{"id":78338,"name":null,"description":"Define sophisticated data pipelines with Python and run them on different distributed systems (such as Argo Workflows).","url":"https://github.com/larribas/dagger","last_synced_at":"2025-09-08T21:19:05.644Z","repository":{"id":40276095,"uuid":"349670138","full_name":"larribas/dagger","owner":"larribas","description":"Define sophisticated data pipelines with Python and run them on different distributed systems (such as Argo Workflows).","archived":false,"fork":false,"pushed_at":"2024-05-30T01:32:55.000Z","size":10451,"stargazers_count":17,"open_issues_count":0,"forks_count":7,"subscribers_count":2,"default_branch":"main","last_synced_at":"2025-09-08T00:57:05.644Z","etag":null,"topics":["argo-workflows","data-engineering","data-pipelines","data-science","distributed-systems","pipelines-as-code","workflows"],"latest_commit_sha":null,"homepage":"","language":"Python","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/larribas.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":"ROADMAP.md","authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null}},"created_at":"2021-03-20T08:35:47.000Z","updated_at":"2025-03-07T13:31:16.000Z","dependencies_parsed_at":"2025-07-28T15:30:51.779Z","dependency_job_id":"8ab5d447-1b03-4702-9375-d2c670ab79ab","html_url":"https://github.com/larribas/dagger","commit_stats":null,"previous_names":[],"tags_count":8,"template":false,"template_full_name":null,"purl":"pkg:github/larribas/dagger","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/larribas%2Fdagger","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/larribas%2Fdagger/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/larribas%2Fdagger/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/larribas%2Fdagger/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/larribas","download_url":"https://codeload.github.com/larribas/dagger/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/larribas%2Fdagger/sbom","scorecard":{"id":579162,"data":{"date":"2025-08-11","repo":{"name":"github.com/larribas/dagger","commit":"1441fed570e535a43fdc23142b0c1a897ad9e992"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":3.3,"checks":[{"name":"Maintained","score":0,"reason":"0 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Code-Review","score":1,"reason":"Found 3/30 approved changesets -- score normalized to 1","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: jobLevel 'contents' permission set to 'read': .github/workflows/continuous-integration.yaml:20","Info: jobLevel 'actions' permission set to 'read': .github/workflows/continuous-integration.yaml:19","Warn: no topLevel permission defined: .github/workflows/continuous-integration.yaml:1","Warn: no topLevel permission defined: .github/workflows/publish-gh-pages.yaml:1","Warn: no topLevel permission defined: .github/workflows/publish-library.yaml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Security-Policy","score":0,"reason":"security policy file not detected","details":["Warn: no security policy file detected","Warn: no security file to analyze","Warn: no security file to analyze","Warn: no security file to analyze"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: Apache License 2.0: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/continuous-integration.yaml:147: update your workflow using https://app.stepsecurity.io/secureworkflow/larribas/dagger/continuous-integration.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/continuous-integration.yaml:148: update your workflow using https://app.stepsecurity.io/secureworkflow/larribas/dagger/continuous-integration.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/continuous-integration.yaml:151: update your workflow using https://app.stepsecurity.io/secureworkflow/larribas/dagger/continuous-integration.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/continuous-integration.yaml:154: update your workflow using https://app.stepsecurity.io/secureworkflow/larribas/dagger/continuous-integration.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/continuous-integration.yaml:184: update your workflow using https://app.stepsecurity.io/secureworkflow/larribas/dagger/continuous-integration.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/continuous-integration.yaml:185: update your workflow using https://app.stepsecurity.io/secureworkflow/larribas/dagger/continuous-integration.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/continuous-integration.yaml:188: update your workflow using https://app.stepsecurity.io/secureworkflow/larribas/dagger/continuous-integration.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/continuous-integration.yaml:191: update your workflow using https://app.stepsecurity.io/secureworkflow/larribas/dagger/continuous-integration.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/continuous-integration.yaml:201: update your workflow using https://app.stepsecurity.io/secureworkflow/larribas/dagger/continuous-integration.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/continuous-integration.yaml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/larribas/dagger/continuous-integration.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/continuous-integration.yaml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/larribas/dagger/continuous-integration.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/continuous-integration.yaml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/larribas/dagger/continuous-integration.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/continuous-integration.yaml:45: update your workflow using https://app.stepsecurity.io/secureworkflow/larribas/dagger/continuous-integration.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/continuous-integration.yaml:46: update your workflow using https://app.stepsecurity.io/secureworkflow/larribas/dagger/continuous-integration.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/continuous-integration.yaml:49: update your workflow using https://app.stepsecurity.io/secureworkflow/larribas/dagger/continuous-integration.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/continuous-integration.yaml:52: update your workflow using https://app.stepsecurity.io/secureworkflow/larribas/dagger/continuous-integration.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/continuous-integration.yaml:72: update your workflow using https://app.stepsecurity.io/secureworkflow/larribas/dagger/continuous-integration.