{"id":79218,"name":null,"description":"Merlion: A Machine Learning Framework for Time Series Intelligence","url":"https://github.com/salesforce/merlion","last_synced_at":"2025-09-08T21:32:31.885Z","repository":{"id":37035106,"uuid":"390401992","full_name":"salesforce/Merlion","owner":"salesforce","description":"Merlion: A Machine Learning Framework for Time Series Intelligence","archived":false,"fork":false,"pushed_at":"2024-06-20T22:47:32.000Z","size":106155,"stargazers_count":4349,"open_issues_count":37,"forks_count":344,"subscribers_count":63,"default_branch":"main","last_synced_at":"2025-08-29T06:47:15.112Z","etag":null,"topics":["anomaly-detection","automl","benchmarking","ensemble-learning","forecasting","machine-learning","time-series"],"latest_commit_sha":null,"homepage":"","language":"Python","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"bsd-3-clause","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/salesforce.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":"CODE_OF_CONDUCT.md","threat_model":null,"audit":null,"citation":null,"codeowners":"CODEOWNERS","security":"SECURITY.md","support":null,"governance":null,"roadmap":null,"authors":"AUTHORS.md","dei":null,"publiccode":null,"codemeta":null}},"created_at":"2021-07-28T15:30:56.000Z","updated_at":"2025-08-28T10:49:52.000Z","dependencies_parsed_at":"2024-09-21T05:01:39.872Z","dependency_job_id":"ca0f7735-0ae5-48b8-8f63-bb5e475fc692","html_url":"https://github.com/salesforce/Merlion","commit_stats":{"total_commits":77,"total_committers":15,"mean_commits":5.133333333333334,"dds":"0.24675324675324672","last_synced_commit":"01c3fc3406ebf19798cedcddbe829ae5339e1424"},"previous_names":[],"tags_count":18,"template":false,"template_full_name":null,"purl":"pkg:github/salesforce/Merlion","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/salesforce%2FMerlion","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/salesforce%2FMerlion/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/salesforce%2FMerlion/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/salesforce%2FMerlion/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/salesforce","download_url":"https://codeload.github.com/salesforce/Merlion/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/salesforce%2FMerlion/sbom","scorecard":{"id":796338,"data":{"date":"2025-08-11","repo":{"name":"github.com/salesforce/Merlion","commit":"085ef8a69e5dcdfb9dcaa394cc21e087cccbb8f0"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":4.5,"checks":[{"name":"Security-Policy","score":9,"reason":"security policy file detected","details":["Info: security policy file detected: SECURITY.md:1","Info: Found linked content: SECURITY.md:1","Warn: One or no descriptive hints of disclosure, vulnerability, and/or timelines in security policy","Info: Found text in security policy: SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Maintained","score":0,"reason":"0 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Code-Review","score":9,"reason":"Found 27/30 approved changesets -- score normalized to 9","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Warn: no topLevel permission defined: .github/workflows/docs.yml:1","Warn: no topLevel permission defined: .github/workflows/publish.yml:1","Warn: no topLevel permission defined: .github/workflows/tests.yml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Binary-Artifacts","score":7,"reason":"binaries present in source code","details":["Warn: binary detected: merlion/resources/gson-2.8.9.jar:1","Warn: binary detected: merlion/resources/randomcutforest-core-1.0.jar:1","Warn: binary detected: merlion/resources/randomcutforest-serialization-json-1.0.jar:1"],"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: BSD 3-Clause \"New\" or \"Revised\" License: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Vulnerabilities","score":5,"reason":"5 existing vulnerabilities detected","details":["Warn: Project is vulnerable to: PYSEC-2024-4 / GHSA-2mqj-m65w-jghx","Warn: Project is vulnerable to: PYSEC-2023-165 / GHSA-cwvm-v4w8-q58c","Warn: Project is vulnerable to: PYSEC-2022-42992 / GHSA-hcpj-qp55-gfph","Warn: Project is vulnerable to: PYSEC-2023-137 / GHSA-pr76-5cm5-w9cj","Warn: Project is vulnerable to: PYSEC-2023-161 / GHSA-wfm5-v35h-vwf4"],"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 28 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/salesforce/Merlion/docs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/salesforce/Merlion/docs.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docs.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/salesforce/Merlion/docs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish.yml:11: update your workflow using https://app.stepsecurity.io/secureworkflow/salesforce/Merlion/publish.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/salesforce/Merlion/publish.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/publish.yml:23: update your workflow using https://app.stepsecurity.io/secureworkflow/salesforce/Merlion/publish.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/tests.yml:18: update your workflow using https://app.stepsecurity.io/secureworkflow/salesforce/Merlion/tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/tests.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/salesforce/Merlion/tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/tests.yml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/salesforce/Merlion/tests.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/tests.yml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/salesforce/Merlion/tests.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/tests.yml:77: update your workflow using https://app.stepsecurity.io/secureworkflow/salesforce/Merlion/tests.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/tests.yml:85: update your workflow using https://app.stepsecurity.io/secureworkflow/salesforce/Merlion/tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/tests.yml:102: update your workflow using https://app.stepsecurity.io/secureworkflow/salesforce/Merlion/tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/tests.yml:105: update your workflow using https://app.stepsecurity.io/secureworkflow/salesforce/Merlion/tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/tests.yml:110: update your workflow using https://app.stepsecurity.io/secureworkflow/salesforce/Merlion/tests.yml/main?enable=pin","Warn: containerImage not pinned by hash: docker/Dockerfile:1: pin your Docker image by updating python:3.9-slim to python:3.9-slim@sha256:914169c7c8398b1b90c0b0ff921c8027445e39d7c25dc440337e56ce0f2566e6","Warn: containerImage not pinned by hash: docker/dashboard/Dockerfile:1: pin your Docker image by updating python:3.9-slim to python:3.9-slim@sha256:914169c7c8398b1b90c0b0ff921c8027445e39d7c25dc440337e56ce0f2566e6","Warn: containerImage not pinned by hash: docker/spark-on-k8s/Dockerfile:2","Warn: pipCommand not pinned by hash: docker/Dockerfile:14","Warn: pipCommand not pinned by hash: docker/dashboard/Dockerfile:14","Warn: pipCommand not pinned by hash: docker/spark-on-k8s/Dockerfile:12","Warn: pipCommand not pinned by hash: docs/build_docs.sh:33","Warn: pipCommand not pinned by hash: docs/build_docs.sh:39","Warn: pipCommand not pinned by hash: docs/build_docs.sh:67","Warn: pipCommand not pinned by hash: docs/build_docs.sh:68","Warn: pipCommand not pinned by hash: .github/workflows/docs.yml:28","Warn: pipCommand not pinned by hash: .github/workflows/publish.yml:18","Warn: pipCommand not pinned by hash: .github/workflows/tests.yml:32","Warn: pipCommand not pinned by hash: .github/workflows/tests.yml:33","Warn: pipCommand not pinned by hash: .github/workflows/tests.yml:35","Warn: pipCommand not pinned by hash: .github/workflows/tests.yml:36","Info:   0 out of  10 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of   5 third-party GitHubAction dependencies pinned","Info:   0 out of   3 containerImage dependencies pinned","Info:   0 out of  13 pipCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}}]},"last_synced_at":"2025-08-23T09:07:33.881Z","repository_id":37035106,"created_at":"2025-08-23T09:07:33.881Z","updated_at":"2025-08-23T09:07:33.881Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":274231465,"owners_count":25245625,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","status":"online","status_checked_at":"2025-09-08T02:00:09.813Z","response_time":121,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"owner":{"login":"salesforce","name":"Salesforce","uuid":"453694","kind":"organization","description":"Premier Open Source projects released and supported by Salesforce.","email":"osscore@salesforce.com","website":"https://opensource.salesforce.com","location":null,"twitter":null,"company":null,"icon_url":"https://avatars.githubusercontent.com/u/453694?v=4","repositories_count":401,"last_synced_at":"2025-04-09T23:04:36.512Z","metadata":{"has_sponsors_listing":false},"html_url":"https://github.com/salesforce","funding_links":[],"total_stars":85025,"followers":2790,"following":0,"created_at":"2022-11-02T16:20:11.932Z","updated_at":"2025-04-09T23:04:36.513Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/salesforce","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/salesforce/repositories"},"packages":[{"id":5303109,"name":"salesforce-merlion","ecosystem":"conda","description":"Merlion is a Python library for time series intelligence. It  features a unified interface for many commonly used models and  datasets for anomaly detection and forecasting on both univariate  and multivariate time series, along with standard pre-processing  and post-processing layers. It has several modules to improve  ease-of-use, including visualization, anomaly score calibration to  improve interpetability, AutoML for hyperparameter tuning and model  selection, and model ensembling. Merlion also provides a unique  evaluation framework that simulates the live deployment and  re-training of a model in production. This library aims to provide  engineers and researchers a one-stop solution to rapidly develop  models for their specific time series needs, and benchmark them  across multiple time series datasets.","homepage":"https://github.com/salesforce/Merlion","licenses":"BSD-3-Clause","normalized_licenses":["BSD-3-Clause"],"repository_url":"https://github.com/salesforce/Merlion","keywords_array":[],"namespace":null,"versions_count":15,"first_release_published_at":"2021-09-29T19:51:15.000Z","latest_release_published_at":"2022-10-05T02:27:22.000Z","latest_release_number":"1.3.1","last_synced_at":"2025-08-29T09:06:32.205Z","created_at":"2022-10-03T16:14:10.941Z","updated_at":"2025-08-29T10:11:38.582Z","registry_url":"https://anaconda.org/conda-forge/salesforce-merlion","install_command":"conda install -c conda-forge salesforce-merlion","documentation_url":null,"metadata":{},"repo_metadata":{"id":37035106,"uuid":"390401992","full_name":"salesforce/Merlion","owner":"salesforce","description":"Merlion: A Machine Learning Framework for Time Series Intelligence","archived":false,"fork":false,"pushed_at":"2024-06-20T22:47:32.000Z","size":106155,"stargazers_count":4349,"open_issues_count":37,"forks_count":344,"subscribers_count":63,"default_branch":"main","last_synced_at":"2025-08-29T06:47:15.112Z","etag":null,"topics":["anomaly-detection","automl","benchmarking","ensemble-learning","forecasting","machine-learning","time-series"],"latest_commit_sha":null,"homepage":"","language":"Python","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"bsd-3-clause","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/salesforce.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":"CODE_OF_CONDUCT.md","threat_model":null,"audit":null,"citation":null,"codeowners":"CODEOWNERS","security":"SECURITY.md","support":null,"governance":null,"roadmap":null,"authors":"AUTHORS.md","dei":null,"publiccode":null,"codemeta":null}},"created_at":"2021-07-28T15:30:56.000Z","updated_at":"2025-08-28T10:49:52.000Z","dependencies_parsed_at":"2024-09-21T05:01:39.872Z","dependency_job_id":"ca0f7735-0ae5-48b8-8f63-bb5e475fc692","html_url":"https://github.com/salesforce/Merlion","commit_stats":{"total_commits":77,"total_committers":15,"mean_commits":5.133333333333334,"dds":"0.24675324675324672","last_synced_commit":"01c3fc3406ebf19798cedcddbe829ae5339e1424"},"previous_names":[],"tags_count":18,"template":false,"template_full_name":null,"purl":"pkg:github/salesforce/Merlion","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/salesforce%2FMerlion","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/salesforce%2FMerlion/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/salesforce%2FMerlion/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/salesforce%2FMerlion/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/salesforce","download_url":"https://codeload.github.com/salesforce/Merlion/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/salesforce%2FMerlion/sbom","scorecard":{"id":796338,"data":{"date":"2025-08-11","repo":{"name":"github.com/salesforce/Merlion","commit":"085ef8a69e5dcdfb9dcaa394cc21e087cccbb8f0"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":4.5,"checks":[{"name":"Security-Policy","score":9,"reason":"security policy file detected","details":["Info: security policy file detected: SECURITY.md:1","Info: Found linked content: SECURITY.md:1","Warn: One or no descriptive hints of disclosure, vulnerability, and/or timelines in security policy","Info: Found text in security policy: SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Maintained","score":0,"reason":"0 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Code-Review","score":9,"reason":"Found 27/30 approved changesets -- score normalized to 9","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Warn: no topLevel permission defined: .github/workflows/docs.yml:1","Warn: no topLevel permission defined: .github/workflows/publish.yml:1","Warn: no topLevel permission defined: .github/workflows/tests.yml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Binary-Artifacts","score":7,"reason":"binaries present in source code","details":["Warn: binary detected: merlion/resources/gson-2.8.9.jar:1","Warn: binary detected: merlion/resources/randomcutforest-core-1.0.jar:1","Warn: binary detected: merlion/resources/randomcutforest-serialization-json-1.0.jar:1"],"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: BSD 3-Clause \"New\" or \"Revised\" License: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Vulnerabilities","score":5,"reason":"5 existing vulnerabilities detected","details":["Warn: Project is vulnerable to: PYSEC-2024-4 / GHSA-2mqj-m65w-jghx","Warn: Project is vulnerable to: PYSEC-2023-165 / GHSA-cwvm-v4w8-q58c","Warn: Project is vulnerable to: PYSEC-2022-42992 / GHSA-hcpj-qp55-gfph","Warn: Project is vulnerable to: PYSEC-2023-137 / GHSA-pr76-5cm5-w9cj","Warn: Project is vulnerable to: PYSEC-2023-161 / GHSA-wfm5-v35h-vwf4"],"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 28 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/salesforce/Merlion/docs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/salesforce/Merlion/docs.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docs.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/salesforce/Merlion/docs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish.yml:11: update your workflow using https://app.stepsecurity.io/secureworkflow/salesforce/Merlion/publish.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/salesforce/Merlion/publish.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/publish.yml:23: update your workflow using https://app.stepsecurity.io/secureworkflow/salesforce/Merlion/publish.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/tests.yml:18: update your workflow using https://app.stepsecurity.io/secureworkflow/salesforce/Merlion/tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/tests.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/salesforce/Merlion/tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/tests.yml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/salesforce/Merlion/tests.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/tests.yml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/salesforce/Merlion/tests.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/tests.yml:77: update your workflow using https://app.stepsecurity.io/secureworkflow/salesforce/Merlion/tests.