{"id":39034,"name":"circl","description":"CIRCL: Cloudflare Interoperable Reusable Cryptographic Library","url":"https://github.com/cloudflare/circl","last_synced_at":"2025-09-05T08:01:14.267Z","repository":{"id":34948017,"uuid":"147963112","full_name":"cloudflare/circl","owner":"cloudflare","description":"CIRCL: Cloudflare Interoperable Reusable Cryptographic Library","archived":false,"fork":false,"pushed_at":"2025-08-15T20:14:51.000Z","size":74076,"stargazers_count":1496,"open_issues_count":57,"forks_count":174,"subscribers_count":42,"default_branch":"main","last_synced_at":"2025-08-15T22:37:56.064Z","etag":null,"topics":["circl","cryptography","csidh","dilithium","ed25519","ed448","elliptic-curves","go","golang","hpke","kyber","pki","post-quantum","sidh"],"latest_commit_sha":null,"homepage":"http://blog.cloudflare.com/introducing-circl","language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"other","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/cloudflare.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":"CITATION.cff","codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null}},"created_at":"2018-09-08T19:20:52.000Z","updated_at":"2025-08-15T20:14:56.000Z","dependencies_parsed_at":"2023-10-14T23:12:28.417Z","dependency_job_id":"2f68d1b7-6d19-4256-a6da-b76621a547e1","html_url":"https://github.com/cloudflare/circl","commit_stats":{"total_commits":525,"total_committers":26,"mean_commits":"20.192307692307693","dds":0.56,"last_synced_commit":"795540340d5c79e5768a0135741cd7c3e5f7de93"},"previous_names":[],"tags_count":17,"template":false,"template_full_name":null,"purl":"pkg:github/cloudflare/circl","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/cloudflare","download_url":"https://codeload.github.com/cloudflare/circl/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/sbom","scorecard":{"id":114063,"data":{"date":"2025-08-11","repo":{"name":"github.com/cloudflare/circl","commit":"8bb97daafea779c72d51ec39a604913d3c30bda3"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":7.3,"checks":[{"name":"Maintained","score":10,"reason":"30 commit(s) and 1 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Code-Review","score":10,"reason":"all changesets reviewed","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: jobLevel 'actions' permission set to 'read': .github/workflows/ci-actions.yml:117","Info: jobLevel 'contents' permission set to 'read': .github/workflows/ci-actions.yml:118","Warn: no topLevel permission defined: .github/workflows/ci-actions.yml:1","Warn: no topLevel permission defined: .github/workflows/semgrep.yml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"License","score":9,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Warn: project license file does not contain an FSF or OSI license."],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Fuzzing","score":10,"reason":"project is fuzzed","details":["Info: OSSFuzz integration found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: github.com/cloudflare/.github/SECURITY.md:1","Info: Found linked content: github.com/cloudflare/.github/SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: github.com/cloudflare/.github/SECURITY.md:1","Info: Found text in security policy: github.com/cloudflare/.github/SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-actions.yml:66: update your workflow using https://app.stepsecurity.io/secureworkflow/cloudflare/circl/ci-actions.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-actions.yml:68: update your workflow using https://app.stepsecurity.io/secureworkflow/cloudflare/circl/ci-actions.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-actions.yml:82: update your workflow using https://app.stepsecurity.io/secureworkflow/cloudflare/circl/ci-actions.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-actions.yml:84: update your workflow using https://app.stepsecurity.io/secureworkflow/cloudflare/circl/ci-actions.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci-actions.yml:90: update your workflow using https://app.stepsecurity.io/secureworkflow/cloudflare/circl/ci-actions.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-actions.yml:104: update your workflow using https://app.stepsecurity.io/secureworkflow/cloudflare/circl/ci-actions.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-actions.yml:106: update your workflow using https://app.stepsecurity.io/secureworkflow/cloudflare/circl/ci-actions.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-actions.yml:123: update your workflow using https://app.stepsecurity.io/secureworkflow/cloudflare/circl/ci-actions.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-actions.yml:125: update your workflow using https://app.stepsecurity.io/secureworkflow/cloudflare/circl/ci-actions.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-actions.yml:129: update your workflow using https://app.stepsecurity.io/secureworkflow/cloudflare/circl/ci-actions.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-actions.yml:133: update your workflow using https://app.stepsecurity.io/secureworkflow/cloudflare/circl/ci-actions.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-actions.yml:19: update your workflow using https://app.stepsecurity.io/secureworkflow/cloudflare/circl/ci-actions.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-actions.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/cloudflare/circl/ci-actions.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci-actions.yml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/cloudflare/circl/ci-actions.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-actions.yml:51: update your workflow using https://app.stepsecurity.io/secureworkflow/cloudflare/circl/ci-actions.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-actions.yml:53: update your workflow using https://app.stepsecurity.io/secureworkflow/cloudflare/circl/ci-actions.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/semgrep.yml:23: update your workflow using https://app.stepsecurity.io/secureworkflow/cloudflare/circl/semgrep.yml/main?enable=pin","Warn: goCommand not pinned by hash: .github/workflows/ci-actions.yml:30","Info:   0 out of  15 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of   2 third-party GitHubAction dependencies pinned","Info:   0 out of   1 goCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Branch-Protection","score":5,"reason":"branch protection is not maximal on development and all release branches","details":["Info: 'allow deletion' disabled on branch 'main'","Info: 'force pushes' disabled on branch 'main'","Info: 'branch protection settings apply to administrators' is required to merge on branch 'main'","Warn: 'stale review dismissal' is disabled on branch 'main'","Warn: required approving review count is 1 on branch 'main'","Warn: codeowners review is required - but no codeowners file found in repo","Warn: 'last push approval' is disabled on branch 'main'","Warn: no status checks found to merge onto branch 'main'","Info: PRs are required in order to make changes on branch 'main'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"SAST","score":10,"reason":"SAST tool is run on all commits","details":["Info: SAST configuration detected: CodeQL","Info: all commits (30) are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}},{"name":"Vulnerabilities","score":7,"reason":"3 existing vulnerabilities detected","details":["Warn: Project is vulnerable to: GO-2023-2402 / GHSA-45x7-px36-x8w8","Warn: Project is vulnerable to: GO-2024-3321 / GHSA-v778-237x-gjrc","Warn: Project is vulnerable to: GO-2025-3487 / GHSA-hcg3-q754-cr77"],"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}}]},"last_synced_at":"2025-08-15T22:37:59.062Z","repository_id":34948017,"created_at":"2025-08-15T22:37:59.062Z","updated_at":"2025-08-15T22:37:59.062Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":273728149,"owners_count":25157136,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","status":"online","status_checked_at":"2025-09-05T02:00:09.113Z","response_time":402,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"owner":{"login":"cloudflare","name":"Cloudflare","uuid":"314135","kind":"organization","description":"","email":null,"website":"https://www.cloudflare.com","location":"San Francisco, London, Austin, Lisbon, Singapore","twitter":null,"company":null,"icon_url":"https://avatars.githubusercontent.com/u/314135?v=4","repositories_count":454,"last_synced_at":"2024-04-14T06:37:39.634Z","metadata":{"has_sponsors_listing":false},"html_url":"https://github.com/cloudflare","funding_links":[],"total_stars":143015,"followers":5086,"following":0,"created_at":"2022-11-02T16:32:28.917Z","updated_at":"2024-04-14T06:39:14.488Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/cloudflare","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/cloudflare/repositories"},"packages":[{"id":5351864,"name":"github.com/cloudflare/circl/sign/dilithium/internal/common/asm","ecosystem":"go","description":"AVX2 optimized version of Poly.[Inv]NTT().  See the comments on the generic\nimplementation for details on the maths involved.","homepage":"https://github.com/cloudflare/circl","licenses":"BSD-3-Clause","normalized_licenses":["BSD-3-Clause"],"repository_url":"https://github.com/cloudflare/circl","keywords_array":[],"namespace":"github.com/cloudflare/circl/sign/dilithium/internal/common","versions_count":21,"first_release_published_at":"2022-03-04T23:35:51.000Z","latest_release_published_at":"2023-09-06T23:38:25.000Z","latest_release_number":"v0.0.0-20230906233825-44133f703215","last_synced_at":"2025-08-15T22:52:56.745Z","created_at":"2022-10-18T03:14:08.265Z","updated_at":"2025-08-16T03:16:52.858Z","registry_url":"https://pkg.go.dev/github.com/cloudflare/circl/sign/dilithium/internal/common/asm","install_command":"go get github.com/cloudflare/circl/sign/dilithium/internal/common/asm","documentation_url":"https://pkg.go.dev/github.com/cloudflare/circl/sign/dilithium/internal/common/asm#section-documentation","metadata":{},"repo_metadata":{"id":34948017,"uuid":"147963112","full_name":"cloudflare/circl","owner":"cloudflare","description":"CIRCL: Cloudflare Interoperable Reusable Cryptographic Library","archived":false,"fork":false,"pushed_at":"2025-08-15T20:14:51.000Z","size":74076,"stargazers_count":1496,"open_issues_count":57,"forks_count":174,"subscribers_count":42,"default_branch":"main","last_synced_at":"2025-08-15T22:37:56.064Z","etag":null,"topics":["circl","cryptography","csidh","dilithium","ed25519","ed448","elliptic-curves","go","golang","hpke","kyber","pki","post-quantum","sidh"],"latest_commit_sha":null,"homepage":"http://blog.cloudflare.com/introducing-circl","language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"other","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/cloudflare.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":"CITATION.cff","codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null}},"created_at":"2018-09-08T19:20:52.000Z","updated_at":"2025-08-15T20:14:56.000Z","dependencies_parsed_at":"2023-10-14T23:12:28.417Z","dependency_job_id":"2f68d1b7-6d19-4256-a6da-b76621a547e1","html_url":"https://github.com/cloudflare/circl","commit_stats":{"total_commits":525,"total_committers":26,"mean_commits":"20.192307692307693","dds":0.56,"last_synced_commit":"795540340d5c79e5768a0135741cd7c3e5f7de93"},"previous_names":[],"tags_count":17,"template":false,"template_full_name":null,"purl":"pkg:github/cloudflare/circl","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/cloudflare","download_url":"https://codeload.github.com/cloudflare/circl/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/sbom","scorecard":{"id":114063,"data":{"date":"2025-08-11","repo":{"name":"github.com/cloudflare/circl","commit":"8bb97daafea779c72d51ec39a604913d3c30bda3"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":7.3,"checks":[{"name":"Maintained","score":10,"reason":"30 commit(s) and 1 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Code-Review","score":10,"reason":"all changesets reviewed","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: jobLevel 'actions' permission set to 'read': .github/workflows/ci-actions.yml:117","Info: jobLevel 'contents' permission set to 'read': .github/workflows/ci-actions.yml:118","Warn: no topLevel permission defined: .github/workflows/ci-actions.yml:1","Warn: no topLevel permission defined: .github/workflows/semgrep.yml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"License","score":9,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Warn: project license file does not contain an FSF or OSI license."],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Fuzzing","score":10,"reason":"project is fuzzed","details":["Info: OSSFuzz integration found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: github.com/cloudflare/.github/SECURITY.md:1","Info: Found linked content: github.com/cloudflare/.github/SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: github.com/cloudflare/.github/SECURITY.md:1","Info: Found text in security policy: github.com/cloudflare/.github/SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-actions.yml:66: update your workflow using https://app.stepsecurity.io/secureworkflow/cloudflare/circl/ci-actions.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-actions.yml:68: update your workflow using https://app.stepsecurity.io/secureworkflow/cloudflare/circl/ci-actions.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-actions.yml:82: update your workflow using https://app.stepsecurity.io/secureworkflow/cloudflare/circl/ci-actions.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-actions.yml:84: update your workflow using https://app.stepsecurity.io/secureworkflow/cloudflare/circl/ci-actions.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci-actions.yml:90: update your workflow using https://app.stepsecurity.io/secureworkflow/cloudflare/circl/ci-actions.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-actions.yml:104: update your workflow using https://app.stepsecurity.io/secureworkflow/cloudflare/circl/ci-actions.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-actions.yml:106: update your workflow using https://app.stepsecurity.io/secureworkflow/cloudflare/circl/ci-actions.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-actions.yml:123: update your workflow using https://app.stepsecurity.io/secureworkflow/cloudflare/circl/ci-actions.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-actions.yml:125: update your workflow using https://app.stepsecurity.io/secureworkflow/cloudflare/circl/ci-actions.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-actions.yml:129: update your workflow using https://app.stepsecurity.io/secureworkflow/cloudflare/circl/ci-actions.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-actions.yml:133: update your workflow using https://app.stepsecurity.io/secureworkflow/cloudflare/circl/ci-actions.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-actions.yml:19: update your workflow using https://app.stepsecurity.io/secureworkflow/cloudflare/circl/ci-actions.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-actions.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/cloudflare/circl/ci-actions.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci-actions.yml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/cloudflare/circl/ci-actions.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-actions.yml:51: update your workflow using https://app.stepsecurity.io/secureworkflow/cloudflare/circl/ci-actions.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-actions.yml:53: update your workflow using https://app.stepsecurity.io/secureworkflow/cloudflare/circl/ci-actions.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/semgrep.yml:23: update your workflow using https://app.stepsecurity.io/secureworkflow/cloudflare/circl/semgrep.yml/main?enable=pin","Warn: goCommand not pinned by hash: .github/workflows/ci-actions.yml:30","Info:   0 out of  15 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of   2 third-party GitHubAction dependencies pinned","Info:   0 out of   1 goCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Branch-Protection","score":5,"reason":"branch protection is not maximal on development and all release branches","details":["Info: 'allow deletion' disabled on branch 'main'","Info: 'force pushes' disabled on branch 'main'","Info: 'branch protection settings apply to administrators' is required to merge on branch 'main'","Warn: 'stale review dismissal' is disabled on branch 'main'","Warn: required approving review count is 1 on branch 'main'","Warn: codeowners review is required - but no codeowners file found in repo","Warn: 'last push approval' is disabled on branch 'main'","Warn: no status checks found to merge onto branch 'main'","Info: PRs are required in order to make changes on branch 'main'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"SAST","score":10,"reason":"SAST tool is run on all commits","details":["Info: SAST configuration detected: CodeQL","Info: all commits (30) are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}},{"name":"Vulnerabilities","score":7,"reason":"3 existing vulnerabilities detected","details":["Warn: Project is vulnerable to: GO-2023-2402 / GHSA-45x7-px36-x8w8","Warn: Project is vulnerable to: GO-2024-3321 / GHSA-v778-237x-gjrc","Warn: Project is vulnerable to: GO-2025-3487 / GHSA-hcg3-q754-cr77"],"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}}]},"last_synced_at":"2025-08-15T22:37:59.062Z","repository_id":34948017,"created_at":"2025-08-15T22:37:59.062Z","updated_at":"2025-08-15T22:37:59.062Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":270661505,"owners_count":24624110,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","status":"online","status_checked_at":"2025-08-16T02:00:11.002Z","response_time":91,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"cloudflare","name":"Cloudflare","uuid":"314135","kind":"organization","description":"","email":null,"website":"https://www.cloudflare.com","location":"San Francisco, London, Austin, Lisbon, Singapore","twitter":null,"company":null,"icon_url":"https://avatars.githubusercontent.com/u/314135?v=4","repositories_count":454,"last_synced_at":"2024-04-14T06:37:39.634Z","metadata":{"has_sponsors_listing":false},"html_url":"https://github.com/cloudflare","funding_links":[],"total_stars":143015,"followers":5086,"following":0,"created_at":"2022-11-02T16:32:28.917Z","updated_at":"2024-04-14T06:39:14.488Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/cloudflare","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/cloudflare/repositories"},"tags":[{"name":"v1.6.1","sha":"c6d33e35234ebf5c4319d12ae7d77d7d17053e56","kind":"commit","published_at":"2025-04-09T16:57:45.000Z","download_url":"https://codeload.github.com/cloudflare/circl/tar.gz/v1.6.1","html_url":"https://github.com/cloudflare/circl/releases/tag/v1.6.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/cloudflare/circl@v1.6.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.6.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.6.1/manifests"},{"name":"v1.6.0","sha":"89e658c2ea39d3cfea7b7c7c8b34ebdbd6d21942","kind":"commit","published_at":"2025-02-04T23:02:19.000Z","download_url":"https://codeload.github.com/cloudflare/circl/tar.gz/v1.6.0","html_url":"https://github.com/cloudflare/circl/releases/tag/v1.6.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/cloudflare/circl@v1.6.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.6.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.6.0/manifests"},{"name":"v1.5.0","sha":"1310edfc1c8a602380c10a469095a3c0b2bd7213","kind":"commit","published_at":"2024-10-10T23:00:31.000Z","download_url":"https://codeload.github.com/cloudflare/circl/tar.gz/v1.5.0","html_url":"https://github.com/cloudflare/circl/releases/tag/v1.5.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/cloudflare/circl@v1.5.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.5.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.5.0/manifests"},{"name":"v1.4.0","sha":"c311e4685e7c83e5f127ac24a2195470da2ab490","kind":"commit","published_at":"2024-08-20T15:44:35.000Z","download_url":"https://codeload.github.com/cloudflare/circl/tar.gz/v1.4.0","html_url":"https://github.com/cloudflare/circl/releases/tag/v1.4.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/cloudflare/circl@v1.4.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.4.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.4.0/manifests"},{"name":"v1.3.9","sha":"75b28edc25ec569e6353a2b944b0b83d48a9c2e8","kind":"commit","published_at":"2024-06-11T17:09:45.000Z","download_url":"https://codeload.github.com/cloudflare/circl/tar.gz/v1.3.9","html_url":"https://github.com/cloudflare/circl/releases/tag/v1.3.9","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/cloudflare/circl@v1.3.9","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.3.9","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.3.9/manifests"},{"name":"v1.3.8","sha":"4bb560182ad7861f26589f3a946304bcbf07110a","kind":"commit","published_at":"2024-04-24T19:38:57.000Z","download_url":"https://codeload.github.com/cloudflare/circl/tar.gz/v1.3.8","html_url":"https://github.com/cloudflare/circl/releases/tag/v1.3.8","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/cloudflare/circl@v1.3.8","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.3.8","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.3.8/manifests"},{"name":"v1.3.7","sha":"c48866b3068dfa83721c021dec03c777ba91abab","kind":"commit","published_at":"2024-01-01T21:04:53.000Z","download_url":"https://codeload.github.com/cloudflare/circl/tar.gz/v1.3.7","html_url":"https://github.com/cloudflare/circl/releases/tag/v1.3.7","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/cloudflare/circl@v1.3.7","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.3.7","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.3.7/manifests"},{"name":"v1.3.6","sha":"99f0f715ca5fbec868f5a0db1df2be6dcd28dbaa","kind":"commit","published_at":"2023-10-27T22:48:50.000Z","download_url":"https://codeload.github.com/cloudflare/circl/tar.gz/v1.3.6","html_url":"https://github.com/cloudflare/circl/releases/tag/v1.3.6","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/cloudflare/circl@v1.3.6","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.3.6","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.3.6/manifests"},{"name":"v1.3.5","sha":"13e767c5c3da5ef4e3df65dfaf7589ccabc0d1e1","kind":"tag","published_at":"2023-10-17T15:05:51.000Z","download_url":"https://codeload.github.com/cloudflare/circl/tar.gz/v1.3.5","html_url":"https://github.com/cloudflare/circl/releases/tag/v1.3.5","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/cloudflare/circl@v1.3.5","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.3.5","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.3.5/manifests"},{"name":"v1.3.4","sha":"13e767c5c3da5ef4e3df65dfaf7589ccabc0d1e1","kind":"tag","published_at":"2023-10-17T14:58:57.000Z","download_url":"https://codeload.github.com/cloudflare/circl/tar.gz/v1.3.4","html_url":"https://github.com/cloudflare/circl/releases/tag/v1.3.4","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/cloudflare/circl@v1.3.4","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.3.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.3.4/manifests"},{"name":"v1.3.3","sha":"3bef500f2b925f150815a360b90081021e082939","kind":"commit","published_at":"2023-05-02T10:44:30.000Z","download_url":"https://codeload.github.com/cloudflare/circl/tar.gz/v1.3.3","html_url":"https://github.com/cloudflare/circl/releases/tag/v1.3.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/cloudflare/circl@v1.3.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.3.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.3.3/manifests"},{"name":"v1.3.2","sha":"769d73f14c245a9a54a860640516c1b799a398d0","kind":"commit","published_at":"2023-01-31T00:03:24.000Z","download_url":"https://codeload.github.com/cloudflare/circl/tar.gz/v1.3.2","html_url":"https://github.com/cloudflare/circl/releases/tag/v1.3.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/cloudflare/circl@v1.3.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.3.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.3.2/manifests"},{"name":"v1.3.1","sha":"459b64f53bc65c6ef18923652e59d8d28da75057","kind":"tag","published_at":"2022-12-19T10:53:14.000Z","download_url":"https://codeload.github.com/cloudflare/circl/tar.gz/v1.3.1","html_url":"https://github.com/cloudflare/circl/releases/tag/v1.3.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/cloudflare/circl@v1.3.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.3.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.3.1/manifests"},{"name":"v1.3.0","sha":"c56c51d2526f71be07939782d59d1a98744e062c","kind":"commit","published_at":"2022-11-11T01:07:31.000Z","download_url":"https://codeload.github.com/cloudflare/circl/tar.gz/v1.3.0","html_url":"https://github.com/cloudflare/circl/releases/tag/v1.3.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/cloudflare/circl@v1.3.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.3.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.3.0/manifests"},{"name":"v1.2.0","sha":"f18784e287f0c586dcbb2c5b7045d7f3080d119b","kind":"commit","published_at":"2022-06-15T00:49:08.000Z","download_url":"https://codeload.github.com/cloudflare/circl/tar.gz/v1.2.0","html_url":"https://github.com/cloudflare/circl/releases/tag/v1.2.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/cloudflare/circl@v1.2.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.2.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.2.0/manifests"},{"name":"v1.1.0","sha":"0518755fbebe2aeb3cf6e71ac533b61602ec8e4a","kind":"commit","published_at":"2021-10-13T00:08:50.000Z","download_url":"https://codeload.github.com/cloudflare/circl/tar.gz/v1.1.0","html_url":"https://github.com/cloudflare/circl/releases/tag/v1.1.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/cloudflare/circl@v1.1.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.1.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.1.0/manifests"},{"name":"v1.0.0","sha":"a03c5a147111a46165b047f49053ec510d5582b4","kind":"commit","published_at":"2019-07-10T17:39:44.000Z","download_url":"https://codeload.github.com/cloudflare/circl/tar.gz/v1.0.0","html_url":"https://github.com/cloudflare/circl/releases/tag/v1.0.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/cloudflare/circl@v1.0.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.0.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.0.0/manifests"}]},"repo_metadata_updated_at":"2025-08-16T03:16:52.858Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":9.345852080216646,"dependent_packages_count":6.999148183520997,"stargazers_count":1.361110705840498,"forks_count":1.7230485378272733,"average":4.857289876851354},"purl":"pkg:golang/github.com/cloudflare/circl/sign/dilithium/internal/common/asm","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/go/github.com/cloudflare/circl/sign/dilithium/internal/common/asm","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/go/github.com/cloudflare/circl/sign/dilithium/internal/common/asm","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/go/github.com/cloudflare/circl/sign/dilithium/internal/common/asm/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2025-08-07T03:14:56.558Z","issues_count":63,"pull_requests_count":145,"avg_time_to_close_issue":14312665.555555556,"avg_time_to_close_pull_request":2838644.4112903224,"issues_closed_count":45,"pull_requests_closed_count":124,"pull_request_authors_count":25,"issue_authors_count":42,"avg_comments_per_issue":2.492063492063492,"avg_comments_per_pull_request":1.1724137931034484,"merged_pull_requests_count":116,"bot_issues_count":0,"bot_pull_requests_count":2,"past_year_issues_count":19,"past_year_pull_requests_count":23,"past_year_avg_time_to_close_issue":3478759.5,"past_year_avg_time_to_close_pull_request":330228.8333333333,"past_year_issues_closed_count":12,"past_year_pull_requests_closed_count":18,"past_year_pull_request_authors_count":7,"past_year_issue_authors_count":15,"past_year_avg_comments_per_issue":2.4210526315789473,"past_year_avg_comments_per_pull_request":0.4782608695652174,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":1,"past_year_merged_pull_requests_count":18,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/issues","maintainers":[{"login":"bwesterb","count":29,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/bwesterb"}],"active_maintainers":[{"login":"bwesterb","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/bwesterb"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fcloudflare%2Fcircl%2Fsign%2Fdilithium%2Finternal%2Fcommon%2Fasm/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fcloudflare%2Fcircl%2Fsign%2Fdilithium%2Finternal%2Fcommon%2Fasm/version_numbers","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fcloudflare%2Fcircl%2Fsign%2Fdilithium%2Finternal%2Fcommon%2Fasm/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fcloudflare%2Fcircl%2Fsign%2Fdilithium%2Finternal%2Fcommon%2Fasm/related_packages","maintainers":[],"registry":{"name":"proxy.golang.org","url":"https://proxy.golang.org","ecosystem":"go","default":true,"packages_count":1951676,"maintainers_count":0,"namespaces_count":741275,"keywords_count":109185,"github":"golang","metadata":{"funded_packages_count":49011},"icon_url":"https://github.com/golang.png","created_at":"2022-04-04T15:19:22.939Z","updated_at":"2025-09-05T05:14:06.439Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/namespaces"}},{"id":11151719,"name":"github.com/cloudflare/circl/internal/conv","ecosystem":"go","description":"","homepage":"https://github.com/cloudflare/circl","licenses":"BSD-3-Clause","normalized_licenses":["BSD-3-Clause"],"repository_url":"https://github.com/cloudflare/circl","keywords_array":[],"namespace":"github.com/cloudflare/circl/internal","versions_count":0,"first_release_published_at":null,"latest_release_published_at":"2025-08-27T04:35:09.187Z","latest_release_number":null,"last_synced_at":"2025-08-27T04:35:09.187Z","created_at":"2024-12-09T16:18:34.759Z","updated_at":"2025-08-27T04:35:09.345Z","registry_url":"https://pkg.go.dev/github.com/cloudflare/circl/internal/conv","install_command":"go get github.com/cloudflare/circl/internal/conv","documentation_url":"https://pkg.go.dev/github.com/cloudflare/circl/internal/conv#section-documentation","metadata":{},"repo_metadata":{"id":34948017,"uuid":"147963112","full_name":"cloudflare/circl","owner":"cloudflare","description":"CIRCL: Cloudflare Interoperable Reusable Cryptographic Library","archived":false,"fork":false,"pushed_at":"2025-08-15T20:14:51.000Z","size":74076,"stargazers_count":1496,"open_issues_count":57,"forks_count":174,"subscribers_count":42,"default_branch":"main","last_synced_at":"2025-08-15T22:37:56.064Z","etag":null,"topics":["circl","cryptography","csidh","dilithium","ed25519","ed448","elliptic-curves","go","golang","hpke","kyber","pki","post-quantum","sidh"],"latest_commit_sha":null,"homepage":"http://blog.cloudflare.com/introducing-circl","language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"other","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/cloudflare.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":"CITATION.cff","codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null}},"created_at":"2018-09-08T19:20:52.000Z","updated_at":"2025-08-15T20:14:56.000Z","dependencies_parsed_at":"2023-10-14T23:12:28.417Z","dependency_job_id":"2f68d1b7-6d19-4256-a6da-b76621a547e1","html_url":"https://github.com/cloudflare/circl","commit_stats":{"total_commits":525,"total_committers":26,"mean_commits":"20.192307692307693","dds":0.56,"last_synced_commit":"795540340d5c79e5768a0135741cd7c3e5f7de93"},"previous_names":[],"tags_count":17,"template":false,"template_full_name":null,"purl":"pkg:github/cloudflare/circl","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/cloudflare","download_url":"https://codeload.github.com/cloudflare/circl/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/sbom","scorecard":{"id":114063,"data":{"date":"2025-08-11","repo":{"name":"github.com/cloudflare/circl","commit":"8bb97daafea779c72d51ec39a604913d3c30bda3"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":7.3,"checks":[{"name":"Maintained","score":10,"reason":"30 commit(s) and 1 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Code-Review","score":10,"reason":"all changesets reviewed","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: jobLevel 'actions' permission set to 'read': .github/workflows/ci-actions.yml:117","Info: jobLevel 'contents' permission set to 'read': .github/workflows/ci-actions.yml:118","Warn: no topLevel permission defined: .github/workflows/ci-actions.yml:1","Warn: no topLevel permission defined: .github/workflows/semgrep.yml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"License","score":9,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Warn: project license file does not contain an FSF or OSI license."],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Fuzzing","score":10,"reason":"project is fuzzed","details":["Info: OSSFuzz integration found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: github.com/cloudflare/.github/SECURITY.md:1","Info: Found linked content: github.com/cloudflare/.github/SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: github.com/cloudflare/.github/SECURITY.md:1","Info: Found text in security policy: github.com/cloudflare/.github/SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-actions.yml:66: update your workflow using https://app.stepsecurity.io/secureworkflow/cloudflare/circl/ci-actions.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-actions.yml:68: update your workflow using https://app.stepsecurity.io/secureworkflow/cloudflare/circl/ci-actions.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-actions.yml:82: update your workflow using https://app.stepsecurity.io/secureworkflow/cloudflare/circl/ci-actions.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-actions.yml:84: update your workflow using https://app.stepsecurity.io/secureworkflow/cloudflare/circl/ci-actions.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci-actions.yml:90: update your workflow using https://app.stepsecurity.io/secureworkflow/cloudflare/circl/ci-actions.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-actions.yml:104: update your workflow using https://app.stepsecurity.io/secureworkflow/cloudflare/circl/ci-actions.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-actions.yml:106: update your workflow using https://app.stepsecurity.io/secureworkflow/cloudflare/circl/ci-actions.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-actions.yml:123: update your workflow using https://app.stepsecurity.io/secureworkflow/cloudflare/circl/ci-actions.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-actions.yml:125: update your workflow using https://app.stepsecurity.io/secureworkflow/cloudflare/circl/ci-actions.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-actions.yml:129: update your workflow using https://app.stepsecurity.io/secureworkflow/cloudflare/circl/ci-actions.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-actions.yml:133: update your workflow using https://app.stepsecurity.io/secureworkflow/cloudflare/circl/ci-actions.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-actions.yml:19: update your workflow using https://app.stepsecurity.io/secureworkflow/cloudflare/circl/ci-actions.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-actions.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/cloudflare/circl/ci-actions.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci-actions.yml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/cloudflare/circl/ci-actions.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-actions.yml:51: update your workflow using https://app.stepsecurity.io/secureworkflow/cloudflare/circl/ci-actions.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-actions.yml:53: update your workflow using https://app.stepsecurity.io/secureworkflow/cloudflare/circl/ci-actions.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/semgrep.yml:23: update your workflow using https://app.stepsecurity.io/secureworkflow/cloudflare/circl/semgrep.yml/main?enable=pin","Warn: goCommand not pinned by hash: .github/workflows/ci-actions.yml:30","Info:   0 out of  15 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of   2 third-party GitHubAction dependencies pinned","Info:   0 out of   1 goCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Branch-Protection","score":5,"reason":"branch protection is not maximal on development and all release branches","details":["Info: 'allow deletion' disabled on branch 'main'","Info: 'force pushes' disabled on branch 'main'","Info: 'branch protection settings apply to administrators' is required to merge on branch 'main'","Warn: 'stale review dismissal' is disabled on branch 'main'","Warn: required approving review count is 1 on branch 'main'","Warn: codeowners review is required - but no codeowners file found in repo","Warn: 'last push approval' is disabled on branch 'main'","Warn: no status checks found to merge onto branch 'main'","Info: PRs are required in order to make changes on branch 'main'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"SAST","score":10,"reason":"SAST tool is run on all commits","details":["Info: SAST configuration detected: CodeQL","Info: all commits (30) are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}},{"name":"Vulnerabilities","score":7,"reason":"3 existing vulnerabilities detected","details":["Warn: Project is vulnerable to: GO-2023-2402 / GHSA-45x7-px36-x8w8","Warn: Project is vulnerable to: GO-2024-3321 / GHSA-v778-237x-gjrc","Warn: Project is vulnerable to: GO-2025-3487 / GHSA-hcg3-q754-cr77"],"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}}]},"last_synced_at":"2025-08-15T22:37:59.062Z","repository_id":34948017,"created_at":"2025-08-15T22:37:59.062Z","updated_at":"2025-08-15T22:37:59.062Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":270661505,"owners_count":24624110,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","status":"online","status_checked_at":"2025-08-16T02:00:11.002Z","response_time":91,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"cloudflare","name":"Cloudflare","uuid":"314135","kind":"organization","description":"","email":null,"website":"https://www.cloudflare.com","location":"San Francisco, London, Austin, Lisbon, Singapore","twitter":null,"company":null,"icon_url":"https://avatars.githubusercontent.com/u/314135?v=4","repositories_count":454,"last_synced_at":"2024-04-14T06:37:39.634Z","metadata":{"has_sponsors_listing":false},"html_url":"https://github.com/cloudflare","funding_links":[],"total_stars":143015,"followers":5086,"following":0,"created_at":"2022-11-02T16:32:28.917Z","updated_at":"2024-04-14T06:39:14.488Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/cloudflare","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/cloudflare/repositories"},"tags":[{"name":"v1.6.1","sha":"c6d33e35234ebf5c4319d12ae7d77d7d17053e56","kind":"commit","published_at":"2025-04-09T16:57:45.000Z","download_url":"https://codeload.github.com/cloudflare/circl/tar.gz/v1.6.1","html_url":"https://github.com/cloudflare/circl/releases/tag/v1.6.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/cloudflare/circl@v1.6.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.6.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.6.1/manifests"},{"name":"v1.6.0","sha":"89e658c2ea39d3cfea7b7c7c8b34ebdbd6d21942","kind":"commit","published_at":"2025-02-04T23:02:19.000Z","download_url":"https://codeload.github.com/cloudflare/circl/tar.gz/v1.6.0","html_url":"https://github.com/cloudflare/circl/releases/tag/v1.6.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/cloudflare/circl@v1.6.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.6.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.6.0/manifests"},{"name":"v1.5.0","sha":"1310edfc1c8a602380c10a469095a3c0b2bd7213","kind":"commit","published_at":"2024-10-10T23:00:31.000Z","download_url":"https://codeload.github.com/cloudflare/circl/tar.gz/v1.5.0","html_url":"https://github.com/cloudflare/circl/releases/tag/v1.5.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/cloudflare/circl@v1.5.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.5.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.5.0/manifests"},{"name":"v1.4.0","sha":"c311e4685e7c83e5f127ac24a2195470da2ab490","kind":"commit","published_at":"2024-08-20T15:44:35.000Z","download_url":"https://codeload.github.com/cloudflare/circl/tar.gz/v1.4.0","html_url":"https://github.com/cloudflare/circl/releases/tag/v1.4.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/cloudflare/circl@v1.4.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.4.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.4.0/manifests"},{"name":"v1.3.9","sha":"75b28edc25ec569e6353a2b944b0b83d48a9c2e8","kind":"commit","published_at":"2024-06-11T17:09:45.000Z","download_url":"https://codeload.github.com/cloudflare/circl/tar.gz/v1.3.9","html_url":"https://github.com/cloudflare/circl/releases/tag/v1.3.9","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/cloudflare/circl@v1.3.9","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.3.9","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.3.9/manifests"},{"name":"v1.3.8","sha":"4bb560182ad7861f26589f3a946304bcbf07110a","kind":"commit","published_at":"2024-04-24T19:38:57.000Z","download_url":"https://codeload.github.com/cloudflare/circl/tar.gz/v1.3.8","html_url":"https://github.com/cloudflare/circl/releases/tag/v1.3.8","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/cloudflare/circl@v1.3.8","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.3.8","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.3.8/manifests"},{"name":"v1.3.7","sha":"c48866b3068dfa83721c021dec03c777ba91abab","kind":"commit","published_at":"2024-01-01T21:04:53.000Z","download_url":"https://codeload.github.com/cloudflare/circl/tar.gz/v1.3.7","html_url":"https://github.com/cloudflare/circl/releases/tag/v1.3.7","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/cloudflare/circl@v1.3.7","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.3.7","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.3.7/manifests"},{"name":"v1.3.6","sha":"99f0f715ca5fbec868f5a0db1df2be6dcd28dbaa","kind":"commit","published_at":"2023-10-27T22:48:50.000Z","download_url":"https://codeload.github.com/cloudflare/circl/tar.gz/v1.3.6","html_url":"https://github.com/cloudflare/circl/releases/tag/v1.3.6","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/cloudflare/circl@v1.3.6","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.3.6","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.3.6/manifests"},{"name":"v1.3.5","sha":"13e767c5c3da5ef4e3df65dfaf7589ccabc0d1e1","kind":"tag","published_at":"2023-10-17T15:05:51.000Z","download_url":"https://codeload.github.com/cloudflare/circl/tar.gz/v1.3.5","html_url":"https://github.com/cloudflare/circl/releases/tag/v1.3.5","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/cloudflare/circl@v1.3.5","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.3.5","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.3.5/manifests"},{"name":"v1.3.4","sha":"13e767c5c3da5ef4e3df65dfaf7589ccabc0d1e1","kind":"tag","published_at":"2023-10-17T14:58:57.000Z","download_url":"https://codeload.github.com/cloudflare/circl/tar.gz/v1.3.4","html_url":"https://github.com/cloudflare/circl/releases/tag/v1.3.4","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/cloudflare/circl@v1.3.4","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.3.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.3.4/manifests"},{"name":"v1.3.3","sha":"3bef500f2b925f150815a360b90081021e082939","kind":"commit","published_at":"2023-05-02T10:44:30.000Z","download_url":"https://codeload.github.com/cloudflare/circl/tar.gz/v1.3.3","html_url":"https://github.com/cloudflare/circl/releases/tag/v1.3.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/cloudflare/circl@v1.3.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.3.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.3.3/manifests"},{"name":"v1.3.2","sha":"769d73f14c245a9a54a860640516c1b799a398d0","kind":"commit","published_at":"2023-01-31T00:03:24.000Z","download_url":"https://codeload.github.com/cloudflare/circl/tar.gz/v1.3.2","html_url":"https://github.com/cloudflare/circl/releases/tag/v1.3.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/cloudflare/circl@v1.3.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.3.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.3.2/manifests"},{"name":"v1.3.1","sha":"459b64f53bc65c6ef18923652e59d8d28da75057","kind":"tag","published_at":"2022-12-19T10:53:14.000Z","download_url":"https://codeload.github.com/cloudflare/circl/tar.gz/v1.3.1","html_url":"https://github.com/cloudflare/circl/releases/tag/v1.3.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/cloudflare/circl@v1.3.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.3.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.3.1/manifests"},{"name":"v1.3.0","sha":"c56c51d2526f71be07939782d59d1a98744e062c","kind":"commit","published_at":"2022-11-11T01:07:31.000Z","download_url":"https://codeload.github.com/cloudflare/circl/tar.gz/v1.3.0","html_url":"https://github.com/cloudflare/circl/releases/tag/v1.3.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/cloudflare/circl@v1.3.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.3.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.3.0/manifests"},{"name":"v1.2.0","sha":"f18784e287f0c586dcbb2c5b7045d7f3080d119b","kind":"commit","published_at":"2022-06-15T00:49:08.000Z","download_url":"https://codeload.github.com/cloudflare/circl/tar.gz/v1.2.0","html_url":"https://github.com/cloudflare/circl/releases/tag/v1.2.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/cloudflare/circl@v1.2.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.2.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.2.0/manifests"},{"name":"v1.1.0","sha":"0518755fbebe2aeb3cf6e71ac533b61602ec8e4a","kind":"commit","published_at":"2021-10-13T00:08:50.000Z","download_url":"https://codeload.github.com/cloudflare/circl/tar.gz/v1.1.0","html_url":"https://github.com/cloudflare/circl/releases/tag/v1.1.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/cloudflare/circl@v1.1.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.1.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.1.0/manifests"},{"name":"v1.0.0","sha":"a03c5a147111a46165b047f49053ec510d5582b4","kind":"commit","published_at":"2019-07-10T17:39:44.000Z","download_url":"https://codeload.github.com/cloudflare/circl/tar.gz/v1.0.0","html_url":"https://github.com/cloudflare/circl/releases/tag/v1.0.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/cloudflare/circl@v1.0.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.0.