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/continuous-integration.yaml:73: update your workflow using https://app.stepsecurity.io/secureworkflow/larribas/dagger/continuous-integration.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/continuous-integration.yaml:76: update your workflow using https://app.stepsecurity.io/secureworkflow/larribas/dagger/continuous-integration.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/continuous-integration.yaml:79: update your workflow using https://app.stepsecurity.io/secureworkflow/larribas/dagger/continuous-integration.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/continuous-integration.yaml:97: update your workflow using https://app.stepsecurity.io/secureworkflow/larribas/dagger/continuous-integration.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/continuous-integration.yaml:98: update your workflow using https://app.stepsecurity.io/secureworkflow/larribas/dagger/continuous-integration.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/continuous-integration.yaml:101: update your workflow using https://app.stepsecurity.io/secureworkflow/larribas/dagger/continuous-integration.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/continuous-integration.yaml:104: update your workflow using https://app.stepsecurity.io/secureworkflow/larribas/dagger/continuous-integration.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/continuous-integration.yaml:122: update your workflow using https://app.stepsecurity.io/secureworkflow/larribas/dagger/continuous-integration.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/continuous-integration.yaml:123: update your workflow using https://app.stepsecurity.io/secureworkflow/larribas/dagger/continuous-integration.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/continuous-integration.yaml:126: update your workflow using https://app.stepsecurity.io/secureworkflow/larribas/dagger/continuous-integration.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/continuous-integration.yaml:129: update your workflow using https://app.stepsecurity.io/secureworkflow/larribas/dagger/continuous-integration.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-gh-pages.yaml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/larribas/dagger/publish-gh-pages.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-gh-pages.yaml:16: update your workflow using https://app.stepsecurity.io/secureworkflow/larribas/dagger/publish-gh-pages.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/publish-gh-pages.yaml:19: update your workflow using https://app.stepsecurity.io/secureworkflow/larribas/dagger/publish-gh-pages.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-gh-pages.yaml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/larribas/dagger/publish-gh-pages.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/publish-gh-pages.yaml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/larribas/dagger/publish-gh-pages.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-library.yaml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/larribas/dagger/publish-library.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-library.yaml:14: update your workflow using https://app.stepsecurity.io/secureworkflow/larribas/dagger/publish-library.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/publish-library.yaml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/larribas/dagger/publish-library.yaml/main?enable=pin","Warn: containerImage not pinned by hash: Dockerfile:1: pin your Docker image by updating python:3.9.6-slim to python:3.9.6-slim@sha256:4115592fd02679fb3d9e8c513cae33ad3fdd64747b64d32b504419d7118bcd7c","Info:   0 out of  26 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of  10 third-party GitHubAction dependencies pinned","Info:   0 out of   1 containerImage dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Vulnerabilities","score":0,"reason":"13 existing vulnerabilities detected","details":["Warn: Project is vulnerable to: PYSEC-2024-48 / GHSA-fj7x-q9j7-g6q6","Warn: Project is vulnerable to: GHSA-cpwx-vrp4-4pq7","Warn: Project is vulnerable to: GHSA-gmj6-6f8f-6699","Warn: Project is vulnerable to: GHSA-h5c8-rqwp-cp95","Warn: Project is vulnerable to: GHSA-h75v-3vvj-5mfj","Warn: Project is vulnerable to: GHSA-q2x7-8rv6-6q7h","Warn: Project is vulnerable to: GHSA-55x5-fj6c-h6m8","Warn: Project is vulnerable to: PYSEC-2022-230 / GHSA-wrxv-2j5q-m38w","Warn: Project is vulnerable to: PYSEC-2021-878 / GHSA-qh9q-34h6-hcv9","Warn: Project is vulnerable to: PYSEC-2022-42969","Warn: Project is vulnerable to: PYSEC-2023-117 / GHSA-mrwq-x4v8-fh7p","Warn: Project is vulnerable to: GHSA-jh85-wwv9-24hv","Warn: Project is vulnerable to: GHSA-jfmj-5v4g-7637"],"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"SAST","score":7,"reason":"SAST tool detected but not run on all commits","details":["Info: SAST configuration detected: CodeQL","Warn: 0 commits out of 25 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-20T18:42:09.027Z","repository_id":40276095,"created_at":"2025-08-20T18:42:09.027Z","updated_at":"2025-08-20T18:42:09.027Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":274231511,"owners_count":25245625,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","status":"online","status_checked_at":"2025-09-08T02:00:09.813Z","response_time":121,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"owner":{"login":"larribas","name":"Lorenzo Arribas","uuid":"3601671","kind":"user","description":"Staff Software Engineer at Glovo. I specialize in distributed, event-driven architectures and Machine Learning operations.","email":"","website":"https://larribas.me","location":"Barcelona","twitter":null,"company":"@Glovo ","icon_url":"https://avatars.githubusercontent.com/u/3601671?u=090aa0aaaedb7e28109dde31a7bc35736ee14822\u0026v=4","repositories_count":31,"last_synced_at":"2023-06-02T05:30:30.291Z","metadata":{"has_sponsors_listing":false},"html_url":"https://github.com/larribas","funding_links":[],"total_stars":null,"followers":null,"following":null,"created_at":"2022-11-05T06:46:43.178Z","updated_at":"2023-06-02T05:30:30.487Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/larribas","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/larribas/repositories"},"packages":[{"id":2868856,"name":"py-dagger","ecosystem":"pypi","description":"Define sophisticated data pipelines with Python and run them on different distributed systems (such as Argo