[{"id":14681058,"name":"github.com/Owncast/owncast","ecosystem":"go","description":null,"homepage":null,"licenses":"mit","normalized_licenses":["MIT"],"repository_url":"https://github.com/Owncast/owncast","keywords_array":[],"namespace":null,"versions_count":26,"first_release_published_at":"2026-06-26T13:21:19.435Z","latest_release_published_at":"2026-09-02T08:21:01.000Z","latest_release_number":"v0.3.0","last_synced_at":"2026-09-10T03:47:28.185Z","created_at":"2026-06-26T13:18:38.199Z","updated_at":"2026-09-10T03:47:28.186Z","registry_url":"https://pkg.go.dev/github.com/Owncast/owncast","install_command":"go get github.com/Owncast/owncast","documentation_url":"https://pkg.go.dev/github.com/Owncast/owncast#section-documentation","metadata":{},"repo_metadata":{"id":37021113,"uuid":"266445736","full_name":"owncast/owncast","owner":"owncast","description":"Take control over your live stream video by running it yourself.  Streaming + chat out of the box.","archived":false,"fork":false,"pushed_at":"2026-09-01T19:45:59.000Z","size":1071013,"stargazers_count":11484,"open_issues_count":170,"forks_count":1214,"subscribers_count":105,"default_branch":"develop","last_synced_at":"2026-09-01T20:14:57.782Z","etag":null,"topics":["activitypub","broadcasting","chat","decentralized","federation","fediverse","golang","hacktoberfest","hls","live","livestream","owncast","rtmp","self-hosted","streaming-video","video"],"latest_commit_sha":null,"homepage":"https://owncast.online","language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/owncast.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":"CONTRIBUTING.md","funding":".github/FUNDING.yml","license":"LICENSE","code_of_conduct":"CODE_OF_CONDUCT.md","threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":"docs/SECURITY.md","support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":"AGENTS.md","claude":"CLAUDE.md","gemini":null,"cursor":null,"copilot":".github/copilot-instructions.md","dco":null,"cla":null,"disclosure":null},"funding":{"open_collective":"owncast"}},"created_at":"2020-05-24T00:58:13.000Z","updated_at":"2026-09-01T18:17:22.000Z","dependencies_parsed_at":"2026-09-01T20:25:10.239Z","dependency_job_id":null,"html_url":"https://github.com/owncast/owncast","commit_stats":{"total_commits":8253,"total_committers":152,"mean_commits":"54.296052631578945","dds":0.6986550345328971,"last_synced_commit":"921f4f9e4c41fe17f8df4fa3125d9bd7e0718782"},"previous_names":["gabek/owncast","gabek/video-stream"],"tags_count":26,"template":false,"template_full_name":null,"purl":"pkg:github/owncast/owncast","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/owncast%2Fowncast","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/owncast%2Fowncast/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/owncast%2Fowncast/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/owncast%2Fowncast/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/owncast","download_url":"https://codeload.github.com/owncast/owncast/tar.gz/refs/heads/develop","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/owncast%2Fowncast/sbom","scorecard":{"id":416245,"data":{"date":"2025-08-11","repo":{"name":"github.com/owncast/owncast","commit":"c5234a22796573207b900ab2d6392cf39d74c388"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":4.5,"checks":[{"name":"Maintained","score":10,"reason":"30 commit(s) and 24 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Code-Review","score":0,"reason":"Found 0/24 approved changesets -- score normalized to 0","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: docs/SECURITY.md:1","Info: Found linked content: docs/SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: docs/SECURITY.md:1","Info: Found text in security policy: docs/SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: MIT License: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: jobLevel 'contents' permission set to 'read': .github/workflows/copilot-setup-steps.yml:23","Warn: no topLevel permission defined: .github/workflows/actions-lint.yml:1","Warn: no topLevel permission defined: .github/workflows/add-default-web-localizations.yml:1","Warn: no topLevel permission defined: .github/workflows/auto-comment-on-label.yaml:1","Warn: no topLevel permission defined: .github/workflows/automated-end-to-end-api.yaml:1","Warn: no topLevel permission defined: .github/workflows/browser-testing.yml:1","Warn: no topLevel permission defined: .github/workflows/build-storybook.yml:1","Warn: no topLevel permission defined: .github/workflows/chromatic.yml:1","Warn: no topLevel permission defined: .github/workflows/codeql-analysis.yml:1","Warn: no topLevel permission defined: .github/workflows/container-lint.yml:1","Warn: no topLevel permission defined: .github/workflows/container.yaml:1","Warn: no topLevel permission defined: .github/workflows/copilot-setup-steps.yml:1","Warn: no topLevel permission defined: .github/workflows/css-lint.yaml:1","Warn: no topLevel permission defined: .github/workflows/generate-api-documentation.yaml:1","Info: topLevel 'contents' permission set to 'read': .github/workflows/go-lint.yml:11","Warn: no topLevel permission defined: .github/workflows/go-tests.yaml:1","Warn: no topLevel permission defined: .github/workflows/hls-tests.yml:1","Warn: no topLevel permission defined: .github/workflows/javascript-format-test-build.yml:1","Warn: no topLevel permission defined: .github/workflows/shellcheck.yml:1","Warn: no topLevel permission defined: .github/workflows/stale.yml:1","Warn: no topLevel permission defined: .github/workflows/translations.yml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Signed-Releases","score":0,"reason":"Project has not signed or included provenance with any releases.","details":["Warn: release artifact v0.2.3 not signed: https://api.github.com/repos/owncast/owncast/releases/217201367","Warn: release artifact v0.2.2 not signed: https://api.github.com/repos/owncast/owncast/releases/207649910","Warn: release artifact v0.2.1 not signed: https://api.github.com/repos/owncast/owncast/releases/195053995","Warn: release artifact v0.2.0 not signed: https://api.github.com/repos/owncast/owncast/releases/193231882","Warn: release artifact v0.1.3 not signed: https://api.github.com/repos/owncast/owncast/releases/145405242","Warn: release artifact v0.2.3 does not have provenance: https://api.github.com/repos/owncast/owncast/releases/217201367","Warn: release artifact v0.2.2 does not have provenance: https://api.github.com/repos/owncast/owncast/releases/207649910","Warn: release artifact v0.2.1 does not have provenance: https://api.github.com/repos/owncast/owncast/releases/195053995","Warn: release artifact v0.2.0 does not have provenance: https://api.github.com/repos/owncast/owncast/releases/193231882","Warn: release artifact v0.1.3 does not have provenance: https://api.github.com/repos/owncast/owncast/releases/145405242"],"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"SAST","score":10,"reason":"SAST tool is run on all commits","details":["Info: SAST configuration detected: CodeQL","Info: all commits (9) are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}},{"name":"Branch-Protection","score":3,"reason":"branch protection is not maximal on development and all release branches","details":["Info: 'allow deletion' disabled on branch 'develop'","Info: 'force pushes' disabled on branch 'develop'","Warn: 'branch protection settings apply to administrators' is disabled on branch 'develop'","Warn: could not determine whether codeowners review is allowed","Warn: no status checks found to merge onto branch 'develop'","Warn: PRs are not required to make changes on branch 'develop'; or we don't have data to detect it.If you think it might be the latter, make sure to run Scorecard with a PAT or use Repo Rules (that are always public) instead of Branch Protection settings"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/actions-lint.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/owncast/owncast/actions-lint.yml/develop?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/actions-lint.yml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/owncast/owncast/actions-lint.yml/develop?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/actions-lint.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/owncast/owncast/actions-lint.yml/develop?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/add-default-web-localizations.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/owncast/owncast/add-default-web-localizations.yml/develop?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/add-default-web-localizations.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/owncast/owncast/add-default-web-localizations.yml/develop?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/automated-end-to-end-api.yaml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/owncast/owncast/automated-end-to-end-api.yaml/develop?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/automated-end-to-end-api.yaml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/owncast/owncast/automated-end-to-end-api.yaml/develop?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/automated-end-to-end-api.yaml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/owncast/owncast/automated-end-to-end-api.yaml/develop?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/automated-end-to-end-api.yaml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/owncast/owncast/automated-end-to-end-api.yaml/develop?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/automated-end-to-end-api.yaml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/owncast/owncast/automated-end-to-end-api.yaml/develop?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/automated-end-to-end-api.yaml:52: update your workflow using https://app.stepsecurity.io/secureworkflow/owncast/owncast/automated-end-to-end-api.yaml/develop?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/automated-end-to-end-api.yaml:59: update your workflow using https://app.stepsecurity.io/secureworkflow/owncast/owncast/automated-end-to-end-api.yaml/develop?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/browser-testing.yml:18: update your workflow using https://app.stepsecurity.io/secureworkflow/owncast/owncast/browser-testing.yml/develop?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/browser-testing.yml:23: update your workflow using https://app.stepsecurity.io/secureworkflow/owncast/owncast/browser-testing.yml/develop?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/browser-testing.yml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/owncast/owncast/browser-testing.yml/develop?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/browser-testing.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/owncast/owncast/browser-testing.yml/develop?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/browser-testing.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/owncast/owncast/browser-testing.yml/develop?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/browser-testing.yml:49: update your workflow using https://app.stepsecurity.io/secureworkflow/owncast/owncast/browser-testing.yml/develop?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/browser-testing.yml:58: update your workflow using https://app.stepsecurity.io/secureworkflow/owncast/owncast/browser-testing.yml/develop?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build-storybook.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/owncast/owncast/build-storybook.yml/develop?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build-storybook.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/owncast/owncast/build-storybook.yml/develop?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build-storybook.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/owncast/owncast/build-storybook.yml/develop?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/build-storybook.yml:53: update your workflow using https://app.stepsecurity.io/secureworkflow/owncast/owncast/build-storybook.yml/develop?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/build-storybook.yml:65: update your workflow using https://app.stepsecurity.io/secureworkflow/owncast/owncast/build-storybook.yml/develop?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/chromatic.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/owncast/owncast/chromatic.yml/develop?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/chromatic.yml:32: update your workflow using https://app.stepsecurity.io/secureworkflow/owncast/owncast/chromatic.yml/develop?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/chromatic.yml:36: update your workflow using https://app.stepsecurity.io/secureworkflow/owncast/owncast/chromatic.yml/develop?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/chromatic.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/owncast/owncast/chromatic.yml/develop?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/chromatic.yml:59: update your workflow using https://app.stepsecurity.io/secureworkflow/owncast/owncast/chromatic.yml/develop?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/owncast/owncast/codeql-analysis.yml/develop?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:47: update your workflow using https://app.stepsecurity.io/secureworkflow/owncast/owncast/codeql-analysis.yml/develop?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:50: update your workflow using https://app.stepsecurity.io/secureworkflow/owncast/owncast/codeql-analysis.yml/develop?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:57: update your workflow using https://app.stepsecurity.io/secureworkflow/owncast/owncast/codeql-analysis.yml/develop?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:69: update your workflow using https://app.stepsecurity.io/secureworkflow/owncast/owncast/codeql-analysis.yml/develop?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:83: update your workflow using https://app.stepsecurity.io/secureworkflow/owncast/owncast/codeql-analysis.yml/develop?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/container-lint.yml:23: update your workflow using https://app.stepsecurity.io/secureworkflow/owncast/owncast/container-lint.yml/develop?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/container-lint.yml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/owncast/owncast/container-lint.yml/develop?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/container.yaml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/owncast/owncast/container.yaml/develop?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/container.yaml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/owncast/owncast/container.yaml/develop?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/container.yaml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/owncast/owncast/container.yaml/develop?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/container.yaml:48: update your workflow using https://app.stepsecurity.io/secureworkflow/owncast/owncast/container.yaml/develop?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/container.yaml:58: update your workflow using https://app.stepsecurity.io/secureworkflow/owncast/owncast/container.yaml/develop?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/copilot-setup-steps.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/owncast/owncast/copilot-setup-steps.yml/develop?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/copilot-setup-steps.yml:32: update your workflow using https://app.stepsecurity.io/secureworkflow/owncast/owncast/copilot-setup-steps.yml/develop?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/copilot-setup-steps.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/owncast/owncast/copilot-setup-steps.yml/develop?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/css-lint.yaml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/owncast/owncast/css-lint.yaml/develop?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/css-lint.yaml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/owncast/owncast/css-lint.yaml/develop?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/css-lint.yaml:32: update your workflow using https://app.stepsecurity.io/secureworkflow/owncast/owncast/css-lint.yaml/develop?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/css-lint.yaml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/owncast/owncast/css-lint.yaml/develop?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/generate-api-documentation.yaml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/owncast/owncast/generate-api-documentation.yaml/develop?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/generate-api-documentation.yaml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/owncast/owncast/generate-api-documentation.yaml/develop?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/generate-api-documentation.yaml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/owncast/owncast/generate-api-documentation.yaml/develop?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/go-lint.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/owncast/owncast/go-lint.yml/develop?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/go-lint.yml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/owncast/owncast/go-lint.yml/develop?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/go-lint.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/owncast/owncast/go-lint.yml/develop?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/go-lint.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/owncast/owncast/go-lint.yml/develop?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/go-lint.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/owncast/owncast/go-lint.yml/develop?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/go-tests.yaml:19: update your workflow using https://app.stepsecurity.io/secureworkflow/owncast/owncast/go-tests.yaml/develop?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/go-tests.yaml:23: update your workflow using https://app.stepsecurity.io/secureworkflow/owncast/owncast/go-tests.yaml/develop?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/go-tests.yaml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/owncast/owncast/go-tests.yaml/develop?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/go-tests.yaml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/owncast/owncast/go-tests.yaml/develop?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/go-tests.yaml:61: update your workflow using https://app.stepsecurity.io/secureworkflow/owncast/owncast/go-tests.yaml/develop?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/go-tests.yaml:65: update your workflow using https://app.stepsecurity.io/secureworkflow/owncast/owncast/go-tests.yaml/develop?