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.0.0/manifests"}]},"repo_metadata_updated_at":"2025-08-16T03:16:52.862Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":6.326193012462012,"dependent_packages_count":5.928731576797648,"stargazers_count":1.9331065958199505,"forks_count":2.272220451443496,"docker_downloads_count":null,"average":4.115062909130777},"purl":"pkg:golang/github.com/cloudflare/circl/internal/conv","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/go/github.com/cloudflare/circl/internal/conv","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/go/github.com/cloudflare/circl/internal/conv","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/go/github.com/cloudflare/circl/internal/conv/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2025-08-07T03:14:56.558Z","issues_count":63,"pull_requests_count":145,"avg_time_to_close_issue":14312665.555555556,"avg_time_to_close_pull_request":2838644.4112903224,"issues_closed_count":45,"pull_requests_closed_count":124,"pull_request_authors_count":25,"issue_authors_count":42,"avg_comments_per_issue":2.492063492063492,"avg_comments_per_pull_request":1.1724137931034484,"merged_pull_requests_count":116,"bot_issues_count":0,"bot_pull_requests_count":2,"past_year_issues_count":19,"past_year_pull_requests_count":23,"past_year_avg_time_to_close_issue":3478759.5,"past_year_avg_time_to_close_pull_request":330228.8333333333,"past_year_issues_closed_count":12,"past_year_pull_requests_closed_count":18,"past_year_pull_request_authors_count":7,"past_year_issue_authors_count":15,"past_year_avg_comments_per_issue":2.4210526315789473,"past_year_avg_comments_per_pull_request":0.4782608695652174,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":1,"past_year_merged_pull_requests_count":18,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/issues","maintainers":[{"login":"bwesterb","count":29,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/bwesterb"}],"active_maintainers":[{"login":"bwesterb","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/bwesterb"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fcloudflare%2Fcircl%2Finternal%2Fconv/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fcloudflare%2Fcircl%2Finternal%2Fconv/version_numbers","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fcloudflare%2Fcircl%2Finternal%2Fconv/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fcloudflare%2Fcircl%2Finternal%2Fconv/related_packages","maintainers":[],"registry":{"name":"proxy.golang.org","url":"https://proxy.golang.org","ecosystem":"go","default":true,"packages_count":1951676,"maintainers_count":0,"namespaces_count":741275,"keywords_count":109185,"github":"golang","metadata":{"funded_packages_count":49011},"icon_url":"https://github.com/golang.png","created_at":"2022-04-04T15:19:22.939Z","updated_at":"2025-09-05T05:14:06.439Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/namespaces"}},{"id":11151725,"name":"github.com/cloudflare/circl/sign/ed25519","ecosystem":"go","description":"Package ed25519 implements Ed25519 signature scheme as described in RFC-8032.\n\nThis package provides optimized implementations of the three signature\nvariants and maintaining closer compatibility with crypto/ed25519.\n\nSpecific functions for sign and verify are defined. A generic signing\nfunction for all schemes is available through the crypto.Signer interface,\nwhich is implemented by the PrivateKey type. A correspond all-in-one\nverification method is provided by the VerifyAny function.\n\nSigning with Ed25519Ph or Ed25519Ctx requires a context string for domain\nseparation. This parameter is passed using a SignerOptions struct defined\nin this package. While Ed25519Ph accepts an empty context, Ed25519Ctx\nenforces non-empty context strings.\n\nThese functions are compatible with the “Ed25519” function defined in\nRFC-8032. However, unlike RFC 8032's formulation, this package's private\nkey representation includes a public key suffix to make multiple signing\noperations with the same key more efficient. This package refers to the\nRFC-8032 private key as the “seed”.\n\nReferences","homepage":"https://github.com/cloudflare/circl","licenses":"BSD-3-Clause","normalized_licenses":["BSD-3-Clause"],"repository_url":"https://github.com/cloudflare/circl","keywords_array":[],"namespace":"github.com/cloudflare/circl/sign","versions_count":0,"first_release_published_at":null,"latest_release_published_at":"2025-08-15T22:52:57.455Z","latest_release_number":null,"last_synced_at":"2025-08-15T22:52:57.455Z","created_at":"2024-12-09T16:18:35.400Z","updated_at":"2025-08-16T03:16:52.852Z","registry_url":"https://pkg.go.dev/github.com/cloudflare/circl/sign/ed25519","install_command":"go get github.com/cloudflare/circl/sign/ed25519","documentation_url":"https://pkg.go.dev/github.com/cloudflare/circl/sign/ed25519#section-documentation","metadata":{},"repo_metadata":{"id":34948017,"uuid":"147963112","full_name":"cloudflare/circl","owner":"cloudflare","description":"CIRCL: Cloudflare Interoperable Reusable Cryptographic Library","archived":false,"fork":false,"pushed_at":"2025-08-15T20:14:51.000Z","size":74076,"stargazers_count":1496,"open_issues_count":57,"forks_count":174,"subscribers_count":42,"default_branch":"main","last_synced_at":"2025-08-15T22:37:56.064Z","etag":null,"topics":["circl","cryptography","csidh","dilithium","ed25519","ed448","elliptic-curves","go","golang","hpke","kyber","pki","post-quantum","sidh"],"latest_commit_sha":null,"homepage":"http://blog.cloudflare.com/introducing-circl","language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"other","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/cloudflare.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":"CITATION.cff","codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null}},"created_at":"2018-09-08T19:20:52.000Z","updated_at":"2025-08-15T20:14:56.000Z","dependencies_parsed_at":"2023-10-14T23:12:28.417Z","dependency_job_id":"2f68d1b7-6d19-4256-a6da-b76621a547e1","html_url":"https://github.com/cloudflare/circl","commit_stats":{"total_commits":525,"total_committers":26,"mean_commits":"20.192307692307693","dds":0.56,"last_synced_commit":"795540340d5c79e5768a0135741cd7c3e5f7de93"},"previous_names":[],"tags_count":17,"template":false,"template_full_name":null,"purl":"pkg:github/cloudflare/circl","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/cloudflare","download_url":"https://codeload.github.com/cloudflare/circl/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/sbom","scorecard":{"id":114063,"data":{"date":"2025-08-11","repo":{"name":"github.com/cloudflare/circl","commit":"8bb97daafea779c72d51ec39a604913d3c30bda3"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":7.3,"checks":[{"name":"Maintained","score":10,"reason":"30 commit(s) and 1 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Code-Review","score":10,"reason":"all changesets reviewed","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: jobLevel 'actions' permission set to 'read': .github/workflows/ci-actions.yml:117","Info: jobLevel 'contents' permission set to 'read': .github/workflows/ci-actions.yml:118","Warn: no topLevel permission defined: .github/workflows/ci-actions.yml:1","Warn: no topLevel permission defined: .github/workflows/semgrep.yml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"License","score":9,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Warn: project license file does not contain an FSF or OSI license."],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Fuzzing","score":10,"reason":"project is fuzzed","details":["Info: OSSFuzz integration found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: github.com/cloudflare/.github/SECURITY.md:1","Info: Found linked content: github.com/cloudflare/.github/SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: github.com/cloudflare/.github/SECURITY.md:1","Info: Found text in security policy: github.com/cloudflare/.github/SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-actions.yml:66: update your workflow using https://app.stepsecurity.io/secureworkflow/cloudflare/circl/ci-actions.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-actions.yml:68: update your workflow using https://app.stepsecurity.io/secureworkflow/cloudflare/circl/ci-actions.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-actions.yml:82: update your workflow using https://app.stepsecurity.io/secureworkflow/cloudflare/circl/ci-actions.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-actions.yml:84: update your workflow using https://app.stepsecurity.io/secureworkflow/cloudflare/circl/ci-actions.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci-actions.yml:90: update your workflow using https://app.stepsecurity.io/secureworkflow/cloudflare/circl/ci-actions.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-actions.yml:104: update your workflow using https://app.stepsecurity.io/secureworkflow/cloudflare/circl/ci-actions.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-actions.yml:106: update your workflow using https://app.stepsecurity.io/secureworkflow/cloudflare/circl/ci-actions.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-actions.yml:123: update your workflow using https://app.stepsecurity.io/secureworkflow/cloudflare/circl/ci-actions.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-actions.yml:125: update your workflow using https://app.stepsecurity.io/secureworkflow/cloudflare/circl/ci-actions.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-actions.yml:129: update your workflow using https://app.stepsecurity.io/secureworkflow/cloudflare/circl/ci-actions.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-actions.yml:133: update your workflow using https://app.stepsecurity.io/secureworkflow/cloudflare/circl/ci-actions.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-actions.yml:19: update your workflow using https://app.stepsecurity.io/secureworkflow/cloudflare/circl/ci-actions.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-actions.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/cloudflare/circl/ci-actions.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci-actions.yml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/cloudflare/circl/ci-actions.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-actions.yml:51: update your workflow using https://app.stepsecurity.io/secureworkflow/cloudflare/circl/ci-actions.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-actions.yml:53: update your workflow using https://app.stepsecurity.io/secureworkflow/cloudflare/circl/ci-actions.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/semgrep.yml:23: update your workflow using https://app.stepsecurity.io/secureworkflow/cloudflare/circl/semgrep.yml/main?enable=pin","Warn: goCommand not pinned by hash: .github/workflows/ci-actions.yml:30","Info:   0 out of  15 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of   2 third-party GitHubAction dependencies pinned","Info:   0 out of   1 goCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Branch-Protection","score":5,"reason":"branch protection is not maximal on development and all release branches","details":["Info: 'allow deletion' disabled on branch 'main'","Info: 'force pushes' disabled on branch 'main'","Info: 'branch protection settings apply to administrators' is required to merge on branch 'main'","Warn: 'stale review dismissal' is disabled on branch 'main'","Warn: required approving review count is 1 on branch 'main'","Warn: codeowners review is required - but no codeowners file found in repo","Warn: 'last push approval' is disabled on branch 'main'","Warn: no status checks found to merge onto branch 'main'","Info: PRs are required in order to make changes on branch 'main'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"SAST","score":10,"reason":"SAST tool is run on all commits","details":["Info: SAST configuration detected: CodeQL","Info: all commits (30) are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}},{"name":"Vulnerabilities","score":7,"reason":"3 existing vulnerabilities detected","details":["Warn: Project is vulnerable to: GO-2023-2402 / GHSA-45x7-px36-x8w8","Warn: Project is vulnerable to: GO-2024-3321 / GHSA-v778-237x-gjrc","Warn: Project is vulnerable to: GO-2025-3487 / GHSA-hcg3-q754-cr77"],"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}}]},"last_synced_at":"2025-08-15T22:37:59.062Z","repository_id":34948017,"created_at":"2025-08-15T22:37:59.062Z","updated_at":"2025-08-15T22:37:59.062Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":270661505,"owners_count":24624110,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","status":"online","status_checked_at":"2025-08-16T02:00:11.002Z","response_time":91,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"cloudflare","name":"Cloudflare","uuid":"314135","kind":"organization","description":"","email":null,"website":"https://www.cloudflare.com","location":"San Francisco, London, Austin, Lisbon, Singapore","twitter":null,"company":null,"icon_url":"https://avatars.githubusercontent.com/u/314135?v=4","repositories_count":454,"last_synced_at":"2024-04-14T06:37:39.634Z","metadata":{"has_sponsors_listing":false},"html_url":"https://github.com/cloudflare","funding_links":[],"total_stars":143015,"followers":5086,"following":0,"created_at":"2022-11-02T16:32:28.917Z","updated_at":"2024-04-14T06:39:14.488Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/cloudflare","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/cloudflare/repositories"},"tags":[{"name":"v1.6.1","sha":"c6d33e35234ebf5c4319d12ae7d77d7d17053e56","kind":"commit","published_at":"2025-04-09T16:57:45.000Z","download_url":"https://codeload.github.com/cloudflare/circl/tar.gz/v1.6.1","html_url":"https://github.com/cloudflare/circl/releases/tag/v1.6.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/cloudflare/circl@v1.6.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.6.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.6.1/manifests"},{"name":"v1.6.0","sha":"89e658c2ea39d3cfea7b7c7c8b34ebdbd6d21942","kind":"commit","published_at":"2025-02-04T23:02:19.000Z","download_url":"https://codeload.github.com/cloudflare/circl/tar.gz/v1.6.0","html_url":"https://github.com/cloudflare/circl/releases/tag/v1.6.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/cloudflare/circl@v1.6.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.6.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.6.0/manifests"},{"name":"v1.5.0","sha":"1310edfc1c8a602380c10a469095a3c0b2bd7213","kind":"commit","published_at":"2024-10-10T23:00:31.000Z","download_url":"https://codeload.github.com/cloudflare/circl/tar.gz/v1.5.0","html_url":"https://github.com/cloudflare/circl/releases/tag/v1.5.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/cloudflare/circl@v1.5.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.5.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.5.0/manifests"},{"name":"v1.4.0","sha":"c311e4685e7c83e5f127ac24a2195470da2ab490","kind":"commit","published_at":"2024-08-20T15:44:35.000Z","download_url":"https://codeload.github.com/cloudflare/circl/tar.gz/v1.4.0","html_url":"https://github.com/cloudflare/circl/releases/tag/v1.4.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/cloudflare/circl@v1.4.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.4.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.4.0/manifests"},{"name":"v1.3.9","sha":"75b28edc25ec569e6353a2b944b0b83d48a9c2e8","kind":"commit","published_at":"2024-06-11T17:09:45.000Z","download_url":"https://codeload.github.com/cloudflare/circl/tar.gz/v1.3.9","html_url":"https://github.com/cloudflare/circl/releases/tag/v1.3.9","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/cloudflare/circl@v1.3.9","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.3.9","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.3.9/manifests"},{"name":"v1.3.8","sha":"4bb560182ad7861f26589f3a946304bcbf07110a","kind":"commit","published_at":"2024-04-24T19:38:57.000Z","download_url":"https://codeload.github.com/cloudflare/circl/tar.gz/v1.3.8","html_url":"https://github.com/cloudflare/circl/releases/tag/v1.3.8","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/cloudflare/circl@v1.3.8","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.3.8","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.3.8/manifests"},{"name":"v1.3.7","sha":"c48866b3068dfa83721c021dec03c777ba91abab","kind":"commit","published_at":"2024-01-01T21:04:53.000Z","download_url":"https://codeload.github.com/cloudflare/circl/tar.gz/v1.3.7","html_url":"https://github.com/cloudflare/circl/releases/tag/v1.3.7","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/cloudflare/circl@v1.3.7","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.3.7","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.3.7/manifests"},{"name":"v1.3.6","sha":"99f0f715ca5fbec868f5a0db1df2be6dcd28dbaa","kind":"commit","published_at":"2023-10-27T22:48:50.000Z","download_url":"https://codeload.github.com/cloudflare/circl/tar.gz/v1.3.6","html_url":"https://github.com/cloudflare/circl/releases/tag/v1.3.6","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/cloudflare/circl@v1.3.6","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.3.6","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.3.6/manifests"},{"name":"v1.3.5","sha":"13e767c5c3da5ef4e3df65dfaf7589ccabc0d1e1","kind":"tag","published_at":"2023-10-17T15:05:51.000Z","download_url":"https://codeload.github.com/cloudflare/circl/tar.gz/v1.3.5","html_url":"https://github.com/cloudflare/circl/releases/tag/v1.3.5","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/cloudflare/circl@v1.3.5","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.3.5","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.3.5/manifests"},{"name":"v1.3.4","sha":"13e767c5c3da5ef4e3df65dfaf7589ccabc0d1e1","kind":"tag","published_at":"2023-10-17T14:58:57.000Z","download_url":"https://codeload.github.com/cloudflare/circl/tar.gz/v1.3.4","html_url":"https://github.com/cloudflare/circl/releases/tag/v1.3.4","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/cloudflare/circl@v1.3.4","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.3.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.3.4/manifests"},{"name":"v1.3.3","sha":"3bef500f2b925f150815a360b90081021e082939","kind":"commit","published_at":"2023-05-02T10:44:30.000Z","download_url":"https://codeload.github.com/cloudflare/circl/tar.gz/v1.3.3","html_url":"https://github.com/cloudflare/circl/releases/tag/v1.3.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/cloudflare/circl@v1.3.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.3.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.3.3/manifests"},{"name":"v1.3.2","sha":"769d73f14c245a9a54a860640516c1b799a398d0","kind":"commit","published_at":"2023-01-31T00:03:24.000Z","download_url":"https://codeload.github.com/cloudflare/circl/tar.gz/v1.3.2","html_url":"https://github.com/cloudflare/circl/releases/tag/v1.3.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/cloudflare/circl@v1.3.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.3.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.3.2/manifests"},{"name":"v1.3.1","sha":"459b64f53bc65c6ef18923652e59d8d28da75057","kind":"tag","published_at":"2022-12-19T10:53:14.000Z","download_url":"https://codeload.github.com/cloudflare/circl/tar.gz/v1.3.1","html_url":"https://github.com/cloudflare/circl/releases/tag/v1.3.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/cloudflare/circl@v1.3.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.3.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.3.1/manifests"},{"name":"v1.3.0","sha":"c56c51d2526f71be07939782d59d1a98744e062c","kind":"commit","published_at":"2022-11-11T01:07:31.000Z","download_url":"https://codeload.github.com/cloudflare/circl/tar.gz/v1.3.0","html_url":"https://github.com/cloudflare/circl/releases/tag/v1.3.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/cloudflare/circl@v1.3.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.3.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.3.0/manifests"},{"name":"v1.2.0","sha":"f18784e287f0c586dcbb2c5b7045d7f3080d119b","kind":"commit","published_at":"2022-06-15T00:49:08.000Z","download_url":"https://codeload.github.com/cloudflare/circl/tar.gz/v1.2.0","html_url":"https://github.com/cloudflare/circl/releases/tag/v1.2.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/cloudflare/circl@v1.2.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.2.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.2.0/manifests"},{"name":"v1.1.0","sha":"0518755fbebe2aeb3cf6e71ac533b61602ec8e4a","kind":"commit","published_at":"2021-10-13T00:08:50.000Z","download_url":"https://codeload.github.com/cloudflare/circl/tar.gz/v1.1.0","html_url":"https://github.com/cloudflare/circl/releases/tag/v1.1.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/cloudflare/circl@v1.1.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.1.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.1.0/manifests"},{"name":"v1.0.0","sha":"a03c5a147111a46165b047f49053ec510d5582b4","kind":"commit","published_at":"2019-07-10T17:39:44.000Z","download_url":"https://codeload.github.com/cloudflare/circl/tar.gz/v1.0.0","html_url":"https://github.com/cloudflare/circl/releases/tag/v1.0.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/cloudflare/circl@v1.0.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.0.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.0.0/manifests"}]},"repo_metadata_updated_at":"2025-08-16T03:16:52.851Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":6.326193012462012,"dependent_packages_count":5.928731576797648,"stargazers_count":1.9331065958199505,"forks_count":2.272220451443496,"docker_downloads_count":null,"average":4.115062909130777},"purl":"pkg:golang/github.com/cloudflare/circl/sign/ed25519","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/go/github.com/cloudflare/circl/sign/ed25519","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/go/github.com/cloudflare/circl/sign/ed25519","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/go/github.com/cloudflare/circl/sign/ed25519/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2025-08-07T03:14:56.558Z","issues_count":63,"pull_requests_count":145,"avg_time_to_close_issue":14312665.555555556,"avg_time_to_close_pull_request":2838644.4112903224,"issues_closed_count":45,"pull_requests_closed_count":124,"pull_request_authors_count":25,"issue_authors_count":42,"avg_comments_per_issue":2.492063492063492,"avg_comments_per_pull_request":1.1724137931034484,"merged_pull_requests_count":116,"bot_issues_count":0,"bot_pull_requests_count":2,"past_year_issues_count":19,"past_year_pull_requests_count":23,"past_year_avg_time_to_close_issue":3478759.5,"past_year_avg_time_to_close_pull_request":330228.8333333333,"past_year_issues_closed_count":12,"past_year_pull_requests_closed_count":18,"past_year_pull_request_authors_count":7,"past_year_issue_authors_count":15,"past_year_avg_comments_per_issue":2.4210526315789473,"past_year_avg_comments_per_pull_request":0.4782608695652174,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":1,"past_year_merged_pull_requests_count":18,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/issues","maintainers":[{"login":"bwesterb","count":29,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/bwesterb"}],"active_maintainers":[{"login":"bwesterb","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/bwesterb"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fcloudflare%2Fcircl%2Fsign%2Fed25519/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fcloudflare%2Fcircl%2Fsign%2Fed25519/version_numbers","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fcloudflare%2Fcircl%2Fsign%2Fed25519/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fcloudflare%2Fcircl%2Fsign%2Fed25519/related_packages","maintainers":[],"registry":{"name":"proxy.golang.org","url":"https://proxy.golang.org","ecosystem":"go","default":true,"packages_count":1951676,"maintainers_count":0,"namespaces_count":741275,"keywords_count":109185,"github":"golang","metadata":{"funded_packages_count":49011},"icon_url":"https://github.com/golang.png","created_at":"2022-04-04T15:19:22.939Z","updated_at":"2025-09-05T05:14:06.439Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/namespaces"}},{"id":11045521,"name":"github.com/cloudflare/circl/sign/internal/dilithium/asm","ecosystem":"go","description":"AVX2 optimized version of Poly.[Inv]NTT().  See the comments on the generic\nimplementation for details on the maths involved.","homepage":"https://github.com/cloudflare/circl","licenses":"BSD-3-Clause","normalized_licenses":["BSD-3-Clause"],"repository_url":"https://github.com/cloudflare/circl","keywords_array":[],"namespace":"github.com/cloudflare/circl/sign/internal/dilithium","versions_count":0,"first_release_published_at":null,"latest_release_published_at":"2025-08-15T22:52:56.515Z","latest_release_number":null,"last_synced_at":"2025-08-15T22:52:56.515Z","created_at":"2024-11-14T06:43:19.596Z","updated_at":"2025-08-16T03:16:52.896Z","registry_url":"https://pkg.go.dev/github.com/cloudflare/circl/sign/internal/dilithium/asm","install_command":"go get github.com/cloudflare/circl/sign/internal/dilithium/asm","documentation_url":"https://pkg.go.dev/github.com/cloudflare/circl/sign/internal/dilithium/asm#section-documentation","metadata":{},"repo_metadata":{"id":34948017,"uuid":"147963112","full_name":"cloudflare/circl","owner":"cloudflare","description":"CIRCL: Cloudflare Interoperable Reusable Cryptographic Library","archived":false,"fork":false,"pushed_at":"2025-08-15T20:14:51.000Z","size":74076,"stargazers_count":1496,"open_issues_count":57,"forks_count":174,"subscribers_count":42,"default_branch":"main","last_synced_at":"2025-08-15T22:37:56.064Z","etag":null,"topics":["circl","cryptography","csidh","dilithium","ed25519","ed448","elliptic-curves","go","golang","hpke","kyber","pki","post-quantum","sidh"],"latest_commit_sha":null,"homepage":"http://blog.cloudflare.com/introducing-circl","language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"other","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/cloudflare.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":"CITATION.cff","codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null}},"created_at":"2018-09-08T19:20:52.000Z","updated_at":"2025-08-15T20:14:56.000Z","dependencies_parsed_at":"2023-10-14T23:12:28.417Z","dependency_job_id":"2f68d1b7-6d19-4256-a6da-b76621a547e1","html_url":"https://github.com/cloudflare/circl","commit_stats":{"total_commits":525,"total_committers":26,"mean_commits":"20.192307692307693","dds":0.56,"last_synced_commit":"795540340d5c79e5768a0135741cd7c3e5f7de93"},"previous_names":[],"tags_count":17,"template":false,"template_full_name":null,"purl":"pkg:github/cloudflare/circl","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/cloudflare","download_url":"https://codeload.github.com/cloudflare/circl/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/sbom","scorecard":{"id":114063,"data":{"date":"2025-08-11","repo":{"name":"github.com/cloudflare/circl","commit":"8bb97daafea779c72d51ec39a604913d3c30bda3"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":7.3,"checks":[{"name":"Maintained","score":10,"reason":"30 commit(s) and 1 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Code-Review","score":10,"reason":"all changesets reviewed","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: jobLevel 'actions' permission set to 'read': .github/workflows/ci-actions.yml:117","Info: jobLevel 'contents' permission set to 'read': .github/workflows/ci-actions.yml:118","Warn: no topLevel permission defined: .github/workflows/ci-actions.yml:1","Warn: no topLevel permission defined: .github/workflows/semgrep.yml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"License","score":9,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Warn: project license file does not contain an FSF or OSI license."],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Fuzzing","score":10,"reason":"project is fuzzed","details":["Info: OSSFuzz integration found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: github.com/cloudflare/.github/SECURITY.md:1","Info: Found linked content: github.com/cloudflare/.github/SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: github.com/cloudflare/.github/SECURITY.md:1","Info: Found text in security policy: github.com/cloudflare/.github/SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-actions.yml:66: update your workflow using https://app.stepsecurity.io/secureworkflow/cloudflare/circl/ci-actions.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-actions.yml:68: update your workflow using https://app.stepsecurity.io/secureworkflow/cloudflare/circl/ci-actions.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-actions.yml:82: update your workflow using https://app.stepsecurity.io/secureworkflow/cloudflare/circl/ci-actions.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-actions.yml:84: update your workflow using https://app.stepsecurity.io/secureworkflow/cloudflare/circl/ci-actions.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci-actions.yml:90: update your workflow using https://app.stepsecurity.io/secureworkflow/cloudflare/circl/ci-actions.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-actions.yml:104: update your workflow using https://app.stepsecurity.io/secureworkflow/cloudflare/circl/ci-actions.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-actions.yml:106: update your workflow using https://app.stepsecurity.io/secureworkflow/cloudflare/circl/ci-actions.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-actions.yml:123: update your workflow using https://app.stepsecurity.io/secureworkflow/cloudflare/circl/ci-actions.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-actions.yml:125: update your workflow using https://app.stepsecurity.io/secureworkflow/cloudflare/circl/ci-actions.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-actions.yml:129: update your workflow using https://app.stepsecurity.io/secureworkflow/cloudflare/circl/ci-actions.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-actions.yml:133: update your workflow using https://app.stepsecurity.io/secureworkflow/cloudflare/circl/ci-actions.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-actions.yml:19: update your workflow using https://app.stepsecurity.io/secureworkflow/cloudflare/circl/ci-actions.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-actions.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/cloudflare/circl/ci-actions.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci-actions.yml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/cloudflare/circl/ci-actions.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-actions.yml:51: update your workflow using https://app.stepsecurity.io/secureworkflow/cloudflare/circl/ci-actions.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-actions.yml:53: update your workflow using https://app.stepsecurity.io/secureworkflow/cloudflare/circl/ci-actions.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/semgrep.yml:23: update your workflow using https://app.stepsecurity.io/secureworkflow/cloudflare/circl/semgrep.yml/main?enable=pin","Warn: goCommand not pinned by hash: .github/workflows/ci-actions.yml:30","Info:   0 out of  15 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of   2 third-party GitHubAction dependencies pinned","Info:   0 out of   1 goCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Branch-Protection","score":5,"reason":"branch protection is not maximal on development and all release branches","details":["Info: 'allow deletion' disabled on branch 'main'","Info: 'force pushes' disabled on branch 'main'","Info: 'branch protection settings apply to administrators' is required to merge on branch 'main'","Warn: 'stale review dismissal' is disabled on branch 'main'","Warn: required approving review count is 1 on branch 'main'","Warn: codeowners review is required - but no codeowners file found in repo","Warn: 'last push approval' is disabled on branch 'main'","Warn: no status checks found to merge onto branch 'main'","Info: PRs are required in order to make changes on branch 'main'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"SAST","score":10,"reason":"SAST tool is run on all commits","details":["Info: SAST configuration detected: CodeQL","Info: all commits (30) are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}},{"name":"Vulnerabilities","score":7,"reason":"3 existing vulnerabilities detected","details":["Warn: Project is vulnerable to: GO-2023-2402 / GHSA-45x7-px36-x8w8","Warn: Project is vulnerable to: GO-2024-3321 / GHSA-v778-237x-gjrc","Warn: Project is vulnerable to: GO-2025-3487 / GHSA-hcg3-q754-cr77"],"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}}]},"last_synced_at":"2025-08-15T22:37:59.062Z","repository_id":34948017,"created_at":"2025-08-15T22:37:59.062Z","updated_at":"2025-08-15T22:37:59.062Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":270661505,"owners_count":24624110,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","status":"online","status_checked_at":"2025-08-16T02:00:11.002Z","response_time":91,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"cloudflare","name":"Cloudflare","uuid":"314135","kind":"organization","description":"","email":null,"website":"https://www.cloudflare.com","location":"San Francisco, London, Austin, Lisbon, Singapore","twitter":null,"company":null,"icon_url":"https://avatars.githubusercontent.com/u/314135?v=4","repositories_count":454,"last_synced_at":"2024-04-14T06:37:39.634Z","metadata":{"has_sponsors_listing":false},"html_url":"https://github.com/cloudflare","funding_links":[],"total_stars":143015,"followers":5086,"following":0,"created_at":"2022-11-02T16:32:28.917Z","updated_at":"2024-04-14T06:39:14.488Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/cloudflare","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/cloudflare/repositories"},"tags":[{"name":"v1.6.1","sha":"c6d33e35234ebf5c4319d12ae7d77d7d17053e56","kind":"commit","published_at":"2025-04-09T16:57:45.000Z","download_url":"https://codeload.github.com/cloudflare/circl/tar.gz/v1.6.1","html_url":"https://github.com/cloudflare/circl/releases/tag/v1.6.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/cloudflare/circl@v1.6.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.6.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.6.1/manifests"},{"name":"v1.6.0","sha":"89e658c2ea39d3cfea7b7c7c8b34ebdbd6d21942","kind":"commit","published_at":"2025-02-04T23:02:19.000Z","download_url":"https://codeload.github.com/cloudflare/circl/tar.gz/v1.6.0","html_url":"https://github.com/cloudflare/circl/releases/tag/v1.6.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/cloudflare/circl@v1.6.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.6.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.6.0/manifests"},{"name":"v1.5.0","sha":"1310edfc1c8a602380c10a469095a3c0b2bd7213","kind":"commit","published_at":"2024-10-10T23:00:31.000Z","download_url":"https://codeload.github.com/cloudflare/circl/tar.gz/v1.5.0","html_url":"https://github.com/cloudflare/circl/releases/tag/v1.5.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/cloudflare/circl@v1.5.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.5.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.5.0/manifests"},{"name":"v1.4.0","sha":"c311e4685e7c83e5f127ac24a2195470da2ab490","kind":"commit","published_at":"2024-08-20T15:44:35.000Z","download_url":"https://codeload.github.com/cloudflare/circl/tar.gz/v1.4.0","html_url":"https://github.com/cloudflare/circl/releases/tag/v1.4.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/cloudflare/circl@v1.4.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.4.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.4.0/manifests"},{"name":"v1.3.9","sha":"75b28edc25ec569e6353a2b944b0b83d48a9c2e8","kind":"commit","published_at":"2024-06-11T17:09:45.000Z","download_url":"https://codeload.github.com/cloudflare/circl/tar.gz/v1.3.9","html_url":"https://github.com/cloudflare/circl/releases/tag/v1.3.9","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/cloudflare/circl@v1.3.9","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.3.9","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.3.9/manifests"},{"name":"v1.3.8","sha":"4bb560182ad7861f26589f3a946304bcbf07110a","kind":"commit","published_at":"2024-04-24T19:38:57.000Z","download_url":"https://codeload.github.com/cloudflare/circl/tar.gz/v1.3.8","html_url":"https://github.com/cloudflare/circl/releases/tag/v1.3.8","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/cloudflare/circl@v1.3.8","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.3.8","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.3.8/manifests"},{"name":"v1.3.7","sha":"c48866b3068dfa83721c021dec03c777ba91abab","kind":"commit","published_at":"2024-01-01T21:04:53.000Z","download_url":"https://codeload.github.com/cloudflare/circl/tar.gz/v1.3.7","html_url":"https://github.com/cloudflare/circl/releases/tag/v1.3.7","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/cloudflare/circl@v1.3.7","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.3.7","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.3.7/manifests"},{"name":"v1.3.6","sha":"99f0f715ca5fbec868f5a0db1df2be6dcd28dbaa","kind":"commit","published_at":"2023-10-27T22:48:50.000Z","download_url":"https://codeload.github.com/cloudflare/circl/tar.gz/v1.3.6","html_url":"https://github.com/cloudflare/circl/releases/tag/v1.3.6","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/cloudflare/circl@v1.3.6","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.3.6","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.3.6/manifests"},{"name":"v1.3.5","sha":"13e767c5c3da5ef4e3df65dfaf7589ccabc0d1e1","kind":"tag","published_at":"2023-10-17T15:05:51.000Z","download_url":"https://codeload.github.com/cloudflare/circl/tar.gz/v1.3.5","html_url":"https://github.com/cloudflare/circl/releases/tag/v1.3.5","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/cloudflare/circl@v1.3.5","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.3.5","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.3.5/manifests"},{"name":"v1.3.4","sha":"13e767c5c3da5ef4e3df65dfaf7589ccabc0d1e1","kind":"tag","published_at":"2023-10-17T14:58:57.000Z","download_url":"https://codeload.github.com/cloudflare/circl/tar.gz/v1.3.4","html_url":"https://github.com/cloudflare/circl/releases/tag/v1.3.4","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/cloudflare/circl@v1.3.4","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.3.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.3.4/manifests"},{"name":"v1.3.3","sha":"3bef500f2b925f150815a360b90081021e082939","kind":"commit","published_at":"2023-05-02T10:44:30.000Z","download_url":"https://codeload.github.com/cloudflare/circl/tar.gz/v1.3.3","html_url":"https://github.com/cloudflare/circl/releases/tag/v1.3.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/cloudflare/circl@v1.3.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.3.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.3.3/manifests"},{"name":"v1.3.2","sha":"769d73f14c245a9a54a860640516c1b799a398d0","kind":"commit","published_at":"2023-01-31T00:03:24.000Z","download_url":"https://codeload.github.com/cloudflare/circl/tar.gz/v1.3.2","html_url":"https://github.com/cloudflare/circl/releases/tag/v1.3.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/cloudflare/circl@v1.3.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.3.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.3.2/manifests"},{"name":"v1.3.1","sha":"459b64f53bc65c6ef18923652e59d8d28da75057","kind":"tag","published_at":"2022-12-19T10:53:14.000Z","download_url":"https://codeload.github.com/cloudflare/circl/tar.gz/v1.3.1","html_url":"https://github.com/cloudflare/circl/releases/tag/v1.3.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/cloudflare/circl@v1.3.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.3.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.3.1/manifests"},{"name":"v1.3.0","sha":"c56c51d2526f71be07939782d59d1a98744e062c","kind":"commit","published_at":"2022-11-11T01:07:31.000Z","download_url":"https://codeload.github.com/cloudflare/circl/tar.gz/v1.3.0","html_url":"https://github.com/cloudflare/circl/releases/tag/v1.3.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/cloudflare/circl@v1.3.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.3.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.3.0/manifests"},{"name":"v1.2.0","sha":"f18784e287f0c586dcbb2c5b7045d7f3080d119b","kind":"commit","published_at":"2022-06-15T00:49:08.000Z","download_url":"https://codeload.github.com/cloudflare/circl/tar.gz/v1.2.0","html_url":"https://github.com/cloudflare/circl/releases/tag/v1.2.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/cloudflare/circl@v1.2.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.2.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.2.0/manifests"},{"name":"v1.1.0","sha":"0518755fbebe2aeb3cf6e71ac533b61602ec8e4a","kind":"commit","published_at":"2021-10-13T00:08:50.000Z","download_url":"https://codeload.github.com/cloudflare/circl/tar.gz/v1.1.0","html_url":"https://github.com/cloudflare/circl/releases/tag/v1.1.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/cloudflare/circl@v1.1.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.1.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.1.0/manifests"},{"name":"v1.0.0","sha":"a03c5a147111a46165b047f49053ec510d5582b4","kind":"commit","published_at":"2019-07-10T17:39:44.000Z","download_url":"https://codeload.github.com/cloudflare/circl/tar.gz/v1.0.0","html_url":"https://github.com/cloudflare/circl/releases/tag/v1.0.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/cloudflare/circl@v1.0.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.0.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.0.0/manifests"}]},"repo_metadata_updated_at":"2025-08-16T03:16:52.896Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":6.452833854980964,"dependent_packages_count":6.048350804704306,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":6.250592329842635},"purl":"pkg:golang/github.com/cloudflare/circl/sign/internal/dilithium/asm","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/go/github.com/cloudflare/circl/sign/internal/dilithium/asm","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/go/github.com/cloudflare/circl/sign/internal/dilithium/asm","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/go/github.com/cloudflare/circl/sign/internal/dilithium/asm/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2025-08-07T03:14:56.558Z","issues_count":63,"pull_requests_count":145,"avg_time_to_close_issue":14312665.555555556,"avg_time_to_close_pull_request":2838644.4112903224,"issues_closed_count":45,"pull_requests_closed_count":124,"pull_request_authors_count":25,"issue_authors_count":42,"avg_comments_per_issue":2.492063492063492,"avg_comments_per_pull_request":1.1724137931034484,"merged_pull_requests_count":116,"bot_issues_count":0,"bot_pull_requests_count":2,"past_year_issues_count":19,"past_year_pull_requests_count":23,"past_year_avg_time_to_close_issue":3478759.5,"past_year_avg_time_to_close_pull_request":330228.8333333333,"past_year_issues_closed_count":12,"past_year_pull_requests_closed_count":18,"past_year_pull_request_authors_count":7,"past_year_issue_authors_count":15,"past_year_avg_comments_per_issue":2.4210526315789473,"past_year_avg_comments_per_pull_request":0.4782608695652174,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":1,"past_year_merged_pull_requests_count":18,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/issues","maintainers":[{"login":"bwesterb","count":29,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/bwesterb"}],"active_maintainers":[{"login":"bwesterb","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/bwesterb"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fcloudflare%2Fcircl%2Fsign%2Finternal%2Fdilithium%2Fasm/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fcloudflare%2Fcircl%2Fsign%2Finternal%2Fdilithium%2Fasm/version_numbers","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fcloudflare%2Fcircl%2Fsign%2Finternal%2Fdilithium%2Fasm/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fcloudflare%2Fcircl%2Fsign%2Finternal%2Fdilithium%2Fasm/related_packages","maintainers":[],"registry":{"name":"proxy.golang.org","url":"https://proxy.golang.org","ecosystem":"go","default":true,"packages_count":1951676,"maintainers_count":0,"namespaces_count":741275,"keywords_count":109185,"github":"golang","metadata":{"funded_packages_count":49011},"icon_url":"https://github.com/golang.png","created_at":"2022-04-04T15:19:22.939Z","updated_at":"2025-09-05T05:14:06.439Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/namespaces"}},{"id":11151723,"name":"github.com/cloudflare/circl/math/fp448","ecosystem":"go","description":"Package fp448 provides prime field arithmetic over GF(2^448-2^224-1).","homepage":"https://github.com/cloudflare/circl","licenses":"BSD-3-Clause","normalized_licenses":["BSD-3-Clause"],"repository_url":"https://github.com/cloudflare/circl","keywords_array":[],"namespace":"github.com/cloudflare/circl/math","versions_count":0,"first_release_published_at":null,"latest_release_published_at":"2025-08-15T22:52:56.821Z","latest_release_number":null,"last_synced_at":"2025-08-15T22:52:56.820Z","created_at":"2024-12-09T16:18:34.987Z","updated_at":"2025-08-16T03:16:52.829Z","registry_url":"https://pkg.go.dev/github.com/cloudflare/circl/math/fp448","install_command":"go get github.com/cloudflare/circl/math/fp448","documentation_url":"https://pkg.go.dev/github.com/cloudflare/circl/math/fp448#section-documentation","metadata":{},"repo_metadata":{"id":34948017,"uuid":"147963112","full_name":"cloudflare/circl","owner":"cloudflare","description":"CIRCL: Cloudflare Interoperable Reusable Cryptographic Library","archived":false,"fork":false,"pushed_at":"2025-08-15T20:14:51.000Z","size":74076,"stargazers_count":1496,"open_issues_count":57,"forks_count":174,"subscribers_count":42,"default_branch":"main","last_synced_at":"2025-08-15T22:37:56.064Z","etag":null,"topics":["circl","cryptography","csidh","dilithium","ed25519","ed448","elliptic-curves","go","golang","hpke","kyber","pki","post-quantum","sidh"],"latest_commit_sha":null,"homepage":"http://blog.cloudflare.com/introducing-circl","language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"other","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/cloudflare.