{"id":5100,"name":"tact","description":"Taxonomy addition for complete trees","url":"https://github.com/jonchang/tact","last_synced_at":"2025-09-04T18:27:40.567Z","repository":{"id":35031884,"uuid":"111622054","full_name":"jonchang/tact","owner":"jonchang","description":"Taxonomy addition for complete trees","archived":false,"fork":false,"pushed_at":"2025-09-01T18:25:37.000Z","size":800,"stargazers_count":4,"open_issues_count":2,"forks_count":2,"subscribers_count":2,"default_branch":"master","last_synced_at":"2025-09-01T18:26:15.709Z","etag":null,"topics":["python"],"latest_commit_sha":null,"homepage":"https://tact.jonathanchang.org","language":"Python","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/jonchang.png","metadata":{"files":{"readme":"README.md","changelog":"NEWS.md","contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":"CITATION.cff","codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null},"funding":{"github":"jonchang"}},"created_at":"2017-11-22T01:38:24.000Z","updated_at":"2025-09-01T18:25:33.000Z","dependencies_parsed_at":"2024-12-26T09:20:12.840Z","dependency_job_id":"77bdf50c-b399-4058-b396-da196723a62d","html_url":"https://github.com/jonchang/tact","commit_stats":{"total_commits":545,"total_committers":5,"mean_commits":109.0,"dds":0.655045871559633,"last_synced_commit":"5f3b80342657a51c6acc965fae3518868ee28c4c"},"previous_names":[],"tags_count":22,"template":false,"template_full_name":null,"purl":"pkg:github/jonchang/tact","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jonchang%2Ftact","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jonchang%2Ftact/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jonchang%2Ftact/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jonchang%2Ftact/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/jonchang","download_url":"https://codeload.github.com/jonchang/tact/tar.gz/refs/heads/master","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jonchang%2Ftact/sbom","scorecard":{"id":530681,"data":{"date":"2025-08-11","repo":{"name":"github.com/jonchang/tact","commit":"edb95096c3e289efc9e79e2d0d8563b2c1e8acd8"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":4.5,"checks":[{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Maintained","score":0,"reason":"1 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Code-Review","score":0,"reason":"Found 0/8 approved changesets -- score normalized to 0","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: jobLevel 'actions' permission set to 'read': .github/workflows/codeql-analysis.yml:17","Info: jobLevel 'contents' permission set to 'read': .github/workflows/codeql-analysis.yml:18","Warn: no topLevel permission defined: .github/workflows/codeql-analysis.yml:1","Warn: no topLevel permission defined: .github/workflows/docker.yml:1","Warn: no topLevel permission defined: .github/workflows/docs.yml:1","Warn: no topLevel permission defined: .github/workflows/pythonpackage.yml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: MIT License: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Info: Possibly incomplete results: error parsing shell code: reached EOF without closing quote ': .github/workflows/pythonpackage.yml:47","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/jonchang/tact/codeql-analysis.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:32: update your workflow using https://app.stepsecurity.io/secureworkflow/jonchang/tact/codeql-analysis.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/jonchang/tact/codeql-analysis.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/jonchang/tact/codeql-analysis.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docker.yml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/jonchang/tact/docker.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docker.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/jonchang/tact/docker.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docker.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/jonchang/tact/docker.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docker.yml:47: update your workflow using https://app.stepsecurity.io/secureworkflow/jonchang/tact/docker.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docker.yml:54: update your workflow using https://app.stepsecurity.io/secureworkflow/jonchang/tact/docker.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docker.yml:61: update your workflow using https://app.stepsecurity.io/secureworkflow/jonchang/tact/docker.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs.yml:12: update your workflow using https://app.stepsecurity.io/secureworkflow/jonchang/tact/docs.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs.yml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/jonchang/tact/docs.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs.yml:32: update your workflow using https://app.stepsecurity.io/secureworkflow/jonchang/tact/docs.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs.yml:48: update your workflow using https://app.stepsecurity.io/secureworkflow/jonchang/tact/docs.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pythonpackage.yml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/jonchang/tact/pythonpackage.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pythonpackage.yml:16: update your workflow using https://app.stepsecurity.io/secureworkflow/jonchang/tact/pythonpackage.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pythonpackage.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/jonchang/tact/pythonpackage.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pythonpackage.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/jonchang/tact/pythonpackage.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pythonpackage.yml:72: update your workflow using https://app.stepsecurity.io/secureworkflow/jonchang/tact/pythonpackage.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pythonpackage.yml:89: update your workflow using https://app.stepsecurity.io/secureworkflow/jonchang/tact/pythonpackage.