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/go-tests.yaml:71: update your workflow using https://app.stepsecurity.io/secureworkflow/owncast/owncast/go-tests.yaml/develop?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/go-tests.yaml:82: update your workflow using https://app.stepsecurity.io/secureworkflow/owncast/owncast/go-tests.yaml/develop?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/hls-tests.yml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/owncast/owncast/hls-tests.yml/develop?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/hls-tests.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/owncast/owncast/hls-tests.yml/develop?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/hls-tests.yml:36: update your workflow using https://app.stepsecurity.io/secureworkflow/owncast/owncast/hls-tests.yml/develop?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/hls-tests.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/owncast/owncast/hls-tests.yml/develop?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/hls-tests.yml:47: update your workflow using https://app.stepsecurity.io/secureworkflow/owncast/owncast/hls-tests.yml/develop?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/hls-tests.yml:54: update your workflow using https://app.stepsecurity.io/secureworkflow/owncast/owncast/hls-tests.yml/develop?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/hls-tests.yml:67: update your workflow using https://app.stepsecurity.io/secureworkflow/owncast/owncast/hls-tests.yml/develop?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/hls-tests.yml:75: update your workflow using https://app.stepsecurity.io/secureworkflow/owncast/owncast/hls-tests.yml/develop?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/javascript-format-test-build.yml:167: update your workflow using https://app.stepsecurity.io/secureworkflow/owncast/owncast/javascript-format-test-build.yml/develop?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/javascript-format-test-build.yml:174: update your workflow using https://app.stepsecurity.io/secureworkflow/owncast/owncast/javascript-format-test-build.yml/develop?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/javascript-format-test-build.yml:179: update your workflow using https://app.stepsecurity.io/secureworkflow/owncast/owncast/javascript-format-test-build.yml/develop?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/javascript-format-test-build.yml:191: update your workflow using https://app.stepsecurity.io/secureworkflow/owncast/owncast/javascript-format-test-build.yml/develop?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/javascript-format-test-build.yml:198: update your workflow using https://app.stepsecurity.io/secureworkflow/owncast/owncast/javascript-format-test-build.yml/develop?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/javascript-format-test-build.yml:213: update your workflow using https://app.stepsecurity.io/secureworkflow/owncast/owncast/javascript-format-test-build.yml/develop?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/javascript-format-test-build.yml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/owncast/owncast/javascript-format-test-build.yml/develop?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/javascript-format-test-build.yml:32: update your workflow using https://app.stepsecurity.io/secureworkflow/owncast/owncast/javascript-format-test-build.yml/develop?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/javascript-format-test-build.yml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/owncast/owncast/javascript-format-test-build.yml/develop?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/javascript-format-test-build.yml:44: update your workflow using https://app.stepsecurity.io/secureworkflow/owncast/owncast/javascript-format-test-build.yml/develop?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/javascript-format-test-build.yml:49: update your workflow using https://app.stepsecurity.io/secureworkflow/owncast/owncast/javascript-format-test-build.yml/develop?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/javascript-format-test-build.yml:60: update your workflow using https://app.stepsecurity.io/secureworkflow/owncast/owncast/javascript-format-test-build.yml/develop?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/javascript-format-test-build.yml:95: update your workflow using https://app.stepsecurity.io/secureworkflow/owncast/owncast/javascript-format-test-build.yml/develop?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/javascript-format-test-build.yml:113: update your workflow using https://app.stepsecurity.io/secureworkflow/owncast/owncast/javascript-format-test-build.yml/develop?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/javascript-format-test-build.yml:120: update your workflow using https://app.stepsecurity.io/secureworkflow/owncast/owncast/javascript-format-test-build.yml/develop?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/javascript-format-test-build.yml:127: update your workflow using https://app.stepsecurity.io/secureworkflow/owncast/owncast/javascript-format-test-build.yml/develop?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/javascript-format-test-build.yml:131: update your workflow using https://app.stepsecurity.io/secureworkflow/owncast/owncast/javascript-format-test-build.yml/develop?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/javascript-format-test-build.yml:136: update your workflow using https://app.stepsecurity.io/secureworkflow/owncast/owncast/javascript-format-test-build.yml/develop?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/shellcheck.yml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/owncast/owncast/shellcheck.yml/develop?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/shellcheck.yml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/owncast/owncast/shellcheck.yml/develop?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/stale.yml:10: update your workflow using https://app.stepsecurity.io/secureworkflow/owncast/owncast/stale.yml/develop?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/translations.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/owncast/owncast/translations.yml/develop?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/translations.yml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/owncast/owncast/translations.yml/develop?enable=pin","Warn: containerImage not pinned by hash: Dockerfile:8","Warn: containerImage not pinned by hash: Dockerfile:25: pin your Docker image by updating alpine:3.22.1 to alpine:3.22.1@sha256:4bcff63911fcb4448bd4fdacec207030997caf25e9bea4045fa6c8c44de311d1","Warn: npmCommand not pinned by hash: build/web/bundleWeb.sh:25","Warn: npmCommand not pinned by hash: test/automated/api/run.sh:8","Warn: npmCommand not pinned by hash: test/automated/browser/run.sh:35","Warn: npmCommand not pinned by hash: test/automated/hls/run-s3.sh:14","Warn: npmCommand not pinned by hash: test/automated/hls/run.sh:8","Warn: npmCommand not pinned by hash: test/automated/screenshots/run.sh:24","Warn: npmCommand not pinned by hash: .github/workflows/build-storybook.yml:45","Warn: npmCommand not pinned by hash: .github/workflows/chromatic.yml:56","Warn: npmCommand not pinned by hash: .github/workflows/css-lint.yaml:47","Warn: npmCommand not pinned by hash: .github/workflows/javascript-format-test-build.yml:73","Warn: npmCommand not pinned by hash: .github/workflows/javascript-format-test-build.yml:149","Warn: npmCommand not pinned by hash: .github/workflows/translations.yml:34","Info:   0 out of  63 GitHub-owned GitHubAction dependencies pinned","Info:   1 out of  34 third-party GitHubAction dependencies pinned","Info:   0 out of   2 containerImage dependencies pinned","Info:   2 out of  14 npmCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Vulnerabilities","score":0,"reason":"22 existing vulnerabilities detected","details":["Warn: Project is vulnerable to: GO-2022-0635","Warn: Project is vulnerable to: GO-2022-0646","Warn: Project is vulnerable to: GHSA-968p-4wvh-cqc8","Warn: Project is vulnerable to: GHSA-h452-7996-h45h","Warn: Project is vulnerable to: GHSA-3xgq-45jj-v275","Warn: Project is vulnerable to: GHSA-75v8-2h7p-7m2m","Warn: Project is vulnerable to: GHSA-952p-6rrq-rcjv","Warn: Project is vulnerable to: GHSA-p8p7-x288-28g6","Warn: Project is vulnerable to: GHSA-v6h2-p8h4-qcjw","Warn: Project is vulnerable to: GHSA-pxg6-pf52-xh8x","Warn: Project is vulnerable to: GHSA-fjxv-7rqg-78g4","Warn: Project is vulnerable to: GHSA-pfrx-2q88-qq97","Warn: Project is vulnerable to: GHSA-p6mc-m468-83gw","Warn: Project is vulnerable to: GHSA-c2qf-rxjj-qqgw","Warn: Project is vulnerable to: GHSA-pq67-2wwv-3xjx","Warn: Project is vulnerable to: GHSA-8cj5-5rvv-wf4v","Warn: Project is vulnerable to: GHSA-3h5v-q93c-6h6q","Warn: Project is vulnerable to: GHSA-52f5-9888-hmc6","Warn: Project is vulnerable to: GHSA-67mh-4wv8-2f99","Warn: Project is vulnerable to: GHSA-m5qc-5hw7-8vg7","Warn: Project is vulnerable to: GHSA-9wv6-86v2-598j","Warn: Project is vulnerable to: GHSA-7fh5-64p2-3v2j"],"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}}]},"last_synced_at":"2025-08-18T23:56:06.056Z","repository_id":37021113,"created_at":"2025-08-18T23:56:06.056Z","updated_at":"2025-08-18T23:56:06.056Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":37018729,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-08-22T15:14:58.755Z","status":"online","status_checked_at":"2026-09-01T02:00:05.433Z","response_time":53,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"owncast","name":"Owncast","uuid":"69942503","kind":"organization","description":"A self-hosted live stream server with chat features.","email":"gabek@real-ity.com","website":"http://owncast.online","location":null,"twitter":null,"company":null,"icon_url":"https://avatars.githubusercontent.com/u/69942503?v=4","repositories_count":6,"last_synced_at":"2023-03-04T01:09:44.026Z","metadata":{"has_sponsors_listing":false},"html_url":"https://github.com/owncast","funding_links":[],"total_stars":null,"followers":null,"following":null,"created_at":"2022-11-14T07:30:43.192Z","updated_at":"2023-03-04T01:09:44.035Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/owncast","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/owncast/repositories"},"tags":[{"name":"v0.2.5","sha":"65d03b4d5df13dfc2033311fa30e4513b63b3e16","kind":"commit","published_at":"2026-04-11T20:47:29.000Z","download_url":"https://codeload.github.com/owncast/owncast/tar.gz/v0.2.5","html_url":"https://github.com/owncast/owncast/releases/tag/v0.2.5","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/owncast/owncast@v0.2.5","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/owncast%2Fowncast/tags/v0.2.5","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/owncast%2Fowncast/tags/v0.2.5/manifests"},{"name":"v0.2.4","sha":"1dba94684708895045b81f52764472da90a977a7","kind":"commit","published_at":"2026-01-09T20:57:02.000Z","download_url":"https://codeload.github.com/owncast/owncast/tar.gz/v0.2.4","html_url":"https://github.com/owncast/owncast/releases/tag/v0.2.4","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/owncast/owncast@v0.2.4","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/owncast%2Fowncast/tags/v0.2.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/owncast%2Fowncast/tags/v0.2.4/manifests"},{"name":"v0.2.3","sha":"7cfe3fc111df9450115496118979e5621c937803","kind":"commit","published_at":"2025-05-10T20:43:40.000Z","download_url":"https://codeload.github.com/owncast/owncast/tar.gz/v0.2.3","html_url":"https://github.com/owncast/owncast/releases/tag/v0.2.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/owncast/owncast@v0.2.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/owncast%2Fowncast/tags/v0.2.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/owncast%2Fowncast/tags/v0.2.3/manifests"},{"name":"v0.2.2","sha":"c3da19070a9685f8e8c21ee753c632551454eb6e","kind":"commit","published_at":"2025-05-03T18:22:00.000Z","download_url":"https://codeload.github.com/owncast/owncast/tar.gz/v0.2.2","html_url":"https://github.com/owncast/owncast/releases/tag/v0.2.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/owncast/owncast@v0.2.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/owncast%2Fowncast/tags/v0.2.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/owncast%2Fowncast/tags/v0.2.2/manifests"},{"name":"v0.2.1","sha":"c7fbb476473e646b9f9c1dc5555a2147ab9a0e42","kind":"commit","published_at":"2025-01-19T22:40:40.000Z","download_url":"https://codeload.github.com/owncast/owncast/tar.gz/v0.2.1","html_url":"https://github.com/owncast/owncast/releases/tag/v0.2.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/owncast/owncast@v0.2.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/owncast%2Fowncast/tags/v0.2.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/owncast%2Fowncast/tags/v0.2.1/manifests"},{"name":"v0.2.1-old2","sha":"b8c46a1f09e02dc53cdc5a16646555fe8548ae0b","kind":"commit","published_at":"2025-01-19T22:07:46.000Z","download_url":"https://codeload.github.com/owncast/owncast/tar.gz/v0.2.1-old2","html_url":"https://github.com/owncast/owncast/releases/tag/v0.2.1-old2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/owncast/owncast@v0.2.1-old2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/owncast%2Fowncast/tags/v0.2.1-old2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/owncast%2Fowncast/tags/v0.2.1-old2/manifests"},{"name":"v0.2.1-old","sha":"70d8ca9646181222a635e2d30d5165142c61c7c7","kind":"commit","published_at":"2025-01-19T00:38:59.000Z","download_url":"https://codeload.github.com/owncast/owncast/tar.gz/v0.2.1-old","html_url":"https://github.com/owncast/owncast/releases/tag/v0.2.1-old","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/owncast/owncast@v0.2.1-old","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/owncast%2Fowncast/tags/v0.2.1-old","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/owncast%2Fowncast/tags/v0.2.1-old/manifests"},{"name":"untagged-00fff439c349c6e4ee3e","sha":"49bdbb2e9e79b84f881f7f0406e0a5dd44178f4c","kind":"commit","published_at":"2025-01-17T19:58:35.000Z","download_url":"https://codeload.github.com/owncast/owncast/tar.gz/untagged-00fff439c349c6e4ee3e","html_url":"https://github.com/owncast/owncast/releases/tag/untagged-00fff439c349c6e4ee3e","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/owncast/owncast@untagged-00fff439c349c6e4ee3e","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/owncast%2Fowncast/tags/untagged-00fff439c349c6e4ee3e","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/owncast%2Fowncast/tags/untagged-00fff439c349c6e4ee3e/manifests"},{"name":"v0.2.0","sha":"5483000f79ba1910e46399d008bb1f4246381ae1","kind":"commit","published_at":"2025-01-09T00:20:50.000Z","download_url":"https://codeload.github.com/owncast/owncast/tar.gz/v0.2.0","html_url":"https://github.com/owncast/owncast/releases/tag/v0.2.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/owncast/owncast@v0.2.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/owncast%2Fowncast/tags/v0.2.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/owncast%2Fowncast/tags/v0.2.0/manifests"},{"name":"v0.1.3","sha":"01b6c5ca264214ba0aab1ff7e1891ca935d2162a","kind":"commit","published_at":"2024-04-07T13:31:22.000Z","download_url":"https://codeload.github.com/owncast/owncast/tar.gz/v0.1.3","html_url":"https://github.com/owncast/owncast/releases/tag/v0.1.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/owncast/owncast@v0.1.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/owncast%2Fowncast/tags/v0.1.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/owncast%2Fowncast/tags/v0.1.3/manifests"},{"name":"v0.1.2","sha":"dc88e4e9f02027b4de0449d9f04e2f75e8513d66","kind":"commit","published_at":"2023-11-18T04:20:27.000Z","download_url":"https://codeload.github.com/owncast/owncast/tar.gz/v0.1.2","html_url":"https://github.com/owncast/owncast/releases/tag/v0.1.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/owncast/owncast@v0.1.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/owncast%2Fowncast/tags/v0.1.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/owncast%2Fowncast/tags/v0.1.2/manifests"},{"name":"v0.1.1","sha":"9055af03436059c0a8b6592b93f6cc8d7be3087f","kind":"commit","published_at":"2023-07-28T12:26:39.000Z","download_url":"https://codeload.github.com/owncast/owncast/tar.gz/v0.1.1","html_url":"https://github.com/owncast/owncast/releases/tag/v0.1.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/owncast/owncast@v0.1.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/owncast%2Fowncast/tags/v0.1.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/owncast%2Fowncast/tags/v0.1.1/manifests"},{"name":"v0.1.0","sha":"0c623b8f6e90ce1d65116f921fcf91ca94d76f96","kind":"commit","published_at":"2023-05-30T04:11:59.000Z","download_url":"https://codeload.github.com/owncast/owncast/tar.gz/v0.1.0","html_url":"https://github.com/owncast/owncast/releases/tag/v0.1.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/owncast/owncast@v0.1.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/owncast%2Fowncast/tags/v0.1.