[{"id":14965144,"name":"github.com/meta-llama/PurpleLlama","ecosystem":"go","description":null,"homepage":null,"licenses":"other","normalized_licenses":[],"repository_url":"https://github.com/meta-llama/PurpleLlama","keywords_array":[],"namespace":null,"versions_count":1,"first_release_published_at":"2026-08-14T20:49:01.000Z","latest_release_published_at":"2026-08-14T20:49:01.000Z","latest_release_number":"v0.0.0-20260814204901-114d02388213","last_synced_at":"2026-08-16T15:54:23.234Z","created_at":"2026-08-15T07:22:59.212Z","updated_at":"2026-08-16T15:54:23.234Z","registry_url":"https://pkg.go.dev/github.com/meta-llama/PurpleLlama","install_command":"go get github.com/meta-llama/PurpleLlama","documentation_url":"https://pkg.go.dev/github.com/meta-llama/PurpleLlama#section-documentation","metadata":{},"repo_metadata":{"id":211290309,"uuid":"728399986","full_name":"meta-llama/PurpleLlama","owner":"meta-llama","description":"Set of tools to assess and improve LLM security.","archived":false,"fork":false,"pushed_at":"2026-08-14T20:51:28.000Z","size":43831,"stargazers_count":4353,"open_issues_count":81,"forks_count":766,"subscribers_count":67,"default_branch":"main","last_synced_at":"2026-08-16T15:53:21.217Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":"","language":"Python","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"other","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/meta-llama.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":"CODE_OF_CONDUCT.md","threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"claude":null,"gemini":null,"cursor":null,"copilot":null,"dco":null,"cla":null,"disclosure":null}},"created_at":"2023-12-06T21:29:41.000Z","updated_at":"2026-08-16T13:15:24.000Z","dependencies_parsed_at":"2026-08-16T01:53:49.690Z","dependency_job_id":null,"html_url":"https://github.com/meta-llama/PurpleLlama","commit_stats":{"total_commits":278,"total_committers":32,"mean_commits":8.6875,"dds":0.8309352517985611,"last_synced_commit":"7aef978f57f6bfef6c3be498d3dc6578449f47b0"},"previous_names":["facebookresearch/purplellama","meta-llama/purplellama"],"tags_count":0,"template":false,"template_full_name":null,"purl":"pkg:github/meta-llama/PurpleLlama","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/meta-llama%2FPurpleLlama","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/meta-llama%2FPurpleLlama/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/meta-llama%2FPurpleLlama/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/meta-llama%2FPurpleLlama/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/meta-llama","download_url":"https://codeload.github.com/meta-llama/PurpleLlama/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/meta-llama%2FPurpleLlama/sbom","scorecard":{"id":1239178,"data":{"date":"2025-10-20","repo":{"name":"github.com/meta-llama/PurpleLlama","commit":"edff4e5415fa4bb27a82fd3dec88b7c380a15169"},"scorecard":{"version":"v5.3.1-0.20251020080748-9e702f4c9dc6","commit":"9e702f4c9dc6992745395f4c8ac89942d0cf87ea"},"score":5.4,"checks":[{"name":"Maintained","score":10,"reason":"30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/9e702f4c9dc6992745395f4c8ac89942d0cf87ea/docs/checks.md#maintained"}},{"name":"Code-Review","score":9,"reason":"Found 29/30 approved changesets -- score normalized to 9","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/9e702f4c9dc6992745395f4c8ac89942d0cf87ea/docs/checks.md#code-review"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/9e702f4c9dc6992745395f4c8ac89942d0cf87ea/docs/checks.md#packaging"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/9e702f4c9dc6992745395f4c8ac89942d0cf87ea/docs/checks.md#dangerous-workflow"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Warn: no topLevel permission defined: .github/workflows/lint.yml:1","Info: topLevel 'contents' permission set to 'read': .github/workflows/sites_deployment.yml:9","Warn: no topLevel permission defined: .github/workflows/tests.yml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/9e702f4c9dc6992745395f4c8ac89942d0cf87ea/docs/checks.md#token-permissions"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/9e702f4c9dc6992745395f4c8ac89942d0cf87ea/docs/checks.md#cii-best-practices"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/9e702f4c9dc6992745395f4c8ac89942d0cf87ea/docs/checks.md#binary-artifacts"}},{"name":"Security-Policy","score":0,"reason":"security policy file not detected","details":["Warn: no security policy file detected","Warn: no security file to analyze","Warn: no security file to analyze","Warn: no security file to analyze"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/9e702f4c9dc6992745395f4c8ac89942d0cf87ea/docs/checks.md#security-policy"}},{"name":"License","score":9,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Warn: project license file does not contain an FSF or OSI license."],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/9e702f4c9dc6992745395f4c8ac89942d0cf87ea/docs/checks.md#license"}},{"name":"Fuzzing","score":10,"reason":"project is fuzzed","details":["Info: CppLibFuzzer integration found: CybersecurityBenchmarks/benchmark/autopatch/build/microsnapshots/fake_fuzz.cpp:41"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/9e702f4c9dc6992745395f4c8ac89942d0cf87ea/docs/checks.md#fuzzing"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/9e702f4c9dc6992745395f4c8ac89942d0cf87ea/docs/checks.md#signed-releases"}},{"name":"Branch-Protection","score":3,"reason":"branch protection is not maximal on development and all release branches","details":["Info: 'allow deletion' disabled on branch 'main'","Info: 'force pushes' disabled on branch 'main'","Warn: 'branch protection settings apply to administrators' is disabled on branch 'main'","Warn: 'stale review dismissal' is disabled on branch 'main'","Warn: branch 'main' does not require approvers","Warn: codeowners review is not required on branch 'main'","Warn: 'last push approval' is disabled on branch 'main'","Warn: 'up-to-date branches' is disabled on branch 'main'","Info: status check found to merge onto on branch 'main'","Info: PRs are required in order to make changes on branch 'main'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/9e702f4c9dc6992745395f4c8ac89942d0cf87ea/docs/checks.md#branch-protection"}},{"name":"Pinned-Dependencies","score":2,"reason":"dependency not pinned by hash detected -- score normalized to 2","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/lint.yml:19: update your workflow using https://app.stepsecurity.io/secureworkflow/meta-llama/PurpleLlama/lint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/lint.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/meta-llama/PurpleLlama/lint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sites_deployment.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/meta-llama/PurpleLlama/sites_deployment.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sites_deployment.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/meta-llama/PurpleLlama/sites_deployment.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sites_deployment.yml:32: update your workflow using https://app.stepsecurity.io/secureworkflow/meta-llama/PurpleLlama/sites_deployment.