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pythonpackage.yml:93: update your workflow using https://app.stepsecurity.io/secureworkflow/jonchang/tact/pythonpackage.yml/master?enable=pin","Warn: containerImage not pinned by hash: Dockerfile:1: pin your Docker image by updating debian:trixie-slim to debian:trixie-slim@sha256:c85a2732e97694ea77237c61304b3bb410e0e961dd6ee945997a06c788c545bb","Warn: pipCommand not pinned by hash: .github/workflows/docs.yml:20","Warn: pipCommand not pinned by hash: .github/workflows/docs.yml:28","Info:   0 out of  14 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of   7 third-party GitHubAction dependencies pinned","Info:   0 out of   1 containerImage dependencies pinned","Info:   0 out of   2 pipCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Security-Policy","score":0,"reason":"security policy file not detected","details":["Warn: no security policy file detected","Warn: no security file to analyze","Warn: no security file to analyze","Warn: no security file to analyze"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Vulnerabilities","score":9,"reason":"1 existing vulnerabilities detected","details":["Warn: Project is vulnerable to: PYSEC-2022-42969"],"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"Packaging","score":10,"reason":"packaging workflow detected","details":["Info: Project packages its releases by way of GitHub Actions.: .github/workflows/docker.yml:21"],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"SAST","score":7,"reason":"SAST tool detected but not run on all commits","details":["Info: SAST configuration detected: CodeQL","Warn: 10 commits out of 28 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-20T05:38:58.553Z","repository_id":35031884,"created_at":"2025-08-20T05:38:58.553Z","updated_at":"2025-08-20T05:38:58.553Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":273652013,"owners_count":25144163,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","status":"online","status_checked_at":"2025-09-04T02:00:08.968Z","response_time":61,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"owner":{"login":"jonchang","name":"Jonathan Chang","uuid":"213484","kind":"user","description":"","email":"","website":"https://jonathanchang.org","location":"Los Angeles","twitter":null,"company":null,"icon_url":"https://avatars.githubusercontent.com/u/213484?u=329dff6508b5522f82a609542f7ce26d727854ec\u0026v=4","repositories_count":82,"last_synced_at":"2025-08-28T12:23:07.016Z","metadata":{"has_sponsors_listing":true,"funding":{"github":"jonchang"}},"html_url":"https://github.com/jonchang","funding_links":["https://github.com/sponsors/jonchang"],"total_stars":85,"followers":147,"following":0,"created_at":"2022-11-03T11:52:55.966Z","updated_at":"2025-08-28T12:23:07.016Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/jonchang","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/jonchang/repositories"},"packages":[{"id":2938730,"name":"tact","ecosystem":"pypi","description":"Taxonomic addition for complete trees: Adds tips to a backbone phylogeny using taxonomy simulated with birth-death models","homepage":"https://tact.jonathanchang.org","licenses":"MIT","normalized_licenses":["MIT"],"repository_url":"https://github.com/jonchang/tact","keywords_array":[],"namespace":null,"versions_count":18,"first_release_published_at":"2019-07-24T09:04:10.000Z","latest_release_published_at":"2024-12-16T20:52:31.000Z","latest_release_number":"0.6.0","last_synced_at":"2025-09-01T18:39:32.470Z","created_at":"2022-04-10T12:46:19.765Z","updated_at":"2025-09-01T18:59:44.821Z","registry_url":"https://pypi.org/project/tact/","install_command":"pip install tact --index-url https://pypi.org/simple","documentation_url":"https://tact.readthedocs.io/","metadata":{"funding":null,"documentation":null,"classifiers":["Development Status :: 5 - Production/Stable","Environment :: Console","Intended Audience :: Science/Research","License :: OSI Approved :: MIT License","Programming Language :: Python :: 3","Programming Language :: Python :: 3.10","Programming Language :: Python :: 3.11","Programming Language :: Python :: 3.12","Programming Language :: Python :: 3.13","Topic :: Scientific/Engineering :: Bio-Informatics"],"normalized_name":"tact","project_status":null},"repo_metadata":{"id":35031884,"uuid":"111622054","full_name":"jonchang/tact","owner":"jonchang","description":"Taxonomy addition for complete trees","archived":false,"fork":false,"pushed_at":"2025-09-01T18:25:37.000Z","size":800,"stargazers_count":4,"open_issues_count":2,"forks_count":2,"subscribers_count":2,"default_branch":"master","last_synced_at":"2025-09-01T18:26:15.709Z","etag":null,"topics":["python"],"latest_commit_sha":null,"homepage":"https://tact.jonathanchang.org","language":"Python","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/jonchang.png","metadata":{"files":{"readme":"README.md","changelog":"NEWS.md","contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":"CITATION.cff","codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null},"funding":{"github":"jonchang"}},"created_at":"2017-11-22T01:38:24.000Z","updated_at":"2025-09-01T18:25:33.000Z","dependencies_parsed_at":"2024-12-26T09:20:12.840Z","dependency_job_id":"77bdf50c-b399-4058-b396-da196723a62d","html_url":"https://github.com/jonchang/tact","commit_stats":{"total_commits":545,"total_committers":5,"mean_commits":109.0,"dds":0.655045871559633,"last_synced_commit":"5f3b80342657a51c6acc965fae3518868ee28c4c"},"previous_names":[],"tags_count":22,"template":false,"template_full_name":null,"purl":"pkg:github/jonchang/tact","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jonchang%2Ftact","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jonchang%2Ftact/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jonchang%2Ftact/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jonchang%2Ftact/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/jonchang","download_url":"https://codeload.github.com/jonchang/tact/tar.gz/refs/heads/master","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jonchang%2Ftact/sbom","scorecard":{"id":530681,"data":{"date":"2025-08-11","repo":{"name":"github.com/jonchang/tact","commit":"edb95096c3e289efc9e79e2d0d8563b2c1e8acd8"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":4.5,"checks":[{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Maintained","score":0,"reason":"1 