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/owncast%2Fowncast/tags/v0.1.0/manifests"},{"name":"v0.0.13","sha":"8d28020b6f4eb1baae321caf4dfe0dbad7172f1d","kind":"commit","published_at":"2022-11-22T01:44:19.000Z","download_url":"https://codeload.github.com/owncast/owncast/tar.gz/v0.0.13","html_url":"https://github.com/owncast/owncast/releases/tag/v0.0.13","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/owncast/owncast@v0.0.13","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/owncast%2Fowncast/tags/v0.0.13","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/owncast%2Fowncast/tags/v0.0.13/manifests"},{"name":"v0.0.12","sha":"da5f558722f4830f8055b1efb380142aa5b2c185","kind":"commit","published_at":"2022-07-07T04:46:03.000Z","download_url":"https://codeload.github.com/owncast/owncast/tar.gz/v0.0.12","html_url":"https://github.com/owncast/owncast/releases/tag/v0.0.12","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/owncast/owncast@v0.0.12","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/owncast%2Fowncast/tags/v0.0.12","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/owncast%2Fowncast/tags/v0.0.12/manifests"},{"name":"v0.0.11","sha":"87bd1e57e62c071b4a78fc1eacb30ecd8b1008cb","kind":"commit","published_at":"2022-03-05T03:31:38.000Z","download_url":"https://codeload.github.com/owncast/owncast/tar.gz/v0.0.11","html_url":"https://github.com/owncast/owncast/releases/tag/v0.0.11","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/owncast/owncast@v0.0.11","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/owncast%2Fowncast/tags/v0.0.11","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/owncast%2Fowncast/tags/v0.0.11/manifests"},{"name":"v0.0.10","sha":"049b6e80ea1f543e958379e6789c6c1b3aa60277","kind":"commit","published_at":"2021-10-05T23:45:53.000Z","download_url":"https://codeload.github.com/owncast/owncast/tar.gz/v0.0.10","html_url":"https://github.com/owncast/owncast/releases/tag/v0.0.10","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/owncast/owncast@v0.0.10","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/owncast%2Fowncast/tags/v0.0.10","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/owncast%2Fowncast/tags/v0.0.10/manifests"},{"name":"v0.0.9","sha":"57facee9fd7832371f673a10422a4ae4f21414ea","kind":"commit","published_at":"2021-09-23T00:36:22.000Z","download_url":"https://codeload.github.com/owncast/owncast/tar.gz/v0.0.9","html_url":"https://github.com/owncast/owncast/releases/tag/v0.0.9","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/owncast/owncast@v0.0.9","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/owncast%2Fowncast/tags/v0.0.9","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/owncast%2Fowncast/tags/v0.0.9/manifests"},{"name":"v0.0.8","sha":"62cc3505172d322cc61b884f2493c61ed7b939a1","kind":"commit","published_at":"2021-08-10T19:19:26.000Z","download_url":"https://codeload.github.com/owncast/owncast/tar.gz/v0.0.8","html_url":"https://github.com/owncast/owncast/releases/tag/v0.0.8","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/owncast/owncast@v0.0.8","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/owncast%2Fowncast/tags/v0.0.8","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/owncast%2Fowncast/tags/v0.0.8/manifests"},{"name":"v0.0.7","sha":"9537dd30394eb5ba8c28eb2fd38b341c70770fd6","kind":"commit","published_at":"2021-05-14T22:28:13.000Z","download_url":"https://codeload.github.com/owncast/owncast/tar.gz/v0.0.7","html_url":"https://github.com/owncast/owncast/releases/tag/v0.0.7","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/owncast/owncast@v0.0.7","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/owncast%2Fowncast/tags/v0.0.7","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/owncast%2Fowncast/tags/v0.0.7/manifests"},{"name":"v0.0.6","sha":"e635c24aecef937a2217422ca5498ac3db6de452","kind":"commit","published_at":"2021-03-08T06:46:51.000Z","download_url":"https://codeload.github.com/owncast/owncast/tar.gz/v0.0.6","html_url":"https://github.com/owncast/owncast/releases/tag/v0.0.6","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/owncast/owncast@v0.0.6","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/owncast%2Fowncast/tags/v0.0.6","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/owncast%2Fowncast/tags/v0.0.6/manifests"},{"name":"v0.0.5","sha":"dbe6cf8a043ce3f59056b8e532ebe5586f0a01db","kind":"commit","published_at":"2021-01-12T03:44:02.000Z","download_url":"https://codeload.github.com/owncast/owncast/tar.gz/v0.0.5","html_url":"https://github.com/owncast/owncast/releases/tag/v0.0.5","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/owncast/owncast@v0.0.5","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/owncast%2Fowncast/tags/v0.0.5","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/owncast%2Fowncast/tags/v0.0.5/manifests"},{"name":"v0.0.4","sha":"5914570d6ce233b1821c0df61694bfcec856c229","kind":"commit","published_at":"2020-12-29T02:10:40.000Z","download_url":"https://codeload.github.com/owncast/owncast/tar.gz/v0.0.4","html_url":"https://github.com/owncast/owncast/releases/tag/v0.0.4","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/owncast/owncast@v0.0.4","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/owncast%2Fowncast/tags/v0.0.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/owncast%2Fowncast/tags/v0.0.4/manifests"},{"name":"v0.0.3","sha":"f8bdda4fa44524d17d569218f019b757bff7b1c4","kind":"commit","published_at":"2020-12-14T07:09:55.000Z","download_url":"https://codeload.github.com/owncast/owncast/tar.gz/v0.0.3","html_url":"https://github.com/owncast/owncast/releases/tag/v0.0.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/owncast/owncast@v0.0.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/owncast%2Fowncast/tags/v0.0.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/owncast%2Fowncast/tags/v0.0.3/manifests"},{"name":"v0.0.2","sha":"dfd44be05196110b06c97fde3ab2d4c0daf79de7","kind":"commit","published_at":"2020-09-28T03:12:45.000Z","download_url":"https://codeload.github.com/owncast/owncast/tar.gz/v0.0.2","html_url":"https://github.com/owncast/owncast/releases/tag/v0.0.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/owncast/owncast@v0.0.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/owncast%2Fowncast/tags/v0.0.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/owncast%2Fowncast/tags/v0.0.2/manifests"},{"name":"v0.0.1","sha":"6aed462d91e577620933f354359afa915ea5f742","kind":"tag","published_at":"2020-08-08T02:49:19.000Z","download_url":"https://codeload.github.com/owncast/owncast/tar.gz/v0.0.1","html_url":"https://github.com/owncast/owncast/releases/tag/v0.0.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/owncast/owncast@v0.0.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/owncast%2Fowncast/tags/v0.0.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/owncast%2Fowncast/tags/v0.0.1/manifests"}]},"repo_metadata_updated_at":"2026-09-01T20:48:39.784Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":4.949816600657531,"dependent_packages_count":4.638193141632565,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":4.794004871145048},"purl":"pkg:golang/github.com/%21owncast/owncast","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/go/github.com/Owncast/owncast","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/go/github.com/Owncast/owncast","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/go/github.com/Owncast/owncast/dependencies","status":null,"funding_links":["https://opencollective.com/owncast"],"critical":null,"issue_metadata":{"last_synced_at":"2026-08-27T16:07:06.763Z","issues_count":760,"pull_requests_count":1380,"avg_time_to_close_issue":8148166.193293885,"avg_time_to_close_pull_request":965743.5640394088,"issues_closed_count":507,"pull_requests_closed_count":1218,"pull_request_authors_count":106,"issue_authors_count":239,"avg_comments_per_issue":3.675,"avg_comments_per_pull_request":1.9826086956521738,"merged_pull_requests_count":1055,"bot_issues_count":4,"bot_pull_requests_count":887,"past_year_issues_count":57,"past_year_pull_requests_count":129,"past_year_avg_time_to_close_issue":856618.5294117647,"past_year_avg_time_to_close_pull_request":470114.38372093026,"past_year_issues_closed_count":34,"past_year_pull_requests_closed_count":86,"past_year_pull_request_authors_count":10,"past_year_issue_authors_count":16,"past_year_avg_comments_per_issue":1.3333333333333333,"past_year_avg_comments_per_pull_request":1.4108527131782946,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":61,"past_year_merged_pull_requests_count":80,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/owncast%2Fowncast/issues","maintainers":[{"login":"gabek","count":504,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gabek"},{"login":"janWilejan","count":25,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/janWilejan"},{"login":"gingervitis","count":10,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gingervitis"},{"login":"jprjr","count":9,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jprjr"},{"login":"MFTabriz","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/MFTabriz"},{"login":"jeyemwey","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jeyemwey"}],"active_maintainers":[{"login":"gabek","count":71,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gabek"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2FOwncast%2Fowncast/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2FOwncast%2Fowncast/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2FOwncast%2Fowncast/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2FOwncast%2Fowncast/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2FOwncast%2Fowncast/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2FOwncast%2Fowncast/codemeta","maintainers":[],"registry":{"name":"proxy.golang.org","url":"https://proxy.golang.org","ecosystem":"go","default":true,"packages_count":2322374,"maintainers_count":0,"namespaces_count":841575,"keywords_count":127858,"github":"golang","metadata":{"funded_packages_count":82019,"sync_missing_packages_cursor":{"timestamp":"2026-09-13T00:27:08.257651Z","path":"github.com/ultralytics/thop","version":"v2.0.21+incompatible"},"rate_limit":1},"icon_url":"https://github.com/golang.png","created_at":"2022-04-04T15:19:22.939Z","updated_at":"2026-09-13T05:01:04.658Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/namespaces"}},{"id":15127788,"name":"github.com/owncast/owncast/tools","ecosystem":"go","description":null,"homepage":null,"licenses":"mit","normalized_licenses":[],"repository_url":"https://github.com/owncast/owncast","keywords_array":[],"namespace":null,"versions_count":1,"first_release_published_at":"2026-09-03T19:35:50.000Z","latest_release_published_at":"2026-09-03T19:35:50.000Z","latest_release_number":"v0.0.0-20260903193550-c2c11905c38c","last_synced_at":"2026-09-10T02:46:42.905Z","created_at":"2026-09-08T05:10:42.017Z","updated_at":"2026-09-12T10:39:48.244Z","registry_url":"https://pkg.go.dev/github.com/owncast/owncast/tools","install_command":"go get github.com/owncast/owncast/tools","documentation_url":"https://pkg.go.dev/github.com/owncast/owncast/tools#section-documentation","metadata":{},"repo_metadata":{"id":37021113,"uuid":"266445736","full_name":"owncast/owncast","owner":"owncast","description":"Take control over your live stream video by running it yourself.  Streaming + chat out of the box.","archived":false,"fork":false,"pushed_at":"2026-09-10T02:12:09.000Z","size":1041279,"stargazers_count":11519,"open_issues_count":165,"forks_count":1175,"subscribers_count":106,"default_branch":"develop","last_synced_at":"2026-09-10T02:25:48.600Z","etag":null,"topics":["activitypub","broadcasting","chat","decentralized","federation","fediverse","golang","hacktoberfest","hls","live","livestream","owncast","rtmp","self-hosted","streaming-video","video"],"latest_commit_sha":null,"homepage":"https://owncast.online","language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/owncast.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":"CONTRIBUTING.md","funding":".github/FUNDING.yml","license":"LICENSE","code_of_conduct":"CODE_OF_CONDUCT.md","threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":"docs/SECURITY.md","support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":"AGENTS.md","claude":"CLAUDE.md","gemini":null,"cursor":null,"copilot":".github/copilot-instructions.md","dco":null,"cla":null,"disclosure":null},"funding":{"open_collective":"owncast"}},"created_at":"2020-05-24T00:58:13.000Z","updated_at":"2026-09-10T02:09:03.000Z","dependencies_parsed_at":"2026-09-01T20:25:10.239Z","dependency_job_id":null,"html_url":"https://github.com/owncast/owncast","commit_stats":{"total_commits":8253,"total_committers":152,"mean_commits":"54.296052631578945","dds":0.6986550345328971,"last_synced_commit":"921f4f9e4c41fe17f8df4fa3125d9bd7e0718782"},"previous_names":["gabek/owncast","gabek/video-stream"],"tags_count":26,"template":false,"template_full_name":null,"purl":"pkg:github/owncast/owncast","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/owncast%2Fowncast","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/owncast%2Fowncast/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/owncast%2Fowncast/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/owncast%2Fowncast/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/owncast","download_url":"https://codeload.github.com/owncast/owncast/tar.gz/refs/heads/develop","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/owncast%2Fowncast/sbom","scorecard":{"id":416245,"data":{"date":"2025-08-11","repo":{"name":"github.com/owncast/owncast","commit":"c5234a22796573207b900ab2d6392cf39d74c388"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":4.5,"checks":[{"name":"Maintained","score":10,"reason":"30 commit(s) and 24 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Code-Review","score":0,"reason":"Found 0/24 approved changesets -- score normalized to 0","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: docs/SECURITY.md:1","Info: Found linked content: docs/SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: docs/SECURITY.md:1","Info: Found text in security policy: docs/SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: MIT License: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: jobLevel 'contents' permission set to 'read': .github/workflows/copilot-setup-steps.yml:23","Warn: no topLevel permission defined: .github/workflows/actions-lint.yml:1","Warn: no topLevel permission defined: .github/workflows/add-default-web-localizations.yml:1","Warn: no topLevel permission defined: .github/workflows/auto-comment-on-label.yaml:1","Warn: no topLevel permission defined: .github/workflows/automated-end-to-end-api.yaml:1","Warn: no topLevel permission defined: .github/workflows/browser-testing.yml:1","Warn: no topLevel permission defined: .github/workflows/build-storybook.yml:1","Warn: no topLevel permission defined: .github/workflows/chromatic.yml:1","Warn: no topLevel permission defined: .github/workflows/codeql-analysis.yml:1","Warn: no topLevel permission defined: .github/workflows/container-lint.yml:1","Warn: no topLevel permission defined: .github/workflows/container.yaml:1","Warn: no topLevel permission defined: .github/workflows/copilot-setup-steps.yml:1","Warn: no topLevel permission defined: .github/workflows/css-lint.yaml:1","Warn: no topLevel permission defined: .github/workflows/generate-api-documentation.yaml:1","Info: topLevel 'contents' permission set to 'read': .github/workflows/go-lint.yml:11","Warn: no topLevel permission defined: .github/workflows/go-tests.yaml:1","Warn: no topLevel permission defined: .github/workflows/hls-tests.yml:1","Warn: no topLevel permission defined: .github/workflows/javascript-format-test-build.yml:1","Warn: no topLevel permission defined: .github/workflows/shellcheck.yml:1","Warn: no topLevel permission defined: .github/workflows/stale.yml:1","Warn: no topLevel permission defined: .github/workflows/translations.yml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Signed-Releases","score":0,"reason":"Project has not signed or included provenance with any releases.","details":["Warn: release artifact v0.2.3 not signed: https://api.github.com/repos/owncast/owncast/releases/217201367","Warn: release artifact v0.2.2 not signed: https://api.github.com/repos/owncast/owncast/releases/207649910","Warn: release artifact v0.2.1 not signed: https://api.github.com/repos/owncast/owncast/releases/195053995","Warn: release artifact v0.2.0 not signed: https://api.github.com/repos/owncast/owncast/releases/193231882","Warn: release artifact v0.1.3 not signed: https://api.github.com/repos/owncast/owncast/releases/145405242","Warn: release artifact v0.2.3 does not have provenance: https://api.github.com/repos/owncast/owncast/releases/217201367","Warn: release artifact v0.2.2 does not have provenance: https://api.github.com/repos/owncast/owncast/releases/207649910","Warn: release artifact v0.2.1 does not have provenance: https://api.github.com/repos/owncast/owncast/releases/195053995","Warn: release artifact v0.2.0 does not have provenance: https://api.github.com/repos/owncast/owncast/releases/193231882","Warn: release artifact v0.1.3 does not have provenance: https://api.github.com/repos/owncast/owncast/releases/145405242"],"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"SAST","score":10,"reason":"SAST tool is run on all commits","details":["Info: SAST configuration detected: CodeQL","Info: all commits (9) are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}},{"name":"Branch-Protection","score":3,"reason":"branch protection is not maximal on development and all release branches","details":["Info: 'allow deletion' disabled on branch 'develop'","Info: 'force pushes' disabled on branch 'develop'","Warn: 'branch protection settings apply to administrators' is disabled on branch 'develop'","Warn: could not determine whether codeowners review is allowed","Warn: no status checks found to merge onto branch 'develop'","Warn: PRs are not required to make changes on branch 'develop'; or we don't have data to detect it.If you think it might be the latter, make sure to run Scorecard with a PAT or use Repo Rules (that are always public) instead of Branch Protection settings"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/actions-lint.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/owncast/owncast/actions-lint.yml/develop?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/actions-lint.yml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/owncast/owncast/actions-lint.yml/develop?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/actions-lint.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/owncast/owncast/actions-lint.yml/develop?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/add-default-web-localizations.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/owncast/owncast/add-default-web-localizations.yml/develop?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/add-default-web-localizations.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/owncast/owncast/add-default-web-localizations.yml/develop?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/automated-end-to-end-api.yaml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/owncast/owncast/automated-end-to-end-api.yaml/develop?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/automated-end-to-end-api.yaml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/owncast/owncast/automated-end-to-end-api.yaml/develop?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/automated-end-to-end-api.yaml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/owncast/owncast/automated-end-to-end-api.yaml/develop?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/automated-end-to-end-api.yaml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/owncast/owncast/automated-end-to-end-api.yaml/develop?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/automated-end-to-end-api.yaml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/owncast/owncast/automated-end-to-end-api.yaml/develop?