npmpackage.info

Gathering detailed insights and metrics for @ciscospark/recipe-private-web-client

@ciscospark/recipe-private-web-client - 1.32.15 | npmpackage.info

@ciscospark/recipe-private-web-client

JavaScript SDK for Webex

1.32.15

185

NOASSERTION

JavaScript

9.40 kB

3.4

Installations

npm install @ciscospark/recipe-private-web-client

Developer Guide

BETA

Typescript

No

Module System

CommonJS

Min. Node Version

>=4

Node Version

6.10.1

NPM Version

3.10.10 Pull Requests

Open

37

Total

3,991

Closed

1,105

Merged

2,849

Issues

Open

9

Total

390

Closed

381

Releases

Unable to fetch releases

Languages

JavaScript

TypeScript

Shell

Handlebars

CSS

Python

HTML

Dockerfile

JavaScript (50.7%)

TypeScript (48.54%)

Shell (0.25%)

Handlebars (0.2%)

CSS (0.13%)

Python (0.11%)

HTML (0.07%)

Developer

webex

Download Statistics

Total Downloads

Last Day

Last Week

Last Month

Last Year

GitHub Statistics

NOASSERTION License

185 Stars

9,385 Commits

376 Forks

38 Watchers

47 Branches

134 Contributors

Updated on Jul 15, 2025

Maintainers

View All 134 Contributors

Package Meta Information

Latest Version

1.32.15

Package Id

@ciscospark/recipe-private-web-client@1.32.15

Unpacked Size

9.40 kB

Size

2.65 kB

File Count

NPM Version

3.10.10

Node Version

6.10.1

Total Downloads

Cumulative downloads

Total Downloads

NaN

Last Day

NaN

Compared to previous day

Last Week

NaN

Compared to previous week

Last Month

NaN

Compared to previous month

Last Year

NaN

Compared to previous year

Weekly Downloads

Monthly Downloads

Yearly Downloads

@ciscospark/recipe-private-web-client

Transitional package. Do not use in new projects. Or old projects.

Install
Usage
Contribute
Maintainers
License

Install

1npm install --save @ciscospark/recipe-private-web-client

Usage

Don't use this. Seriously. Just don't.

Maintainers

This package is maintained by Cisco Webex for Developers.

Contribute

Pull requests welcome. Please see CONTRIBUTING.md for more details.

License

No vulnerabilities found.

10

Code-Review

Determines if the project requires human code review before pull requests (aka merge requests) are merged.

10

Maintained

Determines if the project is "actively maintained".

10

Binary-Artifacts

Determines if the project has generated executable (binary) artifacts in the source repository.

9

License

Determines if the project has defined a license.

0

Token-Permissions

Determines if the project's workflows follow the principle of least privilege.

0

CII-Best-Practices

Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.

0

Dangerous-Workflow

Determines if the project's GitHub Action workflows avoid dangerous patterns.

0

Security-Policy

Determines if the project has published a security policy.

0

Pinned-Dependencies

Determines if the project has declared and pinned the dependencies of its build process.

