stepsecurity.io/secureworkflow/microsoft/coyote/test-coyote.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-coyote.yml:65: update your workflow using https://app.stepsecurity.io/secureworkflow/microsoft/coyote/test-coyote.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-coyote.yml:79: update your workflow using https://app.stepsecurity.io/secureworkflow/microsoft/coyote/test-coyote.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-coyote.yml:81: update your workflow using https://app.stepsecurity.io/secureworkflow/microsoft/coyote/test-coyote.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-coyote.yml:85: update your workflow using https://app.stepsecurity.io/secureworkflow/microsoft/coyote/test-coyote.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-performance.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/microsoft/coyote/test-performance.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-performance.yml:23: update your workflow using https://app.stepsecurity.io/secureworkflow/microsoft/coyote/test-performance.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-performance.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/microsoft/coyote/test-performance.yml/main?enable=pin","Warn: pipCommand not pinned by hash: .github/workflows/publish-docs.yml:18","Warn: pipCommand not pinned by hash: .github/workflows/publish-docs.yml:20","Warn: pipCommand not pinned by hash: .github/workflows/publish-docs.yml:21","Info:   0 out of  15 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of   3 third-party GitHubAction dependencies pinned","Info:   0 out of   3 pipCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"SAST","score":7,"reason":"SAST tool detected but not run on all commits","details":["Info: SAST configuration detected: CodeQL","Warn: 0 commits out of 29 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-21T11:24:17.379Z","repository_id":37496140,"created_at":"2025-08-21T11:24:17.379Z","updated_at":"2025-08-21T11:24:17.379Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":273218161,"owners_count":25065905,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","status":"online","status_checked_at":"2025-09-01T02:00:09.058Z","response_time":120,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"microsoft","name":"Microsoft","uuid":"6154722","kind":"organization","description":"Open source projects and samples from Microsoft","email":"opensource@microsoft.com","website":"https://opensource.microsoft.com","location":"Redmond, WA","twitter":"OpenAtMicrosoft","company":null,"icon_url":"https://avatars.githubusercontent.com/u/6154722?v=4","repositories_count":7257,"last_synced_at":"2025-09-02T00:27:42.371Z","metadata":{"has_sponsors_listing":false},"html_url":"https://github.com/microsoft","funding_links":[],"total_stars":3460437,"followers":101241,"following":0,"created_at":"2022-11-02T16:20:12.368Z","updated_at":"2025-09-02T00:27:42.372Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/microsoft","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/microsoft/repositories"},"tags":[]},"repo_metadata_updated_at":"2025-09-02T01:26:28.295Z","dependent_packages_count":2,"downloads":174868,"downloads_period":"total","dependent_repos_count":0,"rankings":{"downloads":6.207494918268497,"dependent_repos_count":13.819348826338206,"dependent_packages_count":18.835372714592,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":12.954072153066235},"purl":"pkg:nuget/microsoft.coyote.actors","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/nuget/microsoft.coyote.actors","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/nuget/microsoft.coyote.actors","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/nuget/microsoft.coyote.actors/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2025-08-31T18:50:23.826Z","issues_count":32,"pull_requests_count":75,"avg_time_to_close_issue":3156539.8518518517,"avg_time_to_close_pull_request":91101.94594594595,"issues_closed_count":27,"pull_requests_closed_count":74,"pull_request_authors_count":11,"issue_authors_count":22,"avg_comments_per_issue":3.84375,"avg_comments_per_pull_request":0.52,"merged_pull_requests_count":66,"bot_issues_count":0,"bot_pull_requests_count":0,"past_year_issues_count":5,"past_year_pull_requests_count":2,"past_year_avg_time_to_close_issue":81911.0,"past_year_avg_time_to_close_pull_request":482.0,"past_year_issues_closed_count":1,"past_year_pull_requests_closed_count":1,"past_year_pull_request_authors_count":2,"past_year_issue_authors_count":5,"past_year_avg_comments_per_issue":0.0,"past_year_avg_comments_per_pull_request":0.0,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":0,"past_year_merged_pull_requests_count":1,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/microsoft%2Fcoyote/issues","maintainers":[{"login":"pdeligia","count":58,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/pdeligia"},{"login":"lovettchris","count":13,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/lovettchris"},{"login":"akashlal","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/akashlal"},{"login":"JamieMagee","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/JamieMagee"}],"active_maintainers":[{"login":"akashlal","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/akashlal"},{"login":"JamieMagee","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/JamieMagee"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/nuget.org/packages/microsoft.coyote.actors/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/nuget.org/packages/microsoft.coyote.actors/version_numbers","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/nuget.org/packages/microsoft.coyote.actors/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/nuget.org/packages/microsoft.coyote.actors/related_packages","maintainers":[{"uuid":"Microsoft","login":"Microsoft","name":null,"email":null,"url":null,"packages_count":7616,"html_url":"https://www.nuget.org/profiles/Microsoft","role":null,"created_at":"2024-02-27T02:14:10.780Z","updated_at":"2024-02-27T02:14:10.780Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/nuget.org/maintainers/Microsoft/packages"},{"uuid":"coyote","login":"coyote","name":null,"email":null,"url":null,"packages_count":6,"html_url":"https://www.nuget.org/profiles/coyote","role":null,"created_at":"2024-02-27T02:14:10.715Z","updated_at":"2024-02-27T02:14:10.715Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/nuget.org/maintainers/coyote/packages"}],"registry":{"name":"nuget.org","url":"https://www.nuget.org","ecosystem":"nuget","default":true,"packages_count":740094,"maintainers_count":102509,"namespaces_count":0,"keywords_count":152168,"github":"nuget","metadata":{"funded_packages_count":25417},"icon_url":"https://github.com/nuget.png","created_at":"2022-04-04T15:19:23.147Z","updated_at":"2025-09-04T05:39:21.982Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/nuget.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/nuget.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/nuget.org/namespaces"}},{"id":9015385,"name":"microsoft.coyote.core","ecosystem":"nuget","description":"The Coyote core libraries and runtime.","homepage":"https://microsoft.github.io/coyote/","licenses":"other","normalized_licenses":["GPL-1.0+"],"repository_url":"https://github.com/microsoft/coyote","keywords_array":["systematic-testing","specifications","concurrency","dotnet","csharp"],"namespace":null,"versions_count":12,"first_release_published_at":"2022-10-31T20:03:06.570Z","latest_release_published_at":"2024-03-18T19:31:01.177Z","latest_release_number":"1.7.11","last_synced_at":"2025-09-02T00:51:27.528Z","created_at":"2024-02-27T02:06:36.066Z","updated_at":"2025-09-02T01:26:28.399Z","registry_url":"https://www.nuget.org/packages/microsoft.coyote.core/","install_command":"Install-Package microsoft.coyote.core","documentation_url":null,"metadata":{"copyright":"© Microsoft Corporation. All rights reserved.","license_info":{"type":"file","text":"LICENSE","version":null},"license_url":"https://aka.ms/deprecateLicenseUrl","require_license_acceptance":false,"icon":"images\\icon.png","readme":"docs\\readme.md","repository":{"type":"git","url":"https://github.com/microsoft/coyote","branch":null,"commit":"4d2f9dd4e0fdeb528557e7058f3e4379c184c6da"},"development_dependency":false,"serviceable":false,"framework_assemblies":[],"package_types":[],"release_notes":"https://github.com/microsoft/coyote/blob/main/History.md","dependency_summary":{"total_dependency_groups":4,"target_frameworks":[".NETCoreApp3.1","net6.0","net8.0",".NETStandard2.0"],"total_dependencies":4}},"repo_metadata":{"id":37496140,"uuid":"202449779","full_name":"microsoft/coyote","owner":"microsoft","description":"Coyote is a library and tool for testing concurrent C# code and deterministically reproducing bugs.","archived":false,"fork":false,"pushed_at":"2024-12-11T17:28:41.000Z","size":20970,"stargazers_count":1565,"open_issues_count":45,"forks_count":81,"subscribers_count":36,"default_branch":"main","last_synced_at":"2025-09-02T00:36:51.091Z","etag":null,"topics":["coyote","dotnet","fuzzing","software-reliability","systematic-testing","testing","testing-tools"],"latest_commit_sha":null,"homepage":"https://microsoft.github.io/coyote/","language":"C#","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"other","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/microsoft.png","metadata":{"files":{"readme":"README.md","changelog":"History.md","contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":"CITATION.cff","codeowners":null,"security":"SECURITY.md","support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null}},"created_at":"2019-08-15T01:09:42.000Z","updated_at":"2025-08-31T15:26:04.000Z","dependencies_parsed_at":"2023-02-18T12:01:14.888Z","dependency_job_id":"ca2274da-1964-4405-942d-1089a47c29b2","html_url":"https://github.com/microsoft/coyote","commit_stats":null,"previous_names":[],"tags_count":0,"template":false,"template_full_name":null,"purl":"pkg:github/microsoft/coyote","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/microsoft%2Fcoyote","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/microsoft%2Fcoyote/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/microsoft%2Fcoyote/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/microsoft%2Fcoyote/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/microsoft","download_url":"https://codeload.github.com/microsoft/coyote/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/microsoft%2Fcoyote/sbom","scorecard":{"id":643303,"data":{"date":"2025-08-11","repo":{"name":"github.com/microsoft/coyote","commit":"f2c135d201341ee5eff3d82cac62bdb85b25139f"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":5.2,"checks":[{"name":"Maintained","score":0,"reason":"0 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: SECURITY.md:1","Info: Found linked content: SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: SECURITY.md:1","Info: Found text in security policy: SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Code-Review","score":1,"reason":"Found 5/30 approved changesets -- score normalized to 1","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: jobLevel 'contents' permission set to 'read': .github/workflows/codeql-analysis.yml:14","Info: jobLevel 'actions' permission set to 'read': .github/workflows/codeql-analysis.yml:13","Warn: no topLevel permission defined: .github/workflows/codeql-analysis.yml:1","Warn: topLevel 'contents' permission set to 'write': .github/workflows/publish-docs.yml:10","Warn: no topLevel permission defined: .github/workflows/test-coyote.yml:1","Warn: no topLevel permission defined: .github/workflows/test-performance.yml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"License","score":9,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Warn: project license file does not contain an FSF or OSI license."],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Branch-Protection","score":8,"reason":"branch protection is not maximal on development and all release branches","details":["Info: 'allow deletion' disabled on branch 'main'","Info: 'force pushes' disabled on branch 'main'","Warn: 'branch protection settings apply to administrators' is disabled on branch 'main'","Warn: 'stale review dismissal' is disabled on branch 'main'","Warn: required approving review count is 1 on branch 'main'","Warn: codeowners review is required - but no codeowners file found in repo","Info: 'last push approval' is required to merge on branch 'main'","Info: status check found to merge onto on branch 'main'","Info: PRs are required in order to make changes on branch 'main'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Vulnerabilities","score":9,"reason":"1 existing vulnerabilities detected","details":["Warn: Project is vulnerable to: PYSEC-2020-73"],"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/microsoft/coyote/codeql-analysis.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/microsoft/coyote/codeql-analysis.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/microsoft/coyote/codeql-analysis.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/microsoft/coyote/codeql-analysis.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:48: update your workflow using https://app.stepsecurity.io/secureworkflow/microsoft/coyote/codeql-analysis.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-docs.yml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/microsoft/coyote/publish-docs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-coyote.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/microsoft/coyote/test-coyote.