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/automated-end-to-end-api.yaml:52: update your workflow using https://app.stepsecurity.io/secureworkflow/owncast/owncast/automated-end-to-end-api.yaml/develop?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/automated-end-to-end-api.yaml:59: update your workflow using https://app.stepsecurity.io/secureworkflow/owncast/owncast/automated-end-to-end-api.yaml/develop?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/browser-testing.yml:18: update your workflow using https://app.stepsecurity.io/secureworkflow/owncast/owncast/browser-testing.yml/develop?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/browser-testing.yml:23: update your workflow using https://app.stepsecurity.io/secureworkflow/owncast/owncast/browser-testing.yml/develop?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/browser-testing.yml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/owncast/owncast/browser-testing.yml/develop?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/browser-testing.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/owncast/owncast/browser-testing.yml/develop?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/browser-testing.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/owncast/owncast/browser-testing.yml/develop?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/browser-testing.yml:49: update your workflow using https://app.stepsecurity.io/secureworkflow/owncast/owncast/browser-testing.yml/develop?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/browser-testing.yml:58: update your workflow using https://app.stepsecurity.io/secureworkflow/owncast/owncast/browser-testing.yml/develop?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build-storybook.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/owncast/owncast/build-storybook.yml/develop?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build-storybook.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/owncast/owncast/build-storybook.yml/develop?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build-storybook.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/owncast/owncast/build-storybook.yml/develop?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/build-storybook.yml:53: update your workflow using https://app.stepsecurity.io/secureworkflow/owncast/owncast/build-storybook.yml/develop?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/build-storybook.yml:65: update your workflow using https://app.stepsecurity.io/secureworkflow/owncast/owncast/build-storybook.yml/develop?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/chromatic.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/owncast/owncast/chromatic.yml/develop?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/chromatic.yml:32: update your workflow using https://app.stepsecurity.io/secureworkflow/owncast/owncast/chromatic.yml/develop?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/chromatic.yml:36: update your workflow using https://app.stepsecurity.io/secureworkflow/owncast/owncast/chromatic.yml/develop?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/chromatic.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/owncast/owncast/chromatic.yml/develop?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/chromatic.yml:59: update your workflow using https://app.stepsecurity.io/secureworkflow/owncast/owncast/chromatic.yml/develop?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/owncast/owncast/codeql-analysis.yml/develop?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:47: update your workflow using https://app.stepsecurity.io/secureworkflow/owncast/owncast/codeql-analysis.yml/develop?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:50: update your workflow using https://app.stepsecurity.io/secureworkflow/owncast/owncast/codeql-analysis.yml/develop?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:57: update your workflow using https://app.stepsecurity.io/secureworkflow/owncast/owncast/codeql-analysis.yml/develop?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:69: update your workflow using https://app.stepsecurity.io/secureworkflow/owncast/owncast/codeql-analysis.yml/develop?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:83: update your workflow using https://app.stepsecurity.io/secureworkflow/owncast/owncast/codeql-analysis.yml/develop?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/container-lint.yml:23: update your workflow using https://app.stepsecurity.io/secureworkflow/owncast/owncast/container-lint.yml/develop?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/container-lint.yml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/owncast/owncast/container-lint.yml/develop?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/container.yaml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/owncast/owncast/container.yaml/develop?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/container.yaml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/owncast/owncast/container.yaml/develop?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/container.yaml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/owncast/owncast/container.yaml/develop?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/container.yaml:48: update your workflow using https://app.stepsecurity.io/secureworkflow/owncast/owncast/container.yaml/develop?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/container.yaml:58: update your workflow using https://app.stepsecurity.io/secureworkflow/owncast/owncast/container.yaml/develop?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/copilot-setup-steps.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/owncast/owncast/copilot-setup-steps.yml/develop?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/copilot-setup-steps.yml:32: update your workflow using https://app.stepsecurity.io/secureworkflow/owncast/owncast/copilot-setup-steps.yml/develop?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/copilot-setup-steps.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/owncast/owncast/copilot-setup-steps.yml/develop?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/css-lint.yaml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/owncast/owncast/css-lint.yaml/develop?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/css-lint.yaml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/owncast/owncast/css-lint.yaml/develop?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/css-lint.yaml:32: update your workflow using https://app.stepsecurity.io/secureworkflow/owncast/owncast/css-lint.yaml/develop?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/css-lint.yaml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/owncast/owncast/css-lint.yaml/develop?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/generate-api-documentation.yaml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/owncast/owncast/generate-api-documentation.yaml/develop?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/generate-api-documentation.yaml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/owncast/owncast/generate-api-documentation.yaml/develop?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/generate-api-documentation.yaml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/owncast/owncast/generate-api-documentation.yaml/develop?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/go-lint.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/owncast/owncast/go-lint.yml/develop?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/go-lint.yml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/owncast/owncast/go-lint.yml/develop?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/go-lint.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/owncast/owncast/go-lint.yml/develop?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/go-lint.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/owncast/owncast/go-lint.yml/develop?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/go-lint.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/owncast/owncast/go-lint.yml/develop?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/go-tests.yaml:19: update your workflow using https://app.stepsecurity.io/secureworkflow/owncast/owncast/go-tests.yaml/develop?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/go-tests.yaml:23: update your workflow using https://app.stepsecurity.io/secureworkflow/owncast/owncast/go-tests.yaml/develop?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/go-tests.yaml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/owncast/owncast/go-tests.yaml/develop?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/go-tests.yaml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/owncast/owncast/go-tests.yaml/develop?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/go-tests.yaml:61: update your workflow using https://app.stepsecurity.io/secureworkflow/owncast/owncast/go-tests.yaml/develop?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/go-tests.yaml:65: update your workflow using https://app.stepsecurity.io/secureworkflow/owncast/owncast/go-tests.yaml/develop?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/go-tests.yaml:71: update your workflow using https://app.stepsecurity.io/secureworkflow/owncast/owncast/go-tests.yaml/develop?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/go-tests.yaml:82: update your workflow using https://app.stepsecurity.io/secureworkflow/owncast/owncast/go-tests.yaml/develop?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/hls-tests.yml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/owncast/owncast/hls-tests.yml/develop?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/hls-tests.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/owncast/owncast/hls-tests.yml/develop?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/hls-tests.yml:36: update your workflow using https://app.stepsecurity.io/secureworkflow/owncast/owncast/hls-tests.yml/develop?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/hls-tests.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/owncast/owncast/hls-tests.yml/develop?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/hls-tests.yml:47: update your workflow using https://app.stepsecurity.io/secureworkflow/owncast/owncast/hls-tests.yml/develop?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/hls-tests.yml:54: update your workflow using https://app.stepsecurity.io/secureworkflow/owncast/owncast/hls-tests.yml/develop?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/hls-tests.yml:67: update your workflow using https://app.stepsecurity.io/secureworkflow/owncast/owncast/hls-tests.yml/develop?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/hls-tests.yml:75: update your workflow using https://app.stepsecurity.io/secureworkflow/owncast/owncast/hls-tests.yml/develop?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/javascript-format-test-build.yml:167: update your workflow using https://app.stepsecurity.io/secureworkflow/owncast/owncast/javascript-format-test-build.yml/develop?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/javascript-format-test-build.yml:174: update your workflow using https://app.stepsecurity.io/secureworkflow/owncast/owncast/javascript-format-test-build.yml/develop?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/javascript-format-test-build.yml:179: update your workflow using https://app.stepsecurity.io/secureworkflow/owncast/owncast/javascript-format-test-build.yml/develop?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/javascript-format-test-build.yml:191: update your workflow using https://app.stepsecurity.io/secureworkflow/owncast/owncast/javascript-format-test-build.yml/develop?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/javascript-format-test-build.yml:198: update your workflow using https://app.stepsecurity.io/secureworkflow/owncast/owncast/javascript-format-test-build.yml/develop?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/javascript-format-test-build.yml:213: update your workflow using https://app.stepsecurity.io/secureworkflow/owncast/owncast/javascript-format-test-build.yml/develop?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/javascript-format-test-build.yml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/owncast/owncast/javascript-format-test-build.yml/develop?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/javascript-format-test-build.yml:32: update your workflow using https://app.stepsecurity.io/secureworkflow/owncast/owncast/javascript-format-test-build.yml/develop?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/javascript-format-test-build.yml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/owncast/owncast/javascript-format-test-build.yml/develop?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/javascript-format-test-build.yml:44: update your workflow using https://app.stepsecurity.io/secureworkflow/owncast/owncast/javascript-format-test-build.yml/develop?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/javascript-format-test-build.yml:49: update your workflow using https://app.stepsecurity.io/secureworkflow/owncast/owncast/javascript-format-test-build.yml/develop?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/javascript-format-test-build.yml:60: update your workflow using https://app.stepsecurity.io/secureworkflow/owncast/owncast/javascript-format-test-build.yml/develop?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/javascript-format-test-build.yml:95: update your workflow using https://app.stepsecurity.io/secureworkflow/owncast/owncast/javascript-format-test-build.yml/develop?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/javascript-format-test-build.yml:113: update your workflow using https://app.stepsecurity.io/secureworkflow/owncast/owncast/javascript-format-test-build.yml/develop?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/javascript-format-test-build.yml:120: update your workflow using https://app.stepsecurity.io/secureworkflow/owncast/owncast/javascript-format-test-build.yml/develop?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/javascript-format-test-build.yml:127: update your workflow using https://app.stepsecurity.io/secureworkflow/owncast/owncast/javascript-format-test-build.yml/develop?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/javascript-format-test-build.yml:131: update your workflow using https://app.stepsecurity.io/secureworkflow/owncast/owncast/javascript-format-test-build.yml/develop?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/javascript-format-test-build.yml:136: update your workflow using https://app.stepsecurity.io/secureworkflow/owncast/owncast/javascript-format-test-build.yml/develop?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/shellcheck.yml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/owncast/owncast/shellcheck.yml/develop?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/shellcheck.yml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/owncast/owncast/shellcheck.yml/develop?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/stale.yml:10: update your workflow using https://app.stepsecurity.io/secureworkflow/owncast/owncast/stale.yml/develop?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/translations.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/owncast/owncast/translations.yml/develop?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/translations.yml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/owncast/owncast/translations.yml/develop?enable=pin","Warn: containerImage not pinned by hash: Dockerfile:8","Warn: containerImage not pinned by hash: Dockerfile:25: pin your Docker image by updating alpine:3.22.1 to alpine:3.22.1@sha256:4bcff63911fcb4448bd4fdacec207030997caf25e9bea4045fa6c8c44de311d1","Warn: npmCommand not pinned by hash: build/web/bundleWeb.sh:25","Warn: npmCommand not pinned by hash: test/automated/api/run.sh:8","Warn: npmCommand not pinned by hash: test/automated/browser/run.sh:35","Warn: npmCommand not pinned by hash: test/automated/hls/run-s3.sh:14","Warn: npmCommand not pinned by hash: test/automated/hls/run.sh:8","Warn: npmCommand not pinned by hash: test/automated/screenshots/run.sh:24","Warn: npmCommand not pinned by hash: .github/workflows/build-storybook.yml:45","Warn: npmCommand not pinned by hash: .github/workflows/chromatic.yml:56","Warn: npmCommand not pinned by hash: .github/workflows/css-lint.yaml:47","Warn: npmCommand not pinned by hash: .github/workflows/javascript-format-test-build.yml:73","Warn: npmCommand not pinned by hash: .github/workflows/javascript-format-test-build.yml:149","Warn: npmCommand not pinned by hash: .github/workflows/translations.yml:34","Info:   0 out of  63 GitHub-owned GitHubAction dependencies pinned","Info:   1 out of  34 third-party GitHubAction dependencies pinned","Info:   0 out of   2 containerImage dependencies pinned","Info:   2 out of  14 npmCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Vulnerabilities","score":0,"reason":"22 existing vulnerabilities detected","details":["Warn: Project is vulnerable to: GO-2022-0635","Warn: Project is vulnerable to: GO-2022-0646","Warn: Project is vulnerable to: GHSA-968p-4wvh-cqc8","Warn: Project is vulnerable to: GHSA-h452-7996-h45h","Warn: Project is vulnerable to: GHSA-3xgq-45jj-v275","Warn: Project is vulnerable to: GHSA-75v8-2h7p-7m2m","Warn: Project is vulnerable to: GHSA-952p-6rrq-rcjv","Warn: Project is vulnerable to: GHSA-p8p7-x288-28g6","Warn: Project is vulnerable to: GHSA-v6h2-p8h4-qcjw","Warn: Project is vulnerable to: GHSA-pxg6-pf52-xh8x","Warn: Project is vulnerable to: GHSA-fjxv-7rqg-78g4","Warn: Project is vulnerable to: GHSA-pfrx-2q88-qq97","Warn: Project is vulnerable to: GHSA-p6mc-m468-83gw","Warn: Project is vulnerable to: GHSA-c2qf-rxjj-qqgw","Warn: Project is vulnerable to: GHSA-pq67-2wwv-3xjx","Warn: Project is vulnerable to: GHSA-8cj5-5rvv-wf4v","Warn: Project is vulnerable to: GHSA-3h5v-q93c-6h6q","Warn: Project is vulnerable to: GHSA-52f5-9888-hmc6","Warn: Project is vulnerable to: GHSA-67mh-4wv8-2f99","Warn: Project is vulnerable to: GHSA-m5qc-5hw7-8vg7","Warn: Project is vulnerable to: GHSA-9wv6-86v2-598j","Warn: Project is vulnerable to: GHSA-7fh5-64p2-3v2j"],"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}}]},"last_synced_at":"2025-08-18T23:56:06.056Z","repository_id":37021113,"created_at":"2025-08-18T23:56:06.056Z","updated_at":"2025-08-18T23:56:06.056Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":341189360,"owners_count":37234307,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-08-22T15:14:58.755Z","status":"online","status_checked_at":"2026-09-12T02:00:07.213Z","response_time":57,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"owncast","name":"Owncast","uuid":"69942503","kind":"organization","description":"A self-hosted live stream server with chat features.","email":"gabek@real-ity.com","website":"http://owncast.online","location":null,"twitter":null,"company":null,"icon_url":"https://avatars.githubusercontent.com/u/69942503?v=4","repositories_count":6,"last_synced_at":"2023-03-04T01:09:44.026Z","metadata":{"has_sponsors_listing":false},"html_url":"https://github.com/owncast","funding_links":[],"total_stars":null,"followers":null,"following":null,"created_at":"2022-11-14T07:30:43.192Z","updated_at":"2023-03-04T01:09:44.035Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/owncast","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/owncast/repositories"},"tags":[{"name":"v0.2.5","sha":"65d03b4d5df13dfc2033311fa30e4513b63b3e16","kind":"commit","published_at":"2026-04-11T20:47:29.000Z","download_url":"https://codeload.github.com/owncast/owncast/tar.gz/v0.2.5","html_url":"https://github.com/owncast/owncast/releases/tag/v0.2.5","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/owncast/owncast@v0.2.5","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/owncast%2Fowncast/tags/v0.2.5","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/owncast%2Fowncast/tags/v0.2.5/manifests"},{"name":"v0.2.4","sha":"1dba94684708895045b81f52764472da90a977a7","kind":"commit","published_at":"2026-01-09T20:57:02.000Z","download_url":"https://codeload.github.com/owncast/owncast/tar.gz/v0.2.4","html_url":"https://github.com/owncast/owncast/releases/tag/v0.2.4","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/owncast/owncast@v0.2.4","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/owncast%2Fowncast/tags/v0.2.