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sites_deployment.yml:59: update your workflow using https://app.stepsecurity.io/secureworkflow/meta-llama/PurpleLlama/sites_deployment.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sites_deployment.yml:73: update your workflow using https://app.stepsecurity.io/secureworkflow/meta-llama/PurpleLlama/sites_deployment.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/tests.yml:19: update your workflow using https://app.stepsecurity.io/secureworkflow/meta-llama/PurpleLlama/tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/tests.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/meta-llama/PurpleLlama/tests.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/tests.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/meta-llama/PurpleLlama/tests.yml/main?enable=pin","Warn: containerImage not pinned by hash: SensitiveDocClassification/Dockerfile:6: pin your Docker image by updating python:3.13-slim to python:3.13-slim@sha256:c4979cc54d0a75b302bec36a571786b447399471f63731bad0cd718d3c4791e8","Warn: pipCommand not pinned by hash: SensitiveDocClassification/Dockerfile:32","Warn: pipCommand not pinned by hash: CybersecurityBenchmarks/scripts/run_lint.sh:25","Warn: pipCommand not pinned by hash: CybersecurityBenchmarks/scripts/run_tests.sh:24","Warn: pipCommand not pinned by hash: LlamaFirewall/scripts/run_tests.sh:24","Info:   0 out of   9 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of   1 third-party GitHubAction dependencies pinned","Info:   0 out of   1 containerImage dependencies pinned","Info:   0 out of   4 pipCommand dependencies pinned","Info:   2 out of   2 npmCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/9e702f4c9dc6992745395f4c8ac89942d0cf87ea/docs/checks.md#pinned-dependencies"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 1 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/9e702f4c9dc6992745395f4c8ac89942d0cf87ea/docs/checks.md#sast"}},{"name":"Vulnerabilities","score":1,"reason":"9 existing vulnerabilities detected","details":["Warn: Project is vulnerable to: PYSEC-2017-74","Warn: Project is vulnerable to: GHSA-jfx9-29x2-rv3j","Warn: Project is vulnerable to: GHSA-vr63-x8vc-m265","Warn: Project is vulnerable to: GHSA-v6h2-p8h4-qcjw","Warn: Project is vulnerable to: GHSA-76c9-3jph-rj3q","Warn: Project is vulnerable to: GHSA-4v9v-hfq4-rm2v","Warn: Project is vulnerable to: GHSA-9jgg-88mc-972h","Warn: Project is vulnerable to: GHSA-8qvm-5x2c-j2w7","Warn: Project is vulnerable to: GHSA-9hjg-9r4m-mvj7"],"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/9e702f4c9dc6992745395f4c8ac89942d0cf87ea/docs/checks.md#vulnerabilities"}}]},"last_synced_at":"2025-10-24T22:22:09.240Z","repository_id":211290309,"created_at":"2025-10-24T22:22:09.241Z","updated_at":"2025-10-24T22:22:09.241Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":36718488,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-08-06T04:43:03.162Z","status":"online","status_checked_at":"2026-08-16T02:00:06.462Z","response_time":62,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"meta-llama","name":"Meta Llama","uuid":"153379578","kind":"organization","description":"","email":null,"website":"https://llama.meta.com/","location":null,"twitter":null,"company":null,"icon_url":"https://avatars.githubusercontent.com/u/153379578?v=4","repositories_count":13,"last_synced_at":"2025-03-01T03:31:44.519Z","metadata":{"has_sponsors_listing":false},"html_url":"https://github.com/meta-llama","funding_links":[],"total_stars":134609,"followers":7424,"following":0,"created_at":"2024-03-13T20:14:28.282Z","updated_at":"2025-03-01T03:31:44.519Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/meta-llama","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/meta-llama/repositories"},"tags":[]},"repo_metadata_updated_at":"2026-08-16T15:53:36.601Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":4.768775050067093,"dependent_packages_count":4.4685927556241225,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":4.618683902845608},"purl":"pkg:golang/github.com/meta-llama/%21purple%21llama","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/go/github.com/meta-llama/PurpleLlama","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/go/github.com/meta-llama/PurpleLlama","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/go/github.com/meta-llama/PurpleLlama/dependencies","status":"removed","funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-08-16T01:42:03.444Z","issues_count":74,"pull_requests_count":97,"avg_time_to_close_issue":2381610.7,"avg_time_to_close_pull_request":1299260.9841269841,"issues_closed_count":40,"pull_requests_closed_count":63,"pull_request_authors_count":47,"issue_authors_count":69,"avg_comments_per_issue":0.9864864864864865,"avg_comments_per_pull_request":1.7216494845360826,"merged_pull_requests_count":6,"bot_issues_count":0,"bot_pull_requests_count":8,"past_year_issues_count":11,"past_year_pull_requests_count":28,"past_year_avg_time_to_close_issue":89.0,"past_year_avg_time_to_close_pull_request":1077791.7142857143,"past_year_issues_closed_count":2,"past_year_pull_requests_closed_count":7,"past_year_pull_request_authors_count":17,"past_year_issue_authors_count":11,"past_year_avg_comments_per_issue":0.45454545454545453,"past_year_avg_comments_per_pull_request":1.1071428571428572,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":8,"past_year_merged_pull_requests_count":2,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/meta-llama%2FPurpleLlama/issues","maintainers":[{"login":"SimonWan","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/SimonWan"},{"login":"litesaber15","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/litesaber15"}],"active_maintainers":[{"login":"SimonWan","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/SimonWan"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fmeta-llama%2FPurpleLlama/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fmeta-llama%2FPurpleLlama/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fmeta-llama%2FPurpleLlama/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fmeta-llama%2FPurpleLlama/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fmeta-llama%2FPurpleLlama/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fmeta-llama%2FPurpleLlama/codemeta","maintainers":[],"registry":{"name":"proxy.golang.org","url":"https://proxy.golang.org","ecosystem":"go","default":true,"packages_count":2282202,"maintainers_count":0,"namespaces_count":839585,"keywords_count":126348,"github":"golang","metadata":{"funded_packages_count":70969,"sync_missing_packages_cursor":{"timestamp":"2026-08-17T00:00:58.969562Z","path":"github.com/Tektoncd/operator","version":"v0.78.0"},"rate_limit":1},"icon_url":"https://github.com/golang.png","created_at":"2022-04-04T15:19:22.939Z","updated_at":"2026-09-02T05:03:03.375Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/namespaces"}},{"id":9748568,"name":"codeshield","ecosystem":"pypi","description":"Shield against LLM generated insecure code","homepage":"https://github.com/meta-llama/PurpleLlama","licenses":"MIT