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-coyote.yml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/microsoft/coyote/test-coyote.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-coyote.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/microsoft/coyote/test-coyote.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-coyote.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/microsoft/coyote/test-coyote.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-coyote.yml:59: update your workflow using https://app.stepsecurity.io/secureworkflow/microsoft/coyote/test-coyote.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-coyote.yml:65: update your workflow using https://app.stepsecurity.io/secureworkflow/microsoft/coyote/test-coyote.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-coyote.yml:79: update your workflow using https://app.stepsecurity.io/secureworkflow/microsoft/coyote/test-coyote.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-coyote.yml:81: update your workflow using https://app.stepsecurity.io/secureworkflow/microsoft/coyote/test-coyote.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-coyote.yml:85: update your workflow using https://app.stepsecurity.io/secureworkflow/microsoft/coyote/test-coyote.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-performance.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/microsoft/coyote/test-performance.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-performance.yml:23: update your workflow using https://app.stepsecurity.io/secureworkflow/microsoft/coyote/test-performance.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-performance.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/microsoft/coyote/test-performance.yml/main?enable=pin","Warn: pipCommand not pinned by hash: .github/workflows/publish-docs.yml:18","Warn: pipCommand not pinned by hash: .github/workflows/publish-docs.yml:20","Warn: pipCommand not pinned by hash: .github/workflows/publish-docs.yml:21","Info:   0 out of  15 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of   3 third-party GitHubAction dependencies pinned","Info:   0 out of   3 pipCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"SAST","score":7,"reason":"SAST tool detected but not run on all commits","details":["Info: SAST configuration detected: CodeQL","Warn: 0 commits out of 29 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-21T11:24:17.379Z","repository_id":37496140,"created_at":"2025-08-21T11:24:17.379Z","updated_at":"2025-08-21T11:24:17.379Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":273218161,"owners_count":25065905,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","status":"online","status_checked_at":"2025-09-01T02:00:09.058Z","response_time":120,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"microsoft","name":"Microsoft","uuid":"6154722","kind":"organization","description":"Open source projects and samples from Microsoft","email":"opensource@microsoft.com","website":"https://opensource.microsoft.com","location":"Redmond, WA","twitter":"OpenAtMicrosoft","company":null,"icon_url":"https://avatars.githubusercontent.com/u/6154722?v=4","repositories_count":7257,"last_synced_at":"2025-09-02T00:27:42.371Z","metadata":{"has_sponsors_listing":false},"html_url":"https://github.com/microsoft","funding_links":[],"total_stars":3460437,"followers":101241,"following":0,"created_at":"2022-11-02T16:20:12.368Z","updated_at":"2025-09-02T00:27:42.372Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/microsoft","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/microsoft/repositories"},"tags":[]},"repo_metadata_updated_at":"2025-09-02T01:26:28.399Z","dependent_packages_count":3,"downloads":176510,"downloads_period":"total","dependent_repos_count":0,"rankings":{"downloads":6.134909761701852,"dependent_repos_count":13.819348826338206,"dependent_packages_count":18.835372714592,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":12.929877100877354},"purl":"pkg:nuget/microsoft.coyote.core","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/nuget/microsoft.coyote.core","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/nuget/microsoft.coyote.core","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/nuget/microsoft.coyote.core/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2025-08-31T18:50:23.826Z","issues_count":32,"pull_requests_count":75,"avg_time_to_close_issue":3156539.8518518517,"avg_time_to_close_pull_request":91101.94594594595,"issues_closed_count":27,"pull_requests_closed_count":74,"pull_request_authors_count":11,"issue_authors_count":22,"avg_comments_per_issue":3.84375,"avg_comments_per_pull_request":0.52,"merged_pull_requests_count":66,"bot_issues_count":0,"bot_pull_requests_count":0,"past_year_issues_count":5,"past_year_pull_requests_count":2,"past_year_avg_time_to_close_issue":81911.0,"past_year_avg_time_to_close_pull_request":482.0,"past_year_issues_closed_count":1,"past_year_pull_requests_closed_count":1,"past_year_pull_request_authors_count":2,"past_year_issue_authors_count":5,"past_year_avg_comments_per_issue":0.0,"past_year_avg_comments_per_pull_request":0.0,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":0,"past_year_merged_pull_requests_count":1,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/microsoft%2Fcoyote/issues","maintainers":[{"login":"pdeligia","count":58,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/pdeligia"},{"login":"lovettchris","count":13,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/lovettchris"},{"login":"akashlal","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/akashlal"},{"login":"JamieMagee","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/JamieMagee"}],"active_maintainers":[{"login":"akashlal","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/akashlal"},{"login":"JamieMagee","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/JamieMagee"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/nuget.org/packages/microsoft.coyote.core/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/nuget.org/packages/microsoft.coyote.core/version_numbers","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/nuget.org/packages/microsoft.coyote.core/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/nuget.org/packages/microsoft.coyote.core/related_packages","maintainers":[{"uuid":"Microsoft","login":"Microsoft","name":null,"email":null,"url":null,"packages_count":7616,"html_url":"https://www.nuget.org/profiles/Microsoft","role":null,"created_at":"2024-02-27T02:14:10.919Z","updated_at":"2024-02-27T02:14:10.919Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/nuget.org/maintainers/Microsoft/packages"},{"uuid":"coyote","login":"coyote","name":null,"email":null,"url":null,"packages_count":6,"html_url":"https://www.nuget.org/profiles/coyote","role":null,"created_at":"2024-02-27T02:14:10.872Z","updated_at":"2024-02-27T02:14:10.872Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/nuget.org/maintainers/coyote/packages"}],"registry":{"name":"nuget.org","url":"https://www.nuget.org","ecosystem":"nuget","default":true,"packages_count":740094,"maintainers_count":102509,"namespaces_count":0,"keywords_count":152168,"github":"nuget","metadata":{"funded_packages_count":25417},"icon_url":"https://github.com/nuget.png","created_at":"2022-04-04T15:19:23.147Z","updated_at":"2025-09-04T05:39:21.982Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/nuget.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/nuget.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/nuget.org/namespaces"}},{"id":9015376,"name":"microsoft.coyote","ecosystem":"nuget","description":"Coyote is a library and tool for testing concurrent C# code and deterministically reproducing bugs.","homepage":"https://microsoft.github.io/coyote/","licenses":"other","normalized_licenses":["GPL-1.0+"],"repository_url":"https://github.com/microsoft/coyote","keywords_array":["systematic-testing","specifications","concurrency","dotnet","csharp"],"namespace":null,"versions_count":78,"first_release_published_at":"1900-01-01T00:00:00.000Z","latest_release_published_at":"2024-03-18T19:30:52.360Z","latest_release_number":"1.7.11","last_synced_at":"2025-09-02T00:51:58.023Z","created_at":"2024-02-27T02:06:35.794Z","updated_at":"2025-09-02T01:26:28.399Z","registry_url":"https://www.nuget.org/packages/microsoft.coyote/","install_command":"Install-Package microsoft.coyote","documentation_url":null,"metadata":{"copyright":"© Microsoft Corporation. All rights reserved.","license_info":{"type":"file","text":"LICENSE","version":null},"license_url":"https://aka.ms/deprecateLicenseUrl","require_license_acceptance":false,"icon":"images\\icon.png","readme":"docs\\readme.md","repository":{"type":"git","url":"https://github.com/microsoft/coyote","branch":null,"commit":"4d2f9dd4e0fdeb528557e7058f3e4379c184c6da"},"development_dependency":false,"serviceable":false,"framework_assemblies":[],"package_types":[],"release_notes":"https://github.com/microsoft/coyote/blob/main/History.md","dependency_summary":{"total_dependency_groups":4,"target_frameworks":[".NETCoreApp3.1","net6.0","net8.0",".NETStandard2.0"],"total_dependencies":12}},"repo_metadata":{"id":37496140,"uuid":"202449779","full_name":"microsoft/coyote","owner":"microsoft","description":"Coyote is a library and tool for testing concurrent C# code and deterministically reproducing bugs.","archived":false,"fork":false,"pushed_at":"2024-12-11T17:28:41.000Z","size":20970,"stargazers_count":1565,"open_issues_count":45,"forks_count":81,"subscribers_count":36,"default_branch":"main","last_synced_at":"2025-09-02T00:36:51.091Z","etag":null,"topics":["coyote","dotnet","fuzzing","software-reliability","systematic-testing","testing","testing-tools"],"latest_commit_sha":null,"homepage":"https://microsoft.github.io/coyote/","language":"C#","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"other","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/microsoft.png","metadata":{"files":{"readme":"README.md","changelog":"History.md","contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":"CITATION.cff","codeowners":null,"security":"SECURITY.md","support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null}},"created_at":"2019-08-15T01:09:42.000Z","updated_at":"2025-08-31T15:26:04.000Z","dependencies_parsed_at":"2023-02-18T12:01:14.888Z","dependency_job_id":"ca2274da-1964-4405-942d-1089a47c29b2","html_url":"https://github.com/microsoft/coyote","commit_stats":null,"previous_names":[],"tags_count":0,"template":false,"template_full_name":null,"purl":"pkg:github/microsoft/coyote","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/microsoft%2Fcoyote","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/microsoft%2Fcoyote/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/microsoft%2Fcoyote/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/microsoft%2Fcoyote/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/microsoft","download_url":"https://codeload.github.com/microsoft/coyote/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/microsoft%2Fcoyote/sbom","scorecard":{"id":643303,"data":{"date":"2025-08-11","repo":{"name":"github.com/microsoft/coyote","commit":"f2c135d201341ee5eff3d82cac62bdb85b25139f"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":5.2,"checks":[{"name":"Maintained","score":0,"reason":"0 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: SECURITY.md:1","Info: Found linked content: SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: SECURITY.md:1","Info: Found text in security policy: SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Code-Review","score":1,"reason":"Found 5/30 approved changesets -- score normalized to 1","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: jobLevel 'contents' permission set to 'read': .github/workflows/codeql-analysis.yml:14","Info: jobLevel 'actions' permission set to 'read': .github/workflows/codeql-analysis.yml:13","Warn: no topLevel permission defined: .github/workflows/codeql-analysis.yml:1","Warn: topLevel 'contents' permission set to 'write': .github/workflows/publish-docs.yml:10","Warn: no topLevel permission defined: .github/workflows/test-coyote.yml:1","Warn: no topLevel permission defined: .github/workflows/test-performance.yml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"License","score":9,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Warn: project license file does not contain an FSF or OSI license."],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Branch-Protection","score":8,"reason":"branch protection is not maximal on development and all release branches","details":["Info: 'allow deletion' disabled on branch 'main'","Info: 'force pushes' disabled on branch 'main'","Warn: 'branch protection settings apply to administrators' is disabled on branch 'main'","Warn: 'stale review dismissal' is disabled on branch 'main'","Warn: required approving review count is 1 on branch 'main'","Warn: codeowners review is required - but no codeowners file found in repo","Info: 'last push approval' is required to merge on branch 'main'","Info: status check found to merge onto on branch 'main'","Info: PRs are required in order to make changes on branch 'main'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Vulnerabilities","score":9,"reason":"1 existing vulnerabilities detected","details":["Warn: Project is vulnerable to: PYSEC-2020-73"],"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/microsoft/coyote/codeql-analysis.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/microsoft/coyote/codeql-analysis.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/microsoft/coyote/codeql-analysis.