{"id":3602061,"name":"hex_core","ecosystem":"hex","description":"Reference implementation of Hex specifications","homepage":"https://github.com/hexpm/specifications","licenses":"https://github.com/hexpm/specifications","normalized_licenses":["Other"],"repository_url":"https://github.com/hexpm/hex_core","keywords_array":[],"namespace":null,"versions_count":39,"first_release_published_at":"2018-08-08T12:06:07.654Z","latest_release_published_at":"2026-03-09T21:37:25.499Z","latest_release_number":"0.15.0","last_synced_at":"2026-04-03T09:07:10.612Z","created_at":"2022-04-11T06:18:14.593Z","updated_at":"2026-04-04T04:13:36.351Z","registry_url":"https://hex.pm/packages/hex_core/","install_command":"mix hex.package fetch hex_core ","documentation_url":"http://hexdocs.pm/hex_core/","metadata":{},"repo_metadata":{"id":30020804,"uuid":"123579892","full_name":"hexpm/hex_core","owner":"hexpm","description":"Reference implementation of Hex specifications.","archived":false,"fork":false,"pushed_at":"2024-06-28T20:42:13.000Z","size":537,"stargazers_count":96,"open_issues_count":11,"forks_count":32,"subscribers_count":12,"default_branch":"main","last_synced_at":"2024-06-29T12:25:05.319Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":"","language":"Erlang","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/hexpm.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null}},"created_at":"2018-03-02T13:04:14.000Z","updated_at":"2024-06-28T20:42:06.000Z","dependencies_parsed_at":"2024-02-29T14:44:25.868Z","dependency_job_id":"2a8fb0a3-81c4-45c7-b07c-8f071ffce26a","html_url":"https://github.com/hexpm/hex_core","commit_stats":null,"previous_names":[],"tags_count":29,"template":false,"template_full_name":null,"repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hexpm%2Fhex_core","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hexpm%2Fhex_core/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hexpm%2Fhex_core/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hexpm%2Fhex_core/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/hexpm","download_url":"https://codeload.github.com/hexpm/hex_core/tar.gz/refs/heads/main","host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":214639073,"owners_count":15762704,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"hexpm","name":"Hex","uuid":"6621265","kind":"organization","description":"Package manager for the Erlang ecosystem","email":"support@hex.pm","website":"https://hex.pm","location":"In the tubes","twitter":null,"company":null,"icon_url":"https://avatars.githubusercontent.com/u/6621265?v=4","repositories_count":13,"last_synced_at":"2023-08-07T13:10:27.127Z","metadata":{"has_sponsors_listing":false},"html_url":"https://github.com/hexpm","funding_links":[],"total_stars":null,"followers":null,"following":null,"created_at":"2022-11-06T19:33:33.101Z","updated_at":"2023-08-07T13:10:27.354Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/hexpm","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/hexpm/repositories"},"tags":[{"name":"v0.10.2","sha":"046c0bb52d94221a2da8d76f1052ab9b9370f161","kind":"commit","published_at":"2024-06-12T14:24:54.000Z","download_url":"https://codeload.github.com/hexpm/hex_core/tar.gz/v0.10.2","html_url":"https://github.com/hexpm/hex_core/releases/tag/v0.10.2","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hexpm%2Fhex_core/tags/v0.10.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hexpm%2Fhex_core/tags/v0.10.2/manifests"},{"name":"v0.10.1","sha":"8a53ac8eddaf425cd70a41ae9279318063c01e67","kind":"commit","published_at":"2024-06-11T18:13:29.000Z","download_url":"https://codeload.github.com/hexpm/hex_core/tar.gz/v0.10.1","html_url":"https://github.com/hexpm/hex_core/releases/tag/v0.10.1","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hexpm%2Fhex_core/tags/v0.10.