Gathering detailed insights and metrics for @comunica/actor-query-operation-path-alt
Gathering detailed insights and metrics for @comunica/actor-query-operation-path-alt
Installations
npm install @comunica/actor-query-operation-path-altDeveloper
Developer Guide
BETA
Module System
CommonJS
Min. Node Version
Typescript Support
No
Node Version
18.18.0
NPM Version
lerna/8.1.2/node@v18.18.0+x64 (darwin)
Statistics
436 Stars
2,491 Commits
78 Forks
16 Watching
32 Branches
42 Contributors
Updated on 22 Nov 2024
Languages
TypeScript (99.34%)
JavaScript (0.61%)
Dockerfile (0.03%)
Shell (0.02%)
Total Downloads
Cumulative downloads
Total Downloads
675,202
Last day
-2.4%
660
Compared to previous day
Last week
-16.4%
3,470
Compared to previous week
Last month
18.6%
19,931
Compared to previous month
Last year
3.5%
155,800
Compared to previous year
Daily Downloads
Weekly Downloads
Monthly Downloads
Yearly Downloads
Versions
A knowledge graph querying framework for JavaScript
Flexible SPARQL and GraphQL over decentralized RDF on the Web.
Learn more about Comunica on our website.
Comunica is an open-source project that is used by many other projects, and is being maintained by a group of volunteers. If you would like to support this project, you may consider:
- Contributing directly by writing code or documentation; or
- Contributing indirectly by funding this project via Open Collective.
Supported by
Comunica is a community-driven project, sustained by the Comunica Association. If you are using Comunica, becoming a sponsor or member is a way to make Comunica sustainable in the long-term.
Our top sponsors are shown below!
Query with Comunica
Read one of our guides to get started with querying:
- Querying from the command line
- Updating from the command line
- Querying local files from the command line
- Querying in a JavaScript app
- Updating in a JavaScript app
- Querying in a JavaScript browser app
- Setting up a SPARQL endpoint
- Querying from a Docker container
- Setting up a Web client
- Query using the latest development version
Or jump right into one of the available query engines:
- Comunica SPARQL: SPARQL/GraphQL querying from JavaScript applications or the CLI (Browser-ready via a CDN)
-
Engines with support for specific types of sources
- Comunica SPARQL File: Engine to query over local RDF files
- Comunica SPARQL RDF/JS: Engine to query over in-memory RDF/JS-compliant sources.
- Comunica SPARQL RDF/JS Lite: Engine optimized for small bundle size to query over in-memory RDF/JS-compliant sources.
- Comunica SPARQL HDT: Library to query over local HDT files
- Comunica SPARQL OSTRICH: Library to query over local versioned OSTRICH archives
-
Engines with alternative querying paradigms:
- Comunica SPARQL Link Traversal: Engine to query over multiple files by following links between them.
- Comunica SPARQL Solid: Engine to query over files behind Solid access control.
- Comunica SPARQL Link Traversal Solid: Engine to query within Solid data vaults by following links between documents.
- Comunica SPARQL Reasoning: Engine that adds support for reasoning
- Comunica SPARQL Reasoning File: Engine to query over local RDF files with support for reasoning
Modify or Extend Comunica
Read one of our guides to get started with modifying Comunica, or have a look at some examples:
- Querying with a custom configuration from the command line
- Querying with a custom configuration in a JavaScript app
- Exposing your custom config as an npm package
- Exposing your custom config in a Web client
- Contributing a new query operation actor to the Comunica repository
- Adding a config parameter to an actor
Contribute
Interested in contributing? Have a look at our contribution guide.
Development Setup
(JSDoc: https://comunica.github.io/comunica/)
This repository should be used by Comunica module developers as it contains multiple Comunica modules that can be composed. This repository is managed as a monorepo using Lerna.
If you want to develop new features or use the (potentially unstable) in-development version, you can set up a development environment for Comunica.
Comunica requires Node.JS and the Yarn package manager (only when using this repo). Comunica is tested on OSX, Linux and Windows.
This project can be setup by cloning and installing it as follows:
1$ git clone https://github.com/comunica/comunica.git 2$ cd comunica 3$ yarn install
Note: npm install is not supported at the moment, as this project makes use of Yarn's workspaces functionality
This will install the dependencies of all modules, and bootstrap the Lerna monorepo.