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/microsoft/coyote/codeql-analysis.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:48: update your workflow using https://app.stepsecurity.io/secureworkflow/microsoft/coyote/codeql-analysis.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-docs.yml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/microsoft/coyote/publish-docs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-coyote.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/microsoft/coyote/test-coyote.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-coyote.yml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/microsoft/coyote/test-coyote.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-coyote.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/microsoft/coyote/test-coyote.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-coyote.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/microsoft/coyote/test-coyote.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-coyote.yml:59: update your workflow using https://app.stepsecurity.io/secureworkflow/microsoft/coyote/test-coyote.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-coyote.yml:65: update your workflow using https://app.stepsecurity.io/secureworkflow/microsoft/coyote/test-coyote.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-coyote.yml:79: update your workflow using https://app.stepsecurity.io/secureworkflow/microsoft/coyote/test-coyote.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-coyote.yml:81: update your workflow using https://app.stepsecurity.io/secureworkflow/microsoft/coyote/test-coyote.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-coyote.yml:85: update your workflow using https://app.stepsecurity.io/secureworkflow/microsoft/coyote/test-coyote.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-performance.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/microsoft/coyote/test-performance.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-performance.yml:23: update your workflow using https://app.stepsecurity.io/secureworkflow/microsoft/coyote/test-performance.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-performance.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/microsoft/coyote/test-performance.yml/main?enable=pin","Warn: pipCommand not pinned by hash: .github/workflows/publish-docs.yml:18","Warn: pipCommand not pinned by hash: .github/workflows/publish-docs.yml:20","Warn: pipCommand not pinned by hash: .github/workflows/publish-docs.yml:21","Info:   0 out of  15 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of   3 third-party GitHubAction dependencies pinned","Info:   0 out of   3 pipCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"SAST","score":7,"reason":"SAST tool detected but not run on all commits","details":["Info: SAST configuration detected: CodeQL","Warn: 0 commits out of 29 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-21T11:24:17.379Z","repository_id":37496140,"created_at":"2025-08-21T11:24:17.379Z","updated_at":"2025-08-21T11:24:17.379Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":273218161,"owners_count":25065905,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","status":"online","status_checked_at":"2025-09-01T02:00:09.058Z","response_time":120,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"microsoft","name":"Microsoft","uuid":"6154722","kind":"organization","description":"Open source projects and samples from Microsoft","email":"opensource@microsoft.com","website":"https://opensource.microsoft.com","location":"Redmond, WA","twitter":"OpenAtMicrosoft","company":null,"icon_url":"https://avatars.githubusercontent.com/u/6154722?v=4","repositories_count":7257,"last_synced_at":"2025-09-02T00:27:42.371Z","metadata":{"has_sponsors_listing":false},"html_url":"https://github.com/microsoft","funding_links":[],"total_stars":3460437,"followers":101241,"following":0,"created_at":"2022-11-02T16:20:12.368Z","updated_at":"2025-09-02T00:27:42.372Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/microsoft","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/microsoft/repositories"},"tags":[]},"repo_metadata_updated_at":"2025-09-02T01:26:28.399Z","dependent_packages_count":2,"downloads":1250119,"downloads_period":"total","dependent_repos_count":0,"rankings":{"downloads":1.0197382615288832,"dependent_repos_count":13.819348826338206,"dependent_packages_count":18.835372714592,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":11.22481993415303},"purl":"pkg:nuget/microsoft.coyote","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/nuget/microsoft.coyote","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/nuget/microsoft.coyote","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/nuget/microsoft.coyote/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2025-08-31T18:50:23.826Z","issues_count":32,"pull_requests_count":75,"avg_time_to_close_issue":3156539.8518518517,"avg_time_to_close_pull_request":91101.94594594595,"issues_closed_count":27,"pull_requests_closed_count":74,"pull_request_authors_count":11,"issue_authors_count":22,"avg_comments_per_issue":3.84375,"avg_comments_per_pull_request":0.52,"merged_pull_requests_count":66,"bot_issues_count":0,"bot_pull_requests_count":0,"past_year_issues_count":5,"past_year_pull_requests_count":2,"past_year_avg_time_to_close_issue":81911.0,"past_year_avg_time_to_close_pull_request":482.0,"past_year_issues_closed_count":1,"past_year_pull_requests_closed_count":1,"past_year_pull_request_authors_count":2,"past_year_issue_authors_count":5,"past_year_avg_comments_per_issue":0.0,"past_year_avg_comments_per_pull_request":0.0,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":0,"past_year_merged_pull_requests_count":1,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/microsoft%2Fcoyote/issues","maintainers":[{"login":"pdeligia","count":58,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/pdeligia"},{"login":"lovettchris","count":13,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/lovettchris"},{"login":"akashlal","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/akashlal"},{"login":"JamieMagee","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/JamieMagee"}],"active_maintainers":[{"login":"akashlal","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/akashlal"},{"login":"JamieMagee","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/JamieMagee"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/nuget.org/packages/microsoft.coyote/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/nuget.org/packages/microsoft.coyote/version_numbers","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/nuget.org/packages/microsoft.coyote/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/nuget.org/packages/microsoft.coyote/related_packages","maintainers":[{"uuid":"Microsoft","login":"Microsoft","name":null,"email":null,"url":null,"packages_count":7616,"html_url":"https://www.nuget.org/profiles/Microsoft","role":null,"created_at":"2024-02-27T02:14:12.546Z","updated_at":"2024-02-27T02:14:12.546Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/nuget.org/maintainers/Microsoft/packages"},{"uuid":"coyote","login":"coyote","name":null,"email":null,"url":null,"packages_count":6,"html_url":"https://www.nuget.org/profiles/coyote","role":null,"created_at":"2024-02-27T02:14:12.422Z","updated_at":"2024-02-27T02:14:12.422Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/nuget.org/maintainers/coyote/packages"}],"registry":{"name":"nuget.org","url":"https://www.nuget.org","ecosystem":"nuget","default":true,"packages_count":740094,"maintainers_count":102509,"namespaces_count":0,"keywords_count":152168,"github":"nuget","metadata":{"funded_packages_count":25417},"icon_url":"https://github.com/nuget.png","created_at":"2022-04-04T15:19:23.147Z","updated_at":"2025-09-04T05:39:21.982Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/nuget.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/nuget.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/nuget.org/namespaces"}},{"id":9015377,"name":"microsoft.coyote.test","ecosystem":"nuget","description":"The Coyote systematic testing engine.","homepage":"https://microsoft.github.io/coyote/","licenses":"other","normalized_licenses":["GPL-1.0+"],"repository_url":"https://github.com/microsoft/coyote","keywords_array":["systematic-testing","specifications","concurrency","dotnet","csharp"],"namespace":null,"versions_count":57,"first_release_published_at":"1900-01-01T00:00:00.000Z","latest_release_published_at":"2024-03-18T19:31:03.927Z","latest_release_number":"1.7.11","last_synced_at":"2025-09-02T00:51:44.155Z","created_at":"2024-02-27T02:06:35.800Z","updated_at":"2025-09-02T01:26:28.400Z","registry_url":"https://www.nuget.org/packages/microsoft.coyote.test/","install_command":"Install-Package microsoft.coyote.test","documentation_url":null,"metadata":{"copyright":"© Microsoft Corporation. All rights reserved.","license_info":{"type":"file","text":"LICENSE","version":null},"license_url":"https://aka.ms/deprecateLicenseUrl","require_license_acceptance":false,"icon":"images\\icon.png","readme":"docs\\readme.md","repository":{"type":"git","url":"https://github.com/microsoft/coyote","branch":null,"commit":"4d2f9dd4e0fdeb528557e7058f3e4379c184c6da"},"development_dependency":false,"serviceable":false,"framework_assemblies":[],"package_types":[],"release_notes":"https://github.com/microsoft/coyote/blob/main/History.md","dependency_summary":{"total_dependency_groups":4,"target_frameworks":[".NETCoreApp3.1","net6.0","net8.0",".NETStandard2.0"],"total_dependencies":29}},"repo_metadata":{"id":37496140,"uuid":"202449779","full_name":"microsoft/coyote","owner":"microsoft","description":"Coyote is a library and tool for testing concurrent C# code and deterministically reproducing bugs.","archived":false,"fork":false,"pushed_at":"2024-12-11T17:28:41.000Z","size":20970,"stargazers_count":1565,"open_issues_count":45,"forks_count":81,"subscribers_count":36,"default_branch":"main","last_synced_at":"2025-09-02T00:36:51.091Z","etag":null,"topics":["coyote","dotnet","fuzzing","software-reliability","systematic-testing","testing","testing-tools"],"latest_commit_sha":null,"homepage":"https://microsoft.github.io/coyote/","language":"C#","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"other","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/microsoft.png","metadata":{"files":{"readme":"README.md","changelog":"History.md","contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":"CITATION.cff","codeowners":null,"security":"SECURITY.md","support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null}},"created_at":"2019-08-15T01:09:42.000Z","updated_at":"2025-08-31T15:26:04.000Z","dependencies_parsed_at":"2023-02-18T12:01:14.888Z","dependency_job_id":"ca2274da-1964-4405-942d-1089a47c29b2","html_url":"https://github.com/microsoft/coyote","commit_stats":null,"previous_names":[],"tags_count":0,"template":false,"template_full_name":null,"purl":"pkg:github/microsoft/coyote","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/microsoft%2Fcoyote","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/microsoft%2Fcoyote/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/microsoft%2Fcoyote/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/microsoft%2Fcoyote/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/microsoft","download_url":"https://codeload.github.com/microsoft/coyote/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/microsoft%2Fcoyote/sbom","scorecard":{"id":643303,"data":{"date":"2025-08-11","repo":{"name":"github.com/microsoft/coyote","commit":"f2c135d201341ee5eff3d82cac62bdb85b25139f"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":5.2,"checks":[{"name":"Maintained","score":0,"reason":"0 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: SECURITY.md:1","Info: Found linked content: SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: SECURITY.md:1","Info: Found text in security policy: SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Code-Review","score":1,"reason":"Found 5/30 approved changesets -- score normalized to 1","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: jobLevel 'contents' permission set to 'read': .github/workflows/codeql-analysis.yml:14","Info: jobLevel 'actions' permission set to 'read': .github/workflows/codeql-analysis.yml:13","Warn: no topLevel permission defined: .github/workflows/codeql-analysis.yml:1","Warn: topLevel 'contents' permission set to 'write': .github/workflows/publish-docs.yml:10","Warn: no topLevel permission defined: .github/workflows/test-coyote.yml:1","Warn: no topLevel permission defined: .github/workflows/test-performance.yml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"License","score":9,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Warn: project license file does not contain an FSF or OSI license."],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Branch-Protection","score":8,"reason":"branch protection is not maximal on development and all release branches","details":["Info: 'allow deletion' disabled on branch 'main'","Info: 'force pushes' disabled on branch 'main'","Warn: 'branch protection settings apply to administrators' is disabled on branch 'main'","Warn: 'stale review dismissal' is disabled on branch 'main'","Warn: required approving review count is 1 on branch 'main'","Warn: codeowners review is required - but no codeowners file found in repo","Info: 'last push approval' is required to merge on branch 'main'","Info: status check found to merge onto on branch 'main'","Info: PRs are required in order to make changes on branch 'main'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Vulnerabilities","score":9,"reason":"1 existing vulnerabilities detected","details":["Warn: Project is vulnerable to: PYSEC-2020-73"],"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/microsoft/coyote/codeql-analysis.