License","normalized_licenses":["MIT"],"repository_url":"https://github.com/meta-llama/PurpleLlama","keywords_array":[],"namespace":null,"versions_count":2,"first_release_published_at":"2024-04-18T15:25:52.000Z","latest_release_published_at":"2024-04-19T15:10:33.000Z","latest_release_number":"1.0.1","last_synced_at":"2026-08-16T01:44:24.010Z","created_at":"2024-04-18T15:31:31.586Z","updated_at":"2026-08-16T15:53:36.606Z","registry_url":"https://pypi.org/project/codeshield/","install_command":"pip install codeshield --index-url https://pypi.org/simple","documentation_url":"https://codeshield.readthedocs.io/","metadata":{"funding":null,"documentation":null,"classifiers":["License :: OSI Approved :: MIT License","Operating System :: OS Independent","Programming Language :: Python :: 3"],"normalized_name":"codeshield","project_status":null},"repo_metadata":{"id":211290309,"uuid":"728399986","full_name":"meta-llama/PurpleLlama","owner":"meta-llama","description":"Set of tools to assess and improve LLM security.","archived":false,"fork":false,"pushed_at":"2026-08-14T20:51:28.000Z","size":43831,"stargazers_count":4353,"open_issues_count":81,"forks_count":766,"subscribers_count":67,"default_branch":"main","last_synced_at":"2026-08-16T15:53:21.217Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":"","language":"Python","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"other","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/meta-llama.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":"CODE_OF_CONDUCT.md","threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"claude":null,"gemini":null,"cursor":null,"copilot":null,"dco":null,"cla":null,"disclosure":null}},"created_at":"2023-12-06T21:29:41.000Z","updated_at":"2026-08-16T13:15:24.000Z","dependencies_parsed_at":"2026-08-16T01:53:49.690Z","dependency_job_id":null,"html_url":"https://github.com/meta-llama/PurpleLlama","commit_stats":{"total_commits":278,"total_committers":32,"mean_commits":8.6875,"dds":0.8309352517985611,"last_synced_commit":"7aef978f57f6bfef6c3be498d3dc6578449f47b0"},"previous_names":["facebookresearch/purplellama","meta-llama/purplellama"],"tags_count":0,"template":false,"template_full_name":null,"purl":"pkg:github/meta-llama/PurpleLlama","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/meta-llama%2FPurpleLlama","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/meta-llama%2FPurpleLlama/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/meta-llama%2FPurpleLlama/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/meta-llama%2FPurpleLlama/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/meta-llama","download_url":"https://codeload.github.com/meta-llama/PurpleLlama/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/meta-llama%2FPurpleLlama/sbom","scorecard":{"id":1239178,"data":{"date":"2025-10-20","repo":{"name":"github.com/meta-llama/PurpleLlama","commit":"edff4e5415fa4bb27a82fd3dec88b7c380a15169"},"scorecard":{"version":"v5.3.1-0.20251020080748-9e702f4c9dc6","commit":"9e702f4c9dc6992745395f4c8ac89942d0cf87ea"},"score":5.4,"checks":[{"name":"Maintained","score":10,"reason":"30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/9e702f4c9dc6992745395f4c8ac89942d0cf87ea/docs/checks.md#maintained"}},{"name":"Code-Review","score":9,"reason":"Found 29/30 approved changesets -- score normalized to 9","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/9e702f4c9dc6992745395f4c8ac89942d0cf87ea/docs/checks.md#code-review"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/9e702f4c9dc6992745395f4c8ac89942d0cf87ea/docs/checks.md#packaging"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/9e702f4c9dc6992745395f4c8ac89942d0cf87ea/docs/checks.md#dangerous-workflow"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Warn: no topLevel permission defined: .github/workflows/lint.yml:1","Info: topLevel 'contents' permission set to 'read': .github/workflows/sites_deployment.yml:9","Warn: no topLevel permission defined: .github/workflows/tests.yml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/9e702f4c9dc6992745395f4c8ac89942d0cf87ea/docs/checks.md#token-permissions"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/9e702f4c9dc6992745395f4c8ac89942d0cf87ea/docs/checks.md#cii-best-practices"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/9e702f4c9dc6992745395f4c8ac89942d0cf87ea/docs/checks.md#binary-artifacts"}},{"name":"Security-Policy","score":0,"reason":"security policy file not detected","details":["Warn: no security policy file detected","Warn: no security file to analyze","Warn: no security file to analyze","Warn: no security file to analyze"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/9e702f4c9dc6992745395f4c8ac89942d0cf87ea/docs/checks.md#security-policy"}},{"name":"License","score":9,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Warn: project license file does not contain an FSF or OSI license."],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/9e702f4c9dc6992745395f4c8ac89942d0cf87ea/docs/checks.md#license"}},{"name":"Fuzzing","score":10,"reason":"project is fuzzed","details":["Info: CppLibFuzzer integration found: CybersecurityBenchmarks/benchmark/autopatch/build/microsnapshots/fake_fuzz.cpp:41"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/9e702f4c9dc6992745395f4c8ac89942d0cf87ea/docs/checks.md#fuzzing"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/9e702f4c9dc6992745395f4c8ac89942d0cf87ea/docs/checks.md#signed-releases"}},{"name":"Branch-Protection","score":3,"reason":"branch protection is not maximal on development and all release branches","details":["Info: 'allow deletion' disabled on branch 'main'","Info: 'force pushes' disabled on branch 'main'","Warn: 'branch protection settings apply to administrators' is disabled on branch 'main'","Warn: 'stale review dismissal' is disabled on branch 'main'","Warn: branch 'main' does not require approvers","Warn: codeowners review is not required on branch 'main'","Warn: 'last push approval' is disabled on branch 'main'","Warn: 'up-to-date branches' is disabled on branch 'main'","Info: status check found to merge onto on branch 'main'","Info: PRs are required in order to make changes on branch 'main'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/9e702f4c9dc6992745395f4c8ac89942d0cf87ea/docs/checks.md#branch-protection"}},{"name":"Pinned-Dependencies","score":2,"reason":"dependency not pinned by hash detected -- score normalized to 2","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/lint.yml:19: update your workflow using https://app.stepsecurity.io/secureworkflow/meta-llama/PurpleLlama/lint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/lint.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/meta-llama/PurpleLlama/lint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sites_deployment.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/meta-llama/PurpleLlama/sites_deployment.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sites_deployment.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/meta-llama/PurpleLlama/sites_deployment.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sites_deployment.yml:32: update your workflow using https://app.stepsecurity.io/secureworkflow/meta-llama/PurpleLlama/sites_deployment.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sites_deployment.yml:59: update your workflow using https://app.stepsecurity.io/secureworkflow/meta-llama/PurpleLlama/sites_deployment.