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Code-Review","score":0,"reason":"Found 0/8 approved changesets -- score normalized to 0","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: jobLevel 'actions' permission set to 'read': .github/workflows/codeql-analysis.yml:17","Info: jobLevel 'contents' permission set to 'read': .github/workflows/codeql-analysis.yml:18","Warn: no topLevel permission defined: .github/workflows/codeql-analysis.yml:1","Warn: no topLevel permission defined: .github/workflows/docker.yml:1","Warn: no topLevel permission defined: .github/workflows/docs.yml:1","Warn: no topLevel permission defined: .github/workflows/pythonpackage.yml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: MIT License: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Info: Possibly incomplete results: error parsing shell code: reached EOF without closing quote ': .github/workflows/pythonpackage.yml:47","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/jonchang/tact/codeql-analysis.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:32: update your workflow using https://app.stepsecurity.io/secureworkflow/jonchang/tact/codeql-analysis.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/jonchang/tact/codeql-analysis.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/jonchang/tact/codeql-analysis.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docker.yml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/jonchang/tact/docker.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docker.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/jonchang/tact/docker.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docker.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/jonchang/tact/docker.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docker.yml:47: update your workflow using https://app.stepsecurity.io/secureworkflow/jonchang/tact/docker.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docker.yml:54: update your workflow using https://app.stepsecurity.io/secureworkflow/jonchang/tact/docker.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docker.yml:61: update your workflow using https://app.stepsecurity.io/secureworkflow/jonchang/tact/docker.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs.yml:12: update your workflow using https://app.stepsecurity.io/secureworkflow/jonchang/tact/docs.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs.yml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/jonchang/tact/docs.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs.yml:32: update your workflow using https://app.stepsecurity.io/secureworkflow/jonchang/tact/docs.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs.yml:48: update your workflow using https://app.stepsecurity.io/secureworkflow/jonchang/tact/docs.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pythonpackage.yml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/jonchang/tact/pythonpackage.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pythonpackage.yml:16: update your workflow using https://app.stepsecurity.io/secureworkflow/jonchang/tact/pythonpackage.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pythonpackage.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/jonchang/tact/pythonpackage.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pythonpackage.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/jonchang/tact/pythonpackage.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pythonpackage.yml:72: update your workflow using https://app.stepsecurity.io/secureworkflow/jonchang/tact/pythonpackage.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pythonpackage.yml:89: update your workflow using https://app.stepsecurity.io/secureworkflow/jonchang/tact/pythonpackage.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pythonpackage.yml:93: update your workflow using https://app.stepsecurity.io/secureworkflow/jonchang/tact/pythonpackage.yml/master?enable=pin","Warn: containerImage not pinned by hash: Dockerfile:1: pin your Docker image by updating debian:trixie-slim to debian:trixie-slim@sha256:c85a2732e97694ea77237c61304b3bb410e0e961dd6ee945997a06c788c545bb","Warn: pipCommand not pinned by hash: .github/workflows/docs.yml:20","Warn: pipCommand not pinned by hash: .github/workflows/docs.yml:28","Info:   0 out of  14 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of   7 third-party GitHubAction dependencies pinned","Info:   0 out of   1 containerImage dependencies pinned","Info:   0 out of   2 pipCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Security-Policy","score":0,"reason":"security policy file not detected","details":["Warn: no security policy file detected","Warn: no security file to analyze","Warn: no security file to analyze","Warn: no security file to analyze"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Vulnerabilities","score":9,"reason":"1 existing vulnerabilities detected","details":["Warn: Project is vulnerable to: PYSEC-2022-42969"],"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"Packaging","score":10,"reason":"packaging workflow detected","details":["Info: Project packages its releases by way of GitHub Actions.: .github/workflows/docker.yml:21"],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"SAST","score":7,"reason":"SAST tool detected but not run on all commits","details":["Info: SAST configuration detected: CodeQL","Warn: 10 commits out of 28 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-20T05:38:58.553Z","repository_id":35031884,"created_at":"2025-08-20T05:38:58.553Z","updated_at":"2025-08-20T05:38:58.553Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":273175318,"owners_count":25058526,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","status":"online","status_checked_at":"2025-09-01T02:00:09.058Z","response_time":120,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"jonchang","name":"Jonathan Chang","uuid":"213484","kind":"user","description":"","email":"","website":"https://jonathanchang.org","location":"Los Angeles","twitter":null,"company":null,"icon_url":"https://avatars.githubusercontent.com/u/213484?u=329dff6508b5522f82a609542f7ce26d727854ec\u0026v=4","repositories_count":82,"last_synced_at":"2025-08-28T12:23:07.016Z","metadata":{"has_sponsors_listing":true,"funding":{"github":"jonchang"}},"html_url":"https://github.com/jonchang","funding_links":["https://github.com/sponsors/jonchang"],"total_stars":85,"followers":147,"following":0,"created_at":"2022-11-03T11:52:55.966Z","updated_at":"2025-08-28T12:23:07.016Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/jonchang","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/jonchang/repositories"},"tags":[{"name":"v0.6.0","sha":"61adbc670aace92942b497bacd0b08c23adda1b7","kind":"commit","published_at":"2024-12-16T20:46:12.000Z","download_url":"https://codeload.github.com/jonchang/tact/tar.gz/v0.6.0","html_url":"https://github.com/jonchang/tact/releases/tag/v0.6.