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/tests.yml:85: update your workflow using https://app.stepsecurity.io/secureworkflow/salesforce/Merlion/tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/tests.yml:102: update your workflow using https://app.stepsecurity.io/secureworkflow/salesforce/Merlion/tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/tests.yml:105: update your workflow using https://app.stepsecurity.io/secureworkflow/salesforce/Merlion/tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/tests.yml:110: update your workflow using https://app.stepsecurity.io/secureworkflow/salesforce/Merlion/tests.yml/main?enable=pin","Warn: containerImage not pinned by hash: docker/Dockerfile:1: pin your Docker image by updating python:3.9-slim to python:3.9-slim@sha256:914169c7c8398b1b90c0b0ff921c8027445e39d7c25dc440337e56ce0f2566e6","Warn: containerImage not pinned by hash: docker/dashboard/Dockerfile:1: pin your Docker image by updating python:3.9-slim to python:3.9-slim@sha256:914169c7c8398b1b90c0b0ff921c8027445e39d7c25dc440337e56ce0f2566e6","Warn: containerImage not pinned by hash: docker/spark-on-k8s/Dockerfile:2","Warn: pipCommand not pinned by hash: docker/Dockerfile:14","Warn: pipCommand not pinned by hash: docker/dashboard/Dockerfile:14","Warn: pipCommand not pinned by hash: docker/spark-on-k8s/Dockerfile:12","Warn: pipCommand not pinned by hash: docs/build_docs.sh:33","Warn: pipCommand not pinned by hash: docs/build_docs.sh:39","Warn: pipCommand not pinned by hash: docs/build_docs.sh:67","Warn: pipCommand not pinned by hash: docs/build_docs.sh:68","Warn: pipCommand not pinned by hash: .github/workflows/docs.yml:28","Warn: pipCommand not pinned by hash: .github/workflows/publish.yml:18","Warn: pipCommand not pinned by hash: .github/workflows/tests.yml:32","Warn: pipCommand not pinned by hash: .github/workflows/tests.yml:33","Warn: pipCommand not pinned by hash: .github/workflows/tests.yml:35","Warn: pipCommand not pinned by hash: .github/workflows/tests.yml:36","Info:   0 out of  10 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of   5 third-party GitHubAction dependencies pinned","Info:   0 out of   3 containerImage dependencies pinned","Info:   0 out of  13 pipCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}}]},"last_synced_at":"2025-08-23T09:07:33.881Z","repository_id":37035106,"created_at":"2025-08-23T09:07:33.881Z","updated_at":"2025-08-23T09:07:33.881Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":272666520,"owners_count":24972695,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","status":"online","status_checked_at":"2025-08-29T02:00:10.610Z","response_time":87,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"salesforce","name":"Salesforce","uuid":"453694","kind":"organization","description":"Premier Open Source projects released and supported by Salesforce.","email":"osscore@salesforce.com","website":"https://opensource.salesforce.com","location":null,"twitter":null,"company":null,"icon_url":"https://avatars.githubusercontent.com/u/453694?v=4","repositories_count":401,"last_synced_at":"2025-04-09T23:04:36.512Z","metadata":{"has_sponsors_listing":false},"html_url":"https://github.com/salesforce","funding_links":[],"total_stars":85025,"followers":2790,"following":0,"created_at":"2022-11-02T16:20:11.932Z","updated_at":"2025-04-09T23:04:36.513Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/salesforce","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/salesforce/repositories"},"tags":[{"name":"v2.0.2","sha":"3d025adb3881f7d442b4480b888f2b6ed912d940","kind":"commit","published_at":"2023-02-15T05:19:41.000Z","download_url":"https://codeload.github.com/salesforce/Merlion/tar.gz/v2.0.2","html_url":"https://github.com/salesforce/Merlion/releases/tag/v2.0.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/salesforce/Merlion@v2.0.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/salesforce%2FMerlion/tags/v2.0.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/salesforce%2FMerlion/tags/v2.0.2/manifests"},{"name":"v2.0.1","sha":"879e92e404158a5ccc7a63bdec2e070aa44df33d","kind":"commit","published_at":"2023-02-07T03:50:04.000Z","download_url":"https://codeload.github.com/salesforce/Merlion/tar.gz/v2.0.1","html_url":"https://github.com/salesforce/Merlion/releases/tag/v2.0.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/salesforce/Merlion@v2.0.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/salesforce%2FMerlion/tags/v2.0.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/salesforce%2FMerlion/tags/v2.0.1/manifests"},{"name":"v2.0.0","sha":"a241a62fb5cd429c3da61938744cb6c841452341","kind":"commit","published_at":"2023-01-03T22:32:21.000Z","download_url":"https://codeload.github.com/salesforce/Merlion/tar.gz/v2.0.0","html_url":"https://github.com/salesforce/Merlion/releases/tag/v2.0.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/salesforce/Merlion@v2.0.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/salesforce%2FMerlion/tags/v2.0.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/salesforce%2FMerlion/tags/v2.0.0/manifests"},{"name":"v1.3.1","sha":"a0d9f9c27833239ef8da5ff3cc0c2220d70cd122","kind":"commit","published_at":"2022-10-03T17:45:29.000Z","download_url":"https://codeload.github.com/salesforce/Merlion/tar.gz/v1.3.1","html_url":"https://github.com/salesforce/Merlion/releases/tag/v1.3.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/salesforce/Merlion@v1.3.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/salesforce%2FMerlion/tags/v1.3.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/salesforce%2FMerlion/tags/v1.3.1/manifests"},{"name":"v1.3.0","sha":"eae7bd47b6420b20931209faaf8ebbadeb332cac","kind":"commit","published_at":"2022-09-01T18:58:38.000Z","download_url":"https://codeload.github.com/salesforce/Merlion/tar.gz/v1.3.0","html_url":"https://github.com/salesforce/Merlion/releases/tag/v1.3.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/salesforce/Merlion@v1.3.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/salesforce%2FMerlion/tags/v1.3.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/salesforce%2FMerlion/tags/v1.3.0/manifests"},{"name":"v1.2.5","sha":"3f7e8004ce76ff28b0a35760d4104fd634e16dcf","kind":"commit","published_at":"2022-07-15T20:45:35.000Z","download_url":"https://codeload.github.com/salesforce/Merlion/tar.gz/v1.2.5","html_url":"https://github.com/salesforce/Merlion/releases/tag/v1.2.5","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/salesforce/Merlion@v1.2.5","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/salesforce%2FMerlion/tags/v1.2.5","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/salesforce%2FMerlion/tags/v1.2.5/manifests"},{"name":"v1.2.4","sha":"638529e255195f22c666ad623c3a6b020327364b","kind":"commit","published_at":"2022-07-15T00:38:10.000Z","download_url":"https://codeload.github.com/salesforce/Merlion/tar.gz/v1.2.4","html_url":"https://github.com/salesforce/Merlion/releases/tag/v1.2.4","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/salesforce/Merlion@v1.2.4","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/salesforce%2FMerlion/tags/v1.2.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/salesforce%2FMerlion/tags/v1.2.4/manifests"},{"name":"v1.2.3","sha":"e0a79f0169d1af53a2393bf455c7d1015cf7871c","kind":"commit","published_at":"2022-06-28T22:07:43.000Z","download_url":"https://codeload.github.com/salesforce/Merlion/tar.gz/v1.2.3","html_url":"https://github.com/salesforce/Merlion/releases/tag/v1.2.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/salesforce/Merlion@v1.2.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/salesforce%2FMerlion/tags/v1.2.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/salesforce%2FMerlion/tags/v1.2.3/manifests"},{"name":"v1.2.2","sha":"251f4e92bfc8f2ff811949e86178f1a66761133a","kind":"commit","published_at":"2022-06-18T14:32:35.000Z","download_url":"https://codeload.github.com/salesforce/Merlion/tar.gz/v1.2.2","html_url":"https://github.com/salesforce/Merlion/releases/tag/v1.2.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/salesforce/Merlion@v1.2.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/salesforce%2FMerlion/tags/v1.2.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/salesforce%2FMerlion/tags/v1.2.2/manifests"},{"name":"v1.2.1","sha":"ea67ed4a2016b4ac2866b171b023838cbcc293f7","kind":"commit","published_at":"2022-06-09T01:56:46.000Z","download_url":"https://codeload.github.com/salesforce/Merlion/tar.gz/v1.2.1","html_url":"https://github.com/salesforce/Merlion/releases/tag/v1.2.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/salesforce/Merlion@v1.2.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/salesforce%2FMerlion/tags/v1.2.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/salesforce%2FMerlion/tags/v1.2.1/manifests"},{"name":"v1.2.0","sha":"80ba574eb56f28bf3412c61a6b32c28d0f06066b","kind":"commit","published_at":"2022-06-01T15:55:03.000Z","download_url":"https://codeload.github.com/salesforce/Merlion/tar.gz/v1.2.0","html_url":"https://github.com/salesforce/Merlion/releases/tag/v1.2.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/salesforce/Merlion@v1.2.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/salesforce%2FMerlion/tags/v1.2.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/salesforce%2FMerlion/tags/v1.2.0/manifests"},{"name":"v1.1.3","sha":"d0aca7fa817d9d0581f71746b3b268b6ccc3aa1f","kind":"commit","published_at":"2022-04-19T15:36:51.000Z","download_url":"https://codeload.github.com/salesforce/Merlion/tar.gz/v1.1.3","html_url":"https://github.com/salesforce/Merlion/releases/tag/v1.1.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/salesforce/Merlion@v1.1.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/salesforce%2FMerlion/tags/v1.1.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/salesforce%2FMerlion/tags/v1.1.3/manifests"},{"name":"v1.1.2","sha":"adb73c1d3c22103fc98864f924482ff9264005d5","kind":"commit","published_at":"2022-03-03T00:38:33.000Z","download_url":"https://codeload.github.com/salesforce/Merlion/tar.gz/v1.1.2","html_url":"https://github.com/salesforce/Merlion/releases/tag/v1.1.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/salesforce/Merlion@v1.1.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/salesforce%2FMerlion/tags/v1.1.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/salesforce%2FMerlion/tags/v1.1.2/manifests"},{"name":"v1.1.1","sha":"4a448de1676e62b6305578e3a21dd92d4d2ac245","kind":"commit","published_at":"2022-01-17T19:27:31.000Z","download_url":"https://codeload.github.com/salesforce/Merlion/tar.gz/v1.1.1","html_url":"https://github.com/salesforce/Merlion/releases/tag/v1.1.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/salesforce/Merlion@v1.1.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/salesforce%2FMerlion/tags/v1.1.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/salesforce%2FMerlion/tags/v1.1.1/manifests"},{"name":"v1.1.0","sha":"273dc04fbd3a1d652cb9c822da975481896f4435","kind":"commit","published_at":"2021-12-17T21:03:26.000Z","download_url":"https://codeload.github.com/salesforce/Merlion/tar.gz/v1.1.0","html_url":"https://github.com/salesforce/Merlion/releases/tag/v1.1.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/salesforce/Merlion@v1.1.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/salesforce%2FMerlion/tags/v1.1.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/salesforce%2FMerlion/tags/v1.1.0/manifests"},{"name":"v1.0.2","sha":"67e6420cbe454837a278a4185261311058db1aab","kind":"commit","published_at":"2021-11-09T00:46:53.000Z","download_url":"https://codeload.github.com/salesforce/Merlion/tar.gz/v1.0.2","html_url":"https://github.com/salesforce/Merlion/releases/tag/v1.0.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/salesforce/Merlion@v1.0.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/salesforce%2FMerlion/tags/v1.0.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/salesforce%2FMerlion/tags/v1.0.2/manifests"},{"name":"v1.0.1","sha":"6b68e90ef03760d8749906adec44a1c6b7d012dd","kind":"commit","published_at":"2021-10-18T20:58:30.000Z","download_url":"https://codeload.github.com/salesforce/Merlion/tar.gz/v1.0.1","html_url":"https://github.com/salesforce/Merlion/releases/tag/v1.0.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/salesforce/Merlion@v1.0.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/salesforce%2FMerlion/tags/v1.0.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/salesforce%2FMerlion/tags/v1.0.1/manifests"},{"name":"v1.0.0","sha":"89f0b75334f8628d56230b0cbc7b18ee271be97e","kind":"commit","published_at":"2021-09-23T20:52:27.000Z","download_url":"https://codeload.github.com/salesforce/Merlion/tar.gz/v1.0.0","html_url":"https://github.com/salesforce/Merlion/releases/tag/v1.0.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/salesforce/Merlion@v1.0.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/salesforce%2FMerlion/tags/v1.0.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/salesforce%2FMerlion/tags/v1.0.0/manifests"}]},"repo_metadata_updated_at":"2025-08-29T10:11:38.582Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":34.025455452957324,"dependent_packages_count":51.17544297479411,"stargazers_count":6.937858747192413,"forks_count":10.516595957075118,"average":25.66383828300474},"purl":"pkg:conda/salesforce-merlion","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/conda/salesforce-merlion","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/conda/salesforce-merlion","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/conda/salesforce-merlion/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2025-08-29T04:21:57.062Z","issues_count":69,"pull_requests_count":61,"avg_time_to_close_issue":2551455.1842105263,"avg_time_to_close_pull_request":1087332.4915254237,"issues_closed_count":38,"pull_requests_closed_count":59,"pull_request_authors_count":17,"issue_authors_count":53,"avg_comments_per_issue":1.5072463768115942,"avg_comments_per_pull_request":0.819672131147541,"merged_pull_requests_count":53,"bot_issues_count":0,"bot_pull_requests_count":0,"past_year_issues_count":7,"past_year_pull_requests_count":2,"past_year_avg_time_to_close_issue":null,"past_year_avg_time_to_close_pull_request":null,"past_year_issues_closed_count":0,"past_year_pull_requests_closed_count":0,"past_year_pull_request_authors_count":2,"past_year_issue_authors_count":6,"past_year_avg_comments_per_issue":0.7142857142857143,"past_year_avg_comments_per_pull_request":0.5,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":0,"past_year_merged_pull_requests_count":0,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/salesforce%2FMerlion/issues","maintainers":[{"login":"shi-yu-wang","count":4,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/shi-yu-wang"},{"login":"Emerald01","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Emerald01"},{"login":"yihaocs","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/yihaocs"},{"login":"mattfernandez-salesforce","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mattfernandez-salesforce"}],"active_maintainers":[]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/conda-forge.org/packages/salesforce-merlion/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/conda-forge.org/packages/salesforce-merlion/version_numbers","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/conda-forge.org/packages/salesforce-merlion/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/conda-forge.org/packages/salesforce-merlion/related_packages","maintainers":[],"registry":{"name":"conda-forge.org","url":"https://conda-forge.org","ecosystem":"conda","default":false,"packages_count":20636,"maintainers_count":0,"namespaces_count":0,"keywords_count":13414,"github":"conda-forge","metadata":{"kind":"conda-forge","key":"CondaForge","api":"https://conda.anaconda.org","funded_packages_count":2190},"icon_url":"https://github.com/conda-forge.png","created_at":"2022-10-03T15:37:08.743Z","updated_at":"2025-09-08T06:53:21.618Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/conda-forge.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/conda-forge.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/conda-forge.org/namespaces"}},{"id":2916966,"name":"sfdc-merlion","ecosystem":"pypi","description":"Merlion: A Machine Learning Framework for Time Series Intelligence","homepage":"https://github.com/salesforce/Merlion","licenses":"3-Clause BSD","normalized_licenses":["BSD-3-Clause"],"repository_url":"https://github.com/salesforce/Merlion","keywords_array":["time series","forecasting","anomaly detection","machine learning","autoML","ensemble learning","benchmarking","Python","scientific toolkit"],"namespace":null,"versions_count":1,"first_release_published_at":"2021-09-21T17:45:16.000Z","latest_release_published_at":"2021-09-21T17:45:16.000Z","latest_release_number":"1.0.0","last_synced_at":"2025-08-29T09:06:28.140Z","created_at":"2022-04-10T12:35:28.005Z","updated_at":"2025-08-29T10:11:48.570Z","registry_url":"https://pypi.org/project/sfdc-merlion/","install_command":"pip install sfdc-merlion --index-url https://pypi.org/simple","documentation_url":"https://sfdc-merlion.readthedocs.io/","metadata":{"funding":null,"documentation":null,"classifiers":[],"normalized_name":"sfdc-merlion","project_status":null},"repo_metadata":{"id":37035106,"uuid":"390401992","full_name":"salesforce/Merlion","owner":"salesforce","description":"Merlion: A Machine Learning Framework for Time Series Intelligence","archived":false,"fork":false,"pushed_at":"2024-06-20T22:47:32.000Z","size":106155,"stargazers_count":4349,"open_issues_count":37,"forks_count":344,"subscribers_count":63,"default_branch":"main","last_synced_at":"2025-08-29T06:47:15.112Z","etag":null,"topics":["anomaly-detection","automl","benchmarking","ensemble-learning","forecasting","machine-learning","time-series"],"latest_commit_sha":null,"homepage":"","language":"Python","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"bsd-3-clause","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/salesforce.