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sites_deployment.yml:73: update your workflow using https://app.stepsecurity.io/secureworkflow/meta-llama/PurpleLlama/sites_deployment.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/tests.yml:19: update your workflow using https://app.stepsecurity.io/secureworkflow/meta-llama/PurpleLlama/tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/tests.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/meta-llama/PurpleLlama/tests.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/tests.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/meta-llama/PurpleLlama/tests.yml/main?enable=pin","Warn: containerImage not pinned by hash: SensitiveDocClassification/Dockerfile:6: pin your Docker image by updating python:3.13-slim to python:3.13-slim@sha256:c4979cc54d0a75b302bec36a571786b447399471f63731bad0cd718d3c4791e8","Warn: pipCommand not pinned by hash: SensitiveDocClassification/Dockerfile:32","Warn: pipCommand not pinned by hash: CybersecurityBenchmarks/scripts/run_lint.sh:25","Warn: pipCommand not pinned by hash: CybersecurityBenchmarks/scripts/run_tests.sh:24","Warn: pipCommand not pinned by hash: LlamaFirewall/scripts/run_tests.sh:24","Info:   0 out of   9 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of   1 third-party GitHubAction dependencies pinned","Info:   0 out of   1 containerImage dependencies pinned","Info:   0 out of   4 pipCommand dependencies pinned","Info:   2 out of   2 npmCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/9e702f4c9dc6992745395f4c8ac89942d0cf87ea/docs/checks.md#pinned-dependencies"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 1 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/9e702f4c9dc6992745395f4c8ac89942d0cf87ea/docs/checks.md#sast"}},{"name":"Vulnerabilities","score":1,"reason":"9 existing vulnerabilities detected","details":["Warn: Project is vulnerable to: PYSEC-2017-74","Warn: Project is vulnerable to: GHSA-jfx9-29x2-rv3j","Warn: Project is vulnerable to: GHSA-vr63-x8vc-m265","Warn: Project is vulnerable to: GHSA-v6h2-p8h4-qcjw","Warn: Project is vulnerable to: GHSA-76c9-3jph-rj3q","Warn: Project is vulnerable to: GHSA-4v9v-hfq4-rm2v","Warn: Project is vulnerable to: GHSA-9jgg-88mc-972h","Warn: Project is vulnerable to: GHSA-8qvm-5x2c-j2w7","Warn: Project is vulnerable to: GHSA-9hjg-9r4m-mvj7"],"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/9e702f4c9dc6992745395f4c8ac89942d0cf87ea/docs/checks.md#vulnerabilities"}}]},"last_synced_at":"2025-10-24T22:22:09.240Z","repository_id":211290309,"created_at":"2025-10-24T22:22:09.241Z","updated_at":"2025-10-24T22:22:09.241Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":36718488,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-08-06T04:43:03.162Z","status":"online","status_checked_at":"2026-08-16T02:00:06.462Z","response_time":62,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"meta-llama","name":"Meta Llama","uuid":"153379578","kind":"organization","description":"","email":null,"website":"https://llama.meta.com/","location":null,"twitter":null,"company":null,"icon_url":"https://avatars.githubusercontent.com/u/153379578?v=4","repositories_count":13,"last_synced_at":"2025-03-01T03:31:44.519Z","metadata":{"has_sponsors_listing":false},"html_url":"https://github.com/meta-llama","funding_links":[],"total_stars":134609,"followers":7424,"following":0,"created_at":"2024-03-13T20:14:28.282Z","updated_at":"2025-03-01T03:31:44.519Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/meta-llama","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/meta-llama/repositories"},"tags":[]},"repo_metadata_updated_at":"2026-08-16T15:53:36.606Z","dependent_packages_count":0,"downloads":76915,"downloads_period":"last-month","dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":62.8963721222665,"dependent_packages_count":9.533471820583397,"stargazers_count":3.2786651123682757,"forks_count":5.194522347799853,"docker_downloads_count":null,"average":20.225757850754505},"purl":"pkg:pypi/codeshield","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/pypi/codeshield","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/pypi/codeshield","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/pypi/codeshield/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-08-16T01:42:03.444Z","issues_count":74,"pull_requests_count":97,"avg_time_to_close_issue":2381610.7,"avg_time_to_close_pull_request":1299260.9841269841,"issues_closed_count":40,"pull_requests_closed_count":63,"pull_request_authors_count":47,"issue_authors_count":69,"avg_comments_per_issue":0.9864864864864865,"avg_comments_per_pull_request":1.7216494845360826,"merged_pull_requests_count":6,"bot_issues_count":0,"bot_pull_requests_count":8,"past_year_issues_count":11,"past_year_pull_requests_count":28,"past_year_avg_time_to_close_issue":89.0,"past_year_avg_time_to_close_pull_request":1077791.7142857143,"past_year_issues_closed_count":2,"past_year_pull_requests_closed_count":7,"past_year_pull_request_authors_count":17,"past_year_issue_authors_count":11,"past_year_avg_comments_per_issue":0.45454545454545453,"past_year_avg_comments_per_pull_request":1.1071428571428572,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":8,"past_year_merged_pull_requests_count":2,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/meta-llama%2FPurpleLlama/issues","maintainers":[{"login":"SimonWan","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/SimonWan"},{"login":"litesaber15","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/litesaber15"}],"active_maintainers":[{"login":"SimonWan","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/SimonWan"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/pypi.org/packages/codeshield/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/pypi.org/packages/codeshield/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/pypi.org/packages/codeshield/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/pypi.org/packages/codeshield/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/pypi.org/packages/codeshield/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/pypi.org/packages/codeshield/codemeta","maintainers":[{"uuid":"tryrobbo","login":"tryrobbo","name":null,"email":null,"url":null,"packages_count":2,"html_url":"https://pypi.org/user/tryrobbo/","role":null,"created_at":"2024-04-18T15:31:33.090Z","updated_at":"2024-04-18T15:31:33.090Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/pypi.org/maintainers/tryrobbo/packages"}],"registry":{"name":"pypi.org","url":"https://pypi.org","ecosystem":"pypi","default":true,"packages_count":932474,"maintainers_count":400731,"namespaces_count":0,"keywords_count":313247,"github":"pypi","metadata":{"funded_packages_count":59254,"rate_limit":2},"icon_url":"https://github.com/pypi.png","created_at":"2022-04-04T15:19:23.364Z","updated_at":"2026-09-02T05:03:33.106Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/pypi.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/pypi.