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hexpm%2Fhex_core/tags/v0.10.1/manifests"},{"name":"v0.10.0","sha":"d87858ad94087078908398c55e103db7dda82828","kind":"commit","published_at":"2023-05-09T07:45:17.000Z","download_url":"https://codeload.github.com/hexpm/hex_core/tar.gz/v0.10.0","html_url":"https://github.com/hexpm/hex_core/releases/tag/v0.10.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hexpm%2Fhex_core/tags/v0.10.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hexpm%2Fhex_core/tags/v0.10.0/manifests"},{"name":"v0.9.0","sha":"5c9636754d37a089c7aea09830951c18d8260bbe","kind":"commit","published_at":"2022-11-03T15:04:22.000Z","download_url":"https://codeload.github.com/hexpm/hex_core/tar.gz/v0.9.0","html_url":"https://github.com/hexpm/hex_core/releases/tag/v0.9.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hexpm%2Fhex_core/tags/v0.9.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hexpm%2Fhex_core/tags/v0.9.0/manifests"},{"name":"v0.8.4","sha":"eff43ae9aedafe25539c366dac08786c0183aeda","kind":"commit","published_at":"2021-12-20T20:35:54.000Z","download_url":"https://codeload.github.com/hexpm/hex_core/tar.gz/v0.8.4","html_url":"https://github.com/hexpm/hex_core/releases/tag/v0.8.4","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hexpm%2Fhex_core/tags/v0.8.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hexpm%2Fhex_core/tags/v0.8.4/manifests"},{"name":"v0.8.3","sha":"30631cf71d72aa4c6a3f86038f8a98c6a2503750","kind":"commit","published_at":"2021-12-14T20:13:33.000Z","download_url":"https://codeload.github.com/hexpm/hex_core/tar.gz/v0.8.3","html_url":"https://github.com/hexpm/hex_core/releases/tag/v0.8.3","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hexpm%2Fhex_core/tags/v0.8.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hexpm%2Fhex_core/tags/v0.8.3/manifests"},{"name":"v0.8.2","sha":"b40e955edff91e787da426c4c5b6370398223ed0","kind":"commit","published_at":"2021-05-28T08:36:26.000Z","download_url":"https://codeload.github.com/hexpm/hex_core/tar.gz/v0.8.2","html_url":"https://github.com/hexpm/hex_core/releases/tag/v0.8.2","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hexpm%2Fhex_core/tags/v0.8.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hexpm%2Fhex_core/tags/v0.8.2/manifests"},{"name":"v0.8.1","sha":"558b1367ef5d72e04bbd3e4a0f41fe8cab027d24","kind":"commit","published_at":"2021-05-20T17:49:00.000Z","download_url":"https://codeload.github.com/hexpm/hex_core/tar.gz/v0.8.1","html_url":"https://github.com/hexpm/hex_core/releases/tag/v0.8.1","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hexpm%2Fhex_core/tags/v0.8.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hexpm%2Fhex_core/tags/v0.8.1/manifests"},{"name":"v0.8.0","sha":"455054d0952d63baaafd7b97e38af2d40e81881e","kind":"commit","published_at":"2021-05-02T20:26:49.000Z","download_url":"https://codeload.github.com/hexpm/hex_core/tar.gz/v0.8.0","html_url":"https://github.com/hexpm/hex_core/releases/tag/v0.8.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hexpm%2Fhex_core/tags/v0.8.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hexpm%2Fhex_core/tags/v0.8.0/manifests"},{"name":"v0.7.1","sha":"cbf3425a260049934670c82087ef67af2104af1a","kind":"commit","published_at":"2020-11-12T00:48:18.000Z","download_url":"https://codeload.github.com/hexpm/hex_core/tar.gz/v0.7.1","html_url":"https://github.com/hexpm/hex_core/releases/tag/v0.7.1","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hexpm%2Fhex_core/tags/v0.7.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hexpm%2Fhex_core/tags/v0.7.1/manifests"},{"name":"v0.7.0","sha":"95fd99110e7d5867458e1468c237ab409d600cf3","kind":"commit","published_at":"2020-10-20T10:06:44.000Z","download_url":"https://codeload.github.com/hexpm/hex_core/tar.gz/v0.7.0","html_url":"https://github.com/hexpm/hex_core/releases/tag/v0.7.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hexpm%2Fhex_core/tags/v0.7.