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":"CODE_OF_CONDUCT.md","threat_model":null,"audit":null,"citation":null,"codeowners":"CODEOWNERS","security":"SECURITY.md","support":null,"governance":null,"roadmap":null,"authors":"AUTHORS.md","dei":null,"publiccode":null,"codemeta":null}},"created_at":"2021-07-28T15:30:56.000Z","updated_at":"2025-08-28T10:49:52.000Z","dependencies_parsed_at":"2024-09-21T05:01:39.872Z","dependency_job_id":"ca0f7735-0ae5-48b8-8f63-bb5e475fc692","html_url":"https://github.com/salesforce/Merlion","commit_stats":{"total_commits":77,"total_committers":15,"mean_commits":5.133333333333334,"dds":"0.24675324675324672","last_synced_commit":"01c3fc3406ebf19798cedcddbe829ae5339e1424"},"previous_names":[],"tags_count":18,"template":false,"template_full_name":null,"purl":"pkg:github/salesforce/Merlion","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/salesforce%2FMerlion","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/salesforce%2FMerlion/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/salesforce%2FMerlion/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/salesforce%2FMerlion/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/salesforce","download_url":"https://codeload.github.com/salesforce/Merlion/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/salesforce%2FMerlion/sbom","scorecard":{"id":796338,"data":{"date":"2025-08-11","repo":{"name":"github.com/salesforce/Merlion","commit":"085ef8a69e5dcdfb9dcaa394cc21e087cccbb8f0"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":4.5,"checks":[{"name":"Security-Policy","score":9,"reason":"security policy file detected","details":["Info: security policy file detected: SECURITY.md:1","Info: Found linked content: SECURITY.md:1","Warn: One or no descriptive hints of disclosure, vulnerability, and/or timelines in security policy","Info: Found text in security policy: SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Maintained","score":0,"reason":"0 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Code-Review","score":9,"reason":"Found 27/30 approved changesets -- score normalized to 9","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Warn: no topLevel permission defined: .github/workflows/docs.yml:1","Warn: no topLevel permission defined: .github/workflows/publish.yml:1","Warn: no topLevel permission defined: .github/workflows/tests.yml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Binary-Artifacts","score":7,"reason":"binaries present in source code","details":["Warn: binary detected: merlion/resources/gson-2.8.9.jar:1","Warn: binary detected: merlion/resources/randomcutforest-core-1.0.jar:1","Warn: binary detected: merlion/resources/randomcutforest-serialization-json-1.0.jar:1"],"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: BSD 3-Clause \"New\" or \"Revised\" License: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Vulnerabilities","score":5,"reason":"5 existing vulnerabilities detected","details":["Warn: Project is vulnerable to: PYSEC-2024-4 / GHSA-2mqj-m65w-jghx","Warn: Project is vulnerable to: PYSEC-2023-165 / GHSA-cwvm-v4w8-q58c","Warn: Project is vulnerable to: PYSEC-2022-42992 / GHSA-hcpj-qp55-gfph","Warn: Project is vulnerable to: PYSEC-2023-137 / GHSA-pr76-5cm5-w9cj","Warn: Project is vulnerable to: PYSEC-2023-161 / GHSA-wfm5-v35h-vwf4"],"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 28 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/salesforce/Merlion/docs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/salesforce/Merlion/docs.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docs.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/salesforce/Merlion/docs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish.yml:11: update your workflow using https://app.stepsecurity.io/secureworkflow/salesforce/Merlion/publish.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/salesforce/Merlion/publish.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/publish.yml:23: update your workflow using https://app.stepsecurity.io/secureworkflow/salesforce/Merlion/publish.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/tests.yml:18: update your workflow using https://app.stepsecurity.io/secureworkflow/salesforce/Merlion/tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/tests.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/salesforce/Merlion/tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/tests.yml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/salesforce/Merlion/tests.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/tests.yml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/salesforce/Merlion/tests.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/tests.yml:77: update your workflow using https://app.stepsecurity.io/secureworkflow/salesforce/Merlion/tests.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/tests.yml:85: update your workflow using https://app.stepsecurity.io/secureworkflow/salesforce/Merlion/tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/tests.yml:102: update your workflow using https://app.stepsecurity.io/secureworkflow/salesforce/Merlion/tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/tests.yml:105: update your workflow using https://app.stepsecurity.io/secureworkflow/salesforce/Merlion/tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/tests.yml:110: update your workflow using https://app.stepsecurity.io/secureworkflow/salesforce/Merlion/tests.yml/main?enable=pin","Warn: containerImage not pinned by hash: docker/Dockerfile:1: pin your Docker image by updating python:3.9-slim to python:3.9-slim@sha256:914169c7c8398b1b90c0b0ff921c8027445e39d7c25dc440337e56ce0f2566e6","Warn: containerImage not pinned by hash: docker/dashboard/Dockerfile:1: pin your Docker image by updating python:3.9-slim to python:3.9-slim@sha256:914169c7c8398b1b90c0b0ff921c8027445e39d7c25dc440337e56ce0f2566e6","Warn: containerImage not pinned by hash: docker/spark-on-k8s/Dockerfile:2","Warn: pipCommand not pinned by hash: docker/Dockerfile:14","Warn: pipCommand not pinned by hash: docker/dashboard/Dockerfile:14","Warn: pipCommand not pinned by hash: docker/spark-on-k8s/Dockerfile:12","Warn: pipCommand not pinned by hash: docs/build_docs.sh:33","Warn: pipCommand not pinned by hash: docs/build_docs.sh:39","Warn: pipCommand not pinned by hash: docs/build_docs.sh:67","Warn: pipCommand not pinned by hash: docs/build_docs.sh:68","Warn: pipCommand not pinned by hash: .github/workflows/docs.yml:28","Warn: pipCommand not pinned by hash: .github/workflows/publish.yml:18","Warn: pipCommand not pinned by hash: .github/workflows/tests.yml:32","Warn: pipCommand not pinned by hash: .github/workflows/tests.yml:33","Warn: pipCommand not pinned by hash: .github/workflows/tests.yml:35","Warn: pipCommand not pinned by hash: .github/workflows/tests.yml:36","Info:   0 out of  10 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of   5 third-party GitHubAction dependencies pinned","Info:   0 out of   3 containerImage dependencies pinned","Info:   0 out of  13 pipCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}}]},"last_synced_at":"2025-08-23T09:07:33.881Z","repository_id":37035106,"created_at":"2025-08-23T09:07:33.881Z","updated_at":"2025-08-23T09:07:33.881Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":272666520,"owners_count":24972695,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","status":"online","status_checked_at":"2025-08-29T02:00:10.610Z","response_time":87,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"salesforce","name":"Salesforce","uuid":"453694","kind":"organization","description":"Premier Open Source projects released and supported by Salesforce.","email":"osscore@salesforce.com","website":"https://opensource.salesforce.com","location":null,"twitter":null,"company":null,"icon_url":"https://avatars.githubusercontent.com/u/453694?v=4","repositories_count":401,"last_synced_at":"2025-04-09T23:04:36.512Z","metadata":{"has_sponsors_listing":false},"html_url":"https://github.com/salesforce","funding_links":[],"total_stars":85025,"followers":2790,"following":0,"created_at":"2022-11-02T16:20:11.932Z","updated_at":"2025-04-09T23:04:36.513Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/salesforce","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/salesforce/repositories"},"tags":[{"name":"v2.0.2","sha":"3d025adb3881f7d442b4480b888f2b6ed912d940","kind":"commit","published_at":"2023-02-15T05:19:41.000Z","download_url":"https://codeload.github.com/salesforce/Merlion/tar.gz/v2.0.2","html_url":"https://github.com/salesforce/Merlion/releases/tag/v2.0.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/salesforce/Merlion@v2.0.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/salesforce%2FMerlion/tags/v2.0.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/salesforce%2FMerlion/tags/v2.0.2/manifests"},{"name":"v2.0.1","sha":"879e92e404158a5ccc7a63bdec2e070aa44df33d","kind":"commit","published_at":"2023-02-07T03:50:04.000Z","download_url":"https://codeload.github.com/salesforce/Merlion/tar.gz/v2.0.1","html_url":"https://github.com/salesforce/Merlion/releases/tag/v2.0.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/salesforce/Merlion@v2.0.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/salesforce%2FMerlion/tags/v2.0.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/salesforce%2FMerlion/tags/v2.0.1/manifests"},{"name":"v2.0.0","sha":"a241a62fb5cd429c3da61938744cb6c841452341","kind":"commit","published_at":"2023-01-03T22:32:21.000Z","download_url":"https://codeload.github.com/salesforce/Merlion/tar.gz/v2.0.0","html_url":"https://github.com/salesforce/Merlion/releases/tag/v2.0.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/salesforce/Merlion@v2.0.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/salesforce%2FMerlion/tags/v2.0.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/salesforce%2FMerlion/tags/v2.0.0/manifests"},{"name":"v1.3.1","sha":"a0d9f9c27833239ef8da5ff3cc0c2220d70cd122","kind":"commit","published_at":"2022-10-03T17:45:29.000Z","download_url":"https://codeload.github.com/salesforce/Merlion/tar.gz/v1.3.1","html_url":"https://github.com/salesforce/Merlion/releases/tag/v1.3.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/salesforce/Merlion@v1.3.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/salesforce%2FMerlion/tags/v1.3.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/salesforce%2FMerlion/tags/v1.3.1/manifests"},{"name":"v1.3.0","sha":"eae7bd47b6420b20931209faaf8ebbadeb332cac","kind":"commit","published_at":"2022-09-01T18:58:38.000Z","download_url":"https://codeload.github.com/salesforce/Merlion/tar.gz/v1.3.0","html_url":"https://github.com/salesforce/Merlion/releases/tag/v1.3.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/salesforce/Merlion@v1.3.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/salesforce%2FMerlion/tags/v1.3.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/salesforce%2FMerlion/tags/v1.3.0/manifests"},{"name":"v1.2.5","sha":"3f7e8004ce76ff28b0a35760d4104fd634e16dcf","kind":"commit","published_at":"2022-07-15T20:45:35.000Z","download_url":"https://codeload.github.com/salesforce/Merlion/tar.gz/v1.2.5","html_url":"https://github.com/salesforce/Merlion/releases/tag/v1.2.5","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/salesforce/Merlion@v1.2.5","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/salesforce%2FMerlion/tags/v1.2.5","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/salesforce%2FMerlion/tags/v1.2.5/manifests"},{"name":"v1.2.4","sha":"638529e255195f22c666ad623c3a6b020327364b","kind":"commit","published_at":"2022-07-15T00:38:10.000Z","download_url":"https://codeload.github.com/salesforce/Merlion/tar.gz/v1.2.4","html_url":"https://github.com/salesforce/Merlion/releases/tag/v1.2.4","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/salesforce/Merlion@v1.2.4","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/salesforce%2FMerlion/tags/v1.2.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/salesforce%2FMerlion/tags/v1.2.4/manifests"},{"name":"v1.2.3","sha":"e0a79f0169d1af53a2393bf455c7d1015cf7871c","kind":"commit","published_at":"2022-06-28T22:07:43.000Z","download_url":"https://codeload.github.com/salesforce/Merlion/tar.gz/v1.2.3","html_url":"https://github.com/salesforce/Merlion/releases/tag/v1.2.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/salesforce/Merlion@v1.2.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/salesforce%2FMerlion/tags/v1.2.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/salesforce%2FMerlion/tags/v1.2.3/manifests"},{"name":"v1.2.2","sha":"251f4e92bfc8f2ff811949e86178f1a66761133a","kind":"commit","published_at":"2022-06-18T14:32:35.000Z","download_url":"https://codeload.github.com/salesforce/Merlion/tar.gz/v1.2.2","html_url":"https://github.com/salesforce/Merlion/releases/tag/v1.2.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/salesforce/Merlion@v1.2.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/salesforce%2FMerlion/tags/v1.2.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/salesforce%2FMerlion/tags/v1.2.2/manifests"},{"name":"v1.2.1","sha":"ea67ed4a2016b4ac2866b171b023838cbcc293f7","kind":"commit","published_at":"2022-06-09T01:56:46.000Z","download_url":"https://codeload.github.com/salesforce/Merlion/tar.gz/v1.2.1","html_url":"https://github.com/salesforce/Merlion/releases/tag/v1.2.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/salesforce/Merlion@v1.2.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/salesforce%2FMerlion/tags/v1.2.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/salesforce%2FMerlion/tags/v1.2.1/manifests"},{"name":"v1.2.0","sha":"80ba574eb56f28bf3412c61a6b32c28d0f06066b","kind":"commit","published_at":"2022-06-01T15:55:03.000Z","download_url":"https://codeload.github.com/salesforce/Merlion/tar.gz/v1.2.0","html_url":"https://github.com/salesforce/Merlion/releases/tag/v1.2.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/salesforce/Merlion@v1.2.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/salesforce%2FMerlion/tags/v1.2.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/salesforce%2FMerlion/tags/v1.2.0/manifests"},{"name":"v1.1.3","sha":"d0aca7fa817d9d0581f71746b3b268b6ccc3aa1f","kind":"commit","published_at":"2022-04-19T15:36:51.000Z","download_url":"https://codeload.github.com/salesforce/Merlion/tar.gz/v1.1.3","html_url":"https://github.com/salesforce/Merlion/releases/tag/v1.1.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/salesforce/Merlion@v1.1.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/salesforce%2FMerlion/tags/v1.1.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/salesforce%2FMerlion/tags/v1.1.3/manifests"},{"name":"v1.1.2","sha":"adb73c1d3c22103fc98864f924482ff9264005d5","kind":"commit","published_at":"2022-03-03T00:38:33.000Z","download_url":"https://codeload.github.com/salesforce/Merlion/tar.gz/v1.1.2","html_url":"https://github.com/salesforce/Merlion/releases/tag/v1.1.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/salesforce/Merlion@v1.1.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/salesforce%2FMerlion/tags/v1.1.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/salesforce%2FMerlion/tags/v1.1.2/manifests"},{"name":"v1.1.1","sha":"4a448de1676e62b6305578e3a21dd92d4d2ac245","kind":"commit","published_at":"2022-01-17T19:27:31.000Z","download_url":"https://codeload.github.com/salesforce/Merlion/tar.gz/v1.1.1","html_url":"https://github.com/salesforce/Merlion/releases/tag/v1.1.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/salesforce/Merlion@v1.1.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/salesforce%2FMerlion/tags/v1.1.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/salesforce%2FMerlion/tags/v1.1.1/manifests"},{"name":"v1.1.0","sha":"273dc04fbd3a1d652cb9c822da975481896f4435","kind":"commit","published_at":"2021-12-17T21:03:26.000Z","download_url":"https://codeload.github.com/salesforce/Merlion/tar.gz/v1.1.0","html_url":"https://github.com/salesforce/Merlion/releases/tag/v1.1.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/salesforce/Merlion@v1.1.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/salesforce%2FMerlion/tags/v1.1.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/salesforce%2FMerlion/tags/v1.1.0/manifests"},{"name":"v1.0.2","sha":"67e6420cbe454837a278a4185261311058db1aab","kind":"commit","published_at":"2021-11-09T00:46:53.000Z","download_url":"https://codeload.github.com/salesforce/Merlion/tar.gz/v1.0.2","html_url":"https://github.com/salesforce/Merlion/releases/tag/v1.0.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/salesforce/Merlion@v1.0.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/salesforce%2FMerlion/tags/v1.0.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/salesforce%2FMerlion/tags/v1.0.2/manifests"},{"name":"v1.0.1","sha":"6b68e90ef03760d8749906adec44a1c6b7d012dd","kind":"commit","published_at":"2021-10-18T20:58:30.000Z","download_url":"https://codeload.github.com/salesforce/Merlion/tar.gz/v1.0.1","html_url":"https://github.com/salesforce/Merlion/releases/tag/v1.0.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/salesforce/Merlion@v1.0.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/salesforce%2FMerlion/tags/v1.0.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/salesforce%2FMerlion/tags/v1.0.1/manifests"},{"name":"v1.0.0","sha":"89f0b75334f8628d56230b0cbc7b18ee271be97e","kind":"commit","published_at":"2021-09-23T20:52:27.000Z","download_url":"https://codeload.github.com/salesforce/Merlion/tar.gz/v1.0.0","html_url":"https://github.com/salesforce/Merlion/releases/tag/v1.0.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/salesforce/Merlion@v1.0.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/salesforce%2FMerlion/tags/v1.0.