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/owncast%2Fowncast/tags/v0.2.4/manifests"},{"name":"v0.2.3","sha":"7cfe3fc111df9450115496118979e5621c937803","kind":"commit","published_at":"2025-05-10T20:43:40.000Z","download_url":"https://codeload.github.com/owncast/owncast/tar.gz/v0.2.3","html_url":"https://github.com/owncast/owncast/releases/tag/v0.2.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/owncast/owncast@v0.2.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/owncast%2Fowncast/tags/v0.2.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/owncast%2Fowncast/tags/v0.2.3/manifests"},{"name":"v0.2.2","sha":"c3da19070a9685f8e8c21ee753c632551454eb6e","kind":"commit","published_at":"2025-05-03T18:22:00.000Z","download_url":"https://codeload.github.com/owncast/owncast/tar.gz/v0.2.2","html_url":"https://github.com/owncast/owncast/releases/tag/v0.2.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/owncast/owncast@v0.2.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/owncast%2Fowncast/tags/v0.2.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/owncast%2Fowncast/tags/v0.2.2/manifests"},{"name":"v0.2.1","sha":"c7fbb476473e646b9f9c1dc5555a2147ab9a0e42","kind":"commit","published_at":"2025-01-19T22:40:40.000Z","download_url":"https://codeload.github.com/owncast/owncast/tar.gz/v0.2.1","html_url":"https://github.com/owncast/owncast/releases/tag/v0.2.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/owncast/owncast@v0.2.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/owncast%2Fowncast/tags/v0.2.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/owncast%2Fowncast/tags/v0.2.1/manifests"},{"name":"v0.2.1-old2","sha":"b8c46a1f09e02dc53cdc5a16646555fe8548ae0b","kind":"commit","published_at":"2025-01-19T22:07:46.000Z","download_url":"https://codeload.github.com/owncast/owncast/tar.gz/v0.2.1-old2","html_url":"https://github.com/owncast/owncast/releases/tag/v0.2.1-old2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/owncast/owncast@v0.2.1-old2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/owncast%2Fowncast/tags/v0.2.1-old2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/owncast%2Fowncast/tags/v0.2.1-old2/manifests"},{"name":"v0.2.1-old","sha":"70d8ca9646181222a635e2d30d5165142c61c7c7","kind":"commit","published_at":"2025-01-19T00:38:59.000Z","download_url":"https://codeload.github.com/owncast/owncast/tar.gz/v0.2.1-old","html_url":"https://github.com/owncast/owncast/releases/tag/v0.2.1-old","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/owncast/owncast@v0.2.1-old","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/owncast%2Fowncast/tags/v0.2.1-old","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/owncast%2Fowncast/tags/v0.2.1-old/manifests"},{"name":"untagged-00fff439c349c6e4ee3e","sha":"49bdbb2e9e79b84f881f7f0406e0a5dd44178f4c","kind":"commit","published_at":"2025-01-17T19:58:35.000Z","download_url":"https://codeload.github.com/owncast/owncast/tar.gz/untagged-00fff439c349c6e4ee3e","html_url":"https://github.com/owncast/owncast/releases/tag/untagged-00fff439c349c6e4ee3e","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/owncast/owncast@untagged-00fff439c349c6e4ee3e","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/owncast%2Fowncast/tags/untagged-00fff439c349c6e4ee3e","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/owncast%2Fowncast/tags/untagged-00fff439c349c6e4ee3e/manifests"},{"name":"v0.2.0","sha":"5483000f79ba1910e46399d008bb1f4246381ae1","kind":"commit","published_at":"2025-01-09T00:20:50.000Z","download_url":"https://codeload.github.com/owncast/owncast/tar.gz/v0.2.0","html_url":"https://github.com/owncast/owncast/releases/tag/v0.2.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/owncast/owncast@v0.2.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/owncast%2Fowncast/tags/v0.2.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/owncast%2Fowncast/tags/v0.2.0/manifests"},{"name":"v0.1.3","sha":"01b6c5ca264214ba0aab1ff7e1891ca935d2162a","kind":"commit","published_at":"2024-04-07T13:31:22.000Z","download_url":"https://codeload.github.com/owncast/owncast/tar.gz/v0.1.3","html_url":"https://github.com/owncast/owncast/releases/tag/v0.1.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/owncast/owncast@v0.1.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/owncast%2Fowncast/tags/v0.1.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/owncast%2Fowncast/tags/v0.1.3/manifests"},{"name":"v0.1.2","sha":"dc88e4e9f02027b4de0449d9f04e2f75e8513d66","kind":"commit","published_at":"2023-11-18T04:20:27.000Z","download_url":"https://codeload.github.com/owncast/owncast/tar.gz/v0.1.2","html_url":"https://github.com/owncast/owncast/releases/tag/v0.1.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/owncast/owncast@v0.1.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/owncast%2Fowncast/tags/v0.1.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/owncast%2Fowncast/tags/v0.1.2/manifests"},{"name":"v0.1.1","sha":"9055af03436059c0a8b6592b93f6cc8d7be3087f","kind":"commit","published_at":"2023-07-28T12:26:39.000Z","download_url":"https://codeload.github.com/owncast/owncast/tar.gz/v0.1.1","html_url":"https://github.com/owncast/owncast/releases/tag/v0.1.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/owncast/owncast@v0.1.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/owncast%2Fowncast/tags/v0.1.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/owncast%2Fowncast/tags/v0.1.1/manifests"},{"name":"v0.1.0","sha":"0c623b8f6e90ce1d65116f921fcf91ca94d76f96","kind":"commit","published_at":"2023-05-30T04:11:59.000Z","download_url":"https://codeload.github.com/owncast/owncast/tar.gz/v0.1.0","html_url":"https://github.com/owncast/owncast/releases/tag/v0.1.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/owncast/owncast@v0.1.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/owncast%2Fowncast/tags/v0.1.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/owncast%2Fowncast/tags/v0.1.0/manifests"},{"name":"v0.0.13","sha":"8d28020b6f4eb1baae321caf4dfe0dbad7172f1d","kind":"commit","published_at":"2022-11-22T01:44:19.000Z","download_url":"https://codeload.github.com/owncast/owncast/tar.gz/v0.0.13","html_url":"https://github.com/owncast/owncast/releases/tag/v0.0.13","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/owncast/owncast@v0.0.13","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/owncast%2Fowncast/tags/v0.0.13","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/owncast%2Fowncast/tags/v0.0.13/manifests"},{"name":"v0.0.12","sha":"da5f558722f4830f8055b1efb380142aa5b2c185","kind":"commit","published_at":"2022-07-07T04:46:03.000Z","download_url":"https://codeload.github.com/owncast/owncast/tar.gz/v0.0.12","html_url":"https://github.com/owncast/owncast/releases/tag/v0.0.12","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/owncast/owncast@v0.0.12","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/owncast%2Fowncast/tags/v0.0.12","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/owncast%2Fowncast/tags/v0.0.12/manifests"},{"name":"v0.0.11","sha":"87bd1e57e62c071b4a78fc1eacb30ecd8b1008cb","kind":"commit","published_at":"2022-03-05T03:31:38.000Z","download_url":"https://codeload.github.com/owncast/owncast/tar.gz/v0.0.11","html_url":"https://github.com/owncast/owncast/releases/tag/v0.0.11","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/owncast/owncast@v0.0.11","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/owncast%2Fowncast/tags/v0.0.11","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/owncast%2Fowncast/tags/v0.0.11/manifests"},{"name":"v0.0.10","sha":"049b6e80ea1f543e958379e6789c6c1b3aa60277","kind":"commit","published_at":"2021-10-05T23:45:53.000Z","download_url":"https://codeload.github.com/owncast/owncast/tar.gz/v0.0.10","html_url":"https://github.com/owncast/owncast/releases/tag/v0.0.10","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/owncast/owncast@v0.0.10","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/owncast%2Fowncast/tags/v0.0.10","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/owncast%2Fowncast/tags/v0.0.10/manifests"},{"name":"v0.0.9","sha":"57facee9fd7832371f673a10422a4ae4f21414ea","kind":"commit","published_at":"2021-09-23T00:36:22.000Z","download_url":"https://codeload.github.com/owncast/owncast/tar.gz/v0.0.9","html_url":"https://github.com/owncast/owncast/releases/tag/v0.0.9","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/owncast/owncast@v0.0.9","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/owncast%2Fowncast/tags/v0.0.9","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/owncast%2Fowncast/tags/v0.0.9/manifests"},{"name":"v0.0.8","sha":"62cc3505172d322cc61b884f2493c61ed7b939a1","kind":"commit","published_at":"2021-08-10T19:19:26.000Z","download_url":"https://codeload.github.com/owncast/owncast/tar.gz/v0.0.8","html_url":"https://github.com/owncast/owncast/releases/tag/v0.0.8","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/owncast/owncast@v0.0.8","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/owncast%2Fowncast/tags/v0.0.8","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/owncast%2Fowncast/tags/v0.0.8/manifests"},{"name":"v0.0.7","sha":"9537dd30394eb5ba8c28eb2fd38b341c70770fd6","kind":"commit","published_at":"2021-05-14T22:28:13.000Z","download_url":"https://codeload.github.com/owncast/owncast/tar.gz/v0.0.7","html_url":"https://github.com/owncast/owncast/releases/tag/v0.0.7","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/owncast/owncast@v0.0.7","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/owncast%2Fowncast/tags/v0.0.7","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/owncast%2Fowncast/tags/v0.0.7/manifests"},{"name":"v0.0.6","sha":"e635c24aecef937a2217422ca5498ac3db6de452","kind":"commit","published_at":"2021-03-08T06:46:51.000Z","download_url":"https://codeload.github.com/owncast/owncast/tar.gz/v0.0.6","html_url":"https://github.com/owncast/owncast/releases/tag/v0.0.6","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/owncast/owncast@v0.0.6","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/owncast%2Fowncast/tags/v0.0.6","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/owncast%2Fowncast/tags/v0.0.6/manifests"},{"name":"v0.0.5","sha":"dbe6cf8a043ce3f59056b8e532ebe5586f0a01db","kind":"commit","published_at":"2021-01-12T03:44:02.000Z","download_url":"https://codeload.github.com/owncast/owncast/tar.gz/v0.0.5","html_url":"https://github.com/owncast/owncast/releases/tag/v0.0.5","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/owncast/owncast@v0.0.5","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/owncast%2Fowncast/tags/v0.0.5","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/owncast%2Fowncast/tags/v0.0.5/manifests"},{"name":"v0.0.4","sha":"5914570d6ce233b1821c0df61694bfcec856c229","kind":"commit","published_at":"2020-12-29T02:10:40.000Z","download_url":"https://codeload.github.com/owncast/owncast/tar.gz/v0.0.4","html_url":"https://github.com/owncast/owncast/releases/tag/v0.0.4","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/owncast/owncast@v0.0.4","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/owncast%2Fowncast/tags/v0.0.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/owncast%2Fowncast/tags/v0.0.4/manifests"},{"name":"v0.0.3","sha":"f8bdda4fa44524d17d569218f019b757bff7b1c4","kind":"commit","published_at":"2020-12-14T07:09:55.000Z","download_url":"https://codeload.github.com/owncast/owncast/tar.gz/v0.0.3","html_url":"https://github.com/owncast/owncast/releases/tag/v0.0.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/owncast/owncast@v0.0.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/owncast%2Fowncast/tags/v0.0.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/owncast%2Fowncast/tags/v0.0.3/manifests"},{"name":"v0.0.2","sha":"dfd44be05196110b06c97fde3ab2d4c0daf79de7","kind":"commit","published_at":"2020-09-28T03:12:45.000Z","download_url":"https://codeload.github.com/owncast/owncast/tar.gz/v0.0.2","html_url":"https://github.com/owncast/owncast/releases/tag/v0.0.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/owncast/owncast@v0.0.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/owncast%2Fowncast/tags/v0.0.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/owncast%2Fowncast/tags/v0.0.2/manifests"},{"name":"v0.0.1","sha":"6aed462d91e577620933f354359afa915ea5f742","kind":"tag","published_at":"2020-08-08T02:49:19.000Z","download_url":"https://codeload.github.com/owncast/owncast/tar.gz/v0.0.1","html_url":"https://github.com/owncast/owncast/releases/tag/v0.0.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/owncast/owncast@v0.0.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/owncast%2Fowncast/tags/v0.0.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/owncast%2Fowncast/tags/v0.0.1/manifests"}]},"repo_metadata_updated_at":"2026-09-12T10:39:48.244Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":4.718583725988072,"dependent_packages_count":4.421204273213441,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":4.569893999600756},"purl":"pkg:golang/github.com/owncast/owncast/tools","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/go/github.com/owncast/owncast/tools","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/go/github.com/owncast/owncast/tools","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/go/github.com/owncast/owncast/tools/dependencies","status":"removed","funding_links":["https://opencollective.com/owncast"],"critical":null,"issue_metadata":{"last_synced_at":"2026-09-08T11:52:08.882Z","issues_count":772,"pull_requests_count":1394,"avg_time_to_close_issue":8408802.450485436,"avg_time_to_close_pull_request":966736.5582722087,"issues_closed_count":515,"pull_requests_closed_count":1227,"pull_request_authors_count":106,"issue_authors_count":245,"avg_comments_per_issue":3.680051813471503,"avg_comments_per_pull_request":1.9784791965566715,"merged_pull_requests_count":1061,"bot_issues_count":4,"bot_pull_requests_count":897,"past_year_issues_count":66,"past_year_pull_requests_count":141,"past_year_avg_time_to_close_issue":836802.5789473684,"past_year_avg_time_to_close_pull_request":540691.4946236559,"past_year_issues_closed_count":38,"past_year_pull_requests_closed_count":93,"past_year_pull_request_authors_count":9,"past_year_issue_authors_count":21,"past_year_avg_comments_per_issue":1.3333333333333333,"past_year_avg_comments_per_pull_request":1.425531914893617,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":70,"past_year_merged_pull_requests_count":86,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/owncast%2Fowncast/issues","maintainers":[{"login":"gabek","count":509,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gabek"},{"login":"janWilejan","count":25,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/janWilejan"},{"login":"gingervitis","count":10,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gingervitis"},{"login":"jprjr","count":9,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jprjr"},{"login":"MFTabriz","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/MFTabriz"},{"login":"jeyemwey","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jeyemwey"},{"login":"germainelee","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/germainelee"}],"active_maintainers":[{"login":"gabek","count":75,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gabek"},{"login":"germainelee","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/germainelee"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fowncast%2Fowncast%2Ftools/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fowncast%2Fowncast%2Ftools/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fowncast%2Fowncast%2Ftools/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fowncast%2Fowncast%2Ftools/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fowncast%2Fowncast%2Ftools/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fowncast%2Fowncast%2Ftools/codemeta","maintainers":[],"registry":{"name":"proxy.golang.org","url":"https://proxy.golang.org","ecosystem":"go","default":true,"packages_count":2322374,"maintainers_count":0,"namespaces_count":841575,"keywords_count":127858,"github":"golang","metadata":{"funded_packages_count":82019,"sync_missing_packages_cursor":{"timestamp":"2026-09-13T00:27:08.257651Z","path":"github.com/ultralytics/thop","version":"v2.0.21+incompatible"},"rate_limit":1},"icon_url":"https://github.com/golang.png","created_at":"2022-04-04T15:19:22.939Z","updated_at":"2026-09-13T05:01:04.658Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/namespaces"}},{"id":3763007,"name":"github.com/owncast/owncast","ecosystem":"go","description":"","homepage":"https://github.com/owncast/owncast","licenses":"MIT","normalized_licenses":["MIT"],"repository_url":"https://github.com/owncast/owncast","keywords_array":[],"namespace":"github.com/owncast","versions_count":27,"first_release_published_at":"2020-08-06T19:19:35.000Z","latest_release_published_at":"2026-09-02T08:21:01.000Z","latest_release_number":"v0.3.0","last_synced_at":"2026-09-12T15:16:44.286Z","created_at":"2022-04-11T16:05:01.570Z","updated_at":"2026-09-13T11:16:00.493Z","registry_url":"https://pkg.go.dev/github.com/owncast/owncast","install_command":"go get github.com/owncast/owncast","documentation_url":"https://pkg.go.dev/github.com/owncast/owncast#section-documentation","metadata":{},"repo_metadata":{"id":37021113,"uuid":"266445736","full_name":"owncast/owncast","owner":"owncast","description":"Take control over your live stream video by running it yourself.  