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hexpm%2Fhex_core/tags/v0.7.0/manifests"},{"name":"v0.6.9","sha":"5552ffceb1f48425f56f9c7b26376785c72e1c2e","kind":"commit","published_at":"2020-05-24T19:21:01.000Z","download_url":"https://codeload.github.com/hexpm/hex_core/tar.gz/v0.6.9","html_url":"https://github.com/hexpm/hex_core/releases/tag/v0.6.9","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hexpm%2Fhex_core/tags/v0.6.9","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hexpm%2Fhex_core/tags/v0.6.9/manifests"},{"name":"v0.6.8","sha":"730b5e2dd3eea02691580670d80b883f4bd663eb","kind":"commit","published_at":"2020-02-04T00:12:18.000Z","download_url":"https://codeload.github.com/hexpm/hex_core/tar.gz/v0.6.8","html_url":"https://github.com/hexpm/hex_core/releases/tag/v0.6.8","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hexpm%2Fhex_core/tags/v0.6.8","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hexpm%2Fhex_core/tags/v0.6.8/manifests"},{"name":"v0.6.7","sha":"67186473de78932f241e9626025c96899e47bd61","kind":"commit","published_at":"2020-02-03T20:33:59.000Z","download_url":"https://codeload.github.com/hexpm/hex_core/tar.gz/v0.6.7","html_url":"https://github.com/hexpm/hex_core/releases/tag/v0.6.7","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hexpm%2Fhex_core/tags/v0.6.7","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hexpm%2Fhex_core/tags/v0.6.7/manifests"},{"name":"v0.6.6","sha":"5b7e2e67d18c4e9044fa62330a3b06e7928b36ed","kind":"commit","published_at":"2020-02-03T15:56:51.000Z","download_url":"https://codeload.github.com/hexpm/hex_core/tar.gz/v0.6.6","html_url":"https://github.com/hexpm/hex_core/releases/tag/v0.6.6","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hexpm%2Fhex_core/tags/v0.6.6","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hexpm%2Fhex_core/tags/v0.6.6/manifests"},{"name":"v0.6.5","sha":"ead77e2ac126d5d85c3542b25bc50231d0de023c","kind":"commit","published_at":"2020-01-14T14:13:15.000Z","download_url":"https://codeload.github.com/hexpm/hex_core/tar.gz/v0.6.5","html_url":"https://github.com/hexpm/hex_core/releases/tag/v0.6.5","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hexpm%2Fhex_core/tags/v0.6.5","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hexpm%2Fhex_core/tags/v0.6.5/manifests"},{"name":"v0.6.4","sha":"306e6a6c340d60a41ad6394d579e0cfee3ed7797","kind":"commit","published_at":"2019-12-27T11:59:21.000Z","download_url":"https://codeload.github.com/hexpm/hex_core/tar.gz/v0.6.4","html_url":"https://github.com/hexpm/hex_core/releases/tag/v0.6.4","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hexpm%2Fhex_core/tags/v0.6.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hexpm%2Fhex_core/tags/v0.6.4/manifests"},{"name":"v0.6.3","sha":"9365ca3a8eb6daa85c466200309da511ac39d943","kind":"commit","published_at":"2019-12-16T08:08:23.000Z","download_url":"https://codeload.github.com/hexpm/hex_core/tar.gz/v0.6.3","html_url":"https://github.com/hexpm/hex_core/releases/tag/v0.6.3","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hexpm%2Fhex_core/tags/v0.6.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hexpm%2Fhex_core/tags/v0.6.3/manifests"},{"name":"v0.6.2","sha":"66e20e3b623d15d3fe9dfc4eac0ab867f55fb93e","kind":"commit","published_at":"2019-11-11T21:58:00.000Z","download_url":"https://codeload.github.com/hexpm/hex_core/tar.gz/v0.6.2","html_url":"https://github.com/hexpm/hex_core/releases/tag/v0.6.2","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hexpm%2Fhex_core/tags/v0.6.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hexpm%2Fhex_core/tags/v0.6.2/manifests"},{"name":"v0.6.1","sha":"baa0500ff49dbcf7395d42f430e2b2fecebebaf6","kind":"commit","published_at":"2019-07-30T11:59:01.000Z","download_url":"https://codeload.github.com/hexpm/hex_core/tar.gz/v0.6.1","html_url":"https://github.com/hexpm/hex_core/releases/tag/v0.6.1","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hexpm%2Fhex_core/tags/v0.6.