scorecard.json

{
    "date": "2026-03-18T14:11:40Z",
    "repo": { "name": "file://.", "commit": "unknown" },
    "scorecard": { "version": "v5.4.0", "commit": "unknown" },
    "score": 4.9,
    "checks": [
        {
            "details": [
                "Warn: binary detected: node_modules/.bin/esbuild:1",
                "Warn: binary detected: node_modules/@biomejs/cli-linux-x64/biome:1",
                "Warn: binary detected: node_modules/@biomejs/cli-linux-x64-musl/biome:1",
                "Warn: binary detected: node_modules/@esbuild/linux-x64/bin/esbuild:1",
                "Warn: binary detected: node_modules/@rollup/rollup-linux-x64-gnu/rollup.linux-x64-gnu.node:1",
                "Warn: binary detected: node_modules/@rollup/rollup-linux-x64-musl/rollup.linux-x64-musl.node:1",
                "Warn: binary detected: node_modules/@socketsecurity/socket-patch-linux-x64/socket-patch:1",
                "Warn: binary detected: node_modules/@stryker-mutator/core/node_modules/source-map/lib/mappings.wasm:1",
                "Warn: binary detected: node_modules/@xenova/transformers/dist/ort-wasm-simd-threaded.wasm:1",
                "Warn: binary detected: node_modules/@xenova/transformers/dist/ort-wasm-simd.wasm:1",
                "Warn: binary detected: node_modules/@xenova/transformers/dist/ort-wasm-threaded.wasm:1",
                "Warn: binary detected: node_modules/@xenova/transformers/dist/ort-wasm.wasm:1",
                "Warn: binary detected: node_modules/bare-fs/prebuilds/android-arm/bare-fs.bare:1",
                "Warn: binary detected: node_modules/bare-fs/prebuilds/android-arm64/bare-fs.bare:1",
                "Warn: binary detected: node_modules/bare-fs/prebuilds/android-ia32/bare-fs.bare:1",
                "Warn: binary detected: node_modules/bare-fs/prebuilds/android-x64/bare-fs.bare:1",
                "Warn: binary detected: node_modules/bare-fs/prebuilds/darwin-arm64/bare-fs.bare:1",
                "Warn: binary detected: node_modules/bare-fs/prebuilds/darwin-x64/bare-fs.bare:1",
                "Warn: binary detected: node_modules/bare-fs/prebuilds/ios-arm64/bare-fs.bare:1",
                "Warn: binary detected: node_modules/bare-fs/prebuilds/ios-arm64-simulator/bare-fs.bare:1",
                "Warn: binary detected: node_modules/bare-fs/prebuilds/ios-x64-simulator/bare-fs.bare:1",
                "Warn: binary detected: node_modules/bare-fs/prebuilds/linux-arm64/bare-fs.bare:1",
                "Warn: binary detected: node_modules/bare-fs/prebuilds/linux-x64/bare-fs.bare:1",
                "Warn: binary detected: node_modules/bare-fs/prebuilds/win32-arm64/bare-fs.bare:1",
                "Warn: binary detected: node_modules/bare-fs/prebuilds/win32-x64/bare-fs.bare:1",
                "Warn: binary detected: node_modules/bare-os/prebuilds/android-arm/bare-os.bare:1",
                "Warn: binary detected: node_modules/bare-os/prebuilds/android-arm64/bare-os.bare:1",
                "Warn: binary detected: node_modules/bare-os/prebuilds/android-ia32/bare-os.bare:1",
                "Warn: binary detected: node_modules/bare-os/prebuilds/android-x64/bare-os.bare:1",
                "Warn: binary detected: node_modules/bare-os/prebuilds/darwin-arm64/bare-os.bare:1",
                "Warn: binary detected: node_modules/bare-os/prebuilds/darwin-x64/bare-os.bare:1",
                "Warn: binary detected: node_modules/bare-os/prebuilds/ios-arm64/bare-os.bare:1",
                "Warn: binary detected: node_modules/bare-os/prebuilds/ios-arm64-simulator/bare-os.bare:1",
                "Warn: binary detected: node_modules/bare-os/prebuilds/ios-x64-simulator/bare-os.bare:1",
                "Warn: binary detected: node_modules/bare-os/prebuilds/linux-arm64/bare-os.bare:1",