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/pypi.org/namespaces"}},{"id":11577684,"name":"llamafirewall","ecosystem":"pypi","description":"LlamaFirewall is a framework designed to detect and mitigate AI centric security risks, supporting multiple layers of inputs and outputs, such as typical LLM chat and more advanced multi-step agentic operations. It consists of a set of scanners for different security risks.","homepage":"https://github.com/meta-llama/PurpleLlama/tree/main/LlamaFirewall","licenses":"other","normalized_licenses":["Other"],"repository_url":"https://github.com/meta-llama/PurpleLlama","keywords_array":[],"namespace":null,"versions_count":13,"first_release_published_at":"2025-04-23T19:28:55.000Z","latest_release_published_at":"2025-05-29T16:49:12.000Z","latest_release_number":"1.0.3","last_synced_at":"2026-08-16T01:45:08.975Z","created_at":"2025-04-23T19:46:43.974Z","updated_at":"2026-08-16T15:53:36.602Z","registry_url":"https://pypi.org/project/llamafirewall/","install_command":"pip install llamafirewall --index-url https://pypi.org/simple","documentation_url":"https://llamafirewall.readthedocs.io/","metadata":{"funding":null,"documentation":null,"classifiers":[],"normalized_name":"llamafirewall","project_status":null},"repo_metadata":{"id":211290309,"uuid":"728399986","full_name":"meta-llama/PurpleLlama","owner":"meta-llama","description":"Set of tools to assess and improve LLM security.","archived":false,"fork":false,"pushed_at":"2026-08-14T20:51:28.000Z","size":43831,"stargazers_count":4353,"open_issues_count":81,"forks_count":766,"subscribers_count":67,"default_branch":"main","last_synced_at":"2026-08-16T15:53:21.217Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":"","language":"Python","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"other","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/meta-llama.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":"CODE_OF_CONDUCT.md","threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"claude":null,"gemini":null,"cursor":null,"copilot":null,"dco":null,"cla":null,"disclosure":null}},"created_at":"2023-12-06T21:29:41.000Z","updated_at":"2026-08-16T13:15:24.000Z","dependencies_parsed_at":"2026-08-16T01:53:49.690Z","dependency_job_id":null,"html_url":"https://github.com/meta-llama/PurpleLlama","commit_stats":{"total_commits":278,"total_committers":32,"mean_commits":8.6875,"dds":0.8309352517985611,"last_synced_commit":"7aef978f57f6bfef6c3be498d3dc6578449f47b0"},"previous_names":["facebookresearch/purplellama","meta-llama/purplellama"],"tags_count":0,"template":false,"template_full_name":null,"purl":"pkg:github/meta-llama/PurpleLlama","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/meta-llama%2FPurpleLlama","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/meta-llama%2FPurpleLlama/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/meta-llama%2FPurpleLlama/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/meta-llama%2FPurpleLlama/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/meta-llama","download_url":"https://codeload.github.com/meta-llama/PurpleLlama/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/meta-llama%2FPurpleLlama/sbom","scorecard":{"id":1239178,"data":{"date":"2025-10-20","repo":{"name":"github.com/meta-llama/PurpleLlama","commit":"edff4e5415fa4bb27a82fd3dec88b7c380a15169"},"scorecard":{"version":"v5.3.1-0.20251020080748-9e702f4c9dc6","commit":"9e702f4c9dc6992745395f4c8ac89942d0cf87ea"},"score":5.4,"checks":[{"name":"Maintained","score":10,"reason":"30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/9e702f4c9dc6992745395f4c8ac89942d0cf87ea/docs/checks.md#maintained"}},{"name":"Code-Review","score":9,"reason":"Found 29/30 approved changesets -- score normalized to 9","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/9e702f4c9dc6992745395f4c8ac89942d0cf87ea/docs/checks.md#code-review"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/9e702f4c9dc6992745395f4c8ac89942d0cf87ea/docs/checks.md#packaging"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/9e702f4c9dc6992745395f4c8ac89942d0cf87ea/docs/checks.md#dangerous-workflow"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Warn: no topLevel permission defined: .github/workflows/lint.yml:1","Info: topLevel 'contents' permission set to 'read': .github/workflows/sites_deployment.yml:9","Warn: no topLevel permission defined: .github/workflows/tests.yml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/9e702f4c9dc6992745395f4c8ac89942d0cf87ea/docs/checks.md#token-permissions"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/9e702f4c9dc6992745395f4c8ac89942d0cf87ea/docs/checks.md#cii-best-practices"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/9e702f4c9dc6992745395f4c8ac89942d0cf87ea/docs/checks.md#binary-artifacts"}},{"name":"Security-Policy","score":0,"reason":"security policy file not detected","details":["Warn: no security policy file detected","Warn: no security file to analyze","Warn: no security file to analyze","Warn: no security file to analyze"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/9e702f4c9dc6992745395f4c8ac89942d0cf87ea/docs/checks.md#security-policy"}},{"name":"License","score":9,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Warn: project license file does not contain an FSF or OSI license."],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/9e702f4c9dc6992745395f4c8ac89942d0cf87ea/docs/checks.md#license"}},{"name":"Fuzzing","score":10,"reason":"project is fuzzed","details":["Info: CppLibFuzzer integration found: CybersecurityBenchmarks/benchmark/autopatch/build/microsnapshots/fake_fuzz.cpp:41"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/9e702f4c9dc6992745395f4c8ac89942d0cf87ea/docs/checks.md#fuzzing"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/9e702f4c9dc6992745395f4c8ac89942d0cf87ea/docs/checks.md#signed-releases"}},{"name":"Branch-Protection","score":3,"reason":"branch protection is not maximal on development and all release branches","details":["Info: 'allow deletion' disabled on branch 'main'","Info: 'force pushes' disabled on branch 'main'","Warn: 'branch protection settings apply to administrators' is disabled on branch 'main'","Warn: 'stale review dismissal' is disabled on branch 'main'","Warn: branch 'main' does not require approvers","Warn: codeowners review is not required on branch 'main'","Warn: 'last push approval' is disabled on branch 'main'","Warn: 'up-to-date branches' is disabled on branch 'main'","Info: status check found to merge onto on branch 'main'","Info: PRs are required in order to make changes on branch 'main'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/9e702f4c9dc6992745395f4c8ac89942d0cf87ea/docs/checks.md#branch-protection"}},{"name":"Pinned-Dependencies","score":2,"reason":"dependency not pinned by hash detected -- score normalized to 2","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/lint.yml:19: update your workflow using https://app.stepsecurity.io/secureworkflow/meta-llama/PurpleLlama/lint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/lint.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/meta-llama/PurpleLlama/lint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sites_deployment.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/meta-llama/PurpleLlama/sites_deployment.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sites_deployment.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/meta-llama/PurpleLlama/sites_deployment.