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hexpm%2Fhex_core/tags/v0.6.1/manifests"},{"name":"v0.5.1","sha":"f768ece584e1131dddc8b5b3f5eb4d98931035cd","kind":"commit","published_at":"2019-07-30T11:54:26.000Z","download_url":"https://codeload.github.com/hexpm/hex_core/tar.gz/v0.5.1","html_url":"https://github.com/hexpm/hex_core/releases/tag/v0.5.1","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hexpm%2Fhex_core/tags/v0.5.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hexpm%2Fhex_core/tags/v0.5.1/manifests"},{"name":"v0.6.0","sha":"46b4a44c94e8a3a644cc7bdd7facafb9339ea7ee","kind":"commit","published_at":"2019-07-27T06:17:04.000Z","download_url":"https://codeload.github.com/hexpm/hex_core/tar.gz/v0.6.0","html_url":"https://github.com/hexpm/hex_core/releases/tag/v0.6.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hexpm%2Fhex_core/tags/v0.6.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hexpm%2Fhex_core/tags/v0.6.0/manifests"},{"name":"v0.5.0","sha":"92543f1dee5e8b2f9b8c95dc1629b920c5067b02","kind":"commit","published_at":"2019-02-26T19:55:32.000Z","download_url":"https://codeload.github.com/hexpm/hex_core/tar.gz/v0.5.0","html_url":"https://github.com/hexpm/hex_core/releases/tag/v0.5.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hexpm%2Fhex_core/tags/v0.5.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hexpm%2Fhex_core/tags/v0.5.0/manifests"},{"name":"v0.4.0","sha":"6cfba39323c6080e223e6b8bcaf5c5f91ccc2ddf","kind":"commit","published_at":"2018-12-30T11:36:46.000Z","download_url":"https://codeload.github.com/hexpm/hex_core/tar.gz/v0.4.0","html_url":"https://github.com/hexpm/hex_core/releases/tag/v0.4.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hexpm%2Fhex_core/tags/v0.4.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hexpm%2Fhex_core/tags/v0.4.0/manifests"},{"name":"v0.3.0","sha":"4cee9e8ad5ed6b2102a6209e3cc2f169ef951ad8","kind":"commit","published_at":"2018-12-14T11:29:06.000Z","download_url":"https://codeload.github.com/hexpm/hex_core/tar.gz/v0.3.0","html_url":"https://github.com/hexpm/hex_core/releases/tag/v0.3.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hexpm%2Fhex_core/tags/v0.3.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hexpm%2Fhex_core/tags/v0.3.0/manifests"},{"name":"v0.2.1","sha":"59fef373d0f01d26983abadd61f110fe5b4f8170","kind":"commit","published_at":"2018-12-13T18:21:56.000Z","download_url":"https://codeload.github.com/hexpm/hex_core/tar.gz/v0.2.1","html_url":"https://github.com/hexpm/hex_core/releases/tag/v0.2.1","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hexpm%2Fhex_core/tags/v0.2.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hexpm%2Fhex_core/tags/v0.2.1/manifests"},{"name":"v0.2.0","sha":"c2e21d4aa35fa896adc5961281efc6961332ad81","kind":"tag","published_at":"2018-08-31T22:46:21.000Z","download_url":"https://codeload.github.com/hexpm/hex_core/tar.gz/v0.2.0","html_url":"https://github.com/hexpm/hex_core/releases/tag/v0.2.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hexpm%2Fhex_core/tags/v0.2.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hexpm%2Fhex_core/tags/v0.2.0/manifests"},{"name":"v0.1.1","sha":"235185ceff160e4b2bcf6b8cd1e785d961b3a10b","kind":"tag","published_at":"2018-08-11T21:43:20.000Z","download_url":"https://codeload.github.com/hexpm/hex_core/tar.gz/v0.1.1","html_url":"https://github.com/hexpm/hex_core/releases/tag/v0.1.1","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hexpm%2Fhex_core/tags/v0.1.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hexpm%2Fhex_core/tags/v0.1.1/manifests"},{"name":"v0.1.0","sha":"a2c868584104380dcd0d712594417f92179285e8","kind":"commit","published_at":"2018-08-08T12:07:11.000Z","download_url":"https://codeload.github.com/hexpm/hex_core/tar.gz/v0.1.0","html_url":"https://github.com/hexpm/hex_core/releases/tag/v0.1.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hexpm%2Fhex_core/tags/v0.1.