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/microsoft/coyote/codeql-analysis.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/microsoft/coyote/codeql-analysis.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/microsoft/coyote/codeql-analysis.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:48: update your workflow using https://app.stepsecurity.io/secureworkflow/microsoft/coyote/codeql-analysis.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-docs.yml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/microsoft/coyote/publish-docs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-coyote.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/microsoft/coyote/test-coyote.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-coyote.yml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/microsoft/coyote/test-coyote.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-coyote.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/microsoft/coyote/test-coyote.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-coyote.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/microsoft/coyote/test-coyote.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-coyote.yml:59: update your workflow using https://app.stepsecurity.io/secureworkflow/microsoft/coyote/test-coyote.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-coyote.yml:65: update your workflow using https://app.stepsecurity.io/secureworkflow/microsoft/coyote/test-coyote.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-coyote.yml:79: update your workflow using https://app.stepsecurity.io/secureworkflow/microsoft/coyote/test-coyote.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-coyote.yml:81: update your workflow using https://app.stepsecurity.io/secureworkflow/microsoft/coyote/test-coyote.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-coyote.yml:85: update your workflow using https://app.stepsecurity.io/secureworkflow/microsoft/coyote/test-coyote.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-performance.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/microsoft/coyote/test-performance.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-performance.yml:23: update your workflow using https://app.stepsecurity.io/secureworkflow/microsoft/coyote/test-performance.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-performance.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/microsoft/coyote/test-performance.yml/main?enable=pin","Warn: pipCommand not pinned by hash: .github/workflows/publish-docs.yml:18","Warn: pipCommand not pinned by hash: .github/workflows/publish-docs.yml:20","Warn: pipCommand not pinned by hash: .github/workflows/publish-docs.yml:21","Info:   0 out of  15 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of   3 third-party GitHubAction dependencies pinned","Info:   0 out of   3 pipCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"SAST","score":7,"reason":"SAST tool detected but not run on all commits","details":["Info: SAST configuration detected: CodeQL","Warn: 0 commits out of 29 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-21T11:24:17.379Z","repository_id":37496140,"created_at":"2025-08-21T11:24:17.379Z","updated_at":"2025-08-21T11:24:17.379Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":273218161,"owners_count":25065905,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","status":"online","status_checked_at":"2025-09-01T02:00:09.058Z","response_time":120,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"microsoft","name":"Microsoft","uuid":"6154722","kind":"organization","description":"Open source projects and samples from Microsoft","email":"opensource@microsoft.com","website":"https://opensource.microsoft.com","location":"Redmond, WA","twitter":"OpenAtMicrosoft","company":null,"icon_url":"https://avatars.githubusercontent.com/u/6154722?v=4","repositories_count":7257,"last_synced_at":"2025-09-02T00:27:42.371Z","metadata":{"has_sponsors_listing":false},"html_url":"https://github.com/microsoft","funding_links":[],"total_stars":3460437,"followers":101241,"following":0,"created_at":"2022-11-02T16:20:12.368Z","updated_at":"2025-09-02T00:27:42.372Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/microsoft","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/microsoft/repositories"},"tags":[]},"repo_metadata_updated_at":"2025-09-02T01:26:28.400Z","dependent_packages_count":1,"downloads":254336,"downloads_period":"total","dependent_repos_count":0,"rankings":{"downloads":3.816665664957597,"dependent_repos_count":13.819348826338206,"dependent_packages_count":18.835372714592,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":12.157129068629269},"purl":"pkg:nuget/microsoft.coyote.test","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/nuget/microsoft.coyote.test","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/nuget/microsoft.coyote.test","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/nuget/microsoft.coyote.test/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2025-08-31T18:50:23.826Z","issues_count":32,"pull_requests_count":75,"avg_time_to_close_issue":3156539.8518518517,"avg_time_to_close_pull_request":91101.94594594595,"issues_closed_count":27,"pull_requests_closed_count":74,"pull_request_authors_count":11,"issue_authors_count":22,"avg_comments_per_issue":3.84375,"avg_comments_per_pull_request":0.52,"merged_pull_requests_count":66,"bot_issues_count":0,"bot_pull_requests_count":0,"past_year_issues_count":5,"past_year_pull_requests_count":2,"past_year_avg_time_to_close_issue":81911.0,"past_year_avg_time_to_close_pull_request":482.0,"past_year_issues_closed_count":1,"past_year_pull_requests_closed_count":1,"past_year_pull_request_authors_count":2,"past_year_issue_authors_count":5,"past_year_avg_comments_per_issue":0.0,"past_year_avg_comments_per_pull_request":0.0,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":0,"past_year_merged_pull_requests_count":1,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/microsoft%2Fcoyote/issues","maintainers":[{"login":"pdeligia","count":58,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/pdeligia"},{"login":"lovettchris","count":13,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/lovettchris"},{"login":"akashlal","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/akashlal"},{"login":"JamieMagee","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/JamieMagee"}],"active_maintainers":[{"login":"akashlal","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/akashlal"},{"login":"JamieMagee","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/JamieMagee"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/nuget.org/packages/microsoft.coyote.test/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/nuget.org/packages/microsoft.coyote.test/version_numbers","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/nuget.org/packages/microsoft.coyote.test/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/nuget.org/packages/microsoft.coyote.test/related_packages","maintainers":[{"uuid":"Microsoft","login":"Microsoft","name":null,"email":null,"url":null,"packages_count":7616,"html_url":"https://www.nuget.org/profiles/Microsoft","role":null,"created_at":"2024-02-27T02:14:13.486Z","updated_at":"2024-02-27T02:14:13.486Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/nuget.org/maintainers/Microsoft/packages"},{"uuid":"coyote","login":"coyote","name":null,"email":null,"url":null,"packages_count":6,"html_url":"https://www.nuget.org/profiles/coyote","role":null,"created_at":"2024-02-27T02:14:13.427Z","updated_at":"2024-02-27T02:14:13.427Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/nuget.org/maintainers/coyote/packages"}],"registry":{"name":"nuget.org","url":"https://www.nuget.org","ecosystem":"nuget","default":true,"packages_count":740094,"maintainers_count":102509,"namespaces_count":0,"keywords_count":152168,"github":"nuget","metadata":{"funded_packages_count":25417},"icon_url":"https://github.com/nuget.png","created_at":"2022-04-04T15:19:23.147Z","updated_at":"2025-09-04T05:39:21.982Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/nuget.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/nuget.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/nuget.org/namespaces"}},{"id":9015373,"name":"microsoft.coyote.tool","ecosystem":"nuget","description":"The self-contained Coyote command-line tool.","homepage":"https://microsoft.github.io/coyote/","licenses":"other","normalized_licenses":["GPL-1.0+"],"repository_url":"https://github.com/microsoft/coyote","keywords_array":["systematic-testing","specifications","concurrency","dotnet","csharp"],"namespace":null,"versions_count":12,"first_release_published_at":"2022-10-31T20:03:12.973Z","latest_release_published_at":"2024-03-18T19:31:07.573Z","latest_release_number":"1.7.11","last_synced_at":"2025-09-02T00:51:33.199Z","created_at":"2024-02-27T02:06:35.712Z","updated_at":"2025-09-02T01:26:28.402Z","registry_url":"https://www.nuget.org/packages/microsoft.coyote.tool/","install_command":"Install-Package microsoft.coyote.tool","documentation_url":null,"metadata":{"copyright":"© Microsoft Corporation. All rights reserved.","license_info":{"type":"file","text":"LICENSE","version":null},"license_url":"https://aka.ms/deprecateLicenseUrl","require_license_acceptance":false,"icon":"images\\icon.png","readme":"docs\\readme.md","repository":{"type":"git","url":"https://github.com/microsoft/coyote","branch":null,"commit":"4d2f9dd4e0fdeb528557e7058f3e4379c184c6da"},"development_dependency":false,"serviceable":false,"framework_assemblies":[{"assembly_name":"System.Configuration","target_framework":".NETFramework4.6.2"},{"assembly_name":"System.Core","target_framework":".NETFramework4.6.2"}],"package_types":[],"release_notes":"https://github.com/microsoft/coyote/blob/main/History.md","dependency_summary":{"total_dependency_groups":4,"target_frameworks":[".NETFramework4.6.2",".NETCoreApp3.1","net6.0","net8.0"],"total_dependencies":0}},"repo_metadata":{"id":37496140,"uuid":"202449779","full_name":"microsoft/coyote","owner":"microsoft","description":"Coyote is a library and tool for testing concurrent C# code and deterministically reproducing bugs.","archived":false,"fork":false,"pushed_at":"2024-12-11T17:28:41.000Z","size":20970,"stargazers_count":1565,"open_issues_count":45,"forks_count":81,"subscribers_count":36,"default_branch":"main","last_synced_at":"2025-09-02T00:36:51.091Z","etag":null,"topics":["coyote","dotnet","fuzzing","software-reliability","systematic-testing","testing","testing-tools"],"latest_commit_sha":null,"homepage":"https://microsoft.github.io/coyote/","language":"C#","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"other","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/microsoft.png","metadata":{"files":{"readme":"README.md","changelog":"History.md","contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":"CITATION.cff","codeowners":null,"security":"SECURITY.md","support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null}},"created_at":"2019-08-15T01:09:42.000Z","updated_at":"2025-08-31T15:26:04.000Z","dependencies_parsed_at":"2023-02-18T12:01:14.888Z","dependency_job_id":"ca2274da-1964-4405-942d-1089a47c29b2","html_url":"https://github.com/microsoft/coyote","commit_stats":null,"previous_names":[],"tags_count":0,"template":false,"template_full_name":null,"purl":"pkg:github/microsoft/coyote","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/microsoft%2Fcoyote","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/microsoft%2Fcoyote/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/microsoft%2Fcoyote/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/microsoft%2Fcoyote/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/microsoft","download_url":"https://codeload.github.com/microsoft/coyote/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/microsoft%2Fcoyote/sbom","scorecard":{"id":643303,"data":{"date":"2025-08-11","repo":{"name":"github.com/microsoft/coyote","commit":"f2c135d201341ee5eff3d82cac62bdb85b25139f"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":5.2,"checks":[{"name":"Maintained","score":0,"reason":"0 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: SECURITY.md:1","Info: Found linked content: SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: SECURITY.md:1","Info: Found text in security policy: SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Code-Review","score":1,"reason":"Found 5/30 approved changesets -- score normalized to 1","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: jobLevel 'contents' permission set to 'read': .github/workflows/codeql-analysis.yml:14","Info: jobLevel 'actions' permission set to 'read': .github/workflows/codeql-analysis.yml:13","Warn: no topLevel permission defined: .github/workflows/codeql-analysis.yml:1","Warn: topLevel 'contents' permission set to 'write': .github/workflows/publish-docs.yml:10","Warn: no topLevel permission defined: .github/workflows/test-coyote.yml:1","Warn: no topLevel permission defined: .github/workflows/test-performance.yml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"License","score":9,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Warn: project license file does not contain an FSF or OSI license."],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Branch-Protection","score":8,"reason":"branch protection is not maximal on development and all release branches","details":["Info: 'allow deletion' disabled on branch 'main'","Info: 'force pushes' disabled on branch 'main'","Warn: 'branch protection settings apply to administrators' is disabled on branch 'main'","Warn: 'stale review dismissal' is disabled on branch 'main'","Warn: required approving review count is 1 on branch 'main'","Warn: codeowners review is required - but no codeowners file found in repo","Info: 'last push approval' is required to merge on branch 'main'","Info: status check found to merge onto on branch 'main'","Info: PRs are required in order to make changes on branch 'main'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Vulnerabilities","score":9,"reason":"1 existing vulnerabilities detected","details":["Warn: Project is vulnerable to: PYSEC-2020-73"],"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/microsoft/coyote/codeql-analysis.