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/jonchang/tact@v0.6.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jonchang%2Ftact/tags/v0.6.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jonchang%2Ftact/tags/v0.6.0/manifests"},{"name":"v0.5.0","sha":"5aaa4a5817c0673deb8b5b4e03207c82292759fb","kind":"commit","published_at":"2023-04-23T05:00:01.000Z","download_url":"https://codeload.github.com/jonchang/tact/tar.gz/v0.5.0","html_url":"https://github.com/jonchang/tact/releases/tag/v0.5.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/jonchang/tact@v0.5.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jonchang%2Ftact/tags/v0.5.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jonchang%2Ftact/tags/v0.5.0/manifests"},{"name":"v0.4.1","sha":"7b012dd05e0484368f45302c86d09a31059681a3","kind":"commit","published_at":"2021-08-03T04:39:39.000Z","download_url":"https://codeload.github.com/jonchang/tact/tar.gz/v0.4.1","html_url":"https://github.com/jonchang/tact/releases/tag/v0.4.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/jonchang/tact@v0.4.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jonchang%2Ftact/tags/v0.4.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jonchang%2Ftact/tags/v0.4.1/manifests"},{"name":"v0.4.0","sha":"f4d60c37152e6c8cfff254039f9e3fa9ccca8473","kind":"commit","published_at":"2021-07-04T19:41:47.000Z","download_url":"https://codeload.github.com/jonchang/tact/tar.gz/v0.4.0","html_url":"https://github.com/jonchang/tact/releases/tag/v0.4.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/jonchang/tact@v0.4.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jonchang%2Ftact/tags/v0.4.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jonchang%2Ftact/tags/v0.4.0/manifests"},{"name":"v0.3.4","sha":"52ad7ad14de2045bd9599240933e623ca1d0de31","kind":"commit","published_at":"2020-11-05T09:11:31.000Z","download_url":"https://codeload.github.com/jonchang/tact/tar.gz/v0.3.4","html_url":"https://github.com/jonchang/tact/releases/tag/v0.3.4","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/jonchang/tact@v0.3.4","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jonchang%2Ftact/tags/v0.3.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jonchang%2Ftact/tags/v0.3.4/manifests"},{"name":"v0.3.3","sha":"e7fe46a810b07591bce876d755ad460f80e49454","kind":"commit","published_at":"2020-10-26T06:58:05.000Z","download_url":"https://codeload.github.com/jonchang/tact/tar.gz/v0.3.3","html_url":"https://github.com/jonchang/tact/releases/tag/v0.3.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/jonchang/tact@v0.3.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jonchang%2Ftact/tags/v0.3.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jonchang%2Ftact/tags/v0.3.3/manifests"},{"name":"v0.3.2","sha":"d18b57d3b2fd2f3d7f0c3b19253b6da4f7069286","kind":"commit","published_at":"2020-09-20T13:02:35.000Z","download_url":"https://codeload.github.com/jonchang/tact/tar.gz/v0.3.2","html_url":"https://github.com/jonchang/tact/releases/tag/v0.3.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/jonchang/tact@v0.3.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jonchang%2Ftact/tags/v0.3.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jonchang%2Ftact/tags/v0.3.2/manifests"},{"name":"v0.3.1","sha":"96ae822b90f8eba9c5958427c5b53bd514e001a1","kind":"commit","published_at":"2020-07-15T06:36:16.000Z","download_url":"https://codeload.github.com/jonchang/tact/tar.gz/v0.3.1","html_url":"https://github.com/jonchang/tact/releases/tag/v0.3.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/jonchang/tact@v0.3.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jonchang%2Ftact/tags/v0.3.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jonchang%2Ftact/tags/v0.3.1/manifests"},{"name":"v0.3.0","sha":"97132e78b3ac48f29a9c53f527385f492adeb993","kind":"commit","published_at":"2020-07-14T07:50:51.000Z","download_url":"https://codeload.github.com/jonchang/tact/tar.gz/v0.3.0","html_url":"https://github.com/jonchang/tact/releases/tag/v0.3.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/jonchang/tact@v0.3.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jonchang%2Ftact/tags/v0.3.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jonchang%2Ftact/tags/v0.3.0/manifests"},{"name":"v0.2.7","sha":"af1054391cdb7ff2da7af273cbcc33abebaf92ab","kind":"commit","published_at":"2020-07-13T11:26:50.000Z","download_url":"https://codeload.github.com/jonchang/tact/tar.gz/v0.2.7","html_url":"https://github.com/jonchang/tact/releases/tag/v0.2.7","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/jonchang/tact@v0.2.7","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jonchang%2Ftact/tags/v0.2.7","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jonchang%2Ftact/tags/v0.2.7/manifests"},{"name":"v0.2.6","sha":"f53a4c7889961df65179af9d878fda9d869a95d2","kind":"commit","published_at":"2020-07-13T06:55:51.000Z","download_url":"https://codeload.github.com/jonchang/tact/tar.gz/v0.2.6","html_url":"https://github.com/jonchang/tact/releases/tag/v0.2.6","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/jonchang/tact@v0.2.6","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jonchang%2Ftact/tags/v0.2.6","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jonchang%2Ftact/tags/v0.2.6/manifests"},{"name":"v0.2.5","sha":"332608178b15182f7110a4e4a2bf5594f08f5101","kind":"commit","published_at":"2020-07-08T11:19:29.000Z","download_url":"https://codeload.github.com/jonchang/tact/tar.gz/v0.2.5","html_url":"https://github.com/jonchang/tact/releases/tag/v0.2.5","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/jonchang/tact@v0.2.5","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jonchang%2Ftact/tags/v0.2.5","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jonchang%2Ftact/tags/v0.2.5/manifests"},{"name":"v0.2.4","sha":"be91831ad9efb32c36c7ca59b4f5043fac402322","kind":"commit","published_at":"2020-03-10T04:29:51.000Z","download_url":"https://codeload.github.com/jonchang/tact/tar.gz/v0.2.4","html_url":"https://github.com/jonchang/tact/releases/tag/v0.2.4","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/jonchang/tact@v0.2.4","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jonchang%2Ftact/tags/v0.2.