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hexpm%2Fhex_core/tags/v0.1.0/manifests"}]},"repo_metadata_updated_at":"2024-08-09T08:51:45.062Z","dependent_packages_count":10,"downloads":48687379,"downloads_period":"total","dependent_repos_count":19,"rankings":{"downloads":0.783608452694457,"dependent_repos_count":3.982272464512814,"dependent_packages_count":2.241634016314471,"stargazers_count":7.399319159868971,"forks_count":4.7209197764789,"docker_downloads_count":0.5909178495728692,"average":3.286445286573747},"purl":"pkg:hex/hex_core","advisories":[{"uuid":"GSA_kwCzR0hTQS1oeDl3LWYydzktOWc5Ns4ABS7c","url":"https://github.com/advisories/GHSA-hx9w-f2w9-9g96","title":"hex_core has Unsafe Deserialization of Erlang Terms","description":"### Impact\n\nThe Hex client (`hex_core`) deserializes Erlang terms received from the Hex API using `binary_to_term/1` without sufficient restrictions.\n\nIf an attacker can control the HTTP response body returned by the Hex API, this allows denial-of-service attacks such as **atom table exhaustion**, leading to a VM crash. No released versions are known to allow remote code execution.\n\n### Patches\n\n* https://github.com/hexpm/hex_core/commit/cdf726095bca85ad2549d146df1e831ae93c2b13\n* https://github.com/hexpm/hex/commit/636739f3322514e9303ca335fb630696fcbb3c95\n* https://github.com/erlang/rebar3/commit/1d4478f527e373de0b225951e53115450e0d9b9d\n\n### Workarounds\n\nEnsure that the Hex API URL (`HEX_API_URL`) points only to trusted endpoints. There is no client-side workaround that fully mitigates this issue without applying the patch.\n\n### Resources\n\n* hex_core Module: https://github.com/hexpm/hex_core/blob/main/src/hex_api.erl\n* Hex Vendored Module: https://github.com/hexpm/hex/blob/main/src/mix_hex_api.erl\n* Rebar3 Vendored Module: https://github.com/erlang/rebar3/blob/main/apps/rebar/src/vendored/r3_hex_api.erl\n* hex_core Patch: https://github.com/hexpm/hex_core/commit/cdf726095bca85ad2549d146df1e831ae93c2b13\n* Hex Vendored Patch: https://github.com/hexpm/hex/commit/636739f3322514e9303ca335fb630696fcbb3c95\n* Rebar3 Vendored Patch: https://github.com/erlang/rebar3/commit/1d4478f527e373de0b225951e53115450e0d9b9d","origin":"UNSPECIFIED","severity":"LOW","published_at":"2026-03-01T01:25:35.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":2.0,"cvss_vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:A/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N","references":["https://github.com/hexpm/hex_core/security/advisories/GHSA-hx9w-f2w9-9g96","https://nvd.nist.gov/vuln/detail/CVE-2026-21619","https://github.com/erlang/rebar3/commit/1d4478f527e373de0b225951e53115450e0d9b9d","https://github.com/hexpm/hex/commit/636739f3322514e9303ca335fb630696fcbb3c95","https://github.com/hexpm/hex_core/commit/cdf726095bca85ad2549d146df1e831ae93c2b13","https://github.com/advisories/GHSA-hx9w-f2w9-9g96"],"source_kind":"github","identifiers":["GHSA-hx9w-f2w9-9g96","CVE-2026-21619"],"repository_url":null,"blast_radius":0.0,"created_at":"2026-03-01T02:00:10.065Z","updated_at":"2026-04-04T04:00:57.551Z","epss_percentage":0.00046,"epss_percentile":0.14111,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS1oeDl3LWYydzktOWc5Ns4ABS7c","html_url":"https://advisories.ecosyste.ms/advisories/GSA_kwCzR0hTQS1oeDl3LWYydzktOWc5Ns4ABS7c","packages":[{"ecosystem":"hex","package_name":"hex_core","versions":[{"first_patched_version":"0.12.1","vulnerable_version_range":"\u003c 0.12.1"}],"purl":null,"statistics":{"dependent_packages_count":10,"dependent_repos_count":19,"downloads":48649544,"downloads_period":"total"},"affected_versions":["0.1.0","0.1.1","0.2.0","0.2.1","0.3.0","0.4.0","0.5.0","0.5.1","0.6.0","0.6.1","0.6.2","0.6.3","0.6.4","0.6.5","0.6.6","0.6.7","0.6.8","0.6.9","0.6.10","0.7.0","0.7.1","0.8.0","0.8.1","0.8.2","0.8.3","0.8.4","0.9.0","0.10.0","0.10.1","0.10.2","0.10.3","0.11.0","0.12.0"],"unaffected_versions":["0.12.1","0.12.2","0.13.0","0.14.0","0.14.1","0.15.0"]}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS1oeDl3LWYydzktOWc5Ns4ABS7c/related_packages","related_advisories":[{"uuid":"EEF-CVE-2026-21619","source_kind":"erlef","url":"https://github.com/hexpm/hex_core/security/advisories/GHSA-hx9w-f2w9-9g96"}]},{"uuid":"EEF-CVE-2026-21619","url":"https://github.com/hexpm/hex_core/security/advisories/GHSA-hx9w-f2w9-9g96","title":"Unsafe