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/microsoft/coyote/codeql-analysis.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/microsoft/coyote/codeql-analysis.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/microsoft/coyote/codeql-analysis.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:48: update your workflow using https://app.stepsecurity.io/secureworkflow/microsoft/coyote/codeql-analysis.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-docs.yml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/microsoft/coyote/publish-docs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-coyote.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/microsoft/coyote/test-coyote.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-coyote.yml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/microsoft/coyote/test-coyote.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-coyote.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/microsoft/coyote/test-coyote.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-coyote.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/microsoft/coyote/test-coyote.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-coyote.yml:59: update your workflow using https://app.stepsecurity.io/secureworkflow/microsoft/coyote/test-coyote.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-coyote.yml:65: update your workflow using https://app.stepsecurity.io/secureworkflow/microsoft/coyote/test-coyote.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-coyote.yml:79: update your workflow using https://app.stepsecurity.io/secureworkflow/microsoft/coyote/test-coyote.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-coyote.yml:81: update your workflow using https://app.stepsecurity.io/secureworkflow/microsoft/coyote/test-coyote.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-coyote.yml:85: update your workflow using https://app.stepsecurity.io/secureworkflow/microsoft/coyote/test-coyote.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-performance.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/microsoft/coyote/test-performance.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-performance.yml:23: update your workflow using https://app.stepsecurity.io/secureworkflow/microsoft/coyote/test-performance.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-performance.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/microsoft/coyote/test-performance.yml/main?enable=pin","Warn: pipCommand not pinned by hash: .github/workflows/publish-docs.yml:18","Warn: pipCommand not pinned by hash: .github/workflows/publish-docs.yml:20","Warn: pipCommand not pinned by hash: .github/workflows/publish-docs.yml:21","Info:   0 out of  15 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of   3 third-party GitHubAction dependencies pinned","Info:   0 out of   3 pipCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"SAST","score":7,"reason":"SAST tool detected but not run on all commits","details":["Info: SAST configuration detected: CodeQL","Warn: 0 commits out of 29 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-21T11:24:17.379Z","repository_id":37496140,"created_at":"2025-08-21T11:24:17.379Z","updated_at":"2025-08-21T11:24:17.379Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":273218161,"owners_count":25065905,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","status":"online","status_checked_at":"2025-09-01T02:00:09.058Z","response_time":120,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"microsoft","name":"Microsoft","uuid":"6154722","kind":"organization","description":"Open source projects and samples from Microsoft","email":"opensource@microsoft.com","website":"https://opensource.microsoft.com","location":"Redmond, WA","twitter":"OpenAtMicrosoft","company":null,"icon_url":"https://avatars.githubusercontent.com/u/6154722?v=4","repositories_count":7257,"last_synced_at":"2025-09-02T00:27:42.371Z","metadata":{"has_sponsors_listing":false},"html_url":"https://github.com/microsoft","funding_links":[],"total_stars":3460437,"followers":101241,"following":0,"created_at":"2022-11-02T16:20:12.368Z","updated_at":"2025-09-02T00:27:42.372Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/microsoft","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/microsoft/repositories"},"tags":[]},"repo_metadata_updated_at":"2025-09-02T01:26:28.402Z","dependent_packages_count":0,"downloads":30792,"downloads_period":"total","dependent_repos_count":0,"rankings":{"downloads":11.226966541479104,"dependent_repos_count":13.819348826338206,"dependent_packages_count":18.835372714592,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":14.627229360803105},"purl":"pkg:nuget/microsoft.coyote.tool","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/nuget/microsoft.coyote.tool","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/nuget/microsoft.coyote.tool","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/nuget/microsoft.coyote.tool/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2025-08-31T18:50:23.826Z","issues_count":32,"pull_requests_count":75,"avg_time_to_close_issue":3156539.8518518517,"avg_time_to_close_pull_request":91101.94594594595,"issues_closed_count":27,"pull_requests_closed_count":74,"pull_request_authors_count":11,"issue_authors_count":22,"avg_comments_per_issue":3.84375,"avg_comments_per_pull_request":0.52,"merged_pull_requests_count":66,"bot_issues_count":0,"bot_pull_requests_count":0,"past_year_issues_count":5,"past_year_pull_requests_count":2,"past_year_avg_time_to_close_issue":81911.0,"past_year_avg_time_to_close_pull_request":482.0,"past_year_issues_closed_count":1,"past_year_pull_requests_closed_count":1,"past_year_pull_request_authors_count":2,"past_year_issue_authors_count":5,"past_year_avg_comments_per_issue":0.0,"past_year_avg_comments_per_pull_request":0.0,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":0,"past_year_merged_pull_requests_count":1,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/microsoft%2Fcoyote/issues","maintainers":[{"login":"pdeligia","count":58,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/pdeligia"},{"login":"lovettchris","count":13,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/lovettchris"},{"login":"akashlal","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/akashlal"},{"login":"JamieMagee","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/JamieMagee"}],"active_maintainers":[{"login":"akashlal","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/akashlal"},{"login":"JamieMagee","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/JamieMagee"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/nuget.org/packages/microsoft.coyote.tool/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/nuget.org/packages/microsoft.coyote.tool/version_numbers","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/nuget.org/packages/microsoft.coyote.tool/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/nuget.org/packages/microsoft.coyote.tool/related_packages","maintainers":[{"uuid":"Microsoft","login":"Microsoft","name":null,"email":null,"url":null,"packages_count":7616,"html_url":"https://www.nuget.org/profiles/Microsoft","role":null,"created_at":"2024-02-27T02:14:11.013Z","updated_at":"2024-02-27T02:14:11.013Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/nuget.org/maintainers/Microsoft/packages"},{"uuid":"coyote","login":"coyote","name":null,"email":null,"url":null,"packages_count":6,"html_url":"https://www.nuget.org/profiles/coyote","role":null,"created_at":"2024-02-27T02:14:10.956Z","updated_at":"2024-02-27T02:14:10.956Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/nuget.org/maintainers/coyote/packages"}],"registry":{"name":"nuget.org","url":"https://www.nuget.org","ecosystem":"nuget","default":true,"packages_count":740094,"maintainers_count":102509,"namespaces_count":0,"keywords_count":152168,"github":"nuget","metadata":{"funded_packages_count":25417},"icon_url":"https://github.com/nuget.png","created_at":"2022-04-04T15:19:23.147Z","updated_at":"2025-09-04T05:39:21.982Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/nuget.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/nuget.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/nuget.org/namespaces"}},{"id":9015375,"name":"microsoft.coyote.cli","ecosystem":"nuget","description":"The Coyote .NET command-line tool.","homepage":"https://microsoft.github.io/coyote/","licenses":"other","normalized_licenses":["GPL-1.0+"],"repository_url":"https://github.com/microsoft/coyote","keywords_array":["systematic-testing","specifications","concurrency","dotnet","csharp","cli","tool"],"namespace":null,"versions_count":61,"first_release_published_at":"1900-01-01T00:00:00.000Z","latest_release_published_at":"2024-03-18T19:30:58.443Z","latest_release_number":"1.7.11","last_synced_at":"2025-09-02T00:51:44.638Z","created_at":"2024-02-27T02:06:35.779Z","updated_at":"2025-09-02T01:26:28.401Z","registry_url":"https://www.nuget.org/packages/microsoft.coyote.cli/","install_command":"Install-Package microsoft.coyote.cli","documentation_url":null,"metadata":{"copyright":"© Microsoft Corporation. All rights reserved.","license_info":{"type":"file","text":"LICENSE","version":null},"license_url":"https://aka.ms/deprecateLicenseUrl","require_license_acceptance":false,"icon":"images\\icon.png","readme":"docs\\readme.md","repository":{"type":"git","url":"https://github.com/microsoft/coyote","branch":null,"commit":"4d2f9dd4e0fdeb528557e7058f3e4379c184c6da"},"development_dependency":false,"serviceable":false,"framework_assemblies":[],"package_types":[{"name":"DotnetTool","version":null}],"release_notes":"https://github.com/microsoft/coyote/blob/main/History.md"},"repo_metadata":{"id":37496140,"uuid":"202449779","full_name":"microsoft/coyote","owner":"microsoft","description":"Coyote is a library and tool for testing concurrent C# code and deterministically reproducing bugs.","archived":false,"fork":false,"pushed_at":"2024-12-11T17:28:41.000Z","size":20970,"stargazers_count":1565,"open_issues_count":45,"forks_count":81,"subscribers_count":36,"default_branch":"main","last_synced_at":"2025-09-02T00:36:51.091Z","etag":null,"topics":["coyote","dotnet","fuzzing","software-reliability","systematic-testing","testing","testing-tools"],"latest_commit_sha":null,"homepage":"https://microsoft.github.io/coyote/","language":"C#","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"other","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/microsoft.png","metadata":{"files":{"readme":"README.md","changelog":"History.md","contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":"CITATION.cff","codeowners":null,"security":"SECURITY.md","support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null}},"created_at":"2019-08-15T01:09:42.000Z","updated_at":"2025-08-31T15:26:04.000Z","dependencies_parsed_at":"2023-02-18T12:01:14.888Z","dependency_job_id":"ca2274da-1964-4405-942d-1089a47c29b2","html_url":"https://github.com/microsoft/coyote","commit_stats":null,"previous_names":[],"tags_count":0,"template":false,"template_full_name":null,"purl":"pkg:github/microsoft/coyote","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/microsoft%2Fcoyote","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/microsoft%2Fcoyote/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/microsoft%2Fcoyote/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/microsoft%2Fcoyote/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/microsoft","download_url":"https://codeload.github.com/microsoft/coyote/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/microsoft%2Fcoyote/sbom","scorecard":{"id":643303,"data":{"date":"2025-08-11","repo":{"name":"github.com/microsoft/coyote","commit":"f2c135d201341ee5eff3d82cac62bdb85b25139f"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":5.2,"checks":[{"name":"Maintained","score":0,"reason":"0 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: SECURITY.md:1","Info: Found linked content: SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: SECURITY.md:1","Info: Found text in security policy: SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Code-Review","score":1,"reason":"Found 5/30 approved changesets -- score normalized to 1","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: jobLevel 'contents' permission set to 'read': .github/workflows/codeql-analysis.yml:14","Info: jobLevel 'actions' permission set to 'read': .github/workflows/codeql-analysis.yml:13","Warn: no topLevel permission defined: .github/workflows/codeql-analysis.yml:1","Warn: topLevel 'contents' permission set to 'write': .github/workflows/publish-docs.yml:10","Warn: no topLevel permission defined: .github/workflows/test-coyote.yml:1","Warn: no topLevel permission defined: .github/workflows/test-performance.yml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"License","score":9,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Warn: project license file does not contain an FSF or OSI license."],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Branch-Protection","score":8,"reason":"branch protection is not maximal on development and all release branches","details":["Info: 'allow deletion' disabled on branch 'main'","Info: 'force pushes' disabled on branch 'main'","Warn: 'branch protection settings apply to administrators' is disabled on branch 'main'","Warn: 'stale review dismissal' is disabled on branch 'main'","Warn: required approving review count is 1 on branch 'main'","Warn: codeowners review is required - but no codeowners file found in repo","Info: 'last push approval' is required to merge on branch 'main'","Info: status check found to merge onto on branch 'main'","Info: PRs are required in order to make changes on branch 'main'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Vulnerabilities","score":9,"reason":"1 existing vulnerabilities detected","details":["Warn: Project is vulnerable to: PYSEC-2020-73"],"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/microsoft/coyote/codeql-analysis.