Workflows).","homepage":"https://github.com/larribas/dagger","licenses":"Apache-2.0","normalized_licenses":["Apache-2.0"],"repository_url":"https://github.com/larribas/dagger","keywords_array":["argo-workflows","data-engineering","data-pipelines","data-science"],"namespace":null,"versions_count":8,"first_release_published_at":"2021-09-06T20:40:49.000Z","latest_release_published_at":"2021-09-30T16:56:36.000Z","latest_release_number":"0.4.2","last_synced_at":"2025-09-07T12:06:39.445Z","created_at":"2022-04-10T12:11:29.784Z","updated_at":"2025-09-08T00:57:22.028Z","registry_url":"https://pypi.org/project/py-dagger/","install_command":"pip install py-dagger --index-url https://pypi.org/simple","documentation_url":"https://larribas.me/dagger","metadata":{"funding":null,"documentation":"https://larribas.me/dagger","classifiers":["Development Status :: 5 - Production/Stable","Intended Audience :: Developers","License :: OSI Approved :: Apache Software License","Natural Language :: English","Programming Language :: Python :: 3","Programming Language :: Python :: 3 :: Only","Programming Language :: Python :: 3.8","Programming Language :: Python :: 3.9","Topic :: Software Development :: Build Tools"],"normalized_name":"py-dagger","project_status":null},"repo_metadata":{"id":40276095,"uuid":"349670138","full_name":"larribas/dagger","owner":"larribas","description":"Define sophisticated data pipelines with Python and run them on different distributed systems (such as Argo Workflows).","archived":false,"fork":false,"pushed_at":"2024-05-30T01:32:55.000Z","size":10451,"stargazers_count":17,"open_issues_count":0,"forks_count":7,"subscribers_count":2,"default_branch":"main","last_synced_at":"2025-07-28T15:44:59.278Z","etag":null,"topics":["argo-workflows","data-engineering","data-pipelines","data-science","distributed-systems","pipelines-as-code","workflows"],"latest_commit_sha":null,"homepage":"","language":"Python","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/larribas.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":"ROADMAP.md","authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null}},"created_at":"2021-03-20T08:35:47.000Z","updated_at":"2025-03-07T13:31:16.000Z","dependencies_parsed_at":"2025-07-28T15:30:51.779Z","dependency_job_id":"8ab5d447-1b03-4702-9375-d2c670ab79ab","html_url":"https://github.com/larribas/dagger","commit_stats":null,"previous_names":[],"tags_count":8,"template":false,"template_full_name":null,"purl":"pkg:github/larribas/dagger","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/larribas%2Fdagger","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/larribas%2Fdagger/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/larribas%2Fdagger/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/larribas%2Fdagger/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/larribas","download_url":"https://codeload.github.com/larribas/dagger/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/larribas%2Fdagger/sbom","scorecard":{"id":579162,"data":{"date":"2025-08-11","repo":{"name":"github.com/larribas/dagger","commit":"1441fed570e535a43fdc23142b0c1a897ad9e992"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":3.3,"checks":[{"name":"Maintained","score":0,"reason":"0 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Code-Review","score":1,"reason":"Found 3/30 approved changesets -- score normalized to 1","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: jobLevel 'contents' permission set to 'read': .github/workflows/continuous-integration.yaml:20","Info: jobLevel 'actions' permission set to 'read': .github/workflows/continuous-integration.yaml:19","Warn: no topLevel permission defined: .github/workflows/continuous-integration.yaml:1","Warn: no topLevel permission defined: .github/workflows/publish-gh-pages.yaml:1","Warn: no topLevel permission defined: .github/workflows/publish-library.yaml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Security-Policy","score":0,"reason":"security policy file not detected","details":["Warn: no security policy file detected","Warn: no security file to analyze","Warn: no security file to analyze","Warn: no security file to analyze"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: Apache License 2.0: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/continuous-integration.yaml:147: update your workflow using https://app.stepsecurity.io/secureworkflow/larribas/dagger/continuous-integration.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/continuous-integration.yaml:148: update your workflow using https://app.stepsecurity.io/secureworkflow/larribas/dagger/continuous-integration.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/continuous-integration.yaml:151: update your workflow using https://app.stepsecurity.io/secureworkflow/larribas/dagger/continuous-integration.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/continuous-integration.yaml:154: update your workflow using https://app.stepsecurity.io/secureworkflow/larribas/dagger/continuous-integration.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/continuous-integration.yaml:184: update your workflow using https://app.stepsecurity.io/secureworkflow/larribas/dagger/continuous-integration.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/continuous-integration.yaml:185: update your workflow using https://app.stepsecurity.io/secureworkflow/larribas/dagger/continuous-integration.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/continuous-integration.yaml:188: update your workflow using https://app.stepsecurity.io/secureworkflow/larribas/dagger/continuous-integration.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/continuous-integration.yaml:191: update your workflow using https://app.stepsecurity.io/secureworkflow/larribas/dagger/continuous-integration.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/continuous-integration.yaml:201: update your workflow using https://app.stepsecurity.io/secureworkflow/larribas/dagger/continuous-integration.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/continuous-integration.yaml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/larribas/dagger/continuous-integration.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/continuous-integration.yaml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/larribas/dagger/continuous-integration.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/continuous-integration.yaml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/larribas/dagger/continuous-integration.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/continuous-integration.yaml:45: update your workflow using https://app.stepsecurity.io/secureworkflow/larribas/dagger/continuous-integration.