Deserialization of Erlang Terms in hex_core","description":"Uncontrolled Resource Consumption, Deserialization of Untrusted Data vulnerability in hexpm hex_core (hex_api modules), hexpm hex (mix_hex_api modules), erlang rebar3 (r3_hex_api modules) allows Object Injection, Excessive Allocation. This vulnerability is associated with program files src/hex_api.erl, src/mix_hex_api.erl, apps/rebar/src/vendored/r3_hex_api.erl and program routines hex_core:request/4, mix_hex_api:request/4, r3_hex_api:request/4.\n\nThis issue affects hex_core: from 0.1.0 before 0.12.1; hex: from 2.3.0 before 2.3.2; rebar3: from 3.9.1 before 3.27.0.","origin":"ERLEF","severity":"LOW","published_at":"2026-02-27T17:57:11.513Z","withdrawn_at":null,"classification":null,"cvss_score":2.0,"cvss_vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:A/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N","references":["https://github.com/hexpm/hex_core/security/advisories/GHSA-hx9w-f2w9-9g96","https://github.com/hexpm/hex_core/commit/cdf726095bca85ad2549d146df1e831ae93c2b13","https://github.com/hexpm/hex/commit/636739f3322514e9303ca335fb630696fcbb3c95","https://github.com/erlang/rebar3/commit/1d4478f527e373de0b225951e53115450e0d9b9d","https://hex.pm/packages/hex_core"],"source_kind":"erlef","identifiers":["EEF-CVE-2026-21619","GHSA-hx9w-f2w9-9g96","CVE-2026-21619"],"repository_url":"https://github.com/hexpm/hex_core","blast_radius":2.5575072019056577,"created_at":"2026-02-27T18:10:36.311Z","updated_at":"2026-04-04T03:31:06.859Z","epss_percentage":null,"epss_percentile":null,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/EEF-CVE-2026-21619","html_url":"https://advisories.ecosyste.ms/advisories/EEF-CVE-2026-21619","packages":[{"ecosystem":"hex","package_name":"hex_core","versions":[{"first_patched_version":"0.12.1","vulnerable_version_range":"\u003e= 0.1.0, \u003c 0.12.1"}],"purl":null,"statistics":{"dependent_packages_count":10,"dependent_repos_count":19,"downloads":48649544,"downloads_period":"total"},"affected_versions":["0.1.0","0.1.1","0.2.0","0.2.1","0.3.0","0.4.0","0.5.0","0.5.1","0.6.0","0.6.1","0.6.2","0.6.3","0.6.4","0.6.5","0.6.6","0.6.7","0.6.8","0.6.9","0.6.10","0.7.0","0.7.1","0.8.0","0.8.1","0.8.2","0.8.3","0.8.4","0.9.0","0.10.0","0.10.1","0.10.2","0.10.3","0.11.0","0.12.0"],"unaffected_versions":["0.12.1","0.12.2","0.13.0","0.14.0","0.14.1","0.15.0"]}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/EEF-CVE-2026-21619/related_packages","related_advisories":[{"uuid":"GSA_kwCzR0hTQS1oeDl3LWYydzktOWc5Ns4ABS7c","source_kind":"github","url":"https://github.com/advisories/GHSA-hx9w-f2w9-9g96"}]},{"uuid":"GSA_kwCzR0hTQS1xM2NjLXJyMmMtODdyNs3uxA","url":"https://github.com/advisories/GHSA-q3cc-rr2c-87r6","title":"Hex authenticity of signed packages not validated","description":"Hex package manager hex_core version 0.3.0 and earlier contains a Signing oracle vulnerability in Package registry verification that can result in Package modifications not detected, allowing code execution. This attack appears to be exploitable via victim fetches packages from malicious/compromised mirror. This vulnerability appears to have been fixed in 0.4.0.","origin":"UNSPECIFIED","severity":"HIGH","published_at":"2022-05-13T01:07:56.