{"id":190592,"name":null,"description":"Signing and verification tools for conda","url":"https://github.com/conda/conda-content-trust","last_synced_at":"2025-09-10T03:54:44.460Z","repository":{"id":37839678,"uuid":"213960510","full_name":"conda/conda-content-trust","owner":"conda","description":"Signing and verification tools for conda","archived":false,"fork":false,"pushed_at":"2025-08-26T14:47:11.000Z","size":533,"stargazers_count":9,"open_issues_count":1,"forks_count":12,"subscribers_count":9,"default_branch":"main","last_synced_at":"2025-08-26T20:00:54.857Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":"","language":"Python","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"other","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/conda.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":"CODE_OF_CONDUCT.md","threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":"AUTHORS.md","dei":null,"publiccode":null,"codemeta":null,"zenodo":null}},"created_at":"2019-10-09T15:52:17.000Z","updated_at":"2025-08-26T14:47:15.000Z","dependencies_parsed_at":"2023-12-15T04:38:03.907Z","dependency_job_id":"c7549dd7-879e-4a9e-86ca-b2406bf2b76a","html_url":"https://github.com/conda/conda-content-trust","commit_stats":{"total_commits":161,"total_committers":11,"mean_commits":"14.636363636363637","dds":0.7701863354037267,"last_synced_commit":"a9b440a86796f7fa956d4a3a448554c581b3c9cb"},"previous_names":[],"tags_count":4,"template":false,"template_full_name":null,"purl":"pkg:github/conda/conda-content-trust","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/conda%2Fconda-content-trust","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/conda%2Fconda-content-trust/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/conda%2Fconda-content-trust/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/conda%2Fconda-content-trust/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/conda","download_url":"https://codeload.github.com/conda/conda-content-trust/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/conda%2Fconda-content-trust/sbom","scorecard":{"id":302230,"data":{"date":"2025-08-11","repo":{"name":"github.com/conda/conda-content-trust","commit":"7c1bc3466acf2d07a05e578aeec644ac0b6bf022"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":4.2,"checks":[{"name":"Code-Review","score":10,"reason":"all changesets reviewed","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Maintained","score":0,"reason":"0 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Pinned-Dependencies","score":10,"reason":"all dependencies are pinned","details":["Info:  11 out of  11 GitHub-owned GitHubAction dependencies pinned","Info:  18 out of  18 third-party GitHubAction dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: jobLevel 'pull-requests' permission set to 'read': .github/workflows/tests.yml:33","Warn: no topLevel permission defined: .github/workflows/builds-review.yaml:1","Warn: no topLevel permission defined: .github/workflows/cla.yml:1","Warn: no topLevel permission defined: .github/workflows/issues.yml:1","Warn: no topLevel permission defined: .github/workflows/labels.yml:1","Warn: no topLevel permission defined: .github/workflows/project.yml:1","Warn: no topLevel permission defined: .github/workflows/tests.yml:1","Warn: no topLevel permission defined: .github/workflows/update.yml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"License","score":9,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Warn: project license file does not contain an FSF or OSI license."],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Signed-Releases","score":0,"reason":"Project has not signed or included provenance with any releases.","details":["Warn: release artifact 0.1.3 not signed: https://api.github.com/repos/conda/conda-content-trust/releases/42867161","Warn: release artifact 0.1.3 does not have provenance: https://api.github.com/repos/conda/conda-content-trust/releases/42867161"],"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Security-Policy","score":0,"reason":"security policy file not detected","details":["Warn: no security policy file detected","Warn: no security file to analyze","Warn: no security file to analyze","Warn: no security file to analyze"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Vulnerabilities","score":2,"reason":"8 existing vulnerabilities detected","details":["Warn: Project is vulnerable to: GHSA-3ww4-gg4f-jr7f","Warn: Project is vulnerable to: PYSEC-2024-225 / GHSA-6vqw-3v5j-54x4","Warn: Project is vulnerable to: GHSA-9v9h-cgj8-h64p","Warn: Project is vulnerable to: PYSEC-2023-112 / GHSA-cf7p-gm2m-833m","Warn: Project is vulnerable to: GHSA-h4gh-qq45-vh27","Warn: Project is vulnerable to: PYSEC-2023-254 / GHSA-jfhm-5ghh-2f97","Warn: Project is vulnerable to: GHSA-jm77-qphf-c4w8","Warn: Project is vulnerable to: GHSA-v8gr-m533-ghj9"],"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 30 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-17T20:58:30.695Z","repository_id":37839678,"created_at":"2025-08-17T20:58:30.695Z","updated_at":"2025-08-17T20:58:30.695Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":274410025,"owners_count":25279853,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","status":"online","status_checked_at":"2025-09-10T02:00:12.551Z","response_time":83,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"owner":{"login":"conda","name":"conda","uuid":"6392739","kind":"organization","description":"conda is system-level, binary package and environment manager running on all major operating systems and platforms.","email":null,"website":"https://conda.org","location":null,"twitter":"condaproject","company":null,"icon_url":"https://avatars.githubusercontent.com/u/6392739?v=4","repositories_count":29,"last_synced_at":"2024-03-25T19:59:45.534Z","metadata":{"has_sponsors_listing":false},"html_url":"https://github.com/conda","funding_links":[],"total_stars":8973,"followers":344,"following":0,"created_at":"2022-11-02T16:22:58.279Z","updated_at":"2024-03-25T20:00:09.605Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/conda","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/conda/repositories"},"packages":[{"id":2678684,"name":"conda-content-trust","ecosystem":"pypi","description":"Signing and verification tools for conda","homepage":"https://github.com/conda/conda-content-trust","licenses":"BSD","normalized_licenses":["BSD-3-Clause"],"repository_url":"https://github.com/conda/conda-content-trust","keywords_array":["conda-content-trust","conda-authentication-resources","conda","signing","secure","verify","authentication","key","compromise"],"namespace":null,"versions_count":1,"first_release_published_at":"2021-05-12T19:25:22.000Z","latest_release_published_at":"2021-05-12T19:25:22.000Z","latest_release_number":"0.1.2","last_synced_at":"2025-08-27T01:11:59.703Z","created_at":"2022-04-10T10:26:10.607Z","updated_at":"2025-08-27T01:16:39.601Z","registry_url":"https://pypi.org/project/conda-content-trust/","install_command":"pip install conda-content-trust --index-url https://pypi.org/simple","documentation_url":"https://conda-content-trust.readthedocs.io/","metadata":{"funding":null,"documentation":null,"classifiers":["Programming Language :: Python :: 2.7","Programming Language :: Python :: 3.6","Programming Language :: Python :: 3.7","Programming Language :: Python :: 3.8","Programming Language :: Python :: 3.9"],"normalized_name":"conda-content-trust","project_status":null},"repo_metadata":{"id":37839678,"uuid":"213960510","full_name":"conda/conda-content-trust","owner":"conda","description":"Signing and verification tools for conda","archived":false,"fork":false,"pushed_at":"2025-08-26T14:47:11.000Z","size":533,"stargazers_count":9,"open_issues_count":1,"forks_count":12,"subscribers_count":9,"default_branch":"main","last_synced_at":"2025-08-26T20:00:54.857Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":"","language":"Python","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"other","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/conda.