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sites_deployment.yml:32: update your workflow using https://app.stepsecurity.io/secureworkflow/meta-llama/PurpleLlama/sites_deployment.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sites_deployment.yml:59: update your workflow using https://app.stepsecurity.io/secureworkflow/meta-llama/PurpleLlama/sites_deployment.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sites_deployment.yml:73: update your workflow using https://app.stepsecurity.io/secureworkflow/meta-llama/PurpleLlama/sites_deployment.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/tests.yml:19: update your workflow using https://app.stepsecurity.io/secureworkflow/meta-llama/PurpleLlama/tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/tests.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/meta-llama/PurpleLlama/tests.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/tests.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/meta-llama/PurpleLlama/tests.yml/main?enable=pin","Warn: containerImage not pinned by hash: SensitiveDocClassification/Dockerfile:6: pin your Docker image by updating python:3.13-slim to python:3.13-slim@sha256:c4979cc54d0a75b302bec36a571786b447399471f63731bad0cd718d3c4791e8","Warn: pipCommand not pinned by hash: SensitiveDocClassification/Dockerfile:32","Warn: pipCommand not pinned by hash: CybersecurityBenchmarks/scripts/run_lint.sh:25","Warn: pipCommand not pinned by hash: CybersecurityBenchmarks/scripts/run_tests.sh:24","Warn: pipCommand not pinned by hash: LlamaFirewall/scripts/run_tests.sh:24","Info:   0 out of   9 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of   1 third-party GitHubAction dependencies pinned","Info:   0 out of   1 containerImage dependencies pinned","Info:   0 out of   4 pipCommand dependencies pinned","Info:   2 out of   2 npmCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/9e702f4c9dc6992745395f4c8ac89942d0cf87ea/docs/checks.md#pinned-dependencies"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 1 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/9e702f4c9dc6992745395f4c8ac89942d0cf87ea/docs/checks.md#sast"}},{"name":"Vulnerabilities","score":1,"reason":"9 existing vulnerabilities detected","details":["Warn: Project is vulnerable to: PYSEC-2017-74","Warn: Project is vulnerable to: GHSA-jfx9-29x2-rv3j","Warn: Project is vulnerable to: GHSA-vr63-x8vc-m265","Warn: Project is vulnerable to: GHSA-v6h2-p8h4-qcjw","Warn: Project is vulnerable to: GHSA-76c9-3jph-rj3q","Warn: Project is vulnerable to: GHSA-4v9v-hfq4-rm2v","Warn: Project is vulnerable to: GHSA-9jgg-88mc-972h","Warn: Project is vulnerable to: GHSA-8qvm-5x2c-j2w7","Warn: Project is vulnerable to: GHSA-9hjg-9r4m-mvj7"],"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/9e702f4c9dc6992745395f4c8ac89942d0cf87ea/docs/checks.md#vulnerabilities"}}]},"last_synced_at":"2025-10-24T22:22:09.240Z","repository_id":211290309,"created_at":"2025-10-24T22:22:09.241Z","updated_at":"2025-10-24T22:22:09.241Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":36718488,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-08-06T04:43:03.162Z","status":"online","status_checked_at":"2026-08-16T02:00:06.462Z","response_time":62,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"meta-llama","name":"Meta Llama","uuid":"153379578","kind":"organization","description":"","email":null,"website":"https://llama.meta.com/","location":null,"twitter":null,"company":null,"icon_url":"https://avatars.githubusercontent.com/u/153379578?v=4","repositories_count":13,"last_synced_at":"2025-03-01T03:31:44.519Z","metadata":{"has_sponsors_listing":false},"html_url":"https://github.com/meta-llama","funding_links":[],"total_stars":134609,"followers":7424,"following":0,"created_at":"2024-03-13T20:14:28.282Z","updated_at":"2025-03-01T03:31:44.519Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/meta-llama","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/meta-llama/repositories"},"tags":[]},"repo_metadata_updated_at":"2026-08-16T15:53:36.602Z","dependent_packages_count":0,"downloads":4476,"downloads_period":"last-month","dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":52.11029324468717,"dependent_packages_count":9.25145435118129,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":30.68087379793423},"purl":"pkg:pypi/llamafirewall","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/pypi/llamafirewall","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/pypi/llamafirewall","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/pypi/llamafirewall/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-08-16T01:42:03.444Z","issues_count":74,"pull_requests_count":97,"avg_time_to_close_issue":2381610.7,"avg_time_to_close_pull_request":1299260.9841269841,"issues_closed_count":40,"pull_requests_closed_count":63,"pull_request_authors_count":47,"issue_authors_count":69,"avg_comments_per_issue":0.9864864864864865,"avg_comments_per_pull_request":1.7216494845360826,"merged_pull_requests_count":6,"bot_issues_count":0,"bot_pull_requests_count":8,"past_year_issues_count":11,"past_year_pull_requests_count":28,"past_year_avg_time_to_close_issue":89.0,"past_year_avg_time_to_close_pull_request":1077791.7142857143,"past_year_issues_closed_count":2,"past_year_pull_requests_closed_count":7,"past_year_pull_request_authors_count":17,"past_year_issue_authors_count":11,"past_year_avg_comments_per_issue":0.45454545454545453,"past_year_avg_comments_per_pull_request":1.1071428571428572,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":8,"past_year_merged_pull_requests_count":2,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/meta-llama%2FPurpleLlama/issues","maintainers":[{"login":"SimonWan","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/SimonWan"},{"login":"litesaber15","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/litesaber15"}],"active_maintainers":[{"login":"SimonWan","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/SimonWan"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/pypi.org/packages/llamafirewall/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/pypi.org/packages/llamafirewall/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/pypi.org/packages/llamafirewall/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/pypi.org/packages/llamafirewall/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/pypi.org/packages/llamafirewall/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/pypi.org/packages/llamafirewall/codemeta","maintainers":[{"uuid":"SimonWan","login":"SimonWan","name":null,"email":null,"url":null,"packages_count":1,"html_url":"https://pypi.org/user/SimonWan/","role":"Owner","created_at":"2025-04-23T20:01:22.215Z","updated_at":"2025-04-23T20:01:22.215Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/pypi.org/maintainers/SimonWan/packages"},{"uuid":"amontilla0","login":"amontilla0","name":null,"email":null,"url":null,"packages_count":1,"html_url":"https://pypi.org/user/amontilla0/","role":"Maintainer","created_at":"2025-05-29T17:05:09.640Z","updated_at":"2025-05-29T17:05:09.640Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/pypi.org/maintainers/amontilla0/packages"}],"registry":{"name":"pypi.org","url":"https://pypi.org","ecosystem":"pypi","default":true,"packages_count":932474,"maintainers_count":400731,"namespaces_count":0,"keywords_count":313247,"github":"pypi","metadata":{"funded_packages_count":59254,"rate_limit":2},"icon_url":"https://github.com/pypi.png","created_at":"2022-04-04T15:19:23.364Z","updated_at":"2026-09-02T05:03:33.106Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/pypi.