                "Warn: binary detected: node_modules/bare-os/prebuilds/linux-x64/bare-os.bare:1",
                "Warn: binary detected: node_modules/bare-os/prebuilds/win32-arm64/bare-os.bare:1",
                "Warn: binary detected: node_modules/bare-os/prebuilds/win32-x64/bare-os.bare:1",
                "Warn: binary detected: node_modules/bare-url/prebuilds/android-arm/bare-url.bare:1",
                "Warn: binary detected: node_modules/bare-url/prebuilds/android-arm64/bare-url.bare:1",
                "Warn: binary detected: node_modules/bare-url/prebuilds/android-ia32/bare-url.bare:1",
                "Warn: binary detected: node_modules/bare-url/prebuilds/android-x64/bare-url.bare:1",
                "Warn: binary detected: node_modules/bare-url/prebuilds/darwin-arm64/bare-url.bare:1",
                "Warn: binary detected: node_modules/bare-url/prebuilds/darwin-x64/bare-url.bare:1",
                "Warn: binary detected: node_modules/bare-url/prebuilds/ios-arm64/bare-url.bare:1",
                "Warn: binary detected: node_modules/bare-url/prebuilds/ios-arm64-simulator/bare-url.bare:1",
                "Warn: binary detected: node_modules/bare-url/prebuilds/ios-x64-simulator/bare-url.bare:1",
                "Warn: binary detected: node_modules/bare-url/prebuilds/linux-arm64/bare-url.bare:1",
                "Warn: binary detected: node_modules/bare-url/prebuilds/linux-x64/bare-url.bare:1",
                "Warn: binary detected: node_modules/bare-url/prebuilds/win32-arm64/bare-url.bare:1",
                "Warn: binary detected: node_modules/bare-url/prebuilds/win32-x64/bare-url.bare:1",
                "Warn: binary detected: node_modules/cwebp-bin/vendor/cwebp:1",
                "Warn: binary detected: node_modules/esbuild/bin/esbuild:1",
                "Warn: binary detected: node_modules/esbuild-linux-64/bin/esbuild:1",
                "Warn: binary detected: node_modules/gifsicle/vendor/gifsicle:1",
                "Warn: binary detected: node_modules/imagemin-jpegtran/node_modules/jpegtran-bin/vendor/jpegtran:1",
                "Warn: binary detected: node_modules/jpegtran-bin/vendor/jpegtran:1",
                "Warn: binary detected: node_modules/mozjpeg/vendor/cjpeg:1",
                "Warn: binary detected: node_modules/onnxruntime-node/bin/napi-v3/darwin/arm64/libonnxruntime.1.14.0.dylib:1",
                "Warn: binary detected: node_modules/onnxruntime-node/bin/napi-v3/darwin/arm64/onnxruntime_binding.node:1",
                "Warn: binary detected: node_modules/onnxruntime-node/bin/napi-v3/darwin/x64/libonnxruntime.1.14.0.dylib:1",
                "Warn: binary detected: node_modules/onnxruntime-node/bin/napi-v3/darwin/x64/onnxruntime_binding.node:1",
                "Warn: binary detected: node_modules/onnxruntime-node/bin/napi-v3/linux/arm64/libonnxruntime.so.1.14.0:1",
                "Warn: binary detected: node_modules/onnxruntime-node/bin/napi-v3/linux/arm64/onnxruntime_binding.node:1",
                "Warn: binary detected: node_modules/onnxruntime-node/bin/napi-v3/linux/x64/libonnxruntime.so.1.14.0:1",
                "Warn: binary detected: node_modules/onnxruntime-node/bin/napi-v3/linux/x64/onnxruntime_binding.node:1",
                "Warn: binary detected: node_modules/onnxruntime-node/bin/napi-v3/win32/arm64/onnxruntime.dll:1",
                "Warn: binary detected: node_modules/onnxruntime-node/bin/napi-v3/win32/arm64/onnxruntime_binding.node:1",
                "Warn: binary detected: node_modules/onnxruntime-node/bin/napi-v3/win32/arm64/onnxruntime_providers_shared.dll:1",
                "Warn: binary detected: node_modules/onnxruntime-node/bin/napi-v3/win32/x64/onnxruntime.dll:1",
                "Warn: binary detected: node_modules/onnxruntime-node/bin/napi-v3/win32/x64/onnxruntime_binding.node:1",