Reason

dependency not pinned by hash detected -- score normalized to 0

Details

Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/deploy.yml:218: update your workflow using https://app.stepsecurity.io/secureworkflow/webex/webex-js-sdk/deploy.yml/next?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/deploy.yml:223: update your workflow using https://app.stepsecurity.io/secureworkflow/webex/webex-js-sdk/deploy.yml/next?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/deploy.yml:230: update your workflow using https://app.stepsecurity.io/secureworkflow/webex/webex-js-sdk/deploy.yml/next?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/deploy.yml:236: update your workflow using https://app.stepsecurity.io/secureworkflow/webex/webex-js-sdk/deploy.yml/next?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/deploy.yml:290: update your workflow using https://app.stepsecurity.io/secureworkflow/webex/webex-js-sdk/deploy.yml/next?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/deploy.yml:293: update your workflow using https://app.stepsecurity.io/secureworkflow/webex/webex-js-sdk/deploy.yml/next?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/deploy.yml:300: update your workflow using https://app.stepsecurity.io/secureworkflow/webex/webex-js-sdk/deploy.yml/next?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/deploy.yml:306: update your workflow using https://app.stepsecurity.io/secureworkflow/webex/webex-js-sdk/deploy.yml/next?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/deploy.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/webex/webex-js-sdk/deploy.yml/next?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/deploy.yml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/webex/webex-js-sdk/deploy.yml/next?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/deploy.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/webex/webex-js-sdk/deploy.yml/next?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/deploy.yml:49: update your workflow using https://app.stepsecurity.io/secureworkflow/webex/webex-js-sdk/deploy.yml/next?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/deploy.yml:52: update your workflow using https://app.stepsecurity.io/secureworkflow/webex/webex-js-sdk/deploy.yml/next?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/deploy.yml:59: update your workflow using https://app.stepsecurity.io/secureworkflow/webex/webex-js-sdk/deploy.yml/next?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/deploy.yml:77: update your workflow using https://app.stepsecurity.io/secureworkflow/webex/webex-js-sdk/deploy.yml/next?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/deploy.yml:96: update your workflow using https://app.stepsecurity.io/secureworkflow/webex/webex-js-sdk/deploy.yml/next?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/deploy.yml:99: update your workflow using https://app.stepsecurity.io/secureworkflow/webex/webex-js-sdk/deploy.yml/next?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/deploy.yml:106: update your workflow using https://app.stepsecurity.io/secureworkflow/webex/webex-js-sdk/deploy.yml/next?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/deploy.yml:112: update your workflow using https://app.stepsecurity.io/secureworkflow/webex/webex-js-sdk/deploy.yml/next?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/deploy.yml:158: update your workflow using https://app.stepsecurity.io/secureworkflow/webex/webex-js-sdk/deploy.yml/next?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/deploy.yml:161: update your workflow using https://app.stepsecurity.io/secureworkflow/webex/webex-js-sdk/deploy.yml/next?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/deploy.yml:168: update your workflow using https://app.stepsecurity.io/secureworkflow/webex/webex-js-sdk/deploy.yml/next?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/deploy.yml:174: update your workflow using https://app.stepsecurity.io/secureworkflow/webex/webex-js-sdk/deploy.yml/next?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/pr-title-checker.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/webex/webex-js-sdk/pr-title-checker.yml/next?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pull-request.yml:130: update your workflow using https://app.stepsecurity.io/secureworkflow/webex/webex-js-sdk/pull-request.yml/next?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pull-request.yml:135: update your workflow using https://app.stepsecurity.io/secureworkflow/webex/webex-js-sdk/pull-request.yml/next?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pull-request.yml:142: update your workflow using https://app.stepsecurity.io/secureworkflow/webex/webex-js-sdk/pull-request.yml/next?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pull-request.yml:148: update your workflow using https://app.stepsecurity.io/secureworkflow/webex/webex-js-sdk/pull-request.yml/next?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pull-request.yml:166: update your workflow using https://app.stepsecurity.io/secureworkflow/webex/webex-js-sdk/pull-request.yml/next?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pull-request.yml:327: update your workflow using https://app.stepsecurity.io/secureworkflow/webex/webex-js-sdk/pull-request.yml/next?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pull-request.yml:332: update your workflow using https://app.stepsecurity.io/secureworkflow/webex/webex-js-sdk/pull-request.yml/next?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pull-request.yml:339: update your workflow using https://app.stepsecurity.io/secureworkflow/webex/webex-js-sdk/pull-request.yml/next?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pull-request.yml:345: update your workflow using https://app.stepsecurity.io/secureworkflow/webex/webex-js-sdk/pull-request.yml/next?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pull-request.yml:351: update your workflow using https://app.stepsecurity.io/secureworkflow/webex/webex-js-sdk/pull-request.yml/next?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pull-request.yml:373: update your workflow using https://app.stepsecurity.io/secureworkflow/webex/webex-js-sdk/pull-request.yml/next?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pull-request.yml:378: update your workflow using https://app.stepsecurity.io/secureworkflow/webex/webex-js-sdk/pull-request.yml/next?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pull-request.yml:385: update your workflow using https://app.stepsecurity.io/secureworkflow/webex/webex-js-sdk/pull-request.yml/next?