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/continuous-integration.yaml:46: update your workflow using https://app.stepsecurity.io/secureworkflow/larribas/dagger/continuous-integration.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/continuous-integration.yaml:49: update your workflow using https://app.stepsecurity.io/secureworkflow/larribas/dagger/continuous-integration.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/continuous-integration.yaml:52: update your workflow using https://app.stepsecurity.io/secureworkflow/larribas/dagger/continuous-integration.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/continuous-integration.yaml:72: update your workflow using https://app.stepsecurity.io/secureworkflow/larribas/dagger/continuous-integration.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/continuous-integration.yaml:73: update your workflow using https://app.stepsecurity.io/secureworkflow/larribas/dagger/continuous-integration.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/continuous-integration.yaml:76: update your workflow using https://app.stepsecurity.io/secureworkflow/larribas/dagger/continuous-integration.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/continuous-integration.yaml:79: update your workflow using https://app.stepsecurity.io/secureworkflow/larribas/dagger/continuous-integration.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/continuous-integration.yaml:97: update your workflow using https://app.stepsecurity.io/secureworkflow/larribas/dagger/continuous-integration.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/continuous-integration.yaml:98: update your workflow using https://app.stepsecurity.io/secureworkflow/larribas/dagger/continuous-integration.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/continuous-integration.yaml:101: update your workflow using https://app.stepsecurity.io/secureworkflow/larribas/dagger/continuous-integration.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/continuous-integration.yaml:104: update your workflow using https://app.stepsecurity.io/secureworkflow/larribas/dagger/continuous-integration.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/continuous-integration.yaml:122: update your workflow using https://app.stepsecurity.io/secureworkflow/larribas/dagger/continuous-integration.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/continuous-integration.yaml:123: update your workflow using https://app.stepsecurity.io/secureworkflow/larribas/dagger/continuous-integration.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/continuous-integration.yaml:126: update your workflow using https://app.stepsecurity.io/secureworkflow/larribas/dagger/continuous-integration.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/continuous-integration.yaml:129: update your workflow using https://app.stepsecurity.io/secureworkflow/larribas/dagger/continuous-integration.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-gh-pages.yaml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/larribas/dagger/publish-gh-pages.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-gh-pages.yaml:16: update your workflow using https://app.stepsecurity.io/secureworkflow/larribas/dagger/publish-gh-pages.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/publish-gh-pages.yaml:19: update your workflow using https://app.stepsecurity.io/secureworkflow/larribas/dagger/publish-gh-pages.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-gh-pages.yaml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/larribas/dagger/publish-gh-pages.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/publish-gh-pages.yaml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/larribas/dagger/publish-gh-pages.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-library.yaml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/larribas/dagger/publish-library.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-library.yaml:14: update your workflow using https://app.stepsecurity.io/secureworkflow/larribas/dagger/publish-library.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/publish-library.yaml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/larribas/dagger/publish-library.yaml/main?enable=pin","Warn: containerImage not pinned by hash: Dockerfile:1: pin your Docker image by updating python:3.9.6-slim to python:3.9.6-slim@sha256:4115592fd02679fb3d9e8c513cae33ad3fdd64747b64d32b504419d7118bcd7c","Info:   0 out of  26 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of  10 third-party GitHubAction dependencies pinned","Info:   0 out of   1 containerImage dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Vulnerabilities","score":0,"reason":"13 existing vulnerabilities detected","details":["Warn: Project is vulnerable to: PYSEC-2024-48 / GHSA-fj7x-q9j7-g6q6","Warn: Project is vulnerable to: GHSA-cpwx-vrp4-4pq7","Warn: Project is vulnerable to: GHSA-gmj6-6f8f-6699","Warn: Project is vulnerable to: GHSA-h5c8-rqwp-cp95","Warn: Project is vulnerable to: GHSA-h75v-3vvj-5mfj","Warn: Project is vulnerable to: GHSA-q2x7-8rv6-6q7h","Warn: Project is vulnerable to: GHSA-55x5-fj6c-h6m8","Warn: Project is vulnerable to: PYSEC-2022-230 / GHSA-wrxv-2j5q-m38w","Warn: Project is vulnerable to: PYSEC-2021-878 / GHSA-qh9q-34h6-hcv9","Warn: Project is vulnerable to: PYSEC-2022-42969","Warn: Project is vulnerable to: PYSEC-2023-117 / GHSA-mrwq-x4v8-fh7p","Warn: Project is vulnerable to: GHSA-jh85-wwv9-24hv","Warn: Project is vulnerable to: GHSA-jfmj-5v4g-7637"],"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"SAST","score":7,"reason":"SAST tool detected but not run on all commits","details":["Info: SAST configuration detected: CodeQL","Warn: 0 commits out of 25 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-20T18:42:09.027Z","repository_id":40276095,"created_at":"2025-08-20T18:42:09.027Z","updated_at":"2025-08-20T18:42:09.027Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":274117524,"owners_count":25225105,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","status":"online","status_checked_at":"2025-09-07T02:00:09.463Z","response_time":67,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"larribas","name":"Lorenzo Arribas","uuid":"3601671","kind":"user","description":"Staff Software Engineer at Glovo. I specialize in distributed, event-driven architectures and Machine Learning operations.","email":"","website":"https://larribas.me","location":"Barcelona","twitter":null,"company":"@Glovo ","icon_url":"https://avatars.githubusercontent.com/u/3601671?u=090aa0aaaedb7e28109dde31a7bc35736ee14822\u0026v=4","repositories_count":31,"last_synced_at":"2023-06-02T05:30:30.291Z","metadata":{"has_sponsors_listing":false},"html_url":"https://github.com/larribas","funding_links":[],"total_stars":null,"followers":null,"following":null,"created_at":"2022-11-05T06:46:43.178Z","updated_at":"2023-06-02T05:30:30.487Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/larribas","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/larribas/repositories"},"tags":[{"name":"0.4.2","sha":"c9ae0ef84755cfade39a8360259fc98937e98c18","kind":"commit","published_at":"2021-09-30T16:54:38.000Z","download_url":"https://codeload.github.com/larribas/dagger/tar.gz/0.4.2","html_url":"https://github.com/larribas/dagger/releases/tag/0.4.