After that, all Comunica packages are available in the packages/ folder,
and the Comunica engines are available in the engines/ folder.
These can be used in a development environment, such as querying with Comunica SPARQL (@comunica/query-sparql).
Furthermore, this will add pre-commit hooks using husky to build, lint and test.
These hooks can temporarily be disabled at your own risk by adding the -n flag to the commit command.
Benchmarking
If you want to do benchmarking with Comunica in Node.js, make sure to run Node.js in production mode as follows:
1> NODE_ENV=production node packages/some-package/bin/some-bin.js
Read more about benchmarking on our website.
Cite
If you are using or extending Comunica as part of a scientific publication, we would appreciate a citation of our article.
1@inproceedings{taelman_iswc_resources_comunica_2018, 2 author = {Taelman, Ruben and Van Herwegen, Joachim and Vander Sande, Miel and Verborgh, Ruben}, 3 title = {Comunica: a Modular SPARQL Query Engine for the Web}, 4 booktitle = {Proceedings of the 17th International Semantic Web Conference}, 5 year = {2018}, 6 month = oct, 7 url = {https://comunica.github.io/Article-ISWC2018-Resource/} 8}
License
This code is copyrighted by the Comunica Association and Ghent University – imec and released under the MIT license.
No vulnerabilities found.
Reason
30 commit(s) and 18 issue activity found in the last 90 days -- score normalized to 10
Reason
no dangerous workflow patterns detected
Reason
no binaries found in the repo
Reason
packaging workflow detected
Details
- Info: Project packages its releases by way of GitHub Actions.: .github/workflows/ci.yml:217
Reason
license file detected
Details
- Info: project has a license file: LICENSE.txt:0
- Warn: project license file does not contain an FSF or OSI license.
Reason
Found 11/26 approved changesets -- score normalized to 4
Reason
detected GitHub workflow tokens with excessive permissions
Details
- Warn: no topLevel permission defined: .github/workflows/ci.yml:1
- Warn: no topLevel permission defined: .github/workflows/close-issues-no-response.yml:1
- Warn: no topLevel permission defined: .github/workflows/issue-label-commenter.yml:1
- Warn: no topLevel permission defined: .github/workflows/issue-label-to-project-board.yml:1
- Warn: no topLevel permission defined: .github/workflows/new-issue-label.yml:1
- Warn: no topLevel permission defined: .github/workflows/publish-github-release.yml:1
- Info: no jobLevel write permissions found
Reason
no effort to earn an OpenSSF best practices badge detected
Reason
security policy file not detected
Details
- Warn: no security policy file detected
- Warn: no security file to analyze
- Warn: no security file to analyze
- Warn: no security file to analyze
Reason
project is not fuzzed
Details
- Warn: no fuzzer integrations found
Reason
SAST tool is not run on all commits -- score normalized to 0
Details
- Warn: 0 commits out of 15 are checked with a SAST tool
Reason
dependency not pinned by hash detected -- score normalized to 0
Details
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:196: update your workflow using https://app.stepsecurity.io/secureworkflow/comunica/comunica/ci.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:198: update your workflow using https://app.stepsecurity.io/secureworkflow/comunica/comunica/ci.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:202: update your workflow using https://app.stepsecurity.io/secureworkflow/comunica/comunica/ci.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:279: update your workflow using https://app.stepsecurity.io/secureworkflow/comunica/comunica/ci.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:281: update your workflow using https://app.stepsecurity.io/secureworkflow/comunica/comunica/ci.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:285: update your workflow using https://app.stepsecurity.io/secureworkflow/comunica/comunica/ci.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:294: update your workflow using https://app.stepsecurity.io/secureworkflow/comunica/comunica/ci.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:314: update your workflow using https://app.stepsecurity.io/secureworkflow/comunica/comunica/ci.