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":"CITATION.cff","codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null}},"created_at":"2018-09-08T19:20:52.000Z","updated_at":"2025-08-15T20:14:56.000Z","dependencies_parsed_at":"2023-10-14T23:12:28.417Z","dependency_job_id":"2f68d1b7-6d19-4256-a6da-b76621a547e1","html_url":"https://github.com/cloudflare/circl","commit_stats":{"total_commits":525,"total_committers":26,"mean_commits":"20.192307692307693","dds":0.56,"last_synced_commit":"795540340d5c79e5768a0135741cd7c3e5f7de93"},"previous_names":[],"tags_count":17,"template":false,"template_full_name":null,"purl":"pkg:github/cloudflare/circl","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/cloudflare","download_url":"https://codeload.github.com/cloudflare/circl/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/sbom","scorecard":{"id":114063,"data":{"date":"2025-08-11","repo":{"name":"github.com/cloudflare/circl","commit":"8bb97daafea779c72d51ec39a604913d3c30bda3"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":7.3,"checks":[{"name":"Maintained","score":10,"reason":"30 commit(s) and 1 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Code-Review","score":10,"reason":"all changesets reviewed","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: jobLevel 'actions' permission set to 'read': .github/workflows/ci-actions.yml:117","Info: jobLevel 'contents' permission set to 'read': .github/workflows/ci-actions.yml:118","Warn: no topLevel permission defined: .github/workflows/ci-actions.yml:1","Warn: no topLevel permission defined: .github/workflows/semgrep.yml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"License","score":9,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Warn: project license file does not contain an FSF or OSI license."],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Fuzzing","score":10,"reason":"project is fuzzed","details":["Info: OSSFuzz integration found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: github.com/cloudflare/.github/SECURITY.md:1","Info: Found linked content: github.com/cloudflare/.github/SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: github.com/cloudflare/.github/SECURITY.md:1","Info: Found text in security policy: github.com/cloudflare/.github/SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-actions.yml:66: update your workflow using https://app.stepsecurity.io/secureworkflow/cloudflare/circl/ci-actions.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-actions.yml:68: update your workflow using https://app.stepsecurity.io/secureworkflow/cloudflare/circl/ci-actions.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-actions.yml:82: update your workflow using https://app.stepsecurity.io/secureworkflow/cloudflare/circl/ci-actions.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-actions.yml:84: update your workflow using https://app.stepsecurity.io/secureworkflow/cloudflare/circl/ci-actions.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci-actions.yml:90: update your workflow using https://app.stepsecurity.io/secureworkflow/cloudflare/circl/ci-actions.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-actions.yml:104: update your workflow using https://app.stepsecurity.io/secureworkflow/cloudflare/circl/ci-actions.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-actions.yml:106: update your workflow using https://app.stepsecurity.io/secureworkflow/cloudflare/circl/ci-actions.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-actions.yml:123: update your workflow using https://app.stepsecurity.io/secureworkflow/cloudflare/circl/ci-actions.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-actions.yml:125: update your workflow using https://app.stepsecurity.io/secureworkflow/cloudflare/circl/ci-actions.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-actions.yml:129: update your workflow using https://app.stepsecurity.io/secureworkflow/cloudflare/circl/ci-actions.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-actions.yml:133: update your workflow using https://app.stepsecurity.io/secureworkflow/cloudflare/circl/ci-actions.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-actions.yml:19: update your workflow using https://app.stepsecurity.io/secureworkflow/cloudflare/circl/ci-actions.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-actions.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/cloudflare/circl/ci-actions.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci-actions.yml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/cloudflare/circl/ci-actions.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-actions.yml:51: update your workflow using https://app.stepsecurity.io/secureworkflow/cloudflare/circl/ci-actions.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-actions.yml:53: update your workflow using https://app.stepsecurity.io/secureworkflow/cloudflare/circl/ci-actions.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/semgrep.yml:23: update your workflow using https://app.stepsecurity.io/secureworkflow/cloudflare/circl/semgrep.yml/main?enable=pin","Warn: goCommand not pinned by hash: .github/workflows/ci-actions.yml:30","Info:   0 out of  15 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of   2 third-party GitHubAction dependencies pinned","Info:   0 out of   1 goCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Branch-Protection","score":5,"reason":"branch protection is not maximal on development and all release branches","details":["Info: 'allow deletion' disabled on branch 'main'","Info: 'force pushes' disabled on branch 'main'","Info: 'branch protection settings apply to administrators' is required to merge on branch 'main'","Warn: 'stale review dismissal' is disabled on branch 'main'","Warn: required approving review count is 1 on branch 'main'","Warn: codeowners review is required - but no codeowners file found in repo","Warn: 'last push approval' is disabled on branch 'main'","Warn: no status checks found to merge onto branch 'main'","Info: PRs are required in order to make changes on branch 'main'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"SAST","score":10,"reason":"SAST tool is run on all commits","details":["Info: SAST configuration detected: CodeQL","Info: all commits (30) are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}},{"name":"Vulnerabilities","score":7,"reason":"3 existing vulnerabilities detected","details":["Warn: Project is vulnerable to: GO-2023-2402 / GHSA-45x7-px36-x8w8","Warn: Project is vulnerable to: GO-2024-3321 / GHSA-v778-237x-gjrc","Warn: Project is vulnerable to: GO-2025-3487 / GHSA-hcg3-q754-cr77"],"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}}]},"last_synced_at":"2025-08-15T22:37:59.062Z","repository_id":34948017,"created_at":"2025-08-15T22:37:59.062Z","updated_at":"2025-08-15T22:37:59.062Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":270661505,"owners_count":24624110,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","status":"online","status_checked_at":"2025-08-16T02:00:11.002Z","response_time":91,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"cloudflare","name":"Cloudflare","uuid":"314135","kind":"organization","description":"","email":null,"website":"https://www.cloudflare.com","location":"San Francisco, London, Austin, Lisbon, Singapore","twitter":null,"company":null,"icon_url":"https://avatars.githubusercontent.com/u/314135?v=4","repositories_count":454,"last_synced_at":"2024-04-14T06:37:39.634Z","metadata":{"has_sponsors_listing":false},"html_url":"https://github.com/cloudflare","funding_links":[],"total_stars":143015,"followers":5086,"following":0,"created_at":"2022-11-02T16:32:28.917Z","updated_at":"2024-04-14T06:39:14.488Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/cloudflare","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/cloudflare/repositories"},"tags":[{"name":"v1.6.1","sha":"c6d33e35234ebf5c4319d12ae7d77d7d17053e56","kind":"commit","published_at":"2025-04-09T16:57:45.000Z","download_url":"https://codeload.github.com/cloudflare/circl/tar.gz/v1.6.1","html_url":"https://github.com/cloudflare/circl/releases/tag/v1.6.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/cloudflare/circl@v1.6.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.6.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.6.1/manifests"},{"name":"v1.6.0","sha":"89e658c2ea39d3cfea7b7c7c8b34ebdbd6d21942","kind":"commit","published_at":"2025-02-04T23:02:19.000Z","download_url":"https://codeload.github.com/cloudflare/circl/tar.gz/v1.6.0","html_url":"https://github.com/cloudflare/circl/releases/tag/v1.6.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/cloudflare/circl@v1.6.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.6.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.6.0/manifests"},{"name":"v1.5.0","sha":"1310edfc1c8a602380c10a469095a3c0b2bd7213","kind":"commit","published_at":"2024-10-10T23:00:31.000Z","download_url":"https://codeload.github.com/cloudflare/circl/tar.gz/v1.5.0","html_url":"https://github.com/cloudflare/circl/releases/tag/v1.5.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/cloudflare/circl@v1.5.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.5.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.5.0/manifests"},{"name":"v1.4.0","sha":"c311e4685e7c83e5f127ac24a2195470da2ab490","kind":"commit","published_at":"2024-08-20T15:44:35.000Z","download_url":"https://codeload.github.com/cloudflare/circl/tar.gz/v1.4.0","html_url":"https://github.com/cloudflare/circl/releases/tag/v1.4.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/cloudflare/circl@v1.4.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.4.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.4.0/manifests"},{"name":"v1.3.9","sha":"75b28edc25ec569e6353a2b944b0b83d48a9c2e8","kind":"commit","published_at":"2024-06-11T17:09:45.000Z","download_url":"https://codeload.github.com/cloudflare/circl/tar.gz/v1.3.9","html_url":"https://github.com/cloudflare/circl/releases/tag/v1.3.9","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/cloudflare/circl@v1.3.9","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.3.9","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.3.9/manifests"},{"name":"v1.3.8","sha":"4bb560182ad7861f26589f3a946304bcbf07110a","kind":"commit","published_at":"2024-04-24T19:38:57.000Z","download_url":"https://codeload.github.com/cloudflare/circl/tar.gz/v1.3.8","html_url":"https://github.com/cloudflare/circl/releases/tag/v1.3.8","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/cloudflare/circl@v1.3.8","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.3.8","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.3.8/manifests"},{"name":"v1.3.7","sha":"c48866b3068dfa83721c021dec03c777ba91abab","kind":"commit","published_at":"2024-01-01T21:04:53.000Z","download_url":"https://codeload.github.com/cloudflare/circl/tar.gz/v1.3.7","html_url":"https://github.com/cloudflare/circl/releases/tag/v1.3.7","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/cloudflare/circl@v1.3.7","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.3.7","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.3.7/manifests"},{"name":"v1.3.6","sha":"99f0f715ca5fbec868f5a0db1df2be6dcd28dbaa","kind":"commit","published_at":"2023-10-27T22:48:50.000Z","download_url":"https://codeload.github.com/cloudflare/circl/tar.gz/v1.3.6","html_url":"https://github.com/cloudflare/circl/releases/tag/v1.3.6","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/cloudflare/circl@v1.3.6","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.3.6","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.3.6/manifests"},{"name":"v1.3.5","sha":"13e767c5c3da5ef4e3df65dfaf7589ccabc0d1e1","kind":"tag","published_at":"2023-10-17T15:05:51.000Z","download_url":"https://codeload.github.com/cloudflare/circl/tar.gz/v1.3.5","html_url":"https://github.com/cloudflare/circl/releases/tag/v1.3.5","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/cloudflare/circl@v1.3.5","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.3.5","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.3.5/manifests"},{"name":"v1.3.4","sha":"13e767c5c3da5ef4e3df65dfaf7589ccabc0d1e1","kind":"tag","published_at":"2023-10-17T14:58:57.000Z","download_url":"https://codeload.github.com/cloudflare/circl/tar.gz/v1.3.4","html_url":"https://github.com/cloudflare/circl/releases/tag/v1.3.4","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/cloudflare/circl@v1.3.4","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.3.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.3.4/manifests"},{"name":"v1.3.3","sha":"3bef500f2b925f150815a360b90081021e082939","kind":"commit","published_at":"2023-05-02T10:44:30.000Z","download_url":"https://codeload.github.com/cloudflare/circl/tar.gz/v1.3.3","html_url":"https://github.com/cloudflare/circl/releases/tag/v1.3.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/cloudflare/circl@v1.3.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.3.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.3.3/manifests"},{"name":"v1.3.2","sha":"769d73f14c245a9a54a860640516c1b799a398d0","kind":"commit","published_at":"2023-01-31T00:03:24.000Z","download_url":"https://codeload.github.com/cloudflare/circl/tar.gz/v1.3.2","html_url":"https://github.com/cloudflare/circl/releases/tag/v1.3.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/cloudflare/circl@v1.3.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.3.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.3.2/manifests"},{"name":"v1.3.1","sha":"459b64f53bc65c6ef18923652e59d8d28da75057","kind":"tag","published_at":"2022-12-19T10:53:14.000Z","download_url":"https://codeload.github.com/cloudflare/circl/tar.gz/v1.3.1","html_url":"https://github.com/cloudflare/circl/releases/tag/v1.3.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/cloudflare/circl@v1.3.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.3.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.3.1/manifests"},{"name":"v1.3.0","sha":"c56c51d2526f71be07939782d59d1a98744e062c","kind":"commit","published_at":"2022-11-11T01:07:31.000Z","download_url":"https://codeload.github.com/cloudflare/circl/tar.gz/v1.3.0","html_url":"https://github.com/cloudflare/circl/releases/tag/v1.3.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/cloudflare/circl@v1.3.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.3.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.3.0/manifests"},{"name":"v1.2.0","sha":"f18784e287f0c586dcbb2c5b7045d7f3080d119b","kind":"commit","published_at":"2022-06-15T00:49:08.000Z","download_url":"https://codeload.github.com/cloudflare/circl/tar.gz/v1.2.0","html_url":"https://github.com/cloudflare/circl/releases/tag/v1.2.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/cloudflare/circl@v1.2.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.2.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.2.0/manifests"},{"name":"v1.1.0","sha":"0518755fbebe2aeb3cf6e71ac533b61602ec8e4a","kind":"commit","published_at":"2021-10-13T00:08:50.000Z","download_url":"https://codeload.github.com/cloudflare/circl/tar.gz/v1.1.0","html_url":"https://github.com/cloudflare/circl/releases/tag/v1.1.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/cloudflare/circl@v1.1.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.1.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.1.0/manifests"},{"name":"v1.0.0","sha":"a03c5a147111a46165b047f49053ec510d5582b4","kind":"commit","published_at":"2019-07-10T17:39:44.000Z","download_url":"https://codeload.github.com/cloudflare/circl/tar.gz/v1.0.0","html_url":"https://github.com/cloudflare/circl/releases/tag/v1.0.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/cloudflare/circl@v1.0.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.0.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.0.0/manifests"}]},"repo_metadata_updated_at":"2025-08-16T03:16:52.829Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":6.326193012462012,"dependent_packages_count":5.928731576797648,"stargazers_count":1.9331065958199505,"forks_count":2.272220451443496,"docker_downloads_count":null,"average":4.115062909130777},"purl":"pkg:golang/github.com/cloudflare/circl/math/fp448","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/go/github.com/cloudflare/circl/math/fp448","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/go/github.com/cloudflare/circl/math/fp448","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/go/github.com/cloudflare/circl/math/fp448/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2025-08-07T03:14:56.558Z","issues_count":63,"pull_requests_count":145,"avg_time_to_close_issue":14312665.555555556,"avg_time_to_close_pull_request":2838644.4112903224,"issues_closed_count":45,"pull_requests_closed_count":124,"pull_request_authors_count":25,"issue_authors_count":42,"avg_comments_per_issue":2.492063492063492,"avg_comments_per_pull_request":1.1724137931034484,"merged_pull_requests_count":116,"bot_issues_count":0,"bot_pull_requests_count":2,"past_year_issues_count":19,"past_year_pull_requests_count":23,"past_year_avg_time_to_close_issue":3478759.5,"past_year_avg_time_to_close_pull_request":330228.8333333333,"past_year_issues_closed_count":12,"past_year_pull_requests_closed_count":18,"past_year_pull_request_authors_count":7,"past_year_issue_authors_count":15,"past_year_avg_comments_per_issue":2.4210526315789473,"past_year_avg_comments_per_pull_request":0.4782608695652174,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":1,"past_year_merged_pull_requests_count":18,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/issues","maintainers":[{"login":"bwesterb","count":29,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/bwesterb"}],"active_maintainers":[{"login":"bwesterb","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/bwesterb"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fcloudflare%2Fcircl%2Fmath%2Ffp448/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fcloudflare%2Fcircl%2Fmath%2Ffp448/version_numbers","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fcloudflare%2Fcircl%2Fmath%2Ffp448/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fcloudflare%2Fcircl%2Fmath%2Ffp448/related_packages","maintainers":[],"registry":{"name":"proxy.golang.org","url":"https://proxy.golang.org","ecosystem":"go","default":true,"packages_count":1951676,"maintainers_count":0,"namespaces_count":741275,"keywords_count":109185,"github":"golang","metadata":{"funded_packages_count":49011},"icon_url":"https://github.com/golang.png","created_at":"2022-04-04T15:19:22.939Z","updated_at":"2025-09-05T05:14:06.439Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/namespaces"}},{"id":11151720,"name":"github.com/cloudflare/circl/math/mlsbset","ecosystem":"go","description":"Package mlsbset provides a constant-time exponentiation method with precomputation.\n\nReferences: \"Efficient and secure algorithms for GLV-based scalar\nmultiplication and their implementation on GLV–GLS curves\" by (Faz-Hernandez et al.)","homepage":"https://github.com/cloudflare/circl","licenses":"BSD-3-Clause","normalized_licenses":["BSD-3-Clause"],"repository_url":"https://github.com/cloudflare/circl","keywords_array":[],"namespace":"github.com/cloudflare/circl/math","versions_count":0,"first_release_published_at":null,"latest_release_published_at":"2025-07-25T18:51:17.112Z","latest_release_number":null,"last_synced_at":"2025-07-25T18:51:17.112Z","created_at":"2024-12-09T16:18:34.852Z","updated_at":"2025-08-16T03:16:52.869Z","registry_url":"https://pkg.go.dev/github.com/cloudflare/circl/math/mlsbset","install_command":"go get github.com/cloudflare/circl/math/mlsbset","documentation_url":"https://pkg.go.dev/github.com/cloudflare/circl/math/mlsbset#section-documentation","metadata":{},"repo_metadata":{"id":34948017,"uuid":"147963112","full_name":"cloudflare/circl","owner":"cloudflare","description":"CIRCL: Cloudflare Interoperable Reusable Cryptographic Library","archived":false,"fork":false,"pushed_at":"2025-08-15T20:14:51.000Z","size":74076,"stargazers_count":1496,"open_issues_count":57,"forks_count":174,"subscribers_count":42,"default_branch":"main","last_synced_at":"2025-08-15T22:37:56.064Z","etag":null,"topics":["circl","cryptography","csidh","dilithium","ed25519","ed448","elliptic-curves","go","golang","hpke","kyber","pki","post-quantum","sidh"],"latest_commit_sha":null,"homepage":"http://blog.cloudflare.com/introducing-circl","language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"other","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/cloudflare.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":"CITATION.cff","codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null}},"created_at":"2018-09-08T19:20:52.000Z","updated_at":"2025-08-15T20:14:56.000Z","dependencies_parsed_at":"2023-10-14T23:12:28.417Z","dependency_job_id":"2f68d1b7-6d19-4256-a6da-b76621a547e1","html_url":"https://github.com/cloudflare/circl","commit_stats":{"total_commits":525,"total_committers":26,"mean_commits":"20.192307692307693","dds":0.56,"last_synced_commit":"795540340d5c79e5768a0135741cd7c3e5f7de93"},"previous_names":[],"tags_count":17,"template":false,"template_full_name":null,"purl":"pkg:github/cloudflare/circl","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/cloudflare","download_url":"https://codeload.github.com/cloudflare/circl/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/sbom","scorecard":{"id":114063,"data":{"date":"2025-08-11","repo":{"name":"github.com/cloudflare/circl","commit":"8bb97daafea779c72d51ec39a604913d3c30bda3"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":7.3,"checks":[{"name":"Maintained","score":10,"reason":"30 commit(s) and 1 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Code-Review","score":10,"reason":"all changesets reviewed","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: jobLevel 'actions' permission set to 'read': .github/workflows/ci-actions.yml:117","Info: jobLevel 'contents' permission set to 'read': .github/workflows/ci-actions.yml:118","Warn: no topLevel permission defined: .github/workflows/ci-actions.yml:1","Warn: no topLevel permission defined: .github/workflows/semgrep.yml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"License","score":9,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Warn: project license file does not contain an FSF or OSI license."],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Fuzzing","score":10,"reason":"project is fuzzed","details":["Info: OSSFuzz integration found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: github.com/cloudflare/.github/SECURITY.md:1","Info: Found linked content: github.com/cloudflare/.github/SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: github.com/cloudflare/.github/SECURITY.md:1","Info: Found text in security policy: github.com/cloudflare/.github/SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-actions.yml:66: update your workflow using https://app.stepsecurity.io/secureworkflow/cloudflare/circl/ci-actions.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-actions.yml:68: update your workflow using https://app.stepsecurity.io/secureworkflow/cloudflare/circl/ci-actions.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-actions.yml:82: update your workflow using https://app.stepsecurity.io/secureworkflow/cloudflare/circl/ci-actions.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-actions.yml:84: update your workflow using https://app.stepsecurity.io/secureworkflow/cloudflare/circl/ci-actions.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci-actions.yml:90: update your workflow using https://app.stepsecurity.io/secureworkflow/cloudflare/circl/ci-actions.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-actions.yml:104: update your workflow using https://app.stepsecurity.io/secureworkflow/cloudflare/circl/ci-actions.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-actions.yml:106: update your workflow using https://app.stepsecurity.io/secureworkflow/cloudflare/circl/ci-actions.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-actions.yml:123: update your workflow using https://app.stepsecurity.io/secureworkflow/cloudflare/circl/ci-actions.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-actions.yml:125: update your workflow using https://app.stepsecurity.io/secureworkflow/cloudflare/circl/ci-actions.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-actions.yml:129: update your workflow using https://app.stepsecurity.io/secureworkflow/cloudflare/circl/ci-actions.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-actions.yml:133: update your workflow using https://app.stepsecurity.io/secureworkflow/cloudflare/circl/ci-actions.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-actions.yml:19: update your workflow using https://app.stepsecurity.io/secureworkflow/cloudflare/circl/ci-actions.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-actions.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/cloudflare/circl/ci-actions.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci-actions.yml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/cloudflare/circl/ci-actions.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-actions.yml:51: update your workflow using https://app.stepsecurity.io/secureworkflow/cloudflare/circl/ci-actions.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-actions.yml:53: update your workflow using https://app.stepsecurity.io/secureworkflow/cloudflare/circl/ci-actions.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/semgrep.yml:23: update your workflow using https://app.stepsecurity.io/secureworkflow/cloudflare/circl/semgrep.yml/main?enable=pin","Warn: goCommand not pinned by hash: .github/workflows/ci-actions.yml:30","Info:   0 out of  15 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of   2 third-party GitHubAction dependencies pinned","Info:   0 out of   1 goCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Branch-Protection","score":5,"reason":"branch protection is not maximal on development and all release branches","details":["Info: 'allow deletion' disabled on branch 'main'","Info: 'force pushes' disabled on branch 'main'","Info: 'branch protection settings apply to administrators' is required to merge on branch 'main'","Warn: 'stale review dismissal' is disabled on branch 'main'","Warn: required approving review count is 1 on branch 'main'","Warn: codeowners review is required - but no codeowners file found in repo","Warn: 'last push approval' is disabled on branch 'main'","Warn: no status checks found to merge onto branch 'main'","Info: PRs are required in order to make changes on branch 'main'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"SAST","score":10,"reason":"SAST tool is run on all commits","details":["Info: SAST configuration detected: CodeQL","Info: all commits (30) are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}},{"name":"Vulnerabilities","score":7,"reason":"3 existing vulnerabilities detected","details":["Warn: Project is vulnerable to: GO-2023-2402 / GHSA-45x7-px36-x8w8","Warn: Project is vulnerable to: GO-2024-3321 / GHSA-v778-237x-gjrc","Warn: Project is vulnerable to: GO-2025-3487 / GHSA-hcg3-q754-cr77"],"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}}]},"last_synced_at":"2025-08-15T22:37:59.062Z","repository_id":34948017,"created_at":"2025-08-15T22:37:59.062Z","updated_at":"2025-08-15T22:37:59.062Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":270661505,"owners_count":24624110,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","status":"online","status_checked_at":"2025-08-16T02:00:11.002Z","response_time":91,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"cloudflare","name":"Cloudflare","uuid":"314135","kind":"organization","description":"","email":null,"website":"https://www.cloudflare.com","location":"San Francisco, London, Austin, Lisbon, Singapore","twitter":null,"company":null,"icon_url":"https://avatars.githubusercontent.com/u/314135?v=4","repositories_count":454,"last_synced_at":"2024-04-14T06:37:39.634Z","metadata":{"has_sponsors_listing":false},"html_url":"https://github.com/cloudflare","funding_links":[],"total_stars":143015,"followers":5086,"following":0,"created_at":"2022-11-02T16:32:28.917Z","updated_at":"2024-04-14T06:39:14.488Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/cloudflare","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/cloudflare/repositories"},"tags":[{"name":"v1.6.1","sha":"c6d33e35234ebf5c4319d12ae7d77d7d17053e56","kind":"commit","published_at":"2025-04-09T16:57:45.000Z","download_url":"https://codeload.github.com/cloudflare/circl/tar.gz/v1.6.1","html_url":"https://github.com/cloudflare/circl/releases/tag/v1.6.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/cloudflare/circl@v1.6.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.6.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.6.1/manifests"},{"name":"v1.6.0","sha":"89e658c2ea39d3cfea7b7c7c8b34ebdbd6d21942","kind":"commit","published_at":"2025-02-04T23:02:19.000Z","download_url":"https://codeload.github.com/cloudflare/circl/tar.gz/v1.6.0","html_url":"https://github.com/cloudflare/circl/releases/tag/v1.6.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/cloudflare/circl@v1.6.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.6.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.6.0/manifests"},{"name":"v1.5.0","sha":"1310edfc1c8a602380c10a469095a3c0b2bd7213","kind":"commit","published_at":"2024-10-10T23:00:31.000Z","download_url":"https://codeload.github.com/cloudflare/circl/tar.gz/v1.5.0","html_url":"https://github.com/cloudflare/circl/releases/tag/v1.5.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/cloudflare/circl@v1.5.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.5.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.5.0/manifests"},{"name":"v1.4.0","sha":"c311e4685e7c83e5f127ac24a2195470da2ab490","kind":"commit","published_at":"2024-08-20T15:44:35.000Z","download_url":"https://codeload.github.com/cloudflare/circl/tar.gz/v1.4.0","html_url":"https://github.com/cloudflare/circl/releases/tag/v1.4.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/cloudflare/circl@v1.4.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.4.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.4.0/manifests"},{"name":"v1.3.9","sha":"75b28edc25ec569e6353a2b944b0b83d48a9c2e8","kind":"commit","published_at":"2024-06-11T17:09:45.000Z","download_url":"https://codeload.github.com/cloudflare/circl/tar.gz/v1.3.9","html_url":"https://github.com/cloudflare/circl/releases/tag/v1.3.9","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/cloudflare/circl@v1.3.9","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.3.9","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.3.9/manifests"},{"name":"v1.3.8","sha":"4bb560182ad7861f26589f3a946304bcbf07110a","kind":"commit","published_at":"2024-04-24T19:38:57.000Z","download_url":"https://codeload.github.com/cloudflare/circl/tar.gz/v1.3.8","html_url":"https://github.com/cloudflare/circl/releases/tag/v1.3.8","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/cloudflare/circl@v1.3.8","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.3.8","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.3.8/manifests"},{"name":"v1.3.7","sha":"c48866b3068dfa83721c021dec03c777ba91abab","kind":"commit","published_at":"2024-01-01T21:04:53.000Z","download_url":"https://codeload.github.com/cloudflare/circl/tar.gz/v1.3.7","html_url":"https://github.com/cloudflare/circl/releases/tag/v1.3.7","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/cloudflare/circl@v1.3.7","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.3.7","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.3.7/manifests"},{"name":"v1.3.6","sha":"99f0f715ca5fbec868f5a0db1df2be6dcd28dbaa","kind":"commit","published_at":"2023-10-27T22:48:50.000Z","download_url":"https://codeload.github.com/cloudflare/circl/tar.gz/v1.3.6","html_url":"https://github.com/cloudflare/circl/releases/tag/v1.3.6","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/cloudflare/circl@v1.3.6","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.3.6","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.3.6/manifests"},{"name":"v1.3.5","sha":"13e767c5c3da5ef4e3df65dfaf7589ccabc0d1e1","kind":"tag","published_at":"2023-10-17T15:05:51.000Z","download_url":"https://codeload.github.com/cloudflare/circl/tar.gz/v1.3.5","html_url":"https://github.com/cloudflare/circl/releases/tag/v1.3.5","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/cloudflare/circl@v1.3.5","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.3.5","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.3.5/manifests"},{"name":"v1.3.4","sha":"13e767c5c3da5ef4e3df65dfaf7589ccabc0d1e1","kind":"tag","published_at":"2023-10-17T14:58:57.000Z","download_url":"https://codeload.github.com/cloudflare/circl/tar.gz/v1.3.4","html_url":"https://github.com/cloudflare/circl/releases/tag/v1.3.4","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/cloudflare/circl@v1.3.4","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.3.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.3.4/manifests"},{"name":"v1.3.3","sha":"3bef500f2b925f150815a360b90081021e082939","kind":"commit","published_at":"2023-05-02T10:44:30.000Z","download_url":"https://codeload.github.com/cloudflare/circl/tar.gz/v1.3.3","html_url":"https://github.com/cloudflare/circl/releases/tag/v1.3.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/cloudflare/circl@v1.3.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.3.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.3.3/manifests"},{"name":"v1.3.2","sha":"769d73f14c245a9a54a860640516c1b799a398d0","kind":"commit","published_at":"2023-01-31T00:03:24.000Z","download_url":"https://codeload.github.com/cloudflare/circl/tar.gz/v1.3.2","html_url":"https://github.com/cloudflare/circl/releases/tag/v1.3.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/cloudflare/circl@v1.3.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.3.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.3.2/manifests"},{"name":"v1.3.1","sha":"459b64f53bc65c6ef18923652e59d8d28da75057","kind":"tag","published_at":"2022-12-19T10:53:14.000Z","download_url":"https://codeload.github.com/cloudflare/circl/tar.gz/v1.3.1","html_url":"https://github.com/cloudflare/circl/releases/tag/v1.3.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/cloudflare/circl@v1.3.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.3.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.3.1/manifests"},{"name":"v1.3.0","sha":"c56c51d2526f71be07939782d59d1a98744e062c","kind":"commit","published_at":"2022-11-11T01:07:31.000Z","download_url":"https://codeload.github.com/cloudflare/circl/tar.gz/v1.3.0","html_url":"https://github.com/cloudflare/circl/releases/tag/v1.3.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/cloudflare/circl@v1.3.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.3.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.3.0/manifests"},{"name":"v1.2.0","sha":"f18784e287f0c586dcbb2c5b7045d7f3080d119b","kind":"commit","published_at":"2022-06-15T00:49:08.000Z","download_url":"https://codeload.github.com/cloudflare/circl/tar.gz/v1.2.0","html_url":"https://github.com/cloudflare/circl/releases/tag/v1.2.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/cloudflare/circl@v1.2.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.2.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.2.0/manifests"},{"name":"v1.1.0","sha":"0518755fbebe2aeb3cf6e71ac533b61602ec8e4a","kind":"commit","published_at":"2021-10-13T00:08:50.000Z","download_url":"https://codeload.github.com/cloudflare/circl/tar.gz/v1.1.0","html_url":"https://github.com/cloudflare/circl/releases/tag/v1.1.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/cloudflare/circl@v1.1.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.1.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.1.0/manifests"},{"name":"v1.0.0","sha":"a03c5a147111a46165b047f49053ec510d5582b4","kind":"commit","published_at":"2019-07-10T17:39:44.000Z","download_url":"https://codeload.github.com/cloudflare/circl/tar.gz/v1.0.0","html_url":"https://github.com/cloudflare/circl/releases/tag/v1.0.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/cloudflare/circl@v1.0.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.0.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.0.0/manifests"}]},"repo_metadata_updated_at":"2025-08-16T03:16:52.868Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":6.326193012462012,"dependent_packages_count":5.928731576797648,"stargazers_count":1.9331065958199505,"forks_count":2.272220451443496,"docker_downloads_count":null,"average":4.115062909130777},"purl":"pkg:golang/github.com/cloudflare/circl/math/mlsbset","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/go/github.com/cloudflare/circl/math/mlsbset","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/go/github.com/cloudflare/circl/math/mlsbset","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/go/github.com/cloudflare/circl/math/mlsbset/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2025-08-07T03:14:56.558Z","issues_count":63,"pull_requests_count":145,"avg_time_to_close_issue":14312665.555555556,"avg_time_to_close_pull_request":2838644.4112903224,"issues_closed_count":45,"pull_requests_closed_count":124,"pull_request_authors_count":25,"issue_authors_count":42,"avg_comments_per_issue":2.492063492063492,"avg_comments_per_pull_request":1.1724137931034484,"merged_pull_requests_count":116,"bot_issues_count":0,"bot_pull_requests_count":2,"past_year_issues_count":19,"past_year_pull_requests_count":23,"past_year_avg_time_to_close_issue":3478759.5,"past_year_avg_time_to_close_pull_request":330228.8333333333,"past_year_issues_closed_count":12,"past_year_pull_requests_closed_count":18,"past_year_pull_request_authors_count":7,"past_year_issue_authors_count":15,"past_year_avg_comments_per_issue":2.4210526315789473,"past_year_avg_comments_per_pull_request":0.4782608695652174,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":1,"past_year_merged_pull_requests_count":18,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/issues","maintainers":[{"login":"bwesterb","count":29,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/bwesterb"}],"active_maintainers":[{"login":"bwesterb","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/bwesterb"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fcloudflare%2Fcircl%2Fmath%2Fmlsbset/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fcloudflare%2Fcircl%2Fmath%2Fmlsbset/version_numbers","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fcloudflare%2Fcircl%2Fmath%2Fmlsbset/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fcloudflare%2Fcircl%2Fmath%2Fmlsbset/related_packages","maintainers":[],"registry":{"name":"proxy.golang.org","url":"https://proxy.golang.org","ecosystem":"go","default":true,"packages_count":1951676,"maintainers_count":0,"namespaces_count":741275,"keywords_count":109185,"github":"golang","metadata":{"funded_packages_count":49011},"icon_url":"https://github.com/golang.png","created_at":"2022-04-04T15:19:22.939Z","updated_at":"2025-09-05T05:14:06.439Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/namespaces"}},{"id":11151721,"name":"github.com/cloudflare/circl/math","ecosystem":"go","description":"Package math provides some utility functions for big integers.","homepage":"https://github.com/cloudflare/circl","licenses":"BSD-3-Clause","normalized_licenses":["BSD-3-Clause"],"repository_url":"https://github.com/cloudflare/circl","keywords_array":[],"namespace":"github.com/cloudflare/circl","versions_count":0,"first_release_published_at":null,"latest_release_published_at":"2025-07-25T18:51:16.662Z","latest_release_number":null,"last_synced_at":"2025-07-25T18:51:16.661Z","created_at":"2024-12-09T16:18:34.857Z","updated_at":"2025-08-16T03:16:52.867Z","registry_url":"https://pkg.go.dev/github.com/cloudflare/circl/math","install_command":"go get github.com/cloudflare/circl/math","documentation_url":"https://pkg.go.dev/github.com/cloudflare/circl/math#section-documentation","metadata":{},"repo_metadata":{"id":34948017,"uuid":"147963112","full_name":"cloudflare/circl","owner":"cloudflare","description":"CIRCL: Cloudflare Interoperable Reusable Cryptographic Library","archived":false,"fork":false,"pushed_at":"2025-08-15T20:14:51.000Z","size":74076,"stargazers_count":1496,"open_issues_count":57,"forks_count":174,"subscribers_count":42,"default_branch":"main","last_synced_at":"2025-08-15T22:37:56.064Z","etag":null,"topics":["circl","cryptography","csidh","dilithium","ed25519","ed448","elliptic-curves","go","golang","hpke","kyber","pki","post-quantum","sidh"],"latest_commit_sha":null,"homepage":"http://blog.cloudflare.com/introducing-circl","language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"other","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/cloudflare.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":"CITATION.cff","codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null}},"created_at":"2018-09-08T19:20:52.000Z","updated_at":"2025-08-15T20:14:56.000Z","dependencies_parsed_at":"2023-10-14T23:12:28.417Z","dependency_job_id":"2f68d1b7-6d19-4256-a6da-b76621a547e1","html_url":"https://github.com/cloudflare/circl","commit_stats":{"total_commits":525,"total_committers":26,"mean_commits":"20.192307692307693","dds":0.56,"last_synced_commit":"795540340d5c79e5768a0135741cd7c3e5f7de93"},"previous_names":[],"tags_count":17,"template":false,"template_full_name":null,"purl":"pkg:github/cloudflare/circl","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/cloudflare","download_url":"https://codeload.github.com/cloudflare/circl/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/sbom","scorecard":{"id":114063,"data":{"date":"2025-08-11","repo":{"name":"github.com/cloudflare/circl","commit":"8bb97daafea779c72d51ec39a604913d3c30bda3"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":7.3,"checks":[{"name":"Maintained","score":10,"reason":"30 commit(s) and 1 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Code-Review","score":10,"reason":"all changesets reviewed","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: jobLevel 'actions' permission set to 'read': .github/workflows/ci-actions.yml:117","Info: jobLevel 'contents' permission set to 'read': .github/workflows/ci-actions.yml:118","Warn: no topLevel permission defined: .github/workflows/ci-actions.yml:1","Warn: no topLevel permission defined: .github/workflows/semgrep.yml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"License","score":9,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Warn: project license file does not contain an FSF or OSI license."],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Fuzzing","score":10,"reason":"project is fuzzed","details":["Info: OSSFuzz integration found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: github.com/cloudflare/.github/SECURITY.md:1","Info: Found linked content: github.com/cloudflare/.github/SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: github.com/cloudflare/.github/SECURITY.md:1","Info: Found text in security policy: github.com/cloudflare/.github/SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-actions.yml:66: update your workflow using https://app.stepsecurity.io/secureworkflow/cloudflare/circl/ci-actions.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-actions.yml:68: update your workflow using https://app.stepsecurity.io/secureworkflow/cloudflare/circl/ci-actions.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-actions.yml:82: update your workflow using https://app.stepsecurity.io/secureworkflow/cloudflare/circl/ci-actions.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-actions.yml:84: update your workflow using https://app.stepsecurity.io/secureworkflow/cloudflare/circl/ci-actions.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci-actions.yml:90: update your workflow using https://app.stepsecurity.io/secureworkflow/cloudflare/circl/ci-actions.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-actions.yml:104: update your workflow using https://app.stepsecurity.io/secureworkflow/cloudflare/circl/ci-actions.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-actions.yml:106: update your workflow using https://app.stepsecurity.io/secureworkflow/cloudflare/circl/ci-actions.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-actions.yml:123: update your workflow using https://app.stepsecurity.io/secureworkflow/cloudflare/circl/ci-actions.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-actions.yml:125: update your workflow using https://app.stepsecurity.io/secureworkflow/cloudflare/circl/ci-actions.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-actions.yml:129: update your workflow using https://app.stepsecurity.io/secureworkflow/cloudflare/circl/ci-actions.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-actions.yml:133: update your workflow using https://app.stepsecurity.io/secureworkflow/cloudflare/circl/ci-actions.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-actions.yml:19: update your workflow using https://app.stepsecurity.io/secureworkflow/cloudflare/circl/ci-actions.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-actions.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/cloudflare/circl/ci-actions.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci-actions.yml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/cloudflare/circl/ci-actions.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-actions.yml:51: update your workflow using https://app.stepsecurity.io/secureworkflow/cloudflare/circl/ci-actions.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-actions.yml:53: update your workflow using https://app.stepsecurity.io/secureworkflow/cloudflare/circl/ci-actions.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/semgrep.yml:23: update your workflow using https://app.stepsecurity.io/secureworkflow/cloudflare/circl/semgrep.yml/main?enable=pin","Warn: goCommand not pinned by hash: .github/workflows/ci-actions.yml:30","Info:   0 out of  15 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of   2 third-party GitHubAction dependencies pinned","Info:   0 out of   1 goCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Branch-Protection","score":5,"reason":"branch protection is not maximal on development and all release branches","details":["Info: 'allow deletion' disabled on branch 'main'","Info: 'force pushes' disabled on branch 'main'","Info: 'branch protection settings apply to administrators' is required to merge on branch 'main'","Warn: 'stale review dismissal' is disabled on branch 'main'","Warn: required approving review count is 1 on branch 'main'","Warn: codeowners review is required - but no codeowners file found in repo","Warn: 'last push approval' is disabled on branch 'main'","Warn: no status checks found to merge onto branch 'main'","Info: PRs are required in order to make changes on branch 'main'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"SAST","score":10,"reason":"SAST tool is run on all commits","details":["Info: SAST configuration detected: CodeQL","Info: all commits (30) are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}},{"name":"Vulnerabilities","score":7,"reason":"3 existing vulnerabilities detected","details":["Warn: Project is vulnerable to: GO-2023-2402 / GHSA-45x7-px36-x8w8","Warn: Project is vulnerable to: GO-2024-3321 / GHSA-v778-237x-gjrc","Warn: Project is vulnerable to: GO-2025-3487 / GHSA-hcg3-q754-cr77"],"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}}]},"last_synced_at":"2025-08-15T22:37:59.062Z","repository_id":34948017,"created_at":"2025-08-15T22:37:59.062Z","updated_at":"2025-08-15T22:37:59.062Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":270661505,"owners_count":24624110,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","status":"online","status_checked_at":"2025-08-16T02:00:11.002Z","response_time":91,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"cloudflare","name":"Cloudflare","uuid":"314135","kind":"organization","description":"","email":null,"website":"https://www.cloudflare.com","location":"San Francisco, London, Austin, Lisbon, Singapore","twitter":null,"company":null,"icon_url":"https://avatars.githubusercontent.com/u/314135?v=4","repositories_count":454,"last_synced_at":"2024-04-14T06:37:39.634Z","metadata":{"has_sponsors_listing":false},"html_url":"https://github.com/cloudflare","funding_links":[],"total_stars":143015,"followers":5086,"following":0,"created_at":"2022-11-02T16:32:28.917Z","updated_at":"2024-04-14T06:39:14.488Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/cloudflare","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/cloudflare/repositories"},"tags":[{"name":"v1.6.1","sha":"c6d33e35234ebf5c4319d12ae7d77d7d17053e56","kind":"commit","published_at":"2025-04-09T16:57:45.000Z","download_url":"https://codeload.github.com/cloudflare/circl/tar.gz/v1.6.1","html_url":"https://github.com/cloudflare/circl/releases/tag/v1.6.