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/microsoft/coyote/codeql-analysis.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/microsoft/coyote/codeql-analysis.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/microsoft/coyote/codeql-analysis.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:48: update your workflow using https://app.stepsecurity.io/secureworkflow/microsoft/coyote/codeql-analysis.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-docs.yml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/microsoft/coyote/publish-docs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-coyote.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/microsoft/coyote/test-coyote.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-coyote.yml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/microsoft/coyote/test-coyote.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-coyote.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/microsoft/coyote/test-coyote.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-coyote.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/microsoft/coyote/test-coyote.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-coyote.yml:59: update your workflow using https://app.stepsecurity.io/secureworkflow/microsoft/coyote/test-coyote.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-coyote.yml:65: update your workflow using https://app.stepsecurity.io/secureworkflow/microsoft/coyote/test-coyote.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-coyote.yml:79: update your workflow using https://app.stepsecurity.io/secureworkflow/microsoft/coyote/test-coyote.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-coyote.yml:81: update your workflow using https://app.stepsecurity.io/secureworkflow/microsoft/coyote/test-coyote.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-coyote.yml:85: update your workflow using https://app.stepsecurity.io/secureworkflow/microsoft/coyote/test-coyote.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-performance.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/microsoft/coyote/test-performance.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-performance.yml:23: update your workflow using https://app.stepsecurity.io/secureworkflow/microsoft/coyote/test-performance.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-performance.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/microsoft/coyote/test-performance.yml/main?enable=pin","Warn: pipCommand not pinned by hash: .github/workflows/publish-docs.yml:18","Warn: pipCommand not pinned by hash: .github/workflows/publish-docs.yml:20","Warn: pipCommand not pinned by hash: .github/workflows/publish-docs.yml:21","Info:   0 out of  15 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of   3 third-party GitHubAction dependencies pinned","Info:   0 out of   3 pipCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"SAST","score":7,"reason":"SAST tool detected but not run on all commits","details":["Info: SAST configuration detected: CodeQL","Warn: 0 commits out of 29 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-21T11:24:17.379Z","repository_id":37496140,"created_at":"2025-08-21T11:24:17.379Z","updated_at":"2025-08-21T11:24:17.379Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":273218161,"owners_count":25065905,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","status":"online","status_checked_at":"2025-09-01T02:00:09.058Z","response_time":120,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"microsoft","name":"Microsoft","uuid":"6154722","kind":"organization","description":"Open source projects and samples from Microsoft","email":"opensource@microsoft.com","website":"https://opensource.microsoft.com","location":"Redmond, WA","twitter":"OpenAtMicrosoft","company":null,"icon_url":"https://avatars.githubusercontent.com/u/6154722?v=4","repositories_count":7257,"last_synced_at":"2025-09-02T00:27:42.371Z","metadata":{"has_sponsors_listing":false},"html_url":"https://github.com/microsoft","funding_links":[],"total_stars":3460437,"followers":101241,"following":0,"created_at":"2022-11-02T16:20:12.368Z","updated_at":"2025-09-02T00:27:42.372Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/microsoft","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/microsoft/repositories"},"tags":[]},"repo_metadata_updated_at":"2025-09-02T01:26:28.401Z","dependent_packages_count":0,"downloads":110785,"downloads_period":"total","dependent_repos_count":0,"rankings":{"downloads":5.831941216720194,"dependent_repos_count":13.819348826338206,"dependent_packages_count":18.835372714592,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":12.828887585883466},"purl":"pkg:nuget/microsoft.coyote.cli","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/nuget/microsoft.coyote.cli","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/nuget/microsoft.coyote.cli","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/nuget/microsoft.coyote.cli/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2025-08-31T18:50:23.826Z","issues_count":32,"pull_requests_count":75,"avg_time_to_close_issue":3156539.8518518517,"avg_time_to_close_pull_request":91101.94594594595,"issues_closed_count":27,"pull_requests_closed_count":74,"pull_request_authors_count":11,"issue_authors_count":22,"avg_comments_per_issue":3.84375,"avg_comments_per_pull_request":0.52,"merged_pull_requests_count":66,"bot_issues_count":0,"bot_pull_requests_count":0,"past_year_issues_count":5,"past_year_pull_requests_count":2,"past_year_avg_time_to_close_issue":81911.0,"past_year_avg_time_to_close_pull_request":482.0,"past_year_issues_closed_count":1,"past_year_pull_requests_closed_count":1,"past_year_pull_request_authors_count":2,"past_year_issue_authors_count":5,"past_year_avg_comments_per_issue":0.0,"past_year_avg_comments_per_pull_request":0.0,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":0,"past_year_merged_pull_requests_count":1,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/microsoft%2Fcoyote/issues","maintainers":[{"login":"pdeligia","count":58,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/pdeligia"},{"login":"lovettchris","count":13,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/lovettchris"},{"login":"akashlal","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/akashlal"},{"login":"JamieMagee","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/JamieMagee"}],"active_maintainers":[{"login":"akashlal","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/akashlal"},{"login":"JamieMagee","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/JamieMagee"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/nuget.org/packages/microsoft.coyote.cli/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/nuget.org/packages/microsoft.coyote.cli/version_numbers","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/nuget.org/packages/microsoft.coyote.cli/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/nuget.org/packages/microsoft.coyote.cli/related_packages","maintainers":[{"uuid":"Microsoft","login":"Microsoft","name":null,"email":null,"url":null,"packages_count":7616,"html_url":"https://www.nuget.org/profiles/Microsoft","role":null,"created_at":"2024-02-27T02:14:13.062Z","updated_at":"2024-02-27T02:14:13.062Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/nuget.org/maintainers/Microsoft/packages"},{"uuid":"coyote","login":"coyote","name":null,"email":null,"url":null,"packages_count":6,"html_url":"https://www.nuget.org/profiles/coyote","role":null,"created_at":"2024-02-27T02:14:12.949Z","updated_at":"2024-02-27T02:14:12.949Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/nuget.org/maintainers/coyote/packages"}],"registry":{"name":"nuget.org","url":"https://www.nuget.org","ecosystem":"nuget","default":true,"packages_count":740094,"maintainers_count":102509,"namespaces_count":0,"keywords_count":152168,"github":"nuget","metadata":{"funded_packages_count":25417},"icon_url":"https://github.com/nuget.png","created_at":"2022-04-04T15:19:23.147Z","updated_at":"2025-09-04T05:39:21.982Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/nuget.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/nuget.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/nuget.org/namespaces"}}],"commits":{"id":1772842,"full_name":"microsoft/coyote","default_branch":"main","committers":[{"name":"Pantazis Deligiannis","email":"pdeligia@microsoft.com","login":"pdeligia","count":440},{"name":"Chris Lovett","email":"clovett@microsoft.com","login":"lovettchris","count":181},{"name":"Shrey Tiwari","email":"shreymt@gmail.com","login":"ShreyTiwari","count":6},{"name":"Akash Lal","email":"akash.lal81@gmail.com","login":"akashlal","count":6},{"name":"Damon Kiley","email":"v-dakile@microsoft.com","login":"8levels","count":4},{"name":"Dimitre Novatchev","email":"v-dino@microsoft.com","login":"v-dino","count":4},{"name":"dependabot[bot]","email":"49699333+dependabot[bot]","login":"dependabot[bot]","count":4},{"name":"Christopher Watford","email":"christopher.watford@ge.com","login":"watfordgnf","count":2},{"name":"Immad","email":"immad.naseer@gmail.com","login":"imnaseer","count":2},{"name":"Udit kumar agarwal","email":"16324601+uditagarwal97","login":"uditagarwal97","count":2},{"name":"Aditya Senthilnathan","email":"aditsep99@gmail.com","login":"adityanathan","count":1},{"name":"Ao Li","email":"5557706+aoli-al","login":"aoli-al","count":1},{"name":"Brian Chavez","email":"bchavez@bitarmory.com","login":"bchavez","count":1},{"name":"GitWizard123","email":"132208224+GitWizard123","login":"GitWizard123","count":1},{"name":"Laurent Kempé","email":"laurent.kempe@techheadbrothers.com","login":"laurentkempe","count":1},{"name":"Martin","email":"modermatt@tuta.io","login":"marodev","count":1},{"name":"Salman Muin Kayser Chishti","email":"13schishti@gmail.com","login":"salmanmkc","count":1},{"name":"The Gitter Badger","email":"badger@gitter.im","login":"gitter-badger","count":1},{"name":"dan2468","email":"1092584+dan2468","login":"dan2468","count":1},{"name":"timbo","email":"tbertenshaw","login":"tbertenshaw","count":1}],"total_commits":661,"total_committers":20,"total_bot_commits":4,"total_bot_committers":1,"mean_commits":33.05,"dds":0.3343419062027232,"past_year_committers":[{"name":"Akash Lal","email":"akash.lal81@gmail.com","login":"akashlal","count":3},{"name":"Pantazis Deligiannis","email":"pdeligia@microsoft.com","login":"pdeligia","count":1},{"name":"Chris Lovett","email":"clovett@microsoft.com","login":"lovettchris","count":1}],"past_year_total_commits":5,"past_year_total_committers":3,"past_year_total_bot_commits":0,"past_year_total_bot_committers":0,"past_year_mean_commits":1.6666666666666667,"past_year_dds":0.4,"last_synced_at":"2025-05-14T06:14:52.779Z","last_synced_commit":"f2c135d201341ee5eff3d82cac62bdb85b25139f","created_at":"2024-09-20T16:00:52.718Z","updated_at":"2025-05-14T06:14:52.790Z","commits_url":"https://commits.ecosyste.ms/api/v1/hosts/GitHub/repositories/microsoft%2Fcoyote/commits","host":{"name":"GitHub","url":"https://github.com","kind":"github","last_synced_at":"2025-09-05T00:00:10.343Z","repositories_count":5480019,"commits_count":853389012,"contributors_count":31098138,"owners_count":906558,"icon_url":"https://github.com/github.png","host_url":"https://commits.