Streaming + chat out of the box.","archived":false,"fork":false,"pushed_at":"2026-09-10T02:12:09.000Z","size":1041279,"stargazers_count":11519,"open_issues_count":165,"forks_count":1175,"subscribers_count":106,"default_branch":"develop","last_synced_at":"2026-09-10T02:25:48.600Z","etag":null,"topics":["activitypub","broadcasting","chat","decentralized","federation","fediverse","golang","hacktoberfest","hls","live","livestream","owncast","rtmp","self-hosted","streaming-video","video"],"latest_commit_sha":null,"homepage":"https://owncast.online","language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/owncast.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":"CONTRIBUTING.md","funding":".github/FUNDING.yml","license":"LICENSE","code_of_conduct":"CODE_OF_CONDUCT.md","threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":"docs/SECURITY.md","support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":"AGENTS.md","claude":"CLAUDE.md","gemini":null,"cursor":null,"copilot":".github/copilot-instructions.md","dco":null,"cla":null,"disclosure":null},"funding":{"open_collective":"owncast"}},"created_at":"2020-05-24T00:58:13.000Z","updated_at":"2026-09-10T02:09:03.000Z","dependencies_parsed_at":"2026-09-01T20:25:10.239Z","dependency_job_id":null,"html_url":"https://github.com/owncast/owncast","commit_stats":{"total_commits":8253,"total_committers":152,"mean_commits":"54.296052631578945","dds":0.6986550345328971,"last_synced_commit":"921f4f9e4c41fe17f8df4fa3125d9bd7e0718782"},"previous_names":["gabek/owncast","gabek/video-stream"],"tags_count":26,"template":false,"template_full_name":null,"purl":"pkg:github/owncast/owncast","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/owncast%2Fowncast","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/owncast%2Fowncast/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/owncast%2Fowncast/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/owncast%2Fowncast/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/owncast","download_url":"https://codeload.github.com/owncast/owncast/tar.gz/refs/heads/develop","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/owncast%2Fowncast/sbom","scorecard":{"id":416245,"data":{"date":"2025-08-11","repo":{"name":"github.com/owncast/owncast","commit":"c5234a22796573207b900ab2d6392cf39d74c388"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":4.5,"checks":[{"name":"Maintained","score":10,"reason":"30 commit(s) and 24 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Code-Review","score":0,"reason":"Found 0/24 approved changesets -- score normalized to 0","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: docs/SECURITY.md:1","Info: Found linked content: docs/SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: docs/SECURITY.md:1","Info: Found text in security policy: docs/SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: MIT License: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: jobLevel 'contents' permission set to 'read': .github/workflows/copilot-setup-steps.yml:23","Warn: no topLevel permission defined: .github/workflows/actions-lint.yml:1","Warn: no topLevel permission defined: .github/workflows/add-default-web-localizations.yml:1","Warn: no topLevel permission defined: .github/workflows/auto-comment-on-label.yaml:1","Warn: no topLevel permission defined: .github/workflows/automated-end-to-end-api.yaml:1","Warn: no topLevel permission defined: .github/workflows/browser-testing.yml:1","Warn: no topLevel permission defined: .github/workflows/build-storybook.yml:1","Warn: no topLevel permission defined: .github/workflows/chromatic.yml:1","Warn: no topLevel permission defined: .github/workflows/codeql-analysis.yml:1","Warn: no topLevel permission defined: .github/workflows/container-lint.yml:1","Warn: no topLevel permission defined: .github/workflows/container.yaml:1","Warn: no topLevel permission defined: .github/workflows/copilot-setup-steps.yml:1","Warn: no topLevel permission defined: .github/workflows/css-lint.yaml:1","Warn: no topLevel permission defined: .github/workflows/generate-api-documentation.yaml:1","Info: topLevel 'contents' permission set to 'read': .github/workflows/go-lint.yml:11","Warn: no topLevel permission defined: .github/workflows/go-tests.yaml:1","Warn: no topLevel permission defined: .github/workflows/hls-tests.yml:1","Warn: no topLevel permission defined: .github/workflows/javascript-format-test-build.yml:1","Warn: no topLevel permission defined: .github/workflows/shellcheck.yml:1","Warn: no topLevel permission defined: .github/workflows/stale.yml:1","Warn: no topLevel permission defined: .github/workflows/translations.yml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Signed-Releases","score":0,"reason":"Project has not signed or included provenance with any releases.","details":["Warn: release artifact v0.2.3 not signed: https://api.github.com/repos/owncast/owncast/releases/217201367","Warn: release artifact v0.2.2 not signed: https://api.github.com/repos/owncast/owncast/releases/207649910","Warn: release artifact v0.2.1 not signed: https://api.github.com/repos/owncast/owncast/releases/195053995","Warn: release artifact v0.2.0 not signed: https://api.github.com/repos/owncast/owncast/releases/193231882","Warn: release artifact v0.1.3 not signed: https://api.github.com/repos/owncast/owncast/releases/145405242","Warn: release artifact v0.2.3 does not have provenance: https://api.github.com/repos/owncast/owncast/releases/217201367","Warn: release artifact v0.2.2 does not have provenance: https://api.github.com/repos/owncast/owncast/releases/207649910","Warn: release artifact v0.2.1 does not have provenance: https://api.github.com/repos/owncast/owncast/releases/195053995","Warn: release artifact v0.2.0 does not have provenance: https://api.github.com/repos/owncast/owncast/releases/193231882","Warn: release artifact v0.1.3 does not have provenance: https://api.github.com/repos/owncast/owncast/releases/145405242"],"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"SAST","score":10,"reason":"SAST tool is run on all commits","details":["Info: SAST configuration detected: CodeQL","Info: all commits (9) are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}},{"name":"Branch-Protection","score":3,"reason":"branch protection is not maximal on development and all release branches","details":["Info: 'allow deletion' disabled on branch 'develop'","Info: 'force pushes' disabled on branch 'develop'","Warn: 'branch protection settings apply to administrators' is disabled on branch 'develop'","Warn: could not determine whether codeowners review is allowed","Warn: no status checks found to merge onto branch 'develop'","Warn: PRs are not required to make changes on branch 'develop'; or we don't have data to detect it.If you think it might be the latter, make sure to run Scorecard with a PAT or use Repo Rules (that are always public) instead of Branch Protection settings"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/actions-lint.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/owncast/owncast/actions-lint.yml/develop?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/actions-lint.yml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/owncast/owncast/actions-lint.yml/develop?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/actions-lint.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/owncast/owncast/actions-lint.yml/develop?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/add-default-web-localizations.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/owncast/owncast/add-default-web-localizations.yml/develop?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/add-default-web-localizations.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/owncast/owncast/add-default-web-localizations.yml/develop?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/automated-end-to-end-api.yaml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/owncast/owncast/automated-end-to-end-api.yaml/develop?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/automated-end-to-end-api.yaml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/owncast/owncast/automated-end-to-end-api.yaml/develop?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/automated-end-to-end-api.yaml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/owncast/owncast/automated-end-to-end-api.yaml/develop?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/automated-end-to-end-api.yaml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/owncast/owncast/automated-end-to-end-api.yaml/develop?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/automated-end-to-end-api.yaml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/owncast/owncast/automated-end-to-end-api.yaml/develop?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/automated-end-to-end-api.yaml:52: update your workflow using https://app.stepsecurity.io/secureworkflow/owncast/owncast/automated-end-to-end-api.yaml/develop?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/automated-end-to-end-api.yaml:59: update your workflow using https://app.stepsecurity.io/secureworkflow/owncast/owncast/automated-end-to-end-api.yaml/develop?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/browser-testing.yml:18: update your workflow using https://app.stepsecurity.io/secureworkflow/owncast/owncast/browser-testing.yml/develop?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/browser-testing.yml:23: update your workflow using https://app.stepsecurity.io/secureworkflow/owncast/owncast/browser-testing.yml/develop?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/browser-testing.yml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/owncast/owncast/browser-testing.yml/develop?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/browser-testing.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/owncast/owncast/browser-testing.yml/develop?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/browser-testing.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/owncast/owncast/browser-testing.yml/develop?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/browser-testing.yml:49: update your workflow using https://app.stepsecurity.io/secureworkflow/owncast/owncast/browser-testing.yml/develop?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/browser-testing.yml:58: update your workflow using https://app.stepsecurity.io/secureworkflow/owncast/owncast/browser-testing.yml/develop?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build-storybook.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/owncast/owncast/build-storybook.yml/develop?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build-storybook.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/owncast/owncast/build-storybook.yml/develop?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build-storybook.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/owncast/owncast/build-storybook.yml/develop?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/build-storybook.yml:53: update your workflow using https://app.stepsecurity.io/secureworkflow/owncast/owncast/build-storybook.yml/develop?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/build-storybook.yml:65: update your workflow using https://app.stepsecurity.io/secureworkflow/owncast/owncast/build-storybook.yml/develop?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/chromatic.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/owncast/owncast/chromatic.yml/develop?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/chromatic.yml:32: update your workflow using https://app.stepsecurity.io/secureworkflow/owncast/owncast/chromatic.yml/develop?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/chromatic.yml:36: update your workflow using https://app.stepsecurity.io/secureworkflow/owncast/owncast/chromatic.yml/develop?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/chromatic.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/owncast/owncast/chromatic.yml/develop?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/chromatic.yml:59: update your workflow using https://app.stepsecurity.io/secureworkflow/owncast/owncast/chromatic.yml/develop?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/owncast/owncast/codeql-analysis.yml/develop?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:47: update your workflow using https://app.stepsecurity.io/secureworkflow/owncast/owncast/codeql-analysis.yml/develop?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:50: update your workflow using https://app.stepsecurity.io/secureworkflow/owncast/owncast/codeql-analysis.yml/develop?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:57: update your workflow using https://app.stepsecurity.io/secureworkflow/owncast/owncast/codeql-analysis.yml/develop?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:69: update your workflow using https://app.stepsecurity.io/secureworkflow/owncast/owncast/codeql-analysis.yml/develop?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:83: update your workflow using https://app.stepsecurity.io/secureworkflow/owncast/owncast/codeql-analysis.yml/develop?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/container-lint.yml:23: update your workflow using https://app.stepsecurity.io/secureworkflow/owncast/owncast/container-lint.yml/develop?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/container-lint.yml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/owncast/owncast/container-lint.yml/develop?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/container.yaml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/owncast/owncast/container.yaml/develop?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/container.yaml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/owncast/owncast/container.yaml/develop?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/container.yaml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/owncast/owncast/container.yaml/develop?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/container.yaml:48: update your workflow using https://app.stepsecurity.io/secureworkflow/owncast/owncast/container.yaml/develop?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/container.yaml:58: update your workflow using https://app.stepsecurity.io/secureworkflow/owncast/owncast/container.yaml/develop?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/copilot-setup-steps.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/owncast/owncast/copilot-setup-steps.yml/develop?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/copilot-setup-steps.yml:32: update your workflow using https://app.stepsecurity.io/secureworkflow/owncast/owncast/copilot-setup-steps.yml/develop?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/copilot-setup-steps.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/owncast/owncast/copilot-setup-steps.yml/develop?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/css-lint.yaml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/owncast/owncast/css-lint.yaml/develop?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/css-lint.yaml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/owncast/owncast/css-lint.yaml/develop?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/css-lint.yaml:32: update your workflow using https://app.stepsecurity.io/secureworkflow/owncast/owncast/css-lint.yaml/develop?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/css-lint.yaml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/owncast/owncast/css-lint.yaml/develop?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/generate-api-documentation.yaml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/owncast/owncast/generate-api-documentation.yaml/develop?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/generate-api-documentation.yaml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/owncast/owncast/generate-api-documentation.yaml/develop?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/generate-api-documentation.yaml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/owncast/owncast/generate-api-documentation.yaml/develop?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/go-lint.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/owncast/owncast/go-lint.yml/develop?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/go-lint.yml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/owncast/owncast/go-lint.yml/develop?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/go-lint.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/owncast/owncast/go-lint.yml/develop?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/go-lint.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/owncast/owncast/go-lint.yml/develop?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/go-lint.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/owncast/owncast/go-lint.yml/develop?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/go-tests.yaml:19: update your workflow using https://app.stepsecurity.io/secureworkflow/owncast/owncast/go-tests.yaml/develop?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/go-tests.yaml:23: update your workflow using https://app.stepsecurity.io/secureworkflow/owncast/owncast/go-tests.yaml/develop?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/go-tests.yaml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/owncast/owncast/go-tests.yaml/develop?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/go-tests.yaml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/owncast/owncast/go-tests.yaml/develop?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/go-tests.yaml:61: update your workflow using https://app.stepsecurity.io/secureworkflow/owncast/owncast/go-tests.yaml/develop?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/go-tests.yaml:65: update your workflow using https://app.stepsecurity.io/secureworkflow/owncast/owncast/go-tests.yaml/develop?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/go-tests.yaml:71: update your workflow using https://app.stepsecurity.io/secureworkflow/owncast/owncast/go-tests.yaml/develop?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/go-tests.yaml:82: update your workflow using https://app.stepsecurity.io/secureworkflow/owncast/owncast/go-tests.yaml/develop?