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":"CODE_OF_CONDUCT.md","threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":"AUTHORS.md","dei":null,"publiccode":null,"codemeta":null,"zenodo":null}},"created_at":"2019-10-09T15:52:17.000Z","updated_at":"2025-08-26T14:47:15.000Z","dependencies_parsed_at":"2023-12-15T04:38:03.907Z","dependency_job_id":"c7549dd7-879e-4a9e-86ca-b2406bf2b76a","html_url":"https://github.com/conda/conda-content-trust","commit_stats":{"total_commits":161,"total_committers":11,"mean_commits":"14.636363636363637","dds":0.7701863354037267,"last_synced_commit":"a9b440a86796f7fa956d4a3a448554c581b3c9cb"},"previous_names":[],"tags_count":4,"template":false,"template_full_name":null,"purl":"pkg:github/conda/conda-content-trust","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/conda%2Fconda-content-trust","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/conda%2Fconda-content-trust/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/conda%2Fconda-content-trust/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/conda%2Fconda-content-trust/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/conda","download_url":"https://codeload.github.com/conda/conda-content-trust/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/conda%2Fconda-content-trust/sbom","scorecard":{"id":302230,"data":{"date":"2025-08-11","repo":{"name":"github.com/conda/conda-content-trust","commit":"7c1bc3466acf2d07a05e578aeec644ac0b6bf022"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":4.2,"checks":[{"name":"Code-Review","score":10,"reason":"all changesets reviewed","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Maintained","score":0,"reason":"0 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Pinned-Dependencies","score":10,"reason":"all dependencies are pinned","details":["Info:  11 out of  11 GitHub-owned GitHubAction dependencies pinned","Info:  18 out of  18 third-party GitHubAction dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: jobLevel 'pull-requests' permission set to 'read': .github/workflows/tests.yml:33","Warn: no topLevel permission defined: .github/workflows/builds-review.yaml:1","Warn: no topLevel permission defined: .github/workflows/cla.yml:1","Warn: no topLevel permission defined: .github/workflows/issues.yml:1","Warn: no topLevel permission defined: .github/workflows/labels.yml:1","Warn: no topLevel permission defined: .github/workflows/project.yml:1","Warn: no topLevel permission defined: .github/workflows/tests.yml:1","Warn: no topLevel permission defined: .github/workflows/update.yml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"License","score":9,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Warn: project license file does not contain an FSF or OSI license."],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Signed-Releases","score":0,"reason":"Project has not signed or included provenance with any releases.","details":["Warn: release artifact 0.1.3 not signed: https://api.github.com/repos/conda/conda-content-trust/releases/42867161","Warn: release artifact 0.1.3 does not have provenance: https://api.github.com/repos/conda/conda-content-trust/releases/42867161"],"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Security-Policy","score":0,"reason":"security policy file not detected","details":["Warn: no security policy file detected","Warn: no security file to analyze","Warn: no security file to analyze","Warn: no security file to analyze"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Vulnerabilities","score":2,"reason":"8 existing vulnerabilities detected","details":["Warn: Project is vulnerable to: GHSA-3ww4-gg4f-jr7f","Warn: Project is vulnerable to: PYSEC-2024-225 / GHSA-6vqw-3v5j-54x4","Warn: Project is vulnerable to: GHSA-9v9h-cgj8-h64p","Warn: Project is vulnerable to: PYSEC-2023-112 / GHSA-cf7p-gm2m-833m","Warn: Project is vulnerable to: GHSA-h4gh-qq45-vh27","Warn: Project is vulnerable to: PYSEC-2023-254 / GHSA-jfhm-5ghh-2f97","Warn: Project is vulnerable to: GHSA-jm77-qphf-c4w8","Warn: Project is vulnerable to: GHSA-v8gr-m533-ghj9"],"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 30 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-17T20:58:30.695Z","repository_id":37839678,"created_at":"2025-08-17T20:58:30.695Z","updated_at":"2025-08-17T20:58:30.695Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":272275951,"owners_count":24905203,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","status":"online","status_checked_at":"2025-08-26T02:00:07.904Z","response_time":60,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"conda","name":"conda","uuid":"6392739","kind":"organization","description":"conda is system-level, binary package and environment manager running on all major operating systems and platforms.","email":null,"website":"https://conda.org","location":null,"twitter":"condaproject","company":null,"icon_url":"https://avatars.githubusercontent.com/u/6392739?v=4","repositories_count":29,"last_synced_at":"2024-03-25T19:59:45.534Z","metadata":{"has_sponsors_listing":false},"html_url":"https://github.com/conda","funding_links":[],"total_stars":8973,"followers":344,"following":0,"created_at":"2022-11-02T16:22:58.279Z","updated_at":"2024-03-25T20:00:09.605Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/conda","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/conda/repositories"},"tags":[{"name":"0.2.0","sha":"ee5f7050ffbf2328041d0b8e5ad8ec938cc4ef7f","kind":"commit","published_at":"2023-08-30T21:02:02.000Z","download_url":"https://codeload.github.com/conda/conda-content-trust/tar.gz/0.2.0","html_url":"https://github.com/conda/conda-content-trust/releases/tag/0.2.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/conda/conda-content-trust@0.2.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/conda%2Fconda-content-trust/tags/0.2.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/conda%2Fconda-content-trust/tags/0.2.0/manifests"},{"name":"0.1.3","sha":"55b084cff89e8ff97934024bac0108301fa6d7ca","kind":"tag","published_at":"2021-05-12T20:09:34.000Z","download_url":"https://codeload.github.com/conda/conda-content-trust/tar.gz/0.1.3","html_url":"https://github.com/conda/conda-content-trust/releases/tag/0.1.