                "Warn: binary detected: node_modules/onnxruntime-node/bin/napi-v3/win32/x64/onnxruntime_providers_shared.dll:1",
                "Warn: binary detected: node_modules/onnxruntime-web/dist/ort-wasm-simd-threaded.wasm:1",
                "Warn: binary detected: node_modules/onnxruntime-web/dist/ort-wasm-simd.wasm:1",
                "Warn: binary detected: node_modules/onnxruntime-web/dist/ort-wasm-threaded.wasm:1",
                "Warn: binary detected: node_modules/onnxruntime-web/dist/ort-wasm.wasm:1",
                "Warn: binary detected: node_modules/optipng-bin/vendor/optipng:1",
                "Warn: binary detected: node_modules/pngquant-bin/vendor/pngquant:1",
                "Warn: binary detected: node_modules/rollup-plugin-visualizer/node_modules/source-map/lib/mappings.wasm:1",
                "Warn: binary detected: node_modules/sharp/build/Release/sharp-linux-x64.node:1",
                "Warn: binary detected: node_modules/sharp/vendor/8.14.5/linux-x64/lib/libvips-cpp.so.42:1",
                "Warn: binary detected: node_modules/snyk/dist/cli/436e8fd533bf10006b55a55732649189.node:1",
                "Warn: binary detected: node_modules/snyk/dist/cli/8e59fcb098dc20398bb2cf58a44b048e.node:1",
                "Warn: binary detected: node_modules/snyk/dist/cli/sql-wasm.wasm:1",
                "Warn: binary detected: node_modules/snyk/wrapper_dist/snyk-linux:1",
                "Warn: binary detected: node_modules/source-map-explorer/node_modules/source-map/lib/mappings.wasm:1",
                "Warn: binary detected: node_modules/three/examples/jsm/libs/ammo.wasm.wasm:1",
                "Warn: binary detected: node_modules/three/examples/jsm/libs/basis/basis_transcoder.wasm:1",
                "Warn: binary detected: node_modules/three/examples/jsm/libs/draco/draco_decoder.wasm:1",
                "Warn: binary detected: node_modules/three/examples/jsm/libs/draco/gltf/draco_decoder.wasm:1",
                "Warn: binary detected: node_modules/three/examples/jsm/libs/rhino3dm/rhino3dm.wasm:1",
                "Warn: binary detected: node_modules/vite-plugin-imagemin/node_modules/.bin/esbuild:1",
                "Warn: binary detected: node_modules/vite-plugin-imagemin/node_modules/esbuild/bin/esbuild:1",
                "Warn: binary detected: node_modules/workbox-build/node_modules/source-map/lib/mappings.wasm:1"
            ],
            "score": 0,
            "reason": "binaries present in source code",
            "name": "Binary-Artifacts",
            "documentation": {
                "url": "https://github.com/ossf/scorecard/blob/main/docs/checks.md#binary-artifacts",
                "short": "Determines if the project has generated executable (binary) artifacts in the source repository."
            }
        },
        {
            "details": null,
            "score": 10,
            "reason": "no dangerous workflow patterns detected",
            "name": "Dangerous-Workflow",
            "documentation": {
                "url": "https://github.com/ossf/scorecard/blob/main/docs/checks.md#dangerous-workflow",
                "short": "Determines if the project's GitHub Action workflows avoid dangerous patterns."
            }
        },
        {
            "details": [
                "Info: detected update tool: Dependabot: .github/dependabot.yml:1",
                "Info: detected update tool: RenovateBot: .renovaterc.json:1"
            ],
            "score": 10,
            "reason": "update tool detected",
            "name": "Dependency-Update-Tool",
            "documentation": {
                "url": "https://github.com/ossf/scorecard/blob/main/docs/checks.md#dependency-update-tool",
                "short": "Determines if the project uses a dependency update tool."