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/salesforce%2FMerlion/tags/v1.0.0/manifests"}]},"repo_metadata_updated_at":"2025-08-29T10:11:48.569Z","dependent_packages_count":0,"downloads":13,"downloads_period":"last-month","dependent_repos_count":1,"rankings":{"downloads":74.50549667631343,"dependent_repos_count":22.247643885958155,"dependent_packages_count":7.381897931361508,"stargazers_count":1.3457148048377796,"forks_count":3.180320936767039,"docker_downloads_count":null,"average":21.73221484704758},"purl":"pkg:pypi/sfdc-merlion","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/pypi/sfdc-merlion","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/pypi/sfdc-merlion","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/pypi/sfdc-merlion/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2025-08-29T04:21:57.062Z","issues_count":69,"pull_requests_count":61,"avg_time_to_close_issue":2551455.1842105263,"avg_time_to_close_pull_request":1087332.4915254237,"issues_closed_count":38,"pull_requests_closed_count":59,"pull_request_authors_count":17,"issue_authors_count":53,"avg_comments_per_issue":1.5072463768115942,"avg_comments_per_pull_request":0.819672131147541,"merged_pull_requests_count":53,"bot_issues_count":0,"bot_pull_requests_count":0,"past_year_issues_count":7,"past_year_pull_requests_count":2,"past_year_avg_time_to_close_issue":null,"past_year_avg_time_to_close_pull_request":null,"past_year_issues_closed_count":0,"past_year_pull_requests_closed_count":0,"past_year_pull_request_authors_count":2,"past_year_issue_authors_count":6,"past_year_avg_comments_per_issue":0.7142857142857143,"past_year_avg_comments_per_pull_request":0.5,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":0,"past_year_merged_pull_requests_count":0,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/salesforce%2FMerlion/issues","maintainers":[{"login":"shi-yu-wang","count":4,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/shi-yu-wang"},{"login":"Emerald01","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Emerald01"},{"login":"yihaocs","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/yihaocs"},{"login":"mattfernandez-salesforce","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mattfernandez-salesforce"}],"active_maintainers":[]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/pypi.org/packages/sfdc-merlion/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/pypi.org/packages/sfdc-merlion/version_numbers","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/pypi.org/packages/sfdc-merlion/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/pypi.org/packages/sfdc-merlion/related_packages","maintainers":[{"uuid":"aadyotb","login":"aadyotb","name":null,"email":null,"url":null,"packages_count":3,"html_url":"https://pypi.org/user/aadyotb/","role":null,"created_at":"2023-02-25T11:02:03.902Z","updated_at":"2023-02-25T11:02:03.902Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/pypi.org/maintainers/aadyotb/packages"}],"registry":{"name":"pypi.org","url":"https://pypi.org","ecosystem":"pypi","default":true,"packages_count":726284,"maintainers_count":308824,"namespaces_count":0,"keywords_count":238245,"github":"pypi","metadata":{"funded_packages_count":50579},"icon_url":"https://github.com/pypi.png","created_at":"2022-04-04T15:19:23.364Z","updated_at":"2025-09-08T05:32:36.857Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/pypi.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/pypi.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/pypi.org/namespaces"}},{"id":2909321,"name":"salesforce-merlion","ecosystem":"pypi","description":"Merlion: A Machine Learning Framework for Time Series Intelligence","homepage":"https://github.com/salesforce/Merlion","licenses":"3-Clause BSD","normalized_licenses":["BSD-3-Clause"],"repository_url":"https://github.com/salesforce/Merlion","keywords_array":["time series","forecasting","anomaly detection","machine learning","autoML","ensemble learning","benchmarking","Python","scientific toolkit"],"namespace":null,"versions_count":20,"first_release_published_at":"2021-09-23T21:06:59.000Z","latest_release_published_at":"2024-06-20T22:50:47.000Z","latest_release_number":"2.0.4","last_synced_at":"2025-08-29T04:20:19.641Z","created_at":"2022-04-10T12:31:40.690Z","updated_at":"2025-08-29T10:11:48.573Z","registry_url":"https://pypi.org/project/salesforce-merlion/","install_command":"pip install salesforce-merlion --index-url https://pypi.org/simple","documentation_url":"https://salesforce-merlion.readthedocs.io/","metadata":{"funding":null,"documentation":null,"classifiers":[],"normalized_name":"salesforce-merlion","project_status":null},"repo_metadata":{"id":37035106,"uuid":"390401992","full_name":"salesforce/Merlion","owner":"salesforce","description":"Merlion: A Machine Learning Framework for Time Series Intelligence","archived":false,"fork":false,"pushed_at":"2024-06-20T22:47:32.000Z","size":106155,"stargazers_count":4349,"open_issues_count":37,"forks_count":344,"subscribers_count":63,"default_branch":"main","last_synced_at":"2025-08-29T06:47:15.112Z","etag":null,"topics":["anomaly-detection","automl","benchmarking","ensemble-learning","forecasting","machine-learning","time-series"],"latest_commit_sha":null,"homepage":"","language":"Python","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"bsd-3-clause","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/salesforce.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":"CODE_OF_CONDUCT.md","threat_model":null,"audit":null,"citation":null,"codeowners":"CODEOWNERS","security":"SECURITY.md","support":null,"governance":null,"roadmap":null,"authors":"AUTHORS.md","dei":null,"publiccode":null,"codemeta":null}},"created_at":"2021-07-28T15:30:56.000Z","updated_at":"2025-08-28T10:49:52.000Z","dependencies_parsed_at":"2024-09-21T05:01:39.872Z","dependency_job_id":"ca0f7735-0ae5-48b8-8f63-bb5e475fc692","html_url":"https://github.com/salesforce/Merlion","commit_stats":{"total_commits":77,"total_committers":15,"mean_commits":5.133333333333334,"dds":"0.24675324675324672","last_synced_commit":"01c3fc3406ebf19798cedcddbe829ae5339e1424"},"previous_names":[],"tags_count":18,"template":false,"template_full_name":null,"purl":"pkg:github/salesforce/Merlion","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/salesforce%2FMerlion","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/salesforce%2FMerlion/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/salesforce%2FMerlion/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/salesforce%2FMerlion/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/salesforce","download_url":"https://codeload.github.com/salesforce/Merlion/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/salesforce%2FMerlion/sbom","scorecard":{"id":796338,"data":{"date":"2025-08-11","repo":{"name":"github.com/salesforce/Merlion","commit":"085ef8a69e5dcdfb9dcaa394cc21e087cccbb8f0"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":4.5,"checks":[{"name":"Security-Policy","score":9,"reason":"security policy file detected","details":["Info: security policy file detected: SECURITY.md:1","Info: Found linked content: SECURITY.md:1","Warn: One or no descriptive hints of disclosure, vulnerability, and/or timelines in security policy","Info: Found text in security policy: SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Maintained","score":0,"reason":"0 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Code-Review","score":9,"reason":"Found 27/30 approved changesets -- score normalized to 9","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Warn: no topLevel permission defined: .github/workflows/docs.yml:1","Warn: no topLevel permission defined: .github/workflows/publish.yml:1","Warn: no topLevel permission defined: .github/workflows/tests.yml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Binary-Artifacts","score":7,"reason":"binaries present in source code","details":["Warn: binary detected: merlion/resources/gson-2.8.9.jar:1","Warn: binary detected: merlion/resources/randomcutforest-core-1.0.jar:1","Warn: binary detected: merlion/resources/randomcutforest-serialization-json-1.0.jar:1"],"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: BSD 3-Clause \"New\" or \"Revised\" License: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Vulnerabilities","score":5,"reason":"5 existing vulnerabilities detected","details":["Warn: Project is vulnerable to: PYSEC-2024-4 / GHSA-2mqj-m65w-jghx","Warn: Project is vulnerable to: PYSEC-2023-165 / GHSA-cwvm-v4w8-q58c","Warn: Project is vulnerable to: PYSEC-2022-42992 / GHSA-hcpj-qp55-gfph","Warn: Project is vulnerable to: PYSEC-2023-137 / GHSA-pr76-5cm5-w9cj","Warn: Project is vulnerable to: PYSEC-2023-161 / GHSA-wfm5-v35h-vwf4"],"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 28 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/salesforce/Merlion/docs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/salesforce/Merlion/docs.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docs.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/salesforce/Merlion/docs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish.yml:11: update your workflow using https://app.stepsecurity.io/secureworkflow/salesforce/Merlion/publish.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/salesforce/Merlion/publish.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/publish.yml:23: update your workflow using https://app.stepsecurity.io/secureworkflow/salesforce/Merlion/publish.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/tests.yml:18: update your workflow using https://app.stepsecurity.io/secureworkflow/salesforce/Merlion/tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/tests.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/salesforce/Merlion/tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/tests.yml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/salesforce/Merlion/tests.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/tests.yml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/salesforce/Merlion/tests.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/tests.yml:77: update your workflow using https://app.stepsecurity.io/secureworkflow/salesforce/Merlion/tests.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/tests.yml:85: update your workflow using https://app.stepsecurity.io/secureworkflow/salesforce/Merlion/tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/tests.yml:102: update your workflow using https://app.stepsecurity.io/secureworkflow/salesforce/Merlion/tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/tests.yml:105: update your workflow using https://app.stepsecurity.io/secureworkflow/salesforce/Merlion/tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/tests.yml:110: update your workflow using https://app.stepsecurity.io/secureworkflow/salesforce/Merlion/tests.yml/main?enable=pin","Warn: containerImage not pinned by hash: docker/Dockerfile:1: pin your Docker image by updating python:3.9-slim to python:3.9-slim@sha256:914169c7c8398b1b90c0b0ff921c8027445e39d7c25dc440337e56ce0f2566e6","Warn: containerImage not pinned by hash: docker/dashboard/Dockerfile:1: pin your Docker image by updating python:3.9-slim to python:3.9-slim@sha256:914169c7c8398b1b90c0b0ff921c8027445e39d7c25dc440337e56ce0f2566e6","Warn: containerImage not pinned by hash: docker/spark-on-k8s/Dockerfile:2","Warn: pipCommand not pinned by hash: docker/Dockerfile:14","Warn: pipCommand not pinned by hash: docker/dashboard/Dockerfile:14","Warn: pipCommand not pinned by hash: docker/spark-on-k8s/Dockerfile:12","Warn: pipCommand not pinned by hash: docs/build_docs.sh:33","Warn: pipCommand not pinned by hash: docs/build_docs.sh:39","Warn: pipCommand not pinned by hash: docs/build_docs.sh:67","Warn: pipCommand not pinned by hash: docs/build_docs.sh:68","Warn: pipCommand not pinned by hash: .github/workflows/docs.yml:28","Warn: pipCommand not pinned by hash: .github/workflows/publish.yml:18","Warn: pipCommand not pinned by hash: .github/workflows/tests.yml:32","Warn: pipCommand not pinned by hash: .github/workflows/tests.yml:33","Warn: pipCommand not pinned by hash: .github/workflows/tests.yml:35","Warn: pipCommand not pinned by hash: .github/workflows/tests.yml:36","Info:   0 out of  10 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of   5 third-party GitHubAction dependencies pinned","Info:   0 out of   3 containerImage dependencies pinned","Info:   0 out of  13 pipCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}}]},"last_synced_at":"2025-08-23T09:07:33.881Z","repository_id":37035106,"created_at":"2025-08-23T09:07:33.881Z","updated_at":"2025-08-23T09:07:33.881Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":272666520,"owners_count":24972695,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","status":"online","status_checked_at":"2025-08-29T02:00:10.610Z","response_time":87,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"salesforce","name":"Salesforce","uuid":"453694","kind":"organization","description":"Premier Open Source projects released and supported by Salesforce.","email":"osscore@salesforce.com","website":"https://opensource.salesforce.com","location":null,"twitter":null,"company":null,"icon_url":"https://avatars.githubusercontent.com/u/453694?v=4","repositories_count":401,"last_synced_at":"2025-04-09T23:04:36.512Z","metadata":{"has_sponsors_listing":false},"html_url":"https://github.com/salesforce","funding_links":[],"total_stars":85025,"followers":2790,"following":0,"created_at":"2022-11-02T16:20:11.932Z","updated_at":"2025-04-09T23:04:36.513Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/salesforce","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/salesforce/repositories"},"tags":[{"name":"v2.0.2","sha":"3d025adb3881f7d442b4480b888f2b6ed912d940","kind":"commit","published_at":"2023-02-15T05:19:41.000Z","download_url":"https://codeload.github.com/salesforce/Merlion/tar.gz/v2.0.2","html_url":"https://github.com/salesforce/Merlion/releases/tag/v2.0.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/salesforce/Merlion@v2.0.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/salesforce%2FMerlion/tags/v2.0.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/salesforce%2FMerlion/tags/v2.0.2/manifests"},{"name":"v2.0.1","sha":"879e92e404158a5ccc7a63bdec2e070aa44df33d","kind":"commit","published_at":"2023-02-07T03:50:04.000Z","download_url":"https://codeload.github.com/salesforce/Merlion/tar.gz/v2.0.1","html_url":"https://github.com/salesforce/Merlion/releases/tag/v2.0.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/salesforce/Merlion@v2.0.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/salesforce%2FMerlion/tags/v2.0.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/salesforce%2FMerlion/tags/v2.0.1/manifests"},{"name":"v2.0.0","sha":"a241a62fb5cd429c3da61938744cb6c841452341","kind":"commit","published_at":"2023-01-03T22:32:21.000Z","download_url":"https://codeload.github.com/salesforce/Merlion/tar.gz/v2.0.0","html_url":"https://github.com/salesforce/Merlion/releases/tag/v2.0.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/salesforce/Merlion@v2.0.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/salesforce%2FMerlion/tags/v2.0.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/salesforce%2FMerlion/tags/v2.0.0/manifests"},{"name":"v1.3.1","sha":"a0d9f9c27833239ef8da5ff3cc0c2220d70cd122","kind":"commit","published_at":"2022-10-03T17:45:29.000Z","download_url":"https://codeload.github.com/salesforce/Merlion/tar.gz/v1.3.1","html_url":"https://github.com/salesforce/Merlion/releases/tag/v1.3.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/salesforce/Merlion@v1.3.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/salesforce%2FMerlion/tags/v1.3.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/salesforce%2FMerlion/tags/v1.3.1/manifests"},{"name":"v1.3.0","sha":"eae7bd47b6420b20931209faaf8ebbadeb332cac","kind":"commit","published_at":"2022-09-01T18:58:38.000Z","download_url":"https://codeload.github.com/salesforce/Merlion/tar.gz/v1.3.0","html_url":"https://github.com/salesforce/Merlion/releases/tag/v1.3.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/salesforce/Merlion@v1.3.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/salesforce%2FMerlion/tags/v1.3.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/salesforce%2FMerlion/tags/v1.3.0/manifests"},{"name":"v1.2.5","sha":"3f7e8004ce76ff28b0a35760d4104fd634e16dcf","kind":"commit","published_at":"2022-07-15T20:45:35.000Z","download_url":"https://codeload.github.com/salesforce/Merlion/tar.gz/v1.2.5","html_url":"https://github.com/salesforce/Merlion/releases/tag/v1.2.5","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/salesforce/Merlion@v1.2.5","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/salesforce%2FMerlion/tags/v1.2.5","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/salesforce%2FMerlion/tags/v1.2.5/manifests"},{"name":"v1.2.4","sha":"638529e255195f22c666ad623c3a6b020327364b","kind":"commit","published_at":"2022-07-15T00:38:10.000Z","download_url":"https://codeload.github.com/salesforce/Merlion/tar.gz/v1.2.4","html_url":"https://github.com/salesforce/Merlion/releases/tag/v1.2.4","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/salesforce/Merlion@v1.2.4","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/salesforce%2FMerlion/tags/v1.2.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/salesforce%2FMerlion/tags/v1.2.4/manifests"},{"name":"v1.2.3","sha":"e0a79f0169d1af53a2393bf455c7d1015cf7871c","kind":"commit","published_at":"2022-06-28T22:07:43.000Z","download_url":"https://codeload.github.com/salesforce/Merlion/tar.gz/v1.2.3","html_url":"https://github.com/salesforce/Merlion/releases/tag/v1.2.