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/conda/conda-content-trust@0.1.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/conda%2Fconda-content-trust/tags/0.1.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/conda%2Fconda-content-trust/tags/0.1.3/manifests"},{"name":"0.1.1","sha":"db4f9f6eddfa5f85eb8bbbfeb637b7019a00d688","kind":"tag","published_at":"2021-03-26T09:48:26.000Z","download_url":"https://codeload.github.com/conda/conda-content-trust/tar.gz/0.1.1","html_url":"https://github.com/conda/conda-content-trust/releases/tag/0.1.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/conda/conda-content-trust@0.1.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/conda%2Fconda-content-trust/tags/0.1.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/conda%2Fconda-content-trust/tags/0.1.1/manifests"},{"name":"0.1.0","sha":"2bfdc48c615c604ac9c093e1605e6dcc595441ad","kind":"tag","published_at":"2021-03-15T15:02:03.000Z","download_url":"https://codeload.github.com/conda/conda-content-trust/tar.gz/0.1.0","html_url":"https://github.com/conda/conda-content-trust/releases/tag/0.1.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/conda/conda-content-trust@0.1.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/conda%2Fconda-content-trust/tags/0.1.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/conda%2Fconda-content-trust/tags/0.1.0/manifests"}]},"repo_metadata_updated_at":"2025-08-27T01:16:39.601Z","dependent_packages_count":0,"downloads":96,"downloads_period":"last-month","dependent_repos_count":162,"rankings":{"downloads":13.200443642050114,"dependent_repos_count":1.1939974853199369,"dependent_packages_count":10.117827917587048,"stargazers_count":20.371240556803762,"forks_count":10.159311767078357,"docker_downloads_count":0.38595203086094504,"average":9.238128899950027},"purl":"pkg:pypi/conda-content-trust","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/pypi/conda-content-trust","docker_dependents_count":1075,"docker_downloads_count":217121137,"usage_url":"https://repos.ecosyste.ms/usage/pypi/conda-content-trust","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/pypi/conda-content-trust/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2025-08-04T23:46:21.896Z","issues_count":13,"pull_requests_count":197,"avg_time_to_close_issue":21578385.076923076,"avg_time_to_close_pull_request":3237345.9581151833,"issues_closed_count":13,"pull_requests_closed_count":191,"pull_request_authors_count":9,"issue_authors_count":5,"avg_comments_per_issue":1.6153846153846154,"avg_comments_per_pull_request":0.4873096446700508,"merged_pull_requests_count":142,"bot_issues_count":0,"bot_pull_requests_count":102,"past_year_issues_count":0,"past_year_pull_requests_count":75,"past_year_avg_time_to_close_issue":null,"past_year_avg_time_to_close_pull_request":1030065.8840579711,"past_year_issues_closed_count":0,"past_year_pull_requests_closed_count":69,"past_year_pull_request_authors_count":4,"past_year_issue_authors_count":0,"past_year_avg_comments_per_issue":null,"past_year_avg_comments_per_pull_request":0.28,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":60,"past_year_merged_pull_requests_count":50,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/conda%2Fconda-content-trust/issues","maintainers":[{"login":"jezdez","count":11,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jezdez"},{"login":"awwad","count":6,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/awwad"},{"login":"dbast","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/dbast"}],"active_maintainers":[]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/pypi.org/packages/conda-content-trust/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/pypi.org/packages/conda-content-trust/version_numbers","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/pypi.org/packages/conda-content-trust/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/pypi.org/packages/conda-content-trust/related_packages","maintainers":[{"uuid":"awwad","login":"awwad","name":null,"email":null,"url":null,"packages_count":2,"html_url":"https://pypi.org/user/awwad/","role":null,"created_at":"2023-02-23T21:02:16.861Z","updated_at":"2023-02-23T21:02:16.861Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/pypi.org/maintainers/awwad/packages"}],"registry":{"name":"pypi.org","url":"https://pypi.org","ecosystem":"pypi","default":true,"packages_count":726796,"maintainers_count":308899,"namespaces_count":0,"keywords_count":238369,"github":"pypi","metadata":{"funded_packages_count":50594},"icon_url":"https://github.com/pypi.png","created_at":"2022-04-04T15:19:23.364Z","updated_at":"2025-09-09T06:31:19.922Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/pypi.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/pypi.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/pypi.org/namespaces"}},{"id":5296067,"name":"conda-content-trust","ecosystem":"conda","description":null,"homepage":"https://github.com/conda/conda-content-trust","licenses":"BSD-3-Clause","normalized_licenses":["BSD-3-Clause"],"repository_url":"https://github.com/conda/conda-content-trust","keywords_array":[],"namespace":null,"versions_count":1,"first_release_published_at":"2021-05-18T20:47:30.000Z","latest_release_published_at":"2021-05-18T20:47:30.000Z","latest_release_number":"0.1.3","last_synced_at":"2025-08-27T01:12:03.207Z","created_at":"2022-10-03T15:59:38.288Z","updated_at":"2025-08-27T01:16:39.611Z","registry_url":"https://anaconda.org/conda-forge/conda-content-trust","install_command":"conda install -c conda-forge conda-content-trust","documentation_url":null,"metadata":{},"repo_metadata":{"id":37839678,"uuid":"213960510","full_name":"conda/conda-content-trust","owner":"conda","description":"Signing and verification tools for conda","archived":false,"fork":false,"pushed_at":"2025-08-26T14:47:11.000Z","size":533,"stargazers_count":9,"open_issues_count":1,"forks_count":12,"subscribers_count":9,"default_branch":"main","last_synced_at":"2025-08-26T20:00:54.857Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":"","language":"Python","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"other","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/conda.