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pull-request.yml:391: update your workflow using https://app.stepsecurity.io/secureworkflow/webex/webex-js-sdk/pull-request.yml/next?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pull-request.yml:397: update your workflow using https://app.stepsecurity.io/secureworkflow/webex/webex-js-sdk/pull-request.yml/next?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pull-request.yml:415: update your workflow using https://app.stepsecurity.io/secureworkflow/webex/webex-js-sdk/pull-request.yml/next?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pull-request.yml:420: update your workflow using https://app.stepsecurity.io/secureworkflow/webex/webex-js-sdk/pull-request.yml/next?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pull-request.yml:427: update your workflow using https://app.stepsecurity.io/secureworkflow/webex/webex-js-sdk/pull-request.yml/next?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pull-request.yml:433: update your workflow using https://app.stepsecurity.io/secureworkflow/webex/webex-js-sdk/pull-request.yml/next?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pull-request.yml:439: update your workflow using https://app.stepsecurity.io/secureworkflow/webex/webex-js-sdk/pull-request.yml/next?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pull-request.yml:59: update your workflow using https://app.stepsecurity.io/secureworkflow/webex/webex-js-sdk/pull-request.yml/next?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pull-request.yml:64: update your workflow using https://app.stepsecurity.io/secureworkflow/webex/webex-js-sdk/pull-request.yml/next?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pull-request.yml:80: update your workflow using https://app.stepsecurity.io/secureworkflow/webex/webex-js-sdk/pull-request.yml/next?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pull-request.yml:87: update your workflow using https://app.stepsecurity.io/secureworkflow/webex/webex-js-sdk/pull-request.yml/next?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pull-request.yml:117: update your workflow using https://app.stepsecurity.io/secureworkflow/webex/webex-js-sdk/pull-request.yml/next?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pull-request.yml:183: update your workflow using https://app.stepsecurity.io/secureworkflow/webex/webex-js-sdk/pull-request.yml/next?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pull-request.yml:188: update your workflow using https://app.stepsecurity.io/secureworkflow/webex/webex-js-sdk/pull-request.yml/next?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pull-request.yml:195: update your workflow using https://app.stepsecurity.io/secureworkflow/webex/webex-js-sdk/pull-request.yml/next?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pull-request.yml:201: update your workflow using https://app.stepsecurity.io/secureworkflow/webex/webex-js-sdk/pull-request.yml/next?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pull-request.yml:207: update your workflow using https://app.stepsecurity.io/secureworkflow/webex/webex-js-sdk/pull-request.yml/next?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pull-request.yml:240: update your workflow using https://app.stepsecurity.io/secureworkflow/webex/webex-js-sdk/pull-request.yml/next?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pull-request.yml:245: update your workflow using https://app.stepsecurity.io/secureworkflow/webex/webex-js-sdk/pull-request.yml/next?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pull-request.yml:252: update your workflow using https://app.stepsecurity.io/secureworkflow/webex/webex-js-sdk/pull-request.yml/next?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pull-request.yml:258: update your workflow using https://app.stepsecurity.io/secureworkflow/webex/webex-js-sdk/pull-request.yml/next?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pull-request.yml:264: update your workflow using https://app.stepsecurity.io/secureworkflow/webex/webex-js-sdk/pull-request.yml/next?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pull-request.yml:283: update your workflow using https://app.stepsecurity.io/secureworkflow/webex/webex-js-sdk/pull-request.yml/next?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pull-request.yml:288: update your workflow using https://app.stepsecurity.io/secureworkflow/webex/webex-js-sdk/pull-request.yml/next?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pull-request.yml:295: update your workflow using https://app.stepsecurity.io/secureworkflow/webex/webex-js-sdk/pull-request.yml/next?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pull-request.yml:301: update your workflow using https://app.stepsecurity.io/secureworkflow/webex/webex-js-sdk/pull-request.yml/next?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pull-request.yml:307: update your workflow using https://app.stepsecurity.io/secureworkflow/webex/webex-js-sdk/pull-request.yml/next?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pull-request.yml:459: update your workflow using https://app.stepsecurity.io/secureworkflow/webex/webex-js-sdk/pull-request.yml/next?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pull-request.yml:464: update your workflow using https://app.stepsecurity.io/secureworkflow/webex/webex-js-sdk/pull-request.yml/next?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pull-request.yml:471: update your workflow using https://app.stepsecurity.io/secureworkflow/webex/webex-js-sdk/pull-request.yml/next?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pull-request.yml:477: update your workflow using https://app.stepsecurity.io/secureworkflow/webex/webex-js-sdk/pull-request.yml/next?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pull-request.yml:483: update your workflow using https://app.stepsecurity.io/secureworkflow/webex/webex-js-sdk/pull-request.yml/next?enable=pin
Warn: containerImage not pinned by hash: docker/builder/Dockerfile:1: pin your Docker image by updating node:dubnium to node:dubnium@sha256:59531d2835edd5161c8f9512f9e095b1836f7a1fcb0ab73e005ec46047384911
Warn: npmCommand not pinned by hash: docker/builder/Dockerfile:12
Warn: npmCommand not pinned by hash: packages/calling/pipeline/setup.sh:14
Warn: downloadThenRun not pinned by hash: run.sh:42
Warn: npmCommand not pinned by hash: run.sh:51
Info: 0 out of 68 GitHub-owned GitHubAction dependencies pinned
Info: 0 out of 1 third-party GitHubAction dependencies pinned
Info: 0 out of 1 downloadThenRun dependencies pinned
Info: 0 out of 1 containerImage dependencies pinned
Info: 0 out of 3 npmCommand dependencies pinned