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/hls-tests.yml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/owncast/owncast/hls-tests.yml/develop?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/hls-tests.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/owncast/owncast/hls-tests.yml/develop?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/hls-tests.yml:36: update your workflow using https://app.stepsecurity.io/secureworkflow/owncast/owncast/hls-tests.yml/develop?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/hls-tests.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/owncast/owncast/hls-tests.yml/develop?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/hls-tests.yml:47: update your workflow using https://app.stepsecurity.io/secureworkflow/owncast/owncast/hls-tests.yml/develop?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/hls-tests.yml:54: update your workflow using https://app.stepsecurity.io/secureworkflow/owncast/owncast/hls-tests.yml/develop?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/hls-tests.yml:67: update your workflow using https://app.stepsecurity.io/secureworkflow/owncast/owncast/hls-tests.yml/develop?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/hls-tests.yml:75: update your workflow using https://app.stepsecurity.io/secureworkflow/owncast/owncast/hls-tests.yml/develop?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/javascript-format-test-build.yml:167: update your workflow using https://app.stepsecurity.io/secureworkflow/owncast/owncast/javascript-format-test-build.yml/develop?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/javascript-format-test-build.yml:174: update your workflow using https://app.stepsecurity.io/secureworkflow/owncast/owncast/javascript-format-test-build.yml/develop?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/javascript-format-test-build.yml:179: update your workflow using https://app.stepsecurity.io/secureworkflow/owncast/owncast/javascript-format-test-build.yml/develop?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/javascript-format-test-build.yml:191: update your workflow using https://app.stepsecurity.io/secureworkflow/owncast/owncast/javascript-format-test-build.yml/develop?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/javascript-format-test-build.yml:198: update your workflow using https://app.stepsecurity.io/secureworkflow/owncast/owncast/javascript-format-test-build.yml/develop?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/javascript-format-test-build.yml:213: update your workflow using https://app.stepsecurity.io/secureworkflow/owncast/owncast/javascript-format-test-build.yml/develop?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/javascript-format-test-build.yml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/owncast/owncast/javascript-format-test-build.yml/develop?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/javascript-format-test-build.yml:32: update your workflow using https://app.stepsecurity.io/secureworkflow/owncast/owncast/javascript-format-test-build.yml/develop?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/javascript-format-test-build.yml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/owncast/owncast/javascript-format-test-build.yml/develop?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/javascript-format-test-build.yml:44: update your workflow using https://app.stepsecurity.io/secureworkflow/owncast/owncast/javascript-format-test-build.yml/develop?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/javascript-format-test-build.yml:49: update your workflow using https://app.stepsecurity.io/secureworkflow/owncast/owncast/javascript-format-test-build.yml/develop?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/javascript-format-test-build.yml:60: update your workflow using https://app.stepsecurity.io/secureworkflow/owncast/owncast/javascript-format-test-build.yml/develop?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/javascript-format-test-build.yml:95: update your workflow using https://app.stepsecurity.io/secureworkflow/owncast/owncast/javascript-format-test-build.yml/develop?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/javascript-format-test-build.yml:113: update your workflow using https://app.stepsecurity.io/secureworkflow/owncast/owncast/javascript-format-test-build.yml/develop?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/javascript-format-test-build.yml:120: update your workflow using https://app.stepsecurity.io/secureworkflow/owncast/owncast/javascript-format-test-build.yml/develop?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/javascript-format-test-build.yml:127: update your workflow using https://app.stepsecurity.io/secureworkflow/owncast/owncast/javascript-format-test-build.yml/develop?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/javascript-format-test-build.yml:131: update your workflow using https://app.stepsecurity.io/secureworkflow/owncast/owncast/javascript-format-test-build.yml/develop?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/javascript-format-test-build.yml:136: update your workflow using https://app.stepsecurity.io/secureworkflow/owncast/owncast/javascript-format-test-build.yml/develop?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/shellcheck.yml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/owncast/owncast/shellcheck.yml/develop?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/shellcheck.yml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/owncast/owncast/shellcheck.yml/develop?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/stale.yml:10: update your workflow using https://app.stepsecurity.io/secureworkflow/owncast/owncast/stale.yml/develop?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/translations.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/owncast/owncast/translations.yml/develop?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/translations.yml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/owncast/owncast/translations.yml/develop?enable=pin","Warn: containerImage not pinned by hash: Dockerfile:8","Warn: containerImage not pinned by hash: Dockerfile:25: pin your Docker image by updating alpine:3.22.1 to alpine:3.22.1@sha256:4bcff63911fcb4448bd4fdacec207030997caf25e9bea4045fa6c8c44de311d1","Warn: npmCommand not pinned by hash: build/web/bundleWeb.sh:25","Warn: npmCommand not pinned by hash: test/automated/api/run.sh:8","Warn: npmCommand not pinned by hash: test/automated/browser/run.sh:35","Warn: npmCommand not pinned by hash: test/automated/hls/run-s3.sh:14","Warn: npmCommand not pinned by hash: test/automated/hls/run.sh:8","Warn: npmCommand not pinned by hash: test/automated/screenshots/run.sh:24","Warn: npmCommand not pinned by hash: .github/workflows/build-storybook.yml:45","Warn: npmCommand not pinned by hash: .github/workflows/chromatic.yml:56","Warn: npmCommand not pinned by hash: .github/workflows/css-lint.yaml:47","Warn: npmCommand not pinned by hash: .github/workflows/javascript-format-test-build.yml:73","Warn: npmCommand not pinned by hash: .github/workflows/javascript-format-test-build.yml:149","Warn: npmCommand not pinned by hash: .github/workflows/translations.yml:34","Info:   0 out of  63 GitHub-owned GitHubAction dependencies pinned","Info:   1 out of  34 third-party GitHubAction dependencies pinned","Info:   0 out of   2 containerImage dependencies pinned","Info:   2 out of  14 npmCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Vulnerabilities","score":0,"reason":"22 existing vulnerabilities detected","details":["Warn: Project is vulnerable to: GO-2022-0635","Warn: Project is vulnerable to: GO-2022-0646","Warn: Project is vulnerable to: GHSA-968p-4wvh-cqc8","Warn: Project is vulnerable to: GHSA-h452-7996-h45h","Warn: Project is vulnerable to: GHSA-3xgq-45jj-v275","Warn: Project is vulnerable to: GHSA-75v8-2h7p-7m2m","Warn: Project is vulnerable to: GHSA-952p-6rrq-rcjv","Warn: Project is vulnerable to: GHSA-p8p7-x288-28g6","Warn: Project is vulnerable to: GHSA-v6h2-p8h4-qcjw","Warn: Project is vulnerable to: GHSA-pxg6-pf52-xh8x","Warn: Project is vulnerable to: GHSA-fjxv-7rqg-78g4","Warn: Project is vulnerable to: GHSA-pfrx-2q88-qq97","Warn: Project is vulnerable to: GHSA-p6mc-m468-83gw","Warn: Project is vulnerable to: GHSA-c2qf-rxjj-qqgw","Warn: Project is vulnerable to: GHSA-pq67-2wwv-3xjx","Warn: Project is vulnerable to: GHSA-8cj5-5rvv-wf4v","Warn: Project is vulnerable to: GHSA-3h5v-q93c-6h6q","Warn: Project is vulnerable to: GHSA-52f5-9888-hmc6","Warn: Project is vulnerable to: GHSA-67mh-4wv8-2f99","Warn: Project is vulnerable to: GHSA-m5qc-5hw7-8vg7","Warn: Project is vulnerable to: GHSA-9wv6-86v2-598j","Warn: Project is vulnerable to: GHSA-7fh5-64p2-3v2j"],"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}}]},"last_synced_at":"2025-08-18T23:56:06.056Z","repository_id":37021113,"created_at":"2025-08-18T23:56:06.056Z","updated_at":"2025-08-18T23:56:06.056Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":341189360,"owners_count":37234307,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-08-22T15:14:58.755Z","status":"online","status_checked_at":"2026-09-12T02:00:07.213Z","response_time":57,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"owncast","name":"Owncast","uuid":"69942503","kind":"organization","description":"A self-hosted live stream server with chat features.","email":"gabek@real-ity.com","website":"http://owncast.online","location":null,"twitter":null,"company":null,"icon_url":"https://avatars.githubusercontent.com/u/69942503?v=4","repositories_count":6,"last_synced_at":"2023-03-04T01:09:44.026Z","metadata":{"has_sponsors_listing":false},"html_url":"https://github.com/owncast","funding_links":[],"total_stars":null,"followers":null,"following":null,"created_at":"2022-11-14T07:30:43.192Z","updated_at":"2023-03-04T01:09:44.035Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/owncast","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/owncast/repositories"},"tags":[{"name":"v0.2.5","sha":"65d03b4d5df13dfc2033311fa30e4513b63b3e16","kind":"commit","published_at":"2026-04-11T20:47:29.000Z","download_url":"https://codeload.github.com/owncast/owncast/tar.gz/v0.2.5","html_url":"https://github.com/owncast/owncast/releases/tag/v0.2.5","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/owncast/owncast@v0.2.5","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/owncast%2Fowncast/tags/v0.2.5","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/owncast%2Fowncast/tags/v0.2.5/manifests"},{"name":"v0.2.4","sha":"1dba94684708895045b81f52764472da90a977a7","kind":"commit","published_at":"2026-01-09T20:57:02.000Z","download_url":"https://codeload.github.com/owncast/owncast/tar.gz/v0.2.4","html_url":"https://github.com/owncast/owncast/releases/tag/v0.2.4","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/owncast/owncast@v0.2.4","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/owncast%2Fowncast/tags/v0.2.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/owncast%2Fowncast/tags/v0.2.4/manifests"},{"name":"v0.2.3","sha":"7cfe3fc111df9450115496118979e5621c937803","kind":"commit","published_at":"2025-05-10T20:43:40.000Z","download_url":"https://codeload.github.com/owncast/owncast/tar.gz/v0.2.3","html_url":"https://github.com/owncast/owncast/releases/tag/v0.2.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/owncast/owncast@v0.2.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/owncast%2Fowncast/tags/v0.2.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/owncast%2Fowncast/tags/v0.2.3/manifests"},{"name":"v0.2.2","sha":"c3da19070a9685f8e8c21ee753c632551454eb6e","kind":"commit","published_at":"2025-05-03T18:22:00.000Z","download_url":"https://codeload.github.com/owncast/owncast/tar.gz/v0.2.2","html_url":"https://github.com/owncast/owncast/releases/tag/v0.2.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/owncast/owncast@v0.2.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/owncast%2Fowncast/tags/v0.2.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/owncast%2Fowncast/tags/v0.2.2/manifests"},{"name":"v0.2.1","sha":"c7fbb476473e646b9f9c1dc5555a2147ab9a0e42","kind":"commit","published_at":"2025-01-19T22:40:40.000Z","download_url":"https://codeload.github.com/owncast/owncast/tar.gz/v0.2.1","html_url":"https://github.com/owncast/owncast/releases/tag/v0.2.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/owncast/owncast@v0.2.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/owncast%2Fowncast/tags/v0.2.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/owncast%2Fowncast/tags/v0.2.1/manifests"},{"name":"v0.2.1-old2","sha":"b8c46a1f09e02dc53cdc5a16646555fe8548ae0b","kind":"commit","published_at":"2025-01-19T22:07:46.000Z","download_url":"https://codeload.github.com/owncast/owncast/tar.gz/v0.2.1-old2","html_url":"https://github.com/owncast/owncast/releases/tag/v0.2.1-old2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/owncast/owncast@v0.2.1-old2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/owncast%2Fowncast/tags/v0.2.1-old2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/owncast%2Fowncast/tags/v0.2.1-old2/manifests"},{"name":"v0.2.1-old","sha":"70d8ca9646181222a635e2d30d5165142c61c7c7","kind":"commit","published_at":"2025-01-19T00:38:59.000Z","download_url":"https://codeload.github.com/owncast/owncast/tar.gz/v0.2.1-old","html_url":"https://github.com/owncast/owncast/releases/tag/v0.2.1-old","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/owncast/owncast@v0.2.1-old","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/owncast%2Fowncast/tags/v0.2.1-old","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/owncast%2Fowncast/tags/v0.2.1-old/manifests"},{"name":"untagged-00fff439c349c6e4ee3e","sha":"49bdbb2e9e79b84f881f7f0406e0a5dd44178f4c","kind":"commit","published_at":"2025-01-17T19:58:35.000Z","download_url":"https://codeload.github.com/owncast/owncast/tar.gz/untagged-00fff439c349c6e4ee3e","html_url":"https://github.com/owncast/owncast/releases/tag/untagged-00fff439c349c6e4ee3e","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/owncast/owncast@untagged-00fff439c349c6e4ee3e","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/owncast%2Fowncast/tags/untagged-00fff439c349c6e4ee3e","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/owncast%2Fowncast/tags/untagged-00fff439c349c6e4ee3e/manifests"},{"name":"v0.2.0","sha":"5483000f79ba1910e46399d008bb1f4246381ae1","kind":"commit","published_at":"2025-01-09T00:20:50.000Z","download_url":"https://codeload.github.com/owncast/owncast/tar.gz/v0.2.0","html_url":"https://github.com/owncast/owncast/releases/tag/v0.2.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/owncast/owncast@v0.2.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/owncast%2Fowncast/tags/v0.2.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/owncast%2Fowncast/tags/v0.2.0/manifests"},{"name":"v0.1.3","sha":"01b6c5ca264214ba0aab1ff7e1891ca935d2162a","kind":"commit","published_at":"2024-04-07T13:31:22.000Z","download_url":"https://codeload.github.com/owncast/owncast/tar.gz/v0.1.3","html_url":"https://github.com/owncast/owncast/releases/tag/v0.1.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/owncast/owncast@v0.1.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/owncast%2Fowncast/tags/v0.1.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/owncast%2Fowncast/tags/v0.1.3/manifests"},{"name":"v0.1.2","sha":"dc88e4e9f02027b4de0449d9f04e2f75e8513d66","kind":"commit","published_at":"2023-11-18T04:20:27.000Z","download_url":"https://codeload.github.com/owncast/owncast/tar.gz/v0.1.2","html_url":"https://github.com/owncast/owncast/releases/tag/v0.1.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/owncast/owncast@v0.1.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/owncast%2Fowncast/tags/v0.1.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/owncast%2Fowncast/tags/v0.1.2/manifests"},{"name":"v0.1.1","sha":"9055af03436059c0a8b6592b93f6cc8d7be3087f","kind":"commit","published_at":"2023-07-28T12:26:39.000Z","download_url":"https://codeload.github.com/owncast/owncast/tar.gz/v0.1.1","html_url":"https://github.com/owncast/owncast/releases/tag/v0.1.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/owncast/owncast@v0.1.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/owncast%2Fowncast/tags/v0.1.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/owncast%2Fowncast/tags/v0.1.1/manifests"},{"name":"v0.1.0","sha":"0c623b8f6e90ce1d65116f921fcf91ca94d76f96","kind":"commit","published_at":"2023-05-30T04:11:59.000Z","download_url":"https://codeload.github.com/owncast/owncast/tar.gz/v0.1.0","html_url":"https://github.com/owncast/owncast/releases/tag/v0.1.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/owncast/owncast@v0.1.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/owncast%2Fowncast/tags/v0.1.