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/larribas/dagger@0.4.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/larribas%2Fdagger/tags/0.4.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/larribas%2Fdagger/tags/0.4.2/manifests"},{"name":"0.4.1","sha":"581eddd264ab4dcd329eef73cfa943b67f8f30a9","kind":"commit","published_at":"2021-09-28T15:01:15.000Z","download_url":"https://codeload.github.com/larribas/dagger/tar.gz/0.4.1","html_url":"https://github.com/larribas/dagger/releases/tag/0.4.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/larribas/dagger@0.4.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/larribas%2Fdagger/tags/0.4.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/larribas%2Fdagger/tags/0.4.1/manifests"},{"name":"0.4.0","sha":"4246f1bbf6cd8cb22fe18e4fd2e4030ab40f5866","kind":"commit","published_at":"2021-09-27T11:24:44.000Z","download_url":"https://codeload.github.com/larribas/dagger/tar.gz/0.4.0","html_url":"https://github.com/larribas/dagger/releases/tag/0.4.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/larribas/dagger@0.4.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/larribas%2Fdagger/tags/0.4.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/larribas%2Fdagger/tags/0.4.0/manifests"},{"name":"0.3.0","sha":"f72db46b23c7b79db981a295d0be73692aa6c3c2","kind":"commit","published_at":"2021-09-24T14:53:51.000Z","download_url":"https://codeload.github.com/larribas/dagger/tar.gz/0.3.0","html_url":"https://github.com/larribas/dagger/releases/tag/0.3.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/larribas/dagger@0.3.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/larribas%2Fdagger/tags/0.3.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/larribas%2Fdagger/tags/0.3.0/manifests"},{"name":"0.2.1","sha":"ac625da28ee2e4f9620ed2581c7114d7b66a5857","kind":"commit","published_at":"2021-09-14T09:48:28.000Z","download_url":"https://codeload.github.com/larribas/dagger/tar.gz/0.2.1","html_url":"https://github.com/larribas/dagger/releases/tag/0.2.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/larribas/dagger@0.2.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/larribas%2Fdagger/tags/0.2.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/larribas%2Fdagger/tags/0.2.1/manifests"},{"name":"0.2.0","sha":"4156c96cc20f9c7e02e6bfa3d45da2867fa223a6","kind":"commit","published_at":"2021-09-14T07:44:23.000Z","download_url":"https://codeload.github.com/larribas/dagger/tar.gz/0.2.0","html_url":"https://github.com/larribas/dagger/releases/tag/0.2.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/larribas/dagger@0.2.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/larribas%2Fdagger/tags/0.2.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/larribas%2Fdagger/tags/0.2.0/manifests"},{"name":"0.1.1","sha":"bc07ae9dafb88dc600aa92d7ac18d71f4c45bd4d","kind":"commit","published_at":"2021-09-09T08:11:53.000Z","download_url":"https://codeload.github.com/larribas/dagger/tar.gz/0.1.1","html_url":"https://github.com/larribas/dagger/releases/tag/0.1.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/larribas/dagger@0.1.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/larribas%2Fdagger/tags/0.1.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/larribas%2Fdagger/tags/0.1.1/manifests"},{"name":"0.1.0","sha":"e98558dc6a47d84dd0d227e72a79264296ec47af","kind":"commit","published_at":"2021-09-06T20:33:42.000Z","download_url":"https://codeload.github.com/larribas/dagger/tar.gz/0.1.0","html_url":"https://github.com/larribas/dagger/releases/tag/0.1.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/larribas/dagger@0.1.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/larribas%2Fdagger/tags/0.1.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/larribas%2Fdagger/tags/0.1.0/manifests"}]},"repo_metadata_updated_at":"2025-09-08T00:57:22.028Z","dependent_packages_count":0,"downloads":60,"downloads_period":"last-month","dependent_repos_count":1,"rankings":{"downloads":40.733731923563866,"dependent_repos_count":21.627614287651376,"dependent_packages_count":10.069287946036377,"stargazers_count":16.014008581592922,"forks_count":14.197680569373816,"docker_downloads_count":null,"average":20.52846466164367},"purl":"pkg:pypi/py-dagger","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/pypi/py-dagger","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/pypi/py-dagger","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/pypi/py-dagger/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2025-08-01T15:48:19.691Z","issues_count":10,"pull_requests_count":49,"avg_time_to_close_issue":1354687.3,"avg_time_to_close_pull_request":1385114.5102040817,"issues_closed_count":10,"pull_requests_closed_count":49,"pull_request_authors_count":4,"issue_authors_count":2,"avg_comments_per_issue":0.3,"avg_comments_per_pull_request":0.9795918367346939,"merged_pull_requests_count":40,"bot_issues_count":0,"bot_pull_requests_count":6,"past_year_issues_count":0,"past_year_pull_requests_count":0,"past_year_avg_time_to_close_issue":null,"past_year_avg_time_to_close_pull_request":null,"past_year_issues_closed_count":0,"past_year_pull_requests_closed_count":0,"past_year_pull_request_authors_count":0,"past_year_issue_authors_count":0,"past_year_avg_comments_per_issue":null,"past_year_avg_comments_per_pull_request":null,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":0,"past_year_merged_pull_requests_count":0,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/larribas%2Fdagger/issues","maintainers":[{"login":"larribas","count":46,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/larribas"},{"login":"pablobd","count":5,