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/cloudflare/circl@v1.6.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.6.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.6.1/manifests"},{"name":"v1.6.0","sha":"89e658c2ea39d3cfea7b7c7c8b34ebdbd6d21942","kind":"commit","published_at":"2025-02-04T23:02:19.000Z","download_url":"https://codeload.github.com/cloudflare/circl/tar.gz/v1.6.0","html_url":"https://github.com/cloudflare/circl/releases/tag/v1.6.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/cloudflare/circl@v1.6.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.6.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.6.0/manifests"},{"name":"v1.5.0","sha":"1310edfc1c8a602380c10a469095a3c0b2bd7213","kind":"commit","published_at":"2024-10-10T23:00:31.000Z","download_url":"https://codeload.github.com/cloudflare/circl/tar.gz/v1.5.0","html_url":"https://github.com/cloudflare/circl/releases/tag/v1.5.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/cloudflare/circl@v1.5.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.5.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.5.0/manifests"},{"name":"v1.4.0","sha":"c311e4685e7c83e5f127ac24a2195470da2ab490","kind":"commit","published_at":"2024-08-20T15:44:35.000Z","download_url":"https://codeload.github.com/cloudflare/circl/tar.gz/v1.4.0","html_url":"https://github.com/cloudflare/circl/releases/tag/v1.4.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/cloudflare/circl@v1.4.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.4.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.4.0/manifests"},{"name":"v1.3.9","sha":"75b28edc25ec569e6353a2b944b0b83d48a9c2e8","kind":"commit","published_at":"2024-06-11T17:09:45.000Z","download_url":"https://codeload.github.com/cloudflare/circl/tar.gz/v1.3.9","html_url":"https://github.com/cloudflare/circl/releases/tag/v1.3.9","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/cloudflare/circl@v1.3.9","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.3.9","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.3.9/manifests"},{"name":"v1.3.8","sha":"4bb560182ad7861f26589f3a946304bcbf07110a","kind":"commit","published_at":"2024-04-24T19:38:57.000Z","download_url":"https://codeload.github.com/cloudflare/circl/tar.gz/v1.3.8","html_url":"https://github.com/cloudflare/circl/releases/tag/v1.3.8","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/cloudflare/circl@v1.3.8","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.3.8","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.3.8/manifests"},{"name":"v1.3.7","sha":"c48866b3068dfa83721c021dec03c777ba91abab","kind":"commit","published_at":"2024-01-01T21:04:53.000Z","download_url":"https://codeload.github.com/cloudflare/circl/tar.gz/v1.3.7","html_url":"https://github.com/cloudflare/circl/releases/tag/v1.3.7","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/cloudflare/circl@v1.3.7","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.3.7","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.3.7/manifests"},{"name":"v1.3.6","sha":"99f0f715ca5fbec868f5a0db1df2be6dcd28dbaa","kind":"commit","published_at":"2023-10-27T22:48:50.000Z","download_url":"https://codeload.github.com/cloudflare/circl/tar.gz/v1.3.6","html_url":"https://github.com/cloudflare/circl/releases/tag/v1.3.6","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/cloudflare/circl@v1.3.6","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.3.6","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.3.6/manifests"},{"name":"v1.3.5","sha":"13e767c5c3da5ef4e3df65dfaf7589ccabc0d1e1","kind":"tag","published_at":"2023-10-17T15:05:51.000Z","download_url":"https://codeload.github.com/cloudflare/circl/tar.gz/v1.3.5","html_url":"https://github.com/cloudflare/circl/releases/tag/v1.3.5","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/cloudflare/circl@v1.3.5","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.3.5","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.3.5/manifests"},{"name":"v1.3.4","sha":"13e767c5c3da5ef4e3df65dfaf7589ccabc0d1e1","kind":"tag","published_at":"2023-10-17T14:58:57.000Z","download_url":"https://codeload.github.com/cloudflare/circl/tar.gz/v1.3.4","html_url":"https://github.com/cloudflare/circl/releases/tag/v1.3.4","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/cloudflare/circl@v1.3.4","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.3.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.3.4/manifests"},{"name":"v1.3.3","sha":"3bef500f2b925f150815a360b90081021e082939","kind":"commit","published_at":"2023-05-02T10:44:30.000Z","download_url":"https://codeload.github.com/cloudflare/circl/tar.gz/v1.3.3","html_url":"https://github.com/cloudflare/circl/releases/tag/v1.3.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/cloudflare/circl@v1.3.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.3.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.3.3/manifests"},{"name":"v1.3.2","sha":"769d73f14c245a9a54a860640516c1b799a398d0","kind":"commit","published_at":"2023-01-31T00:03:24.000Z","download_url":"https://codeload.github.com/cloudflare/circl/tar.gz/v1.3.2","html_url":"https://github.com/cloudflare/circl/releases/tag/v1.3.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/cloudflare/circl@v1.3.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.3.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.3.2/manifests"},{"name":"v1.3.1","sha":"459b64f53bc65c6ef18923652e59d8d28da75057","kind":"tag","published_at":"2022-12-19T10:53:14.000Z","download_url":"https://codeload.github.com/cloudflare/circl/tar.gz/v1.3.1","html_url":"https://github.com/cloudflare/circl/releases/tag/v1.3.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/cloudflare/circl@v1.3.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.3.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.3.1/manifests"},{"name":"v1.3.0","sha":"c56c51d2526f71be07939782d59d1a98744e062c","kind":"commit","published_at":"2022-11-11T01:07:31.000Z","download_url":"https://codeload.github.com/cloudflare/circl/tar.gz/v1.3.0","html_url":"https://github.com/cloudflare/circl/releases/tag/v1.3.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/cloudflare/circl@v1.3.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.3.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.3.0/manifests"},{"name":"v1.2.0","sha":"f18784e287f0c586dcbb2c5b7045d7f3080d119b","kind":"commit","published_at":"2022-06-15T00:49:08.000Z","download_url":"https://codeload.github.com/cloudflare/circl/tar.gz/v1.2.0","html_url":"https://github.com/cloudflare/circl/releases/tag/v1.2.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/cloudflare/circl@v1.2.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.2.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.2.0/manifests"},{"name":"v1.1.0","sha":"0518755fbebe2aeb3cf6e71ac533b61602ec8e4a","kind":"commit","published_at":"2021-10-13T00:08:50.000Z","download_url":"https://codeload.github.com/cloudflare/circl/tar.gz/v1.1.0","html_url":"https://github.com/cloudflare/circl/releases/tag/v1.1.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/cloudflare/circl@v1.1.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.1.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.1.0/manifests"},{"name":"v1.0.0","sha":"a03c5a147111a46165b047f49053ec510d5582b4","kind":"commit","published_at":"2019-07-10T17:39:44.000Z","download_url":"https://codeload.github.com/cloudflare/circl/tar.gz/v1.0.0","html_url":"https://github.com/cloudflare/circl/releases/tag/v1.0.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/cloudflare/circl@v1.0.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.0.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.0.0/manifests"}]},"repo_metadata_updated_at":"2025-08-16T03:16:52.867Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":6.326193012462012,"dependent_packages_count":5.928731576797648,"stargazers_count":1.9331065958199505,"forks_count":2.272220451443496,"docker_downloads_count":null,"average":4.115062909130777},"purl":"pkg:golang/github.com/cloudflare/circl/math","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/go/github.com/cloudflare/circl/math","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/go/github.com/cloudflare/circl/math","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/go/github.com/cloudflare/circl/math/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2025-08-07T03:14:56.558Z","issues_count":63,"pull_requests_count":145,"avg_time_to_close_issue":14312665.555555556,"avg_time_to_close_pull_request":2838644.4112903224,"issues_closed_count":45,"pull_requests_closed_count":124,"pull_request_authors_count":25,"issue_authors_count":42,"avg_comments_per_issue":2.492063492063492,"avg_comments_per_pull_request":1.1724137931034484,"merged_pull_requests_count":116,"bot_issues_count":0,"bot_pull_requests_count":2,"past_year_issues_count":19,"past_year_pull_requests_count":23,"past_year_avg_time_to_close_issue":3478759.5,"past_year_avg_time_to_close_pull_request":330228.8333333333,"past_year_issues_closed_count":12,"past_year_pull_requests_closed_count":18,"past_year_pull_request_authors_count":7,"past_year_issue_authors_count":15,"past_year_avg_comments_per_issue":2.4210526315789473,"past_year_avg_comments_per_pull_request":0.4782608695652174,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":1,"past_year_merged_pull_requests_count":18,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/issues","maintainers":[{"login":"bwesterb","count":29,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/bwesterb"}],"active_maintainers":[{"login":"bwesterb","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/bwesterb"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fcloudflare%2Fcircl%2Fmath/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fcloudflare%2Fcircl%2Fmath/version_numbers","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fcloudflare%2Fcircl%2Fmath/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fcloudflare%2Fcircl%2Fmath/related_packages","maintainers":[],"registry":{"name":"proxy.golang.org","url":"https://proxy.golang.org","ecosystem":"go","default":true,"packages_count":1951676,"maintainers_count":0,"namespaces_count":741275,"keywords_count":109185,"github":"golang","metadata":{"funded_packages_count":49011},"icon_url":"https://github.com/golang.png","created_at":"2022-04-04T15:19:22.939Z","updated_at":"2025-09-05T05:14:06.439Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/namespaces"}},{"id":11151716,"name":"github.com/cloudflare/circl/ecc/goldilocks","ecosystem":"go","description":"Package goldilocks provides elliptic curve operations over the goldilocks curve.","homepage":"https://github.com/cloudflare/circl","licenses":"BSD-3-Clause","normalized_licenses":["BSD-3-Clause"],"repository_url":"https://github.com/cloudflare/circl","keywords_array":[],"namespace":"github.com/cloudflare/circl/ecc","versions_count":0,"first_release_published_at":null,"latest_release_published_at":"2025-08-15T22:52:56.933Z","latest_release_number":null,"last_synced_at":"2025-08-15T22:52:56.933Z","created_at":"2024-12-09T16:18:34.506Z","updated_at":"2025-08-16T03:16:52.866Z","registry_url":"https://pkg.go.dev/github.com/cloudflare/circl/ecc/goldilocks","install_command":"go get github.com/cloudflare/circl/ecc/goldilocks","documentation_url":"https://pkg.go.dev/github.com/cloudflare/circl/ecc/goldilocks#section-documentation","metadata":{},"repo_metadata":{"id":34948017,"uuid":"147963112","full_name":"cloudflare/circl","owner":"cloudflare","description":"CIRCL: Cloudflare Interoperable Reusable Cryptographic Library","archived":false,"fork":false,"pushed_at":"2025-08-15T20:14:51.000Z","size":74076,"stargazers_count":1496,"open_issues_count":57,"forks_count":174,"subscribers_count":42,"default_branch":"main","last_synced_at":"2025-08-15T22:37:56.064Z","etag":null,"topics":["circl","cryptography","csidh","dilithium","ed25519","ed448","elliptic-curves","go","golang","hpke","kyber","pki","post-quantum","sidh"],"latest_commit_sha":null,"homepage":"http://blog.cloudflare.com/introducing-circl","language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"other","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/cloudflare.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":"CITATION.cff","codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null}},"created_at":"2018-09-08T19:20:52.000Z","updated_at":"2025-08-15T20:14:56.000Z","dependencies_parsed_at":"2023-10-14T23:12:28.417Z","dependency_job_id":"2f68d1b7-6d19-4256-a6da-b76621a547e1","html_url":"https://github.com/cloudflare/circl","commit_stats":{"total_commits":525,"total_committers":26,"mean_commits":"20.192307692307693","dds":0.56,"last_synced_commit":"795540340d5c79e5768a0135741cd7c3e5f7de93"},"previous_names":[],"tags_count":17,"template":false,"template_full_name":null,"purl":"pkg:github/cloudflare/circl","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/cloudflare","download_url":"https://codeload.github.com/cloudflare/circl/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/sbom","scorecard":{"id":114063,"data":{"date":"2025-08-11","repo":{"name":"github.com/cloudflare/circl","commit":"8bb97daafea779c72d51ec39a604913d3c30bda3"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":7.3,"checks":[{"name":"Maintained","score":10,"reason":"30 commit(s) and 1 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Code-Review","score":10,"reason":"all changesets reviewed","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: jobLevel 'actions' permission set to 'read': .github/workflows/ci-actions.yml:117","Info: jobLevel 'contents' permission set to 'read': .github/workflows/ci-actions.yml:118","Warn: no topLevel permission defined: .github/workflows/ci-actions.yml:1","Warn: no topLevel permission defined: .github/workflows/semgrep.yml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"License","score":9,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Warn: project license file does not contain an FSF or OSI license."],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Fuzzing","score":10,"reason":"project is fuzzed","details":["Info: OSSFuzz integration found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: github.com/cloudflare/.github/SECURITY.md:1","Info: Found linked content: github.com/cloudflare/.github/SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: github.com/cloudflare/.github/SECURITY.md:1","Info: Found text in security policy: github.com/cloudflare/.github/SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-actions.yml:66: update your workflow using https://app.stepsecurity.io/secureworkflow/cloudflare/circl/ci-actions.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-actions.yml:68: update your workflow using https://app.stepsecurity.io/secureworkflow/cloudflare/circl/ci-actions.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-actions.yml:82: update your workflow using https://app.stepsecurity.io/secureworkflow/cloudflare/circl/ci-actions.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-actions.yml:84: update your workflow using https://app.stepsecurity.io/secureworkflow/cloudflare/circl/ci-actions.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci-actions.yml:90: update your workflow using https://app.stepsecurity.io/secureworkflow/cloudflare/circl/ci-actions.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-actions.yml:104: update your workflow using https://app.stepsecurity.io/secureworkflow/cloudflare/circl/ci-actions.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-actions.yml:106: update your workflow using https://app.stepsecurity.io/secureworkflow/cloudflare/circl/ci-actions.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-actions.yml:123: update your workflow using https://app.stepsecurity.io/secureworkflow/cloudflare/circl/ci-actions.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-actions.yml:125: update your workflow using https://app.stepsecurity.io/secureworkflow/cloudflare/circl/ci-actions.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-actions.yml:129: update your workflow using https://app.stepsecurity.io/secureworkflow/cloudflare/circl/ci-actions.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-actions.yml:133: update your workflow using https://app.stepsecurity.io/secureworkflow/cloudflare/circl/ci-actions.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-actions.yml:19: update your workflow using https://app.stepsecurity.io/secureworkflow/cloudflare/circl/ci-actions.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-actions.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/cloudflare/circl/ci-actions.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci-actions.yml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/cloudflare/circl/ci-actions.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-actions.yml:51: update your workflow using https://app.stepsecurity.io/secureworkflow/cloudflare/circl/ci-actions.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-actions.yml:53: update your workflow using https://app.stepsecurity.io/secureworkflow/cloudflare/circl/ci-actions.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/semgrep.yml:23: update your workflow using https://app.stepsecurity.io/secureworkflow/cloudflare/circl/semgrep.yml/main?enable=pin","Warn: goCommand not pinned by hash: .github/workflows/ci-actions.yml:30","Info:   0 out of  15 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of   2 third-party GitHubAction dependencies pinned","Info:   0 out of   1 goCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Branch-Protection","score":5,"reason":"branch protection is not maximal on development and all release branches","details":["Info: 'allow deletion' disabled on branch 'main'","Info: 'force pushes' disabled on branch 'main'","Info: 'branch protection settings apply to administrators' is required to merge on branch 'main'","Warn: 'stale review dismissal' is disabled on branch 'main'","Warn: required approving review count is 1 on branch 'main'","Warn: codeowners review is required - but no codeowners file found in repo","Warn: 'last push approval' is disabled on branch 'main'","Warn: no status checks found to merge onto branch 'main'","Info: PRs are required in order to make changes on branch 'main'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"SAST","score":10,"reason":"SAST tool is run on all commits","details":["Info: SAST configuration detected: CodeQL","Info: all commits (30) are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}},{"name":"Vulnerabilities","score":7,"reason":"3 existing vulnerabilities detected","details":["Warn: Project is vulnerable to: GO-2023-2402 / GHSA-45x7-px36-x8w8","Warn: Project is vulnerable to: GO-2024-3321 / GHSA-v778-237x-gjrc","Warn: Project is vulnerable to: GO-2025-3487 / GHSA-hcg3-q754-cr77"],"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}}]},"last_synced_at":"2025-08-15T22:37:59.062Z","repository_id":34948017,"created_at":"2025-08-15T22:37:59.062Z","updated_at":"2025-08-15T22:37:59.062Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":270661505,"owners_count":24624110,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","status":"online","status_checked_at":"2025-08-16T02:00:11.002Z","response_time":91,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"cloudflare","name":"Cloudflare","uuid":"314135","kind":"organization","description":"","email":null,"website":"https://www.cloudflare.com","location":"San Francisco, London, Austin, Lisbon, Singapore","twitter":null,"company":null,"icon_url":"https://avatars.githubusercontent.com/u/314135?v=4","repositories_count":454,"last_synced_at":"2024-04-14T06:37:39.634Z","metadata":{"has_sponsors_listing":false},"html_url":"https://github.com/cloudflare","funding_links":[],"total_stars":143015,"followers":5086,"following":0,"created_at":"2022-11-02T16:32:28.917Z","updated_at":"2024-04-14T06:39:14.488Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/cloudflare","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/cloudflare/repositories"},"tags":[{"name":"v1.6.1","sha":"c6d33e35234ebf5c4319d12ae7d77d7d17053e56","kind":"commit","published_at":"2025-04-09T16:57:45.000Z","download_url":"https://codeload.github.com/cloudflare/circl/tar.gz/v1.6.1","html_url":"https://github.com/cloudflare/circl/releases/tag/v1.6.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/cloudflare/circl@v1.6.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.6.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.6.1/manifests"},{"name":"v1.6.0","sha":"89e658c2ea39d3cfea7b7c7c8b34ebdbd6d21942","kind":"commit","published_at":"2025-02-04T23:02:19.000Z","download_url":"https://codeload.github.com/cloudflare/circl/tar.gz/v1.6.0","html_url":"https://github.com/cloudflare/circl/releases/tag/v1.6.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/cloudflare/circl@v1.6.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.6.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.6.0/manifests"},{"name":"v1.5.0","sha":"1310edfc1c8a602380c10a469095a3c0b2bd7213","kind":"commit","published_at":"2024-10-10T23:00:31.000Z","download_url":"https://codeload.github.com/cloudflare/circl/tar.gz/v1.5.0","html_url":"https://github.com/cloudflare/circl/releases/tag/v1.5.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/cloudflare/circl@v1.5.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.5.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.5.0/manifests"},{"name":"v1.4.0","sha":"c311e4685e7c83e5f127ac24a2195470da2ab490","kind":"commit","published_at":"2024-08-20T15:44:35.000Z","download_url":"https://codeload.github.com/cloudflare/circl/tar.gz/v1.4.0","html_url":"https://github.com/cloudflare/circl/releases/tag/v1.4.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/cloudflare/circl@v1.4.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.4.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.4.0/manifests"},{"name":"v1.3.9","sha":"75b28edc25ec569e6353a2b944b0b83d48a9c2e8","kind":"commit","published_at":"2024-06-11T17:09:45.000Z","download_url":"https://codeload.github.com/cloudflare/circl/tar.gz/v1.3.9","html_url":"https://github.com/cloudflare/circl/releases/tag/v1.3.9","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/cloudflare/circl@v1.3.9","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.3.9","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.3.9/manifests"},{"name":"v1.3.8","sha":"4bb560182ad7861f26589f3a946304bcbf07110a","kind":"commit","published_at":"2024-04-24T19:38:57.000Z","download_url":"https://codeload.github.com/cloudflare/circl/tar.gz/v1.3.8","html_url":"https://github.com/cloudflare/circl/releases/tag/v1.3.8","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/cloudflare/circl@v1.3.8","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.3.8","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.3.8/manifests"},{"name":"v1.3.7","sha":"c48866b3068dfa83721c021dec03c777ba91abab","kind":"commit","published_at":"2024-01-01T21:04:53.000Z","download_url":"https://codeload.github.com/cloudflare/circl/tar.gz/v1.3.7","html_url":"https://github.com/cloudflare/circl/releases/tag/v1.3.7","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/cloudflare/circl@v1.3.7","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.3.7","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.3.7/manifests"},{"name":"v1.3.6","sha":"99f0f715ca5fbec868f5a0db1df2be6dcd28dbaa","kind":"commit","published_at":"2023-10-27T22:48:50.000Z","download_url":"https://codeload.github.com/cloudflare/circl/tar.gz/v1.3.6","html_url":"https://github.com/cloudflare/circl/releases/tag/v1.3.6","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/cloudflare/circl@v1.3.6","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.3.6","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.3.6/manifests"},{"name":"v1.3.5","sha":"13e767c5c3da5ef4e3df65dfaf7589ccabc0d1e1","kind":"tag","published_at":"2023-10-17T15:05:51.000Z","download_url":"https://codeload.github.com/cloudflare/circl/tar.gz/v1.3.5","html_url":"https://github.com/cloudflare/circl/releases/tag/v1.3.5","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/cloudflare/circl@v1.3.5","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.3.5","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.3.5/manifests"},{"name":"v1.3.4","sha":"13e767c5c3da5ef4e3df65dfaf7589ccabc0d1e1","kind":"tag","published_at":"2023-10-17T14:58:57.000Z","download_url":"https://codeload.github.com/cloudflare/circl/tar.gz/v1.3.4","html_url":"https://github.com/cloudflare/circl/releases/tag/v1.3.4","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/cloudflare/circl@v1.3.4","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.3.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.3.4/manifests"},{"name":"v1.3.3","sha":"3bef500f2b925f150815a360b90081021e082939","kind":"commit","published_at":"2023-05-02T10:44:30.000Z","download_url":"https://codeload.github.com/cloudflare/circl/tar.gz/v1.3.3","html_url":"https://github.com/cloudflare/circl/releases/tag/v1.3.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/cloudflare/circl@v1.3.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.3.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.3.3/manifests"},{"name":"v1.3.2","sha":"769d73f14c245a9a54a860640516c1b799a398d0","kind":"commit","published_at":"2023-01-31T00:03:24.000Z","download_url":"https://codeload.github.com/cloudflare/circl/tar.gz/v1.3.2","html_url":"https://github.com/cloudflare/circl/releases/tag/v1.3.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/cloudflare/circl@v1.3.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.3.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.3.2/manifests"},{"name":"v1.3.1","sha":"459b64f53bc65c6ef18923652e59d8d28da75057","kind":"tag","published_at":"2022-12-19T10:53:14.000Z","download_url":"https://codeload.github.com/cloudflare/circl/tar.gz/v1.3.1","html_url":"https://github.com/cloudflare/circl/releases/tag/v1.3.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/cloudflare/circl@v1.3.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.3.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.3.1/manifests"},{"name":"v1.3.0","sha":"c56c51d2526f71be07939782d59d1a98744e062c","kind":"commit","published_at":"2022-11-11T01:07:31.000Z","download_url":"https://codeload.github.com/cloudflare/circl/tar.gz/v1.3.0","html_url":"https://github.com/cloudflare/circl/releases/tag/v1.3.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/cloudflare/circl@v1.3.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.3.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.3.0/manifests"},{"name":"v1.2.0","sha":"f18784e287f0c586dcbb2c5b7045d7f3080d119b","kind":"commit","published_at":"2022-06-15T00:49:08.000Z","download_url":"https://codeload.github.com/cloudflare/circl/tar.gz/v1.2.0","html_url":"https://github.com/cloudflare/circl/releases/tag/v1.2.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/cloudflare/circl@v1.2.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.2.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.2.0/manifests"},{"name":"v1.1.0","sha":"0518755fbebe2aeb3cf6e71ac533b61602ec8e4a","kind":"commit","published_at":"2021-10-13T00:08:50.000Z","download_url":"https://codeload.github.com/cloudflare/circl/tar.gz/v1.1.0","html_url":"https://github.com/cloudflare/circl/releases/tag/v1.1.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/cloudflare/circl@v1.1.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.1.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.1.0/manifests"},{"name":"v1.0.0","sha":"a03c5a147111a46165b047f49053ec510d5582b4","kind":"commit","published_at":"2019-07-10T17:39:44.000Z","download_url":"https://codeload.github.com/cloudflare/circl/tar.gz/v1.0.0","html_url":"https://github.com/cloudflare/circl/releases/tag/v1.0.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/cloudflare/circl@v1.0.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.0.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.0.0/manifests"}]},"repo_metadata_updated_at":"2025-08-16T03:16:52.866Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":6.326193012462012,"dependent_packages_count":5.928731576797648,"stargazers_count":1.9331065958199505,"forks_count":2.272220451443496,"docker_downloads_count":null,"average":4.115062909130777},"purl":"pkg:golang/github.com/cloudflare/circl/ecc/goldilocks","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/go/github.com/cloudflare/circl/ecc/goldilocks","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/go/github.com/cloudflare/circl/ecc/goldilocks","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/go/github.com/cloudflare/circl/ecc/goldilocks/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2025-08-07T03:14:56.558Z","issues_count":63,"pull_requests_count":145,"avg_time_to_close_issue":14312665.555555556,"avg_time_to_close_pull_request":2838644.4112903224,"issues_closed_count":45,"pull_requests_closed_count":124,"pull_request_authors_count":25,"issue_authors_count":42,"avg_comments_per_issue":2.492063492063492,"avg_comments_per_pull_request":1.1724137931034484,"merged_pull_requests_count":116,"bot_issues_count":0,"bot_pull_requests_count":2,"past_year_issues_count":19,"past_year_pull_requests_count":23,"past_year_avg_time_to_close_issue":3478759.5,"past_year_avg_time_to_close_pull_request":330228.8333333333,"past_year_issues_closed_count":12,"past_year_pull_requests_closed_count":18,"past_year_pull_request_authors_count":7,"past_year_issue_authors_count":15,"past_year_avg_comments_per_issue":2.4210526315789473,"past_year_avg_comments_per_pull_request":0.4782608695652174,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":1,"past_year_merged_pull_requests_count":18,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/issues","maintainers":[{"login":"bwesterb","count":29,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/bwesterb"}],"active_maintainers":[{"login":"bwesterb","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/bwesterb"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fcloudflare%2Fcircl%2Fecc%2Fgoldilocks/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fcloudflare%2Fcircl%2Fecc%2Fgoldilocks/version_numbers","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fcloudflare%2Fcircl%2Fecc%2Fgoldilocks/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fcloudflare%2Fcircl%2Fecc%2Fgoldilocks/related_packages","maintainers":[],"registry":{"name":"proxy.golang.org","url":"https://proxy.golang.org","ecosystem":"go","default":true,"packages_count":1951676,"maintainers_count":0,"namespaces_count":741275,"keywords_count":109185,"github":"golang","metadata":{"funded_packages_count":49011},"icon_url":"https://github.com/golang.png","created_at":"2022-04-04T15:19:22.939Z","updated_at":"2025-09-05T05:14:06.439Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/namespaces"}},{"id":11151715,"name":"github.com/cloudflare/circl/dh/x25519","ecosystem":"go","description":"Package x25519 provides Diffie-Hellman functions as specified in RFC-7748.\n\nValidation of public keys.\n\nThe Diffie-Hellman function, as described in RFC-7748 [1], works for any\npublic key. However, if a different protocol requires contributory\nbehaviour [2,3], then the public keys must be validated against low-order\npoints [3,4]. To do that, the Shared function performs this validation\ninternally and returns false when the public key is invalid (i.e., it\nis a low-order point).\n\nReferences:","homepage":"https://github.com/cloudflare/circl","licenses":"BSD-3-Clause","normalized_licenses":["BSD-3-Clause"],"repository_url":"https://github.com/cloudflare/circl","keywords_array":[],"namespace":"github.com/cloudflare/circl/dh","versions_count":0,"first_release_published_at":null,"latest_release_published_at":"2025-08-15T22:52:56.692Z","latest_release_number":null,"last_synced_at":"2025-08-15T22:52:56.692Z","created_at":"2024-12-09T16:18:34.476Z","updated_at":"2025-08-16T03:16:52.868Z","registry_url":"https://pkg.go.dev/github.com/cloudflare/circl/dh/x25519","install_command":"go get github.com/cloudflare/circl/dh/x25519","documentation_url":"https://pkg.go.dev/github.com/cloudflare/circl/dh/x25519#section-documentation","metadata":{},"repo_metadata":{"id":34948017,"uuid":"147963112","full_name":"cloudflare/circl","owner":"cloudflare","description":"CIRCL: Cloudflare Interoperable Reusable Cryptographic Library","archived":false,"fork":false,"pushed_at":"2025-08-15T20:14:51.000Z","size":74076,"stargazers_count":1496,"open_issues_count":57,"forks_count":174,"subscribers_count":42,"default_branch":"main","last_synced_at":"2025-08-15T22:37:56.064Z","etag":null,"topics":["circl","cryptography","csidh","dilithium","ed25519","ed448","elliptic-curves","go","golang","hpke","kyber","pki","post-quantum","sidh"],"latest_commit_sha":null,"homepage":"http://blog.cloudflare.com/introducing-circl","language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"other","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/cloudflare.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":"CITATION.cff","codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null}},"created_at":"2018-09-08T19:20:52.000Z","updated_at":"2025-08-15T20:14:56.000Z","dependencies_parsed_at":"2023-10-14T23:12:28.417Z","dependency_job_id":"2f68d1b7-6d19-4256-a6da-b76621a547e1","html_url":"https://github.com/cloudflare/circl","commit_stats":{"total_commits":525,"total_committers":26,"mean_commits":"20.192307692307693","dds":0.56,"last_synced_commit":"795540340d5c79e5768a0135741cd7c3e5f7de93"},"previous_names":[],"tags_count":17,"template":false,"template_full_name":null,"purl":"pkg:github/cloudflare/circl","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/cloudflare","download_url":"https://codeload.github.com/cloudflare/circl/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/sbom","scorecard":{"id":114063,"data":{"date":"2025-08-11","repo":{"name":"github.com/cloudflare/circl","commit":"8bb97daafea779c72d51ec39a604913d3c30bda3"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":7.3,"checks":[{"name":"Maintained","score":10,"reason":"30 commit(s) and 1 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Code-Review","score":10,"reason":"all changesets reviewed","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: jobLevel 'actions' permission set to 'read': .github/workflows/ci-actions.yml:117","Info: jobLevel 'contents' permission set to 'read': .github/workflows/ci-actions.yml:118","Warn: no topLevel permission defined: .github/workflows/ci-actions.yml:1","Warn: no topLevel permission defined: .github/workflows/semgrep.yml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"License","score":9,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Warn: project license file does not contain an FSF or OSI license."],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Fuzzing","score":10,"reason":"project is fuzzed","details":["Info: OSSFuzz integration found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: github.com/cloudflare/.github/SECURITY.md:1","Info: Found linked content: github.com/cloudflare/.github/SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: github.com/cloudflare/.github/SECURITY.md:1","Info: Found text in security policy: github.com/cloudflare/.github/SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-actions.yml:66: update your workflow using https://app.stepsecurity.io/secureworkflow/cloudflare/circl/ci-actions.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-actions.yml:68: update your workflow using https://app.stepsecurity.io/secureworkflow/cloudflare/circl/ci-actions.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-actions.yml:82: update your workflow using https://app.stepsecurity.io/secureworkflow/cloudflare/circl/ci-actions.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-actions.yml:84: update your workflow using https://app.stepsecurity.io/secureworkflow/cloudflare/circl/ci-actions.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci-actions.yml:90: update your workflow using https://app.stepsecurity.io/secureworkflow/cloudflare/circl/ci-actions.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-actions.yml:104: update your workflow using https://app.stepsecurity.io/secureworkflow/cloudflare/circl/ci-actions.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-actions.yml:106: update your workflow using https://app.stepsecurity.io/secureworkflow/cloudflare/circl/ci-actions.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-actions.yml:123: update your workflow using https://app.stepsecurity.io/secureworkflow/cloudflare/circl/ci-actions.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-actions.yml:125: update your workflow using https://app.stepsecurity.io/secureworkflow/cloudflare/circl/ci-actions.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-actions.yml:129: update your workflow using https://app.stepsecurity.io/secureworkflow/cloudflare/circl/ci-actions.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-actions.yml:133: update your workflow using https://app.stepsecurity.io/secureworkflow/cloudflare/circl/ci-actions.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-actions.yml:19: update your workflow using https://app.stepsecurity.io/secureworkflow/cloudflare/circl/ci-actions.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-actions.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/cloudflare/circl/ci-actions.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci-actions.yml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/cloudflare/circl/ci-actions.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-actions.yml:51: update your workflow using https://app.stepsecurity.io/secureworkflow/cloudflare/circl/ci-actions.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-actions.yml:53: update your workflow using https://app.stepsecurity.io/secureworkflow/cloudflare/circl/ci-actions.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/semgrep.yml:23: update your workflow using https://app.stepsecurity.io/secureworkflow/cloudflare/circl/semgrep.yml/main?enable=pin","Warn: goCommand not pinned by hash: .github/workflows/ci-actions.yml:30","Info:   0 out of  15 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of   2 third-party GitHubAction dependencies pinned","Info:   0 out of   1 goCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Branch-Protection","score":5,"reason":"branch protection is not maximal on development and all release branches","details":["Info: 'allow deletion' disabled on branch 'main'","Info: 'force pushes' disabled on branch 'main'","Info: 'branch protection settings apply to administrators' is required to merge on branch 'main'","Warn: 'stale review dismissal' is disabled on branch 'main'","Warn: required approving review count is 1 on branch 'main'","Warn: codeowners review is required - but no codeowners file found in repo","Warn: 'last push approval' is disabled on branch 'main'","Warn: no status checks found to merge onto branch 'main'","Info: PRs are required in order to make changes on branch 'main'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"SAST","score":10,"reason":"SAST tool is run on all commits","details":["Info: SAST configuration detected: CodeQL","Info: all commits (30) are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}},{"name":"Vulnerabilities","score":7,"reason":"3 existing vulnerabilities detected","details":["Warn: Project is vulnerable to: GO-2023-2402 / GHSA-45x7-px36-x8w8","Warn: Project is vulnerable to: GO-2024-3321 / GHSA-v778-237x-gjrc","Warn: Project is vulnerable to: GO-2025-3487 / GHSA-hcg3-q754-cr77"],"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}}]},"last_synced_at":"2025-08-15T22:37:59.062Z","repository_id":34948017,"created_at":"2025-08-15T22:37:59.062Z","updated_at":"2025-08-15T22:37:59.062Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":270661505,"owners_count":24624110,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","status":"online","status_checked_at":"2025-08-16T02:00:11.002Z","response_time":91,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"cloudflare","name":"Cloudflare","uuid":"314135","kind":"organization","description":"","email":null,"website":"https://www.cloudflare.com","location":"San Francisco, London, Austin, Lisbon, Singapore","twitter":null,"company":null,"icon_url":"https://avatars.githubusercontent.com/u/314135?v=4","repositories_count":454,"last_synced_at":"2024-04-14T06:37:39.634Z","metadata":{"has_sponsors_listing":false},"html_url":"https://github.com/cloudflare","funding_links":[],"total_stars":143015,"followers":5086,"following":0,"created_at":"2022-11-02T16:32:28.917Z","updated_at":"2024-04-14T06:39:14.488Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/cloudflare","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/cloudflare/repositories"},"tags":[{"name":"v1.6.1","sha":"c6d33e35234ebf5c4319d12ae7d77d7d17053e56","kind":"commit","published_at":"2025-04-09T16:57:45.000Z","download_url":"https://codeload.github.com/cloudflare/circl/tar.gz/v1.6.1","html_url":"https://github.com/cloudflare/circl/releases/tag/v1.6.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/cloudflare/circl@v1.6.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.6.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.6.1/manifests"},{"name":"v1.6.0","sha":"89e658c2ea39d3cfea7b7c7c8b34ebdbd6d21942","kind":"commit","published_at":"2025-02-04T23:02:19.000Z","download_url":"https://codeload.github.com/cloudflare/circl/tar.gz/v1.6.0","html_url":"https://github.com/cloudflare/circl/releases/tag/v1.6.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/cloudflare/circl@v1.6.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.6.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.6.0/manifests"},{"name":"v1.5.0","sha":"1310edfc1c8a602380c10a469095a3c0b2bd7213","kind":"commit","published_at":"2024-10-10T23:00:31.000Z","download_url":"https://codeload.github.com/cloudflare/circl/tar.gz/v1.5.0","html_url":"https://github.com/cloudflare/circl/releases/tag/v1.5.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/cloudflare/circl@v1.5.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.5.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.5.0/manifests"},{"name":"v1.4.0","sha":"c311e4685e7c83e5f127ac24a2195470da2ab490","kind":"commit","published_at":"2024-08-20T15:44:35.000Z","download_url":"https://codeload.github.com/cloudflare/circl/tar.gz/v1.4.0","html_url":"https://github.com/cloudflare/circl/releases/tag/v1.4.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/cloudflare/circl@v1.4.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.4.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.4.0/manifests"},{"name":"v1.3.9","sha":"75b28edc25ec569e6353a2b944b0b83d48a9c2e8","kind":"commit","published_at":"2024-06-11T17:09:45.000Z","download_url":"https://codeload.github.com/cloudflare/circl/tar.gz/v1.3.9","html_url":"https://github.com/cloudflare/circl/releases/tag/v1.3.9","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/cloudflare/circl@v1.3.9","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.3.9","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.3.9/manifests"},{"name":"v1.3.8","sha":"4bb560182ad7861f26589f3a946304bcbf07110a","kind":"commit","published_at":"2024-04-24T19:38:57.000Z","download_url":"https://codeload.github.com/cloudflare/circl/tar.gz/v1.3.8","html_url":"https://github.com/cloudflare/circl/releases/tag/v1.3.8","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/cloudflare/circl@v1.3.8","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.3.8","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.3.8/manifests"},{"name":"v1.3.7","sha":"c48866b3068dfa83721c021dec03c777ba91abab","kind":"commit","published_at":"2024-01-01T21:04:53.000Z","download_url":"https://codeload.github.com/cloudflare/circl/tar.gz/v1.3.7","html_url":"https://github.com/cloudflare/circl/releases/tag/v1.3.7","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/cloudflare/circl@v1.3.7","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.3.7","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.3.7/manifests"},{"name":"v1.3.6","sha":"99f0f715ca5fbec868f5a0db1df2be6dcd28dbaa","kind":"commit","published_at":"2023-10-27T22:48:50.000Z","download_url":"https://codeload.github.com/cloudflare/circl/tar.gz/v1.3.6","html_url":"https://github.com/cloudflare/circl/releases/tag/v1.3.6","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/cloudflare/circl@v1.3.6","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.3.6","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.3.6/manifests"},{"name":"v1.3.5","sha":"13e767c5c3da5ef4e3df65dfaf7589ccabc0d1e1","kind":"tag","published_at":"2023-10-17T15:05:51.000Z","download_url":"https://codeload.github.com/cloudflare/circl/tar.gz/v1.3.5","html_url":"https://github.com/cloudflare/circl/releases/tag/v1.3.5","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/cloudflare/circl@v1.3.5","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.3.5","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.3.5/manifests"},{"name":"v1.3.4","sha":"13e767c5c3da5ef4e3df65dfaf7589ccabc0d1e1","kind":"tag","published_at":"2023-10-17T14:58:57.000Z","download_url":"https://codeload.github.com/cloudflare/circl/tar.gz/v1.3.4","html_url":"https://github.com/cloudflare/circl/releases/tag/v1.3.4","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/cloudflare/circl@v1.3.4","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.3.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.3.4/manifests"},{"name":"v1.3.3","sha":"3bef500f2b925f150815a360b90081021e082939","kind":"commit","published_at":"2023-05-02T10:44:30.000Z","download_url":"https://codeload.github.com/cloudflare/circl/tar.gz/v1.3.3","html_url":"https://github.com/cloudflare/circl/releases/tag/v1.3.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/cloudflare/circl@v1.3.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.3.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.3.3/manifests"},{"name":"v1.3.2","sha":"769d73f14c245a9a54a860640516c1b799a398d0","kind":"commit","published_at":"2023-01-31T00:03:24.000Z","download_url":"https://codeload.github.com/cloudflare/circl/tar.gz/v1.3.2","html_url":"https://github.com/cloudflare/circl/releases/tag/v1.3.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/cloudflare/circl@v1.3.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.3.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.3.2/manifests"},{"name":"v1.3.1","sha":"459b64f53bc65c6ef18923652e59d8d28da75057","kind":"tag","published_at":"2022-12-19T10:53:14.000Z","download_url":"https://codeload.github.com/cloudflare/circl/tar.gz/v1.3.1","html_url":"https://github.com/cloudflare/circl/releases/tag/v1.3.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/cloudflare/circl@v1.3.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.3.