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/owncast%2Fowncast/tags/v0.1.0/manifests"},{"name":"v0.0.13","sha":"8d28020b6f4eb1baae321caf4dfe0dbad7172f1d","kind":"commit","published_at":"2022-11-22T01:44:19.000Z","download_url":"https://codeload.github.com/owncast/owncast/tar.gz/v0.0.13","html_url":"https://github.com/owncast/owncast/releases/tag/v0.0.13","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/owncast/owncast@v0.0.13","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/owncast%2Fowncast/tags/v0.0.13","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/owncast%2Fowncast/tags/v0.0.13/manifests"},{"name":"v0.0.12","sha":"da5f558722f4830f8055b1efb380142aa5b2c185","kind":"commit","published_at":"2022-07-07T04:46:03.000Z","download_url":"https://codeload.github.com/owncast/owncast/tar.gz/v0.0.12","html_url":"https://github.com/owncast/owncast/releases/tag/v0.0.12","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/owncast/owncast@v0.0.12","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/owncast%2Fowncast/tags/v0.0.12","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/owncast%2Fowncast/tags/v0.0.12/manifests"},{"name":"v0.0.11","sha":"87bd1e57e62c071b4a78fc1eacb30ecd8b1008cb","kind":"commit","published_at":"2022-03-05T03:31:38.000Z","download_url":"https://codeload.github.com/owncast/owncast/tar.gz/v0.0.11","html_url":"https://github.com/owncast/owncast/releases/tag/v0.0.11","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/owncast/owncast@v0.0.11","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/owncast%2Fowncast/tags/v0.0.11","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/owncast%2Fowncast/tags/v0.0.11/manifests"},{"name":"v0.0.10","sha":"049b6e80ea1f543e958379e6789c6c1b3aa60277","kind":"commit","published_at":"2021-10-05T23:45:53.000Z","download_url":"https://codeload.github.com/owncast/owncast/tar.gz/v0.0.10","html_url":"https://github.com/owncast/owncast/releases/tag/v0.0.10","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/owncast/owncast@v0.0.10","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/owncast%2Fowncast/tags/v0.0.10","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/owncast%2Fowncast/tags/v0.0.10/manifests"},{"name":"v0.0.9","sha":"57facee9fd7832371f673a10422a4ae4f21414ea","kind":"commit","published_at":"2021-09-23T00:36:22.000Z","download_url":"https://codeload.github.com/owncast/owncast/tar.gz/v0.0.9","html_url":"https://github.com/owncast/owncast/releases/tag/v0.0.9","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/owncast/owncast@v0.0.9","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/owncast%2Fowncast/tags/v0.0.9","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/owncast%2Fowncast/tags/v0.0.9/manifests"},{"name":"v0.0.8","sha":"62cc3505172d322cc61b884f2493c61ed7b939a1","kind":"commit","published_at":"2021-08-10T19:19:26.000Z","download_url":"https://codeload.github.com/owncast/owncast/tar.gz/v0.0.8","html_url":"https://github.com/owncast/owncast/releases/tag/v0.0.8","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/owncast/owncast@v0.0.8","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/owncast%2Fowncast/tags/v0.0.8","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/owncast%2Fowncast/tags/v0.0.8/manifests"},{"name":"v0.0.7","sha":"9537dd30394eb5ba8c28eb2fd38b341c70770fd6","kind":"commit","published_at":"2021-05-14T22:28:13.000Z","download_url":"https://codeload.github.com/owncast/owncast/tar.gz/v0.0.7","html_url":"https://github.com/owncast/owncast/releases/tag/v0.0.7","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/owncast/owncast@v0.0.7","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/owncast%2Fowncast/tags/v0.0.7","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/owncast%2Fowncast/tags/v0.0.7/manifests"},{"name":"v0.0.6","sha":"e635c24aecef937a2217422ca5498ac3db6de452","kind":"commit","published_at":"2021-03-08T06:46:51.000Z","download_url":"https://codeload.github.com/owncast/owncast/tar.gz/v0.0.6","html_url":"https://github.com/owncast/owncast/releases/tag/v0.0.6","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/owncast/owncast@v0.0.6","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/owncast%2Fowncast/tags/v0.0.6","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/owncast%2Fowncast/tags/v0.0.6/manifests"},{"name":"v0.0.5","sha":"dbe6cf8a043ce3f59056b8e532ebe5586f0a01db","kind":"commit","published_at":"2021-01-12T03:44:02.000Z","download_url":"https://codeload.github.com/owncast/owncast/tar.gz/v0.0.5","html_url":"https://github.com/owncast/owncast/releases/tag/v0.0.5","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/owncast/owncast@v0.0.5","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/owncast%2Fowncast/tags/v0.0.5","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/owncast%2Fowncast/tags/v0.0.5/manifests"},{"name":"v0.0.4","sha":"5914570d6ce233b1821c0df61694bfcec856c229","kind":"commit","published_at":"2020-12-29T02:10:40.000Z","download_url":"https://codeload.github.com/owncast/owncast/tar.gz/v0.0.4","html_url":"https://github.com/owncast/owncast/releases/tag/v0.0.4","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/owncast/owncast@v0.0.4","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/owncast%2Fowncast/tags/v0.0.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/owncast%2Fowncast/tags/v0.0.4/manifests"},{"name":"v0.0.3","sha":"f8bdda4fa44524d17d569218f019b757bff7b1c4","kind":"commit","published_at":"2020-12-14T07:09:55.000Z","download_url":"https://codeload.github.com/owncast/owncast/tar.gz/v0.0.3","html_url":"https://github.com/owncast/owncast/releases/tag/v0.0.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/owncast/owncast@v0.0.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/owncast%2Fowncast/tags/v0.0.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/owncast%2Fowncast/tags/v0.0.3/manifests"},{"name":"v0.0.2","sha":"dfd44be05196110b06c97fde3ab2d4c0daf79de7","kind":"commit","published_at":"2020-09-28T03:12:45.000Z","download_url":"https://codeload.github.com/owncast/owncast/tar.gz/v0.0.2","html_url":"https://github.com/owncast/owncast/releases/tag/v0.0.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/owncast/owncast@v0.0.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/owncast%2Fowncast/tags/v0.0.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/owncast%2Fowncast/tags/v0.0.2/manifests"},{"name":"v0.0.1","sha":"6aed462d91e577620933f354359afa915ea5f742","kind":"tag","published_at":"2020-08-08T02:49:19.000Z","download_url":"https://codeload.github.com/owncast/owncast/tar.gz/v0.0.1","html_url":"https://github.com/owncast/owncast/releases/tag/v0.0.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/owncast/owncast@v0.0.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/owncast%2Fowncast/tags/v0.0.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/owncast%2Fowncast/tags/v0.0.1/manifests"}]},"repo_metadata_updated_at":"2026-09-12T17:19:33.671Z","dependent_packages_count":1,"downloads":null,"downloads_period":null,"dependent_repos_count":1,"rankings":{"downloads":null,"dependent_repos_count":4.709308824938517,"dependent_packages_count":5.811627647002459,"stargazers_count":0.7772953912070829,"forks_count":1.1775177036758389,"docker_downloads_count":0.5027973653777267,"average":2.595709386440325},"purl":"pkg:golang/github.com/owncast/owncast","advisories":[{"uuid":"GSA_kwCzR0hTQS05MzU1LTI3bTgtaDc0ds4AA-Yv","url":"https://github.com/advisories/GHSA-9355-27m8-h74v","title":"Owncast Path Traversal vulnerability","description":"Owncast is an open source, self-hosted, decentralized, single user live video streaming and chat server. The Owncast application exposes an administrator API at the URL /api/admin. The emoji/delete endpoint of said API allows administrators to delete custom emojis, which are saved on disk. The parameter name is taken from the JSON request and directly appended to the filepath that points to the emoji to delete. By using path traversal sequences (../), attackers with administrative privileges can exploit this endpoint to delete arbitrary files on the system, outside of the emoji directory. This vulnerability is fixed in 0.1.3.","origin":"UNSPECIFIED","severity":"MODERATE","published_at":"2024-08-05T21:29:26.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":5.1,"cvss_vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N","references":["https://nvd.nist.gov/vuln/detail/CVE-2024-31450","https://github.com/owncast/owncast/commit/1b14800c7d7f54be14ed4d130bfe7f480645076e","https://github.com/owncast/owncast/blob/v0.1.2/controllers/admin/emoji.go#L63","https://github.com/owncast/owncast/releases/tag/v0.1.3","https://securitylab.github.com/advisories/GHSL-2023-277_Owncast","https://github.com/advisories/GHSA-9355-27m8-h74v"],"source_kind":"github","identifiers":["GHSA-9355-27m8-h74v","CVE-2024-31450"],"repository_url":"https://github.com/owncast/owncast","blast_radius":0.0,"created_at":"2024-08-05T22:05:30.682Z","updated_at":"2026-09-13T10:07:31.716Z","epss_percentage":0.00969,"epss_percentile":0.59599,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS05MzU1LTI3bTgtaDc0ds4AA-Yv","html_url":"https://advisories.ecosyste.ms/advisories/GSA_kwCzR0hTQS05MzU1LTI3bTgtaDc0ds4AA-Yv","packages":[{"ecosystem":"go","package_name":"github.com/owncast/owncast","versions":[{"first_patched_version":"0.1.3","vulnerable_version_range":"\u003c 0.1.3"}],"purl":"pkg:go/github.com%2Fowncast%2Fowncast"}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS05MzU1LTI3bTgtaDc0ds4AA-Yv/related_packages","related_advisories":[]},{"uuid":"GSA_kwCzR0hTQS12OTl3LXI1NmgtZzIzds4AA-Yr","url":"https://github.com/advisories/GHSA-v99w-r56h-g23v","title":"Owncast Cross-Site Request Forgery vulnerability","description":"Owncast is an open source, self-hosted, decentralized, single user live video streaming and chat server. In versions 0.1.2 and prior, a lenient CORS policy allows attackers to make a cross origin request, reading privileged information. This can be used to leak the admin password. Commit 9215d9ba0f29d62201d3feea9e77dcd274581624 fixes this issue.","origin":"UNSPECIFIED","severity":"HIGH","published_at":"2024-08-05T21:29:23.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":8.8,"cvss_vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:H/VA:N/SC:N/SI:N/SA:N","references":["https://nvd.nist.gov/vuln/detail/CVE-2024-29026","https://github.com/owncast/owncast/commit/9215d9ba0f29d62201d3feea9e77dcd274581624","https://github.com/owncast/owncast/blob/v0.1.2/router/middleware/auth.go#L32","https://securitylab.github.com/advisories/GHSL-2023-261_Owncast","https://github.com/advisories/GHSA-v99w-r56h-g23v"],"source_kind":"github","identifiers":["GHSA-v99w-r56h-g23v","CVE-2024-29026"],"repository_url":"https://github.com/owncast/owncast","blast_radius":0.0,"created_at":"2024-08-05T22:05:31.154Z","updated_at":"2026-09-13T10:07:31.717Z","epss_percentage":0.00415,"epss_percentile":0.34541,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS12OTl3LXI1NmgtZzIzds4AA-Yr","html_url":"https://advisories.ecosyste.ms/advisories/GSA_kwCzR0hTQS12OTl3LXI1NmgtZzIzds4AA-Yr","packages":[{"ecosystem":"go","package_name":"github.com/owncast/owncast","versions":[{"first_patched_version":"0.1.3","vulnerable_version_range":"\u003c= 0.1.2"}],"purl":"pkg:go/github.com%2Fowncast%2Fowncast"}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS12OTl3LXI1NmgtZzIzds4AA-Yr/related_packages","related_advisories":[]},{"uuid":"GSA_kwCzR0hTQS0zOTJoLXI0NmotcTI0cM4AA3Ym","url":"https://github.com/advisories/GHSA-392h-r46j-q24p","title":"OwnCast remote code execution vulnerability","description":"An issue in OwnCast v.0.1.1 allows a remote attacker to execute arbitrary code and obtain sensitive information via the authHost parameter of the indieauth function.","origin":"UNSPECIFIED","severity":"MODERATE","published_at":"2023-11-28T00:30:33.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":0.0,"cvss_vector":null,"references":["https://nvd.nist.gov/vuln/detail/CVE-2023-46480","https://github.com/shahzaibak96/CVE-2023-46480","https://github.com/advisories/GHSA-392h-r46j-q24p"],"source_kind":"github","identifiers":["GHSA-392h-r46j-q24p","CVE-2023-46480"],"repository_url":"https://github.com/shahzaibak96/CVE-2023-46480","blast_radius":0.0,"created_at":"2023-12-07T06:05:53.251Z","updated_at":"2026-09-13T10:09:56.955Z","epss_percentage":0.01619,"epss_percentile":0.7461,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS0zOTJoLXI0NmotcTI0cM4AA3Ym","html_url":"https://advisories.ecosyste.ms/advisories/GSA_kwCzR0hTQS0zOTJoLXI0NmotcTI0cM4AA3Ym","packages":[{"ecosystem":"go","package_name":"github.com/owncast/owncast","versions":[{"first_patched_version":null,"vulnerable_version_range":"\u003c= 0.1.1"}],"purl":"pkg:go/github.com%2Fowncast%2Fowncast"}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS0zOTJoLXI0NmotcTI0cM4AA3Ym/related_packages","related_advisories":[]},{"uuid":"GSA_kwCzR0hTQS1jdmg0LWNqYzktODRxbc4AAwFH","url":"https://github.com/advisories/GHSA-cvh4-cjc9-84qm","title":"owncast is vulnerable to SQL Injection","description":"SQL Injection in GitHub repository owncast/owncast prior to 0.0.13.","origin":"UNSPECIFIED","severity":"CRITICAL","published_at":"2022-11-29T21:30:25.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":9.8,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","references":["https://nvd.nist.gov/vuln/detail/CVE-2022-3751","https://github.com/owncast/owncast/commit/23b6e5868d5501726c27a3fabbecf49000968591","https://github.com/owncast/owncast/pull/2257","https://huntr.com/bounties/a04cff99-5d53-45e5-a882-771b0fad62c9","https://pkg.go.dev/vuln/GO-2022-1138","https://github.com/advisories/GHSA-cvh4-cjc9-84qm"],"source_kind":"github","identifiers":["GHSA-cvh4-cjc9-84qm","CVE-2022-3751"],"repository_url":"https://github.com/owncast/owncast","blast_radius":0.0,"created_at":"2022-12-21T16:11:47.458Z","updated_at":"2026-09-13T10:12:15.504Z","epss_percentage":0.00944,"epss_percentile":0.5898,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS1jdmg0LWNqYzktODRxbc4AAwFH","html_url":"https://advisories.ecosyste.ms/advisories/GSA_kwCzR0hTQS1jdmg0LWNqYzktODRxbc4AAwFH","packages":[{"ecosystem":"go","package_name":"github.com/owncast/owncast","versions":[{"first_patched_version":"0.0.13","vulnerable_version_range":"\u003c 0.0.13"}],"purl":"pkg:go/github.com%2Fowncast%2Fowncast","statistics":{"dependent_packages_count":1,"dependent_repos_count":1,"downloads":null,"downloads_period":null},"affected_versions":["v0.0.1","v0.0.2","v0.0.3","v0.0.4","v0.0.5","v0.0.6","v0.0.7","v0.0.8","v0.0.9","v0.0.10","v0.0.10-s3-fix","v0.0.11","v0.0.12"],"unaffected_versions":["v0.0.13","v0.1.0","v0.1.1","v0.1.2","v0.1.3","v0.2.0","v0.2.1","v0.2.2","v0.2.3","v0.2.4","v0.2.5","v0.3.0"]}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS1jdmg0LWNqYzktODRxbc4AAwFH/related_packages","related_advisories":[]},{"uuid":"GSA_kwCzR0hTQS0yaGZqLWN4dzctZzQ1cM0bRg","url":"https://github.com/advisories/GHSA-2hfj-cxw7-g45p","title":"Unsafe inline XSS in pasting DOM element into chat","description":"### Impact\n\nInline scripts are executed when Javascript is parsed via a paste action.\n\n1. Open https://watch.owncast.online/\n2. Copy and then paste `\u003cimg src=null onerror=alert('hello')\u003e` into the\nchat field.\n3. An alert should pop up.\n\n### Patches\n```\n    ⋮ 13 │    // Content security policy\n    ⋮ 14 │    csp := []string{\n    ⋮ 15 │        \"script-src 'self' 'sha256-2HPCfJIJHnY0NrRDPTOdC7AOSJIcQyNxzUuut3TsYRY='\",\n    ⋮ 16 │        \"worker-src 'self' blob:\", // No single quotes around blob:\n    ⋮ 17 │    }\n```\n\nWill be patched in 0.0.9 by blocking `unsafe-inline` Content Security Policy and specifying the `script-src`.  The `worker-src` is required to be set to `blob` for the video player.\n\n### For more information\n\nIf you have any questions or comments about this advisory:\n* Open an issue in [owncast/owncast](https://github.com/owncast/owncast/issues)\n* Email us at [gabek@real-ity.com](mailto:gabek@real-ity.com)\n","origin":"UNSPECIFIED","severity":"HIGH","published_at":"2021-12-14T21:48:16.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":8.2,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:H/A:L","references":["https://github.com/owncast/owncast/security/advisories/GHSA-2hfj-cxw7-g45p","https://nvd.nist.gov/vuln/detail/CVE-2021-39183","https://github.com/advisories/GHSA-2hfj-cxw7-g45p"],"source_kind":"github","identifiers":["GHSA-2hfj-cxw7-g45p","CVE-2021-39183"],"repository_url":"https://github.com/owncast/owncast","blast_radius":0.0,"created_at":"2022-12-21T16:12:40.582Z","updated_at":"2026-09-13T10:13:27.909Z","epss_percentage":0.00747,"epss_percentile":0.5253,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS0yaGZqLWN4dzctZzQ1cM0bRg","html_url":"https://advisories.ecosyste.ms/advisories/GSA_kwCzR0hTQS0yaGZqLWN4dzctZzQ1cM0bRg","packages":[{"ecosystem":"go","package_name":"github.com/owncast/owncast","versions":[{"first_patched_version":"0.0.9","vulnerable_version_range":"\u003c 0.0.9"}],"purl":"pkg:go/github.com%2Fowncast%2Fowncast"}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS0yaGZqLWN4dzctZzQ1cM0bRg/related_packages","related_advisories":[]}],"docker_usage_url":"https://docker.ecosyste.ms/usage/go/github.com/owncast/owncast","docker_dependents_count":2,"docker_downloads_count":2178074,"usage_url":"https://repos.ecosyste.ms/usage/go/github.com/owncast/owncast","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/go/github.com/owncast/owncast/dependencies","status":null,"funding_links":["https://opencollective.com/owncast"],"critical":null,"issue_metadata":{"last_synced_at":"2026-09-12T12:01:12.486Z","issues_count":775,"pull_requests_count":1395,"avg_time_to_close_issue":8392880.166666666,"avg_time_to_close_pull_request":964609.5312246553,"issues_closed_count":516,"pull_requests_closed_count":1233,"pull_request_authors_count":107,"issue_authors_count":245,"avg_comments_per_issue":3.6761290322580646,"avg_comments_per_pull_request":1.9806451612903226,"merged_pull_requests_count":1067,"bot_issues_count":4,"bot_pull_requests_count":897,"past_year_issues_count":69,"past_year_pull_requests_count":142,"past_year_avg_time_to_close_issue":820292.358974359,"past_year_avg_time_to_close_pull_request":540026.2727272727,"past_year_issues_closed_count":39,"past_year_pull_requests_closed_count":99,"past_year_pull_request_authors_count":9,"past_year_issue_authors_count":21,"past_year_avg_comments_per_issue":1.391304347826087,"past_year_avg_comments_per_pull_request":1.4507042253521127,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":70,"past_year_merged_pull_requests_count":92,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/owncast%2Fowncast/issues","maintainers":[{"login":"gabek","count":510,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gabek"},{"login":"janWilejan","count":25,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/janWilejan"},{"login":"gingervitis","count":10,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gingervitis"},{"login":"jprjr","count":9,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jprjr"},{"login":"MFTabriz","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/MFTabriz"},{"login":"jeyemwey","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jeyemwey"},{"login":"germainelee","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/germainelee"}],"active_maintainers":[{"login":"gabek","count":76,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gabek"},{"login":"germainelee","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/germainelee"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fowncast%2Fowncast/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fowncast%2Fowncast/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fowncast%2Fowncast/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fowncast%2Fowncast/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fowncast%2Fowncast/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fowncast%2Fowncast/codemeta","maintainers":[],"registry":{"name":"proxy.golang.org","url":"https://proxy.golang.org","ecosystem":"go","default":true,"packages_count":2322374,"maintainers_count":0,"namespaces_count":841575,"keywords_count":127858,"github":"golang","metadata":{"funded_packages_count":82019,"sync_missing_packages_cursor":{"timestamp":"2026-09-13T00:27:08.257651Z","path":"github.com/ultralytics/thop","version":"v2.0.21+incompatible"},"rate_limit":1},"icon_url":"https://github.com/golang.png","created_at":"2022-04-04T15:19:22.939Z","updated_at":"2026-09-13T05:01:04.658Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/namespaces"}}]