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://commits.ecosyste.ms/api/v1/hosts/GitHub/repositories"}},"issues_stats":{"full_name":"microsoft/coyote","html_url":"https://github.com/microsoft/coyote","last_synced_at":"2025-08-31T18:50:23.826Z","status":null,"issues_count":32,"pull_requests_count":75,"avg_time_to_close_issue":3156539.8518518517,"avg_time_to_close_pull_request":91101.94594594595,"issues_closed_count":27,"pull_requests_closed_count":74,"pull_request_authors_count":11,"issue_authors_count":22,"avg_comments_per_issue":3.84375,"avg_comments_per_pull_request":0.52,"merged_pull_requests_count":66,"bot_issues_count":0,"bot_pull_requests_count":0,"past_year_issues_count":5,"past_year_pull_requests_count":2,"past_year_avg_time_to_close_issue":81911.0,"past_year_avg_time_to_close_pull_request":482.0,"past_year_issues_closed_count":1,"past_year_pull_requests_closed_count":1,"past_year_pull_request_authors_count":2,"past_year_issue_authors_count":5,"past_year_avg_comments_per_issue":0.0,"past_year_avg_comments_per_pull_request":0.0,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":0,"past_year_merged_pull_requests_count":1,"created_at":"2024-09-20T16:00:52.928Z","updated_at":"2025-09-03T02:58:07.142Z","repository_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/microsoft%2Fcoyote","issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/microsoft%2Fcoyote/issues","issue_labels_count":{},"pull_request_labels_count":{"area-documentation":4,"area-nuget-package":3,"area-systematic-testing":1,"dependencies":1,"github_actions":1},"issue_author_associations_count":{"NONE":32,"CONTRIBUTOR":2,"MEMBER":1},"pull_request_author_associations_count":{"MEMBER":72,"CONTRIBUTOR":10,"NONE":5,"COLLABORATOR":4},"issue_authors":{"ankushdesai":5,"fleed":3,"arunt1204":2,"tbertenshaw":2,"muwaqar":2,"yunpengxiao":2,"msftph":1,"mikocot":1,"jamescarter-le":1,"wanton7":1,"Kielek":1,"aoli-al":1,"yahorsi":1,"gabthau":1,"dharmaturtle":1,"redknightlois":1,"DanielHabenicht":1,"samcov":1,"DylanSp":1,"lovettchris":1,"jtourvieille":1,"lhr1101":1,"Cloud33":1,"thepalbi":1,"wilsoncg":1},"pull_request_authors":{"pdeligia":58,"lovettchris":13,"salmanmkc":4,"akashlal":4,"kzdev-net":2,"JamieMagee":1,"bchavez":1,"gitter-badger":1,"Youssef1313":1,"WeihanLi":1,"tbertenshaw":1,"dependabot[bot]":1,"uditagarwal97":1,"dan2468":1,"aoli-al":1},"host":{"name":"GitHub","url":"https://github.com","kind":"github","last_synced_at":"2025-09-05T00:00:10.444Z","repositories_count":10082364,"issues_count":31225876,"pull_requests_count":96082853,"authors_count":10694162,"icon_url":"https://github.com/github.png","host_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories","owners_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/owners","authors_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors"},"past_year_issue_labels_count":{},"past_year_pull_request_labels_count":{},"past_year_issue_author_associations_count":{"NONE":5},"past_year_pull_request_author_associations_count":{"COLLABORATOR":3,"MEMBER":2},"past_year_issue_authors":{"jamescarter-le":1,"Kielek":1,"lhr1101":1,"mikocot":1,"msftph":1},"past_year_pull_request_authors":{"akashlal":3,"JamieMagee":1,"lovettchris":1},"maintainers":[{"login":"pdeligia","count":58,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/pdeligia"},{"login":"lovettchris","count":14,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/lovettchris"},{"login":"akashlal","count":4,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/akashlal"},{"login":"JamieMagee","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/JamieMagee"}],"active_maintainers":[{"login":"akashlal","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/akashlal"},{"login":"JamieMagee","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/JamieMagee"},{"login":"lovettchris","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/lovettchris"}]},"events":{"total":{"IssuesEvent":5,"WatchEvent":83,"DeleteEvent":3,"PushEvent":6,"PullRequestReviewEvent":1,"PullRequestEvent":5,"ForkEvent":4,"CreateEvent":2},"last_year":{"IssuesEvent":5,"WatchEvent":83,"DeleteEvent":3,"PushEvent":6,"PullRequestReviewEvent":1,"PullRequestEvent":5,"ForkEvent":4,"CreateEvent":2}},"keywords":["coyote","dotnet","fuzzing","software-reliability","systematic-testing","testing","testing-tools"],"dependencies":[{"ecosystem":"bower","filepath":"Samples/WebApps/ImageGalleryAspNet/ImageGallery/bower.json","sha":null,"kind":"manifest","created_at":"2022-07-21T04:49:23.512Z","updated_at":"2022-07-21T04:49:23.512Z","repository_link":"https://github.com/microsoft/coyote/blob/main/Samples/WebApps/ImageGalleryAspNet/ImageGallery/bower.json","dependencies":[{"id":339197937,"package_name":"bootstrap","ecosystem":"bower","requirements":"3.4.0","direct":true,"kind":"runtime","optional":false},{"id":339197938,"package_name":"jquery","ecosystem":"bower","requirements":"3.5.1","direct":true,"kind":"runtime","optional":false},{"id":339197939,"package_name":"jquery-validation","ecosystem":"bower","requirements":"1.14.0","direct":true,"kind":"runtime","optional":false},{"id":339197940,"package_name":"jquery-validation-unobtrusive","ecosystem":"bower","requirements":"3.2.6","direct":true,"kind":"runtime","optional":false}]},{"ecosystem":"nuget","filepath":"Samples/AccountManager/AccountManager/AccountManager.csproj","sha":null,"kind":"manifest","created_at":"2022-07-21T04:49:23.930Z","updated_at":"2022-07-21T04:49:23.930Z","repository_link":"https://github.com/microsoft/coyote/blob/main/Samples/AccountManager/AccountManager/AccountManager.csproj","dependencies":[{"id":339201266,"package_name":"xunit.assert","ecosystem":"nuget","requirements":"2.4.1","direct":true,"kind":"runtime","optional":false}]},{"ecosystem":"nuget","filepath":"Samples/AccountManager/AccountManager.ETags/AccountManager.ETags.csproj","sha":null,"kind":"manifest","created_at":"2022-07-21T04:49:24.054Z","updated_at":"2022-07-21T04:49:24.054Z","repository_link":"https://github.com/microsoft/coyote/blob/main/Samples/AccountManager/AccountManager.ETags/AccountManager.ETags.csproj","dependencies":[{"id":339203935,"package_name":"System.Text.Json","ecosystem":"nuget","requirements":"6.0.0","direct":true,"kind":"runtime","optional":false},{"id":339203938,"package_name":"xunit.assert","ecosystem":"nuget","requirements":"2.4.1","direct":true,"kind":"runtime","optional":false}]},{"ecosystem":"nuget","filepath":"Samples/CloudMessaging/Raft/Raft.csproj","sha":null,"kind":"manifest","created_at":"2022-07-21T04:49:24.564Z","updated_at":"2022-07-21T04:49:24.564Z","repository_link":"https://github.com/microsoft/coyote/blob/main/Samples/CloudMessaging/Raft/Raft.csproj","dependencies":[{"id":339210643,"package_name":"Newtonsoft.Json","ecosystem":"nuget","requirements":"13.0.1","direct":true,"kind":"runtime","optional":false}]},{"ecosystem":"nuget","filepath":"Samples/CloudMessaging/Raft.Azure/Raft.Azure.csproj","sha":null,"kind":"manifest","created_at":"2022-07-21T04:49:24.876Z","updated_at":"2022-07-21T04:49:24.876Z","repository_link":"https://github.com/microsoft/coyote/blob/main/Samples/CloudMessaging/Raft.Azure/Raft.Azure.csproj","dependencies":[{"id":339211939,"package_name":"Microsoft.Azure.ServiceBus","ecosystem":"nuget","requirements":"4.1.1","direct":true,"kind":"runtime","optional":false},{"id":339211940,"package_name":"Newtonsoft.Json","ecosystem":"nuget","requirements":"13.0.1","direct":true,"kind":"runtime","optional":false}]},{"ecosystem":"nuget","filepath":"Samples/CoffeeMachineActors/CoffeeMachineActors.csproj","sha":null,"kind":"manifest","created_at":"2022-07-21T04:49:24.967Z","updated_at":"2022-07-21T04:49:24.967Z","repository_link":"https://github.com/microsoft/coyote/blob/main/Samples/CoffeeMachineActors/CoffeeMachineActors.csproj","dependencies":[{"id":339212413,"package_name":"System.Collections","ecosystem":"nuget","requirements":"4.3.0","direct":true,"kind":"runtime","optional":false}]},{"ecosystem":"nuget","filepath":"Samples/CoffeeMachineTasks/CoffeeMachineTasks.csproj","sha":null,"kind":"manifest","created_at":"2022-07-21T04:49:25.238Z","updated_at":"2022-07-21T04:49:25.238Z","repository_link":"https://github.com/microsoft/coyote/blob/main/Samples/CoffeeMachineTasks/CoffeeMachineTasks.csproj","dependencies":[{"id":339214352,"package_name":"System.Collections","ecosystem":"nuget","requirements":"4.3.0","direct":true,"kind":"runtime","optional":false}]},{"ecosystem":"nuget","filepath":"Samples/DrinksServingRobotActors/DrinksServingRobotActors.csproj","sha":null,"kind":"manifest","created_at":"2022-07-21T04:49:25.340Z","updated_at":"2022-07-21T04:49:25.340Z","repository_link":"https://github.com/microsoft/coyote/blob/main/Samples/DrinksServingRobotActors/DrinksServingRobotActors.csproj","dependencies":[{"id":339214478,"package_name":"System.Collections","ecosystem":"nuget","requirements":"4.3.0","direct":true,"kind":"runtime","optional":false}]},{"ecosystem":"nuget","filepath":"Samples/HelloWorldActors/HelloWorldActors.csproj","sha":null,"kind":"manifest","created_at":"2022-07-21T04:49:25.421Z","updated_at":"2022-07-21T04:49:25.421Z","repository_link":"https://github.com/microsoft/coyote/blob/main/Samples/HelloWorldActors/HelloWorldActors.csproj","dependencies":[{"id":339214766,"package_name":"System.Collections","ecosystem":"nuget","requirements":"4.3.0","direct":true,"kind":"runtime","optional":false}]},{"ecosystem":"nuget","filepath":"Samples/WebApps/ImageGalleryAspNet/ImageGalleryClient/ImageGalleryClient.csproj","sha":null,"kind":"manifest","created_at":"2022-07-21T04:49:25.743Z","updated_at":"2022-07-21T04:49:25.743Z","repository_link":"https://github.com/microsoft/coyote/blob/main/Samples/WebApps/ImageGalleryAspNet/ImageGalleryClient/ImageGalleryClient.csproj","dependencies":[{"id":339218060,"package_name":"Microsoft.AspNet.WebApi.Client","ecosystem":"nuget","requirements":"5.2.7","direct":true,"kind":"runtime","optional":false},{"id":339218061,"package_name":"System.Net.Http.Json","ecosystem":"nuget","requirements":"3.2.1","direct":true,"kind":"runtime","optional":false}]},{"ecosystem":"nuget","filepath":"Samples/WebApps/ImageGalleryAspNet/ImageGalleryService/ImageGalleryService.csproj","sha":null,"kind":"manifest","created_at":"2022-07-21T04:49:25.824Z","updated_at":"2022-07-21T04:49:25.824Z","repository_link":"https://github.com/microsoft/coyote/blob/main/Samples/WebApps/ImageGalleryAspNet/ImageGalleryService/ImageGalleryService.csproj","dependencies":[{"id":339218203,"package_name":"Azure.Storage.Blobs","ecosystem":"nuget","requirements":"12.6.0","direct":true,"kind":"runtime","optional":false},{"id":339218204,"package_name":"Microsoft.Azure.Cosmos","ecosystem":"nuget","requirements":"3.12.0","direct":true,"kind":"runtime","optional":false}]},{"ecosystem":"nuget","filepath":"Samples/WebApps/ImageGalleryAspNet/Tests/Tests.csproj","sha":null,"kind":"manifest","created_at":"2022-07-21T04:49:25.896Z","updated_at":"2022-07-21T04:49:25.896Z","repository_link":"https://github.com/microsoft/coyote/blob/main/Samples/WebApps/ImageGalleryAspNet/Tests/Tests.csproj","dependencies":[{"id":339220420,"package_name":"Microsoft.AspNet.WebApi.Client","ecosystem":"nuget","requirements":"5.2.7","direct":true,"kind":"runtime","optional":false},{"id":339220423,"package_name":"Microsoft.Azure.Cosmos.Direct","ecosystem":"nuget","requirements":"3.13.0","direct":true,"kind":"runtime","optional":false},{"id":339220425,"package_name":"Microsoft.NET.Test.Sdk","ecosystem":"nuget","requirements":"17.1.0","direct":true,"kind":"runtime","optional":false},{"id":339220427,"package_name":"MSTest.TestAdapter","ecosystem":"nuget","requirements":"2.2.8","direct":true,"kind":"runtime","optional":false},{"id":339220429,"package_name":"MSTest.TestFramework","ecosystem":"nuget","requirements":"2.2.8","direct":true,"kind":"runtime","optional":false}]},{"ecosystem":"nuget","filepath":"Samples/WebApps/ImageGalleryAspNet/Tests.Coyote/Tests.Coyote.csproj","sha":null,"kind":"manifest","created_at":"2022-07-21T04:49:26.307Z","updated_at":"2022-07-21T04:49:26.307Z","repository_link":"https://github.com/microsoft/coyote/blob/main/Samples/WebApps/ImageGalleryAspNet/Tests.Coyote/Tests.Coyote.csproj","dependencies":[{"id":339225868,"package_name":"Microsoft.NET.Test.Sdk","ecosystem":"nuget","requirements":"17.1.0","direct":true,"kind":"runtime","optional":false},{"id":339225869,"package_name":"MSTest.TestAdapter","ecosystem":"nuget","requirements":"2.2.8","direct":true,"kind":"runtime","optional":false},{"id":339225870,"package_name":"MSTest.TestFramework","ecosystem":"nuget","requirements":"2.2.8","direct":true,"kind":"runtime","optional":false}]},{"ecosystem":"nuget","filepath":"Samples/WebApps/PetImagesAspNet/PetImages.Tests/PetImages.Tests.csproj","sha":null,"kind":"manifest","created_at":"2022-07-21T04:49:26.821Z","updated_at":"2022-07-21T04:49:26.821Z","repository_link":"https://github.com/microsoft/coyote/blob/main/Samples/WebApps/PetImagesAspNet/PetImages.Tests/PetImages.Tests.csproj","dependencies":[{"id":339230858,"package_name":"Microsoft.AspNetCore.TestHost","ecosystem":"nuget","requirements":"6.0.3","direct":true,"kind":"runtime","optional":false},{"id":339230859,"package_name":"Microsoft.AspNetCore.Mvc.Testing","ecosystem":"nuget","requirements":"6.0.3","direct":true,"kind":"runtime","optional":false},{"id":339230860,"package_name":"Microsoft.NET.Test.Sdk","ecosystem":"nuget","requirements":"17.1.0","direct":true,"kind":"runtime","optional":false},{"id":339230861,"package_name":"xunit","ecosystem":"nuget","requirements":"2.4.1","direct":true,"kind":"runtime","optional":false},{"id":339230862,"package_name":"xunit.runner.visualstudio","ecosystem":"nuget","requirements":"2.4.3","direct":true,"kind":"runtime","optional":false}]},{"ecosystem":"nuget","filepath":"Source/Core/Core.csproj","sha":null,"kind":"manifest","created_at":"2022-07-21T04:49:27.404Z","updated_at":"2022-07-21T04:49:27.404Z","repository_link":"https://github.com/microsoft/coyote/blob/main/Source/Core/Core.csproj","dependencies":[{"id":339235894,"package_name":"System.Threading.Tasks.Extensions","ecosystem":"nuget","requirements":"4.5.4","direct":true,"kind":"runtime","optional":false},{"id":339235895,"package_name":"System.ValueTuple","ecosystem":"nuget","requirements":"4.5.0","direct":true,"kind":"runtime","optional":false}]},{"ecosystem":"nuget","filepath":"Source/Test/Test.csproj","sha":null,"kind":"manifest","created_at":"2022-07-21T04:49:27.503Z","updated_at":"2022-07-21T04:49:27.503Z","repository_link":"https://github.com/microsoft/coyote/blob/main/Source/Test/Test.csproj","dependencies":[{"id":339236514,"package