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":8.8,"cvss_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","references":["https://nvd.nist.gov/vuln/detail/CVE-2019-1000013","https://github.com/hexpm/hex_core/pull/48","https://github.com/hexpm/hex_core/pull/51","https://github.com/advisories/GHSA-q3cc-rr2c-87r6"],"source_kind":"github","identifiers":["GHSA-q3cc-rr2c-87r6","CVE-2019-1000013"],"repository_url":"https://github.com/hexpm/hex_core","blast_radius":0.0,"created_at":"2024-05-02T13:05:19.051Z","updated_at":"2026-04-04T04:05:06.008Z","epss_percentage":0.00233,"epss_percentile":0.4605,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS1xM2NjLXJyMmMtODdyNs3uxA","html_url":"https://advisories.ecosyste.ms/advisories/GSA_kwCzR0hTQS1xM2NjLXJyMmMtODdyNs3uxA","packages":[{"ecosystem":"hex","package_name":"hex_core","versions":[{"first_patched_version":"0.4.0","vulnerable_version_range":"\u003c 0.4.0"}],"purl":null,"statistics":{"dependent_packages_count":10,"dependent_repos_count":19,"downloads":48649544,"downloads_period":"total"},"affected_versions":["0.1.0","0.1.1","0.2.0","0.2.1","0.3.0"],"unaffected_versions":["0.4.0","0.5.0","0.5.1","0.6.0","0.6.1","0.6.2","0.6.3","0.6.4","0.6.5","0.6.6","0.6.7","0.6.8","0.6.9","0.6.10","0.7.0","0.7.1","0.8.0","0.8.1","0.8.2","0.8.3","0.8.4","0.9.0","0.10.0","0.10.1","0.10.2","0.10.3","0.11.0","0.12.0","0.12.1","0.12.2","0.13.0","0.14.0","0.14.1","0.15.0"]}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS1xM2NjLXJyMmMtODdyNs3uxA/related_packages","related_advisories":[]}],"docker_usage_url":"https://docker.ecosyste.ms/usage/hex/hex_core","docker_dependents_count":16,"docker_downloads_count":1961,"usage_url":"https://repos.ecosyste.ms/usage/hex/hex_core","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/hex/hex_core/dependencies","status":null,"funding_links":[],"critical":true,"issue_metadata":{"last_synced_at":"2024-06-29T12:25:09.932Z","issues_count":31,"pull_requests_count":80,"avg_time_to_close_issue":4883918.65,"avg_time_to_close_pull_request":2256135.1625,"issues_closed_count":20,"pull_requests_closed_count":80,"pull_request_authors_count":22,"issue_authors_count":12,"avg_comments_per_issue":3.096774193548387,"avg_comments_per_pull_request":3.175,"merged_pull_requests_count":67,"bot_issues_count":0,"bot_pull_requests_count":0,"past_year_issues_count":1,"past_year_pull_requests_count":10,"past_year_avg_time_to_close_issue":149022.0,"past_year_avg_time_to_close_pull_request":134022.8,"past_year_issues_closed_count":1,"past_year_pull_requests_closed_count":10,"past_year_pull_request_authors_count":7,"past_year_issue_authors_count":1,"past_year_avg_comments_per_issue":4.0,"past_year_avg_comments_per_pull_request":2.1,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":0,"past_year_merged_pull_requests_count":10,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/hexpm%2Fhex_core/issues","maintainers":[{"login":"wojtekmach","count":33,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/wojtekmach"},{"login":"ericmj","count":16,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ericmj"},{"login":"supersimple","count":4,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/supersimple"}],"active_maintainers":[{"login":"wojtekmach","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/wojtekmach"},{"login":"supersimple","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/supersimple"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/hex.pm/packages/hex_core/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/hex.pm/packages/hex_core/version_numbers","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/hex.pm/packages/hex_core/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/hex.pm/packages/hex_core/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/hex.pm/packages/hex_core/codemeta","maintainers":[{"uuid":"hex","login":"hex","name":null,"email":"support@hex.pm","url":null,"packages_count":1,"html_url":"https://hex.pm/users/hex","role":null,"created_at":"2022-11-08T12:24:15.010Z","updated_at":"2022-11-08T12:24:15.010Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/hex.pm/maintainers/hex/packages"}]}