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":"CODE_OF_CONDUCT.md","threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":"AUTHORS.md","dei":null,"publiccode":null,"codemeta":null,"zenodo":null}},"created_at":"2019-10-09T15:52:17.000Z","updated_at":"2025-08-26T14:47:15.000Z","dependencies_parsed_at":"2023-12-15T04:38:03.907Z","dependency_job_id":"c7549dd7-879e-4a9e-86ca-b2406bf2b76a","html_url":"https://github.com/conda/conda-content-trust","commit_stats":{"total_commits":161,"total_committers":11,"mean_commits":"14.636363636363637","dds":0.7701863354037267,"last_synced_commit":"a9b440a86796f7fa956d4a3a448554c581b3c9cb"},"previous_names":[],"tags_count":4,"template":false,"template_full_name":null,"purl":"pkg:github/conda/conda-content-trust","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/conda%2Fconda-content-trust","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/conda%2Fconda-content-trust/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/conda%2Fconda-content-trust/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/conda%2Fconda-content-trust/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/conda","download_url":"https://codeload.github.com/conda/conda-content-trust/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/conda%2Fconda-content-trust/sbom","scorecard":{"id":302230,"data":{"date":"2025-08-11","repo":{"name":"github.com/conda/conda-content-trust","commit":"7c1bc3466acf2d07a05e578aeec644ac0b6bf022"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":4.2,"checks":[{"name":"Code-Review","score":10,"reason":"all changesets reviewed","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Maintained","score":0,"reason":"0 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Pinned-Dependencies","score":10,"reason":"all dependencies are pinned","details":["Info:  11 out of  11 GitHub-owned GitHubAction dependencies pinned","Info:  18 out of  18 third-party GitHubAction dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: jobLevel 'pull-requests' permission set to 'read': .github/workflows/tests.yml:33","Warn: no topLevel permission defined: .github/workflows/builds-review.yaml:1","Warn: no topLevel permission defined: .github/workflows/cla.yml:1","Warn: no topLevel permission defined: .github/workflows/issues.yml:1","Warn: no topLevel permission defined: .github/workflows/labels.yml:1","Warn: no topLevel permission defined: .github/workflows/project.yml:1","Warn: no topLevel permission defined: .github/workflows/tests.yml:1","Warn: no topLevel permission defined: .github/workflows/update.yml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"License","score":9,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Warn: project license file does not contain an FSF or OSI license."],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Signed-Releases","score":0,"reason":"Project has not signed or included provenance with any releases.","details":["Warn: release artifact 0.1.3 not signed: https://api.github.com/repos/conda/conda-content-trust/releases/42867161","Warn: release artifact 0.1.3 does not have provenance: https://api.github.com/repos/conda/conda-content-trust/releases/42867161"],"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Security-Policy","score":0,"reason":"security policy file not detected","details":["Warn: no security policy file detected","Warn: no security file to analyze","Warn: no security file to analyze","Warn: no security file to analyze"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Vulnerabilities","score":2,"reason":"8 existing vulnerabilities detected","details":["Warn: Project is vulnerable to: GHSA-3ww4-gg4f-jr7f","Warn: Project is vulnerable to: PYSEC-2024-225 / GHSA-6vqw-3v5j-54x4","Warn: Project is vulnerable to: GHSA-9v9h-cgj8-h64p","Warn: Project is vulnerable to: PYSEC-2023-112 / GHSA-cf7p-gm2m-833m","Warn: Project is vulnerable to: GHSA-h4gh-qq45-vh27","Warn: Project is vulnerable to: PYSEC-2023-254 / GHSA-jfhm-5ghh-2f97","Warn: Project is vulnerable to: GHSA-jm77-qphf-c4w8","Warn: Project is vulnerable to: GHSA-v8gr-m533-ghj9"],"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 30 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-17T20:58:30.695Z","repository_id":37839678,"created_at":"2025-08-17T20:58:30.695Z","updated_at":"2025-08-17T20:58:30.695Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":272275951,"owners_count":24905203,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","status":"online","status_checked_at":"2025-08-26T02:00:07.904Z","response_time":60,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"conda","name":"conda","uuid":"6392739","kind":"organization","description":"conda is system-level, binary package and environment manager running on all major operating systems and platforms.","email":null,"website":"https://conda.org","location":null,"twitter":"condaproject","company":null,"icon_url":"https://avatars.githubusercontent.com/u/6392739?v=4","repositories_count":29,"last_synced_at":"2024-03-25T19:59:45.534Z","metadata":{"has_sponsors_listing":false},"html_url":"https://github.com/conda","funding_links":[],"total_stars":8973,"followers":344,"following":0,"created_at":"2022-11-02T16:22:58.279Z","updated_at":"2024-03-25T20:00:09.605Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/conda","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/conda/repositories"},"tags":[{"name":"0.2.0","sha":"ee5f7050ffbf2328041d0b8e5ad8ec938cc4ef7f","kind":"commit","published_at":"2023-08-30T21:02:02.000Z","download_url":"https://codeload.github.com/conda/conda-content-trust/tar.gz/0.2.0","html_url":"https://github.com/conda/conda-content-trust/releases/tag/0.2.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/conda/conda-content-trust@0.2.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/conda%2Fconda-content-trust/tags/0.2.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/conda%2Fconda-content-trust/tags/0.2.0/manifests"},{"name":"0.1.3","sha":"55b084cff89e8ff97934024bac0108301fa6d7ca","kind":"tag","published_at":"2021-05-12T20:09:34.000Z","download_url":"https://codeload.github.com/conda/conda-content-trust/tar.gz/0.1.3","html_url":"https://github.com/conda/conda-content-trust/releases/tag/0.1.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/conda/conda-content-trust@0.1.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/conda%2Fconda-content-trust/tags/0.1.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/conda%2Fconda-content-trust/tags/0.1.3/manifests"},{"name":"0.1.1","sha":"db4f9f6eddfa5f85eb8bbbfeb637b7019a00d688","kind":"tag","published_at":"2021-03-26T09:48:26.000Z","download_url":"https://codeload.github.com/conda/conda-content-trust/tar.gz/0.1.1","html_url":"https://github.com/conda/conda-content-trust/releases/tag/0.1.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/conda/conda-content-trust@0.1.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/conda%2Fconda-content-trust/tags/0.1.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/conda%2Fconda-content-trust/tags/0.1.1/manifests"},{"name":"0.1.0","sha":"2bfdc48c615c604ac9c093e1605e6dcc595441ad","kind":"tag","published_at":"2021-03-15T15:02:03.000Z","download_url":"https://codeload.github.com/conda/conda-content-trust/tar.gz/0.1.0","html_url":"https://github.com/conda/conda-content-trust/releases/tag/0.1.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/conda/conda-content-trust@0.1.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/conda%2Fconda-content-trust/tags/0.1.