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:316: update your workflow using https://app.stepsecurity.io/secureworkflow/comunica/comunica/ci.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:319: update your workflow using https://app.stepsecurity.io/secureworkflow/comunica/comunica/ci.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:323: update your workflow using https://app.stepsecurity.io/secureworkflow/comunica/comunica/ci.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:327: update your workflow using https://app.stepsecurity.io/secureworkflow/comunica/comunica/ci.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:331: update your workflow using https://app.stepsecurity.io/secureworkflow/comunica/comunica/ci.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:335: update your workflow using https://app.stepsecurity.io/secureworkflow/comunica/comunica/ci.yml/master?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci.yml:348: update your workflow using https://app.stepsecurity.io/secureworkflow/comunica/comunica/ci.yml/master?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci.yml:362: update your workflow using https://app.stepsecurity.io/secureworkflow/comunica/comunica/ci.yml/master?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci.yml:380: update your workflow using https://app.stepsecurity.io/secureworkflow/comunica/comunica/ci.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:391: update your workflow using https://app.stepsecurity.io/secureworkflow/comunica/comunica/ci.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:393: update your workflow using https://app.stepsecurity.io/secureworkflow/comunica/comunica/ci.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:397: update your workflow using https://app.stepsecurity.io/secureworkflow/comunica/comunica/ci.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:407: update your workflow using https://app.stepsecurity.io/secureworkflow/comunica/comunica/ci.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/comunica/comunica/ci.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/comunica/comunica/ci.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/comunica/comunica/ci.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:67: update your workflow using https://app.stepsecurity.io/secureworkflow/comunica/comunica/ci.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:69: update your workflow using https://app.stepsecurity.io/secureworkflow/comunica/comunica/ci.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:73: update your workflow using https://app.stepsecurity.io/secureworkflow/comunica/comunica/ci.yml/master?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci.yml:83: update your workflow using https://app.stepsecurity.io/secureworkflow/comunica/comunica/ci.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:146: update your workflow using https://app.stepsecurity.io/secureworkflow/comunica/comunica/ci.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:148: update your workflow using https://app.stepsecurity.io/secureworkflow/comunica/comunica/ci.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:152: update your workflow using https://app.stepsecurity.io/secureworkflow/comunica/comunica/ci.yml/master?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci.yml:166: update your workflow using https://app.stepsecurity.io/secureworkflow/comunica/comunica/ci.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:432: update your workflow using https://app.stepsecurity.io/secureworkflow/comunica/comunica/ci.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:107: update your workflow using https://app.stepsecurity.io/secureworkflow/comunica/comunica/ci.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:109: update your workflow using https://app.stepsecurity.io/secureworkflow/comunica/comunica/ci.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:113: update your workflow using https://app.stepsecurity.io/secureworkflow/comunica/comunica/ci.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:121: update your workflow using https://app.stepsecurity.io/secureworkflow/comunica/comunica/ci.yml/master?