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.3.1/manifests"},{"name":"v1.3.0","sha":"c56c51d2526f71be07939782d59d1a98744e062c","kind":"commit","published_at":"2022-11-11T01:07:31.000Z","download_url":"https://codeload.github.com/cloudflare/circl/tar.gz/v1.3.0","html_url":"https://github.com/cloudflare/circl/releases/tag/v1.3.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/cloudflare/circl@v1.3.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.3.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.3.0/manifests"},{"name":"v1.2.0","sha":"f18784e287f0c586dcbb2c5b7045d7f3080d119b","kind":"commit","published_at":"2022-06-15T00:49:08.000Z","download_url":"https://codeload.github.com/cloudflare/circl/tar.gz/v1.2.0","html_url":"https://github.com/cloudflare/circl/releases/tag/v1.2.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/cloudflare/circl@v1.2.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.2.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.2.0/manifests"},{"name":"v1.1.0","sha":"0518755fbebe2aeb3cf6e71ac533b61602ec8e4a","kind":"commit","published_at":"2021-10-13T00:08:50.000Z","download_url":"https://codeload.github.com/cloudflare/circl/tar.gz/v1.1.0","html_url":"https://github.com/cloudflare/circl/releases/tag/v1.1.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/cloudflare/circl@v1.1.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.1.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.1.0/manifests"},{"name":"v1.0.0","sha":"a03c5a147111a46165b047f49053ec510d5582b4","kind":"commit","published_at":"2019-07-10T17:39:44.000Z","download_url":"https://codeload.github.com/cloudflare/circl/tar.gz/v1.0.0","html_url":"https://github.com/cloudflare/circl/releases/tag/v1.0.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/cloudflare/circl@v1.0.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.0.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.0.0/manifests"}]},"repo_metadata_updated_at":"2025-08-16T03:16:52.868Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":6.326193012462012,"dependent_packages_count":5.928731576797648,"stargazers_count":1.9331065958199505,"forks_count":2.272220451443496,"docker_downloads_count":null,"average":4.115062909130777},"purl":"pkg:golang/github.com/cloudflare/circl/dh/x25519","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/go/github.com/cloudflare/circl/dh/x25519","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/go/github.com/cloudflare/circl/dh/x25519","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/go/github.com/cloudflare/circl/dh/x25519/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2025-08-07T03:14:56.558Z","issues_count":63,"pull_requests_count":145,"avg_time_to_close_issue":14312665.555555556,"avg_time_to_close_pull_request":2838644.4112903224,"issues_closed_count":45,"pull_requests_closed_count":124,"pull_request_authors_count":25,"issue_authors_count":42,"avg_comments_per_issue":2.492063492063492,"avg_comments_per_pull_request":1.1724137931034484,"merged_pull_requests_count":116,"bot_issues_count":0,"bot_pull_requests_count":2,"past_year_issues_count":19,"past_year_pull_requests_count":23,"past_year_avg_time_to_close_issue":3478759.5,"past_year_avg_time_to_close_pull_request":330228.8333333333,"past_year_issues_closed_count":12,"past_year_pull_requests_closed_count":18,"past_year_pull_request_authors_count":7,"past_year_issue_authors_count":15,"past_year_avg_comments_per_issue":2.4210526315789473,"past_year_avg_comments_per_pull_request":0.4782608695652174,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":1,"past_year_merged_pull_requests_count":18,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/issues","maintainers":[{"login":"bwesterb","count":29,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/bwesterb"}],"active_maintainers":[{"login":"bwesterb","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/bwesterb"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fcloudflare%2Fcircl%2Fdh%2Fx25519/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fcloudflare%2Fcircl%2Fdh%2Fx25519/version_numbers","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fcloudflare%2Fcircl%2Fdh%2Fx25519/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fcloudflare%2Fcircl%2Fdh%2Fx25519/related_packages","maintainers":[],"registry":{"name":"proxy.golang.org","url":"https://proxy.golang.org","ecosystem":"go","default":true,"packages_count":1951676,"maintainers_count":0,"namespaces_count":741275,"keywords_count":109185,"github":"golang","metadata":{"funded_packages_count":49011},"icon_url":"https://github.com/golang.png","created_at":"2022-04-04T15:19:22.939Z","updated_at":"2025-09-05T05:14:06.439Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/namespaces"}},{"id":5351863,"name":"github.com/cloudflare/circl/pke/kyber/internal/common/asm","ecosystem":"go","description":"AVX2 optimized version of polynomial operations.  See the comments on the\ngeneric implementation for the details of the maths involved.","homepage":"https://github.com/cloudflare/circl","licenses":"BSD-3-Clause","normalized_licenses":["BSD-3-Clause"],"repository_url":"https://github.com/cloudflare/circl","keywords_array":[],"namespace":"github.com/cloudflare/circl/pke/kyber/internal/common","versions_count":20,"first_release_published_at":"2022-03-04T21:28:22.000Z","latest_release_published_at":"2023-09-06T23:38:25.000Z","latest_release_number":"v0.0.0-20230906233825-44133f703215","last_synced_at":"2025-07-25T18:51:23.656Z","created_at":"2022-10-18T03:14:08.223Z","updated_at":"2025-08-16T03:16:52.875Z","registry_url":"https://pkg.go.dev/github.com/cloudflare/circl/pke/kyber/internal/common/asm","install_command":"go get github.com/cloudflare/circl/pke/kyber/internal/common/asm","documentation_url":"https://pkg.go.dev/github.com/cloudflare/circl/pke/kyber/internal/common/asm#section-documentation","metadata":{},"repo_metadata":{"id":34948017,"uuid":"147963112","full_name":"cloudflare/circl","owner":"cloudflare","description":"CIRCL: Cloudflare Interoperable Reusable Cryptographic Library","archived":false,"fork":false,"pushed_at":"2025-08-15T20:14:51.000Z","size":74076,"stargazers_count":1496,"open_issues_count":57,"forks_count":174,"subscribers_count":42,"default_branch":"main","last_synced_at":"2025-08-15T22:37:56.064Z","etag":null,"topics":["circl","cryptography","csidh","dilithium","ed25519","ed448","elliptic-curves","go","golang","hpke","kyber","pki","post-quantum","sidh"],"latest_commit_sha":null,"homepage":"http://blog.cloudflare.com/introducing-circl","language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"other","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/cloudflare.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":"CITATION.cff","codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null}},"created_at":"2018-09-08T19:20:52.000Z","updated_at":"2025-08-15T20:14:56.000Z","dependencies_parsed_at":"2023-10-14T23:12:28.417Z","dependency_job_id":"2f68d1b7-6d19-4256-a6da-b76621a547e1","html_url":"https://github.com/cloudflare/circl","commit_stats":{"total_commits":525,"total_committers":26,"mean_commits":"20.192307692307693","dds":0.56,"last_synced_commit":"795540340d5c79e5768a0135741cd7c3e5f7de93"},"previous_names":[],"tags_count":17,"template":false,"template_full_name":null,"purl":"pkg:github/cloudflare/circl","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/cloudflare","download_url":"https://codeload.github.com/cloudflare/circl/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/sbom","scorecard":{"id":114063,"data":{"date":"2025-08-11","repo":{"name":"github.com/cloudflare/circl","commit":"8bb97daafea779c72d51ec39a604913d3c30bda3"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":7.3,"checks":[{"name":"Maintained","score":10,"reason":"30 commit(s) and 1 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Code-Review","score":10,"reason":"all changesets reviewed","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: jobLevel 'actions' permission set to 'read': .github/workflows/ci-actions.yml:117","Info: jobLevel 'contents' permission set to 'read': .github/workflows/ci-actions.yml:118","Warn: no topLevel permission defined: .github/workflows/ci-actions.yml:1","Warn: no topLevel permission defined: .github/workflows/semgrep.yml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"License","score":9,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Warn: project license file does not contain an FSF or OSI license."],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Fuzzing","score":10,"reason":"project is fuzzed","details":["Info: OSSFuzz integration found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: github.com/cloudflare/.github/SECURITY.md:1","Info: Found linked content: github.com/cloudflare/.github/SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: github.com/cloudflare/.github/SECURITY.md:1","Info: Found text in security policy: github.com/cloudflare/.github/SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-actions.yml:66: update your workflow using https://app.stepsecurity.io/secureworkflow/cloudflare/circl/ci-actions.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-actions.yml:68: update your workflow using https://app.stepsecurity.io/secureworkflow/cloudflare/circl/ci-actions.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-actions.yml:82: update your workflow using https://app.stepsecurity.io/secureworkflow/cloudflare/circl/ci-actions.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-actions.yml:84: update your workflow using https://app.stepsecurity.io/secureworkflow/cloudflare/circl/ci-actions.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci-actions.yml:90: update your workflow using https://app.stepsecurity.io/secureworkflow/cloudflare/circl/ci-actions.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-actions.yml:104: update your workflow using https://app.stepsecurity.io/secureworkflow/cloudflare/circl/ci-actions.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-actions.yml:106: update your workflow using https://app.stepsecurity.io/secureworkflow/cloudflare/circl/ci-actions.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-actions.yml:123: update your workflow using https://app.stepsecurity.io/secureworkflow/cloudflare/circl/ci-actions.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-actions.yml:125: update your workflow using https://app.stepsecurity.io/secureworkflow/cloudflare/circl/ci-actions.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-actions.yml:129: update your workflow using https://app.stepsecurity.io/secureworkflow/cloudflare/circl/ci-actions.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-actions.yml:133: update your workflow using https://app.stepsecurity.io/secureworkflow/cloudflare/circl/ci-actions.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-actions.yml:19: update your workflow using https://app.stepsecurity.io/secureworkflow/cloudflare/circl/ci-actions.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-actions.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/cloudflare/circl/ci-actions.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci-actions.yml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/cloudflare/circl/ci-actions.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-actions.yml:51: update your workflow using https://app.stepsecurity.io/secureworkflow/cloudflare/circl/ci-actions.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-actions.yml:53: update your workflow using https://app.stepsecurity.io/secureworkflow/cloudflare/circl/ci-actions.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/semgrep.yml:23: update your workflow using https://app.stepsecurity.io/secureworkflow/cloudflare/circl/semgrep.yml/main?enable=pin","Warn: goCommand not pinned by hash: .github/workflows/ci-actions.yml:30","Info:   0 out of  15 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of   2 third-party GitHubAction dependencies pinned","Info:   0 out of   1 goCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Branch-Protection","score":5,"reason":"branch protection is not maximal on development and all release branches","details":["Info: 'allow deletion' disabled on branch 'main'","Info: 'force pushes' disabled on branch 'main'","Info: 'branch protection settings apply to administrators' is required to merge on branch 'main'","Warn: 'stale review dismissal' is disabled on branch 'main'","Warn: required approving review count is 1 on branch 'main'","Warn: codeowners review is required - but no codeowners file found in repo","Warn: 'last push approval' is disabled on branch 'main'","Warn: no status checks found to merge onto branch 'main'","Info: PRs are required in order to make changes on branch 'main'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"SAST","score":10,"reason":"SAST tool is run on all commits","details":["Info: SAST configuration detected: CodeQL","Info: all commits (30) are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}},{"name":"Vulnerabilities","score":7,"reason":"3 existing vulnerabilities detected","details":["Warn: Project is vulnerable to: GO-2023-2402 / GHSA-45x7-px36-x8w8","Warn: Project is vulnerable to: GO-2024-3321 / GHSA-v778-237x-gjrc","Warn: Project is vulnerable to: GO-2025-3487 / GHSA-hcg3-q754-cr77"],"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}}]},"last_synced_at":"2025-08-15T22:37:59.062Z","repository_id":34948017,"created_at":"2025-08-15T22:37:59.062Z","updated_at":"2025-08-15T22:37:59.062Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":270661505,"owners_count":24624110,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","status":"online","status_checked_at":"2025-08-16T02:00:11.002Z","response_time":91,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"cloudflare","name":"Cloudflare","uuid":"314135","kind":"organization","description":"","email":null,"website":"https://www.cloudflare.com","location":"San Francisco, London, Austin, Lisbon, Singapore","twitter":null,"company":null,"icon_url":"https://avatars.githubusercontent.com/u/314135?v=4","repositories_count":454,"last_synced_at":"2024-04-14T06:37:39.634Z","metadata":{"has_sponsors_listing":false},"html_url":"https://github.com/cloudflare","funding_links":[],"total_stars":143015,"followers":5086,"following":0,"created_at":"2022-11-02T16:32:28.917Z","updated_at":"2024-04-14T06:39:14.488Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/cloudflare","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/cloudflare/repositories"},"tags":[{"name":"v1.6.1","sha":"c6d33e35234ebf5c4319d12ae7d77d7d17053e56","kind":"commit","published_at":"2025-04-09T16:57:45.000Z","download_url":"https://codeload.github.com/cloudflare/circl/tar.gz/v1.6.1","html_url":"https://github.com/cloudflare/circl/releases/tag/v1.6.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/cloudflare/circl@v1.6.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.6.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.6.1/manifests"},{"name":"v1.6.0","sha":"89e658c2ea39d3cfea7b7c7c8b34ebdbd6d21942","kind":"commit","published_at":"2025-02-04T23:02:19.000Z","download_url":"https://codeload.github.com/cloudflare/circl/tar.gz/v1.6.0","html_url":"https://github.com/cloudflare/circl/releases/tag/v1.6.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/cloudflare/circl@v1.6.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.6.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.6.0/manifests"},{"name":"v1.5.0","sha":"1310edfc1c8a602380c10a469095a3c0b2bd7213","kind":"commit","published_at":"2024-10-10T23:00:31.000Z","download_url":"https://codeload.github.com/cloudflare/circl/tar.gz/v1.5.0","html_url":"https://github.com/cloudflare/circl/releases/tag/v1.5.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/cloudflare/circl@v1.5.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.5.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.5.0/manifests"},{"name":"v1.4.0","sha":"c311e4685e7c83e5f127ac24a2195470da2ab490","kind":"commit","published_at":"2024-08-20T15:44:35.000Z","download_url":"https://codeload.github.com/cloudflare/circl/tar.gz/v1.4.0","html_url":"https://github.com/cloudflare/circl/releases/tag/v1.4.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/cloudflare/circl@v1.4.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.4.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.4.0/manifests"},{"name":"v1.3.9","sha":"75b28edc25ec569e6353a2b944b0b83d48a9c2e8","kind":"commit","published_at":"2024-06-11T17:09:45.000Z","download_url":"https://codeload.github.com/cloudflare/circl/tar.gz/v1.3.9","html_url":"https://github.com/cloudflare/circl/releases/tag/v1.3.9","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/cloudflare/circl@v1.3.9","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.3.9","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.3.9/manifests"},{"name":"v1.3.8","sha":"4bb560182ad7861f26589f3a946304bcbf07110a","kind":"commit","published_at":"2024-04-24T19:38:57.000Z","download_url":"https://codeload.github.com/cloudflare/circl/tar.gz/v1.3.8","html_url":"https://github.com/cloudflare/circl/releases/tag/v1.3.8","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/cloudflare/circl@v1.3.8","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.3.8","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.3.8/manifests"},{"name":"v1.3.7","sha":"c48866b3068dfa83721c021dec03c777ba91abab","kind":"commit","published_at":"2024-01-01T21:04:53.000Z","download_url":"https://codeload.github.com/cloudflare/circl/tar.gz/v1.3.7","html_url":"https://github.com/cloudflare/circl/releases/tag/v1.3.7","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/cloudflare/circl@v1.3.7","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.3.7","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.3.7/manifests"},{"name":"v1.3.6","sha":"99f0f715ca5fbec868f5a0db1df2be6dcd28dbaa","kind":"commit","published_at":"2023-10-27T22:48:50.000Z","download_url":"https://codeload.github.com/cloudflare/circl/tar.gz/v1.3.6","html_url":"https://github.com/cloudflare/circl/releases/tag/v1.3.6","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/cloudflare/circl@v1.3.6","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.3.6","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.3.6/manifests"},{"name":"v1.3.5","sha":"13e767c5c3da5ef4e3df65dfaf7589ccabc0d1e1","kind":"tag","published_at":"2023-10-17T15:05:51.000Z","download_url":"https://codeload.github.com/cloudflare/circl/tar.gz/v1.3.5","html_url":"https://github.com/cloudflare/circl/releases/tag/v1.3.5","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/cloudflare/circl@v1.3.5","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.3.5","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.3.5/manifests"},{"name":"v1.3.4","sha":"13e767c5c3da5ef4e3df65dfaf7589ccabc0d1e1","kind":"tag","published_at":"2023-10-17T14:58:57.000Z","download_url":"https://codeload.github.com/cloudflare/circl/tar.gz/v1.3.4","html_url":"https://github.com/cloudflare/circl/releases/tag/v1.3.4","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/cloudflare/circl@v1.3.4","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.3.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.3.4/manifests"},{"name":"v1.3.3","sha":"3bef500f2b925f150815a360b90081021e082939","kind":"commit","published_at":"2023-05-02T10:44:30.000Z","download_url":"https://codeload.github.com/cloudflare/circl/tar.gz/v1.3.3","html_url":"https://github.com/cloudflare/circl/releases/tag/v1.3.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/cloudflare/circl@v1.3.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.3.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.3.3/manifests"},{"name":"v1.3.2","sha":"769d73f14c245a9a54a860640516c1b799a398d0","kind":"commit","published_at":"2023-01-31T00:03:24.000Z","download_url":"https://codeload.github.com/cloudflare/circl/tar.gz/v1.3.2","html_url":"https://github.com/cloudflare/circl/releases/tag/v1.3.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/cloudflare/circl@v1.3.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.3.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.3.2/manifests"},{"name":"v1.3.1","sha":"459b64f53bc65c6ef18923652e59d8d28da75057","kind":"tag","published_at":"2022-12-19T10:53:14.000Z","download_url":"https://codeload.github.com/cloudflare/circl/tar.gz/v1.3.1","html_url":"https://github.com/cloudflare/circl/releases/tag/v1.3.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/cloudflare/circl@v1.3.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.3.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.3.1/manifests"},{"name":"v1.3.0","sha":"c56c51d2526f71be07939782d59d1a98744e062c","kind":"commit","published_at":"2022-11-11T01:07:31.000Z","download_url":"https://codeload.github.com/cloudflare/circl/tar.gz/v1.3.0","html_url":"https://github.com/cloudflare/circl/releases/tag/v1.3.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/cloudflare/circl@v1.3.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.3.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.3.0/manifests"},{"name":"v1.2.0","sha":"f18784e287f0c586dcbb2c5b7045d7f3080d119b","kind":"commit","published_at":"2022-06-15T00:49:08.000Z","download_url":"https://codeload.github.com/cloudflare/circl/tar.gz/v1.2.0","html_url":"https://github.com/cloudflare/circl/releases/tag/v1.2.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/cloudflare/circl@v1.2.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.2.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.2.0/manifests"},{"name":"v1.1.0","sha":"0518755fbebe2aeb3cf6e71ac533b61602ec8e4a","kind":"commit","published_at":"2021-10-13T00:08:50.000Z","download_url":"https://codeload.github.com/cloudflare/circl/tar.gz/v1.1.0","html_url":"https://github.com/cloudflare/circl/releases/tag/v1.1.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/cloudflare/circl@v1.1.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.1.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.1.0/manifests"},{"name":"v1.0.0","sha":"a03c5a147111a46165b047f49053ec510d5582b4","kind":"commit","published_at":"2019-07-10T17:39:44.000Z","download_url":"https://codeload.github.com/cloudflare/circl/tar.gz/v1.0.0","html_url":"https://github.com/cloudflare/circl/releases/tag/v1.0.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/cloudflare/circl@v1.0.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.0.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.0.0/manifests"}]},"repo_metadata_updated_at":"2025-08-16T03:16:52.875Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":9.345852080216646,"dependent_packages_count":6.999148183520997,"stargazers_count":1.361110705840498,"forks_count":1.7230485378272733,"average":4.857289876851354},"purl":"pkg:golang/github.com/cloudflare/circl/pke/kyber/internal/common/asm","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/go/github.com/cloudflare/circl/pke/kyber/internal/common/asm","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/go/github.com/cloudflare/circl/pke/kyber/internal/common/asm","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/go/github.com/cloudflare/circl/pke/kyber/internal/common/asm/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2025-08-07T03:14:56.558Z","issues_count":63,"pull_requests_count":145,"avg_time_to_close_issue":14312665.555555556,"avg_time_to_close_pull_request":2838644.4112903224,"issues_closed_count":45,"pull_requests_closed_count":124,"pull_request_authors_count":25,"issue_authors_count":42,"avg_comments_per_issue":2.492063492063492,"avg_comments_per_pull_request":1.1724137931034484,"merged_pull_requests_count":116,"bot_issues_count":0,"bot_pull_requests_count":2,"past_year_issues_count":19,"past_year_pull_requests_count":23,"past_year_avg_time_to_close_issue":3478759.5,"past_year_avg_time_to_close_pull_request":330228.8333333333,"past_year_issues_closed_count":12,"past_year_pull_requests_closed_count":18,"past_year_pull_request_authors_count":7,"past_year_issue_authors_count":15,"past_year_avg_comments_per_issue":2.4210526315789473,"past_year_avg_comments_per_pull_request":0.4782608695652174,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":1,"past_year_merged_pull_requests_count":18,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/issues","maintainers":[{"login":"bwesterb","count":29,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/bwesterb"}],"active_maintainers":[{"login":"bwesterb","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/bwesterb"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fcloudflare%2Fcircl%2Fpke%2Fkyber%2Finternal%2Fcommon%2Fasm/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fcloudflare%2Fcircl%2Fpke%2Fkyber%2Finternal%2Fcommon%2Fasm/version_numbers","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fcloudflare%2Fcircl%2Fpke%2Fkyber%2Finternal%2Fcommon%2Fasm/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fcloudflare%2Fcircl%2Fpke%2Fkyber%2Finternal%2Fcommon%2Fasm/related_packages","maintainers":[],"registry":{"name":"proxy.golang.org","url":"https://proxy.golang.org","ecosystem":"go","default":true,"packages_count":1951676,"maintainers_count":0,"namespaces_count":741275,"keywords_count":109185,"github":"golang","metadata":{"funded_packages_count":49011},"icon_url":"https://github.com/golang.png","created_at":"2022-04-04T15:19:22.939Z","updated_at":"2025-09-05T05:14:06.439Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/namespaces"}},{"id":11151714,"name":"github.com/cloudflare/circl/dh/x448","ecosystem":"go","description":"Package x448 provides Diffie-Hellman functions as specified in RFC-7748.\n\nValidation of public keys.\n\nThe Diffie-Hellman function, as described in RFC-7748 [1], works for any\npublic key. However, if a different protocol requires contributory\nbehaviour [2,3], then the public keys must be validated against low-order\npoints [3,4]. To do that, the Shared function performs this validation\ninternally and returns false when the public key is invalid (i.e., it\nis a low-order point).\n\nReferences:","homepage":"https://github.com/cloudflare/circl","licenses":"BSD-3-Clause","normalized_licenses":["BSD-3-Clause"],"repository_url":"https://github.com/cloudflare/circl","keywords_array":[],"namespace":"github.com/cloudflare/circl/dh","versions_count":0,"first_release_published_at":null,"latest_release_published_at":"2025-07-25T18:51:16.263Z","latest_release_number":null,"last_synced_at":"2025-07-25T18:51:16.263Z","created_at":"2024-12-09T16:18:34.418Z","updated_at":"2025-08-16T03:16:52.879Z","registry_url":"https://pkg.go.dev/github.com/cloudflare/circl/dh/x448","install_command":"go get github.com/cloudflare/circl/dh/x448","documentation_url":"https://pkg.go.dev/github.com/cloudflare/circl/dh/x448#section-documentation","metadata":{},"repo_metadata":{"id":34948017,"uuid":"147963112","full_name":"cloudflare/circl","owner":"cloudflare","description":"CIRCL: Cloudflare Interoperable Reusable Cryptographic Library","archived":false,"fork":false,"pushed_at":"2025-08-15T20:14:51.000Z","size":74076,"stargazers_count":1496,"open_issues_count":57,"forks_count":174,"subscribers_count":42,"default_branch":"main","last_synced_at":"2025-08-15T22:37:56.064Z","etag":null,"topics":["circl","cryptography","csidh","dilithium","ed25519","ed448","elliptic-curves","go","golang","hpke","kyber","pki","post-quantum","sidh"],"latest_commit_sha":null,"homepage":"http://blog.cloudflare.com/introducing-circl","language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"other","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/cloudflare.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":"CITATION.cff","codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null}},"created_at":"2018-09-08T19:20:52.000Z","updated_at":"2025-08-15T20:14:56.000Z","dependencies_parsed_at":"2023-10-14T23:12:28.417Z","dependency_job_id":"2f68d1b7-6d19-4256-a6da-b76621a547e1","html_url":"https://github.com/cloudflare/circl","commit_stats":{"total_commits":525,"total_committers":26,"mean_commits":"20.192307692307693","dds":0.56,"last_synced_commit":"795540340d5c79e5768a0135741cd7c3e5f7de93"},"previous_names":[],"tags_count":17,"template":false,"template_full_name":null,"purl":"pkg:github/cloudflare/circl","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/cloudflare","download_url":"https://codeload.github.com/cloudflare/circl/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/sbom","scorecard":{"id":114063,"data":{"date":"2025-08-11","repo":{"name":"github.com/cloudflare/circl","commit":"8bb97daafea779c72d51ec39a604913d3c30bda3"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":7.3,"checks":[{"name":"Maintained","score":10,"reason":"30 commit(s) and 1 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Code-Review","score":10,"reason":"all changesets reviewed","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: jobLevel 'actions' permission set to 'read': .github/workflows/ci-actions.yml:117","Info: jobLevel 'contents' permission set to 'read': .github/workflows/ci-actions.yml:118","Warn: no topLevel permission defined: .github/workflows/ci-actions.yml:1","Warn: no topLevel permission defined: .github/workflows/semgrep.yml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"License","score":9,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Warn: project license file does not contain an FSF or OSI license."],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Fuzzing","score":10,"reason":"project is fuzzed","details":["Info: OSSFuzz integration found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: github.com/cloudflare/.github/SECURITY.md:1","Info: Found linked content: github.com/cloudflare/.github/SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: github.com/cloudflare/.github/SECURITY.md:1","Info: Found text in security policy: github.com/cloudflare/.github/SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-actions.yml:66: update your workflow using https://app.stepsecurity.io/secureworkflow/cloudflare/circl/ci-actions.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-actions.yml:68: update your workflow using https://app.stepsecurity.io/secureworkflow/cloudflare/circl/ci-actions.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-actions.yml:82: update your workflow using https://app.stepsecurity.io/secureworkflow/cloudflare/circl/ci-actions.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-actions.yml:84: update your workflow using https://app.stepsecurity.io/secureworkflow/cloudflare/circl/ci-actions.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci-actions.yml:90: update your workflow using https://app.stepsecurity.io/secureworkflow/cloudflare/circl/ci-actions.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-actions.yml:104: update your workflow using https://app.stepsecurity.io/secureworkflow/cloudflare/circl/ci-actions.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-actions.yml:106: update your workflow using https://app.stepsecurity.io/secureworkflow/cloudflare/circl/ci-actions.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-actions.yml:123: update your workflow using https://app.stepsecurity.io/secureworkflow/cloudflare/circl/ci-actions.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-actions.yml:125: update your workflow using https://app.stepsecurity.io/secureworkflow/cloudflare/circl/ci-actions.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-actions.yml:129: update your workflow using https://app.stepsecurity.io/secureworkflow/cloudflare/circl/ci-actions.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-actions.yml:133: update your workflow using https://app.stepsecurity.io/secureworkflow/cloudflare/circl/ci-actions.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-actions.yml:19: update your workflow using https://app.stepsecurity.io/secureworkflow/cloudflare/circl/ci-actions.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-actions.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/cloudflare/circl/ci-actions.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci-actions.yml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/cloudflare/circl/ci-actions.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-actions.yml:51: update your workflow using https://app.stepsecurity.io/secureworkflow/cloudflare/circl/ci-actions.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-actions.yml:53: update your workflow using https://app.stepsecurity.io/secureworkflow/cloudflare/circl/ci-actions.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/semgrep.yml:23: update your workflow using https://app.stepsecurity.io/secureworkflow/cloudflare/circl/semgrep.yml/main?enable=pin","Warn: goCommand not pinned by hash: .github/workflows/ci-actions.yml:30","Info:   0 out of  15 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of   2 third-party GitHubAction dependencies pinned","Info:   0 out of   1 goCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Branch-Protection","score":5,"reason":"branch protection is not maximal on development and all release branches","details":["Info: 'allow deletion' disabled on branch 'main'","Info: 'force pushes' disabled on branch 'main'","Info: 'branch protection settings apply to administrators' is required to merge on branch 'main'","Warn: 'stale review dismissal' is disabled on branch 'main'","Warn: required approving review count is 1 on branch 'main'","Warn: codeowners review is required - but no codeowners file found in repo","Warn: 'last push approval' is disabled on branch 'main'","Warn: no status checks found to merge onto branch 'main'","Info: PRs are required in order to make changes on branch 'main'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"SAST","score":10,"reason":"SAST tool is run on all commits","details":["Info: SAST configuration detected: CodeQL","Info: all commits (30) are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}},{"name":"Vulnerabilities","score":7,"reason":"3 existing vulnerabilities detected","details":["Warn: Project is vulnerable to: GO-2023-2402 / GHSA-45x7-px36-x8w8","Warn: Project is vulnerable to: GO-2024-3321 / GHSA-v778-237x-gjrc","Warn: Project is vulnerable to: GO-2025-3487 / GHSA-hcg3-q754-cr77"],"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}}]},"last_synced_at":"2025-08-15T22:37:59.062Z","repository_id":34948017,"created_at":"2025-08-15T22:37:59.062Z","updated_at":"2025-08-15T22:37:59.062Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":270661505,"owners_count":24624110,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","status":"online","status_checked_at":"2025-08-16T02:00:11.002Z","response_time":91,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"cloudflare","name":"Cloudflare","uuid":"314135","kind":"organization","description":"","email":null,"website":"https://www.cloudflare.com","location":"San Francisco, London, Austin, Lisbon, Singapore","twitter":null,"company":null,"icon_url":"https://avatars.githubusercontent.com/u/314135?v=4","repositories_count":454,"last_synced_at":"2024-04-14T06:37:39.634Z","metadata":{"has_sponsors_listing":false},"html_url":"https://github.com/cloudflare","funding_links":[],"total_stars":143015,"followers":5086,"following":0,"created_at":"2022-11-02T16:32:28.917Z","updated_at":"2024-04-14T06:39:14.488Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/cloudflare","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/cloudflare/repositories"},"tags":[{"name":"v1.6.1","sha":"c6d33e35234ebf5c4319d12ae7d77d7d17053e56","kind":"commit","published_at":"2025-04-09T16:57:45.000Z","download_url":"https://codeload.github.com/cloudflare/circl/tar.gz/v1.6.1","html_url":"https://github.com/cloudflare/circl/releases/tag/v1.6.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/cloudflare/circl@v1.6.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.6.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.6.1/manifests"},{"name":"v1.6.0","sha":"89e658c2ea39d3cfea7b7c7c8b34ebdbd6d21942","kind":"commit","published_at":"2025-02-04T23:02:19.000Z","download_url":"https://codeload.github.com/cloudflare/circl/tar.gz/v1.6.0","html_url":"https://github.com/cloudflare/circl/releases/tag/v1.6.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/cloudflare/circl@v1.6.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.6.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.6.0/manifests"},{"name":"v1.5.0","sha":"1310edfc1c8a602380c10a469095a3c0b2bd7213","kind":"commit","published_at":"2024-10-10T23:00:31.000Z","download_url":"https://codeload.github.com/cloudflare/circl/tar.gz/v1.5.0","html_url":"https://github.com/cloudflare/circl/releases/tag/v1.5.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/cloudflare/circl@v1.5.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.5.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.5.0/manifests"},{"name":"v1.4.0","sha":"c311e4685e7c83e5f127ac24a2195470da2ab490","kind":"commit","published_at":"2024-08-20T15:44:35.000Z","download_url":"https://codeload.github.com/cloudflare/circl/tar.gz/v1.4.0","html_url":"https://github.com/cloudflare/circl/releases/tag/v1.4.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/cloudflare/circl@v1.4.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.4.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.4.0/manifests"},{"name":"v1.3.9","sha":"75b28edc25ec569e6353a2b944b0b83d48a9c2e8","kind":"commit","published_at":"2024-06-11T17:09:45.000Z","download_url":"https://codeload.github.com/cloudflare/circl/tar.gz/v1.3.9","html_url":"https://github.com/cloudflare/circl/releases/tag/v1.3.9","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/cloudflare/circl@v1.3.9","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.3.9","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.3.9/manifests"},{"name":"v1.3.8","sha":"4bb560182ad7861f26589f3a946304bcbf07110a","kind":"commit","published_at":"2024-04-24T19:38:57.000Z","download_url":"https://codeload.github.com/cloudflare/circl/tar.gz/v1.3.8","html_url":"https://github.com/cloudflare/circl/releases/tag/v1.3.8","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/cloudflare/circl@v1.3.8","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.3.8","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.3.8/manifests"},{"name":"v1.3.7","sha":"c48866b3068dfa83721c021dec03c777ba91abab","kind":"commit","published_at":"2024-01-01T21:04:53.000Z","download_url":"https://codeload.github.com/cloudflare/circl/tar.gz/v1.3.7","html_url":"https://github.com/cloudflare/circl/releases/tag/v1.3.7","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/cloudflare/circl@v1.3.7","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.3.7","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.3.7/manifests"},{"name":"v1.3.6","sha":"99f0f715ca5fbec868f5a0db1df2be6dcd28dbaa","kind":"commit","published_at":"2023-10-27T22:48:50.000Z","download_url":"https://codeload.github.com/cloudflare/circl/tar.gz/v1.3.6","html_url":"https://github.com/cloudflare/circl/releases/tag/v1.3.6","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/cloudflare/circl@v1.3.6","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.3.6","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.3.6/manifests"},{"name":"v1.3.5","sha":"13e767c5c3da5ef4e3df65dfaf7589ccabc0d1e1","kind":"tag","published_at":"2023-10-17T15:05:51.000Z","download_url":"https://codeload.github.com/cloudflare/circl/tar.gz/v1.3.5","html_url":"https://github.com/cloudflare/circl/releases/tag/v1.3.5","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/cloudflare/circl@v1.3.5","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.3.5","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.3.5/manifests"},{"name":"v1.3.4","sha":"13e767c5c3da5ef4e3df65dfaf7589ccabc0d1e1","kind":"tag","published_at":"2023-10-17T14:58:57.000Z","download_url":"https://codeload.github.com/cloudflare/circl/tar.gz/v1.3.4","html_url":"https://github.com/cloudflare/circl/releases/tag/v1.3.4","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/cloudflare/circl@v1.3.4","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.3.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.3.4/manifests"},{"name":"v1.3.3","sha":"3bef500f2b925f150815a360b90081021e082939","kind":"commit","published_at":"2023-05-02T10:44:30.000Z","download_url":"https://codeload.github.com/cloudflare/circl/tar.gz/v1.3.3","html_url":"https://github.com/cloudflare/circl/releases/tag/v1.3.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/cloudflare/circl@v1.3.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.3.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.3.3/manifests"},{"name":"v1.3.2","sha":"769d73f14c245a9a54a860640516c1b799a398d0","kind":"commit","published_at":"2023-01-31T00:03:24.000Z","download_url":"https://codeload.github.com/cloudflare/circl/tar.gz/v1.3.2","html_url":"https://github.com/cloudflare/circl/releases/tag/v1.3.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/cloudflare/circl@v1.3.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.3.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.3.2/manifests"},{"name":"v1.3.1","sha":"459b64f53bc65c6ef18923652e59d8d28da75057","kind":"tag","published_at":"2022-12-19T10:53:14.000Z","download_url":"https://codeload.github.com/cloudflare/circl/tar.gz/v1.3.1","html_url":"https://github.com/cloudflare/circl/releases/tag/v1.3.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/cloudflare/circl@v1.3.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.3.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.3.1/manifests"},{"name":"v1.3.0","sha":"c56c51d2526f71be07939782d59d1a98744e062c","kind":"commit","published_at":"2022-11-11T01:07:31.000Z","download_url":"https://codeload.github.com/cloudflare/circl/tar.gz/v1.3.0","html_url":"https://github.com/cloudflare/circl/releases/tag/v1.3.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/cloudflare/circl@v1.3.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.3.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.3.0/manifests"},{"name":"v1.2.0","sha":"f18784e287f0c586dcbb2c5b7045d7f3080d119b","kind":"commit","published_at":"2022-06-15T00:49:08.000Z","download_url":"https://codeload.github.com/cloudflare/circl/tar.gz/v1.2.0","html_url":"https://github.com/cloudflare/circl/releases/tag/v1.2.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/cloudflare/circl@v1.2.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.2.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.2.0/manifests"},{"name":"v1.1.0","sha":"0518755fbebe2aeb3cf6e71ac533b61602ec8e4a","kind":"commit","published_at":"2021-10-13T00:08:50.000Z","download_url":"https://codeload.github.com/cloudflare/circl/tar.gz/v1.1.0","html_url":"https://github.com/cloudflare/circl/releases/tag/v1.1.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/cloudflare/circl@v1.1.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.1.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.1.0/manifests"},{"name":"v1.0.0","sha":"a03c5a147111a46165b047f49053ec510d5582b4","kind":"commit","published_at":"2019-07-10T17:39:44.000Z","download_url":"https://codeload.github.com/cloudflare/circl/tar.gz/v1.0.0","html_url":"https://github.com/cloudflare/circl/releases/tag/v1.0.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/cloudflare/circl@v1.0.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.0.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.0.0/manifests"}]},"repo_metadata_updated_at":"2025-08-16T03:16:52.879Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":6.326193012462012,"dependent_packages_count":5.928731576797648,"stargazers_count":1.9331065958199505,"forks_count":2.272220451443496,"docker_downloads_count":null,"average":4.115062909130777},"purl":"pkg:golang/github.com/cloudflare/circl/dh/x448","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/go/github.com/cloudflare/circl/dh/x448","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/go/github.com/cloudflare/circl/dh/x448","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/go/github.com/cloudflare/circl/dh/x448/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2025-08-07T03:14:56.558Z","issues_count":63,"pull_requests_count":145,"avg_time_to_close_issue":14312665.555555556,"avg_time_to_close_pull_request":2838644.4112903224,"issues_closed_count":45,"pull_requests_closed_count":124,"pull_request_authors_count":25,"issue_authors_count":42,"avg_comments_per_issue":2.492063492063492,"avg_comments_per_pull_request":1.1724137931034484,"merged_pull_requests_count":116,"bot_issues_count":0,"bot_pull_requests_count":2,"past_year_issues_count":19,"past_year_pull_requests_count":23,"past_year_avg_time_to_close_issue":3478759.5,"past_year_avg_time_to_close_pull_request":330228.8333333333,"past_year_issues_closed_count":12,"past_year_pull_requests_closed_count":18,"past_year_pull_request_authors_count":7,"past_year_issue_authors_count":15,"past_year_avg_comments_per_issue":2.4210526315789473,"past_year_avg_comments_per_pull_request":0.4782608695652174,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":1,"past_year_merged_pull_requests_count":18,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/issues","maintainers":[{"login":"bwesterb","count":29,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/bwesterb"}],"active_maintainers":[{"login":"bwesterb","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/bwesterb"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fcloudflare%2Fcircl%2Fdh%2Fx448/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fcloudflare%2Fcircl%2Fdh%2Fx448/version_numbers","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fcloudflare%2Fcircl%2Fdh%2Fx448/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fcloudflare%2Fcircl%2Fdh%2Fx448/related_packages","maintainers":[],"registry":{"name":"proxy.golang.org","url":"https://proxy.golang.org","ecosystem":"go","default":true,"packages_count":1951676,"maintainers_count":0,"namespaces_count":741275,"keywords_count":109185,"github":"golang","metadata":{"funded_packages_count":49011},"icon_url":"https://github.com/golang.png","created_at":"2022-04-04T15:19:22.939Z","updated_at":"2025-09-05T05:14:06.439Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/namespaces"}},{"id":5351865,"name":"github.com/cloudflare/circl/simd/keccakf1600/internal/asm","ecosystem":"go","description":"","homepage":"https://github.com/cloudflare/circl","licenses":"BSD-3-Clause","normalized_licenses":["BSD-3-Clause"],"repository_url":"https://github.com/cloudflare/circl","keywords_array":[],"namespace":"github.com/cloudflare/circl/simd/keccakf1600/internal","versions_count":25,"first_release_published_at":"2022-08-09T20:56:28.000Z","latest_release_published_at":"2024-01-03T12:02:15.000Z","latest_release_number":"v0.0.0-20240103120215-ede59c5caa02","last_synced_at":"2025-08-15T22:52:57.103Z","created_at":"2022-10-18T03:14:08.324Z","updated_at":"2025-08-16T03:16:52.879Z","registry_url":"https://pkg.go.dev/github.com/cloudflare/circl/simd/keccakf1600/internal/asm","install_command":"go get github.com/cloudflare/circl/simd/keccakf1600/internal/asm","documentation_url":"https://pkg.go.dev/github.com/cloudflare/circl/simd/keccakf1600/internal/asm#section-documentation","metadata":{},"repo_metadata":{"id":34948017,"uuid":"147963112","full_name":"cloudflare/circl","owner":"cloudflare","description":"CIRCL: Cloudflare Interoperable Reusable Cryptographic Library","archived":false,"fork":false,"pushed_at":"2025-08-15T20:14:51.000Z","size":74076,"stargazers_count":1496,"open_issues_count":57,"forks_count":174,"subscribers_count":42,"default_branch":"main","last_synced_at":"2025-08-15T22:37:56.064Z","etag":null,"topics":["circl","cryptography","csidh","dilithium","ed25519","ed448","elliptic-curves","go","golang","hpke","kyber","pki","post-quantum","sidh"],"latest_commit_sha":null,"homepage":"http://blog.cloudflare.com/introducing-circl","language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"other","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/cloudflare.