            }
        },
        {
            "details": ["Warn: no fuzzer integrations found"],
            "score": 0,
            "reason": "project is not fuzzed",
            "name": "Fuzzing",
            "documentation": {
                "url": "https://github.com/ossf/scorecard/blob/main/docs/checks.md#fuzzing",
                "short": "Determines if the project uses fuzzing."
            }
        },
        {
            "details": [
                "Info: project has a license file: LICENSE:0",
                "Warn: project license file does not contain an FSF or OSI license."
            ],
            "score": 9,
            "reason": "license file detected",
            "name": "License",
            "documentation": {
                "url": "https://github.com/ossf/scorecard/blob/main/docs/checks.md#license",
                "short": "Determines if the project has defined a license."
            }
        },
        {
            "details": [
                "Info: Project packages its releases by way of GitHub Actions.: .github/workflows/docker.yml:24"
            ],
            "score": 10,
            "reason": "packaging workflow detected",
            "name": "Packaging",
            "documentation": {
                "url": "https://github.com/ossf/scorecard/blob/main/docs/checks.md#packaging",
                "short": "Determines if the project is published as a package that others can easily download, install, easily update, and uninstall."
            }
        },
        {
            "details": [
                "Info: Possibly incomplete results: error parsing shell code: not a valid arithmetic operator: auto: node_modules/@socketsecurity/cli/dist/socket-completion.bash:0",
                "Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/benchmark.yml:24",
                "Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/benchmark.yml:30",
                "Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/benchmark.yml:36",
                "Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/benchmark.yml:78",
                "Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:22",
                "Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:27",
                "Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:36",
                "Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:62",
                "Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:77",
                "Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:85",
                "Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:100",
                "Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql.yml:23",
                "Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql.yml:26",
                "Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql.yml:31",
                "Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql.yml:43",
                "Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/deploy.yml:40",
                "Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/deploy.yml:45",
                "Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/deploy.yml:58",
                "Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/deploy.yml:104",
                "Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/deploy.yml:107",
                "Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/deploy.yml:129",
                "Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/deploy.yml:146",
                "Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/deploy.yml:149",
                "Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/deploy.yml:160",
                "Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/deploy.yml:181",
                "Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/deploy.yml:197",
                "Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/deploy.yml:200",
                "Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/deploy.yml:217",
                "Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docker.yml:29",
                "Warn: third-party GitHubAction not pinned by hash: .github/workflows/docker.yml:32",
                "Warn: third-party GitHubAction not pinned by hash: .github/workflows/docker.yml:36",
                "Warn: third-party GitHubAction not pinned by hash: .github/workflows/docker.yml:44",
                "Warn: third-party GitHubAction not pinned by hash: .github/workflows/docker.yml:53",
                "Warn: third-party GitHubAction not pinned by hash: .github/workflows/docker.yml:66",
                "Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/labeler.yml:17",
                "Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/mutation.yml:22",
                "Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/mutation.yml:25",
                "Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/mutation.yml:38",
                "Warn: third-party GitHubAction not pinned by hash: .github/workflows/renovate.yml:18",
                "Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/scorecard.yml:25",
                "Warn: third-party GitHubAction not pinned by hash: .github/workflows/scorecard.yml:30",
                "Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/scorecard.yml:38",
                "Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/security-full.yml:24",
                "Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/security-full.yml:27",
                "Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/security-full.yml:32",
                "Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/security-full.yml:44",
                "Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/security-full.yml:52",