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/conda%2Fconda-content-trust/tags/0.1.0/manifests"}]},"repo_metadata_updated_at":"2025-08-27T01:16:39.611Z","dependent_packages_count":3,"downloads":null,"downloads_period":null,"dependent_repos_count":44,"rankings":{"downloads":null,"dependent_repos_count":5.4194321073905884,"dependent_packages_count":15.649483507161035,"stargazers_count":59.65367533310045,"forks_count":46.20989071310944,"docker_downloads_count":null,"average":31.733120415190378},"purl":"pkg:conda/conda-content-trust","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/conda/conda-content-trust","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/conda/conda-content-trust","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/conda/conda-content-trust/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2025-08-04T23:46:21.896Z","issues_count":13,"pull_requests_count":197,"avg_time_to_close_issue":21578385.076923076,"avg_time_to_close_pull_request":3237345.9581151833,"issues_closed_count":13,"pull_requests_closed_count":191,"pull_request_authors_count":9,"issue_authors_count":5,"avg_comments_per_issue":1.6153846153846154,"avg_comments_per_pull_request":0.4873096446700508,"merged_pull_requests_count":142,"bot_issues_count":0,"bot_pull_requests_count":102,"past_year_issues_count":0,"past_year_pull_requests_count":75,"past_year_avg_time_to_close_issue":null,"past_year_avg_time_to_close_pull_request":1030065.8840579711,"past_year_issues_closed_count":0,"past_year_pull_requests_closed_count":69,"past_year_pull_request_authors_count":4,"past_year_issue_authors_count":0,"past_year_avg_comments_per_issue":null,"past_year_avg_comments_per_pull_request":0.28,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":60,"past_year_merged_pull_requests_count":50,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/conda%2Fconda-content-trust/issues","maintainers":[{"login":"jezdez","count":11,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jezdez"},{"login":"awwad","count":6,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/awwad"},{"login":"dbast","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/dbast"}],"active_maintainers":[]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/conda-forge.org/packages/conda-content-trust/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/conda-forge.org/packages/conda-content-trust/version_numbers","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/conda-forge.org/packages/conda-content-trust/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/conda-forge.org/packages/conda-content-trust/related_packages","maintainers":[],"registry":{"name":"conda-forge.org","url":"https://conda-forge.org","ecosystem":"conda","default":false,"packages_count":20636,"maintainers_count":0,"namespaces_count":0,"keywords_count":13420,"github":"conda-forge","metadata":{"kind":"conda-forge","key":"CondaForge","api":"https://conda.anaconda.org","funded_packages_count":2190},"icon_url":"https://github.com/conda-forge.png","created_at":"2022-10-03T15:37:08.743Z","updated_at":"2025-09-09T06:53:47.128Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/conda-forge.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/conda-forge.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/conda-forge.org/namespaces"}},{"id":5285215,"name":"conda-content-trust","ecosystem":"conda","description":null,"homepage":"https://github.com/conda/conda-content-trust","licenses":"BSD-3-Clause","normalized_licenses":["BSD-3-Clause"],"repository_url":"https://github.com/conda/conda-content-trust","keywords_array":[],"namespace":null,"versions_count":3,"first_release_published_at":"2021-03-29T19:20:36.000Z","latest_release_published_at":"2023-08-31T14:05:53.000Z","latest_release_number":"0.2.0","last_synced_at":"2025-08-27T01:12:01.322Z","created_at":"2022-10-03T15:42:16.683Z","updated_at":"2025-08-27T01:16:39.605Z","registry_url":"https://anaconda.org/anaconda/conda-content-trust","install_command":"conda install -c anaconda conda-content-trust","documentation_url":null,"metadata":{},"repo_metadata":{"id":37839678,"uuid":"213960510","full_name":"conda/conda-content-trust","owner":"conda","description":"Signing and verification tools for conda","archived":false,"fork":false,"pushed_at":"2025-08-26T14:47:11.000Z","size":533,"stargazers_count":9,"open_issues_count":1,"forks_count":12,"subscribers_count":9,"default_branch":"main","last_synced_at":"2025-08-26T20:00:54.857Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":"","language":"Python","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"other","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/conda.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":"CODE_OF_CONDUCT.md","threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":"AUTHORS.md","dei":null,"publiccode":null,"codemeta":null,"zenodo":null}},"created_at":"2019-10-09T15:52:17.000Z","updated_at":"2025-08-26T14:47:15.000Z","dependencies_parsed_at":"2023-12-15T04:38:03.907Z","dependency_job_id":"c7549dd7-879e-4a9e-86ca-b2406bf2b76a","html_url":"https://github.com/conda/conda-content-trust","commit_stats":{"total_commits":161,"total_committers":11,"mean_commits":"14.636363636363637","dds":0.7701863354037267,"last_synced_commit":"a9b440a86796f7fa956d4a3a448554c581b3c9cb"},"previous_names":[],"tags_count":4,"template":false,"template_full_name":null,"purl":"pkg:github/conda/conda-content-trust","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/conda%2Fconda-content-trust","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/conda%2Fconda-content-trust/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/conda%2Fconda-content-trust/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/conda%2Fconda-content-trust/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/conda","download_url":"https://codeload.github.com/conda/conda-content-trust/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/conda%2Fconda-content-trust/sbom","scorecard":{"id":302230,"data":{"date":"2025-08-11","repo":{"name":"github.com/conda/conda-content-trust","commit":"7c1bc3466acf2d07a05e578aeec644ac0b6bf022"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":4.2,"checks":[{"name":"Code-Review","score":10,"reason":"all changesets reviewed","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Maintained","score":0,"reason":"0 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Pinned-Dependencies","score":10,"reason":"all dependencies are pinned","details":["Info:  11 out of  11 GitHub-owned GitHubAction dependencies pinned","Info:  18 out of  18 third-party GitHubAction dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: jobLevel 'pull-requests' permission set to 'read': .github/workflows/tests.yml:33","Warn: no topLevel permission defined: .github/workflows/builds-review.yaml:1","Warn: no topLevel permission defined: .github/workflows/cla.yml:1","Warn: no topLevel permission defined: .github/workflows/issues.yml:1","Warn: no topLevel permission defined: .github/workflows/labels.yml:1","Warn: no topLevel permission defined: .github/workflows/project.yml:1","Warn: no topLevel permission defined: .github/workflows/tests.yml:1","Warn: no topLevel permission defined: .github/workflows/update.yml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"License","score":9,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Warn: project license file does not contain an FSF or OSI license."],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Signed-Releases","score":0,"reason":"Project has not signed or included provenance with any releases.","details":["Warn: release artifact 0.1.3 not signed: https://api.github.com/repos/conda/conda-content-trust/releases/42867161","Warn: release artifact 0.1.3 does not have provenance: https://api.github.com/repos/conda/conda-content-trust/releases/42867161"],"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Security-Policy","score":0,"reason":"security policy file not detected","details":["Warn: no security policy file detected","Warn: no security file to analyze","Warn: no security file to analyze","Warn: no security file to analyze"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Vulnerabilities","score":2,"reason":"8 existing vulnerabilities detected","details":["Warn: Project is vulnerable to: GHSA-3ww4-gg4f-jr7f","Warn: Project is vulnerable to: PYSEC-2024-225 / GHSA-6vqw-3v5j-54x4","Warn: Project is vulnerable to: GHSA-9v9h-cgj8-h64p","Warn: Project is vulnerable to: PYSEC-2023-112 / GHSA-cf7p-gm2m-833m","Warn: Project is vulnerable to: GHSA-h4gh-qq45-vh27","Warn: Project is vulnerable to: PYSEC-2023-254 / GHSA-jfhm-5ghh-2f97","Warn: Project is vulnerable to: GHSA-jm77-qphf-c4w8","Warn: Project is vulnerable to: GHSA-v8gr-m533-ghj9"],"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 30 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-17T20:58:30.695Z","repository_id":37839678,"created_at":"2025-08-17T20:58:30.695Z","updated_at":"2025-08-17T20:58:30.695Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":272275951,"owners_count":24905203,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","status":"online","status_checked_at":"2025-08-26T02:00:07.904Z","response_time":60,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"conda","name":"conda","uuid":"6392739","kind":"organization","description":"conda is system-level, binary package and environment manager running on all major operating systems and platforms.","email":null,"website":"https://conda.org","location":null,"twitter":"condaproject","company":null,"icon_url":"https://avatars.githubusercontent.com/u/6392739?v=4","repositories_count":29,"last_synced_at":"2024-03-25T19:59:45.534Z","metadata":{"has_sponsors_listing":false},"html_url":"https://github.com/conda","funding_links":[],"total_stars":8973,"followers":344,"following":0,"created_at":"2022-11-02T16:22:58.279Z","updated_at":"2024-03-25T20:00:09.605Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/conda","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/conda/repositories"},"tags":[{"name":"0.2.0","sha":"ee5f7050ffbf2328041d0b8e5ad8ec938cc4ef7f","kind":"commit","published_at":"2023-08-30T21:02:02.000Z","download_url":"https://codeload.github.com/conda/conda-content-trust/tar.gz/0.2.0","html_url":"https://github.com/conda/conda-content-trust/releases/tag/0.2.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/conda/conda-content-trust@0.2.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/conda%2Fconda-content-trust/tags/0.2.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/conda%2Fconda-content-trust/tags/0.2.0/manifests"},{"name":"0.1.3","sha":"55b084cff89e8ff97934024bac0108301fa6d7ca","kind":"tag","published_at":"2021-05-12T20:09:34.000Z","download_url":"https://codeload.github.com/conda/conda-content-trust/tar.gz/0.1.3","html_url":"https://github.com/conda/conda-content-trust/releases/tag/0.1.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/conda/conda-content-trust@0.1.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/conda%2Fconda-content-trust/tags/0.1.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/conda%2Fconda-content-trust/tags/0.1.3/manifests"},{"name":"0.1.1","sha":"db4f9f6eddfa5f85eb8bbbfeb637b7019a00d688","kind":"tag","published_at":"2021-03-26T09:48:26.000Z","download_url":"https://codeload.github.com/conda/conda-content-trust/tar.gz/0.1.1","html_url":"https://github.com/conda/conda-content-trust/releases/tag/0.1.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/conda/conda-content-trust@0.1.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/conda%2Fconda-content-trust/tags/0.1.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/conda%2Fconda-content-trust/tags/0.1.1/manifests"},{"name":"0.1.0","sha":"2bfdc48c615c604ac9c093e1605e6dcc595441ad","kind":"tag","published_at":"2021-03-15T15:02:03.000Z","download_url":"https://codeload.github.com/conda/conda-content-trust/tar.gz/0.1.0","html_url":"https://github.com/conda/conda-content-trust/releases/tag/0.1.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/conda/conda-content-trust@0.1.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/conda%2Fconda-content-trust/tags/0.1.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/conda%2Fconda-content-trust/tags/0.1.0/manifests"}]},"repo_metadata_updated_at":"2025-08-27T01:16:39.605Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":44,"rankings":{"downloads":null,"dependent_repos_count":25.490788281485955,"dependent_packages_count":51.19299305345817,"stargazers_count":56.47840531561462,"forks_count":52.73331319842948,"docker_downloads_count":null,"average":46.47387496224705},"purl":"pkg:conda/conda-content-trust","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/conda/conda-content-trust","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/conda/conda-content-trust","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/conda/conda-content-trust/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2025-08-04T23:46:21.896Z","issues_count":13,"pull_requests_count":197,"avg_time_to_close_issue":21578385.076923076,"avg_time_to_close_pull_request":3237345.9581151833,"issues_closed_count":13,"pull_requests_closed_count":191,"pull_request_authors_count":9,"issue_authors_count":5,"avg_comments_per_issue":1.6153846153846154,"avg_comments_per_pull_request":0.4873096446700508,"merged_pull_requests_count":142,"bot_issues_count":0,"bot_pull_requests_count":102,"past_year_issues_count":0,"past_year_pull_requests_count":75,"past_year_avg_time_to_close_issue":null,"past_year_avg_time_to_close_pull_request":1030065.8840579711,"past_year_issues_closed_count":0,"past_year_pull_requests_closed_count":69,"past_year_pull_request_authors_count":4,"past_year_issue_authors_count":0,"past_year_avg_comments_per_issue":null,"past_year_avg_comments_per_pull_request":0.28,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":60,"past_year_merged_pull_requests_count":50,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/conda%2Fconda-content-trust/issues","maintainers":[{"login":"jezdez","count":11,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jezdez"},{"login":"awwad","count":6,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/awwad"},{"login":"dbast","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/dbast"}],"active_maintainers":[]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/anaconda.org/packages/conda-content-trust/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/anaconda.org/packages/conda-content-trust/version_numbers","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/anaconda.org/packages/conda-content-trust/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/anaconda.org/packages/conda-content-trust/related_packages","maintainers":[],"registry":{"name":"anaconda.org","url":"https://anaconda.org","ecosystem":"conda","default":true,"packages_count":4341,"maintainers_count":0,"namespaces_count":0,"keywords_count":2930,"github":"Anaconda","metadata":{"kind":"anaconda","key":"Main","api":"https://repo.ananconda.com","funded_packages_count":613},"icon_url":"https://github.com/Anaconda.png","created_at":"2022-10-03T15:37:08.736Z","updated_at":"2025-09-09T06:53:26.632Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/anaconda.