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/pypi.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/pypi.org/namespaces"}},{"id":14962527,"name":"github.com/meta-llama/purplellama","ecosystem":"go","description":null,"homepage":null,"licenses":"other","normalized_licenses":[],"repository_url":"https://github.com/meta-llama/purplellama","keywords_array":[],"namespace":null,"versions_count":1,"first_release_published_at":"2026-08-14T20:49:01.000Z","latest_release_published_at":"2026-08-14T20:49:01.000Z","latest_release_number":"v0.0.0-20260814204901-114d02388213","last_synced_at":"2026-08-16T15:54:20.456Z","created_at":"2026-08-15T02:22:30.543Z","updated_at":"2026-08-16T15:54:20.456Z","registry_url":"https://pkg.go.dev/github.com/meta-llama/purplellama","install_command":"go get github.com/meta-llama/purplellama","documentation_url":"https://pkg.go.dev/github.com/meta-llama/purplellama#section-documentation","metadata":{},"repo_metadata":{"id":211290309,"uuid":"728399986","full_name":"meta-llama/PurpleLlama","owner":"meta-llama","description":"Set of tools to assess and improve LLM security.","archived":false,"fork":false,"pushed_at":"2026-08-14T20:51:28.000Z","size":43831,"stargazers_count":4353,"open_issues_count":81,"forks_count":766,"subscribers_count":67,"default_branch":"main","last_synced_at":"2026-08-16T15:53:21.217Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":"","language":"Python","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"other","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/meta-llama.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":"CODE_OF_CONDUCT.md","threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"claude":null,"gemini":null,"cursor":null,"copilot":null,"dco":null,"cla":null,"disclosure":null}},"created_at":"2023-12-06T21:29:41.000Z","updated_at":"2026-08-16T13:15:24.000Z","dependencies_parsed_at":"2026-08-16T01:53:49.690Z","dependency_job_id":null,"html_url":"https://github.com/meta-llama/PurpleLlama","commit_stats":{"total_commits":278,"total_committers":32,"mean_commits":8.6875,"dds":0.8309352517985611,"last_synced_commit":"7aef978f57f6bfef6c3be498d3dc6578449f47b0"},"previous_names":["facebookresearch/purplellama","meta-llama/purplellama"],"tags_count":0,"template":false,"template_full_name":null,"purl":"pkg:github/meta-llama/PurpleLlama","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/meta-llama%2FPurpleLlama","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/meta-llama%2FPurpleLlama/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/meta-llama%2FPurpleLlama/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/meta-llama%2FPurpleLlama/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/meta-llama","download_url":"https://codeload.github.com/meta-llama/PurpleLlama/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/meta-llama%2FPurpleLlama/sbom","scorecard":{"id":1239178,"data":{"date":"2025-10-20","repo":{"name":"github.com/meta-llama/PurpleLlama","commit":"edff4e5415fa4bb27a82fd3dec88b7c380a15169"},"scorecard":{"version":"v5.3.1-0.20251020080748-9e702f4c9dc6","commit":"9e702f4c9dc6992745395f4c8ac89942d0cf87ea"},"score":5.4,"checks":[{"name":"Maintained","score":10,"reason":"30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/9e702f4c9dc6992745395f4c8ac89942d0cf87ea/docs/checks.md#maintained"}},{"name":"Code-Review","score":9,"reason":"Found 29/30 approved changesets -- score normalized to 9","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/9e702f4c9dc6992745395f4c8ac89942d0cf87ea/docs/checks.md#code-review"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/9e702f4c9dc6992745395f4c8ac89942d0cf87ea/docs/checks.md#packaging"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/9e702f4c9dc6992745395f4c8ac89942d0cf87ea/docs/checks.md#dangerous-workflow"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Warn: no topLevel permission defined: .github/workflows/lint.yml:1","Info: topLevel 'contents' permission set to 'read': .github/workflows/sites_deployment.yml:9","Warn: no topLevel permission defined: .github/workflows/tests.yml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/9e702f4c9dc6992745395f4c8ac89942d0cf87ea/docs/checks.md#token-permissions"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/9e702f4c9dc6992745395f4c8ac89942d0cf87ea/docs/checks.md#cii-best-practices"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/9e702f4c9dc6992745395f4c8ac89942d0cf87ea/docs/checks.md#binary-artifacts"}},{"name":"Security-Policy","score":0,"reason":"security policy file not detected","details":["Warn: no security policy file detected","Warn: no security file to analyze","Warn: no security file to analyze","Warn: no security file to analyze"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/9e702f4c9dc6992745395f4c8ac89942d0cf87ea/docs/checks.md#security-policy"}},{"name":"License","score":9,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Warn: project license file does not contain an FSF or OSI license."],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/9e702f4c9dc6992745395f4c8ac89942d0cf87ea/docs/checks.md#license"}},{"name":"Fuzzing","score":10,"reason":"project is fuzzed","details":["Info: CppLibFuzzer integration found: CybersecurityBenchmarks/benchmark/autopatch/build/microsnapshots/fake_fuzz.cpp:41"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/9e702f4c9dc6992745395f4c8ac89942d0cf87ea/docs/checks.md#fuzzing"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/9e702f4c9dc6992745395f4c8ac89942d0cf87ea/docs/checks.md#signed-releases"}},{"name":"Branch-Protection","score":3,"reason":"branch protection is not maximal on development and all release branches","details":["Info: 'allow deletion' disabled on branch 'main'","Info: 'force pushes' disabled on branch 'main'","Warn: 'branch protection settings apply to administrators' is disabled on branch 'main'","Warn: 'stale review dismissal' is disabled on branch 'main'","Warn: branch 'main' does not require approvers","Warn: codeowners review is not required on branch 'main'","Warn: 'last push approval' is disabled on branch 'main'","Warn: 'up-to-date branches' is disabled on branch 'main'","Info: status check found to merge onto on branch 'main'","Info: PRs are required in order to make changes on branch 'main'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/9e702f4c9dc6992745395f4c8ac89942d0cf87ea/docs/checks.md#branch-protection"}},{"name":"Pinned-Dependencies","score":2,"reason":"dependency not pinned by hash detected -- score normalized to 2","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/lint.yml:19: update your workflow using https://app.stepsecurity.io/secureworkflow/meta-llama/PurpleLlama/lint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/lint.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/meta-llama/PurpleLlama/lint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sites_deployment.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/meta-llama/PurpleLlama/sites_deployment.