_name":"Microsoft.ApplicationInsights","ecosystem":"nuget","requirements":"2.20.0","direct":true,"kind":"runtime","optional":false},{"id":339236515,"package_name":"Microsoft.AspNetCore.Http.Abstractions","ecosystem":"nuget","requirements":"2.2.0","direct":true,"kind":"runtime","optional":false},{"id":339236516,"package_name":"Mono.Cecil","ecosystem":"nuget","requirements":"0.11.4","direct":true,"kind":"runtime","optional":false},{"id":339236517,"package_name":"Microsoft.Extensions.DependencyModel","ecosystem":"nuget","requirements":"6.0.0","direct":true,"kind":"runtime","optional":false},{"id":339236518,"package_name":"System.Text.Json","ecosystem":"nuget","requirements":"6.0.0","direct":true,"kind":"runtime","optional":false}]},{"ecosystem":"nuget","filepath":"Tests/Tests.Actors/Tests.Actors.csproj","sha":null,"kind":"manifest","created_at":"2022-07-21T04:49:27.633Z","updated_at":"2022-07-21T04:49:27.633Z","repository_link":"https://github.com/microsoft/coyote/blob/main/Tests/Tests.Actors/Tests.Actors.csproj","dependencies":[{"id":339237137,"package_name":"Microsoft.NET.Test.Sdk","ecosystem":"nuget","requirements":"17.1.0","direct":true,"kind":"runtime","optional":false},{"id":339237138,"package_name":"xunit","ecosystem":"nuget","requirements":"2.4.1","direct":true,"kind":"runtime","optional":false},{"id":339237139,"package_name":"xunit.runner.visualstudio","ecosystem":"nuget","requirements":"2.4.3","direct":true,"kind":"runtime","optional":false}]},{"ecosystem":"nuget","filepath":"Tests/Tests.Actors.BugFinding/Tests.Actors.BugFinding.csproj","sha":null,"kind":"manifest","created_at":"2022-07-21T04:49:27.898Z","updated_at":"2022-07-21T04:49:27.898Z","repository_link":"https://github.com/microsoft/coyote/blob/main/Tests/Tests.Actors.BugFinding/Tests.Actors.BugFinding.csproj","dependencies":[{"id":339238843,"package_name":"Microsoft.NET.Test.Sdk","ecosystem":"nuget","requirements":"17.1.0","direct":true,"kind":"runtime","optional":false},{"id":339238844,"package_name":"xunit","ecosystem":"nuget","requirements":"2.4.1","direct":true,"kind":"runtime","optional":false},{"id":339238845,"package_name":"xunit.runner.visualstudio","ecosystem":"nuget","requirements":"2.4.3","direct":true,"kind":"runtime","optional":false}]},{"ecosystem":"nuget","filepath":"Tests/Tests.Actors.Performance/Tests.Actors.Performance.csproj","sha":null,"kind":"manifest","created_at":"2022-07-21T04:49:27.985Z","updated_at":"2022-07-21T04:49:27.985Z","repository_link":"https://github.com/microsoft/coyote/blob/main/Tests/Tests.Actors.Performance/Tests.Actors.Performance.csproj","dependencies":[{"id":339241023,"package_name":"BenchmarkDotNet","ecosystem":"nuget","requirements":"0.12.1","direct":true,"kind":"runtime","optional":false}]},{"ecosystem":"nuget","filepath":"Tests/Tests.BugFinding/Tests.BugFinding.csproj","sha":null,"kind":"manifest","created_at":"2022-07-21T04:49:28.441Z","updated_at":"2022-07-21T04:49:28.441Z","repository_link":"https://github.com/microsoft/coyote/blob/main/Tests/Tests.BugFinding/Tests.BugFinding.csproj","dependencies":[{"id":339246453,"package_name":"Microsoft.NET.Test.Sdk","ecosystem":"nuget","requirements":"17.1.0","direct":true,"kind":"runtime","optional":false},{"id":339246454,"package_name":"xunit","ecosystem":"nuget","requirements":"2.4.1","direct":true,"kind":"runtime","optional":false},{"id":339246455,"package_name":"xunit.runner.visualstudio","ecosystem":"nuget","requirements":"2.4.3","direct":true,"kind":"runtime","optional":false}]},{"ecosystem":"nuget","filepath":"Tests/Tests.Common/Tests.Common.csproj","sha":null,"kind":"manifest","created_at":"2022-07-21T04:49:28.524Z","updated_at":"2022-07-21T04:49:28.524Z","repository_link":"https://github.com/microsoft/coyote/blob/main/Tests/Tests.Common/Tests.Common.csproj","dependencies":[{"id":339246847,"package_name":"xunit","ecosystem":"nuget","requirements":"2.4.1","direct":true,"kind":"runtime","optional":false}]},{"ecosystem":"nuget","filepath":"Tests/Tests.Performance/Tests.Performance.csproj","sha":null,"kind":"manifest","created_at":"2022-07-21T04:49:28.690Z","updated_at":"2022-07-21T04:49:28.690Z","repository_link":"https://github.com/microsoft/coyote/blob/main/Tests/Tests.Performance/Tests.Performance.csproj","dependencies":[{"id":339246954,"package_name":"BenchmarkDotNet","ecosystem":"nuget","requirements":"0.12.1","direct":true,"kind":"runtime","optional":false}]},{"ecosystem":"nuget","filepath":"Tests/Tests.Rewriting/Tests.Rewriting.csproj","sha":null,"kind":"manifest","created_at":"2022-07-21T04:49:28.747Z","updated_at":"2022-07-21T04:49:28.747Z","repository_link":"https://github.com/microsoft/coyote/blob/main/Tests/Tests.Rewriting/Tests.Rewriting.csproj","dependencies":[{"id":339248832,"package_name":"Microsoft.NET.Test.Sdk","ecosystem":"nuget","requirements":"17.1.0","direct":true,"kind":"runtime","optional":false},{"id":339248833,"package_name":"Mono.Reflection","ecosystem":"nuget","requirements":"2.0.0","direct":true,"kind":"runtime","optional":false},{"id":339248834,"package_name":"xunit","ecosystem":"nuget","requirements":"2.4.1","direct":true,"kind":"runtime","optional":false},{"id":339248835,"package_name":"xunit.runner.visualstudio","ecosystem":"nuget","requirements":"2.4.3","direct":true,"kind":"runtime","optional":false}]},{"ecosystem":"nuget","filepath":"Tools/BenchmarkRunner/BenchmarkRunner.csproj","sha":null,"kind":"manifest","created_at":"2022-07-21T04:49:29.003Z","updated_at":"2022-07-21T04:49:29.003Z","repository_link":"https://github.com/microsoft/coyote/blob/main/Tools/BenchmarkRunner/BenchmarkRunner.csproj","dependencies":[{"id":339251258,"package_name":"BenchmarkDotNet","ecosystem":"nuget","requirements":"0.13.1","direct":true,"kind":"runtime","optional":false},{"id":339251259,"package_name":"Microsoft.Azure.Cosmos","ecosystem":"nuget","requirements":"3.10.1","direct":true,"kind":"runtime","optional":false},{"id":339251260,"package_name":"Newtonsoft.Json","ecosystem":"nuget","requirements":"13.0.1","direct":true,"kind":"runtime","optional":false}]},{"ecosystem":"nuget","filepath":"Tools/Coyote/Coyote.csproj","sha":null,"kind":"manifest","created_at":"2022-07-21T04:49:29.096Z","updated_at":"2022-07-21T04:49:29.096Z","repository_link":"https://github.com/microsoft/coyote/blob/main/Tools/Coyote/Coyote.csproj","dependencies":[{"id":339252701,"package_name":"System.CommandLine","ecosystem":"nuget","requirements":"2.0.0-beta3.22114.1","direct":true,"kind":"runtime","optional":false},{"id":339252702,"package_name":"System.Configuration.ConfigurationManager","ecosystem":"nuget","requirements":"4.7.0","direct":true,"kind":"runtime","optional":false}]},{"ecosystem":"nuget","filepath":"Tools/GenDoc/GenDoc.csproj","sha":null,"kind":"manifest","created_at":"2022-07-21T04:49:29.388Z","updated_at":"2022-07-21T04:49:29.388Z","repository_link":"https://github.com/microsoft/coyote/blob/main/Tools/GenDoc/GenDoc.csproj","dependencies":[{"id":339254443,"package_name":"System.CommandLine","ecosystem":"nuget","requirements":"2.0.0-beta3.22114.1","direct":true,"kind":"runtime","optional":false},{"id":339254444,"package_name":"XmlDocMarkdown.Core","ecosystem":"nuget","requirements":"2.8.0","direct":true,"kind":"runtime","optional":false},{"id":339254445,"package_name":"YamlDotNet","ecosystem":"nuget","requirements":"11.2.1","direct":true,"kind":"runtime","optional":false}]},{"ecosystem":"pypi","filepath":"Scripts/Notebooks/requirements.txt","sha":null,"kind":"manifest","created_at":"2022-07-21T04:49:29.643Z","updated_at":"2022-07-21T04:49:29.643Z","repository_link":"https://github.com/microsoft/coyote/blob/main/Scripts/Notebooks/requirements.txt","dependencies":[{"id":339259052,"package_name":"azure-cosmos","ecosystem":"pypi","requirements":"*","direct":true,"kind":"runtime","optional":false}]},{"ecosystem":"pypi","filepath":"docs/requirements.txt","sha":null,"kind":"manifest","created_at":"2022-07-21T04:49:30.024Z","updated_at":"2022-07-21T04:49:30.024Z","repository_link":"https://github.com/microsoft/coyote/blob/main/docs/requirements.txt","dependencies":[{"id":339263088,"package_name":"mkdocs","ecosystem":"pypi","requirements":"*","direct":true,"kind":"runtime","optional":false},{"id":339263089,"package_name":"mkdocs-macros-plugin","ecosystem":"pypi","requirements":"*","direct":true,"kind":"runtime","optional":false}]},{"ecosystem":"actions","filepath":".github/workflows/codeql-analysis.yml","sha":null,"kind":"manifest","created_at":"2023-02-18T12:01:14.400Z","updated_at":"2023-02-18T12:01:14.400Z","repository_link":"https://github.com/microsoft/coyote/blob/main/.github/workflows/codeql-analysis.yml","dependencies":[{"id":7760709165,"package_name":"actions/checkout","ecosystem":"actions","requirements":"v2","direct":true,"kind":"composite","optional":false},{"id":7760709167,"package_name":"NuGet/setup-nuget","ecosystem":"actions","requirements":"v1","direct":true,"kind":"composite","optional":false},{"id":7760709168,"package_name":"actions/setup-dotnet","ecosystem":"actions","requirements":"v1","direct":true,"kind":"composite","optional":false},{"id":7760709169,"package_name":"github/codeql-action/init","ecosystem":"actions","requirements":"v1","direct":true,"kind":"composite","optional":false},{"id":7760709170,"package_name":"github/codeql-action/analyze","ecosystem":"actions","requirements":"v1","direct":true,"kind":"composite","optional":false}]},{"ecosystem":"actions","filepath":".github/workflows/publish-docs.yml","sha":null,"kind":"manifest","created_at":"2023-02-18T12:01:14.448Z","updated_at":"2023-02-18T12:01:14.448Z","repository_link":"https://github.com/microsoft/coyote/blob/main/.github/workflows/publish-docs.yml","dependencies":[{"id":7760709224,"package_name":"actions/checkout","ecosystem":"actions","requirements":"v2","direct":true,"kind":"composite","optional":false}]},{"ecosystem":"actions","filepath":".github/workflows/test-coyote.yml","sha":null,"kind":"manifest","created_at":"2023-02-18T12:01:14.492Z","updated_at":"2023-02-18T12:01:14.492Z","repository_link":"https://github.com/microsoft/coyote/blob/main/.github/workflows/test-coyote.yml","dependencies":[{"id":7760709249,"package_name":"actions/checkout","ecosystem":"actions","requirements":"v2","direct":true,"kind":"composite","optional":false},{"id":7760709250,"package_name":"NuGet/setup-nuget","ecosystem":"actions","requirements":"v1","direct":true,"kind":"composite","optional":false},{"id":7760709251,"package_name":"actions/setup-dotnet","ecosystem":"actions","requirements":"v1","direct":true,"kind":"composite","optional":false},{"id":7760709252,"package_name":"actions/upload-artifact","ecosystem":"actions","requirements":"v3","direct":true,"kind":"composite","optional":false},{"id":7760709253,"package_name":"actions/download-artifact","ecosystem":"actions","requirements":"v3","direct":true,"kind":"composite","optional":false}]},{"ecosystem":"actions","filepath":".github/workflows/test-performance.yml","sha":null,"kind":"manifest","created_at":"2023-02-18T12:01:14.596Z","updated_at":"2023-02-18T12:01:14.596Z","repository_link":"https://github.com/microsoft/coyote/blob/main/.github/workflows/test-performance.yml","dependencies":[{"id":7760709937,"package_name":"actions/checkout","ecosystem":"actions","requirements":"v2","direct":true,"kind":"composite","optional":false},{"id":7760709938,"package_name":"NuGet/setup-nuget","ecosystem":"actions","requirements":"v1","direct":true,"kind":"composite","optional":false},{"id":7760709939,"package_name":"actions/setup-dotnet","ecosystem":"actions","requirements":"v1","direct":true,"kind":"composite","optional":false}]},{"ecosystem":"nuget","filepath":"Tests/Tests.Runtime/Tests.Runtime.csproj","sha":null,"kind":"manifest","created_at":"2023-02-18T12:01:14.761Z","updated_at":"2023-02-18T12:01:14.761Z","repository_link":"https://github.com/microsoft/coyote/blob/main/Tests/Tests.Runtime/Tests.Runtime.csproj","dependencies":[{"id":7760710491,"package_name":"Microsoft.NET.Test.Sdk","ecosystem":"nuget","requirements":"17.4.0","direct":true,"kind":"runtime","optional":false},{"id":7760710492,"package_name":"xunit","ecosystem":"nuget","requirements":"2.4.2","direct":true,"kind":"runtime","optional":false},{"id":7760710493,"package_name":"xunit.runner.visualstudio","ecosystem":"nuget","requirements":"2.4.5","direct":true,"kind":"runtime","optional":false}]},{"ecosystem":"nuget","filepath":"Tools/CLI/Coyote.CLI.csproj","sha":null,"kind":"manifest","created_at":"2023-02-18T12:01:14.818Z","updated_at":"2023-02-18T12:01:14.818Z","repository_link":"https://github.com/microsoft/coyote/blob/main/Tools/CLI/Coyote.CLI.csproj","dependencies":[{"id":7760710689,"package_name":"System.CommandLine","ecosystem":"nuget","requirements":"2.0.0-beta4.22272.1","direct":true,"kind":"runtime","optional":false},{"id":7760710837,"package_name":"System.Configuration.ConfigurationManager","ecosystem":"nuget","requirements":"7.0.0","direct":true,"kind":"runtime","optional":false}]}],"score":24.887088637290464,"created_at":"2025-09-04T15:50:50.043Z","updated_at":"2025-10-07T08:09:28.793Z","avatar_url":"https://github.com/microsoft.png","language":"C#","category":null,"sub_category":null,"monthly_downloads":0,"funding_links":[],"readme_doi_urls":[],"works":{},"citation_counts":{},"total_citations":0,"keywords_from_contributors":["pdes","networks","simulations","optim","mesh","sequences","interactive","hacking"],"project_url":"https://science.ecosyste.ms/api/v1/projects/18782","html_url":"https://science.ecosyste.ms/projects/18782","bibtex_url":"https://science.ecosyste.ms/projects/18782/export.bibtex","apalike_url":"https://science.ecosyste.ms/projects/18782/export.apalike"}