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/salesforce/Merlion@v1.2.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/salesforce%2FMerlion/tags/v1.2.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/salesforce%2FMerlion/tags/v1.2.3/manifests"},{"name":"v1.2.2","sha":"251f4e92bfc8f2ff811949e86178f1a66761133a","kind":"commit","published_at":"2022-06-18T14:32:35.000Z","download_url":"https://codeload.github.com/salesforce/Merlion/tar.gz/v1.2.2","html_url":"https://github.com/salesforce/Merlion/releases/tag/v1.2.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/salesforce/Merlion@v1.2.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/salesforce%2FMerlion/tags/v1.2.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/salesforce%2FMerlion/tags/v1.2.2/manifests"},{"name":"v1.2.1","sha":"ea67ed4a2016b4ac2866b171b023838cbcc293f7","kind":"commit","published_at":"2022-06-09T01:56:46.000Z","download_url":"https://codeload.github.com/salesforce/Merlion/tar.gz/v1.2.1","html_url":"https://github.com/salesforce/Merlion/releases/tag/v1.2.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/salesforce/Merlion@v1.2.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/salesforce%2FMerlion/tags/v1.2.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/salesforce%2FMerlion/tags/v1.2.1/manifests"},{"name":"v1.2.0","sha":"80ba574eb56f28bf3412c61a6b32c28d0f06066b","kind":"commit","published_at":"2022-06-01T15:55:03.000Z","download_url":"https://codeload.github.com/salesforce/Merlion/tar.gz/v1.2.0","html_url":"https://github.com/salesforce/Merlion/releases/tag/v1.2.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/salesforce/Merlion@v1.2.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/salesforce%2FMerlion/tags/v1.2.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/salesforce%2FMerlion/tags/v1.2.0/manifests"},{"name":"v1.1.3","sha":"d0aca7fa817d9d0581f71746b3b268b6ccc3aa1f","kind":"commit","published_at":"2022-04-19T15:36:51.000Z","download_url":"https://codeload.github.com/salesforce/Merlion/tar.gz/v1.1.3","html_url":"https://github.com/salesforce/Merlion/releases/tag/v1.1.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/salesforce/Merlion@v1.1.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/salesforce%2FMerlion/tags/v1.1.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/salesforce%2FMerlion/tags/v1.1.3/manifests"},{"name":"v1.1.2","sha":"adb73c1d3c22103fc98864f924482ff9264005d5","kind":"commit","published_at":"2022-03-03T00:38:33.000Z","download_url":"https://codeload.github.com/salesforce/Merlion/tar.gz/v1.1.2","html_url":"https://github.com/salesforce/Merlion/releases/tag/v1.1.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/salesforce/Merlion@v1.1.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/salesforce%2FMerlion/tags/v1.1.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/salesforce%2FMerlion/tags/v1.1.2/manifests"},{"name":"v1.1.1","sha":"4a448de1676e62b6305578e3a21dd92d4d2ac245","kind":"commit","published_at":"2022-01-17T19:27:31.000Z","download_url":"https://codeload.github.com/salesforce/Merlion/tar.gz/v1.1.1","html_url":"https://github.com/salesforce/Merlion/releases/tag/v1.1.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/salesforce/Merlion@v1.1.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/salesforce%2FMerlion/tags/v1.1.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/salesforce%2FMerlion/tags/v1.1.1/manifests"},{"name":"v1.1.0","sha":"273dc04fbd3a1d652cb9c822da975481896f4435","kind":"commit","published_at":"2021-12-17T21:03:26.000Z","download_url":"https://codeload.github.com/salesforce/Merlion/tar.gz/v1.1.0","html_url":"https://github.com/salesforce/Merlion/releases/tag/v1.1.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/salesforce/Merlion@v1.1.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/salesforce%2FMerlion/tags/v1.1.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/salesforce%2FMerlion/tags/v1.1.0/manifests"},{"name":"v1.0.2","sha":"67e6420cbe454837a278a4185261311058db1aab","kind":"commit","published_at":"2021-11-09T00:46:53.000Z","download_url":"https://codeload.github.com/salesforce/Merlion/tar.gz/v1.0.2","html_url":"https://github.com/salesforce/Merlion/releases/tag/v1.0.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/salesforce/Merlion@v1.0.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/salesforce%2FMerlion/tags/v1.0.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/salesforce%2FMerlion/tags/v1.0.2/manifests"},{"name":"v1.0.1","sha":"6b68e90ef03760d8749906adec44a1c6b7d012dd","kind":"commit","published_at":"2021-10-18T20:58:30.000Z","download_url":"https://codeload.github.com/salesforce/Merlion/tar.gz/v1.0.1","html_url":"https://github.com/salesforce/Merlion/releases/tag/v1.0.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/salesforce/Merlion@v1.0.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/salesforce%2FMerlion/tags/v1.0.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/salesforce%2FMerlion/tags/v1.0.1/manifests"},{"name":"v1.0.0","sha":"89f0b75334f8628d56230b0cbc7b18ee271be97e","kind":"commit","published_at":"2021-09-23T20:52:27.000Z","download_url":"https://codeload.github.com/salesforce/Merlion/tar.gz/v1.0.0","html_url":"https://github.com/salesforce/Merlion/releases/tag/v1.0.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/salesforce/Merlion@v1.0.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/salesforce%2FMerlion/tags/v1.0.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/salesforce%2FMerlion/tags/v1.0.0/manifests"}]},"repo_metadata_updated_at":"2025-08-29T10:11:48.572Z","dependent_packages_count":4,"downloads":48441,"downloads_period":"last-month","dependent_repos_count":19,"rankings":{"downloads":5.224075141997204,"dependent_repos_count":3.355418246630453,"dependent_packages_count":1.6125973425628504,"stargazers_count":1.3457148048377796,"forks_count":3.180320936767039,"docker_downloads_count":null,"average":2.943625294559065},"purl":"pkg:pypi/salesforce-merlion","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/pypi/salesforce-merlion","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/pypi/salesforce-merlion","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/pypi/salesforce-merlion/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2025-08-29T04:21:57.062Z","issues_count":69,"pull_requests_count":61,"avg_time_to_close_issue":2551455.1842105263,"avg_time_to_close_pull_request":1087332.4915254237,"issues_closed_count":38,"pull_requests_closed_count":59,"pull_request_authors_count":17,"issue_authors_count":53,"avg_comments_per_issue":1.5072463768115942,"avg_comments_per_pull_request":0.819672131147541,"merged_pull_requests_count":53,"bot_issues_count":0,"bot_pull_requests_count":0,"past_year_issues_count":7,"past_year_pull_requests_count":2,"past_year_avg_time_to_close_issue":null,"past_year_avg_time_to_close_pull_request":null,"past_year_issues_closed_count":0,"past_year_pull_requests_closed_count":0,"past_year_pull_request_authors_count":2,"past_year_issue_authors_count":6,"past_year_avg_comments_per_issue":0.7142857142857143,"past_year_avg_comments_per_pull_request":0.5,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":0,"past_year_merged_pull_requests_count":0,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/salesforce%2FMerlion/issues","maintainers":[{"login":"shi-yu-wang","count":4,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/shi-yu-wang"},{"login":"Emerald01","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Emerald01"},{"login":"yihaocs","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/yihaocs"},{"login":"mattfernandez-salesforce","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mattfernandez-salesforce"}],"active_maintainers":[]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/pypi.org/packages/salesforce-merlion/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/pypi.org/packages/salesforce-merlion/version_numbers","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/pypi.org/packages/salesforce-merlion/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/pypi.org/packages/salesforce-merlion/related_packages","maintainers":[{"uuid":"aadyotb","login":"aadyotb","name":null,"email":null,"url":null,"packages_count":3,"html_url":"https://pypi.org/user/aadyotb/","role":null,"created_at":"2023-01-04T23:14:28.036Z","updated_at":"2023-01-04T23:14:28.036Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/pypi.org/maintainers/aadyotb/packages"},{"uuid":"Emerald01","login":"Emerald01","name":null,"email":null,"url":null,"packages_count":2,"html_url":"https://pypi.org/user/Emerald01/","role":null,"created_at":"2023-04-09T08:17:13.376Z","updated_at":"2023-04-09T08:17:13.376Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/pypi.org/maintainers/Emerald01/packages"},{"uuid":"ilbsky","login":"ilbsky","name":null,"email":null,"url":null,"packages_count":1,"html_url":"https://pypi.org/user/ilbsky/","role":null,"created_at":"2024-06-13T01:15:22.593Z","updated_at":"2024-06-13T01:15:22.593Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/pypi.org/maintainers/ilbsky/packages"}],"registry":{"name":"pypi.org","url":"https://pypi.org","ecosystem":"pypi","default":true,"packages_count":726284,"maintainers_count":308824,"namespaces_count":0,"keywords_count":238245,"github":"pypi","metadata":{"funded_packages_count":50579},"icon_url":"https://github.com/pypi.png","created_at":"2022-04-04T15:19:23.364Z","updated_at":"2025-09-08T05:32:36.857Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/pypi.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/pypi.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/pypi.org/namespaces"}},{"id":10636555,"name":"github.com/salesforce/Merlion","ecosystem":"go","description":null,"homepage":null,"licenses":"bsd-3-clause","normalized_licenses":["BSD-3-Clause"],"repository_url":"https://github.com/salesforce/Merlion","keywords_array":[],"namespace":null,"versions_count":18,"first_release_published_at":"2021-09-23T20:52:27.000Z","latest_release_published_at":"2023-02-15T05:19:41.000Z","latest_release_number":"v2.0.2+incompatible","last_synced_at":"2025-08-29T06:03:25.005Z","created_at":"2024-07-11T05:54:23.935Z","updated_at":"2025-08-29T10:11:48.632Z","registry_url":"https://pkg.go.dev/github.com/salesforce/Merlion","install_command":"go get github.com/salesforce/Merlion","documentation_url":"https://pkg.go.dev/github.com/salesforce/Merlion#section-documentation","metadata":{},"repo_metadata":{"id":37035106,"uuid":"390401992","full_name":"salesforce/Merlion","owner":"salesforce","description":"Merlion: A Machine Learning Framework for Time Series Intelligence","archived":false,"fork":false,"pushed_at":"2024-06-20T22:47:32.000Z","size":106155,"stargazers_count":4349,"open_issues_count":37,"forks_count":344,"subscribers_count":63,"default_branch":"main","last_synced_at":"2025-08-29T06:47:15.112Z","etag":null,"topics":["anomaly-detection","automl","benchmarking","ensemble-learning","forecasting","machine-learning","time-series"],"latest_commit_sha":null,"homepage":"","language":"Python","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"bsd-3-clause","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/salesforce.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":"CODE_OF_CONDUCT.md","threat_model":null,"audit":null,"citation":null,"codeowners":"CODEOWNERS","security":"SECURITY.md","support":null,"governance":null,"roadmap":null,"authors":"AUTHORS.md","dei":null,"publiccode":null,"codemeta":null}},"created_at":"2021-07-28T15:30:56.000Z","updated_at":"2025-08-28T10:49:52.000Z","dependencies_parsed_at":"2024-09-21T05:01:39.872Z","dependency_job_id":"ca0f7735-0ae5-48b8-8f63-bb5e475fc692","html_url":"https://github.com/salesforce/Merlion","commit_stats":{"total_commits":77,"total_committers":15,"mean_commits":5.133333333333334,"dds":"0.24675324675324672","last_synced_commit":"01c3fc3406ebf19798cedcddbe829ae5339e1424"},"previous_names":[],"tags_count":18,"template":false,"template_full_name":null,"purl":"pkg:github/salesforce/Merlion","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/salesforce%2FMerlion","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/salesforce%2FMerlion/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/salesforce%2FMerlion/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/salesforce%2FMerlion/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/salesforce","download_url":"https://codeload.github.com/salesforce/Merlion/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/salesforce%2FMerlion/sbom","scorecard":{"id":796338,"data":{"date":"2025-08-11","repo":{"name":"github.com/salesforce/Merlion","commit":"085ef8a69e5dcdfb9dcaa394cc21e087cccbb8f0"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":4.5,"checks":[{"name":"Security-Policy","score":9,"reason":"security policy file detected","details":["Info: security policy file detected: SECURITY.md:1","Info: Found linked content: SECURITY.md:1","Warn: One or no descriptive hints of disclosure, vulnerability, and/or timelines in security policy","Info: Found text in security policy: SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Maintained","score":0,"reason":"0 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Code-Review","score":9,"reason":"Found 27/30 approved changesets -- score normalized to 9","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Warn: no topLevel permission defined: .github/workflows/docs.yml:1","Warn: no topLevel permission defined: .github/workflows/publish.yml:1","Warn: no topLevel permission defined: .github/workflows/tests.yml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Binary-Artifacts","score":7,"reason":"binaries present in source code","details":["Warn: binary detected: merlion/resources/gson-2.8.9.jar:1","Warn: binary detected: merlion/resources/randomcutforest-core-1.0.jar:1","Warn: binary detected: merlion/resources/randomcutforest-serialization-json-1.0.jar:1"],"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: BSD 3-Clause \"New\" or \"Revised\" License: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Vulnerabilities","score":5,"reason":"5 existing vulnerabilities detected","details":["Warn: Project is vulnerable to: PYSEC-2024-4 / GHSA-2mqj-m65w-jghx","Warn: Project is vulnerable to: PYSEC-2023-165 / GHSA-cwvm-v4w8-q58c","Warn: Project is vulnerable to: PYSEC-2022-42992 / GHSA-hcpj-qp55-gfph","Warn: Project is vulnerable to: PYSEC-2023-137 / GHSA-pr76-5cm5-w9cj","Warn: Project is vulnerable to: PYSEC-2023-161 / GHSA-wfm5-v35h-vwf4"],"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 28 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/salesforce/Merlion/docs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/salesforce/Merlion/docs.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docs.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/salesforce/Merlion/docs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish.yml:11: update your workflow using https://app.stepsecurity.io/secureworkflow/salesforce/Merlion/publish.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/salesforce/Merlion/publish.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/publish.yml:23: update your workflow using https://app.stepsecurity.io/secureworkflow/salesforce/Merlion/publish.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/tests.yml:18: update your workflow using https://app.stepsecurity.io/secureworkflow/salesforce/Merlion/tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/tests.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/salesforce/Merlion/tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/tests.yml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/salesforce/Merlion/tests.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/tests.yml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/salesforce/Merlion/tests.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/tests.yml:77: update your workflow using https://app.stepsecurity.io/secureworkflow/salesforce/Merlion/tests.