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sites_deployment.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/meta-llama/PurpleLlama/sites_deployment.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sites_deployment.yml:32: update your workflow using https://app.stepsecurity.io/secureworkflow/meta-llama/PurpleLlama/sites_deployment.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sites_deployment.yml:59: update your workflow using https://app.stepsecurity.io/secureworkflow/meta-llama/PurpleLlama/sites_deployment.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sites_deployment.yml:73: update your workflow using https://app.stepsecurity.io/secureworkflow/meta-llama/PurpleLlama/sites_deployment.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/tests.yml:19: update your workflow using https://app.stepsecurity.io/secureworkflow/meta-llama/PurpleLlama/tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/tests.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/meta-llama/PurpleLlama/tests.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/tests.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/meta-llama/PurpleLlama/tests.yml/main?enable=pin","Warn: containerImage not pinned by hash: SensitiveDocClassification/Dockerfile:6: pin your Docker image by updating python:3.13-slim to python:3.13-slim@sha256:c4979cc54d0a75b302bec36a571786b447399471f63731bad0cd718d3c4791e8","Warn: pipCommand not pinned by hash: SensitiveDocClassification/Dockerfile:32","Warn: pipCommand not pinned by hash: CybersecurityBenchmarks/scripts/run_lint.sh:25","Warn: pipCommand not pinned by hash: CybersecurityBenchmarks/scripts/run_tests.sh:24","Warn: pipCommand not pinned by hash: LlamaFirewall/scripts/run_tests.sh:24","Info:   0 out of   9 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of   1 third-party GitHubAction dependencies pinned","Info:   0 out of   1 containerImage dependencies pinned","Info:   0 out of   4 pipCommand dependencies pinned","Info:   2 out of   2 npmCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/9e702f4c9dc6992745395f4c8ac89942d0cf87ea/docs/checks.md#pinned-dependencies"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 1 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/9e702f4c9dc6992745395f4c8ac89942d0cf87ea/docs/checks.md#sast"}},{"name":"Vulnerabilities","score":1,"reason":"9 existing vulnerabilities detected","details":["Warn: Project is vulnerable to: PYSEC-2017-74","Warn: Project is vulnerable to: GHSA-jfx9-29x2-rv3j","Warn: Project is vulnerable to: GHSA-vr63-x8vc-m265","Warn: Project is vulnerable to: GHSA-v6h2-p8h4-qcjw","Warn: Project is vulnerable to: GHSA-76c9-3jph-rj3q","Warn: Project is vulnerable to: GHSA-4v9v-hfq4-rm2v","Warn: Project is vulnerable to: GHSA-9jgg-88mc-972h","Warn: Project is vulnerable to: GHSA-8qvm-5x2c-j2w7","Warn: Project is vulnerable to: GHSA-9hjg-9r4m-mvj7"],"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/9e702f4c9dc6992745395f4c8ac89942d0cf87ea/docs/checks.md#vulnerabilities"}}]},"last_synced_at":"2025-10-24T22:22:09.240Z","repository_id":211290309,"created_at":"2025-10-24T22:22:09.241Z","updated_at":"2025-10-24T22:22:09.241Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":36718488,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-08-06T04:43:03.162Z","status":"online","status_checked_at":"2026-08-16T02:00:06.462Z","response_time":62,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"meta-llama","name":"Meta Llama","uuid":"153379578","kind":"organization","description":"","email":null,"website":"https://llama.meta.com/","location":null,"twitter":null,"company":null,"icon_url":"https://avatars.githubusercontent.com/u/153379578?v=4","repositories_count":13,"last_synced_at":"2025-03-01T03:31:44.519Z","metadata":{"has_sponsors_listing":false},"html_url":"https://github.com/meta-llama","funding_links":[],"total_stars":134609,"followers":7424,"following":0,"created_at":"2024-03-13T20:14:28.282Z","updated_at":"2025-03-01T03:31:44.519Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/meta-llama","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/meta-llama/repositories"},"tags":[]},"repo_metadata_updated_at":"2026-08-16T15:53:36.600Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":4.768775050067093,"dependent_packages_count":4.4685927556241225,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":4.618683902845608},"purl":"pkg:golang/github.com/meta-llama/purplellama","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/go/github.com/meta-llama/purplellama","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/go/github.com/meta-llama/purplellama","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/go/github.com/meta-llama/purplellama/dependencies","status":"removed","funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-08-16T01:42:03.444Z","issues_count":74,"pull_requests_count":97,"avg_time_to_close_issue":2381610.7,"avg_time_to_close_pull_request":1299260.9841269841,"issues_closed_count":40,"pull_requests_closed_count":63,"pull_request_authors_count":47,"issue_authors_count":69,"avg_comments_per_issue":0.9864864864864865,"avg_comments_per_pull_request":1.7216494845360826,"merged_pull_requests_count":6,"bot_issues_count":0,"bot_pull_requests_count":8,"past_year_issues_count":11,"past_year_pull_requests_count":28,"past_year_avg_time_to_close_issue":89.0,"past_year_avg_time_to_close_pull_request":1077791.7142857143,"past_year_issues_closed_count":2,"past_year_pull_requests_closed_count":7,"past_year_pull_request_authors_count":17,"past_year_issue_authors_count":11,"past_year_avg_comments_per_issue":0.45454545454545453,"past_year_avg_comments_per_pull_request":1.1071428571428572,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":8,"past_year_merged_pull_requests_count":2,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/meta-llama%2FPurpleLlama/issues","maintainers":[{"login":"SimonWan","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/SimonWan"},{"login":"litesaber15","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/litesaber15"}],"active_maintainers":[{"login":"SimonWan","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/SimonWan"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fmeta-llama%2Fpurplellama/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fmeta-llama%2Fpurplellama/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fmeta-llama%2Fpurplellama/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fmeta-llama%2Fpurplellama/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fmeta-llama%2Fpurplellama/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fmeta-llama%2Fpurplellama/codemeta","maintainers":[],"registry":{"name":"proxy.golang.org","url":"https://proxy.golang.org","ecosystem":"go","default":true,"packages_count":2282202,"maintainers_count":0,"namespaces_count":839585,"keywords_count":126348,"github":"golang","metadata":{"funded_packages_count":70969,"sync_missing_packages_cursor":{"timestamp":"2026-08-17T00:00:58.969562Z","path":"github.com/Tektoncd/operator","version":"v0.78.0"},"rate_limit":1},"icon_url":"https://github.com/golang.png","created_at":"2022-04-04T15:19:22.939Z","updated_at":"2026-09-02T05:03:03.375Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/namespaces"}}]