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":"CITATION.cff","codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null}},"created_at":"2018-09-08T19:20:52.000Z","updated_at":"2025-08-15T20:14:56.000Z","dependencies_parsed_at":"2023-10-14T23:12:28.417Z","dependency_job_id":"2f68d1b7-6d19-4256-a6da-b76621a547e1","html_url":"https://github.com/cloudflare/circl","commit_stats":{"total_commits":525,"total_committers":26,"mean_commits":"20.192307692307693","dds":0.56,"last_synced_commit":"795540340d5c79e5768a0135741cd7c3e5f7de93"},"previous_names":[],"tags_count":17,"template":false,"template_full_name":null,"purl":"pkg:github/cloudflare/circl","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/cloudflare","download_url":"https://codeload.github.com/cloudflare/circl/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/sbom","scorecard":{"id":114063,"data":{"date":"2025-08-11","repo":{"name":"github.com/cloudflare/circl","commit":"8bb97daafea779c72d51ec39a604913d3c30bda3"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":7.3,"checks":[{"name":"Maintained","score":10,"reason":"30 commit(s) and 1 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Code-Review","score":10,"reason":"all changesets reviewed","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: jobLevel 'actions' permission set to 'read': .github/workflows/ci-actions.yml:117","Info: jobLevel 'contents' permission set to 'read': .github/workflows/ci-actions.yml:118","Warn: no topLevel permission defined: .github/workflows/ci-actions.yml:1","Warn: no topLevel permission defined: .github/workflows/semgrep.yml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"License","score":9,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Warn: project license file does not contain an FSF or OSI license."],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Fuzzing","score":10,"reason":"project is fuzzed","details":["Info: OSSFuzz integration found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: github.com/cloudflare/.github/SECURITY.md:1","Info: Found linked content: github.com/cloudflare/.github/SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: github.com/cloudflare/.github/SECURITY.md:1","Info: Found text in security policy: github.com/cloudflare/.github/SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-actions.yml:66: update your workflow using https://app.stepsecurity.io/secureworkflow/cloudflare/circl/ci-actions.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-actions.yml:68: update your workflow using https://app.stepsecurity.io/secureworkflow/cloudflare/circl/ci-actions.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-actions.yml:82: update your workflow using https://app.stepsecurity.io/secureworkflow/cloudflare/circl/ci-actions.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-actions.yml:84: update your workflow using https://app.stepsecurity.io/secureworkflow/cloudflare/circl/ci-actions.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci-actions.yml:90: update your workflow using https://app.stepsecurity.io/secureworkflow/cloudflare/circl/ci-actions.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-actions.yml:104: update your workflow using https://app.stepsecurity.io/secureworkflow/cloudflare/circl/ci-actions.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-actions.yml:106: update your workflow using https://app.stepsecurity.io/secureworkflow/cloudflare/circl/ci-actions.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-actions.yml:123: update your workflow using https://app.stepsecurity.io/secureworkflow/cloudflare/circl/ci-actions.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-actions.yml:125: update your workflow using https://app.stepsecurity.io/secureworkflow/cloudflare/circl/ci-actions.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-actions.yml:129: update your workflow using https://app.stepsecurity.io/secureworkflow/cloudflare/circl/ci-actions.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-actions.yml:133: update your workflow using https://app.stepsecurity.io/secureworkflow/cloudflare/circl/ci-actions.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-actions.yml:19: update your workflow using https://app.stepsecurity.io/secureworkflow/cloudflare/circl/ci-actions.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-actions.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/cloudflare/circl/ci-actions.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci-actions.yml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/cloudflare/circl/ci-actions.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-actions.yml:51: update your workflow using https://app.stepsecurity.io/secureworkflow/cloudflare/circl/ci-actions.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-actions.yml:53: update your workflow using https://app.stepsecurity.io/secureworkflow/cloudflare/circl/ci-actions.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/semgrep.yml:23: update your workflow using https://app.stepsecurity.io/secureworkflow/cloudflare/circl/semgrep.yml/main?enable=pin","Warn: goCommand not pinned by hash: .github/workflows/ci-actions.yml:30","Info:   0 out of  15 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of   2 third-party GitHubAction dependencies pinned","Info:   0 out of   1 goCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Branch-Protection","score":5,"reason":"branch protection is not maximal on development and all release branches","details":["Info: 'allow deletion' disabled on branch 'main'","Info: 'force pushes' disabled on branch 'main'","Info: 'branch protection settings apply to administrators' is required to merge on branch 'main'","Warn: 'stale review dismissal' is disabled on branch 'main'","Warn: required approving review count is 1 on branch 'main'","Warn: codeowners review is required - but no codeowners file found in repo","Warn: 'last push approval' is disabled on branch 'main'","Warn: no status checks found to merge onto branch 'main'","Info: PRs are required in order to make changes on branch 'main'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"SAST","score":10,"reason":"SAST tool is run on all commits","details":["Info: SAST configuration detected: CodeQL","Info: all commits (30) are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}},{"name":"Vulnerabilities","score":7,"reason":"3 existing vulnerabilities detected","details":["Warn: Project is vulnerable to: GO-2023-2402 / GHSA-45x7-px36-x8w8","Warn: Project is vulnerable to: GO-2024-3321 / GHSA-v778-237x-gjrc","Warn: Project is vulnerable to: GO-2025-3487 / GHSA-hcg3-q754-cr77"],"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}}]},"last_synced_at":"2025-08-15T22:37:59.062Z","repository_id":34948017,"created_at":"2025-08-15T22:37:59.062Z","updated_at":"2025-08-15T22:37:59.062Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":270661505,"owners_count":24624110,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","status":"online","status_checked_at":"2025-08-16T02:00:11.002Z","response_time":91,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"cloudflare","name":"Cloudflare","uuid":"314135","kind":"organization","description":"","email":null,"website":"https://www.cloudflare.com","location":"San Francisco, London, Austin, Lisbon, Singapore","twitter":null,"company":null,"icon_url":"https://avatars.githubusercontent.com/u/314135?v=4","repositories_count":454,"last_synced_at":"2024-04-14T06:37:39.634Z","metadata":{"has_sponsors_listing":false},"html_url":"https://github.com/cloudflare","funding_links":[],"total_stars":143015,"followers":5086,"following":0,"created_at":"2022-11-02T16:32:28.917Z","updated_at":"2024-04-14T06:39:14.488Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/cloudflare","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/cloudflare/repositories"},"tags":[{"name":"v1.6.1","sha":"c6d33e35234ebf5c4319d12ae7d77d7d17053e56","kind":"commit","published_at":"2025-04-09T16:57:45.000Z","download_url":"https://codeload.github.com/cloudflare/circl/tar.gz/v1.6.1","html_url":"https://github.com/cloudflare/circl/releases/tag/v1.6.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/cloudflare/circl@v1.6.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.6.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.6.1/manifests"},{"name":"v1.6.0","sha":"89e658c2ea39d3cfea7b7c7c8b34ebdbd6d21942","kind":"commit","published_at":"2025-02-04T23:02:19.000Z","download_url":"https://codeload.github.com/cloudflare/circl/tar.gz/v1.6.0","html_url":"https://github.com/cloudflare/circl/releases/tag/v1.6.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/cloudflare/circl@v1.6.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.6.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.6.0/manifests"},{"name":"v1.5.0","sha":"1310edfc1c8a602380c10a469095a3c0b2bd7213","kind":"commit","published_at":"2024-10-10T23:00:31.000Z","download_url":"https://codeload.github.com/cloudflare/circl/tar.gz/v1.5.0","html_url":"https://github.com/cloudflare/circl/releases/tag/v1.5.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/cloudflare/circl@v1.5.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.5.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.5.0/manifests"},{"name":"v1.4.0","sha":"c311e4685e7c83e5f127ac24a2195470da2ab490","kind":"commit","published_at":"2024-08-20T15:44:35.000Z","download_url":"https://codeload.github.com/cloudflare/circl/tar.gz/v1.4.0","html_url":"https://github.com/cloudflare/circl/releases/tag/v1.4.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/cloudflare/circl@v1.4.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.4.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.4.0/manifests"},{"name":"v1.3.9","sha":"75b28edc25ec569e6353a2b944b0b83d48a9c2e8","kind":"commit","published_at":"2024-06-11T17:09:45.000Z","download_url":"https://codeload.github.com/cloudflare/circl/tar.gz/v1.3.9","html_url":"https://github.com/cloudflare/circl/releases/tag/v1.3.9","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/cloudflare/circl@v1.3.9","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.3.9","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.3.9/manifests"},{"name":"v1.3.8","sha":"4bb560182ad7861f26589f3a946304bcbf07110a","kind":"commit","published_at":"2024-04-24T19:38:57.000Z","download_url":"https://codeload.github.com/cloudflare/circl/tar.gz/v1.3.8","html_url":"https://github.com/cloudflare/circl/releases/tag/v1.3.8","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/cloudflare/circl@v1.3.8","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.3.8","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.3.8/manifests"},{"name":"v1.3.7","sha":"c48866b3068dfa83721c021dec03c777ba91abab","kind":"commit","published_at":"2024-01-01T21:04:53.000Z","download_url":"https://codeload.github.com/cloudflare/circl/tar.gz/v1.3.7","html_url":"https://github.com/cloudflare/circl/releases/tag/v1.3.7","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/cloudflare/circl@v1.3.7","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.3.7","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.3.7/manifests"},{"name":"v1.3.6","sha":"99f0f715ca5fbec868f5a0db1df2be6dcd28dbaa","kind":"commit","published_at":"2023-10-27T22:48:50.000Z","download_url":"https://codeload.github.com/cloudflare/circl/tar.gz/v1.3.6","html_url":"https://github.com/cloudflare/circl/releases/tag/v1.3.6","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/cloudflare/circl@v1.3.6","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.3.6","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.3.6/manifests"},{"name":"v1.3.5","sha":"13e767c5c3da5ef4e3df65dfaf7589ccabc0d1e1","kind":"tag","published_at":"2023-10-17T15:05:51.000Z","download_url":"https://codeload.github.com/cloudflare/circl/tar.gz/v1.3.5","html_url":"https://github.com/cloudflare/circl/releases/tag/v1.3.5","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/cloudflare/circl@v1.3.5","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.3.5","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.3.5/manifests"},{"name":"v1.3.4","sha":"13e767c5c3da5ef4e3df65dfaf7589ccabc0d1e1","kind":"tag","published_at":"2023-10-17T14:58:57.000Z","download_url":"https://codeload.github.com/cloudflare/circl/tar.gz/v1.3.4","html_url":"https://github.com/cloudflare/circl/releases/tag/v1.3.4","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/cloudflare/circl@v1.3.4","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.3.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.3.4/manifests"},{"name":"v1.3.3","sha":"3bef500f2b925f150815a360b90081021e082939","kind":"commit","published_at":"2023-05-02T10:44:30.000Z","download_url":"https://codeload.github.com/cloudflare/circl/tar.gz/v1.3.3","html_url":"https://github.com/cloudflare/circl/releases/tag/v1.3.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/cloudflare/circl@v1.3.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.3.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.3.3/manifests"},{"name":"v1.3.2","sha":"769d73f14c245a9a54a860640516c1b799a398d0","kind":"commit","published_at":"2023-01-31T00:03:24.000Z","download_url":"https://codeload.github.com/cloudflare/circl/tar.gz/v1.3.2","html_url":"https://github.com/cloudflare/circl/releases/tag/v1.3.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/cloudflare/circl@v1.3.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.3.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.3.2/manifests"},{"name":"v1.3.1","sha":"459b64f53bc65c6ef18923652e59d8d28da75057","kind":"tag","published_at":"2022-12-19T10:53:14.000Z","download_url":"https://codeload.github.com/cloudflare/circl/tar.gz/v1.3.1","html_url":"https://github.com/cloudflare/circl/releases/tag/v1.3.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/cloudflare/circl@v1.3.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.3.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.3.1/manifests"},{"name":"v1.3.0","sha":"c56c51d2526f71be07939782d59d1a98744e062c","kind":"commit","published_at":"2022-11-11T01:07:31.000Z","download_url":"https://codeload.github.com/cloudflare/circl/tar.gz/v1.3.0","html_url":"https://github.com/cloudflare/circl/releases/tag/v1.3.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/cloudflare/circl@v1.3.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.3.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.3.0/manifests"},{"name":"v1.2.0","sha":"f18784e287f0c586dcbb2c5b7045d7f3080d119b","kind":"commit","published_at":"2022-06-15T00:49:08.000Z","download_url":"https://codeload.github.com/cloudflare/circl/tar.gz/v1.2.0","html_url":"https://github.com/cloudflare/circl/releases/tag/v1.2.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/cloudflare/circl@v1.2.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.2.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.2.0/manifests"},{"name":"v1.1.0","sha":"0518755fbebe2aeb3cf6e71ac533b61602ec8e4a","kind":"commit","published_at":"2021-10-13T00:08:50.000Z","download_url":"https://codeload.github.com/cloudflare/circl/tar.gz/v1.1.0","html_url":"https://github.com/cloudflare/circl/releases/tag/v1.1.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/cloudflare/circl@v1.1.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.1.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.1.0/manifests"},{"name":"v1.0.0","sha":"a03c5a147111a46165b047f49053ec510d5582b4","kind":"commit","published_at":"2019-07-10T17:39:44.000Z","download_url":"https://codeload.github.com/cloudflare/circl/tar.gz/v1.0.0","html_url":"https://github.com/cloudflare/circl/releases/tag/v1.0.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/cloudflare/circl@v1.0.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.0.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.0.0/manifests"}]},"repo_metadata_updated_at":"2025-08-16T03:16:52.878Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":9.345852080216646,"dependent_packages_count":6.999148183520997,"stargazers_count":1.361110705840498,"forks_count":1.7230485378272733,"average":4.857289876851354},"purl":"pkg:golang/github.com/cloudflare/circl/simd/keccakf1600/internal/asm","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/go/github.com/cloudflare/circl/simd/keccakf1600/internal/asm","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/go/github.com/cloudflare/circl/simd/keccakf1600/internal/asm","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/go/github.com/cloudflare/circl/simd/keccakf1600/internal/asm/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2025-08-07T03:14:56.558Z","issues_count":63,"pull_requests_count":145,"avg_time_to_close_issue":14312665.555555556,"avg_time_to_close_pull_request":2838644.4112903224,"issues_closed_count":45,"pull_requests_closed_count":124,"pull_request_authors_count":25,"issue_authors_count":42,"avg_comments_per_issue":2.492063492063492,"avg_comments_per_pull_request":1.1724137931034484,"merged_pull_requests_count":116,"bot_issues_count":0,"bot_pull_requests_count":2,"past_year_issues_count":19,"past_year_pull_requests_count":23,"past_year_avg_time_to_close_issue":3478759.5,"past_year_avg_time_to_close_pull_request":330228.8333333333,"past_year_issues_closed_count":12,"past_year_pull_requests_closed_count":18,"past_year_pull_request_authors_count":7,"past_year_issue_authors_count":15,"past_year_avg_comments_per_issue":2.4210526315789473,"past_year_avg_comments_per_pull_request":0.4782608695652174,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":1,"past_year_merged_pull_requests_count":18,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/issues","maintainers":[{"login":"bwesterb","count":29,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/bwesterb"}],"active_maintainers":[{"login":"bwesterb","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/bwesterb"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fcloudflare%2Fcircl%2Fsimd%2Fkeccakf1600%2Finternal%2Fasm/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fcloudflare%2Fcircl%2Fsimd%2Fkeccakf1600%2Finternal%2Fasm/version_numbers","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fcloudflare%2Fcircl%2Fsimd%2Fkeccakf1600%2Finternal%2Fasm/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fcloudflare%2Fcircl%2Fsimd%2Fkeccakf1600%2Finternal%2Fasm/related_packages","maintainers":[],"registry":{"name":"proxy.golang.org","url":"https://proxy.golang.org","ecosystem":"go","default":true,"packages_count":1951676,"maintainers_count":0,"namespaces_count":741275,"keywords_count":109185,"github":"golang","metadata":{"funded_packages_count":49011},"icon_url":"https://github.com/golang.png","created_at":"2022-04-04T15:19:22.939Z","updated_at":"2025-09-05T05:14:06.439Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/namespaces"}},{"id":11945875,"name":"github.com/Cloudflare/circl","ecosystem":"go","description":null,"homepage":null,"licenses":"other","normalized_licenses":["GPL-1.0+"],"repository_url":"https://github.com/Cloudflare/circl","keywords_array":[],"namespace":null,"versions_count":17,"first_release_published_at":"2019-07-10T17:39:44.000Z","latest_release_published_at":"2025-04-09T16:57:45.000Z","latest_release_number":"v1.6.1","last_synced_at":"2025-08-15T22:53:01.146Z","created_at":"2025-07-25T10:03:30.420Z","updated_at":"2025-08-16T03:16:52.903Z","registry_url":"https://pkg.go.dev/github.com/Cloudflare/circl","install_command":"go get github.com/Cloudflare/circl","documentation_url":"https://pkg.go.dev/github.com/Cloudflare/circl#section-documentation","metadata":{},"repo_metadata":{"id":34948017,"uuid":"147963112","full_name":"cloudflare/circl","owner":"cloudflare","description":"CIRCL: Cloudflare Interoperable Reusable Cryptographic Library","archived":false,"fork":false,"pushed_at":"2025-08-15T20:14:51.000Z","size":74076,"stargazers_count":1496,"open_issues_count":57,"forks_count":174,"subscribers_count":42,"default_branch":"main","last_synced_at":"2025-08-15T22:37:56.064Z","etag":null,"topics":["circl","cryptography","csidh","dilithium","ed25519","ed448","elliptic-curves","go","golang","hpke","kyber","pki","post-quantum","sidh"],"latest_commit_sha":null,"homepage":"http://blog.cloudflare.com/introducing-circl","language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"other","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/cloudflare.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":"CITATION.cff","codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null}},"created_at":"2018-09-08T19:20:52.000Z","updated_at":"2025-08-15T20:14:56.000Z","dependencies_parsed_at":"2023-10-14T23:12:28.417Z","dependency_job_id":"2f68d1b7-6d19-4256-a6da-b76621a547e1","html_url":"https://github.com/cloudflare/circl","commit_stats":{"total_commits":525,"total_committers":26,"mean_commits":"20.192307692307693","dds":0.56,"last_synced_commit":"795540340d5c79e5768a0135741cd7c3e5f7de93"},"previous_names":[],"tags_count":17,"template":false,"template_full_name":null,"purl":"pkg:github/cloudflare/circl","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/cloudflare","download_url":"https://codeload.github.com/cloudflare/circl/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/sbom","scorecard":{"id":114063,"data":{"date":"2025-08-11","repo":{"name":"github.com/cloudflare/circl","commit":"8bb97daafea779c72d51ec39a604913d3c30bda3"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":7.3,"checks":[{"name":"Maintained","score":10,"reason":"30 commit(s) and 1 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Code-Review","score":10,"reason":"all changesets reviewed","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: jobLevel 'actions' permission set to 'read': .github/workflows/ci-actions.yml:117","Info: jobLevel 'contents' permission set to 'read': .github/workflows/ci-actions.yml:118","Warn: no topLevel permission defined: .github/workflows/ci-actions.yml:1","Warn: no topLevel permission defined: .github/workflows/semgrep.yml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"License","score":9,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Warn: project license file does not contain an FSF or OSI license."],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Fuzzing","score":10,"reason":"project is fuzzed","details":["Info: OSSFuzz integration found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: github.com/cloudflare/.github/SECURITY.md:1","Info: Found linked content: github.com/cloudflare/.github/SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: github.com/cloudflare/.github/SECURITY.md:1","Info: Found text in security policy: github.com/cloudflare/.github/SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-actions.yml:66: update your workflow using https://app.stepsecurity.io/secureworkflow/cloudflare/circl/ci-actions.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-actions.yml:68: update your workflow using https://app.stepsecurity.io/secureworkflow/cloudflare/circl/ci-actions.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-actions.yml:82: update your workflow using https://app.stepsecurity.io/secureworkflow/cloudflare/circl/ci-actions.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-actions.yml:84: update your workflow using https://app.stepsecurity.io/secureworkflow/cloudflare/circl/ci-actions.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci-actions.yml:90: update your workflow using https://app.stepsecurity.io/secureworkflow/cloudflare/circl/ci-actions.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-actions.yml:104: update your workflow using https://app.stepsecurity.io/secureworkflow/cloudflare/circl/ci-actions.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-actions.yml:106: update your workflow using https://app.stepsecurity.io/secureworkflow/cloudflare/circl/ci-actions.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-actions.yml:123: update your workflow using https://app.stepsecurity.io/secureworkflow/cloudflare/circl/ci-actions.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-actions.yml:125: update your workflow using https://app.stepsecurity.io/secureworkflow/cloudflare/circl/ci-actions.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-actions.yml:129: update your workflow using https://app.stepsecurity.io/secureworkflow/cloudflare/circl/ci-actions.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-actions.yml:133: update your workflow using https://app.stepsecurity.io/secureworkflow/cloudflare/circl/ci-actions.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-actions.yml:19: update your workflow using https://app.stepsecurity.io/secureworkflow/cloudflare/circl/ci-actions.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-actions.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/cloudflare/circl/ci-actions.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci-actions.yml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/cloudflare/circl/ci-actions.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-actions.yml:51: update your workflow using https://app.stepsecurity.io/secureworkflow/cloudflare/circl/ci-actions.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-actions.yml:53: update your workflow using https://app.stepsecurity.io/secureworkflow/cloudflare/circl/ci-actions.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/semgrep.yml:23: update your workflow using https://app.stepsecurity.io/secureworkflow/cloudflare/circl/semgrep.yml/main?enable=pin","Warn: goCommand not pinned by hash: .github/workflows/ci-actions.yml:30","Info:   0 out of  15 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of   2 third-party GitHubAction dependencies pinned","Info:   0 out of   1 goCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Branch-Protection","score":5,"reason":"branch protection is not maximal on development and all release branches","details":["Info: 'allow deletion' disabled on branch 'main'","Info: 'force pushes' disabled on branch 'main'","Info: 'branch protection settings apply to administrators' is required to merge on branch 'main'","Warn: 'stale review dismissal' is disabled on branch 'main'","Warn: required approving review count is 1 on branch 'main'","Warn: codeowners review is required - but no codeowners file found in repo","Warn: 'last push approval' is disabled on branch 'main'","Warn: no status checks found to merge onto branch 'main'","Info: PRs are required in order to make changes on branch 'main'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"SAST","score":10,"reason":"SAST tool is run on all commits","details":["Info: SAST configuration detected: CodeQL","Info: all commits (30) are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}},{"name":"Vulnerabilities","score":7,"reason":"3 existing vulnerabilities detected","details":["Warn: Project is vulnerable to: GO-2023-2402 / GHSA-45x7-px36-x8w8","Warn: Project is vulnerable to: GO-2024-3321 / GHSA-v778-237x-gjrc","Warn: Project is vulnerable to: GO-2025-3487 / GHSA-hcg3-q754-cr77"],"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}}]},"last_synced_at":"2025-08-15T22:37:59.062Z","repository_id":34948017,"created_at":"2025-08-15T22:37:59.062Z","updated_at":"2025-08-15T22:37:59.062Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":270661505,"owners_count":24624110,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","status":"online","status_checked_at":"2025-08-16T02:00:11.002Z","response_time":91,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"cloudflare","name":"Cloudflare","uuid":"314135","kind":"organization","description":"","email":null,"website":"https://www.cloudflare.com","location":"San Francisco, London, Austin, Lisbon, Singapore","twitter":null,"company":null,"icon_url":"https://avatars.githubusercontent.com/u/314135?v=4","repositories_count":454,"last_synced_at":"2024-04-14T06:37:39.634Z","metadata":{"has_sponsors_listing":false},"html_url":"https://github.com/cloudflare","funding_links":[],"total_stars":143015,"followers":5086,"following":0,"created_at":"2022-11-02T16:32:28.917Z","updated_at":"2024-04-14T06:39:14.488Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/cloudflare","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/cloudflare/repositories"},"tags":[{"name":"v1.6.1","sha":"c6d33e35234ebf5c4319d12ae7d77d7d17053e56","kind":"commit","published_at":"2025-04-09T16:57:45.000Z","download_url":"https://codeload.github.com/cloudflare/circl/tar.gz/v1.6.1","html_url":"https://github.com/cloudflare/circl/releases/tag/v1.6.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/cloudflare/circl@v1.6.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.6.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.6.1/manifests"},{"name":"v1.6.0","sha":"89e658c2ea39d3cfea7b7c7c8b34ebdbd6d21942","kind":"commit","published_at":"2025-02-04T23:02:19.000Z","download_url":"https://codeload.github.com/cloudflare/circl/tar.gz/v1.6.0","html_url":"https://github.com/cloudflare/circl/releases/tag/v1.6.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/cloudflare/circl@v1.6.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.6.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.6.0/manifests"},{"name":"v1.5.0","sha":"1310edfc1c8a602380c10a469095a3c0b2bd7213","kind":"commit","published_at":"2024-10-10T23:00:31.000Z","download_url":"https://codeload.github.com/cloudflare/circl/tar.gz/v1.5.0","html_url":"https://github.com/cloudflare/circl/releases/tag/v1.5.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/cloudflare/circl@v1.5.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.5.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.5.0/manifests"},{"name":"v1.4.0","sha":"c311e4685e7c83e5f127ac24a2195470da2ab490","kind":"commit","published_at":"2024-08-20T15:44:35.000Z","download_url":"https://codeload.github.com/cloudflare/circl/tar.gz/v1.4.0","html_url":"https://github.com/cloudflare/circl/releases/tag/v1.4.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/cloudflare/circl@v1.4.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.4.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.4.0/manifests"},{"name":"v1.3.9","sha":"75b28edc25ec569e6353a2b944b0b83d48a9c2e8","kind":"commit","published_at":"2024-06-11T17:09:45.000Z","download_url":"https://codeload.github.com/cloudflare/circl/tar.gz/v1.3.9","html_url":"https://github.com/cloudflare/circl/releases/tag/v1.3.9","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/cloudflare/circl@v1.3.9","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.3.9","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.3.9/manifests"},{"name":"v1.3.8","sha":"4bb560182ad7861f26589f3a946304bcbf07110a","kind":"commit","published_at":"2024-04-24T19:38:57.000Z","download_url":"https://codeload.github.com/cloudflare/circl/tar.gz/v1.3.8","html_url":"https://github.com/cloudflare/circl/releases/tag/v1.3.8","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/cloudflare/circl@v1.3.8","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.3.8","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.3.8/manifests"},{"name":"v1.3.7","sha":"c48866b3068dfa83721c021dec03c777ba91abab","kind":"commit","published_at":"2024-01-01T21:04:53.000Z","download_url":"https://codeload.github.com/cloudflare/circl/tar.gz/v1.3.7","html_url":"https://github.com/cloudflare/circl/releases/tag/v1.3.7","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/cloudflare/circl@v1.3.7","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.3.7","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.3.7/manifests"},{"name":"v1.3.6","sha":"99f0f715ca5fbec868f5a0db1df2be6dcd28dbaa","kind":"commit","published_at":"2023-10-27T22:48:50.000Z","download_url":"https://codeload.github.com/cloudflare/circl/tar.gz/v1.3.6","html_url":"https://github.com/cloudflare/circl/releases/tag/v1.3.6","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/cloudflare/circl@v1.3.6","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.3.6","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.3.6/manifests"},{"name":"v1.3.5","sha":"13e767c5c3da5ef4e3df65dfaf7589ccabc0d1e1","kind":"tag","published_at":"2023-10-17T15:05:51.000Z","download_url":"https://codeload.github.com/cloudflare/circl/tar.gz/v1.3.5","html_url":"https://github.com/cloudflare/circl/releases/tag/v1.3.5","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/cloudflare/circl@v1.3.5","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.3.5","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.3.5/manifests"},{"name":"v1.3.4","sha":"13e767c5c3da5ef4e3df65dfaf7589ccabc0d1e1","kind":"tag","published_at":"2023-10-17T14:58:57.000Z","download_url":"https://codeload.github.com/cloudflare/circl/tar.gz/v1.3.4","html_url":"https://github.com/cloudflare/circl/releases/tag/v1.3.4","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/cloudflare/circl@v1.3.4","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.3.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.3.4/manifests"},{"name":"v1.3.3","sha":"3bef500f2b925f150815a360b90081021e082939","kind":"commit","published_at":"2023-05-02T10:44:30.000Z","download_url":"https://codeload.github.com/cloudflare/circl/tar.gz/v1.3.3","html_url":"https://github.com/cloudflare/circl/releases/tag/v1.3.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/cloudflare/circl@v1.3.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.3.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.3.3/manifests"},{"name":"v1.3.2","sha":"769d73f14c245a9a54a860640516c1b799a398d0","kind":"commit","published_at":"2023-01-31T00:03:24.000Z","download_url":"https://codeload.github.com/cloudflare/circl/tar.gz/v1.3.2","html_url":"https://github.com/cloudflare/circl/releases/tag/v1.3.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/cloudflare/circl@v1.3.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.3.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.3.2/manifests"},{"name":"v1.3.1","sha":"459b64f53bc65c6ef18923652e59d8d28da75057","kind":"tag","published_at":"2022-12-19T10:53:14.000Z","download_url":"https://codeload.github.com/cloudflare/circl/tar.gz/v1.3.1","html_url":"https://github.com/cloudflare/circl/releases/tag/v1.3.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/cloudflare/circl@v1.3.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.3.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.3.1/manifests"},{"name":"v1.3.0","sha":"c56c51d2526f71be07939782d59d1a98744e062c","kind":"commit","published_at":"2022-11-11T01:07:31.000Z","download_url":"https://codeload.github.com/cloudflare/circl/tar.gz/v1.3.0","html_url":"https://github.com/cloudflare/circl/releases/tag/v1.3.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/cloudflare/circl@v1.3.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.3.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.3.0/manifests"},{"name":"v1.2.0","sha":"f18784e287f0c586dcbb2c5b7045d7f3080d119b","kind":"commit","published_at":"2022-06-15T00:49:08.000Z","download_url":"https://codeload.github.com/cloudflare/circl/tar.gz/v1.2.0","html_url":"https://github.com/cloudflare/circl/releases/tag/v1.2.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/cloudflare/circl@v1.2.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.2.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.2.0/manifests"},{"name":"v1.1.0","sha":"0518755fbebe2aeb3cf6e71ac533b61602ec8e4a","kind":"commit","published_at":"2021-10-13T00:08:50.000Z","download_url":"https://codeload.github.com/cloudflare/circl/tar.gz/v1.1.0","html_url":"https://github.com/cloudflare/circl/releases/tag/v1.1.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/cloudflare/circl@v1.1.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.1.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.1.0/manifests"},{"name":"v1.0.0","sha":"a03c5a147111a46165b047f49053ec510d5582b4","kind":"commit","published_at":"2019-07-10T17:39:44.000Z","download_url":"https://codeload.github.com/cloudflare/circl/tar.gz/v1.0.0","html_url":"https://github.com/cloudflare/circl/releases/tag/v1.0.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/cloudflare/circl@v1.0.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.0.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.0.0/manifests"}]},"repo_metadata_updated_at":"2025-08-16T03:16:52.903Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":5.623201170777509,"dependent_packages_count":5.269121989573931,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":5.446161580175721},"purl":"pkg:golang/github.com/%21cloudflare/circl","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/go/github.com/Cloudflare/circl","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/go/github.com/Cloudflare/circl","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/go/github.com/Cloudflare/circl/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2025-08-07T03:14:56.558Z","issues_count":63,"pull_requests_count":145,"avg_time_to_close_issue":14312665.555555556,"avg_time_to_close_pull_request":2838644.4112903224,"issues_closed_count":45,"pull_requests_closed_count":124,"pull_request_authors_count":25,"issue_authors_count":42,"avg_comments_per_issue":2.492063492063492,"avg_comments_per_pull_request":1.1724137931034484,"merged_pull_requests_count":116,"bot_issues_count":0,"bot_pull_requests_count":2,"past_year_issues_count":19,"past_year_pull_requests_count":23,"past_year_avg_time_to_close_issue":3478759.5,"past_year_avg_time_to_close_pull_request":330228.8333333333,"past_year_issues_closed_count":12,"past_year_pull_requests_closed_count":18,"past_year_pull_request_authors_count":7,"past_year_issue_authors_count":15,"past_year_avg_comments_per_issue":2.4210526315789473,"past_year_avg_comments_per_pull_request":0.4782608695652174,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":1,"past_year_merged_pull_requests_count":18,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/issues","maintainers":[{"login":"bwesterb","count":29,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/bwesterb"}],"active_maintainers":[{"login":"bwesterb","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/bwesterb"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2FCloudflare%2Fcircl/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2FCloudflare%2Fcircl/version_numbers","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2FCloudflare%2Fcircl/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2FCloudflare%2Fcircl/related_packages","maintainers":[],"registry":{"name":"proxy.golang.org","url":"https://proxy.golang.org","ecosystem":"go","default":true,"packages_count":1951676,"maintainers_count":0,"namespaces_count":741275,"keywords_count":109185,"github":"golang","metadata":{"funded_packages_count":49011},"icon_url":"https://github.com/golang.png","created_at":"2022-04-04T15:19:22.939Z","updated_at":"2025-09-05T05:14:06.439Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/namespaces"}},{"id":11151726,"name":"github.com/cloudflare/circl/sign","ecosystem":"go","description":"Package sign provides unified interfaces for signature schemes.\n\nA register of schemes is available in the package","homepage":"https://github.com/cloudflare/circl","licenses":"BSD-3-Clause","normalized_licenses":["BSD-3-Clause"],"repository_url":"https://github.com/cloudflare/circl","keywords_array":[],"namespace":"github.com/cloudflare/circl","versions_count":0,"first_release_published_at":null,"latest_release_published_at":"2025-08-15T22:52:57.453Z","latest_release_number":null,"last_synced_at":"2025-08-15T22:52:57.453Z","created_at":"2024-12-09T16:18:35.402Z","updated_at":"2025-08-16T03:16:54.325Z","registry_url":"https://pkg.go.dev/github.com/cloudflare/circl/sign","install_command":"go get github.com/cloudflare/circl/sign","documentation_url":"https://pkg.go.dev/github.com/cloudflare/circl/sign#section-documentation","metadata":{},"repo_metadata":{"id":34948017,"uuid":"147963112","full_name":"cloudflare/circl","owner":"cloudflare","description":"CIRCL: Cloudflare Interoperable Reusable Cryptographic Library","archived":false,"fork":false,"pushed_at":"2025-08-15T20:14:51.000Z","size":74076,"stargazers_count":1496,"open_issues_count":57,"forks_count":174,"subscribers_count":42,"default_branch":"main","last_synced_at":"2025-08-15T22:37:56.064Z","etag":null,"topics":["circl","cryptography","csidh","dilithium","ed25519","ed448","elliptic-curves","go","golang","hpke","kyber","pki","post-quantum","sidh"],"latest_commit_sha":null,"homepage":"http://blog.cloudflare.com/introducing-circl","language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"other","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/cloudflare.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":"CITATION.cff","codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null}},"created_at":"2018-09-08T19:20:52.000Z","updated_at":"2025-08-15T20:14:56.000Z","dependencies_parsed_at":"2023-10-14T23:12:28.417Z","dependency_job_id":"2f68d1b7-6d19-4256-a6da-b76621a547e1","html_url":"https://github.com/cloudflare/circl","commit_stats":{"total_commits":525,"total_committers":26,"mean_commits":"20.192307692307693","dds":0.56,"last_synced_commit":"795540340d5c79e5768a0135741cd7c3e5f7de93"},"previous_names":[],"tags_count":17,"template":false,"template_full_name":null,"purl":"pkg:github/cloudflare/circl","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/cloudflare","download_url":"https://codeload.github.com/cloudflare/circl/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/sbom","scorecard":{"id":114063,"data":{"date":"2025-08-11","repo":{"name":"github.com/cloudflare/circl","commit":"8bb97daafea779c72d51ec39a604913d3c30bda3"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":7.3,"checks":[{"name":"Maintained","score":10,"reason":"30 commit(s) and 1 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Code-Review","score":10,"reason":"all changesets reviewed","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: jobLevel 'actions' permission set to 'read': .github/workflows/ci-actions.yml:117","Info: jobLevel 'contents' permission set to 'read': .github/workflows/ci-actions.yml:118","Warn: no topLevel permission defined: .github/workflows/ci-actions.yml:1","Warn: no topLevel permission defined: .github/workflows/semgrep.yml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"License","score":9,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Warn: project license file does not contain an FSF or OSI license."],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Fuzzing","score":10,"reason":"project is fuzzed","details":["Info: OSSFuzz integration found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: github.com/cloudflare/.github/SECURITY.md:1","Info: Found linked content: github.com/cloudflare/.github/SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: github.com/cloudflare/.github/SECURITY.md:1","Info: Found text in security policy: github.com/cloudflare/.github/SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-actions.yml:66: update your workflow using https://app.stepsecurity.io/secureworkflow/cloudflare/circl/ci-actions.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-actions.yml:68: update your workflow using https://app.stepsecurity.io/secureworkflow/cloudflare/circl/ci-actions.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-actions.yml:82: update your workflow using https://app.stepsecurity.io/secureworkflow/cloudflare/circl/ci-actions.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-actions.yml:84: update your workflow using https://app.stepsecurity.io/secureworkflow/cloudflare/circl/ci-actions.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci-actions.yml:90: update your workflow using https://app.stepsecurity.io/secureworkflow/cloudflare/circl/ci-actions.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-actions.yml:104: update your workflow using https://app.stepsecurity.io/secureworkflow/cloudflare/circl/ci-actions.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-actions.yml:106: update your workflow using https://app.stepsecurity.io/secureworkflow/cloudflare/circl/ci-actions.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-actions.yml:123: update your workflow using https://app.stepsecurity.io/secureworkflow/cloudflare/circl/ci-actions.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-actions.yml:125: update your workflow using https://app.stepsecurity.io/secureworkflow/cloudflare/circl/ci-actions.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-actions.yml:129: update your workflow using https://app.stepsecurity.io/secureworkflow/cloudflare/circl/ci-actions.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-actions.yml:133: update your workflow using https://app.stepsecurity.io/secureworkflow/cloudflare/circl/ci-actions.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-actions.yml:19: update your workflow using https://app.stepsecurity.io/secureworkflow/cloudflare/circl/ci-actions.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-actions.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/cloudflare/circl/ci-actions.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci-actions.yml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/cloudflare/circl/ci-actions.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-actions.yml:51: update your workflow using https://app.stepsecurity.io/secureworkflow/cloudflare/circl/ci-actions.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-actions.yml:53: update your workflow using https://app.stepsecurity.io/secureworkflow/cloudflare/circl/ci-actions.