                "Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/security-full.yml:55",
                "Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/security-full.yml:72",
                "Warn: third-party GitHubAction not pinned by hash: .github/workflows/security-full.yml:77",
                "Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/security-full.yml:87",
                "Warn: third-party GitHubAction not pinned by hash: .github/workflows/security-full.yml:90",
                "Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/security-full.yml:100",
                "Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/security-full.yml:110",
                "Warn: third-party GitHubAction not pinned by hash: .github/workflows/security-full.yml:113",
                "Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/security-full.yml:123",
                "Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/security-full.yml:126",
                "Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/security-full.yml:148",
                "Warn: third-party GitHubAction not pinned by hash: .github/workflows/security-full.yml:153",
                "Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/security-full.yml:161",
                "Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/security-scan.yml:22",
                "Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/security-scan.yml:27",
                "Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/security-scan.yml:33",
                "Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/security-scan.yml:38",
                "Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/stale.yml:18",
                "Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/strains-merge.yml:20",
                "Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/strains-merge.yml:25",
                "Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/strains-merge.yml:42",
                "Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/trivy-scan.yml:23",
                "Warn: third-party GitHubAction not pinned by hash: .github/workflows/trivy-scan.yml:26",
                "Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/trivy-scan.yml:36",
                "Warn: containerImage not pinned by hash: Dockerfile:4: pin your Docker image by updating node:20-alpine to node:20-alpine@sha256:b88333c42c23fbd91596ebd7fd10de239cedab9617de04142dde7315e3bc0afa",
                "Warn: containerImage not pinned by hash: Dockerfile:17: pin your Docker image by updating cgr.dev/chainguard/nginx:latest to cgr.dev/chainguard/nginx:latest@sha256:770994a6d14bfd17a34fcf0503e13f5f7c4cf6327b0ec6636f4607cb7dd91afc",
                "Warn: containerImage not pinned by hash: node_modules/@surma/rollup-plugin-off-main-thread/Dockerfile:1: pin your Docker image by updating selenium/node-chrome:latest to selenium/node-chrome:latest@sha256:98047d918805e9a2773f2dece2777ec2ce7607dc575bd5fe3d9d0bd0eb30a16f",
                "Warn: downloadThenRun not pinned by hash: node_modules/@surma/rollup-plugin-off-main-thread/Dockerfile:11-14",
                "Warn: pipCommand not pinned by hash: .github/workflows/security-scan.yml:45",
                "Warn: pipCommand not pinned by hash: .github/workflows/security-scan.yml:46",
                "Warn: goCommand not pinned by hash: .github/workflows/security-scan.yml:47",
                "Warn: goCommand not pinned by hash: .github/workflows/security-scan.yml:48",
                "Warn: goCommand not pinned by hash: .github/workflows/security-scan.yml:49",
                "Info:   0 out of  64 GitHub-owned GitHubAction dependencies pinned",
                "Info:   0 out of  15 third-party GitHubAction dependencies pinned",
                "Info:   0 out of   3 containerImage dependencies pinned",
                "Info:  15 out of  15 npmCommand dependencies pinned",
                "Info:   0 out of   1 downloadThenRun dependencies pinned",
                "Info:   0 out of   2 pipCommand dependencies pinned",
                "Info:   0 out of   3 goCommand dependencies pinned"
            ],
            "score": 3,
            "reason": "dependency not pinned by hash detected -- score normalized to 3",
            "name": "Pinned-Dependencies",
            "documentation": {
                "url": "https://github.com/ossf/scorecard/blob/main/docs/checks.md#pinned-dependencies",
                "short": "Determines if the project has declared and pinned the dependencies of its build process."
            }
        },
        {
            "details": [
                "Info: SAST configuration detected: CodeQL",
                "Info: SAST configuration detected: CodeQL",
                "Warn: no pull requests merged into dev branch"
            ],
            "score": 10,
            "reason": "SAST tool detected: CodeQL",
            "name": "SAST",
            "documentation": {
                "url": "https://github.com/ossf/scorecard/blob/main/docs/checks.md#sast",
                "short": "Determines if the project uses static code analysis."
            }
        },
        {
            "details": [
                "Info: security policy file detected: SECURITY.md:1",
                "Warn: no linked content found",
                "Info: Found disclosure, vulnerability, and/or timelines in security policy: SECURITY.md:1",
                "Info: Found text in security policy: SECURITY.md:1"
            ],
            "score": 4,
            "reason": "security policy file detected",
            "name": "Security-Policy",
            "documentation": {
                "url": "https://github.com/ossf/scorecard/blob/main/docs/checks.md#security-policy",
                "short": "Determines if the project has published a security policy."