0

SAST

Determines if the project uses static code analysis.

0

Fuzzing

Determines if the project uses fuzzing.

0

Vulnerabilities

Determines if the project has open, known unfixed vulnerabilities.

Reason

59 existing vulnerabilities detected

Details

Warn: Project is vulnerable to: GHSA-28mc-g557-92m7
Warn: Project is vulnerable to: GHSA-968p-4wvh-cqc8
Warn: Project is vulnerable to: GHSA-7q7g-4xm8-89cq
Warn: Project is vulnerable to: GHSA-v88g-cgmw-v5xw
Warn: Project is vulnerable to: GHSA-wf5p-g6vw-rhxx
Warn: Project is vulnerable to: GHSA-jr5f-v2jv-69x6
Warn: Project is vulnerable to: GHSA-8hc4-vh64-cxmj
Warn: Project is vulnerable to: GHSA-qwcr-r2fm-qrc7
Warn: Project is vulnerable to: GHSA-v6h2-p8h4-qcjw
Warn: Project is vulnerable to: GHSA-grv7-fg5c-xmjg
Warn: Project is vulnerable to: GHSA-pxg6-pf52-xh8x
Warn: Project is vulnerable to: GHSA-3xgq-45jj-v275
Warn: Project is vulnerable to: GHSA-434g-2637-qmqr
Warn: Project is vulnerable to: GHSA-49q7-c7j4-3p7m
Warn: Project is vulnerable to: GHSA-977x-g7h5-7qgw
Warn: Project is vulnerable to: GHSA-f7q4-pwc6-w24p
Warn: Project is vulnerable to: GHSA-fc9h-whq2-v747
Warn: Project is vulnerable to: GHSA-vjh7-7g9h-fjfh
Warn: Project is vulnerable to: GHSA-67mh-4wv8-2f99
Warn: Project is vulnerable to: GHSA-rv95-896h-c2vc
Warn: Project is vulnerable to: GHSA-qw6h-vgh9-j6wx
Warn: Project is vulnerable to: GHSA-75v8-2h7p-7m2m
Warn: Project is vulnerable to: GHSA-pfrx-2q88-qq97
Warn: Project is vulnerable to: GHSA-rc47-6667-2j5j
Warn: Project is vulnerable to: GHSA-c7qv-q95q-8v27
Warn: Project is vulnerable to: GHSA-4www-5p9h-95mh
Warn: Project is vulnerable to: GHSA-9gqv-wp59-fq42
Warn: Project is vulnerable to: GHSA-78xj-cgh5-2h22
Warn: Project is vulnerable to: GHSA-2p57-rm9w-gvfp
Warn: Project is vulnerable to: GHSA-36fh-84j7-cv5h
Warn: Project is vulnerable to: GHSA-593f-38f6-jp5m
Warn: Project is vulnerable to: GHSA-x2rg-q646-7m2v
Warn: Project is vulnerable to: GHSA-952p-6rrq-rcjv
Warn: Project is vulnerable to: GHSA-44fp-w29j-9vj5
Warn: Project is vulnerable to: GHSA-4pg4-qvpc-4q3h
Warn: Project is vulnerable to: GHSA-g5hg-p3ph-g8qg
Warn: Project is vulnerable to: GHSA-mwcw-c2x4-8c55
Warn: Project is vulnerable to: GHSA-rhx6-c78j-4q9w
Warn: Project is vulnerable to: GHSA-9wv6-86v2-598j
Warn: Project is vulnerable to: GHSA-h7cp-r72f-jxh6
Warn: Project is vulnerable to: GHSA-v62p-rq8g-8h59
Warn: Project is vulnerable to: GHSA-p8p7-x288-28g6
Warn: Project is vulnerable to: GHSA-gcx4-mw62-g8wm
Warn: Project is vulnerable to: GHSA-c2qf-rxjj-qqgw
Warn: Project is vulnerable to: GHSA-44c6-4v22-4mhx
Warn: Project is vulnerable to: GHSA-4x5v-gmq8-25ch
Warn: Project is vulnerable to: GHSA-m6fv-jmcg-4jfg
Warn: Project is vulnerable to: GHSA-76p7-773f-r4q5
Warn: Project is vulnerable to: GHSA-cm22-4g7w-348p
Warn: Project is vulnerable to: GHSA-f5x3-32g6-xq36
Warn: Project is vulnerable to: GHSA-pq67-2wwv-3xjx
Warn: Project is vulnerable to: GHSA-8cj5-5rvv-wf4v
Warn: Project is vulnerable to: GHSA-72xf-g2v4-qvf3
Warn: Project is vulnerable to: GHSA-qgmg-gppg-76g5
Warn: Project is vulnerable to: GHSA-g3ch-rx76-35fx
Warn: Project is vulnerable to: GHSA-4vvj-4cpr-p986
Warn: Project is vulnerable to: GHSA-4v9v-hfq4-rm2v
Warn: Project is vulnerable to: GHSA-9jgg-88mc-972h
Warn: Project is vulnerable to: GHSA-3h5v-q93c-6h6q

Score

3.4

/10

Last Scanned on 2025-07-07

The Open Source Security Foundation is a cross-industry collaboration to improve the security of open source software (OSS). The Scorecard provides security health metrics for open source projects.

Learn More