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/semgrep.yml:23: update your workflow using https://app.stepsecurity.io/secureworkflow/cloudflare/circl/semgrep.yml/main?enable=pin","Warn: goCommand not pinned by hash: .github/workflows/ci-actions.yml:30","Info:   0 out of  15 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of   2 third-party GitHubAction dependencies pinned","Info:   0 out of   1 goCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Branch-Protection","score":5,"reason":"branch protection is not maximal on development and all release branches","details":["Info: 'allow deletion' disabled on branch 'main'","Info: 'force pushes' disabled on branch 'main'","Info: 'branch protection settings apply to administrators' is required to merge on branch 'main'","Warn: 'stale review dismissal' is disabled on branch 'main'","Warn: required approving review count is 1 on branch 'main'","Warn: codeowners review is required - but no codeowners file found in repo","Warn: 'last push approval' is disabled on branch 'main'","Warn: no status checks found to merge onto branch 'main'","Info: PRs are required in order to make changes on branch 'main'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"SAST","score":10,"reason":"SAST tool is run on all commits","details":["Info: SAST configuration detected: CodeQL","Info: all commits (30) are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}},{"name":"Vulnerabilities","score":7,"reason":"3 existing vulnerabilities detected","details":["Warn: Project is vulnerable to: GO-2023-2402 / GHSA-45x7-px36-x8w8","Warn: Project is vulnerable to: GO-2024-3321 / GHSA-v778-237x-gjrc","Warn: Project is vulnerable to: GO-2025-3487 / GHSA-hcg3-q754-cr77"],"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}}]},"last_synced_at":"2025-08-15T22:37:59.062Z","repository_id":34948017,"created_at":"2025-08-15T22:37:59.062Z","updated_at":"2025-08-15T22:37:59.062Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":270661505,"owners_count":24624110,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","status":"online","status_checked_at":"2025-08-16T02:00:11.002Z","response_time":91,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"cloudflare","name":"Cloudflare","uuid":"314135","kind":"organization","description":"","email":null,"website":"https://www.cloudflare.com","location":"San Francisco, London, Austin, Lisbon, Singapore","twitter":null,"company":null,"icon_url":"https://avatars.githubusercontent.com/u/314135?v=4","repositories_count":454,"last_synced_at":"2024-04-14T06:37:39.634Z","metadata":{"has_sponsors_listing":false},"html_url":"https://github.com/cloudflare","funding_links":[],"total_stars":143015,"followers":5086,"following":0,"created_at":"2022-11-02T16:32:28.917Z","updated_at":"2024-04-14T06:39:14.488Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/cloudflare","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/cloudflare/repositories"},"tags":[{"name":"v1.6.1","sha":"c6d33e35234ebf5c4319d12ae7d77d7d17053e56","kind":"commit","published_at":"2025-04-09T16:57:45.000Z","download_url":"https://codeload.github.com/cloudflare/circl/tar.gz/v1.6.1","html_url":"https://github.com/cloudflare/circl/releases/tag/v1.6.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/cloudflare/circl@v1.6.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.6.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.6.1/manifests"},{"name":"v1.6.0","sha":"89e658c2ea39d3cfea7b7c7c8b34ebdbd6d21942","kind":"commit","published_at":"2025-02-04T23:02:19.000Z","download_url":"https://codeload.github.com/cloudflare/circl/tar.gz/v1.6.0","html_url":"https://github.com/cloudflare/circl/releases/tag/v1.6.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/cloudflare/circl@v1.6.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.6.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.6.0/manifests"},{"name":"v1.5.0","sha":"1310edfc1c8a602380c10a469095a3c0b2bd7213","kind":"commit","published_at":"2024-10-10T23:00:31.000Z","download_url":"https://codeload.github.com/cloudflare/circl/tar.gz/v1.5.0","html_url":"https://github.com/cloudflare/circl/releases/tag/v1.5.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/cloudflare/circl@v1.5.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.5.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.5.0/manifests"},{"name":"v1.4.0","sha":"c311e4685e7c83e5f127ac24a2195470da2ab490","kind":"commit","published_at":"2024-08-20T15:44:35.000Z","download_url":"https://codeload.github.com/cloudflare/circl/tar.gz/v1.4.0","html_url":"https://github.com/cloudflare/circl/releases/tag/v1.4.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/cloudflare/circl@v1.4.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.4.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.4.0/manifests"},{"name":"v1.3.9","sha":"75b28edc25ec569e6353a2b944b0b83d48a9c2e8","kind":"commit","published_at":"2024-06-11T17:09:45.000Z","download_url":"https://codeload.github.com/cloudflare/circl/tar.gz/v1.3.9","html_url":"https://github.com/cloudflare/circl/releases/tag/v1.3.9","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/cloudflare/circl@v1.3.9","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.3.9","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.3.9/manifests"},{"name":"v1.3.8","sha":"4bb560182ad7861f26589f3a946304bcbf07110a","kind":"commit","published_at":"2024-04-24T19:38:57.000Z","download_url":"https://codeload.github.com/cloudflare/circl/tar.gz/v1.3.8","html_url":"https://github.com/cloudflare/circl/releases/tag/v1.3.8","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/cloudflare/circl@v1.3.8","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.3.8","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.3.8/manifests"},{"name":"v1.3.7","sha":"c48866b3068dfa83721c021dec03c777ba91abab","kind":"commit","published_at":"2024-01-01T21:04:53.000Z","download_url":"https://codeload.github.com/cloudflare/circl/tar.gz/v1.3.7","html_url":"https://github.com/cloudflare/circl/releases/tag/v1.3.7","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/cloudflare/circl@v1.3.7","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.3.7","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.3.7/manifests"},{"name":"v1.3.6","sha":"99f0f715ca5fbec868f5a0db1df2be6dcd28dbaa","kind":"commit","published_at":"2023-10-27T22:48:50.000Z","download_url":"https://codeload.github.com/cloudflare/circl/tar.gz/v1.3.6","html_url":"https://github.com/cloudflare/circl/releases/tag/v1.3.6","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/cloudflare/circl@v1.3.6","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.3.6","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.3.6/manifests"},{"name":"v1.3.5","sha":"13e767c5c3da5ef4e3df65dfaf7589ccabc0d1e1","kind":"tag","published_at":"2023-10-17T15:05:51.000Z","download_url":"https://codeload.github.com/cloudflare/circl/tar.gz/v1.3.5","html_url":"https://github.com/cloudflare/circl/releases/tag/v1.3.5","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/cloudflare/circl@v1.3.5","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.3.5","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.3.5/manifests"},{"name":"v1.3.4","sha":"13e767c5c3da5ef4e3df65dfaf7589ccabc0d1e1","kind":"tag","published_at":"2023-10-17T14:58:57.000Z","download_url":"https://codeload.github.com/cloudflare/circl/tar.gz/v1.3.4","html_url":"https://github.com/cloudflare/circl/releases/tag/v1.3.4","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/cloudflare/circl@v1.3.4","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.3.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.3.4/manifests"},{"name":"v1.3.3","sha":"3bef500f2b925f150815a360b90081021e082939","kind":"commit","published_at":"2023-05-02T10:44:30.000Z","download_url":"https://codeload.github.com/cloudflare/circl/tar.gz/v1.3.3","html_url":"https://github.com/cloudflare/circl/releases/tag/v1.3.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/cloudflare/circl@v1.3.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.3.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.3.3/manifests"},{"name":"v1.3.2","sha":"769d73f14c245a9a54a860640516c1b799a398d0","kind":"commit","published_at":"2023-01-31T00:03:24.000Z","download_url":"https://codeload.github.com/cloudflare/circl/tar.gz/v1.3.2","html_url":"https://github.com/cloudflare/circl/releases/tag/v1.3.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/cloudflare/circl@v1.3.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.3.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.3.2/manifests"},{"name":"v1.3.1","sha":"459b64f53bc65c6ef18923652e59d8d28da75057","kind":"tag","published_at":"2022-12-19T10:53:14.000Z","download_url":"https://codeload.github.com/cloudflare/circl/tar.gz/v1.3.1","html_url":"https://github.com/cloudflare/circl/releases/tag/v1.3.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/cloudflare/circl@v1.3.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.3.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.3.1/manifests"},{"name":"v1.3.0","sha":"c56c51d2526f71be07939782d59d1a98744e062c","kind":"commit","published_at":"2022-11-11T01:07:31.000Z","download_url":"https://codeload.github.com/cloudflare/circl/tar.gz/v1.3.0","html_url":"https://github.com/cloudflare/circl/releases/tag/v1.3.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/cloudflare/circl@v1.3.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.3.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.3.0/manifests"},{"name":"v1.2.0","sha":"f18784e287f0c586dcbb2c5b7045d7f3080d119b","kind":"commit","published_at":"2022-06-15T00:49:08.000Z","download_url":"https://codeload.github.com/cloudflare/circl/tar.gz/v1.2.0","html_url":"https://github.com/cloudflare/circl/releases/tag/v1.2.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/cloudflare/circl@v1.2.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.2.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.2.0/manifests"},{"name":"v1.1.0","sha":"0518755fbebe2aeb3cf6e71ac533b61602ec8e4a","kind":"commit","published_at":"2021-10-13T00:08:50.000Z","download_url":"https://codeload.github.com/cloudflare/circl/tar.gz/v1.1.0","html_url":"https://github.com/cloudflare/circl/releases/tag/v1.1.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/cloudflare/circl@v1.1.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.1.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.1.0/manifests"},{"name":"v1.0.0","sha":"a03c5a147111a46165b047f49053ec510d5582b4","kind":"commit","published_at":"2019-07-10T17:39:44.000Z","download_url":"https://codeload.github.com/cloudflare/circl/tar.gz/v1.0.0","html_url":"https://github.com/cloudflare/circl/releases/tag/v1.0.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/cloudflare/circl@v1.0.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.0.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.0.0/manifests"}]},"repo_metadata_updated_at":"2025-08-16T03:16:54.325Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":6.326193012462012,"dependent_packages_count":5.928731576797648,"stargazers_count":1.9331065958199505,"forks_count":2.272220451443496,"docker_downloads_count":null,"average":4.115062909130777},"purl":"pkg:golang/github.com/cloudflare/circl/sign","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/go/github.com/cloudflare/circl/sign","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/go/github.com/cloudflare/circl/sign","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/go/github.com/cloudflare/circl/sign/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2025-08-07T03:14:56.558Z","issues_count":63,"pull_requests_count":145,"avg_time_to_close_issue":14312665.555555556,"avg_time_to_close_pull_request":2838644.4112903224,"issues_closed_count":45,"pull_requests_closed_count":124,"pull_request_authors_count":25,"issue_authors_count":42,"avg_comments_per_issue":2.492063492063492,"avg_comments_per_pull_request":1.1724137931034484,"merged_pull_requests_count":116,"bot_issues_count":0,"bot_pull_requests_count":2,"past_year_issues_count":19,"past_year_pull_requests_count":23,"past_year_avg_time_to_close_issue":3478759.5,"past_year_avg_time_to_close_pull_request":330228.8333333333,"past_year_issues_closed_count":12,"past_year_pull_requests_closed_count":18,"past_year_pull_request_authors_count":7,"past_year_issue_authors_count":15,"past_year_avg_comments_per_issue":2.4210526315789473,"past_year_avg_comments_per_pull_request":0.4782608695652174,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":1,"past_year_merged_pull_requests_count":18,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/issues","maintainers":[{"login":"bwesterb","count":29,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/bwesterb"}],"active_maintainers":[{"login":"bwesterb","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/bwesterb"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fcloudflare%2Fcircl%2Fsign/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fcloudflare%2Fcircl%2Fsign/version_numbers","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fcloudflare%2Fcircl%2Fsign/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fcloudflare%2Fcircl%2Fsign/related_packages","maintainers":[],"registry":{"name":"proxy.golang.org","url":"https://proxy.golang.org","ecosystem":"go","default":true,"packages_count":1951676,"maintainers_count":0,"namespaces_count":741275,"keywords_count":109185,"github":"golang","metadata":{"funded_packages_count":49011},"icon_url":"https://github.com/golang.png","created_at":"2022-04-04T15:19:22.939Z","updated_at":"2025-09-05T05:14:06.439Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/namespaces"}},{"id":11151724,"name":"github.com/cloudflare/circl/sign/ed448","ecosystem":"go","description":"Package ed448 implements Ed448 signature scheme as described in RFC-8032.\n\nThis package implements two signature variants.\n\nSpecific functions for sign and verify are defined. A generic signing\nfunction for all schemes is available through the crypto.Signer interface,\nwhich is implemented by the PrivateKey type. A correspond all-in-one\nverification method is provided by the VerifyAny function.\n\nBoth schemes require a context string for domain separation. This parameter\nis passed using a SignerOptions struct defined in this package.\n\nReferences:","homepage":"https://github.com/cloudflare/circl","licenses":"BSD-3-Clause","normalized_licenses":["BSD-3-Clause"],"repository_url":"https://github.com/cloudflare/circl","keywords_array":[],"namespace":"github.com/cloudflare/circl/sign","versions_count":0,"first_release_published_at":null,"latest_release_published_at":"2025-08-15T22:52:57.303Z","latest_release_number":null,"last_synced_at":"2025-08-15T22:52:57.303Z","created_at":"2024-12-09T16:18:35.336Z","updated_at":"2025-08-16T03:16:54.310Z","registry_url":"https://pkg.go.dev/github.com/cloudflare/circl/sign/ed448","install_command":"go get github.com/cloudflare/circl/sign/ed448","documentation_url":"https://pkg.go.dev/github.com/cloudflare/circl/sign/ed448#section-documentation","metadata":{},"repo_metadata":{"id":34948017,"uuid":"147963112","full_name":"cloudflare/circl","owner":"cloudflare","description":"CIRCL: Cloudflare Interoperable Reusable Cryptographic Library","archived":false,"fork":false,"pushed_at":"2025-08-15T20:14:51.000Z","size":74076,"stargazers_count":1496,"open_issues_count":57,"forks_count":174,"subscribers_count":42,"default_branch":"main","last_synced_at":"2025-08-15T22:37:56.064Z","etag":null,"topics":["circl","cryptography","csidh","dilithium","ed25519","ed448","elliptic-curves","go","golang","hpke","kyber","pki","post-quantum","sidh"],"latest_commit_sha":null,"homepage":"http://blog.cloudflare.com/introducing-circl","language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"other","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/cloudflare.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":"CITATION.cff","codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null}},"created_at":"2018-09-08T19:20:52.000Z","updated_at":"2025-08-15T20:14:56.000Z","dependencies_parsed_at":"2023-10-14T23:12:28.417Z","dependency_job_id":"2f68d1b7-6d19-4256-a6da-b76621a547e1","html_url":"https://github.com/cloudflare/circl","commit_stats":{"total_commits":525,"total_committers":26,"mean_commits":"20.192307692307693","dds":0.56,"last_synced_commit":"795540340d5c79e5768a0135741cd7c3e5f7de93"},"previous_names":[],"tags_count":17,"template":false,"template_full_name":null,"purl":"pkg:github/cloudflare/circl","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/cloudflare","download_url":"https://codeload.github.com/cloudflare/circl/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/sbom","scorecard":{"id":114063,"data":{"date":"2025-08-11","repo":{"name":"github.com/cloudflare/circl","commit":"8bb97daafea779c72d51ec39a604913d3c30bda3"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":7.3,"checks":[{"name":"Maintained","score":10,"reason":"30 commit(s) and 1 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Code-Review","score":10,"reason":"all changesets reviewed","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: jobLevel 'actions' permission set to 'read': .github/workflows/ci-actions.yml:117","Info: jobLevel 'contents' permission set to 'read': .github/workflows/ci-actions.yml:118","Warn: no topLevel permission defined: .github/workflows/ci-actions.yml:1","Warn: no topLevel permission defined: .github/workflows/semgrep.yml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"License","score":9,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Warn: project license file does not contain an FSF or OSI license."],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Fuzzing","score":10,"reason":"project is fuzzed","details":["Info: OSSFuzz integration found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: github.com/cloudflare/.github/SECURITY.md:1","Info: Found linked content: github.com/cloudflare/.github/SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: github.com/cloudflare/.github/SECURITY.md:1","Info: Found text in security policy: github.com/cloudflare/.github/SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-actions.yml:66: update your workflow using https://app.stepsecurity.io/secureworkflow/cloudflare/circl/ci-actions.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-actions.yml:68: update your workflow using https://app.stepsecurity.io/secureworkflow/cloudflare/circl/ci-actions.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-actions.yml:82: update your workflow using https://app.stepsecurity.io/secureworkflow/cloudflare/circl/ci-actions.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-actions.yml:84: update your workflow using https://app.stepsecurity.io/secureworkflow/cloudflare/circl/ci-actions.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci-actions.yml:90: update your workflow using https://app.stepsecurity.io/secureworkflow/cloudflare/circl/ci-actions.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-actions.yml:104: update your workflow using https://app.stepsecurity.io/secureworkflow/cloudflare/circl/ci-actions.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-actions.yml:106: update your workflow using https://app.stepsecurity.io/secureworkflow/cloudflare/circl/ci-actions.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-actions.yml:123: update your workflow using https://app.stepsecurity.io/secureworkflow/cloudflare/circl/ci-actions.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-actions.yml:125: update your workflow using https://app.stepsecurity.io/secureworkflow/cloudflare/circl/ci-actions.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-actions.yml:129: update your workflow using https://app.stepsecurity.io/secureworkflow/cloudflare/circl/ci-actions.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-actions.yml:133: update your workflow using https://app.stepsecurity.io/secureworkflow/cloudflare/circl/ci-actions.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-actions.yml:19: update your workflow using https://app.stepsecurity.io/secureworkflow/cloudflare/circl/ci-actions.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-actions.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/cloudflare/circl/ci-actions.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci-actions.yml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/cloudflare/circl/ci-actions.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-actions.yml:51: update your workflow using https://app.stepsecurity.io/secureworkflow/cloudflare/circl/ci-actions.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-actions.yml:53: update your workflow using https://app.stepsecurity.io/secureworkflow/cloudflare/circl/ci-actions.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/semgrep.yml:23: update your workflow using https://app.stepsecurity.io/secureworkflow/cloudflare/circl/semgrep.yml/main?enable=pin","Warn: goCommand not pinned by hash: .github/workflows/ci-actions.yml:30","Info:   0 out of  15 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of   2 third-party GitHubAction dependencies pinned","Info:   0 out of   1 goCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Branch-Protection","score":5,"reason":"branch protection is not maximal on development and all release branches","details":["Info: 'allow deletion' disabled on branch 'main'","Info: 'force pushes' disabled on branch 'main'","Info: 'branch protection settings apply to administrators' is required to merge on branch 'main'","Warn: 'stale review dismissal' is disabled on branch 'main'","Warn: required approving review count is 1 on branch 'main'","Warn: codeowners review is required - but no codeowners file found in repo","Warn: 'last push approval' is disabled on branch 'main'","Warn: no status checks found to merge onto branch 'main'","Info: PRs are required in order to make changes on branch 'main'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"SAST","score":10,"reason":"SAST tool is run on all commits","details":["Info: SAST configuration detected: CodeQL","Info: all commits (30) are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}},{"name":"Vulnerabilities","score":7,"reason":"3 existing vulnerabilities detected","details":["Warn: Project is vulnerable to: GO-2023-2402 / GHSA-45x7-px36-x8w8","Warn: Project is vulnerable to: GO-2024-3321 / GHSA-v778-237x-gjrc","Warn: Project is vulnerable to: GO-2025-3487 / GHSA-hcg3-q754-cr77"],"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}}]},"last_synced_at":"2025-08-15T22:37:59.062Z","repository_id":34948017,"created_at":"2025-08-15T22:37:59.062Z","updated_at":"2025-08-15T22:37:59.062Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":270661505,"owners_count":24624110,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","status":"online","status_checked_at":"2025-08-16T02:00:11.002Z","response_time":91,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"cloudflare","name":"Cloudflare","uuid":"314135","kind":"organization","description":"","email":null,"website":"https://www.cloudflare.com","location":"San Francisco, London, Austin, Lisbon, Singapore","twitter":null,"company":null,"icon_url":"https://avatars.githubusercontent.com/u/314135?v=4","repositories_count":454,"last_synced_at":"2024-04-14T06:37:39.634Z","metadata":{"has_sponsors_listing":false},"html_url":"https://github.com/cloudflare","funding_links":[],"total_stars":143015,"followers":5086,"following":0,"created_at":"2022-11-02T16:32:28.917Z","updated_at":"2024-04-14T06:39:14.488Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/cloudflare","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/cloudflare/repositories"},"tags":[{"name":"v1.6.1","sha":"c6d33e35234ebf5c4319d12ae7d77d7d17053e56","kind":"commit","published_at":"2025-04-09T16:57:45.000Z","download_url":"https://codeload.github.com/cloudflare/circl/tar.gz/v1.6.1","html_url":"https://github.com/cloudflare/circl/releases/tag/v1.6.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/cloudflare/circl@v1.6.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.6.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.6.1/manifests"},{"name":"v1.6.0","sha":"89e658c2ea39d3cfea7b7c7c8b34ebdbd6d21942","kind":"commit","published_at":"2025-02-04T23:02:19.000Z","download_url":"https://codeload.github.com/cloudflare/circl/tar.gz/v1.6.0","html_url":"https://github.com/cloudflare/circl/releases/tag/v1.6.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/cloudflare/circl@v1.6.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.6.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.6.0/manifests"},{"name":"v1.5.0","sha":"1310edfc1c8a602380c10a469095a3c0b2bd7213","kind":"commit","published_at":"2024-10-10T23:00:31.000Z","download_url":"https://codeload.github.com/cloudflare/circl/tar.gz/v1.5.0","html_url":"https://github.com/cloudflare/circl/releases/tag/v1.5.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/cloudflare/circl@v1.5.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.5.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.5.0/manifests"},{"name":"v1.4.0","sha":"c311e4685e7c83e5f127ac24a2195470da2ab490","kind":"commit","published_at":"2024-08-20T15:44:35.000Z","download_url":"https://codeload.github.com/cloudflare/circl/tar.gz/v1.4.0","html_url":"https://github.com/cloudflare/circl/releases/tag/v1.4.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/cloudflare/circl@v1.4.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.4.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.4.0/manifests"},{"name":"v1.3.9","sha":"75b28edc25ec569e6353a2b944b0b83d48a9c2e8","kind":"commit","published_at":"2024-06-11T17:09:45.000Z","download_url":"https://codeload.github.com/cloudflare/circl/tar.gz/v1.3.9","html_url":"https://github.com/cloudflare/circl/releases/tag/v1.3.9","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/cloudflare/circl@v1.3.9","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.3.9","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.3.9/manifests"},{"name":"v1.3.8","sha":"4bb560182ad7861f26589f3a946304bcbf07110a","kind":"commit","published_at":"2024-04-24T19:38:57.000Z","download_url":"https://codeload.github.com/cloudflare/circl/tar.gz/v1.3.8","html_url":"https://github.com/cloudflare/circl/releases/tag/v1.3.8","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/cloudflare/circl@v1.3.8","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.3.8","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.3.8/manifests"},{"name":"v1.3.7","sha":"c48866b3068dfa83721c021dec03c777ba91abab","kind":"commit","published_at":"2024-01-01T21:04:53.000Z","download_url":"https://codeload.github.com/cloudflare/circl/tar.gz/v1.3.7","html_url":"https://github.com/cloudflare/circl/releases/tag/v1.3.7","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/cloudflare/circl@v1.3.7","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.3.7","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.3.7/manifests"},{"name":"v1.3.6","sha":"99f0f715ca5fbec868f5a0db1df2be6dcd28dbaa","kind":"commit","published_at":"2023-10-27T22:48:50.000Z","download_url":"https://codeload.github.com/cloudflare/circl/tar.gz/v1.3.6","html_url":"https://github.com/cloudflare/circl/releases/tag/v1.3.6","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/cloudflare/circl@v1.3.6","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.3.6","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.3.6/manifests"},{"name":"v1.3.5","sha":"13e767c5c3da5ef4e3df65dfaf7589ccabc0d1e1","kind":"tag","published_at":"2023-10-17T15:05:51.000Z","download_url":"https://codeload.github.com/cloudflare/circl/tar.gz/v1.3.5","html_url":"https://github.com/cloudflare/circl/releases/tag/v1.3.5","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/cloudflare/circl@v1.3.5","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.3.5","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.3.5/manifests"},{"name":"v1.3.4","sha":"13e767c5c3da5ef4e3df65dfaf7589ccabc0d1e1","kind":"tag","published_at":"2023-10-17T14:58:57.000Z","download_url":"https://codeload.github.com/cloudflare/circl/tar.gz/v1.3.4","html_url":"https://github.com/cloudflare/circl/releases/tag/v1.3.4","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/cloudflare/circl@v1.3.4","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.3.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.3.4/manifests"},{"name":"v1.3.3","sha":"3bef500f2b925f150815a360b90081021e082939","kind":"commit","published_at":"2023-05-02T10:44:30.000Z","download_url":"https://codeload.github.com/cloudflare/circl/tar.gz/v1.3.3","html_url":"https://github.com/cloudflare/circl/releases/tag/v1.3.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/cloudflare/circl@v1.3.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.3.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.3.3/manifests"},{"name":"v1.3.2","sha":"769d73f14c245a9a54a860640516c1b799a398d0","kind":"commit","published_at":"2023-01-31T00:03:24.000Z","download_url":"https://codeload.github.com/cloudflare/circl/tar.gz/v1.3.2","html_url":"https://github.com/cloudflare/circl/releases/tag/v1.3.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/cloudflare/circl@v1.3.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.3.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.3.2/manifests"},{"name":"v1.3.1","sha":"459b64f53bc65c6ef18923652e59d8d28da75057","kind":"tag","published_at":"2022-12-19T10:53:14.000Z","download_url":"https://codeload.github.com/cloudflare/circl/tar.gz/v1.3.1","html_url":"https://github.com/cloudflare/circl/releases/tag/v1.3.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/cloudflare/circl@v1.3.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.3.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.3.1/manifests"},{"name":"v1.3.0","sha":"c56c51d2526f71be07939782d59d1a98744e062c","kind":"commit","published_at":"2022-11-11T01:07:31.000Z","download_url":"https://codeload.github.com/cloudflare/circl/tar.gz/v1.3.0","html_url":"https://github.com/cloudflare/circl/releases/tag/v1.3.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/cloudflare/circl@v1.3.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.3.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.3.0/manifests"},{"name":"v1.2.0","sha":"f18784e287f0c586dcbb2c5b7045d7f3080d119b","kind":"commit","published_at":"2022-06-15T00:49:08.000Z","download_url":"https://codeload.github.com/cloudflare/circl/tar.gz/v1.2.0","html_url":"https://github.com/cloudflare/circl/releases/tag/v1.2.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/cloudflare/circl@v1.2.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.2.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.2.0/manifests"},{"name":"v1.1.0","sha":"0518755fbebe2aeb3cf6e71ac533b61602ec8e4a","kind":"commit","published_at":"2021-10-13T00:08:50.000Z","download_url":"https://codeload.github.com/cloudflare/circl/tar.gz/v1.1.0","html_url":"https://github.com/cloudflare/circl/releases/tag/v1.1.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/cloudflare/circl@v1.1.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.1.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.1.0/manifests"},{"name":"v1.0.0","sha":"a03c5a147111a46165b047f49053ec510d5582b4","kind":"commit","published_at":"2019-07-10T17:39:44.000Z","download_url":"https://codeload.github.com/cloudflare/circl/tar.gz/v1.0.0","html_url":"https://github.com/cloudflare/circl/releases/tag/v1.0.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/cloudflare/circl@v1.0.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.0.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.0.0/manifests"}]},"repo_metadata_updated_at":"2025-08-16T03:16:54.310Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":6.326193012462012,"dependent_packages_count":5.928731576797648,"stargazers_count":1.9331065958199505,"forks_count":2.272220451443496,"docker_downloads_count":null,"average":4.115062909130777},"purl":"pkg:golang/github.com/cloudflare/circl/sign/ed448","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/go/github.com/cloudflare/circl/sign/ed448","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/go/github.com/cloudflare/circl/sign/ed448","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/go/github.com/cloudflare/circl/sign/ed448/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2025-08-07T03:14:56.558Z","issues_count":63,"pull_requests_count":145,"avg_time_to_close_issue":14312665.555555556,"avg_time_to_close_pull_request":2838644.4112903224,"issues_closed_count":45,"pull_requests_closed_count":124,"pull_request_authors_count":25,"issue_authors_count":42,"avg_comments_per_issue":2.492063492063492,"avg_comments_per_pull_request":1.1724137931034484,"merged_pull_requests_count":116,"bot_issues_count":0,"bot_pull_requests_count":2,"past_year_issues_count":19,"past_year_pull_requests_count":23,"past_year_avg_time_to_close_issue":3478759.5,"past_year_avg_time_to_close_pull_request":330228.8333333333,"past_year_issues_closed_count":12,"past_year_pull_requests_closed_count":18,"past_year_pull_request_authors_count":7,"past_year_issue_authors_count":15,"past_year_avg_comments_per_issue":2.4210526315789473,"past_year_avg_comments_per_pull_request":0.4782608695652174,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":1,"past_year_merged_pull_requests_count":18,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/issues","maintainers":[{"login":"bwesterb","count":29,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/bwesterb"}],"active_maintainers":[{"login":"bwesterb","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/bwesterb"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fcloudflare%2Fcircl%2Fsign%2Fed448/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fcloudflare%2Fcircl%2Fsign%2Fed448/version_numbers","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fcloudflare%2Fcircl%2Fsign%2Fed448/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fcloudflare%2Fcircl%2Fsign%2Fed448/related_packages","maintainers":[],"registry":{"name":"proxy.golang.org","url":"https://proxy.golang.org","ecosystem":"go","default":true,"packages_count":1951676,"maintainers_count":0,"namespaces_count":741275,"keywords_count":109185,"github":"golang","metadata":{"funded_packages_count":49011},"icon_url":"https://github.com/golang.png","created_at":"2022-04-04T15:19:22.939Z","updated_at":"2025-09-05T05:14:06.439Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/namespaces"}},{"id":11151722,"name":"github.com/cloudflare/circl/internal/sha3","ecosystem":"go","description":"Package sha3 implements the SHA-3 fixed-output-length hash functions and\nthe SHAKE variable-output-length hash functions defined by FIPS-202.\n\nBoth types of hash function use the \"sponge\" construction and the Keccak\npermutation. For a detailed specification see http://keccak.noekeon.org/\n\nIf you aren't sure what function you need, use SHAKE256 with at least 64\nbytes of output. The SHAKE instances are faster than the SHA3 instances;\nthe latter have to allocate memory to conform to the hash.Hash interface.\n\nIf you need a secret-key MAC (message authentication code), prepend the\nsecret key to the input, hash with SHAKE256 and read at least 32 bytes of\noutput.\n\nThe SHA3-x (x equals 224, 256, 384, or 512) functions have a security\nstrength against preimage attacks of x bits. Since they only produce \"x\"\nbits of output, their collision-resistance is only \"x/2\" bits.\n\nThe SHAKE-256 and -128 functions have a generic security strength of 256 and\n128 bits against all attacks, provided that at least 2x bits of their output\nis used.  Requesting more than 64 or 32 bytes of output, respectively, does\nnot increase the collision-resistance of the SHAKE functions.\n\nA sponge builds a pseudo-random function from a public pseudo-random\npermutation, by applying the permutation to a state of \"rate + capacity\"\nbytes, but hiding \"capacity\" of the bytes.\n\nA sponge starts out with a zero state. To hash an input using a sponge, up\nto \"rate\" bytes of the input are XORed into the sponge's state. The sponge\nis then \"full\" and the permutation is applied to \"empty\" it. This process is\nrepeated until all the input has been \"absorbed\". The input is then padded.\nThe digest is \"squeezed\" from the sponge in the same way, except that output\nis copied out instead of input being XORed in.\n\nA sponge is parameterized by its generic security strength, which is equal\nto half its capacity; capacity + rate is equal to the permutation's width.\nSince the KeccakF-1600 permutation is 1600 bits (200 bytes) wide, this means\nthat the security strength of a sponge instance is equal to (1600 - bitrate) / 2.\n\nThe SHAKE functions are recommended for most new uses. They can produce\noutput of arbitrary length. SHAKE256, with an output length of at least\n64 bytes, provides 256-bit security against all attacks.  The Keccak team\nrecommends it for most applications upgrading from SHA2-512. (NIST chose a\nmuch stronger, but much slower, sponge instance for SHA3-512.)\n\nThe SHA-3 functions are \"drop-in\" replacements for the SHA-2 functions.\nThey produce output of the same length, with the same security strengths\nagainst all attacks. This means, in particular, that SHA3-256 only has\n128-bit collision resistance, because its output length is 32 bytes.","homepage":"https://github.com/cloudflare/circl","licenses":"BSD-3-Clause","normalized_licenses":["BSD-3-Clause"],"repository_url":"https://github.com/cloudflare/circl","keywords_array":[],"namespace":"github.com/cloudflare/circl/internal","versions_count":0,"first_release_published_at":null,"latest_release_published_at":"2025-07-25T18:51:15.864Z","latest_release_number":null,"last_synced_at":"2025-07-25T18:51:15.864Z","created_at":"2024-12-09T16:18:34.861Z","updated_at":"2025-08-16T03:16:54.324Z","registry_url":"https://pkg.go.dev/github.com/cloudflare/circl/internal/sha3","install_command":"go get github.com/cloudflare/circl/internal/sha3","documentation_url":"https://pkg.go.dev/github.com/cloudflare/circl/internal/sha3#section-documentation","metadata":{},"repo_metadata":{"id":34948017,"uuid":"147963112","full_name":"cloudflare/circl","owner":"cloudflare","description":"CIRCL: Cloudflare Interoperable Reusable Cryptographic Library","archived":false,"fork":false,"pushed_at":"2025-08-15T20:14:51.000Z","size":74076,"stargazers_count":1496,"open_issues_count":57,"forks_count":174,"subscribers_count":42,"default_branch":"main","last_synced_at":"2025-08-15T22:37:56.064Z","etag":null,"topics":["circl","cryptography","csidh","dilithium","ed25519","ed448","elliptic-curves","go","golang","hpke","kyber","pki","post-quantum","sidh"],"latest_commit_sha":null,"homepage":"http://blog.cloudflare.com/introducing-circl","language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"other","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/cloudflare.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":"CITATION.cff","codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null}},"created_at":"2018-09-08T19:20:52.000Z","updated_at":"2025-08-15T20:14:56.000Z","dependencies_parsed_at":"2023-10-14T23:12:28.417Z","dependency_job_id":"2f68d1b7-6d19-4256-a6da-b76621a547e1","html_url":"https://github.com/cloudflare/circl","commit_stats":{"total_commits":525,"total_committers":26,"mean_commits":"20.192307692307693","dds":0.56,"last_synced_commit":"795540340d5c79e5768a0135741cd7c3e5f7de93"},"previous_names":[],"tags_count":17,"template":false,"template_full_name":null,"purl":"pkg:github/cloudflare/circl","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/cloudflare","download_url":"https://codeload.github.com/cloudflare/circl/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/sbom","scorecard":{"id":114063,"data":{"date":"2025-08-11","repo":{"name":"github.com/cloudflare/circl","commit":"8bb97daafea779c72d51ec39a604913d3c30bda3"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":7.3,"checks":[{"name":"Maintained","score":10,"reason":"30 commit(s) and 1 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Code-Review","score":10,"reason":"all changesets reviewed","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: jobLevel 'actions' permission set to 'read': .github/workflows/ci-actions.yml:117","Info: jobLevel 'contents' permission set to 'read': .github/workflows/ci-actions.yml:118","Warn: no topLevel permission defined: .github/workflows/ci-actions.yml:1","Warn: no topLevel permission defined: .github/workflows/semgrep.yml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"License","score":9,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Warn: project license file does not contain an FSF or OSI license."],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Fuzzing","score":10,"reason":"project is fuzzed","details":["Info: OSSFuzz integration found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: github.com/cloudflare/.github/SECURITY.md:1","Info: Found linked content: github.com/cloudflare/.github/SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: github.com/cloudflare/.github/SECURITY.md:1","Info: Found text in security policy: github.com/cloudflare/.github/SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-actions.yml:66: update your workflow using https://app.stepsecurity.io/secureworkflow/cloudflare/circl/ci-actions.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-actions.yml:68: update your workflow using https://app.stepsecurity.io/secureworkflow/cloudflare/circl/ci-actions.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-actions.yml:82: update your workflow using https://app.stepsecurity.io/secureworkflow/cloudflare/circl/ci-actions.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-actions.yml:84: update your workflow using https://app.stepsecurity.io/secureworkflow/cloudflare/circl/ci-actions.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci-actions.yml:90: update your workflow using https://app.stepsecurity.io/secureworkflow/cloudflare/circl/ci-actions.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-actions.yml:104: update your workflow using https://app.stepsecurity.io/secureworkflow/cloudflare/circl/ci-actions.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-actions.yml:106: update your workflow using https://app.stepsecurity.io/secureworkflow/cloudflare/circl/ci-actions.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-actions.yml:123: update your workflow using https://app.stepsecurity.io/secureworkflow/cloudflare/circl/ci-actions.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-actions.yml:125: update your workflow using https://app.stepsecurity.io/secureworkflow/cloudflare/circl/ci-actions.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-actions.yml:129: update your workflow using https://app.stepsecurity.io/secureworkflow/cloudflare/circl/ci-actions.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-actions.yml:133: update your workflow using https://app.stepsecurity.io/secureworkflow/cloudflare/circl/ci-actions.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-actions.yml:19: update your workflow using https://app.stepsecurity.io/secureworkflow/cloudflare/circl/ci-actions.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-actions.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/cloudflare/circl/ci-actions.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci-actions.yml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/cloudflare/circl/ci-actions.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-actions.yml:51: update your workflow using https://app.stepsecurity.io/secureworkflow/cloudflare/circl/ci-actions.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-actions.yml:53: update your workflow using https://app.stepsecurity.io/secureworkflow/cloudflare/circl/ci-actions.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/semgrep.yml:23: update your workflow using https://app.stepsecurity.io/secureworkflow/cloudflare/circl/semgrep.yml/main?enable=pin","Warn: goCommand not pinned by hash: .github/workflows/ci-actions.yml:30","Info:   0 out of  15 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of   2 third-party GitHubAction dependencies pinned","Info:   0 out of   1 goCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Branch-Protection","score":5,"reason":"branch protection is not maximal on development and all release branches","details":["Info: 'allow deletion' disabled on branch 'main'","Info: 'force pushes' disabled on branch 'main'","Info: 'branch protection settings apply to administrators' is required to merge on branch 'main'","Warn: 'stale review dismissal' is disabled on branch 'main'","Warn: required approving review count is 1 on branch 'main'","Warn: codeowners review is required - but no codeowners file found in repo","Warn: 'last push approval' is disabled on branch 'main'","Warn: no status checks found to merge onto branch 'main'","Info: PRs are required in order to make changes on branch 'main'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"SAST","score":10,"reason":"SAST tool is run on all commits","details":["Info: SAST configuration detected: CodeQL","Info: all commits (30) are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}},{"name":"Vulnerabilities","score":7,"reason":"3 existing vulnerabilities detected","details":["Warn: Project is vulnerable to: GO-2023-2402 / GHSA-45x7-px36-x8w8","Warn: Project is vulnerable to: GO-2024-3321 / GHSA-v778-237x-gjrc","Warn: Project is vulnerable to: GO-2025-3487 / GHSA-hcg3-q754-cr77"],"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}}]},"last_synced_at":"2025-08-15T22:37:59.062Z","repository_id":34948017,"created_at":"2025-08-15T22:37:59.062Z","updated_at":"2025-08-15T22:37:59.062Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":270661505,"owners_count":24624110,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","status":"online","status_checked_at":"2025-08-16T02:00:11.002Z","response_time":91,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"cloudflare","name":"Cloudflare","uuid":"314135","kind":"organization","description":"","email":null,"website":"https://www.cloudflare.com","location":"San Francisco, London, Austin, Lisbon, Singapore","twitter":null,"company":null,"icon_url":"https://avatars.githubusercontent.com/u/314135?v=4","repositories_count":454,"last_synced_at":"2024-04-14T06:37:39.634Z","metadata":{"has_sponsors_listing":false},"html_url":"https://github.com/cloudflare","funding_links":[],"total_stars":143015,"followers":5086,"following":0,"created_at":"2022-11-02T16:32:28.917Z","updated_at":"2024-04-14T06:39:14.488Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/cloudflare","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/cloudflare/repositories"},"tags":[{"name":"v1.6.1","sha":"c6d33e35234ebf5c4319d12ae7d77d7d17053e56","kind":"commit","published_at":"2025-04-09T16:57:45.000Z","download_url":"https://codeload.github.com/cloudflare/circl/tar.gz/v1.6.1","html_url":"https://github.com/cloudflare/circl/releases/tag/v1.6.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/cloudflare/circl@v1.6.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.6.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.6.1/manifests"},{"name":"v1.6.0","sha":"89e658c2ea39d3cfea7b7c7c8b34ebdbd6d21942","kind":"commit","published_at":"2025-02-04T23:02:19.000Z","download_url":"https://codeload.github.com/cloudflare/circl/tar.gz/v1.6.0","html_url":"https://github.com/cloudflare/circl/releases/tag/v1.6.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/cloudflare/circl@v1.6.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.6.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.6.0/manifests"},{"name":"v1.5.0","sha":"1310edfc1c8a602380c10a469095a3c0b2bd7213","kind":"commit","published_at":"2024-10-10T23:00:31.000Z","download_url":"https://codeload.github.com/cloudflare/circl/tar.gz/v1.5.0","html_url":"https://github.com/cloudflare/circl/releases/tag/v1.5.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/cloudflare/circl@v1.5.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.5.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.5.0/manifests"},{"name":"v1.4.0","sha":"c311e4685e7c83e5f127ac24a2195470da2ab490","kind":"commit","published_at":"2024-08-20T15:44:35.000Z","download_url":"https://codeload.github.com/cloudflare/circl/tar.gz/v1.4.0","html_url":"https://github.com/cloudflare/circl/releases/tag/v1.4.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/cloudflare/circl@v1.4.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.4.