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci.yml:179: update your workflow using https://app.stepsecurity.io/secureworkflow/comunica/comunica/ci.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:232: update your workflow using https://app.stepsecurity.io/secureworkflow/comunica/comunica/ci.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:234: update your workflow using https://app.stepsecurity.io/secureworkflow/comunica/comunica/ci.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:238: update your workflow using https://app.stepsecurity.io/secureworkflow/comunica/comunica/ci.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/close-issues-no-response.yml:10: update your workflow using https://app.stepsecurity.io/secureworkflow/comunica/comunica/close-issues-no-response.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/close-issues-no-response.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/comunica/comunica/close-issues-no-response.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-label-commenter.yml:18: update your workflow using https://app.stepsecurity.io/secureworkflow/comunica/comunica/issue-label-commenter.yml/master?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/issue-label-commenter.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/comunica/comunica/issue-label-commenter.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-label-to-project-board.yml:11: update your workflow using https://app.stepsecurity.io/secureworkflow/comunica/comunica/issue-label-to-project-board.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-label-to-project-board.yml:18: update your workflow using https://app.stepsecurity.io/secureworkflow/comunica/comunica/issue-label-to-project-board.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/new-issue-label.yml:10: update your workflow using https://app.stepsecurity.io/secureworkflow/comunica/comunica/new-issue-label.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-github-release.yml:10: update your workflow using https://app.stepsecurity.io/secureworkflow/comunica/comunica/publish-github-release.yml/master?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/publish-github-release.yml:12: update your workflow using https://app.stepsecurity.io/secureworkflow/comunica/comunica/publish-github-release.yml/master?enable=pin
- Warn: containerImage not pinned by hash: engines/query-sparql-file/Dockerfile:1: pin your Docker image by updating node:22 to node:22@sha256:5c76d05034644fa8ecc9c2aa84e0a83cd981d0ef13af5455b87b9adf5b216561
- Warn: containerImage not pinned by hash: engines/query-sparql/Dockerfile:1: pin your Docker image by updating node:22 to node:22@sha256:5c76d05034644fa8ecc9c2aa84e0a83cd981d0ef13af5455b87b9adf5b216561
- Warn: containerImage not pinned by hash: performance/benchmark-bsbm-file/combinations/combination_0/input/dockerfiles/Dockerfile-client:1: pin your Docker image by updating comunica/query-sparql-file:latest to comunica/query-sparql-file:latest@sha256:702046696a6c988cb9aaf90664fdde1d983160e2e7308dea1a452fd86609f88e
- Warn: containerImage not pinned by hash: performance/benchmark-bsbm-file/combinations/combination_1/input/dockerfiles/Dockerfile-client:1: pin your Docker image by updating comunica/query-sparql-file:latest to comunica/query-sparql-file:latest@sha256:702046696a6c988cb9aaf90664fdde1d983160e2e7308dea1a452fd86609f88e
- Warn: containerImage not pinned by hash: performance/benchmark-bsbm-file/input/dockerfiles/Dockerfile-client:1: pin your Docker image by updating comunica/query-sparql-file:latest to comunica/query-sparql-file:latest@sha256:702046696a6c988cb9aaf90664fdde1d983160e2e7308dea1a452fd86609f88e
- Warn: containerImage not pinned by hash: performance/benchmark-bsbm-tpf/combinations/combination_0/input/dockerfiles/Dockerfile-client:1: pin your Docker image by updating comunica/query-sparql:latest to comunica/query-sparql:latest@sha256:dab3cba3613b363e049758924c6775bc7cdde31285223fdf2f1961356e1fbae3
- Warn: containerImage not pinned by hash: performance/benchmark-bsbm-tpf/combinations/combination_0/input/dockerfiles/Dockerfile-ldf-server:1: pin your Docker image by updating linkeddatafragments/server:v3.3.0 to linkeddatafragments/server:v3.3.0@sha256:d3de77b9aebaaf97dd02ed61f09e026beffe4e72549472e1e28d6911c7d1671e