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/pablobd"}],"active_maintainers":[]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/pypi.org/packages/py-dagger/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/pypi.org/packages/py-dagger/version_numbers","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/pypi.org/packages/py-dagger/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/pypi.org/packages/py-dagger/related_packages","maintainers":[{"uuid":"larribas","login":"larribas","name":null,"email":null,"url":null,"packages_count":2,"html_url":"https://pypi.org/user/larribas/","role":null,"created_at":"2022-11-24T18:45:05.116Z","updated_at":"2022-11-24T18:45:05.116Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/pypi.org/maintainers/larribas/packages"}],"registry":{"name":"pypi.org","url":"https://pypi.org","ecosystem":"pypi","default":true,"packages_count":726284,"maintainers_count":308824,"namespaces_count":0,"keywords_count":238245,"github":"pypi","metadata":{"funded_packages_count":50579},"icon_url":"https://github.com/pypi.png","created_at":"2022-04-04T15:19:23.364Z","updated_at":"2025-09-08T05:32:36.857Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/pypi.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/pypi.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/pypi.org/namespaces"}}],"commits":{"id":635565,"full_name":"larribas/dagger","default_branch":"main","committers":[{"name":"Lorenzo Arribas","email":"lorenzo.s.arribas@gmail.com","count":58},{"name":"Pablo Barbero","email":"pablo.barbero@glovoapp.com","count":2},{"name":"Razvan Tudorica","email":"razvantudorica@gmail.com","count":1}],"total_commits":61,"total_committers":3,"total_bot_commits":0,"total_bot_committers":0,"mean_commits":20.333333333333332,"dds":0.049180327868852514,"past_year_committers":null,"past_year_total_commits":null,"past_year_total_committers":null,"past_year_total_bot_commits":null,"past_year_total_bot_committers":null,"past_year_mean_commits":null,"past_year_dds":null,"last_synced_at":"2023-03-19T03:35:01.704Z","last_synced_commit":"1441fed570e535a43fdc23142b0c1a897ad9e992","created_at":"2023-03-09T08:35:49.925Z","updated_at":"2023-09-19T17:30:16.489Z","commits_url":"https://commits.ecosyste.ms/api/v1/hosts/GitHub/repositories/larribas%2Fdagger/commits","host":{"name":"GitHub","url":"https://github.com","kind":"github","last_synced_at":"2025-09-08T00:00:16.827Z","repositories_count":5491971,"commits_count":855149458,"contributors_count":31219150,"owners_count":911999,"icon_url":"https://github.com/github.png","host_url":"https://commits.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://commits.ecosyste.ms/api/v1/hosts/GitHub/repositories"}},"issues_stats":{"full_name":"larribas/dagger","html_url":"https://github.com/larribas/dagger","last_synced_at":"2025-08-01T15:48:19.691Z","status":"error","issues_count":10,"pull_requests_count":49,"avg_time_to_close_issue":1354687.3,"avg_time_to_close_pull_request":1385114.5102040817,"issues_closed_count":10,"pull_requests_closed_count":49,"pull_request_authors_count":4,"issue_authors_count":2,"avg_comments_per_issue":0.3,"avg_comments_per_pull_request":0.9795918367346939,"merged_pull_requests_count":40,"bot_issues_count":0,"bot_pull_requests_count":6,"past_year_issues_count":0,"past_year_pull_requests_count":0,"past_year_avg_time_to_close_issue":null,"past_year_avg_time_to_close_pull_request":null,"past_year_issues_closed_count":0,"past_year_pull_requests_closed_count":0,"past_year_pull_request_authors_count":0,"past_year_issue_authors_count":0,"past_year_avg_comments_per_issue":null,"past_year_avg_comments_per_pull_request":null,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":0,"past_year_merged_pull_requests_count":0,"created_at":"2023-05-14T21:02:15.498Z","updated_at":"2025-09-01T16:43:56.924Z","repository_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/larribas%2Fdagger","issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/larribas%2Fdagger/issues","issue_labels_count":{"bug":6,"enhancement":4,"stale":2},"pull_request_labels_count":{"stale":8,"dependencies":6,"enhancement":1},"issue_author_associations_count":{"OWNER":8,"COLLABORATOR":2},"pull_request_author_associations_count":{"OWNER":38,"NONE":6,"COLLABORATOR":3,"CONTRIBUTOR":2},"issue_authors":{"larribas":8,"pablobd":2},"pull_request_authors":{"larribas":38,"dependabot[bot]":6,"pablobd":3,"raztud":2},"host":{"name":"GitHub","url":"https://github.com","kind":"github","last_synced_at":"2025-09-08T00:00:17.013Z","repositories_count":10171813,"issues_count":31942582,"pull_requests_count":100134560,"authors_count":10732619,"icon_url":"https://github.com/github.png","host_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories","owners_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/owners","authors_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors"},"past_year_issue_labels_count":{},"past_year_pull_request_labels_count":{},"past_year_issue_author_associations_count":{},"past_year_pull_request_author_associations_count":{},"past_year_issue_authors":{},"past_year_pull_request_authors":{},"maintainers":[{"login":"larribas","count":46,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/larribas"},{"login":"pablobd","count":5,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/pablobd"}],"active_maintainers":[]},"events":{"total":{"WatchEvent":3,"ForkEvent":1},"last_year":{"WatchEvent":3,"ForkEvent":1}},"keywords":["argo-workflows","data-engineering","data-pipelines","data-science","distributed-systems","pipelines-as-code","workflows"],"dependencies":[{"ecosystem":"pypi","filepath":"poetry.lock","sha":null,"kind":"lockfile","created_at":"2022-08-23T16:40:44.770Z","updated_at":"2022-08-23T16:40:44.770Z","repository_link":"https://github.com/larribas/dagger/blob/main/poetry.lock","dependencies":[{"id":2416049833,"package_name":"appdirs","ecosystem":"pypi","requirements":"1.4.4","direct":false,"kind":"develop","optional":false},{"id":2416049834,"package_name":"atomicwrites","ecosystem":"pypi","requirements":"1.4.0","direct":false,"kind":"develop","optional":false},{"id":2416049835,"package_name":"attrs","ecosystem":"pypi","requirements":"21.2.0","direct":false,"kind":"develop","optional":false},{"id":2416049836,"package_name":"beautifulsoup4","ecosystem":"pypi","requirements":"4.10.0","direct":false,"kind":"develop","optional":false},{"id":2416049837,"package_name":"black","ecosystem":"pypi","requirements":"20.8b1","direct":false,"kind":"develop","optional":false},{"id":2416049