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.4.0/manifests"},{"name":"v1.3.9","sha":"75b28edc25ec569e6353a2b944b0b83d48a9c2e8","kind":"commit","published_at":"2024-06-11T17:09:45.000Z","download_url":"https://codeload.github.com/cloudflare/circl/tar.gz/v1.3.9","html_url":"https://github.com/cloudflare/circl/releases/tag/v1.3.9","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/cloudflare/circl@v1.3.9","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.3.9","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.3.9/manifests"},{"name":"v1.3.8","sha":"4bb560182ad7861f26589f3a946304bcbf07110a","kind":"commit","published_at":"2024-04-24T19:38:57.000Z","download_url":"https://codeload.github.com/cloudflare/circl/tar.gz/v1.3.8","html_url":"https://github.com/cloudflare/circl/releases/tag/v1.3.8","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/cloudflare/circl@v1.3.8","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.3.8","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.3.8/manifests"},{"name":"v1.3.7","sha":"c48866b3068dfa83721c021dec03c777ba91abab","kind":"commit","published_at":"2024-01-01T21:04:53.000Z","download_url":"https://codeload.github.com/cloudflare/circl/tar.gz/v1.3.7","html_url":"https://github.com/cloudflare/circl/releases/tag/v1.3.7","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/cloudflare/circl@v1.3.7","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.3.7","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.3.7/manifests"},{"name":"v1.3.6","sha":"99f0f715ca5fbec868f5a0db1df2be6dcd28dbaa","kind":"commit","published_at":"2023-10-27T22:48:50.000Z","download_url":"https://codeload.github.com/cloudflare/circl/tar.gz/v1.3.6","html_url":"https://github.com/cloudflare/circl/releases/tag/v1.3.6","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/cloudflare/circl@v1.3.6","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.3.6","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.3.6/manifests"},{"name":"v1.3.5","sha":"13e767c5c3da5ef4e3df65dfaf7589ccabc0d1e1","kind":"tag","published_at":"2023-10-17T15:05:51.000Z","download_url":"https://codeload.github.com/cloudflare/circl/tar.gz/v1.3.5","html_url":"https://github.com/cloudflare/circl/releases/tag/v1.3.5","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/cloudflare/circl@v1.3.5","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.3.5","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.3.5/manifests"},{"name":"v1.3.4","sha":"13e767c5c3da5ef4e3df65dfaf7589ccabc0d1e1","kind":"tag","published_at":"2023-10-17T14:58:57.000Z","download_url":"https://codeload.github.com/cloudflare/circl/tar.gz/v1.3.4","html_url":"https://github.com/cloudflare/circl/releases/tag/v1.3.4","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/cloudflare/circl@v1.3.4","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.3.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.3.4/manifests"},{"name":"v1.3.3","sha":"3bef500f2b925f150815a360b90081021e082939","kind":"commit","published_at":"2023-05-02T10:44:30.000Z","download_url":"https://codeload.github.com/cloudflare/circl/tar.gz/v1.3.3","html_url":"https://github.com/cloudflare/circl/releases/tag/v1.3.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/cloudflare/circl@v1.3.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.3.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.3.3/manifests"},{"name":"v1.3.2","sha":"769d73f14c245a9a54a860640516c1b799a398d0","kind":"commit","published_at":"2023-01-31T00:03:24.000Z","download_url":"https://codeload.github.com/cloudflare/circl/tar.gz/v1.3.2","html_url":"https://github.com/cloudflare/circl/releases/tag/v1.3.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/cloudflare/circl@v1.3.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.3.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.3.2/manifests"},{"name":"v1.3.1","sha":"459b64f53bc65c6ef18923652e59d8d28da75057","kind":"tag","published_at":"2022-12-19T10:53:14.000Z","download_url":"https://codeload.github.com/cloudflare/circl/tar.gz/v1.3.1","html_url":"https://github.com/cloudflare/circl/releases/tag/v1.3.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/cloudflare/circl@v1.3.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.3.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.3.1/manifests"},{"name":"v1.3.0","sha":"c56c51d2526f71be07939782d59d1a98744e062c","kind":"commit","published_at":"2022-11-11T01:07:31.000Z","download_url":"https://codeload.github.com/cloudflare/circl/tar.gz/v1.3.0","html_url":"https://github.com/cloudflare/circl/releases/tag/v1.3.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/cloudflare/circl@v1.3.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.3.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.3.0/manifests"},{"name":"v1.2.0","sha":"f18784e287f0c586dcbb2c5b7045d7f3080d119b","kind":"commit","published_at":"2022-06-15T00:49:08.000Z","download_url":"https://codeload.github.com/cloudflare/circl/tar.gz/v1.2.0","html_url":"https://github.com/cloudflare/circl/releases/tag/v1.2.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/cloudflare/circl@v1.2.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.2.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.2.0/manifests"},{"name":"v1.1.0","sha":"0518755fbebe2aeb3cf6e71ac533b61602ec8e4a","kind":"commit","published_at":"2021-10-13T00:08:50.000Z","download_url":"https://codeload.github.com/cloudflare/circl/tar.gz/v1.1.0","html_url":"https://github.com/cloudflare/circl/releases/tag/v1.1.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/cloudflare/circl@v1.1.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.1.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.1.0/manifests"},{"name":"v1.0.0","sha":"a03c5a147111a46165b047f49053ec510d5582b4","kind":"commit","published_at":"2019-07-10T17:39:44.000Z","download_url":"https://codeload.github.com/cloudflare/circl/tar.gz/v1.0.0","html_url":"https://github.com/cloudflare/circl/releases/tag/v1.0.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/cloudflare/circl@v1.0.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.0.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.0.0/manifests"}]},"repo_metadata_updated_at":"2025-08-16T03:16:54.324Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":6.326193012462012,"dependent_packages_count":5.928731576797648,"stargazers_count":1.9331065958199505,"forks_count":2.272220451443496,"docker_downloads_count":null,"average":4.115062909130777},"purl":"pkg:golang/github.com/cloudflare/circl/internal/sha3","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/go/github.com/cloudflare/circl/internal/sha3","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/go/github.com/cloudflare/circl/internal/sha3","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/go/github.com/cloudflare/circl/internal/sha3/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2025-08-07T03:14:56.558Z","issues_count":63,"pull_requests_count":145,"avg_time_to_close_issue":14312665.555555556,"avg_time_to_close_pull_request":2838644.4112903224,"issues_closed_count":45,"pull_requests_closed_count":124,"pull_request_authors_count":25,"issue_authors_count":42,"avg_comments_per_issue":2.492063492063492,"avg_comments_per_pull_request":1.1724137931034484,"merged_pull_requests_count":116,"bot_issues_count":0,"bot_pull_requests_count":2,"past_year_issues_count":19,"past_year_pull_requests_count":23,"past_year_avg_time_to_close_issue":3478759.5,"past_year_avg_time_to_close_pull_request":330228.8333333333,"past_year_issues_closed_count":12,"past_year_pull_requests_closed_count":18,"past_year_pull_request_authors_count":7,"past_year_issue_authors_count":15,"past_year_avg_comments_per_issue":2.4210526315789473,"past_year_avg_comments_per_pull_request":0.4782608695652174,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":1,"past_year_merged_pull_requests_count":18,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/issues","maintainers":[{"login":"bwesterb","count":29,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/bwesterb"}],"active_maintainers":[{"login":"bwesterb","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/bwesterb"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fcloudflare%2Fcircl%2Finternal%2Fsha3/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fcloudflare%2Fcircl%2Finternal%2Fsha3/version_numbers","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fcloudflare%2Fcircl%2Finternal%2Fsha3/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fcloudflare%2Fcircl%2Finternal%2Fsha3/related_packages","maintainers":[],"registry":{"name":"proxy.golang.org","url":"https://proxy.golang.org","ecosystem":"go","default":true,"packages_count":1951676,"maintainers_count":0,"namespaces_count":741275,"keywords_count":109185,"github":"golang","metadata":{"funded_packages_count":49011},"icon_url":"https://github.com/golang.png","created_at":"2022-04-04T15:19:22.939Z","updated_at":"2025-09-05T05:14:06.439Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/namespaces"}},{"id":3506096,"name":"github.com/cloudflare/circl","ecosystem":"go","description":"Package circl provides a collection of cryptographic primitives. The goal\nof this module is to be used as a tool for experimental deployment of\ncryptographic algorithms targeting Post-Quantum (PQ) and Elliptic\nCurve Cryptography (ECC).\n\nFollowing blog post describes ideas behind CIRCL in more details:\nhttps://blog.cloudflare.com/introducing-circl/","homepage":"https://github.com/cloudflare/circl","licenses":"BSD-3-Clause","normalized_licenses":["BSD-3-Clause"],"repository_url":"https://github.com/cloudflare/circl","keywords_array":[],"namespace":"github.com/cloudflare","versions_count":17,"first_release_published_at":"2019-07-10T17:39:44.000Z","latest_release_published_at":"2025-04-09T16:57:45.000Z","latest_release_number":"v1.6.1","last_synced_at":"2025-09-04T20:01:40.845Z","created_at":"2022-04-10T20:39:09.759Z","updated_at":"2025-09-04T20:01:40.846Z","registry_url":"https://pkg.go.dev/github.com/cloudflare/circl","install_command":"go get github.com/cloudflare/circl","documentation_url":"https://pkg.go.dev/github.com/cloudflare/circl#section-documentation","metadata":{},"repo_metadata":{"id":34948017,"uuid":"147963112","full_name":"cloudflare/circl","owner":"cloudflare","description":"CIRCL: Cloudflare Interoperable Reusable Cryptographic Library","archived":false,"fork":false,"pushed_at":"2025-08-15T20:14:51.000Z","size":74076,"stargazers_count":1496,"open_issues_count":57,"forks_count":174,"subscribers_count":42,"default_branch":"main","last_synced_at":"2025-08-15T22:37:56.064Z","etag":null,"topics":["circl","cryptography","csidh","dilithium","ed25519","ed448","elliptic-curves","go","golang","hpke","kyber","pki","post-quantum","sidh"],"latest_commit_sha":null,"homepage":"http://blog.cloudflare.com/introducing-circl","language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"other","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/cloudflare.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":"CITATION.cff","codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null}},"created_at":"2018-09-08T19:20:52.000Z","updated_at":"2025-08-15T20:14:56.000Z","dependencies_parsed_at":"2023-10-14T23:12:28.417Z","dependency_job_id":"2f68d1b7-6d19-4256-a6da-b76621a547e1","html_url":"https://github.com/cloudflare/circl","commit_stats":{"total_commits":525,"total_committers":26,"mean_commits":"20.192307692307693","dds":0.56,"last_synced_commit":"795540340d5c79e5768a0135741cd7c3e5f7de93"},"previous_names":[],"tags_count":17,"template":false,"template_full_name":null,"purl":"pkg:github/cloudflare/circl","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/cloudflare","download_url":"https://codeload.github.com/cloudflare/circl/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/sbom","scorecard":{"id":114063,"data":{"date":"2025-08-11","repo":{"name":"github.com/cloudflare/circl","commit":"8bb97daafea779c72d51ec39a604913d3c30bda3"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":7.3,"checks":[{"name":"Maintained","score":10,"reason":"30 commit(s) and 1 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Code-Review","score":10,"reason":"all changesets reviewed","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: jobLevel 'actions' permission set to 'read': .github/workflows/ci-actions.yml:117","Info: jobLevel 'contents' permission set to 'read': .github/workflows/ci-actions.yml:118","Warn: no topLevel permission defined: .github/workflows/ci-actions.yml:1","Warn: no topLevel permission defined: .github/workflows/semgrep.yml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"License","score":9,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Warn: project license file does not contain an FSF or OSI license."],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Fuzzing","score":10,"reason":"project is fuzzed","details":["Info: OSSFuzz integration found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: github.com/cloudflare/.github/SECURITY.md:1","Info: Found linked content: github.com/cloudflare/.github/SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: github.com/cloudflare/.github/SECURITY.md:1","Info: Found text in security policy: github.com/cloudflare/.github/SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-actions.yml:66: update your workflow using https://app.stepsecurity.io/secureworkflow/cloudflare/circl/ci-actions.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-actions.yml:68: update your workflow using https://app.stepsecurity.io/secureworkflow/cloudflare/circl/ci-actions.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-actions.yml:82: update your workflow using https://app.stepsecurity.io/secureworkflow/cloudflare/circl/ci-actions.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-actions.yml:84: update your workflow using https://app.stepsecurity.io/secureworkflow/cloudflare/circl/ci-actions.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci-actions.yml:90: update your workflow using https://app.stepsecurity.io/secureworkflow/cloudflare/circl/ci-actions.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-actions.yml:104: update your workflow using https://app.stepsecurity.io/secureworkflow/cloudflare/circl/ci-actions.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-actions.yml:106: update your workflow using https://app.stepsecurity.io/secureworkflow/cloudflare/circl/ci-actions.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-actions.yml:123: update your workflow using https://app.stepsecurity.io/secureworkflow/cloudflare/circl/ci-actions.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-actions.yml:125: update your workflow using https://app.stepsecurity.io/secureworkflow/cloudflare/circl/ci-actions.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-actions.yml:129: update your workflow using https://app.stepsecurity.io/secureworkflow/cloudflare/circl/ci-actions.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-actions.yml:133: update your workflow using https://app.stepsecurity.io/secureworkflow/cloudflare/circl/ci-actions.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-actions.yml:19: update your workflow using https://app.stepsecurity.io/secureworkflow/cloudflare/circl/ci-actions.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-actions.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/cloudflare/circl/ci-actions.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci-actions.yml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/cloudflare/circl/ci-actions.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-actions.yml:51: update your workflow using https://app.stepsecurity.io/secureworkflow/cloudflare/circl/ci-actions.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-actions.yml:53: update your workflow using https://app.stepsecurity.io/secureworkflow/cloudflare/circl/ci-actions.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/semgrep.yml:23: update your workflow using https://app.stepsecurity.io/secureworkflow/cloudflare/circl/semgrep.yml/main?enable=pin","Warn: goCommand not pinned by hash: .github/workflows/ci-actions.yml:30","Info:   0 out of  15 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of   2 third-party GitHubAction dependencies pinned","Info:   0 out of   1 goCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Branch-Protection","score":5,"reason":"branch protection is not maximal on development and all release branches","details":["Info: 'allow deletion' disabled on branch 'main'","Info: 'force pushes' disabled on branch 'main'","Info: 'branch protection settings apply to administrators' is required to merge on branch 'main'","Warn: 'stale review dismissal' is disabled on branch 'main'","Warn: required approving review count is 1 on branch 'main'","Warn: codeowners review is required - but no codeowners file found in repo","Warn: 'last push approval' is disabled on branch 'main'","Warn: no status checks found to merge onto branch 'main'","Info: PRs are required in order to make changes on branch 'main'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"SAST","score":10,"reason":"SAST tool is run on all commits","details":["Info: SAST configuration detected: CodeQL","Info: all commits (30) are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}},{"name":"Vulnerabilities","score":7,"reason":"3 existing vulnerabilities detected","details":["Warn: Project is vulnerable to: GO-2023-2402 / GHSA-45x7-px36-x8w8","Warn: Project is vulnerable to: GO-2024-3321 / GHSA-v778-237x-gjrc","Warn: Project is vulnerable to: GO-2025-3487 / GHSA-hcg3-q754-cr77"],"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}}]},"last_synced_at":"2025-08-15T22:37:59.062Z","repository_id":34948017,"created_at":"2025-08-15T22:37:59.062Z","updated_at":"2025-08-15T22:37:59.062Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":270661505,"owners_count":24624110,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","status":"online","status_checked_at":"2025-08-16T02:00:11.002Z","response_time":91,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"cloudflare","name":"Cloudflare","uuid":"314135","kind":"organization","description":"","email":null,"website":"https://www.cloudflare.com","location":"San Francisco, London, Austin, Lisbon, Singapore","twitter":null,"company":null,"icon_url":"https://avatars.githubusercontent.com/u/314135?v=4","repositories_count":454,"last_synced_at":"2024-04-14T06:37:39.634Z","metadata":{"has_sponsors_listing":false},"html_url":"https://github.com/cloudflare","funding_links":[],"total_stars":143015,"followers":5086,"following":0,"created_at":"2022-11-02T16:32:28.917Z","updated_at":"2024-04-14T06:39:14.488Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/cloudflare","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/cloudflare/repositories"},"tags":[{"name":"v1.6.1","sha":"c6d33e35234ebf5c4319d12ae7d77d7d17053e56","kind":"commit","published_at":"2025-04-09T16:57:45.000Z","download_url":"https://codeload.github.com/cloudflare/circl/tar.gz/v1.6.1","html_url":"https://github.com/cloudflare/circl/releases/tag/v1.6.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/cloudflare/circl@v1.6.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.6.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.6.1/manifests"},{"name":"v1.6.0","sha":"89e658c2ea39d3cfea7b7c7c8b34ebdbd6d21942","kind":"commit","published_at":"2025-02-04T23:02:19.000Z","download_url":"https://codeload.github.com/cloudflare/circl/tar.gz/v1.6.0","html_url":"https://github.com/cloudflare/circl/releases/tag/v1.6.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/cloudflare/circl@v1.6.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.6.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.6.0/manifests"},{"name":"v1.5.0","sha":"1310edfc1c8a602380c10a469095a3c0b2bd7213","kind":"commit","published_at":"2024-10-10T23:00:31.000Z","download_url":"https://codeload.github.com/cloudflare/circl/tar.gz/v1.5.0","html_url":"https://github.com/cloudflare/circl/releases/tag/v1.5.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/cloudflare/circl@v1.5.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.5.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.5.0/manifests"},{"name":"v1.4.0","sha":"c311e4685e7c83e5f127ac24a2195470da2ab490","kind":"commit","published_at":"2024-08-20T15:44:35.000Z","download_url":"https://codeload.github.com/cloudflare/circl/tar.gz/v1.4.0","html_url":"https://github.com/cloudflare/circl/releases/tag/v1.4.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/cloudflare/circl@v1.4.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.4.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.4.0/manifests"},{"name":"v1.3.9","sha":"75b28edc25ec569e6353a2b944b0b83d48a9c2e8","kind":"commit","published_at":"2024-06-11T17:09:45.000Z","download_url":"https://codeload.github.com/cloudflare/circl/tar.gz/v1.3.9","html_url":"https://github.com/cloudflare/circl/releases/tag/v1.3.9","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/cloudflare/circl@v1.3.9","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.3.9","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.3.9/manifests"},{"name":"v1.3.8","sha":"4bb560182ad7861f26589f3a946304bcbf07110a","kind":"commit","published_at":"2024-04-24T19:38:57.000Z","download_url":"https://codeload.github.com/cloudflare/circl/tar.gz/v1.3.8","html_url":"https://github.com/cloudflare/circl/releases/tag/v1.3.8","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/cloudflare/circl@v1.3.8","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.3.8","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.3.8/manifests"},{"name":"v1.3.7","sha":"c48866b3068dfa83721c021dec03c777ba91abab","kind":"commit","published_at":"2024-01-01T21:04:53.000Z","download_url":"https://codeload.github.com/cloudflare/circl/tar.gz/v1.3.7","html_url":"https://github.com/cloudflare/circl/releases/tag/v1.3.7","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/cloudflare/circl@v1.3.7","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.3.7","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.3.7/manifests"},{"name":"v1.3.6","sha":"99f0f715ca5fbec868f5a0db1df2be6dcd28dbaa","kind":"commit","published_at":"2023-10-27T22:48:50.000Z","download_url":"https://codeload.github.com/cloudflare/circl/tar.gz/v1.3.6","html_url":"https://github.com/cloudflare/circl/releases/tag/v1.3.6","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/cloudflare/circl@v1.3.6","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.3.6","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.3.6/manifests"},{"name":"v1.3.5","sha":"13e767c5c3da5ef4e3df65dfaf7589ccabc0d1e1","kind":"tag","published_at":"2023-10-17T15:05:51.000Z","download_url":"https://codeload.github.com/cloudflare/circl/tar.gz/v1.3.5","html_url":"https://github.com/cloudflare/circl/releases/tag/v1.3.5","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/cloudflare/circl@v1.3.5","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.3.5","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.3.5/manifests"},{"name":"v1.3.4","sha":"13e767c5c3da5ef4e3df65dfaf7589ccabc0d1e1","kind":"tag","published_at":"2023-10-17T14:58:57.000Z","download_url":"https://codeload.github.com/cloudflare/circl/tar.gz/v1.3.4","html_url":"https://github.com/cloudflare/circl/releases/tag/v1.3.4","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/cloudflare/circl@v1.3.4","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.3.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.3.4/manifests"},{"name":"v1.3.3","sha":"3bef500f2b925f150815a360b90081021e082939","kind":"commit","published_at":"2023-05-02T10:44:30.000Z","download_url":"https://codeload.github.com/cloudflare/circl/tar.gz/v1.3.3","html_url":"https://github.com/cloudflare/circl/releases/tag/v1.3.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/cloudflare/circl@v1.3.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.3.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.3.3/manifests"},{"name":"v1.3.2","sha":"769d73f14c245a9a54a860640516c1b799a398d0","kind":"commit","published_at":"2023-01-31T00:03:24.000Z","download_url":"https://codeload.github.com/cloudflare/circl/tar.gz/v1.3.2","html_url":"https://github.com/cloudflare/circl/releases/tag/v1.3.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/cloudflare/circl@v1.3.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.3.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.3.2/manifests"},{"name":"v1.3.1","sha":"459b64f53bc65c6ef18923652e59d8d28da75057","kind":"tag","published_at":"2022-12-19T10:53:14.000Z","download_url":"https://codeload.github.com/cloudflare/circl/tar.gz/v1.3.1","html_url":"https://github.com/cloudflare/circl/releases/tag/v1.3.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/cloudflare/circl@v1.3.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.3.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.3.1/manifests"},{"name":"v1.3.0","sha":"c56c51d2526f71be07939782d59d1a98744e062c","kind":"commit","published_at":"2022-11-11T01:07:31.000Z","download_url":"https://codeload.github.com/cloudflare/circl/tar.gz/v1.3.0","html_url":"https://github.com/cloudflare/circl/releases/tag/v1.3.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/cloudflare/circl@v1.3.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.3.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.3.0/manifests"},{"name":"v1.2.0","sha":"f18784e287f0c586dcbb2c5b7045d7f3080d119b","kind":"commit","published_at":"2022-06-15T00:49:08.000Z","download_url":"https://codeload.github.com/cloudflare/circl/tar.gz/v1.2.0","html_url":"https://github.com/cloudflare/circl/releases/tag/v1.2.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/cloudflare/circl@v1.2.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.2.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.2.0/manifests"},{"name":"v1.1.0","sha":"0518755fbebe2aeb3cf6e71ac533b61602ec8e4a","kind":"commit","published_at":"2021-10-13T00:08:50.000Z","download_url":"https://codeload.github.com/cloudflare/circl/tar.gz/v1.1.0","html_url":"https://github.com/cloudflare/circl/releases/tag/v1.1.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/cloudflare/circl@v1.1.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.1.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.1.0/manifests"},{"name":"v1.0.0","sha":"a03c5a147111a46165b047f49053ec510d5582b4","kind":"commit","published_at":"2019-07-10T17:39:44.000Z","download_url":"https://codeload.github.com/cloudflare/circl/tar.gz/v1.0.0","html_url":"https://github.com/cloudflare/circl/releases/tag/v1.0.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/cloudflare/circl@v1.0.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.0.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags/v1.0.0/manifests"}]},"repo_metadata_updated_at":"2025-08-16T03:16:52.908Z","dependent_packages_count":6861,"downloads":null,"downloads_period":null,"dependent_repos_count":2787,"rankings":{"downloads":null,"dependent_repos_count":0.15489030073409496,"dependent_packages_count":0.10312187470173503,"stargazers_count":2.0620225166717154,"forks_count":2.5657404891727036,"docker_downloads_count":0.10789411437606079,"average":0.998733859131262},"purl":"pkg:golang/github.com/cloudflare/circl","advisories":[{"uuid":"GSA_kwCzR0hTQS05NzYzLTRmOTQtZ2ZjaM4AA4Ql","url":"https://github.com/advisories/GHSA-9763-4f94-gfch","title":"CIRCL's Kyber: timing side-channel (kyberslash2)","description":"### Impact\nOn some platforms, when an attacker can time decapsulation of Kyber on forged cipher texts, they could possibly learn (parts of) the secret key.\n\nDoes not apply to ephemeral usage, such as when used in the regular way in TLS.\n\n### Patches\nPatched in 1.3.7.\n\n### References\n- [kyberslash.cr.yp.to](https://kyberslash.cr.yp.to/)","origin":"UNSPECIFIED","severity":"HIGH","published_at":"2024-01-08T16:45:05.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":0.0,"cvss_vector":null,"references":["https://github.com/cloudflare/circl/security/advisories/GHSA-9763-4f94-gfch","https://github.com/cloudflare/circl/commit/75ef91e8a2f438e6ce2b6e620d236add8be1887d","https://kyberslash.cr.yp.to","https://github.com/advisories/GHSA-9763-4f94-gfch"],"source_kind":"github","identifiers":["GHSA-9763-4f94-gfch"],"repository_url":"https://github.com/cloudflare/circl","blast_radius":0.0,"packages":[{"versions":[{"first_patched_version":"1.3.7","vulnerable_version_range":"\u003c 1.3.7"}],"ecosystem":"go","package_name":"github.com/cloudflare/circl"}],"created_at":"2024-01-08T17:05:55.681Z","updated_at":"2024-05-20T22:00:45.000Z","epss_percentage":null,"epss_percentile":null},{"uuid":"GSA_kwCzR0hTQS01MjJyLTk5NDYtZnc0M84ABK0-","url":"https://github.com/advisories/GHSA-522r-9946-fw43","title":"Duplicate Advisory: CIRCL-Fourq: Missing and wrong validation can lead to incorrect results","description":"## Duplicate Advisory\nThis advisory has been withdrawn because it is a duplicate of GHSA-2x5j-vhc8-9cwm. This link is maintained to preserve external references.\n\n## Original Description\n\nA flaw was found in CIRCL's implementation of the FourQ elliptic curve. This vulnerability allows an attacker to compromise session security via low-order point injection and incorrect point validation during Diffie-Hellman key exchange.","origin":"UNSPECIFIED","severity":"LOW","published_at":"2025-08-06T09:30:37.000Z","withdrawn_at":"2025-08-06T17:39:16.000Z","classification":"GENERAL","cvss_score":0.0,"cvss_vector":null,"references":["https://github.com/cloudflare/circl/security/advisories/GHSA-2x5j-vhc8-9cwm","https://nvd.nist.gov/vuln/detail/CVE-2025-8556","https://access.redhat.com/security/cve/CVE-2025-8556","https://bugzilla.redhat.com/show_bug.cgi?id=2371624","https://github.com/cloudflare/circl","https://github.com/cloudflare/circl/tree/v1.6.1","https://github.com/advisories/GHSA-522r-9946-fw43"],"source_kind":"github","identifiers":["GHSA-522r-9946-fw43"],"repository_url":"https://github.com/cloudflare/circl","blast_radius":0.0,"packages":[{"versions":[{"first_patched_version":"1.6.1","vulnerable_version_range":"\u003c 1.6.1"}],"ecosystem":"go","package_name":"github.com/cloudflare/circl"}],"created_at":"2025-08-06T18:09:46.386Z","updated_at":"2025-08-06T17:39:16.000Z","epss_percentage":null,"epss_percentile":null},{"uuid":"GSA_kwCzR0hTQS0yeDVqLXZoYzgtOWN3bc4ABI56","url":"https://github.com/advisories/GHSA-2x5j-vhc8-9cwm","title":"CIRCL-Fourq: Missing and wrong validation can lead to incorrect results","description":"### Impact\nThe CIRCL implementation of FourQ fails to validate user-supplied low-order points during Diffie-Hellman key exchange, potentially allowing attackers to force the identity point and compromise session security.\n\nMoreover, there is an incorrect point validation in ScalarMult can lead to incorrect results in the isEqual function and if a point is on the curve.\n\n\n### Patches\nVersion 1.6.1 (https://github.com/cloudflare/circl/tree/v1.6.1) mitigates the identified issues.\n\nWe acknowledge Alon Livne (Botanica Software Labs) for the reported findings.","origin":"UNSPECIFIED","severity":"LOW","published_at":"2025-06-10T21:18:33.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":0.0,"cvss_vector":null,"references":["https://github.com/cloudflare/circl/security/advisories/GHSA-2x5j-vhc8-9cwm","https://github.com/cloudflare/circl/tree/v1.6.1","https://nvd.nist.gov/vuln/detail/CVE-2025-8556","https://access.redhat.com/security/cve/CVE-2025-8556","https://bugzilla.redhat.com/show_bug.cgi?id=2371624","https://github.com/advisories/GHSA-2x5j-vhc8-9cwm"],"source_kind":"github","identifiers":["GHSA-2x5j-vhc8-9cwm","CVE-2025-8556"],"repository_url":"https://github.com/cloudflare/circl","blast_radius":0.0,"packages":[{"versions":[{"first_patched_version":"1.6.1","vulnerable_version_range":"\u003c 1.6.1"}],"ecosystem":"go","package_name":"github.com/cloudflare/circl"}],"created_at":"2025-06-10T22:08:08.367Z","updated_at":"2025-08-13T01:29:53.305Z","epss_percentage":0.00022,"epss_percentile":0.04053},{"uuid":"GSA_kwCzR0hTQS0ycTg5LTQ4NWMtOWoyeM4AAzSj","url":"https://github.com/advisories/GHSA-2q89-485c-9j2x","title":"Improper random reading in CIRCL","description":"### Impact\nWhen sampling randomness for a shared secret, the implementation of Kyber and FrodoKEM, did not check whether `crypto/rand.Read()` returns an error. In rare deployment cases (error thrown by the `Read()` function), this could lead to a predictable shared secret.\n\nThe tkn20 and blindrsa components did not check whether enough randomness was returned from the user provided randomness source. Typically the user provides `crypto/rand.Reader`, which in the vast majority of cases will always return the right number random bytes. In the cases where it does not, or the user provides a source that does not, the blinding for blindrsa is weak and integrity of the plaintext is not ensured in tkn20.\n\n\n### Patches\nThe fix was introduced in CIRCL v. 1.3.3\n","origin":"UNSPECIFIED","severity":"MODERATE","published_at":"2023-05-11T20:40:54.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":0.0,"cvss_vector":null,"references":["https://github.com/cloudflare/circl/security/advisories/GHSA-2q89-485c-9j2x","https://nvd.nist.gov/vuln/detail/CVE-2023-1732","https://github.com/cloudflare/circl/commit/ff8d91225f8954b4970b6d6382d2e4c78f4a4cf8","https://github.com/cloudflare/circl/releases/tag/v1.3.3","https://github.com/advisories/GHSA-2q89-485c-9j2x"],"source_kind":"github","identifiers":["GHSA-2q89-485c-9j2x","CVE-2023-1732"],"repository_url":"https://github.com/cloudflare/circl","blast_radius":0.0,"packages":[{"versions":[{"first_patched_version":"1.3.3","vulnerable_version_range":"\u003c 1.3.3"}],"ecosystem":"go","package_name":"github.com/cloudflare/circl"}],"created_at":"2023-05-11T21:03:21.160Z","updated_at":"2023-11-06T05:06:21.000Z","epss_percentage":0.00192,"epss_percentile":0.41469}],"docker_usage_url":"https://docker.ecosyste.ms/usage/go/github.com/cloudflare/circl","docker_dependents_count":1835,"docker_downloads_count":6747227080,"usage_url":"https://repos.ecosyste.ms/usage/go/github.com/cloudflare/circl","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/go/github.com/cloudflare/circl/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2025-08-07T03:14:56.558Z","issues_count":63,"pull_requests_count":145,"avg_time_to_close_issue":14312665.555555556,"avg_time_to_close_pull_request":2838644.4112903224,"issues_closed_count":45,"pull_requests_closed_count":124,"pull_request_authors_count":25,"issue_authors_count":42,"avg_comments_per_issue":2.492063492063492,"avg_comments_per_pull_request":1.1724137931034484,"merged_pull_requests_count":116,"bot_issues_count":0,"bot_pull_requests_count":2,"past_year_issues_count":19,"past_year_pull_requests_count":23,"past_year_avg_time_to_close_issue":3478759.5,"past_year_avg_time_to_close_pull_request":330228.8333333333,"past_year_issues_closed_count":12,"past_year_pull_requests_closed_count":18,"past_year_pull_request_authors_count":7,"past_year_issue_authors_count":15,"past_year_avg_comments_per_issue":2.4210526315789473,"past_year_avg_comments_per_pull_request":0.4782608695652174,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":1,"past_year_merged_pull_requests_count":18,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/issues","maintainers":[{"login":"bwesterb","count":29,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/bwesterb"}],"active_maintainers":[{"login":"bwesterb","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/bwesterb"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fcloudflare%2Fcircl/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fcloudflare%2Fcircl/version_numbers","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fcloudflare%2Fcircl/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fcloudflare%2Fcircl/related_packages","maintainers":[],"registry":{"name":"proxy.golang.org","url":"https://proxy.golang.org","ecosystem":"go","default":true,"packages_count":1951676,"maintainers_count":0,"namespaces_count":741275,"keywords_count":109185,"github":"golang","metadata":{"funded_packages_count":49011},"icon_url":"https://github.com/golang.png","created_at":"2022-04-04T15:19:22.939Z","updated_at":"2025-09-05T05:14:06.439Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/namespaces"}}],"commits":{"id":8668,"full_name":"cloudflare/circl","default_branch":"main","committers":[{"name":"armfazh","email":"armfazh@cloudflare.com","login":"armfazh","count":339},{"name":"Bas Westerbaan","email":"bas@westerbaan.name","login":"bwesterb","count":95},{"name":"Kris Kwiatkowski","email":"kris@cloudflare.com","login":null,"count":67},{"name":"Christopher Wood","email":"caw@heapingbits.net","login":"chris-wood","count":32},{"name":"Josh Soref","email":"2119212+jsoref","login":"jsoref","count":31},{"name":"xvzcf","email":"xvzcf","login":"xvzcf","count":15},{"name":"Watson Ladd","email":"watson@cloudflare.com","login":null,"count":13},{"name":"Sofía Celi","email":"cherenkovd69@gmail.com","login":"claucece","count":11},{"name":"Michael McLoughlin","email":"mmcloughlin@gmail.com","login":"mmcloughlin","count":10},{"name":"John Bampton","email":"jbampton","login":"jbampton","count":8},{"name":"Christopher Patton","email":"chrispatton@gmail.com","login":"cjpatton","count":7},{"name":"Peter Wu","email":"pwu@cloudflare.com","login":"Lekensteyn","count":5},{"name":"Tom Thorogood","email":"me+github@tomthorogood.co.uk","login":"tmthrgd","count":5},{"name":"Tanya Verma","email":"tverma@cloudflare.com","login":"tanyav2","count":4},{"name":"zhdllwyc","email":"yingchew@usc.edu","login":null,"count":3},{"name":"Hrushikesh Deshpande","email":"161167942+hrushikeshdeshpande","login":"hrushikeshdeshpande","count":2},{"name":"dependabot[bot]","email":"49699333+dependabot[bot]","login":"dependabot[bot]","count":1},{"name":"Nadim Kobeissi","email":"nadim@symbolic.software","login":"nadimkobeissi","count":1},{"name":"Monis Khan","email":"i@monis.app","login":"enj","count":1},{"name":"MingLLuo","email":"sh770240869@163.com","login":"MingLLuo","count":1},{"name":"Mik Kocikowski","email":"mik@cloudflare.com","login":"mkocikowski","count":1},{"name":"Matt Clarkson","email":"mattyclarkson@gmail.com","login":"mattyclarkson","count":1},{"name":"Ko-","email":"Ko-","login":"Ko-","count":1},{"name":"Josh Brown","email":"josh9051@gmail.com","login":"jbis9051","count":1},{"name":"Douglas Daniels","email":"daniels.douglas@gmail.com","login":"dougnukem","count":1},{"name":"Daniel","email":"dhcgn","login":"dhcgn","count":1},{"name":"Baoshuo Ren","email":"i@baoshuo.ren","login":"renbaoshuo","count":1}],"total_commits":658,"total_committers":27,"total_bot_commits":1,"total_bot_committers":1,"mean_commits":24.37037037037037,"dds":0.4848024316109423,"past_year_committers":[{"name":"armfazh","email":"armfazh@cloudflare.com","login":"armfazh","count":44},{"name":"Bas Westerbaan","email":"bas@westerbaan.name","login":"bwesterb","count":8},{"name":"Hrushikesh Deshpande","email":"161167942+hrushikeshdeshpande","login":"hrushikeshdeshpande","count":2},{"name":"Peter Wu","email":"pwu@cloudflare.com","login":"Lekensteyn","count":2},{"name":"MingLLuo","email":"sh770240869@163.com","login":"MingLLuo","count":1}],"past_year_total_commits":57,"past_year_total_committers":5,"past_year_total_bot_commits":0,"past_year_total_bot_committers":0,"past_year_mean_commits":11.4,"past_year_dds":0.22807017543859653,"last_synced_at":"2025-05-28T23:21:26.580Z","last_synced_commit":"c6d33e35234ebf5c4319d12ae7d77d7d17053e56","created_at":"2023-03-07T09:48:51.923Z","updated_at":"2025-05-28T23:21:26.620Z","commits_url":"https://commits.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/commits","host":{"name":"GitHub","url":"https://github.com","kind":"github","last_synced_at":"2025-08-26T00:00:11.761Z","repositories_count":5479765,"commits_count":853308191,"contributors_count":31095157,"owners_count":906558,"icon_url":"https://github.com/github.png","host_url":"https://commits.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://commits.ecosyste.ms/api/v1/hosts/GitHub/repositories"}},"issues_stats":{"full_name":"cloudflare/circl","html_url":"https://github.com/cloudflare/circl","last_synced_at":"2025-08-31T11:38:48.972Z","status":null,"issues_count":66,"pull_requests_count":170,"avg_time_to_close_issue":13590018.479166666,"avg_time_to_close_pull_request":2983692.3450704226,"issues_closed_count":48,"pull_requests_closed_count":142,"pull_request_authors_count":27,"issue_authors_count":44,"avg_comments_per_issue":2.242424242424242,"avg_comments_per_pull_request":1.111764705882353,"merged_pull_requests_count":132,"bot_issues_count":0,"bot_pull_requests_count":2,"past_year_issues_count":20,"past_year_pull_requests_count":46,"past_year_avg_time_to_close_issue":2064902.9285714286,"past_year_avg_time_to_close_pull_request":1309839.1176470588,"past_year_issues_closed_count":14,"past_year_pull_requests_closed_count":34,"past_year_pull_request_authors_count":9,"past_year_issue_authors_count":17,"past_year_avg_comments_per_issue":1.35,"past_year_avg_comments_per_pull_request":0.6304347826086957,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":1,"past_year_merged_pull_requests_count":32,"created_at":"2023-05-16T04:42:51.131Z","updated_at":"2025-09-03T04:27:39.698Z","repository_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl","issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/issues","issue_labels_count":{"question":8,"bug":6,"help wanted":4,"good first issue":4,"needs investigation":4,"new feature":2,"tests":2,"invalid":1,"enhancement":1,"cosmetic":1,"on-hold":1,"documentation":1,"maintenance":1},"pull_request_labels_count":{"new feature":29,"maintenance":19,"fix-A-bug":14,"enhancement":12,"cosmetic":11,"changesAPI":10,"tests":5,"documentation":4,"on-hold":3,"dependencies":2,"bug":2,"deprecated":1},"issue_author_associations_count":{"NONE":45,"CONTRIBUTOR":14,"MEMBER":4},"pull_request_author_associations_count":{"CONTRIBUTOR":147,"MEMBER":39,"NONE":16},"issue_authors":{"armfazh":5,"bwesterb":4,"chris-wood":3,"kriskwiatkowski":3,"UladzimirTrehubenka":3,"david415":3,"3052":2,"krissully":2,"udf2457":2,"JensAc":1,"alenhorvat":1,"ravinderncog":1,"mvd-ows":1,"pmcampones":1,"y12studio":1,"robinmessage":1,"qnfm":1,"salrashid123":1,"emersion":1,"jmcrawford45":1,"OR13":1,"decentralgabe":1,"sander":1,"matteosz":1,"Idle02":1,"RamBramash":1,"hafeidejiangyou":1,"EKTehtris":1,"dhcgn":1,"Silence-worker-02":1,"karalabe":1,"hhhguany":1,"sashamor":1,"zplzpl":1,"enj":1,"mattyclarkson":1,"arthurus-rex":1,"ChristianOConnor":1,"aflox405":1,"ilway25":1,"ytrezq":1,"jimmyl02":1,"AnomalRoil":1,"devthejo":1,"paocalvi":1},"pull_request_authors":{"armfazh":99,"bwesterb":39,"chris-wood":9,"Lekensteyn":9,"zhdllwyc":7,"elementrics":5,"tanyav2":5,"tmthrgd":4,"ilway25":2,"dependabot[bot]":2,"hrushikeshdeshpande":2,"mattyclarkson":2,"emersion":2,"LINCKODE":2,"MingLLuo":2,"zyjblockchain":2,"dhcgn":1,"renbaoshuo":1,"juanli16":1,"nadimkobeissi":1,"Keelan10":1,"enj":1,"pufferffish":1,"dfaranha":1,"jbis9051":1},"host":{"name":"GitHub","url":"https://github.com","kind":"github","last_synced_at":"2025-09-05T00:00:10.444Z","repositories_count":10094553,"issues_count":31373669,"pull_requests_count":97058592,"authors_count":10699554,"icon_url":"https://github.com/github.png","host_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories","owners_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/owners","authors_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors"},"past_year_issue_labels_count":{"needs investigation":2,"good first issue":1,"tests":1,"bug":1,"question":1},"past_year_pull_request_labels_count":{"enhancement":5,"maintenance":4,"new feature":4,"tests":2,"dependencies":2,"documentation":2,"bug":2,"fix-A-bug":2,"cosmetic":1,"on-hold":1},"past_year_issue_author_associations_count":{"NONE":17,"CONTRIBUTOR":2,"MEMBER":1},"past_year_pull_request_author_associations_count":{"CONTRIBUTOR":40,"MEMBER":7,"NONE":6},"past_year_issue_authors":{"3052":2,"armfazh":2,"udf2457":2,"zplzpl":1,"ytrezq":1,"UladzimirTrehubenka":1,"salrashid123":1,"robinmessage":1,"ravinderncog":1,"RamBramash":1,"paocalvi":1,"mvd-ows":1,"karalabe":1,"jimmyl02":1,"bwesterb":1,"arthurus-rex":1,"alenhorvat":1},"past_year_pull_request_authors":{"armfazh":28,"bwesterb":7,"elementrics":5,"Lekensteyn":4,"zyjblockchain":2,"hrushikeshdeshpande":2,"dependabot[bot]":2,"MingLLuo":2,"dfaranha":1},"maintainers":[{"login":"bwesterb","count":43,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/bwesterb"}],"active_maintainers":[{"login":"bwesterb","count":8,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/bwesterb"}]},"events":{"total":{"CreateEvent":9,"ReleaseEvent":2,"IssuesEvent":27,"WatchEvent":187,"DeleteEvent":7,"IssueCommentEvent":54,"PushEvent":40,"PullRequestReviewEvent":131,"PullRequestReviewCommentEvent":116,"PullRequestEvent":48,"ForkEvent":35},"last_year":{"CreateEvent":9,"ReleaseEvent":2,"IssuesEvent":27,"WatchEvent":187,"DeleteEvent":7,"IssueCommentEvent":54,"PushEvent":40,"PullRequestReviewEvent":131,"PullRequestReviewCommentEvent":116,"PullRequestEvent":48,"ForkEvent":35}},"keywords":["circl","cryptography","csidh","dilithium","ed25519","ed448","elliptic-curves","go","golang","hpke","kyber","pki","post-quantum","sidh"],"dependencies":[{"ecosystem":"actions","filepath":".github/workflows/ci-actions.yml","sha":null,"kind":"manifest","created_at":"2023-01-15T11:00:44.184Z","updated_at":"2023-01-15T11:00:44.184Z","repository_link":"https://github.com/cloudflare/circl/blob/main/.github/workflows/ci-actions.yml","dependencies":[{"id":6922706181,"package_name":"actions/setup-go","ecosystem":"actions","requirements":"v3","direct":true,"kind":"composite","optional":false},{"id":6922706182,"package_name":"actions/checkout","ecosystem":"actions","requirements":"v3","direct":true,"kind":"composite","optional":false},{"id":6922706183,"package_name":"golangci/golangci-lint-action","ecosystem":"actions","requirements":"v3","direct":true,"kind":"composite","optional":false},{"id":6922706184,"package_name":"codecov/codecov-action","ecosystem":"actions","requirements":"v2","direct":true,"kind":"composite","optional":false},{"id":6922706185,"package_name":"github/codeql-action/init","ecosystem":"actions","requirements":"v2","direct":true,"kind":"composite","optional":false},{"id":6922706186,"package_name":"github/codeql-action/analyze","ecosystem":"actions","requirements":"v2","direct":true,"kind":"composite","optional":false}]}],"score":33.276179845501126,"created_at":"2025-09-04T15:51:13.158Z","updated_at":"2025-10-07T08:15:59.968Z","avatar_url":"https://github.com/cloudflare.png","language":"Go","category":null,"sub_category":null,"monthly_downloads":0,"funding_links":[],"readme_doi_urls":["https://doi.org/10.17487/RFC7748","https://doi.org/10.17487/RFC8032","https://doi.org/10.17487/RFC8235","https://doi.org/10.17487/RFC9180","https://doi.org/10.17487/RFC9380","https://doi.org/10.17487/RFC9474","https://doi.org/10.17487/RFC9496","https://doi.org/10.17487/RFC9497","https://doi.org/10.6028/NIST.FIPS.202","https://doi.org/10.6028/NIST.FIPS.204","https://doi.org/10.6028/NIST.FIPS.205","https://doi.org/10.6028/NIST.FIPS.186-5","https://doi.org/10.6028/NIST.FIPS.203"],"works":{},"citation_counts":{},"total_citations":0,"keywords_from_contributors":["interactive","ecdsa","zero-knowledge","zkattest","graph-computing","charts","mesh","interpretability","sequences","generic"],"project_url":"https://science.ecosyste.ms/api/v1/projects/39034","html_url":"https://science.ecosyste.ms/projects/39034","bibtex_url":"https://science.ecosyste.ms/projects/39034/export.bibtex","apalike_url":"https://science.ecosyste.ms/projects/39034/export.apalike"}