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/anaconda.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/anaconda.org/namespaces"}}],"commits":{"id":26108,"full_name":"conda/conda-content-trust","default_branch":"main","committers":[{"name":"Conda Bot","email":"18747875+conda-bot","login":"conda-bot","count":47},{"name":"Sebastien Awwad","email":"sebastien.awwad@gmail.com","login":"awwad","count":37},{"name":"pre-commit-ci[bot]","email":"66853113+pre-commit-ci[bot]","login":"pre-commit-ci[bot]","count":34},{"name":"Daniel Holth","email":"dholth@anaconda.com","login":"dholth","count":32},{"name":"dependabot[bot]","email":"49699333+dependabot[bot]","login":"dependabot[bot]","count":23},{"name":"Ken Odegard","email":"kodegard@anaconda.com","login":"kenodegard","count":20},{"name":"Jannis Leidel","email":"jannis@leidel.info","login":"jezdez","count":14},{"name":"Bianca Henderson","email":"beeankha@gmail.com","login":"beeankha","count":12},{"name":"Daniel Bast","email":"2790401+dbast","login":"dbast","count":6},{"name":"Mike Sarahan","email":"msarahan@gmail.com","login":"msarahan","count":2},{"name":"Cheng H. Lee","email":"clee@anaconda.com","login":"chenghlee","count":2}],"total_commits":229,"total_committers":11,"total_bot_commits":57,"total_bot_committers":2,"mean_commits":20.818181818181817,"dds":0.7947598253275109,"past_year_committers":[{"name":"dependabot[bot]","email":"49699333+dependabot[bot]","login":"dependabot[bot]","count":21},{"name":"pre-commit-ci[bot]","email":"66853113+pre-commit-ci[bot]","login":"pre-commit-ci[bot]","count":19},{"name":"Conda Bot","email":"18747875+conda-bot","login":"conda-bot","count":12},{"name":"Ken Odegard","email":"kodegard@anaconda.com","login":"kenodegard","count":4}],"past_year_total_commits":56,"past_year_total_committers":4,"past_year_total_bot_commits":40,"past_year_total_bot_committers":2,"past_year_mean_commits":14.0,"past_year_dds":0.625,"last_synced_at":"2025-05-21T08:16:13.094Z","last_synced_commit":"7c1bc3466acf2d07a05e578aeec644ac0b6bf022","created_at":"2023-03-07T16:29:10.466Z","updated_at":"2025-05-21T08:16:13.179Z","commits_url":"https://commits.ecosyste.ms/api/v1/hosts/GitHub/repositories/conda%2Fconda-content-trust/commits","host":{"name":"GitHub","url":"https://github.com","kind":"github","last_synced_at":"2025-08-25T00:00:24.730Z","repositories_count":5479765,"commits_count":853308191,"contributors_count":31095157,"owners_count":906558,"icon_url":"https://github.com/github.png","host_url":"https://commits.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://commits.ecosyste.ms/api/v1/hosts/GitHub/repositories"}},"issues_stats":{"full_name":"conda/conda-content-trust","html_url":"https://github.com/conda/conda-content-trust","last_synced_at":"2025-09-09T08:30:18.946Z","status":null,"issues_count":12,"pull_requests_count":284,"avg_time_to_close_issue":22877927.75,"avg_time_to_close_pull_request":3069444.640625,"issues_closed_count":12,"pull_requests_closed_count":256,"pull_request_authors_count":9,"issue_authors_count":6,"avg_comments_per_issue":1.6666666666666667,"avg_comments_per_pull_request":0.43309859154929575,"merged_pull_requests_count":182,"bot_issues_count":1,"bot_pull_requests_count":174,"past_year_issues_count":1,"past_year_pull_requests_count":125,"past_year_avg_time_to_close_issue":761303.0,"past_year_avg_time_to_close_pull_request":1092895.3173076923,"past_year_issues_closed_count":1,"past_year_pull_requests_closed_count":104,"past_year_pull_request_authors_count":3,"past_year_issue_authors_count":1,"past_year_avg_comments_per_issue":0.0,"past_year_avg_comments_per_pull_request":0.28,"past_year_bot_issues_count":1,"past_year_bot_pull_requests_count":105,"past_year_merged_pull_requests_count":73,"created_at":"2023-05-10T11:06:30.465Z","updated_at":"2025-09-09T08:30:18.948Z","repository_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/conda%2Fconda-content-trust","issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/conda%2Fconda-content-trust/issues","issue_labels_count":{"locked":6,"stale":6,"stale::closed":6,"source::anaconda":6,"type::bug":3,"backlog":2,"type::task":2,"type::feature":2,"type::tech-debt":1,"downstream::anaconda":1,"pending::discussion":1,"severity::2":1,"github_actions":1,"dependencies":1,"cla-signed":1,"in-progress":1,"stale::recovered":1},"pull_request_labels_count":{"cla-signed":241,"locked":107,"dependencies":100,"github_actions":100,"in-progress":2,"stale":2,"stale::closed":2,"source::anaconda":1,"type::testing":1},"issue_author_associations_count":{"CONTRIBUTOR":7,"NONE":5},"pull_request_author_associations_count":{"CONTRIBUTOR":268,"MEMBER":10,"COLLABORATOR":6},"issue_authors":{"kenodegard":4,"barabo":2,"adriendelsalle":2,"dholth":2,"westurner":1,"dependabot[bot]":1},"pull_request_authors":{"dependabot[bot]":118,"conda-bot":63,"pre-commit-ci[bot]":56,"kenodegard":24,"jezdez":9,"dholth":6,"awwad":6,"beeankha":1,"dbast":1},"host":{"name":"GitHub","url":"https://github.com","kind":"github","last_synced_at":"2025-09-10T00:00:25.260Z","repositories_count":10197696,"issues_count":32183656,"pull_requests_count":101652770,"authors_count":10742159,"icon_url":"https://github.com/github.png","host_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories","owners_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/owners","authors_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors"},"past_year_issue_labels_count":{"cla-signed":1,"dependencies":1,"github_actions":1},"past_year_pull_request_labels_count":{"cla-signed":108,"dependencies":76,"github_actions":76},"past_year_issue_author_associations_count":{"CONTRIBUTOR":1},"past_year_pull_request_author_associations_count":{"CONTRIBUTOR":123},"past_year_issue_authors":{"dependabot[bot]":1},"past_year_pull_request_authors":{"dependabot[bot]":76,"pre-commit-ci[bot]":27,"conda-bot":20},"maintainers":[{"login":"jezdez","count":9,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jezdez"},{"login":"awwad","count":6,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/awwad"},{"login":"dbast","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/dbast"}],"active_maintainers":[]},"events":{"total":{"IssuesEvent":4,"WatchEvent":1,"DeleteEvent":43,"IssueCommentEvent":19,"PushEvent":58,"PullRequestReviewEvent":34,"PullRequestEvent":98,"CreateEvent":45},"last_year":{"IssuesEvent":4,"WatchEvent":1,"DeleteEvent":43,"IssueCommentEvent":19,"PushEvent":58,"PullRequestReviewEvent":34,"PullRequestEvent":98,"CreateEvent":45}},"keywords":[],"dependencies":[{"ecosystem":"actions","filepath":".github/workflows/cla.yml","sha":null,"kind":"manifest","created_at":"2023-02-10T00:30:16.575Z","updated_at":"2023-02-10T00:30:16.575Z","repository_link":"https://github.com/conda/conda-content-trust/blob/main/.github/workflows/cla.yml","dependencies":[{"id":7509014504,"package_name":"conda/actions/check