838,"package_name":"bracex","ecosystem":"pypi","requirements":"2.1.1","direct":false,"kind":"develop","optional":false},{"id":2416049839,"package_name":"click","ecosystem":"pypi","requirements":"8.0.1","direct":false,"kind":"develop","optional":false},{"id":2416049840,"package_name":"colorama","ecosystem":"pypi","requirements":"0.4.4","direct":false,"kind":"develop","optional":false},{"id":2416049841,"package_name":"coverage","ecosystem":"pypi","requirements":"5.5","direct":false,"kind":"develop","optional":false},{"id":2416049842,"package_name":"deepdiff","ecosystem":"pypi","requirements":"5.5.0","direct":false,"kind":"develop","optional":false},{"id":2416049843,"package_name":"flake8","ecosystem":"pypi","requirements":"3.9.2","direct":false,"kind":"develop","optional":false},{"id":2416049844,"package_name":"ghp-import","ecosystem":"pypi","requirements":"2.0.1","direct":false,"kind":"develop","optional":false},{"id":2416049845,"package_name":"html5lib","ecosystem":"pypi","requirements":"1.1","direct":false,"kind":"develop","optional":false},{"id":2416049846,"package_name":"importlib-metadata","ecosystem":"pypi","requirements":"4.8.1","direct":false,"kind":"develop","optional":false},{"id":2416049847,"package_name":"iniconfig","ecosystem":"pypi","requirements":"1.1.1","direct":false,"kind":"develop","optional":false},{"id":2416049848,"package_name":"isort","ecosystem":"pypi","requirements":"5.9.3","direct":false,"kind":"develop","optional":false},{"id":2416049849,"package_name":"jinja2","ecosystem":"pypi","requirements":"3.0.1","direct":false,"kind":"develop","optional":false},{"id":2416049850,"package_name":"lxml","ecosystem":"pypi","requirements":"4.6.3","direct":false,"kind":"develop","optional":false},{"id":2416049851,"package_name":"markdown","ecosystem":"pypi","requirements":"3.3.4","direct":false,"kind":"develop","optional":false},{"id":2416049852,"package_name":"markupsafe","ecosystem":"pypi","requirements":"2.0.1","direct":false,"kind":"develop","optional":false},{"id":2416049853,"package_name":"mccabe","ecosystem":"pypi","requirements":"0.6.1","direct":false,"kind":"develop","optional":false},{"id":2416049854,"package_name":"mergedeep","ecosystem":"pypi","requirements":"1.3.4","direct":false,"kind":"develop","optional":false},{"id":2416049855,"package_name":"mkapi","ecosystem":"pypi","requirements":"1.0.14","direct":false,"kind":"develop","optional":false},{"id":2416049856,"package_name":"mkdocs","ecosystem":"pypi","requirements":"1.2.2","direct":false,"kind":"develop","optional":false},{"id":2416049857,"package_name":"mkdocs-material","ecosystem":"pypi","requirements":"7.3.0","direct":false,"kind":"develop","optional":false},{"id":2416049858,"package_name":"mkdocs-material-extensions","ecosystem":"pypi","requirements":"1.0.3","direct":false,"kind":"develop","optional":false},{"id":2416049859,"package_name":"mypy","ecosystem":"pypi","requirements":"0.812","direct":false,"kind":"develop","optional":false},{"id":2416049860,"package_name":"mypy-extensions","ecosystem":"pypi","requirements":"0.4.3","direct":false,"kind":"develop","optional":false},{"id":2416049861,"package_name":"ordered-set","ecosystem":"pypi","requirements":"4.0.2","direct":false,"kind":"develop","optional":false},{"id":2416049862,"package_name":"packaging","ecosystem":"pypi","requirements":"21.0","direct":false,"kind":"develop","optional":false},{"id":2416049863,"package_name":"pathspec","ecosystem":"pypi","requirements":"0.9.0","direct":false,"kind":"develop","optional":false},{"id":2416049864,"package_name":"pluggy","ecosystem":"pypi","requirements":"1.0.0","direct":false,"kind":"develop","optional":false},{"id":2416049865,"package_name":"py","ecosystem":"pypi","requirements":"1.10.0","direct":false,"kind":"develop","optional":false},{"id":2416049866,"package_name":"pycodestyle","ecosystem":"pypi","requirements":"2.7.0","direct":false,"kind":"develop","optional":false},{"id":2416049867,"package_name":"pydocstyle","ecosystem":"pypi","requirements":"6.1.1","direct":false,"kind":"develop","optional":false},{"id":2416049868,"package_name":"pyflakes","ecosystem":"pypi","requirements":"2.3.1","direct":false,"kind":"develop","optional":false},{"id":2416049869,"package_name":"pygments","ecosystem":"pypi","requirements":"2.10.0","direct":false,"kind":"develop","optional":false},{"id":2416049870,"package_name":"pymdown-extensions","ecosystem":"pypi","requirements":"8.2","direct":false,"kind":"develop","optional":false},{"id":2416049871,"package_name":"pyparsing","ecosystem":"pypi","requirements":"2.4.7","direct":false,"kind":"develop","optional":false},{"id":2416049872,"package_name":"pyspelling","ecosystem":"pypi","requirements":"2.7.3","direct":false,"kind":"develop","optional":false},{"id":2416049873,"package_name":"pytest","ecosystem":"pypi","requirements":"6.2.5","direct":false,"kind":"develop","optional":false},{"id":2416049874,"package_name":"pytest-cov","ecosystem":"pypi","requirements":"2.12.1","direct":false,"kind":"develop","optional":false},{"id":2416049875,"package_name":"python-dateutil","ecosystem":"pypi","requirements":"2.8.2","direct":false,"kind":"develop","optional":false},{"id":2416049876,"package_name":"pyyaml","ecosystem":"pypi","requirements":"5.4.1","direct":false,"kind":"develop","optional":false},{"id":2416049877,"package_name":"pyyaml-env-tag","ecosystem":"pypi","requirements":"0.1","direct":false,"kind":"develop","optional":false},{"id":2416049878,"package_name":"regex","ecosystem":"pypi","requirements":"2021.8.28","direct":false,"kind":"develop","optional":false},{"id":2416049879,"package_name":"six","ecosystem":"pypi","requirements":"1.16.0","direct":false,"kind":"develop","optional":false},{"id":2416049880,"package_name":"snowballstemmer","ecosystem":"pypi","requirements":"2.1.0","direct":false,"kind":"develop","optional":false},{"id":2416049881,"package_name":"soupsieve","ecosystem":"pypi","requirements":"2.2.1","direct":false,"kind":"develop","optional":false},{"id":2416049882,"package_name":"toml","ecosystem":"pypi","requirements":"0.10.2","direct":false,"kind":"develop","optional":false},{"id":2416049883,"package_name":"typed-ast","ecosystem":"pypi","requirements":"1.4.3","direct":false,"kind":"develop","optional":false},{"id":2416049884,"package_name":"typing-extensions","ecosystem":"pypi","requirements":"3.10.0.2","direct":false,"kind":"develop","optional":false},{"id":2416049885,"package_name":"watchdog","ecosystem":"pypi","requirements":"2.1.5","direct":false,"kind":"develop","optional":false},{"id":2416049886,"package_