            }
        },
        {
            "details": [
                "Info: jobLevel 'contents' permission set to 'read': .github/workflows/security-full.yml:144",
                "Info: jobLevel 'actions' permission set to 'read': .github/workflows/security-full.yml:145",
                "Info: topLevel 'contents' permission set to 'read': .github/workflows/benchmark.yml:13",
                "Info: topLevel 'contents' permission set to 'read': .github/workflows/ci.yml:11",
                "Info: topLevel 'actions' permission set to 'read': .github/workflows/codeql.yml:12",
                "Info: topLevel 'contents' permission set to 'read': .github/workflows/codeql.yml:13",
                "Warn: topLevel 'security-events' permission set to 'write': .github/workflows/codeql.yml:14",
                "Info: topLevel 'contents' permission set to 'read': .github/workflows/deploy.yml:12",
                "Info: topLevel 'contents' permission set to 'read': .github/workflows/docker.yml:16",
                "Warn: topLevel 'packages' permission set to 'write': .github/workflows/docker.yml:17",
                "Info: topLevel 'contents' permission set to 'read': .github/workflows/labeler.yml:8",
                "Info: topLevel 'contents' permission set to 'read': .github/workflows/mutation.yml:11",
                "Warn: topLevel 'contents' permission set to 'write': .github/workflows/renovate.yml:9",
                "Warn: topLevel 'security-events' permission set to 'write': .github/workflows/scorecard.yml:15",
                "Info: topLevel 'actions' permission set to 'read': .github/workflows/scorecard.yml:13",
                "Info: topLevel 'contents' permission set to 'read': .github/workflows/scorecard.yml:14",
                "Info: topLevel 'actions' permission set to 'read': .github/workflows/security-full.yml:13",
                "Info: topLevel 'contents' permission set to 'read': .github/workflows/security-full.yml:14",
                "Warn: topLevel 'security-events' permission set to 'write': .github/workflows/security-full.yml:15",
                "Info: topLevel 'contents' permission set to 'read': .github/workflows/security-scan.yml:13",
                "Info: topLevel 'contents' permission set to 'read': .github/workflows/strains-merge.yml:13",
                "Info: topLevel 'contents' permission set to 'read': .github/workflows/trivy-scan.yml:13",
                "Warn: topLevel 'security-events' permission set to 'write': .github/workflows/trivy-scan.yml:14",
                "Info: no jobLevel write permissions found"
            ],
            "score": 0,
            "reason": "detected GitHub workflow tokens with excessive permissions",
            "name": "Token-Permissions",
            "documentation": {
                "url": "https://github.com/ossf/scorecard/blob/main/docs/checks.md#token-permissions",
                "short": "Determines if the project's workflows follow the principle of least privilege."
            }
        },
        {
            "details": [
                "Warn: Project is vulnerable to: https://osv.dev/GHSA-3xgq-45jj-v275",
                "Warn: Project is vulnerable to: https://osv.dev/GHSA-67mh-4wv8-2f99",
                "Warn: Project is vulnerable to: https://osv.dev/GHSA-8gc5-j5rx-235r",
                "Warn: Project is vulnerable to: https://osv.dev/GHSA-25h7-pfq9-p65f",
                "Warn: Project is vulnerable to: https://osv.dev/GHSA-pfrx-2q88-qq97",
                "Warn: Project is vulnerable to: https://osv.dev/GHSA-rc47-6667-2j5j",
                "Warn: Project is vulnerable to: https://osv.dev/GHSA-44c6-4v22-4mhx",
                "Warn: Project is vulnerable to: https://osv.dev/GHSA-4x5v-gmq8-25ch",
                "Warn: Project is vulnerable to: https://osv.dev/GHSA-5c6j-r48x-rmvq",
                "Warn: Project is vulnerable to: https://osv.dev/GHSA-52f5-9888-hmc6",
                "Warn: Project is vulnerable to: https://osv.dev/GHSA-7p7h-4mm5-852v"
            ],
            "score": 0,
            "reason": "11 existing vulnerabilities detected",
            "name": "Vulnerabilities",
            "documentation": {
                "url": "https://github.com/ossf/scorecard/blob/main/docs/checks.md#vulnerabilities",
                "short": "Determines if the project has open, known unfixed vulnerabilities."
            }
        }
    ],
    "metadata": null
}