-cla","ecosystem":"actions","requirements":"v22.9.0","direct":true,"kind":"composite","optional":false}]},{"ecosystem":"actions","filepath":".github/workflows/issues.yml","sha":null,"kind":"manifest","created_at":"2023-02-10T00:30:16.630Z","updated_at":"2023-02-10T00:30:16.630Z","repository_link":"https://github.com/conda/conda-content-trust/blob/main/.github/workflows/issues.yml","dependencies":[{"id":7509014511,"package_name":"actions-ecosystem/action-remove-labels","ecosystem":"actions","requirements":"v1.3.0","direct":true,"kind":"composite","optional":false},{"id":7509014512,"package_name":"actions-ecosystem/action-add-labels","ecosystem":"actions","requirements":"v1.1.0","direct":true,"kind":"composite","optional":false}]},{"ecosystem":"actions","filepath":".github/workflows/labels.yml","sha":null,"kind":"manifest","created_at":"2023-02-10T00:30:16.672Z","updated_at":"2023-02-10T00:30:16.672Z","repository_link":"https://github.com/conda/conda-content-trust/blob/main/.github/workflows/labels.yml","dependencies":[{"id":7509014516,"package_name":"actions/checkout","ecosystem":"actions","requirements":"v3","direct":true,"kind":"composite","optional":false},{"id":7509014517,"package_name":"andstor/file-existence-action","ecosystem":"actions","requirements":"v1.0.1","direct":true,"kind":"composite","optional":false},{"id":7509014518,"package_name":"EndBug/label-sync","ecosystem":"actions","requirements":"v2.3.0","direct":true,"kind":"composite","optional":false}]},{"ecosystem":"actions","filepath":".github/workflows/lock.yml","sha":null,"kind":"manifest","created_at":"2023-02-10T00:30:16.707Z","updated_at":"2023-02-10T00:30:16.707Z","repository_link":"https://github.com/conda/conda-content-trust/blob/main/.github/workflows/lock.yml","dependencies":[{"id":7509014569,"package_name":"dessant/lock-threads","ecosystem":"actions","requirements":"v2","direct":true,"kind":"composite","optional":false}]},{"ecosystem":"actions","filepath":".github/workflows/project.yml","sha":null,"kind":"manifest","created_at":"2023-02-10T00:30:16.823Z","updated_at":"2023-02-10T00:30:16.823Z","repository_link":"https://github.com/conda/conda-content-trust/blob/main/.github/workflows/project.yml","dependencies":[{"id":7509014582,"package_name":"actions/add-to-project","ecosystem":"actions","requirements":"v0.3.0","direct":true,"kind":"composite","optional":false}]},{"ecosystem":"actions","filepath":".github/workflows/stale.yml","sha":null,"kind":"manifest","created_at":"2023-02-10T00:30:16.904Z","updated_at":"2023-02-10T00:30:16.904Z","repository_link":"https://github.com/conda/conda-content-trust/blob/main/.github/workflows/stale.yml","dependencies":[{"id":7509014589,"package_name":"conda/actions/read-yaml","ecosystem":"actions","requirements":"v22.9.0","direct":true,"kind":"composite","optional":false},{"id":7509014590,"package_name":"actions/stale","ecosystem":"actions","requirements":"v4","direct":true,"kind":"composite","optional":false}]},{"ecosystem":"actions","filepath":".github/workflows/builds-review.yaml","sha":null,"kind":"manifest","created_at":"2023-10-04T06:12:32.635Z","updated_at":"2023-10-04T06:12:32.635Z","repository_link":"https://github.com/conda/conda-content-trust/blob/main/.github/workflows/builds-review.yaml","dependencies":[{"id":14094694802,"package_name":"actions/github-script","ecosystem":"actions","requirements":"v6","direct":true,"kind":"composite","optional":false},{"id":14094694805,"package_name":"actions/checkout","ecosystem":"actions","requirements":"v3","direct":true,"kind":"composite","optional":false},{"id":14094694807,"package_name":"conda/actions/canary-release","ecosystem":"actions","requirements":"v23.7.0","direct":true,"kind":"composite","optional":false}]},{"ecosystem":"actions","filepath":".github/workflows/tests.yml","sha":null,"kind":"manifest","created_at":"2023-10-04T06:12:33.425Z","updated_at":"2023-10-04T06:12:33.425Z","repository_link":"https://github.com/conda/conda-content-trust/blob/main/.github/workflows/tests.yml","dependencies":[{"id":14094696677,"package_name":"actions/checkout","ecosystem":"actions","requirements":"v3","direct":true,"kind":"composite","optional":false},{"id":14094696678,"package_name":"actions/cache","ecosystem":"actions","requirements":"v3","direct":true,"kind":"composite","optional":false},{"id":14094696679,"package_name":"conda-incubator/setup-miniconda","ecosystem":"actions","requirements":"v2","direct":true,"kind":"composite","optional":false},{"id":14094696680,"package_name":"codecov/codecov-action","ecosystem":"actions","requirements":"v3","direct":true,"kind":"composite","optional":false},{"id":14094696681,"package_name":"actions/setup-python","ecosystem":"actions","requirements":"v4","direct":true,"kind":"composite","optional":false},{"id":14094696682,"package_name":"conda/actions/canary-release","ecosystem":"actions","requirements":"v23.7.0","direct":true,"kind":"composite","optional":false}]},{"ecosystem":"pypi","filepath":"pyproject.toml","sha":null,"kind":"manifest","created_at":"2023-10-04T06:12:33.524Z","updated_at":"2023-10-04T06:12:33.524Z","repository_link":"https://github.com/conda/conda-content-trust/blob/main/pyproject.toml","dependencies":[{"id":14094696706,"package_name":"cryptography","ecosystem":"pypi","requirements":"\u003e=41","direct":true,"kind":"runtime","optional":false}]},{"ecosystem":"pypi","filepath":"tests/requirements.txt","sha":null,"kind":"manifest","created_at":"2023-10-04T06:12:33.594Z","updated_at":"2023-10-04T06:12:33.594Z","repository_link":"https://github.com/conda/conda-content-trust/blob/main/tests/requirements.txt","dependencies":[{"id":14094696709,"package_name":"cryptography","ecosystem":"pypi","requirements":"\u003e=41.0.0","direct":true,"kind":"test","optional":false},{"id":14094696710,"package_name":"pytest","ecosystem":"pypi","requirements":"*","direct":true,"kind":"test","optional":false},{"id":14094696711,"package_name":"pytest-cov","ecosystem":"pypi","requirements":"*","direct":true,"kind":"test","optional":false},{"id":14094696712,"package_name":"conda","ecosystem":"pypi","requirements":"\u003e=22.11","direct":true,"kind":"test","optional":false},{"id":14094696713,"package_name":"conda-forge","ecosystem":"pypi","requirements":"*","direct":true,"kind":"test","optional":false},{"id":14094696822,"package_name":"setuptools_scm","ecosystem":"pypi","requirements":"*","direct":true,"kind":"test","optional":false},{"id":14094696823,"package_name":"pytest-benchmark","ecosystem":"pypi","requirements":"*","direct":true,"kind":"test","optional":false}]}],"score":23.89645291969994,"created_at":"2025-09-09T03:10:52.110Z","updated_at":"2025-10-07T08:42:24.002Z","avatar_url":"https://github.com/conda.png","language":"Python","category":null,"sub_category":null,"monthly_downloads":96,"funding_links":[],"readme_doi_urls":[],"works":{},"citation_counts":{},"total_citations":0,"keywords_from_contributors":["conda","package-management","archiving","parallel","pypi","distributed","plots","energy-system-model","packaging","transformers"],"project_url":"https://science.ecosyste.ms/api/v1/projects/190592","html_url":"https://science.ecosyste.ms/projects/190592"}