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/tests.yml:85: update your workflow using https://app.stepsecurity.io/secureworkflow/salesforce/Merlion/tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/tests.yml:102: update your workflow using https://app.stepsecurity.io/secureworkflow/salesforce/Merlion/tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/tests.yml:105: update your workflow using https://app.stepsecurity.io/secureworkflow/salesforce/Merlion/tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/tests.yml:110: update your workflow using https://app.stepsecurity.io/secureworkflow/salesforce/Merlion/tests.yml/main?enable=pin","Warn: containerImage not pinned by hash: docker/Dockerfile:1: pin your Docker image by updating python:3.9-slim to python:3.9-slim@sha256:914169c7c8398b1b90c0b0ff921c8027445e39d7c25dc440337e56ce0f2566e6","Warn: containerImage not pinned by hash: docker/dashboard/Dockerfile:1: pin your Docker image by updating python:3.9-slim to python:3.9-slim@sha256:914169c7c8398b1b90c0b0ff921c8027445e39d7c25dc440337e56ce0f2566e6","Warn: containerImage not pinned by hash: docker/spark-on-k8s/Dockerfile:2","Warn: pipCommand not pinned by hash: docker/Dockerfile:14","Warn: pipCommand not pinned by hash: docker/dashboard/Dockerfile:14","Warn: pipCommand not pinned by hash: docker/spark-on-k8s/Dockerfile:12","Warn: pipCommand not pinned by hash: docs/build_docs.sh:33","Warn: pipCommand not pinned by hash: docs/build_docs.sh:39","Warn: pipCommand not pinned by hash: docs/build_docs.sh:67","Warn: pipCommand not pinned by hash: docs/build_docs.sh:68","Warn: pipCommand not pinned by hash: .github/workflows/docs.yml:28","Warn: pipCommand not pinned by hash: .github/workflows/publish.yml:18","Warn: pipCommand not pinned by hash: .github/workflows/tests.yml:32","Warn: pipCommand not pinned by hash: .github/workflows/tests.yml:33","Warn: pipCommand not pinned by hash: .github/workflows/tests.yml:35","Warn: pipCommand not pinned by hash: .github/workflows/tests.yml:36","Info:   0 out of  10 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of   5 third-party GitHubAction dependencies pinned","Info:   0 out of   3 containerImage dependencies pinned","Info:   0 out of  13 pipCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}}]},"last_synced_at":"2025-08-23T09:07:33.881Z","repository_id":37035106,"created_at":"2025-08-23T09:07:33.881Z","updated_at":"2025-08-23T09:07:33.881Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":272666520,"owners_count":24972695,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","status":"online","status_checked_at":"2025-08-29T02:00:10.610Z","response_time":87,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"salesforce","name":"Salesforce","uuid":"453694","kind":"organization","description":"Premier Open Source projects released and supported by Salesforce.","email":"osscore@salesforce.com","website":"https://opensource.salesforce.com","location":null,"twitter":null,"company":null,"icon_url":"https://avatars.githubusercontent.com/u/453694?v=4","repositories_count":401,"last_synced_at":"2025-04-09T23:04:36.512Z","metadata":{"has_sponsors_listing":false},"html_url":"https://github.com/salesforce","funding_links":[],"total_stars":85025,"followers":2790,"following":0,"created_at":"2022-11-02T16:20:11.932Z","updated_at":"2025-04-09T23:04:36.513Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/salesforce","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/salesforce/repositories"},"tags":[{"name":"v2.0.2","sha":"3d025adb3881f7d442b4480b888f2b6ed912d940","kind":"commit","published_at":"2023-02-15T05:19:41.000Z","download_url":"https://codeload.github.com/salesforce/Merlion/tar.gz/v2.0.2","html_url":"https://github.com/salesforce/Merlion/releases/tag/v2.0.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/salesforce/Merlion@v2.0.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/salesforce%2FMerlion/tags/v2.0.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/salesforce%2FMerlion/tags/v2.0.2/manifests"},{"name":"v2.0.1","sha":"879e92e404158a5ccc7a63bdec2e070aa44df33d","kind":"commit","published_at":"2023-02-07T03:50:04.000Z","download_url":"https://codeload.github.com/salesforce/Merlion/tar.gz/v2.0.1","html_url":"https://github.com/salesforce/Merlion/releases/tag/v2.0.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/salesforce/Merlion@v2.0.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/salesforce%2FMerlion/tags/v2.0.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/salesforce%2FMerlion/tags/v2.0.1/manifests"},{"name":"v2.0.0","sha":"a241a62fb5cd429c3da61938744cb6c841452341","kind":"commit","published_at":"2023-01-03T22:32:21.000Z","download_url":"https://codeload.github.com/salesforce/Merlion/tar.gz/v2.0.0","html_url":"https://github.com/salesforce/Merlion/releases/tag/v2.0.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/salesforce/Merlion@v2.0.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/salesforce%2FMerlion/tags/v2.0.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/salesforce%2FMerlion/tags/v2.0.0/manifests"},{"name":"v1.3.1","sha":"a0d9f9c27833239ef8da5ff3cc0c2220d70cd122","kind":"commit","published_at":"2022-10-03T17:45:29.000Z","download_url":"https://codeload.github.com/salesforce/Merlion/tar.gz/v1.3.1","html_url":"https://github.com/salesforce/Merlion/releases/tag/v1.3.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/salesforce/Merlion@v1.3.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/salesforce%2FMerlion/tags/v1.3.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/salesforce%2FMerlion/tags/v1.3.1/manifests"},{"name":"v1.3.0","sha":"eae7bd47b6420b20931209faaf8ebbadeb332cac","kind":"commit","published_at":"2022-09-01T18:58:38.000Z","download_url":"https://codeload.github.com/salesforce/Merlion/tar.gz/v1.3.0","html_url":"https://github.com/salesforce/Merlion/releases/tag/v1.3.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/salesforce/Merlion@v1.3.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/salesforce%2FMerlion/tags/v1.3.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/salesforce%2FMerlion/tags/v1.3.0/manifests"},{"name":"v1.2.5","sha":"3f7e8004ce76ff28b0a35760d4104fd634e16dcf","kind":"commit","published_at":"2022-07-15T20:45:35.000Z","download_url":"https://codeload.github.com/salesforce/Merlion/tar.gz/v1.2.5","html_url":"https://github.com/salesforce/Merlion/releases/tag/v1.2.5","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/salesforce/Merlion@v1.2.5","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/salesforce%2FMerlion/tags/v1.2.5","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/salesforce%2FMerlion/tags/v1.2.5/manifests"},{"name":"v1.2.4","sha":"638529e255195f22c666ad623c3a6b020327364b","kind":"commit","published_at":"2022-07-15T00:38:10.000Z","download_url":"https://codeload.github.com/salesforce/Merlion/tar.gz/v1.2.4","html_url":"https://github.com/salesforce/Merlion/releases/tag/v1.2.4","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/salesforce/Merlion@v1.2.4","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/salesforce%2FMerlion/tags/v1.2.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/salesforce%2FMerlion/tags/v1.2.4/manifests"},{"name":"v1.2.3","sha":"e0a79f0169d1af53a2393bf455c7d1015cf7871c","kind":"commit","published_at":"2022-06-28T22:07:43.000Z","download_url":"https://codeload.github.com/salesforce/Merlion/tar.gz/v1.2.3","html_url":"https://github.com/salesforce/Merlion/releases/tag/v1.2.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/salesforce/Merlion@v1.2.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/salesforce%2FMerlion/tags/v1.2.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/salesforce%2FMerlion/tags/v1.2.3/manifests"},{"name":"v1.2.2","sha":"251f4e92bfc8f2ff811949e86178f1a66761133a","kind":"commit","published_at":"2022-06-18T14:32:35.000Z","download_url":"https://codeload.github.com/salesforce/Merlion/tar.gz/v1.2.2","html_url":"https://github.com/salesforce/Merlion/releases/tag/v1.2.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/salesforce/Merlion@v1.2.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/salesforce%2FMerlion/tags/v1.2.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/salesforce%2FMerlion/tags/v1.2.2/manifests"},{"name":"v1.2.1","sha":"ea67ed4a2016b4ac2866b171b023838cbcc293f7","kind":"commit","published_at":"2022-06-09T01:56:46.000Z","download_url":"https://codeload.github.com/salesforce/Merlion/tar.gz/v1.2.1","html_url":"https://github.com/salesforce/Merlion/releases/tag/v1.2.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/salesforce/Merlion@v1.2.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/salesforce%2FMerlion/tags/v1.2.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/salesforce%2FMerlion/tags/v1.2.1/manifests"},{"name":"v1.2.0","sha":"80ba574eb56f28bf3412c61a6b32c28d0f06066b","kind":"commit","published_at":"2022-06-01T15:55:03.000Z","download_url":"https://codeload.github.com/salesforce/Merlion/tar.gz/v1.2.0","html_url":"https://github.com/salesforce/Merlion/releases/tag/v1.2.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/salesforce/Merlion@v1.2.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/salesforce%2FMerlion/tags/v1.2.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/salesforce%2FMerlion/tags/v1.2.0/manifests"},{"name":"v1.1.3","sha":"d0aca7fa817d9d0581f71746b3b268b6ccc3aa1f","kind":"commit","published_at":"2022-04-19T15:36:51.000Z","download_url":"https://codeload.github.com/salesforce/Merlion/tar.gz/v1.1.3","html_url":"https://github.com/salesforce/Merlion/releases/tag/v1.1.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/salesforce/Merlion@v1.1.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/salesforce%2FMerlion/tags/v1.1.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/salesforce%2FMerlion/tags/v1.1.3/manifests"},{"name":"v1.1.2","sha":"adb73c1d3c22103fc98864f924482ff9264005d5","kind":"commit","published_at":"2022-03-03T00:38:33.000Z","download_url":"https://codeload.github.com/salesforce/Merlion/tar.gz/v1.1.2","html_url":"https://github.com/salesforce/Merlion/releases/tag/v1.1.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/salesforce/Merlion@v1.1.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/salesforce%2FMerlion/tags/v1.1.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/salesforce%2FMerlion/tags/v1.1.2/manifests"},{"name":"v1.1.1","sha":"4a448de1676e62b6305578e3a21dd92d4d2ac245","kind":"commit","published_at":"2022-01-17T19:27:31.000Z","download_url":"https://codeload.github.com/salesforce/Merlion/tar.gz/v1.1.1","html_url":"https://github.com/salesforce/Merlion/releases/tag/v1.1.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/salesforce/Merlion@v1.1.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/salesforce%2FMerlion/tags/v1.1.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/salesforce%2FMerlion/tags/v1.1.1/manifests"},{"name":"v1.1.0","sha":"273dc04fbd3a1d652cb9c822da975481896f4435","kind":"commit","published_at":"2021-12-17T21:03:26.000Z","download_url":"https://codeload.github.com/salesforce/Merlion/tar.gz/v1.1.0","html_url":"https://github.com/salesforce/Merlion/releases/tag/v1.1.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/salesforce/Merlion@v1.1.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/salesforce%2FMerlion/tags/v1.1.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/salesforce%2FMerlion/tags/v1.1.0/manifests"},{"name":"v1.0.2","sha":"67e6420cbe454837a278a4185261311058db1aab","kind":"commit","published_at":"2021-11-09T00:46:53.000Z","download_url":"https://codeload.github.com/salesforce/Merlion/tar.gz/v1.0.2","html_url":"https://github.com/salesforce/Merlion/releases/tag/v1.0.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/salesforce/Merlion@v1.0.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/salesforce%2FMerlion/tags/v1.0.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/salesforce%2FMerlion/tags/v1.0.2/manifests"},{"name":"v1.0.1","sha":"6b68e90ef03760d8749906adec44a1c6b7d012dd","kind":"commit","published_at":"2021-10-18T20:58:30.000Z","download_url":"https://codeload.github.com/salesforce/Merlion/tar.gz/v1.0.1","html_url":"https://github.com/salesforce/Merlion/releases/tag/v1.0.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/salesforce/Merlion@v1.0.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/salesforce%2FMerlion/tags/v1.0.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/salesforce%2FMerlion/tags/v1.0.1/manifests"},{"name":"v1.0.0","sha":"89f0b75334f8628d56230b0cbc7b18ee271be97e","kind":"commit","published_at":"2021-09-23T20:52:27.000Z","download_url":"https://codeload.github.com/salesforce/Merlion/tar.gz/v1.0.0","html_url":"https://github.com/salesforce/Merlion/releases/tag/v1.0.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/salesforce/Merlion@v1.0.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/salesforce%2FMerlion/tags/v1.0.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/salesforce%2FMerlion/tags/v1.0.0/manifests"}]},"repo_metadata_updated_at":"2025-08-29T10:11:48.632Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":6.808321414509642,"dependent_packages_count":6.377797149797286,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":6.5930592821534635},"purl":"pkg:golang/github.com/salesforce/%21merlion","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/go/github.com/salesforce/Merlion","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/go/github.com/salesforce/Merlion","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/go/github.com/salesforce/Merlion/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2025-08-29T04:21:57.062Z","issues_count":69,"pull_requests_count":61,"avg_time_to_close_issue":2551455.1842105263,"avg_time_to_close_pull_request":1087332.4915254237,"issues_closed_count":38,"pull_requests_closed_count":59,"pull_request_authors_count":17,"issue_authors_count":53,"avg_comments_per_issue":1.5072463768115942,"avg_comments_per_pull_request":0.819672131147541,"merged_pull_requests_count":53,"bot_issues_count":0,"bot_pull_requests_count":0,"past_year_issues_count":7,"past_year_pull_requests_count":2,"past_year_avg_time_to_close_issue":null,"past_year_avg_time_to_close_pull_request":null,"past_year_issues_closed_count":0,"past_year_pull_requests_closed_count":0,"past_year_pull_request_authors_count":2,"past_year_issue_authors_count":6,"past_year_avg_comments_per_issue":0.7142857142857143,"past_year_avg_comments_per_pull_request":0.5,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":0,"past_year_merged_pull_requests_count":0,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/salesforce%2FMerlion/issues","maintainers":[{"login":"shi-yu-wang","count":4,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/shi-yu-wang"},{"login":"Emerald01","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Emerald01"},{"login":"yihaocs","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/yihaocs"},{"login":"mattfernandez-salesforce","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mattfernandez-salesforce"}],"active_maintainers":[]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fsalesforce%2FMerlion/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fsalesforce%2FMerlion/version_numbers","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fsalesforce%2FMerlion/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fsalesforce%2FMerlion/related_packages","maintainers":[],"registry":{"name":"proxy.golang.org","url":"https://proxy.golang.org","ecosystem":"go","default":true,"packages_count":1954234,"maintainers_count":0,"namespaces_count":741771,"keywords_count":109320,"github":"golang","metadata":{"funded_packages_count":49342},"icon_url":"https://github.com/golang.png","created_at":"2022-04-04T15:19:22.939Z","updated_at":"2025-09-08T05:47:38.872Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/namespaces"}},{"id":10636559,"name":"github.com/salesforce/merlion","ecosystem":"go","description":null,"homepage":null,"licenses":"bsd-3-clause","normalized_licenses":["BSD-3-Clause"],"repository_url":"https://github.com/salesforce/merlion","keywords_array":[],"namespace":null,"versions_count":18,"first_release_published_at":"2021-09-23T20:52:27.000Z","latest_release_published_at":"2023-02-15T05:19:41.000Z","latest_release_number":"v2.0.2+incompatible","last_synced_at":"2025-08-29T09:06:27.797Z","created_at":"2024-07-11T05:54:24.814Z","updated_at":"2025-08-29T10:11:48.635Z","registry_url":"https://pkg.go.dev/github.com/salesforce/merlion","install_command":"go get github.com/salesforce/merlion","documentation_url":"https://pkg.go.dev/github.com/salesforce/merlion#section-documentation","metadata":{},"repo_metadata":{"id":37035106,"uuid":"390401992","full_name":"salesforce/Merlion","owner":"salesforce","description":"Merlion: A Machine Learning Framework for Time Series Intelligence","archived":false,"fork":false,"pushed_at":"2024-06-20T22:47:32.000Z","size":106155,"stargazers_count":4349,"open_issues_count":37,"forks_count":344,"subscribers_count":63,"default_branch":"main","last_synced_at":"2025-08-29T06:47:15.112Z","etag":null,"topics":["anomaly-detection","automl","benchmarking","ensemble-learning","forecasting","machine-learning","time-series"],"latest_commit_sha":null,"homepage":"","language":"Python","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"bsd-3-clause","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/salesforce.