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jonchang%2Ftact/tags/v0.2.4/manifests"},{"name":"v0.2.3","sha":"891e49c8df1403ae7afc002873c1465620ca87e0","kind":"commit","published_at":"2020-03-03T16:38:14.000Z","download_url":"https://codeload.github.com/jonchang/tact/tar.gz/v0.2.3","html_url":"https://github.com/jonchang/tact/releases/tag/v0.2.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/jonchang/tact@v0.2.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jonchang%2Ftact/tags/v0.2.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jonchang%2Ftact/tags/v0.2.3/manifests"},{"name":"v0.2.2","sha":"1ff0467042c2860a092f5d0bb55eb130efdf6043","kind":"commit","published_at":"2020-03-02T02:31:46.000Z","download_url":"https://codeload.github.com/jonchang/tact/tar.gz/v0.2.2","html_url":"https://github.com/jonchang/tact/releases/tag/v0.2.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/jonchang/tact@v0.2.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jonchang%2Ftact/tags/v0.2.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jonchang%2Ftact/tags/v0.2.2/manifests"},{"name":"v0.2.1","sha":"5c2c3144989b0dba8c839893f08bb0db2bd43319","kind":"commit","published_at":"2019-12-06T00:53:54.000Z","download_url":"https://codeload.github.com/jonchang/tact/tar.gz/v0.2.1","html_url":"https://github.com/jonchang/tact/releases/tag/v0.2.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/jonchang/tact@v0.2.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jonchang%2Ftact/tags/v0.2.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jonchang%2Ftact/tags/v0.2.1/manifests"},{"name":"v0.2.0","sha":"4383021e45b86076b864c24c25d0087d341e26c2","kind":"commit","published_at":"2019-09-25T03:24:47.000Z","download_url":"https://codeload.github.com/jonchang/tact/tar.gz/v0.2.0","html_url":"https://github.com/jonchang/tact/releases/tag/v0.2.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/jonchang/tact@v0.2.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jonchang%2Ftact/tags/v0.2.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jonchang%2Ftact/tags/v0.2.0/manifests"},{"name":"v0.1.4","sha":"5fdb9ab0c50f852fd0f0c024c5874ae6cc1ed664","kind":"commit","published_at":"2019-09-24T04:05:45.000Z","download_url":"https://codeload.github.com/jonchang/tact/tar.gz/v0.1.4","html_url":"https://github.com/jonchang/tact/releases/tag/v0.1.4","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/jonchang/tact@v0.1.4","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jonchang%2Ftact/tags/v0.1.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jonchang%2Ftact/tags/v0.1.4/manifests"},{"name":"v0.1.3","sha":"b52b49599cf5e8c2ad338c28b46a18c0d23f6a20","kind":"commit","published_at":"2019-09-23T22:26:19.000Z","download_url":"https://codeload.github.com/jonchang/tact/tar.gz/v0.1.3","html_url":"https://github.com/jonchang/tact/releases/tag/v0.1.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/jonchang/tact@v0.1.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jonchang%2Ftact/tags/v0.1.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jonchang%2Ftact/tags/v0.1.3/manifests"},{"name":"v0.1.2","sha":"13b50994365049eebc95e5a836aaee67c3186b41","kind":"commit","published_at":"2019-03-13T03:01:20.000Z","download_url":"https://codeload.github.com/jonchang/tact/tar.gz/v0.1.2","html_url":"https://github.com/jonchang/tact/releases/tag/v0.1.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/jonchang/tact@v0.1.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jonchang%2Ftact/tags/v0.1.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jonchang%2Ftact/tags/v0.1.2/manifests"},{"name":"v0.1.1","sha":"c746ec555f428a44b43c147fc27c4e498b3317ad","kind":"commit","published_at":"2019-03-13T02:07:10.000Z","download_url":"https://codeload.github.com/jonchang/tact/tar.gz/v0.1.1","html_url":"https://github.com/jonchang/tact/releases/tag/v0.1.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/jonchang/tact@v0.1.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jonchang%2Ftact/tags/v0.1.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jonchang%2Ftact/tags/v0.1.1/manifests"},{"name":"v0.1.0","sha":"92b1dfcd7ee92b08c5cd7fd508560600473d3564","kind":"commit","published_at":"2019-02-14T01:27:37.000Z","download_url":"https://codeload.github.com/jonchang/tact/tar.gz/v0.1.0","html_url":"https://github.com/jonchang/tact/releases/tag/v0.1.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/jonchang/tact@v0.1.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jonchang%2Ftact/tags/v0.1.