- Warn: containerImage not pinned by hash: performance/benchmark-bsbm-tpf/combinations/combination_0/input/dockerfiles/Dockerfile-ldf-server-cache:1: pin your Docker image by updating nginx:1.23.2 to nginx:1.23.2@sha256:ab589a3c466e347b1c0573be23356676df90cd7ce2dbf6ec332a5f0a8b5e59db
- Warn: containerImage not pinned by hash: performance/benchmark-bsbm-tpf/combinations/combination_1/input/dockerfiles/Dockerfile-client:1: pin your Docker image by updating comunica/query-sparql:latest to comunica/query-sparql:latest@sha256:dab3cba3613b363e049758924c6775bc7cdde31285223fdf2f1961356e1fbae3
- Warn: containerImage not pinned by hash: performance/benchmark-bsbm-tpf/combinations/combination_1/input/dockerfiles/Dockerfile-ldf-server:1: pin your Docker image by updating linkeddatafragments/server:v3.3.0 to linkeddatafragments/server:v3.3.0@sha256:d3de77b9aebaaf97dd02ed61f09e026beffe4e72549472e1e28d6911c7d1671e
- Warn: containerImage not pinned by hash: performance/benchmark-bsbm-tpf/combinations/combination_1/input/dockerfiles/Dockerfile-ldf-server-cache:1: pin your Docker image by updating nginx:1.23.2 to nginx:1.23.2@sha256:ab589a3c466e347b1c0573be23356676df90cd7ce2dbf6ec332a5f0a8b5e59db
- Warn: containerImage not pinned by hash: performance/benchmark-bsbm-tpf/input/dockerfiles/Dockerfile-client:1: pin your Docker image by updating comunica/query-sparql:latest to comunica/query-sparql:latest@sha256:dab3cba3613b363e049758924c6775bc7cdde31285223fdf2f1961356e1fbae3
- Warn: containerImage not pinned by hash: performance/benchmark-bsbm-tpf/input/dockerfiles/Dockerfile-ldf-server:1: pin your Docker image by updating linkeddatafragments/server:v3.3.0 to linkeddatafragments/server:v3.3.0@sha256:d3de77b9aebaaf97dd02ed61f09e026beffe4e72549472e1e28d6911c7d1671e
- Warn: containerImage not pinned by hash: performance/benchmark-bsbm-tpf/input/dockerfiles/Dockerfile-ldf-server-cache:1: pin your Docker image by updating nginx:1.23.2 to nginx:1.23.2@sha256:ab589a3c466e347b1c0573be23356676df90cd7ce2dbf6ec332a5f0a8b5e59db
- Warn: containerImage not pinned by hash: performance/benchmark-watdiv-file/combinations/combination_0/input/dockerfiles/Dockerfile-client:1: pin your Docker image by updating comunica/query-sparql-file:latest to comunica/query-sparql-file:latest@sha256:702046696a6c988cb9aaf90664fdde1d983160e2e7308dea1a452fd86609f88e
- Warn: containerImage not pinned by hash: performance/benchmark-watdiv-file/combinations/combination_1/input/dockerfiles/Dockerfile-client:1: pin your Docker image by updating comunica/query-sparql-file:latest to comunica/query-sparql-file:latest@sha256:702046696a6c988cb9aaf90664fdde1d983160e2e7308dea1a452fd86609f88e
- Warn: containerImage not pinned by hash: performance/benchmark-watdiv-file/input/dockerfiles/Dockerfile-client:1: pin your Docker image by updating comunica/query-sparql-file:latest to comunica/query-sparql-file:latest@sha256:702046696a6c988cb9aaf90664fdde1d983160e2e7308dea1a452fd86609f88e
- Warn: containerImage not pinned by hash: performance/benchmark-watdiv-tpf/combinations/combination_0/input/dockerfiles/Dockerfile-client:1: pin your Docker image by updating comunica/query-sparql:latest to comunica/query-sparql:latest@sha256:dab3cba3613b363e049758924c6775bc7cdde31285223fdf2f1961356e1fbae3
- Warn: containerImage not pinned by hash: performance/benchmark-watdiv-tpf/combinations/combination_0/input/dockerfiles/Dockerfile-ldf-server:1: pin your Docker image by updating linkeddatafragments/server:v3.3.0 to linkeddatafragments/server:v3.3.0@sha256:d3de77b9aebaaf97dd02ed61f09e026beffe4e72549472e1e28d6911c7d1671e
- Warn: containerImage not pinned by hash: performance/benchmark-watdiv-tpf/combinations/combination_0/input/dockerfiles/Dockerfile-ldf-server-cache:1: pin your Docker image by updating nginx:1.23.2 to nginx:1.23.2@sha256:ab589a3c466e347b1c0573be23356676df90cd7ce2dbf6ec332a5f0a8b5e59db
- Warn: containerImage not pinned by hash: performance/benchmark-watdiv-tpf/combinations/combination_1/input/dockerfiles/Dockerfile-client:1: pin your Docker image by updating comunica/query-sparql:latest to comunica/query-sparql:latest@sha256:dab3cba3613b363e049758924c6775bc7cdde31285223fdf2f1961356e1fbae3