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":"CODE_OF_CONDUCT.md","threat_model":null,"audit":null,"citation":null,"codeowners":"CODEOWNERS","security":"SECURITY.md","support":null,"governance":null,"roadmap":null,"authors":"AUTHORS.md","dei":null,"publiccode":null,"codemeta":null}},"created_at":"2021-07-28T15:30:56.000Z","updated_at":"2025-08-28T10:49:52.000Z","dependencies_parsed_at":"2024-09-21T05:01:39.872Z","dependency_job_id":"ca0f7735-0ae5-48b8-8f63-bb5e475fc692","html_url":"https://github.com/salesforce/Merlion","commit_stats":{"total_commits":77,"total_committers":15,"mean_commits":5.133333333333334,"dds":"0.24675324675324672","last_synced_commit":"01c3fc3406ebf19798cedcddbe829ae5339e1424"},"previous_names":[],"tags_count":18,"template":false,"template_full_name":null,"purl":"pkg:github/salesforce/Merlion","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/salesforce%2FMerlion","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/salesforce%2FMerlion/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/salesforce%2FMerlion/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/salesforce%2FMerlion/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/salesforce","download_url":"https://codeload.github.com/salesforce/Merlion/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/salesforce%2FMerlion/sbom","scorecard":{"id":796338,"data":{"date":"2025-08-11","repo":{"name":"github.com/salesforce/Merlion","commit":"085ef8a69e5dcdfb9dcaa394cc21e087cccbb8f0"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":4.5,"checks":[{"name":"Security-Policy","score":9,"reason":"security policy file detected","details":["Info: security policy file detected: SECURITY.md:1","Info: Found linked content: SECURITY.md:1","Warn: One or no descriptive hints of disclosure, vulnerability, and/or timelines in security policy","Info: Found text in security policy: SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Maintained","score":0,"reason":"0 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Code-Review","score":9,"reason":"Found 27/30 approved changesets -- score normalized to 9","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Warn: no topLevel permission defined: .github/workflows/docs.yml:1","Warn: no topLevel permission defined: .github/workflows/publish.yml:1","Warn: no topLevel permission defined: .github/workflows/tests.yml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Binary-Artifacts","score":7,"reason":"binaries present in source code","details":["Warn: binary detected: merlion/resources/gson-2.8.9.jar:1","Warn: binary detected: merlion/resources/randomcutforest-core-1.0.jar:1","Warn: binary detected: merlion/resources/randomcutforest-serialization-json-1.0.jar:1"],"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: BSD 3-Clause \"New\" or \"Revised\" License: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Vulnerabilities","score":5,"reason":"5 existing vulnerabilities detected","details":["Warn: Project is vulnerable to: PYSEC-2024-4 / GHSA-2mqj-m65w-jghx","Warn: Project is vulnerable to: PYSEC-2023-165 / GHSA-cwvm-v4w8-q58c","Warn: Project is vulnerable to: PYSEC-2022-42992 / GHSA-hcpj-qp55-gfph","Warn: Project is vulnerable to: PYSEC-2023-137 / GHSA-pr76-5cm5-w9cj","Warn: Project is vulnerable to: PYSEC-2023-161 / GHSA-wfm5-v35h-vwf4"],"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 28 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/salesforce/Merlion/docs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/salesforce/Merlion/docs.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docs.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/salesforce/Merlion/docs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish.yml:11: update your workflow using https://app.stepsecurity.io/secureworkflow/salesforce/Merlion/publish.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/salesforce/Merlion/publish.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/publish.yml:23: update your workflow using https://app.stepsecurity.io/secureworkflow/salesforce/Merlion/publish.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/tests.yml:18: update your workflow using https://app.stepsecurity.io/secureworkflow/salesforce/Merlion/tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/tests.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/salesforce/Merlion/tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/tests.yml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/salesforce/Merlion/tests.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/tests.yml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/salesforce/Merlion/tests.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/tests.yml:77: update your workflow using https://app.stepsecurity.io/secureworkflow/salesforce/Merlion/tests.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/tests.yml:85: update your workflow using https://app.stepsecurity.io/secureworkflow/salesforce/Merlion/tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/tests.yml:102: update your workflow using https://app.stepsecurity.io/secureworkflow/salesforce/Merlion/tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/tests.yml:105: update your workflow using https://app.stepsecurity.io/secureworkflow/salesforce/Merlion/tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/tests.yml:110: update your workflow using https://app.stepsecurity.io/secureworkflow/salesforce/Merlion/tests.yml/main?enable=pin","Warn: containerImage not pinned by hash: docker/Dockerfile:1: pin your Docker image by updating python:3.9-slim to python:3.9-slim@sha256:914169c7c8398b1b90c0b0ff921c8027445e39d7c25dc440337e56ce0f2566e6","Warn: containerImage not pinned by hash: docker/dashboard/Dockerfile:1: pin your Docker image by updating python:3.9-slim to python:3.9-slim@sha256:914169c7c8398b1b90c0b0ff921c8027445e39d7c25dc440337e56ce0f2566e6","Warn: containerImage not pinned by hash: docker/spark-on-k8s/Dockerfile:2","Warn: pipCommand not pinned by hash: docker/Dockerfile:14","Warn: pipCommand not pinned by hash: docker/dashboard/Dockerfile:14","Warn: pipCommand not pinned by hash: docker/spark-on-k8s/Dockerfile:12","Warn: pipCommand not pinned by hash: docs/build_docs.sh:33","Warn: pipCommand not pinned by hash: docs/build_docs.sh:39","Warn: pipCommand not pinned by hash: docs/build_docs.sh:67","Warn: pipCommand not pinned by hash: docs/build_docs.sh:68","Warn: pipCommand not pinned by hash: .github/workflows/docs.yml:28","Warn: pipCommand not pinned by hash: .github/workflows/publish.yml:18","Warn: pipCommand not pinned by hash: .github/workflows/tests.yml:32","Warn: pipCommand not pinned by hash: .github/workflows/tests.yml:33","Warn: pipCommand not pinned by hash: .github/workflows/tests.yml:35","Warn: pipCommand not pinned by hash: .github/workflows/tests.yml:36","Info:   0 out of  10 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of   5 third-party GitHubAction dependencies pinned","Info:   0 out of   3 containerImage dependencies pinned","Info:   0 out of  13 pipCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}}]},"last_synced_at":"2025-08-23T09:07:33.881Z","repository_id":37035106,"created_at":"2025-08-23T09:07:33.881Z","updated_at":"2025-08-23T09:07:33.881Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":272666520,"owners_count":24972695,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","status":"online","status_checked_at":"2025-08-29T02:00:10.610Z","response_time":87,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"salesforce","name":"Salesforce","uuid":"453694","kind":"organization","description":"Premier Open Source projects released and supported by Salesforce.","email":"osscore@salesforce.com","website":"https://opensource.salesforce.com","location":null,"twitter":null,"company":null,"icon_url":"https://avatars.githubusercontent.com/u/453694?v=4","repositories_count":401,"last_synced_at":"2025-04-09T23:04:36.512Z","metadata":{"has_sponsors_listing":false},"html_url":"https://github.com/salesforce","funding_links":[],"total_stars":85025,"followers":2790,"following":0,"created_at":"2022-11-02T16:20:11.932Z","updated_at":"2025-04-09T23:04:36.513Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/salesforce","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/salesforce/repositories"},"tags":[{"name":"v2.0.2","sha":"3d025adb3881f7d442b4480b888f2b6ed912d940","kind":"commit","published_at":"2023-02-15T05:19:41.000Z","download_url":"https://codeload.github.com/salesforce/Merlion/tar.gz/v2.0.2","html_url":"https://github.com/salesforce/Merlion/releases/tag/v2.0.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/salesforce/Merlion@v2.0.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/salesforce%2FMerlion/tags/v2.0.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/salesforce%2FMerlion/tags/v2.0.2/manifests"},{"name":"v2.0.1","sha":"879e92e404158a5ccc7a63bdec2e070aa44df33d","kind":"commit","published_at":"2023-02-07T03:50:04.000Z","download_url":"https://codeload.github.com/salesforce/Merlion/tar.gz/v2.0.1","html_url":"https://github.com/salesforce/Merlion/releases/tag/v2.0.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/salesforce/Merlion@v2.0.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/salesforce%2FMerlion/tags/v2.0.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/salesforce%2FMerlion/tags/v2.0.1/manifests"},{"name":"v2.0.0","sha":"a241a62fb5cd429c3da61938744cb6c841452341","kind":"commit","published_at":"2023-01-03T22:32:21.000Z","download_url":"https://codeload.github.com/salesforce/Merlion/tar.gz/v2.0.0","html_url":"https://github.com/salesforce/Merlion/releases/tag/v2.0.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/salesforce/Merlion@v2.0.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/salesforce%2FMerlion/tags/v2.0.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/salesforce%2FMerlion/tags/v2.0.0/manifests"},{"name":"v1.3.1","sha":"a0d9f9c27833239ef8da5ff3cc0c2220d70cd122","kind":"commit","published_at":"2022-10-03T17:45:29.000Z","download_url":"https://codeload.github.com/salesforce/Merlion/tar.gz/v1.3.1","html_url":"https://github.com/salesforce/Merlion/releases/tag/v1.3.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/salesforce/Merlion@v1.3.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/salesforce%2FMerlion/tags/v1.3.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/salesforce%2FMerlion/tags/v1.3.1/manifests"},{"name":"v1.3.0","sha":"eae7bd47b6420b20931209faaf8ebbadeb332cac","kind":"commit","published_at":"2022-09-01T18:58:38.000Z","download_url":"https://codeload.github.com/salesforce/Merlion/tar.gz/v1.3.0","html_url":"https://github.com/salesforce/Merlion/releases/tag/v1.3.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/salesforce/Merlion@v1.3.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/salesforce%2FMerlion/tags/v1.3.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/salesforce%2FMerlion/tags/v1.3.0/manifests"},{"name":"v1.2.5","sha":"3f7e8004ce76ff28b0a35760d4104fd634e16dcf","kind":"commit","published_at":"2022-07-15T20:45:35.000Z","download_url":"https://codeload.github.com/salesforce/Merlion/tar.gz/v1.2.5","html_url":"https://github.com/salesforce/Merlion/releases/tag/v1.2.5","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/salesforce/Merlion@v1.2.5","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/salesforce%2FMerlion/tags/v1.2.5","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/salesforce%2FMerlion/tags/v1.2.5/manifests"},{"name":"v1.2.4","sha":"638529e255195f22c666ad623c3a6b020327364b","kind":"commit","published_at":"2022-07-15T00:38:10.000Z","download_url":"https://codeload.github.com/salesforce/Merlion/tar.gz/v1.2.4","html_url":"https://github.com/salesforce/Merlion/releases/tag/v1.2.4","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/salesforce/Merlion@v1.2.4","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/salesforce%2FMerlion/tags/v1.2.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/salesforce%2FMerlion/tags/v1.2.4/manifests"},{"name":"v1.2.3","sha":"e0a79f0169d1af53a2393bf455c7d1015cf7871c","kind":"commit","published_at":"2022-06-28T22:07:43.000Z","download_url":"https://codeload.github.com/salesforce/Merlion/tar.gz/v1.2.3","html_url":"https://github.com/salesforce/Merlion/releases/tag/v1.2.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/salesforce/Merlion@v1.2.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/salesforce%2FMerlion/tags/v1.2.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/salesforce%2FMerlion/tags/v1.2.3/manifests"},{"name":"v1.2.2","sha":"251f4e92bfc8f2ff811949e86178f1a66761133a","kind":"commit","published_at":"2022-06-18T14:32:35.000Z","download_url":"https://codeload.github.com/salesforce/Merlion/tar.gz/v1.2.2","html_url":"https://github.com/salesforce/Merlion/releases/tag/v1.2.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/salesforce/Merlion@v1.2.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/salesforce%2FMerlion/tags/v1.2.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/salesforce%2FMerlion/tags/v1.2.2/manifests"},{"name":"v1.2.1","sha":"ea67ed4a2016b4ac2866b171b023838cbcc293f7","kind":"commit","published_at":"2022-06-09T01:56:46.000Z","download_url":"https://codeload.github.com/salesforce/Merlion/tar.gz/v1.2.1","html_url":"https://github.com/salesforce/Merlion/releases/tag/v1.2.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/salesforce/Merlion@v1.2.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/salesforce%2FMerlion/tags/v1.2.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/salesforce%2FMerlion/tags/v1.2.1/manifests"},{"name":"v1.2.0","sha":"80ba574eb56f28bf3412c61a6b32c28d0f06066b","kind":"commit","published_at":"2022-06-01T15:55:03.000Z","download_url":"https://codeload.github.com/salesforce/Merlion/tar.gz/v1.2.0","html_url":"https://github.com/salesforce/Merlion/releases/tag/v1.2.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/salesforce/Merlion@v1.2.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/salesforce%2FMerlion/tags/v1.2.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/salesforce%2FMerlion/tags/v1.2.0/manifests"},{"name":"v1.1.3","sha":"d0aca7fa817d9d0581f71746b3b268b6ccc3aa1f","kind":"commit","published_at":"2022-04-19T15:36:51.000Z","download_url":"https://codeload.github.com/salesforce/Merlion/tar.gz/v1.1.3","html_url":"https://github.com/salesforce/Merlion/releases/tag/v1.1.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/salesforce/Merlion@v1.1.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/salesforce%2FMerlion/tags/v1.1.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/salesforce%2FMerlion/tags/v1.1.3/manifests"},{"name":"v1.1.2","sha":"adb73c1d3c22103fc98864f924482ff9264005d5","kind":"commit","published_at":"2022-03-03T00:38:33.000Z","download_url":"https://codeload.github.com/salesforce/Merlion/tar.gz/v1.1.2","html_url":"https://github.com/salesforce/Merlion/releases/tag/v1.1.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/salesforce/Merlion@v1.1.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/salesforce%2FMerlion/tags/v1.1.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/salesforce%2FMerlion/tags/v1.1.2/manifests"},{"name":"v1.1.1","sha":"4a448de1676e62b6305578e3a21dd92d4d2ac245","kind":"commit","published_at":"2022-01-17T19:27:31.000Z","download_url":"https://codeload.github.com/salesforce/Merlion/tar.gz/v1.1.1","html_url":"https://github.com/salesforce/Merlion/releases/tag/v1.1.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/salesforce/Merlion@v1.1.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/salesforce%2FMerlion/tags/v1.1.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/salesforce%2FMerlion/tags/v1.1.1/manifests"},{"name":"v1.1.0","sha":"273dc04fbd3a1d652cb9c822da975481896f4435","kind":"commit","published_at":"2021-12-17T21:03:26.000Z","download_url":"https://codeload.github.com/salesforce/Merlion/tar.gz/v1.1.0","html_url":"https://github.com/salesforce/Merlion/releases/tag/v1.1.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/salesforce/Merlion@v1.1.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/salesforce%2FMerlion/tags/v1.1.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/salesforce%2FMerlion/tags/v1.1.0/manifests"},{"name":"v1.0.2","sha":"67e6420cbe454837a278a4185261311058db1aab","kind":"commit","published_at":"2021-11-09T00:46:53.000Z","download_url":"https://codeload.github.com/salesforce/Merlion/tar.gz/v1.0.2","html_url":"https://github.com/salesforce/Merlion/releases/tag/v1.0.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/salesforce/Merlion@v1.0.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/salesforce%2FMerlion/tags/v1.0.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/salesforce%2FMerlion/tags/v1.0.2/manifests"},{"name":"v1.0.1","sha":"6b68e90ef03760d8749906adec44a1c6b7d012dd","kind":"commit","published_at":"2021-10-18T20:58:30.000Z","download_url":"https://codeload.github.com/salesforce/Merlion/tar.gz/v1.0.1","html_url":"https://github.com/salesforce/Merlion/releases/tag/v1.0.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/salesforce/Merlion@v1.0.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/salesforce%2FMerlion/tags/v1.0.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/salesforce%2FMerlion/tags/v1.0.1/manifests"},{"name":"v1.0.0","sha":"89f0b75334f8628d56230b0cbc7b18ee271be97e","kind":"commit","published_at":"2021-09-23T20:52:27.000Z","download_url":"https://codeload.github.com/salesforce/Merlion/tar.gz/v1.0.0","html_url":"https://github.com/salesforce/Merlion/releases/tag/v1.0.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/salesforce/Merlion@v1.0.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/salesforce%2FMerlion/tags/v1.0.