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jonchang%2Ftact/tags/v0.1.0/manifests"}]},"repo_metadata_updated_at":"2025-09-01T18:59:44.820Z","dependent_packages_count":0,"downloads":60,"downloads_period":"last-month","dependent_repos_count":1,"rankings":{"downloads":45.717470855818625,"dependent_repos_count":21.619800316896704,"dependent_packages_count":10.082087700208083,"stargazers_count":25.0191850276608,"forks_count":19.109533863522692,"docker_downloads_count":null,"average":24.30961555282138},"purl":"pkg:pypi/tact","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/pypi/tact","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/pypi/tact","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/pypi/tact/dependencies","status":null,"funding_links":["https://github.com/sponsors/jonchang"],"critical":null,"issue_metadata":{"last_synced_at":"2025-08-31T07:53:18.290Z","issues_count":5,"pull_requests_count":150,"avg_time_to_close_issue":565185.8,"avg_time_to_close_pull_request":1240371.861111111,"issues_closed_count":5,"pull_requests_closed_count":144,"pull_request_authors_count":2,"issue_authors_count":4,"avg_comments_per_issue":3.8,"avg_comments_per_pull_request":0.3,"merged_pull_requests_count":122,"bot_issues_count":0,"bot_pull_requests_count":127,"past_year_issues_count":0,"past_year_pull_requests_count":23,"past_year_avg_time_to_close_issue":null,"past_year_avg_time_to_close_pull_request":1073004.111111111,"past_year_issues_closed_count":0,"past_year_pull_requests_closed_count":18,"past_year_pull_request_authors_count":2,"past_year_issue_authors_count":0,"past_year_avg_comments_per_issue":null,"past_year_avg_comments_per_pull_request":0.4782608695652174,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":16,"past_year_merged_pull_requests_count":13,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/jonchang%2Ftact/issues","maintainers":[{"login":"jonchang","count":24,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jonchang"}],"active_maintainers":[{"login":"jonchang","count":7,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jonchang"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/pypi.org/packages/tact/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/pypi.org/packages/tact/version_numbers","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/pypi.org/packages/tact/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/pypi.org/packages/tact/related_packages","maintainers":[{"uuid":"jonchang","login":"jonchang","name":null,"email":null,"url":null,"packages_count":1,"html_url":"https://pypi.org/user/jonchang/","role":null,"created_at":"2023-01-25T08:03:29.709Z","updated_at":"2023-01-25T08:03:29.709Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/pypi.org/maintainers/jonchang/packages"}],"registry":{"name":"pypi.org","url":"https://pypi.org","ecosystem":"pypi","default":true,"packages_count":724862,"maintainers_count":308221,"namespaces_count":0,"keywords_count":237984,"github":"pypi","metadata":{"funded_packages_count":50481},"icon_url":"https://github.com/pypi.png","created_at":"2022-04-04T15:19:23.364Z","updated_at":"2025-09-04T05:23:51.177Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/pypi.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/pypi.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/pypi.org/namespaces"}}],"commits":{"id":668424,"full_name":"jonchang/tact","default_branch":"master","committers":[{"name":"Jonathan Chang","email":"jchang641@gmail.com","login":"jonchang","count":312},{"name":"dependabot[bot]","email":"49699333+dependabot[bot]","login":"dependabot[bot]","count":177},{"name":"dependabot-preview[bot]","email":"27856297+dependabot-preview[bot]","login":"dependabot-preview[bot]","count":123},{"name":"Joseph W. Brown","email":"phylo.jwb@gmail.com","login":"josephwb","count":1}],"total_commits":613,"total_committers":4,"total_bot_commits":300,"total_bot_committers":2,"mean_commits":153.25,"dds":0.49102773246329523,"past_year_committers":[{"name":"Jonathan Chang","email":"me@jonathanchang.org","login":"jonchang","count":8},{"name":"dependabot[bot]","email":"49699333+dependabot[bot]","login":"dependabot[bot]","count":6}],"past_year_total_commits":14,"past_year_total_committers":2,"past_year_total_bot_commits":6,"past_year_total_bot_committers":1,"past_year_mean_commits":7.0,"past_year_dds":0.4285714285714286,"last_synced_at":"2025-07-27T14:37:59.709Z","last_synced_commit":"edb95096c3e289efc9e79e2d0d8563b2c1e8acd8","created_at":"2023-03-09T10:21:52.458Z","updated_at":"2025-07-27T14:37:59.710Z","commits_url":"https://commits.ecosyste.ms/api/v1/hosts/GitHub/repositories/jonchang%2Ftact/commits","host":{"name":"GitHub","url":"https://github.com","kind":"github","last_synced_at":"2025-09-03T00:00:08.276Z","repositories_count":5480019,"commits_count":853389012,"contributors_count":31098138,"owners_count":906558,"icon_url":"https://github.com/github.png","host_url":"https://commits.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://commits.ecosyste.ms/api/v1/hosts/GitHub/repositories"}},"issues_stats":{"full_name":"jonchang/tact","html_url":"https://github.com/jonchang/tact","last_synced_at":"2025-09-01T18:59:44.987Z","status":"active","issues_count":5,"pull_requests_count":146,"avg_time_to_close_issue":565185.8,"avg_time_to_close_pull_request":1279703.9428571428,"issues_closed_count":5,"pull_requests_closed_count":140,"pull_request_authors_count":2,"issue_authors_count":4,"avg_comments_per_issue":3.8,"avg_comments_per_pull_request":0.3150684931506849,"merged_pull_requests_count":117,"bot_issues_count":0,"bot_pull_requests_count":124,"past_year_issues_count":0,"past_year_pull_requests_count":24,"past_year_avg_time_to_close_issue":null,"past_year_avg_time_to_close_pull_request":1118201.5714285714,"past_year_issues_closed_count":0,"past_year_pull_requests_closed_count":21,"past_year_pull_request_authors_count":2,"past_year_issue_authors_count":0,"past_year_avg_comments_per_issue":null,"past_year_avg_comments_per_pull_request":0.4583333333333333,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":17,"past_year_merged_pull_requests_count":16,"created_at":"2023-05-15T01:04:35.385Z","updated_at":"2025-09-03T05:32:47.866Z","repository_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/jonchang%2Ftact","issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/jonchang%2Ftact/issues","issue_labels_count":{"bug":1,"dependencies":1,"github_actions":1},"pull_request_labels_count":{"dependencies":134,"python":70,"github_actions":60,"docker":4},"issue_author_associations_count":{"NONE":3,"OWNER":2,"CONTRIBUTOR":1},"pull_request_author_associations_count":{"CONTRIBUTOR":134,"OWNER":22},"issue_authors":{"jonchang":2,"pbfrandsen":1,"jsoghigian":1,"dependabot[bot]":1,"Cactusolo":1},"pull_request_authors":{"dependabot[bot]":134,"jonchang":22},"host":{"name":"GitHub","url":"https://github.com","kind":"github","last_synced_at":"2025-09-04T00:00:25.939Z","repositories_count":10081478