name":"wcmatch","ecosystem":"pypi","requirements":"8.2","direct":false,"kind":"develop","optional":false},{"id":2416049887,"package_name":"webencodings","ecosystem":"pypi","requirements":"0.5.1","direct":false,"kind":"develop","optional":false},{"id":2416049888,"package_name":"zipp","ecosystem":"pypi","requirements":"3.5.0","direct":false,"kind":"develop","optional":false}]},{"ecosystem":"pypi","filepath":"pyproject.toml","sha":null,"kind":"manifest","created_at":"2022-08-23T16:40:44.934Z","updated_at":"2022-08-23T16:40:44.934Z","repository_link":"https://github.com/larribas/dagger/blob/main/pyproject.toml","dependencies":[{"id":2416050366,"package_name":"python","ecosystem":"pypi","requirements":"\u003e=3.8,\u003c4.0","direct":true,"kind":"runtime","optional":false},{"id":2416050367,"package_name":"pytest","ecosystem":"pypi","requirements":"^6.2","direct":true,"kind":"develop","optional":false},{"id":2416050368,"package_name":"black","ecosystem":"pypi","requirements":"^20.8b1","direct":true,"kind":"develop","optional":false},{"id":2416050369,"package_name":"isort","ecosystem":"pypi","requirements":"^5.7.0","direct":true,"kind":"develop","optional":false},{"id":2416050370,"package_name":"deepdiff","ecosystem":"pypi","requirements":"^5.2.3","direct":true,"kind":"develop","optional":false},{"id":2416050371,"package_name":"flake8","ecosystem":"pypi","requirements":"^3.9.2","direct":true,"kind":"develop","optional":false},{"id":2416050372,"package_name":"pydocstyle","ecosystem":"pypi","requirements":"^6.1.1","direct":true,"kind":"develop","optional":false},{"id":2416050373,"package_name":"mypy","ecosystem":"pypi","requirements":"^0.812","direct":true,"kind":"develop","optional":false},{"id":2416050374,"package_name":"pytest-cov","ecosystem":"pypi","requirements":"^2.12.0","direct":true,"kind":"develop","optional":false},{"id":2416050375,"package_name":"PyYAML","ecosystem":"pypi","requirements":"^5.4.1","direct":true,"kind":"develop","optional":false},{"id":2416050376,"package_name":"mkdocs","ecosystem":"pypi","requirements":"^1.2.2","direct":true,"kind":"develop","optional":false},{"id":2416050377,"package_name":"mkapi","ecosystem":"pypi","requirements":"^1.0.14","direct":true,"kind":"develop","optional":false},{"id":2416050378,"package_name":"mkdocs-material","ecosystem":"pypi","requirements":"^7.2.6","direct":true,"kind":"develop","optional":false},{"id":2416050379,"package_name":"pyspelling","ecosystem":"pypi","requirements":"^2.7.3","direct":true,"kind":"develop","optional":false}]},{"ecosystem":"actions","filepath":".github/workflows/continuous-integration.yaml","sha":null,"kind":"manifest","created_at":"2025-07-28T15:30:51.511Z","updated_at":"2025-07-28T15:30:51.511Z","repository_link":"https://github.com/larribas/dagger/blob/main/.github/workflows/continuous-integration.yaml","dependencies":[{"id":24382554487,"package_name":"actions/checkout","ecosystem":"actions","requirements":"v2","direct":true,"kind":"composite","optional":false},{"id":24382554488,"package_name":"github/codeql-action/init","ecosystem":"actions","requirements":"v1","direct":true,"kind":"composite","optional":false},{"id":24382554489,"package_name":"github/codeql-action/analyze","ecosystem":"actions","requirements":"v1","direct":true,"kind":"composite","optional":false},{"id":24382554490,"package_name":"actions/setup-python","ecosystem":"actions","requirements":"v2","direct":true,"kind":"composite","optional":false},{"id":24382554491,"package_name":"Gr1N/setup-poetry","ecosystem":"actions","requirements":"v7","direct":true,"kind":"composite","optional":false},{"id":24382554492,"package_name":"actions/cache","ecosystem":"actions","requirements":"v2","direct":true,"kind":"composite","optional":false},{"id":24382554493,"package_name":"codecov/codecov-action","ecosystem":"actions","requirements":"v2","direct":true,"kind":"composite","optional":false}]},{"ecosystem":"actions","filepath":".github/workflows/publish-gh-pages.yaml","sha":null,"kind":"manifest","created_at":"2025-07-28T15:30:51.573Z","updated_at":"2025-07-28T15:30:51.573Z","repository_link":"https://github.com/larribas/dagger/blob/main/.github/workflows/publish-gh-pages.yaml","dependencies":[{"id":24382554494,"package_name":"actions/checkout","ecosystem":"actions","requirements":"v2","direct":true,"kind":"composite","optional":false},{"id":24382554495,"package_name":"actions/setup-python","ecosystem":"actions","requirements":"v2","direct":true,"kind":"composite","optional":false},{"id":24382554496,"package_name":"Gr1N/setup-poetry","ecosystem":"actions","requirements":"v7","direct":true,"kind":"composite","optional":false},{"id":24382554497,"package_name":"actions/cache","ecosystem":"actions","requirements":"v2","direct":true,"kind":"composite","optional":false},{"id":24382554498,"package_name":"peaceiris/actions-gh-pages","ecosystem":"actions","requirements":"v3","direct":true,"kind":"composite","optional":false}]},{"ecosystem":"actions","filepath":".github/workflows/publish-library.yaml","sha":null,"kind":"manifest","created_at":"2025-07-28T15:30:51.627Z","updated_at":"2025-07-28T15:30:51.627Z","repository_link":"https://github.com/larribas/dagger/blob/main/.github/workflows/publish-library.yaml","dependencies":[{"id":24382554499,"package_name":"actions/checkout","ecosystem":"actions","requirements":"v2","direct":true,"kind":"composite","optional":false},{"id":24382554500,"package_name":"actions/setup-python","ecosystem":"actions","requirements":"v2","direct":true,"kind":"composite","optional":false},{"id":24382554501,"package_name":"Gr1N/setup-poetry","ecosystem":"actions","requirements":"v7","direct":true,"kind":"composite","optional":false}]},{"ecosystem":"docker","filepath":"Dockerfile","sha":null,"kind":"manifest","created_at":"2025-07-28T15:30:51.681Z","updated_at":"2025-07-28T15:30:51.681Z","repository_link":"https://github.com/larribas/dagger/blob/main/Dockerfile","dependencies":[{"id":24382554502,"package_name":"python","ecosystem":"docker","requirements":"3.9.6-slim","direct":true,"kind":"build","optional":false}]}],"score":8.058960017769417,"created_at":"2025-09-08T20:55:17.742Z","updated_at":"2025-10-07T08:28:01.298Z","avatar_url":"https://github.com/larribas.png","language":"Python","category":null,"sub_category":null,"monthly_downloads":60,"funding_links":[],"readme_doi_urls":[],"works":{},"citation_counts":{},"total_citations":0,"keywords_from_contributors":[],"project_url":"https://science.ecosyste.ms/api/v1/projects/78338","html_url":"https://science.ecosyste.ms/projects/78338"}