- Warn: containerImage not pinned by hash: performance/benchmark-watdiv-tpf/combinations/combination_1/input/dockerfiles/Dockerfile-ldf-server:1: pin your Docker image by updating linkeddatafragments/server:v3.3.0 to linkeddatafragments/server:v3.3.0@sha256:d3de77b9aebaaf97dd02ed61f09e026beffe4e72549472e1e28d6911c7d1671e
- Warn: containerImage not pinned by hash: performance/benchmark-watdiv-tpf/combinations/combination_1/input/dockerfiles/Dockerfile-ldf-server-cache:1: pin your Docker image by updating nginx:1.23.2 to nginx:1.23.2@sha256:ab589a3c466e347b1c0573be23356676df90cd7ce2dbf6ec332a5f0a8b5e59db
- Warn: containerImage not pinned by hash: performance/benchmark-watdiv-tpf/input/dockerfiles/Dockerfile-client:1: pin your Docker image by updating comunica/query-sparql:latest to comunica/query-sparql:latest@sha256:dab3cba3613b363e049758924c6775bc7cdde31285223fdf2f1961356e1fbae3
- Warn: containerImage not pinned by hash: performance/benchmark-watdiv-tpf/input/dockerfiles/Dockerfile-ldf-server:1: pin your Docker image by updating linkeddatafragments/server:v3.3.0 to linkeddatafragments/server:v3.3.0@sha256:d3de77b9aebaaf97dd02ed61f09e026beffe4e72549472e1e28d6911c7d1671e
- Warn: containerImage not pinned by hash: performance/benchmark-watdiv-tpf/input/dockerfiles/Dockerfile-ldf-server-cache:1: pin your Docker image by updating nginx:1.23.2 to nginx:1.23.2@sha256:ab589a3c466e347b1c0573be23356676df90cd7ce2dbf6ec332a5f0a8b5e59db
- Warn: containerImage not pinned by hash: performance/benchmark-web/combinations/combination_0/input/dockerfiles/Dockerfile-client:1: pin your Docker image by updating comunica/query-sparql:latest to comunica/query-sparql:latest@sha256:dab3cba3613b363e049758924c6775bc7cdde31285223fdf2f1961356e1fbae3
- Warn: containerImage not pinned by hash: performance/benchmark-web/combinations/combination_1/input/dockerfiles/Dockerfile-client:1: pin your Docker image by updating comunica/query-sparql:latest to comunica/query-sparql:latest@sha256:dab3cba3613b363e049758924c6775bc7cdde31285223fdf2f1961356e1fbae3
- Warn: containerImage not pinned by hash: performance/benchmark-web/input/dockerfiles/Dockerfile-client:1: pin your Docker image by updating comunica/query-sparql:latest to comunica/query-sparql:latest@sha256:dab3cba3613b363e049758924c6775bc7cdde31285223fdf2f1961356e1fbae3
- Warn: npmCommand not pinned by hash: engines/query-sparql-file/Dockerfile:20
- Info: 0 out of 42 GitHub-owned GitHubAction dependencies pinned
- Info: 0 out of 8 third-party GitHubAction dependencies pinned
- Info: 0 out of 29 containerImage dependencies pinned
- Info: 0 out of 1 npmCommand dependencies pinned
Reason
24 existing vulnerabilities detected
Details
- Warn: Project is vulnerable to: GHSA-8hc4-vh64-cxmj
- Warn: Project is vulnerable to: GHSA-qwcr-r2fm-qrc7
- Warn: Project is vulnerable to: GHSA-grv7-fg5c-xmjg
- Warn: Project is vulnerable to: GHSA-pxg6-pf52-xh8x
- Warn: Project is vulnerable to: GHSA-3xgq-45jj-v275
- Warn: Project is vulnerable to: GHSA-434g-2637-qmqr
- Warn: Project is vulnerable to: GHSA-49q7-c7j4-3p7m
- Warn: Project is vulnerable to: GHSA-977x-g7h5-7qgw
- Warn: Project is vulnerable to: GHSA-f7q4-pwc6-w24p
- Warn: Project is vulnerable to: GHSA-fc9h-whq2-v747
- Warn: Project is vulnerable to: GHSA-qw6h-vgh9-j6wx
- Warn: Project is vulnerable to: GHSA-p6mc-m468-83gw
- Warn: Project is vulnerable to: GHSA-29mw-wpgm-hmr9
- Warn: Project is vulnerable to: GHSA-35jh-r3h4-6jhm
- Warn: Project is vulnerable to: GHSA-952p-6rrq-rcjv
- Warn: Project is vulnerable to: GHSA-9wv6-86v2-598j
- Warn: Project is vulnerable to: GHSA-p8p7-x288-28g6
- Warn: Project is vulnerable to: GHSA-m6fv-jmcg-4jfg
- Warn: Project is vulnerable to: GHSA-cm22-4g7w-348p
- Warn: Project is vulnerable to: GHSA-4rq4-32rv-6wp6
- Warn: Project is vulnerable to: GHSA-64g7-mvw6-v9qj
- Warn: Project is vulnerable to: GHSA-f5x3-32g6-xq36
- Warn: Project is vulnerable to: GHSA-72xf-g2v4-qvf3
- Warn: Project is vulnerable to: GHSA-3h5v-q93c-6h6q
Score
4.5
/10
Last Scanned on 2024-11-25
The Open Source Security Foundation is a cross-industry collaboration to improve the security of open source software (OSS). The Scorecard provides security health metrics for open source projects.
Learn More