,"issues_count":31331220,"pull_requests_count":96240505,"authors_count":10693617,"icon_url":"https://github.com/github.png","host_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories","owners_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/owners","authors_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors"},"past_year_issue_labels_count":{"dependencies":1,"github_actions":1},"past_year_pull_request_labels_count":{"dependencies":23,"github_actions":12,"python":11},"past_year_issue_author_associations_count":{"CONTRIBUTOR":1},"past_year_pull_request_author_associations_count":{"CONTRIBUTOR":23,"OWNER":7},"past_year_issue_authors":{"dependabot[bot]":1},"past_year_pull_request_authors":{"dependabot[bot]":23,"jonchang":7},"maintainers":[{"login":"jonchang","count":24,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jonchang"}],"active_maintainers":[{"login":"jonchang","count":7,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jonchang"}]},"events":{"total":{"WatchEvent":1,"DeleteEvent":11,"IssueCommentEvent":5,"PushEvent":7,"PullRequestEvent":12,"CreateEvent":8},"last_year":{"WatchEvent":1,"DeleteEvent":11,"IssueCommentEvent":5,"PushEvent":7,"PullRequestEvent":12,"CreateEvent":8}},"keywords":["python"],"dependencies":[{"ecosystem":"pypi","filepath":"poetry.lock","sha":null,"kind":"lockfile","created_at":"2022-08-08T16:15:18.239Z","updated_at":"2022-08-08T16:15:18.239Z","repository_link":"https://github.com/jonchang/tact/blob/master/poetry.lock","dependencies":[{"id":673669248,"package_name":"atomicwrites","ecosystem":"pypi","requirements":"1.4.0","direct":false,"kind":"develop","optional":false},{"id":673669249,"package_name":"attrs","ecosystem":"pypi","requirements":"21.4.0","direct":false,"kind":"develop","optional":false},{"id":673669250,"package_name":"click","ecosystem":"pypi","requirements":"8.1.3","direct":false,"kind":"runtime","optional":false},{"id":673669251,"package_name":"colorama","ecosystem":"pypi","requirements":"0.4.4","direct":false,"kind":"runtime","optional":false},{"id":673669252,"package_name":"coverage","ecosystem":"pypi","requirements":"6.3.2","direct":false,"kind":"develop","optional":false},{"id":673669253,"package_name":"dendropy","ecosystem":"pypi","requirements":"4.5.2","direct":false,"kind":"runtime","optional":false},{"id":673669254,"package_name":"hypothesis","ecosystem":"pypi","requirements":"6.37.2","direct":false,"kind":"develop","optional":false},{"id":673669255,"package_name":"iniconfig","ecosystem":"pypi","requirements":"1.1.1","direct":false,"kind":"develop","optional":false},{"id":673669256,"package_name":"mock","ecosystem":"pypi","requirements":"4.0.3","direct":false,"kind":"develop","optional":false},{"id":673669257,"package_name":"numpy","ecosystem":"pypi","requirements":"1.23.1","direct":false,"kind":"runtime","optional":false},{"id":673669258,"package_name":"packaging","ecosystem":"pypi","requirements":"21.3","direct":false,"kind":"develop","optional":false},{"id":673669259,"package_name":"pluggy","ecosystem":"pypi","requirements":"1.0.0","direct":false,"kind":"develop","optional":false},{"id":673669260,"package_name":"portion","ecosystem":"pypi","requirements":"2.2.0","direct":false,"kind":"runtime","optional":false},{"id":673669261,"package_name":"py","ecosystem":"pypi","requirements":"1.11.0","direct":false,"kind":"develop","optional":false},{"id":673669262,"package_name":"py-cpuinfo","ecosystem":"pypi","requirements":"8.0.0","direct":false,"kind":"develop","optional":false},{"id":673669263,"package_name":"pyparsing","ecosystem":"pypi","requirements":"3.0.7","direct":false,"kind":"develop","optional":false},{"id":673669264,"package_name":"pytest","ecosystem":"pypi","requirements":"6.2.5","direct":false,"kind":"develop","optional":false},{"id":673669265,"package_name":"pytest-benchmark","ecosystem":"pypi","requirements":"3.4.1","direct":false,"kind":"develop","optional":false},{"id":673669266,"package_name":"pytest-console-scripts","ecosystem":"pypi","requirements":"1.2.2","direct":false,"kind":"develop","optional":false},{"id":673669267,"package_name":"pytest-cov","ecosystem":"pypi","requirements":"2.12.1","direct":false,"kind":"develop","optional":false},{"id":673669268,"package_name":"scipy","ecosystem":"pypi","requirements":"1.8.1","direct":false,"kind":"runtime","optional":false},{"id":673669269,"package_name":"sortedcontainers","ecosystem":"pypi","requirements":"2.4.0","direct":false,"kind":"runtime","optional":false},{"id":673669270,"package_name":"toml","ecosystem":"pypi","requirements":"0.10.2","direct":false,"kind":"runtime","optional":false}]},{"ecosystem":"pypi","filepath":"pyproject.toml","sha":null,"kind":"manifest","created_at":"2022-08-08T16:15:18.556Z","updated_at":"2022-08-08T16:15:18.556Z","repository_link":"https://github.com/jonchang/tact/blob/master/pyproject.toml","dependencies":[{"id":673671363,"package_name":"python","ecosystem":"pypi","requirements":"\u003e= 3.8, \u003c 3.11","direct":true,"kind":"runtime","optional":false},{"id":673671364,"package_name":"scipy","ecosystem":"pypi","requirements":"^1.8","direct":true,"kind":"runtime","optional":false},{"id":673671365,"package_name":"numpy","ecosystem":"pypi","requirements":"^1.23","direct":true,"kind":"runtime","optional":false},{"id":673671366,"package_name":"click","ecosystem":"pypi","requirements":"\u003e=7,\u003c9","direct":true,"kind":"runtime","optional":false},{"id":673671367,"package_name":"DendroPy","ecosystem":"pypi","requirements":"^4.5","direct":true,"kind":"runtime","optional":false},{"id":673671368,"package_name":"portion","ecosystem":"pypi","requirements":"^2.2","direct":true,"kind":"runtime","optional":false},{"id":673671369,"package_name":"toml","ecosystem":"pypi","requirements":"^0.10","direct":true,"kind":"runtime","optional":false},{"id":673671370,"package_name":"pytest","ecosystem":"pypi","requirements":"^6.2","direct":true,"kind":"develop","optional":false},{"id":673671371,"package_name":"pytest-cov","ecosystem":"pypi","requirements":"^2.12","direct":true,"kind":"develop","optional":false},{"id":673671372,"package_name":"pytest-benchmark","ecosystem":"pypi","requirements":"^3.4","direct":true,"kind":"develop","optional":false},