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/salesforce%2FMerlion/tags/v1.0.0/manifests"}]},"repo_metadata_updated_at":"2025-08-29T10:11:48.635Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":6.808321414509642,"dependent_packages_count":6.377797149797286,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":6.5930592821534635},"purl":"pkg:golang/github.com/salesforce/merlion","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/go/github.com/salesforce/merlion","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/go/github.com/salesforce/merlion","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/go/github.com/salesforce/merlion/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2025-08-29T04:21:57.062Z","issues_count":69,"pull_requests_count":61,"avg_time_to_close_issue":2551455.1842105263,"avg_time_to_close_pull_request":1087332.4915254237,"issues_closed_count":38,"pull_requests_closed_count":59,"pull_request_authors_count":17,"issue_authors_count":53,"avg_comments_per_issue":1.5072463768115942,"avg_comments_per_pull_request":0.819672131147541,"merged_pull_requests_count":53,"bot_issues_count":0,"bot_pull_requests_count":0,"past_year_issues_count":7,"past_year_pull_requests_count":2,"past_year_avg_time_to_close_issue":null,"past_year_avg_time_to_close_pull_request":null,"past_year_issues_closed_count":0,"past_year_pull_requests_closed_count":0,"past_year_pull_request_authors_count":2,"past_year_issue_authors_count":6,"past_year_avg_comments_per_issue":0.7142857142857143,"past_year_avg_comments_per_pull_request":0.5,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":0,"past_year_merged_pull_requests_count":0,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/salesforce%2FMerlion/issues","maintainers":[{"login":"shi-yu-wang","count":4,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/shi-yu-wang"},{"login":"Emerald01","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Emerald01"},{"login":"yihaocs","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/yihaocs"},{"login":"mattfernandez-salesforce","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mattfernandez-salesforce"}],"active_maintainers":[]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fsalesforce%2Fmerlion/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fsalesforce%2Fmerlion/version_numbers","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fsalesforce%2Fmerlion/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fsalesforce%2Fmerlion/related_packages","maintainers":[],"registry":{"name":"proxy.golang.org","url":"https://proxy.golang.org","ecosystem":"go","default":true,"packages_count":1954234,"maintainers_count":0,"namespaces_count":741771,"keywords_count":109320,"github":"golang","metadata":{"funded_packages_count":49342},"icon_url":"https://github.com/golang.png","created_at":"2022-04-04T15:19:22.939Z","updated_at":"2025-09-08T05:47:38.872Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/namespaces"}}],"commits":{"id":34782,"full_name":"salesforce/Merlion","default_branch":"main","committers":[{"name":"Aadyot Bhatnagar","email":"abhatnagar@salesforce.com","login":"aadyotb","count":58},{"name":"Paul Kassianik","email":"paulkass","login":"paulkass","count":4},{"name":"Ivan","email":"isenilov@gmail.com","login":"isenilov","count":3},{"name":"Chenghao Liu","email":"74166079+chenghaoliu89","login":"chenghaoliu89","count":2},{"name":"Shiyu Wang","email":"42013343+shi-yu-wang","login":"shi-yu-wang","count":2},{"name":"Tian Lan","email":"31748898+Emerald01","login":"Emerald01","count":2},{"name":"Angela Tao","email":"angelatao0123@gmail.com","login":"cnll0075","count":1},{"name":"Jon Wiggins","email":"35540058+jonwiggins","login":"jonwiggins","count":1},{"name":"Rafael Leiniö","email":"rafael.leper@gmail.com","login":"rafaelleinio","count":1},{"name":"Rohith_Papani","email":"48086850+IMRO832000","login":"IMRO832000","count":1},{"name":"Ryosuke Horiuchi","email":"32426869+uchiiii","login":"uchiiii","count":1},{"name":"Shrey","email":"shanand@redhat.com","login":"Shreyanand","count":1},{"name":"Yang Wenzhuo","email":"58458448+yangwenzhuo08","login":"yangwenzhuo08","count":1},{"name":"Yihao Feng","email":"93098586+yihaocs","login":"yihaocs","count":1},{"name":"mattfernandez-salesforce","email":"111141474+mattfernandez-salesforce","login":"mattfernandez-salesforce","count":1},{"name":"mr-price","email":"48429290+mr-price","login":"mr-price","count":1},{"name":"svc-scm","email":"48930134+svc-scm","login":"svc-scm","count":1}],"total_commits":82,"total_committers":17,"total_bot_commits":0,"total_bot_committers":0,"mean_commits":4.823529411764706,"dds":0.29268292682926833,"past_year_committers":[{"name":"Shiyu Wang","email":"42013343+shi-yu-wang","login":"shi-yu-wang","count":2},{"name":"mr-price","email":"48429290+mr-price","login":"mr-price","count":1},{"name":"Rohith_Papani","email":"48086850+IMRO832000","login":"IMRO832000","count":1}],"past_year_total_commits":4,"past_year_total_committers":3,"past_year_total_bot_commits":0,"past_year_total_bot_committers":0,"past_year_mean_commits":1.3333333333333333,"past_year_dds":0.5,"last_synced_at":"2025-05-15T02:48:06.483Z","last_synced_commit":"085ef8a69e5dcdfb9dcaa394cc21e087cccbb8f0","created_at":"2023-03-07T16:57:41.264Z","updated_at":"2025-05-15T02:48:06.507Z","commits_url":"https://commits.ecosyste.ms/api/v1/hosts/GitHub/repositories/salesforce%2FMerlion/commits","host":{"name":"GitHub","url":"https://github.com","kind":"github","last_synced_at":"2025-09-08T00:00:16.827Z","repositories_count":5490114,"commits_count":854745513,"contributors_count":31197433,"owners_count":911623,"icon_url":"https://github.com/github.png","host_url":"https://commits.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://commits.ecosyste.ms/api/v1/hosts/GitHub/repositories"}},"issues_stats":{"full_name":"salesforce/Merlion","html_url":"https://github.com/salesforce/Merlion","last_synced_at":"2025-08-31T09:43:10.225Z","status":null,"issues_count":68,"pull_requests_count":60,"avg_time_to_close_issue":2606835.2972972975,"avg_time_to_close_pull_request":1104703.3620689656,"issues_closed_count":37,"pull_requests_closed_count":58,"pull_request_authors_count":17,"issue_authors_count":53,"avg_comments_per_issue":1.4558823529411764,"avg_comments_per_pull_request":0.8166666666666667,"merged_pull_requests_count":52,"bot_issues_count":0,"bot_pull_requests_count":0,"past_year_issues_count":7,"past_year_pull_requests_count":2,"past_year_avg_time_to_close_issue":null,"past_year_avg_time_to_close_pull_request":null,"past_year_issues_closed_count":0,"past_year_pull_requests_closed_count":0,"past_year_pull_request_authors_count":2,"past_year_issue_authors_count":6,"past_year_avg_comments_per_issue":0.2857142857142857,"past_year_avg_comments_per_pull_request":0.0,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":0,"past_year_merged_pull_requests_count":0,"created_at":"2023-05-10T22:00:04.623Z","updated_at":"2025-09-02T19:55:25.839Z","repository_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/salesforce%2FMerlion","issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/salesforce%2FMerlion/issues","issue_labels_count":{},"pull_request_labels_count":{"cla:signed":15,"cla:missing":5},"issue_author_associations_count":{"NONE":65,"CONTRIBUTOR":2},"pull_request_author_associations_count":{"CONTRIBUTOR":49,"COLLABORATOR":12,"NONE":9},"issue_authors":{"MBasalla":3,"sunxin000":3,"bkowshik":2,"anton164":2,"Sharaddition":2,"ravenrip":2,"nebiyebulan":2,"darinkist":2,"AtanasGruev":2,"GuidoBorrelli":2,"FlorinAndrei":2,"yangyang919":2,"muazhari":2,"bayd":1,"varunsridhar1":1,"MacNale":1,"doughnuted":1,"YN-Liang":1,"namaya":1,"swarmt":1,"clszvd":1,"Kevin-shengAAA":1,"xycool":1,"BruceBinBoxing":1,"ivan-marroquin":1,"drobbster":1,"mr-price":1,"eldritchhh":1,"TDL77":1,"adminblackjack":1,"lostella":1,"tszumowski":1,"javmarina":1,"riteshchhetri10":1,"thehoodbuddha":1,"pnsafari":1,"lchen-24":1,"jili3221058001":1,"mccrindlebrian":1,"jorgegarcia197":1,"chenghaoliu89":1,"habibatabay":1,"jieran1234":1,"nntp4":1,"galleon":1,"Alex-Wei-bot":1,"Zohoor-NezahdHalafi":1,"xonze":1,"na018":1,"uchiiii":1,"silver6wings":1,"SHIJIE0313":1},"pull_request_authors":{"aadyotb":37,"shi-yu-wang":7,"IMRO832000":4,"isenilov":3,"Emerald01":3,"mr-price":2,"uchiiii":2,"anjanashankar9":2,"jonwiggins":1,"rafaelleinio":1,"yihaocs":1,"Rajpratik71":1,"cnll0075":1,"chenghaoliu89":1,"eltociear":1,"garrettbates":1,"mattfernandez-salesforce":1,"yangwenzhuo08":1},"host":{"name":"GitHub","url":"https://github.com","kind":"github","last_synced_at":"2025-09-05T00:00:10.444Z","repositories_count":10087320,"issues_count":31306968,"pull_requests_count":96469683,"authors_count":10696025,"icon_url":"https://github.com/github.png","host_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories","owners_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/owners","authors_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors"},"past_year_issue_labels_count":{},"past_year_pull_request_labels_count":{"cla:signed":1,"cla:missing":1},"past_year_issue_author_associations_count":{"NONE":7},"past_year_pull_request_author_associations_count":{"NONE":3},"past_year_issue_authors":{"AtanasGruev":2,"clszvd":1,"doughnuted":1,"ivan-marroquin":1,"jieran1234":1,"xycool":1},"past_year_pull_request_authors":{"Rajpratik71":1,"eltociear":1,"garrettbates":1},"maintainers":[{"login":"shi-yu-wang","count":7,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/shi-yu-wang"},{"login":"Emerald01","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Emerald01"},{"login":"yihaocs","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/yihaocs"},{"login":"mattfernandez-salesforce","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mattfernandez-salesforce"}],"active_maintainers":[]},"events":{"total":{"IssuesEvent":5,"WatchEvent":942,"IssueCommentEvent":11,"PullRequestEvent":2,"ForkEvent":43},"last_year":{"IssuesEvent":5,"WatchEvent":942,"IssueCommentEvent":11,"PullRequestEvent":2,"ForkEvent":43}},"keywords":["anomaly-detection","automl","benchmarking","ensemble-learning","forecasting","machine-learning","time-series"],"dependencies":[{"ecosystem":"actions","filepath":".github/workflows/docs.yml","sha":null,"kind":"manifest","created_at":"2023-09-24T16:57:26.800Z","updated_at":"2023-09-24T16:57:26.800Z","repository_link":"https://github.com/salesforce/Merlion/blob/main/.github/workflows/docs.yml","dependencies":[{"id":13922837705,"package_name":"actions/checkout","ecosystem":"actions","requirements":"v3","direct":true,"kind":"composite","optional":false},{"id":13922837706,"package_name":"actions/setup-python","ecosystem":"actions","requirements":"v4","direct":true,"kind":"composite","optional":false},{"id":13922837707,"package_name":"peaceiris/actions-gh-pages","ecosystem":"actions","requirements":"v3","direct":true,"kind":"composite","optional":false}]},{"ecosystem":"actions","filepath":".github/workflows/publish.yml","sha":null,"kind":"manifest","created_at":"2023-09-24T16:57:26.825Z","updated_at":"2023-09-24T16:57:26.825Z","repository_link":"https://github.com/salesforce/Merlion/blob/main/.github/workflows/publish.yml","dependencies":[{"id":13922837709,"package_name":"actions/checkout","ecosystem":"actions","requirements":"v3","direct":true,"kind":"composite","optional":false},{"id":13922837710,"package_name":"actions/setup-python","ecosystem":"actions","requirements":"v4","direct":true,"kind":"composite","optional":false},{"id":13922837711,"package_name":"pypa/gh-action-pypi-publish","ecosystem":"actions","requirements":"release/v1","direct":true,"kind":"composite","optional":false}]},{"ecosystem":"actions","filepath":".github/workflows/tests.yml","sha":null,"kind":"manifest","created_at":"2023-09-24T16:57:26.851Z","updated_at":"2023-09-24T16:57:26.851Z","repository_link":"https://github.com/salesforce/Merlion/blob/main/.github/workflows/tests.yml","dependencies":[{"id":13922837712,"package_name":"actions/checkout","ecosystem":"actions","requirements":"v3","direct":true,"kind":"composite","optional":false},{"id":13922837713,"package_name":"actions/setup-python","ecosystem":"actions","requirements":"v4","direct":true,"kind":"composite","optional":false},{"id":13922837714,"package_name":"actions/setup-java","ecosystem":"actions","requirements":"v3","direct":true,"kind":"composite","optional":false},{"id":13922837715,"package_name":"nick-fields/retry","ecosystem":"actions","requirements":"v2","direct":true,"kind":"composite","optional":false},{"id":13922837716,"package_name":"emibcn/badge-action","ecosystem":"actions","requirements":"v1.2.1","direct":true,"kind":"composite","optional":false},{"id":13922837717,"package_name":"s0/git-publish-subdir-action","ecosystem":"actions","requirements":"v2.5.1","direct":true,"kind":"composite","optional":false}]},{"ecosystem":"docker","filepath":"docker/Dockerfile","sha":null,"kind":"manifest","created_at":"2024-06-12T01:02:31.970Z","updated_at":"2024-06-12T01:02:31.970Z","repository_link":"https://github.com/salesforce/Merlion/blob/main/docker/Dockerfile","dependencies":[{"id":18550517509,"package_name":"python","ecosystem":"docker","requirements":"3.9-slim","direct":true,"kind":"build","optional":false}]},{"ecosystem":"docker","filepath":"docker/dashboard/Dockerfile","sha":null,"kind":"manifest","created_at":"2024-06-12T01:02:32.022Z","updated_at":"2024-06-12T01:02:32.022Z","repository_link":"https://github.com/salesforce/Merlion/blob/main/docker/dashboard/Dockerfile","dependencies":[{"id":18550517510,"package_name":"python","ecosystem":"docker","requirements":"3.9-slim","direct":true,"kind":"build","optional":false}]},{"ecosystem":"docker","filepath":"docker/spark-on-k8s/Dockerfile","sha":null,"kind":"manifest","created_at":"2024-06-12T01:02:32.072Z","updated_at":"2024-06-12T01:02:32.072Z","repository_link":"https://github.com/salesforce/Merlion/blob/main/docker/spark-on-k8s/Dockerfile","dependencies":[{"id":18550517511,"package_name":"gcr.io/spark-operator/spark-py","ecosystem":"docker","requirements":"v3.1.1","direct":true,"kind":"build","optional":false}]},{"ecosystem":"pypi","filepath":"docs/requirements.txt","sha":null,"kind":"manifest","created_at":"2024-06-12T01:02:32.972Z","updated_at":"2024-06-12T01:02:32.972Z","repository_link":"https://github.com/salesforce/Merlion/blob/main/docs/requirements.txt","dependencies":[{"id":18550517512,"package_name":"GitPython","ecosystem":"pypi","requirements":"*","direct":true,"kind":"runtime","optional":false},{"id":18550517513,"package_name":"beautifulsoup4","ecosystem":"pypi","requirements":"*","direct":true,"kind":"runtime","optional":false},{"id":18550517514,"package_name":"ipykernel","ecosystem":"pypi","requirements":"*","direct":true,"kind":"runtime","optional":false},{"id":18550517515,"package_name":"nbsphinx","ecosystem":"pypi","requirements":"*","direct":true,"kind":"runtime","optional":false},{"id":18550517516,"package_name":"pandoc","ecosystem":"pypi","requirements":"*","direct":true,"kind":"runtime","optional":false},{"id":18550517517,"package_name":"docutils","ecosystem":"pypi","requirements":"==0.16","direct":true,"kind":"runtime","optional":false},{"id":18550517518,"package_name":"sphinx","ecosystem":"pypi","requirements":"\u003c6","direct":true,"kind":"runtime","optional":false},{"id":18550517519,"package_name":"sphinx_autodoc_typehints","ecosystem":"pypi","requirements":"*","direct":true,"kind":"runtime","optional":false},{"id":18550517520,"package_name":"sphinx_rtd_theme","ecosystem":"pypi","requirements":"*","direct":true,"kind":"runtime","optional":false}]},{"ecosystem":"pypi","filepath":"setup.py","sha":null,"kind":"manifest","created_at":"2024-06-12T01:02:33.911Z","updated_at":"2024-06-12T01:02:33.911Z","repository_link":"https://github.com/salesforce/Merlion/blob/main/setup.py","dependencies":[{"id":18550517521,"package_name":"cython","ecosystem":"pypi","requirements":"*","direct":true,"kind":"runtime","optional":false},{"id":18550517522,"package_name":"dill","ecosystem":"pypi","requirements":"*","direct":true,"kind":"runtime","optional":false},{"id":18550517523,"package_name":"GitPython","ecosystem":"pypi","requirements":"*","direct":true,"kind":"runtime","optional":false},{"id":18550517524,"package_name":"py4j","ecosystem":"pypi","requirements":"*","direct":true,"kind":"runtime","optional":false},{"id":18550517525,"package_name":"matplotlib","ecosystem":"pypi","requirements":"*","direct":true,"kind":"runtime","optional":false},{"id":18550517526,"package_name":"plotly","ecosystem":"pypi","requirements":"\u003e=4.13","direct":true,"kind":"runtime","optional":false},{"id":18550517527,"package_name":"numpy","ecosystem":"pypi","requirements":"\u003e=1.21","direct":true,"kind":"runtime","optional":false},{"id":18550517528,"package_name":"packaging","ecosystem":"pypi","requirements":"*","direct":true,"kind":"runtime","optional":false},{"id":18550517529,"package_name":"pandas","ecosystem":"pypi","requirements":"\u003e=1.1.0","direct":true,"kind":"runtime","optional":false},{"id":18550517530,"package_name":"prophet","ecosystem":"pypi","requirements":"\u003e=1.1","direct":true,"kind":"runtime","optional":false},{"id":18550517531,"package_name":"scikit-learn","ecosystem":"pypi","requirements":"\u003e=0.22","direct":true,"kind":"runtime","optional":false},{"id":18550517532,"package_name":"scipy","ecosystem":"pypi","requirements":"\u003e=1.6.0","direct":true,"kind":"runtime","optional":false},{"id":18550517533,"package_name":"statsmodels","ecosystem":"pypi","requirements":"\u003e=0.12.2","direct":true,"kind":"runtime","optional":false},{"id":18550517534,"package_name":"lightgbm","ecosystem":"pypi","requirements":"*","direct":true,"kind":"runtime","optional":false},{"id":18550517535,"package_name":"tqdm","ecosystem":"pypi","requirements":"*","direct":true,"kind":"runtime","optional":false}]},{"ecosystem":"pypi","filepath":"ts_datasets/setup.py","sha":null,"kind":"manifest","created_at":"2024-06-12T01:02:34.127Z","updated_at":"2024-06-12T01:02:34.127Z","repository_link":"https://github.com/salesforce/Merlion/blob/main/ts_datasets/setup.py","dependencies":[{"id":18550517536,"package_name":"cython","ecosystem":"pypi","requirements":"*","direct":true,"kind":"runtime","optional":false}]}],"score":22.008313520627215,"created_at":"2025-09-08T20:57:38.853Z","updated_at":"2025-10-07T08:28:08.836Z","avatar_url":"https://github.com/salesforce.png","language":"Python","category":null,"sub_category":null,"monthly_downloads":48454,"funding_links":[],"readme_doi_urls":[],"works":{},"citation_counts":{},"total_citations":0,"keywords_from_contributors":[],"project_url":"https://science.ecosyste.ms/api/v1/projects/79218","html_url":"https://science.ecosyste.ms/projects/79218"}