{"id":673671373,"package_name":"pytest-console-scripts","ecosystem":"pypi","requirements":"^1.2","direct":true,"kind":"develop","optional":false},{"id":673671374,"package_name":"hypothesis","ecosystem":"pypi","requirements":"^6.14","direct":true,"kind":"develop","optional":false}]},{"ecosystem":"actions","filepath":".github/workflows/codeql-analysis.yml","sha":null,"kind":"manifest","created_at":"2023-01-15T12:24:18.821Z","updated_at":"2023-01-15T12:24:18.821Z","repository_link":"https://github.com/jonchang/tact/blob/master/.github/workflows/codeql-analysis.yml","dependencies":[{"id":6924063677,"package_name":"actions/checkout","ecosystem":"actions","requirements":"v3","direct":true,"kind":"composite","optional":false},{"id":6924063678,"package_name":"github/codeql-action/init","ecosystem":"actions","requirements":"v2","direct":true,"kind":"composite","optional":false},{"id":6924063679,"package_name":"github/codeql-action/autobuild","ecosystem":"actions","requirements":"v2","direct":true,"kind":"composite","optional":false},{"id":6924063680,"package_name":"github/codeql-action/analyze","ecosystem":"actions","requirements":"v2","direct":true,"kind":"composite","optional":false}]},{"ecosystem":"actions","filepath":".github/workflows/docker.yml","sha":null,"kind":"manifest","created_at":"2023-01-15T12:24:18.843Z","updated_at":"2023-01-15T12:24:18.843Z","repository_link":"https://github.com/jonchang/tact/blob/master/.github/workflows/docker.yml","dependencies":[{"id":6924063681,"package_name":"actions/checkout","ecosystem":"actions","requirements":"v3","direct":true,"kind":"composite","optional":false},{"id":6924063682,"package_name":"docker/metadata-action","ecosystem":"actions","requirements":"v4","direct":true,"kind":"composite","optional":false},{"id":6924063683,"package_name":"docker/setup-buildx-action","ecosystem":"actions","requirements":"v2","direct":true,"kind":"composite","optional":false},{"id":6924063684,"package_name":"docker/login-action","ecosystem":"actions","requirements":"v2","direct":true,"kind":"composite","optional":false},{"id":6924063685,"package_name":"docker/build-push-action","ecosystem":"actions","requirements":"v3","direct":true,"kind":"composite","optional":false}]},{"ecosystem":"actions","filepath":".github/workflows/docs.yml","sha":null,"kind":"manifest","created_at":"2023-01-15T12:24:18.867Z","updated_at":"2023-01-15T12:24:18.867Z","repository_link":"https://github.com/jonchang/tact/blob/master/.github/workflows/docs.yml","dependencies":[{"id":6924063686,"package_name":"actions/checkout","ecosystem":"actions","requirements":"v3","direct":true,"kind":"composite","optional":false},{"id":6924063687,"package_name":"actions/setup-python","ecosystem":"actions","requirements":"v4","direct":true,"kind":"composite","optional":false},{"id":6924063688,"package_name":"peaceiris/actions-gh-pages","ecosystem":"actions","requirements":"v3.8.0","direct":true,"kind":"composite","optional":false}]},{"ecosystem":"actions","filepath":".github/workflows/lint.yml","sha":null,"kind":"manifest","created_at":"2023-01-15T12:24:18.918Z","updated_at":"2023-01-15T12:24:18.918Z","repository_link":"https://github.com/jonchang/tact/blob/master/.github/workflows/lint.yml","dependencies":[{"id":6924063689,"package_name":"actions/checkout","ecosystem":"actions","requirements":"v3","direct":true,"kind":"composite","optional":false},{"id":6924063690,"package_name":"psf/black","ecosystem":"actions","requirements":"stable","direct":true,"kind":"composite","optional":false},{"id":6924063691,"package_name":"actions/setup-python","ecosystem":"actions","requirements":"v4","direct":true,"kind":"composite","optional":false},{"id":6924063692,"package_name":"suo/flake8-github-action","ecosystem":"actions","requirements":"releases/v1","direct":true,"kind":"composite","optional":false}]},{"ecosystem":"actions","filepath":".github/workflows/pythonpackage.yml","sha":null,"kind":"manifest","created_at":"2023-01-15T12:24:18.976Z","updated_at":"2023-01-15T12:24:18.976Z","repository_link":"https://github.com/jonchang/tact/blob/master/.github/workflows/pythonpackage.yml","dependencies":[{"id":6924063693,"package_name":"actions/checkout","ecosystem":"actions","requirements":"v3","direct":true,"kind":"composite","optional":false},{"id":6924063694,"package_name":"actions/setup-python","ecosystem":"actions","requirements":"v4","direct":true,"kind":"composite","optional":false},{"id":6924063695,"package_name":"actions/upload-artifact","ecosystem":"actions","requirements":"v3","direct":true,"kind":"composite","optional":false},{"id":6924063696,"package_name":"pypa/gh-action-pypi-publish","ecosystem":"actions","requirements":"v1.6.4","direct":true,"kind":"composite","optional":false},{"id":6924063697,"package_name":"dawidd6/action-homebrew-bump-formula","ecosystem":"actions","requirements":"master","direct":true,"kind":"composite","optional":false}]},{"ecosystem":"docker","filepath":"Dockerfile","sha":null,"kind":"manifest","created_at":"2023-01-15T12:24:19.018Z","updated_at":"2023-01-15T12:24:19.018Z","repository_link":"https://github.com/jonchang/tact/blob/master/Dockerfile","dependencies":[{"id":6924063698,"package_name":"ubuntu","ecosystem":"docker","requirements":"22.04","direct":true,"kind":"build","optional":false}]}],"score":7.305188215393037,"created_at":"2025-09-04T15:50:14.129Z","updated_at":"2025-10-07T08:05:16.453Z","avatar_url":"https://github.com/jonchang.png","language":"Python","category":null,"sub_category":null,"monthly_downloads":60,"funding_links":["https://github.com/sponsors/jonchang"],"readme_doi_urls":["https://doi.org/10.1093/sysbio/syz081","https://doi.org/10.1111/2041-210X.12117","https://doi.org/10.1093/sysbio/sys031"],"works":{},"citation_counts":{},"total_citations":0,"keywords_from_contributors":["cryptocurrencies","graph-generation","mesh","energy-systems","simulator","networking","pairings","polynomials","distributed","interactive"],"project_url":"https://science.ecosyste.ms/api/v1/projects/5100","html_url":"https://science.ecosyste.ms/projects/5100","bibtex_url":"https://science.ecosyste.ms/projects/5100/export.bibtex","apalike_url":"https://science.ecosyste.ms/projects/5100/export.apalike"}