{"id":1725134,"name":"flat","ecosystem":"npm","description":"Take a nested Javascript object and flatten it, or unflatten an object with delimited keys","homepage":"https://github.com/hughsk/flat","licenses":"BSD-3-Clause","normalized_licenses":["BSD-3-Clause"],"repository_url":"https://github.com/hughsk/flat","keywords_array":["flat","json","flatten","unflatten","split","object","nested"],"namespace":null,"versions_count":28,"first_release_published_at":"2012-10-05T16:52:58.271Z","latest_release_published_at":"2023-09-19T14:47:19.548Z","latest_release_number":"6.0.1","last_synced_at":"2026-10-14T02:03:11.289Z","created_at":"2022-04-09T15:41:18.073Z","updated_at":"2026-10-14T09:21:05.881Z","registry_url":"https://www.npmjs.com/package/flat","install_command":"npm install flat","documentation_url":null,"metadata":{"funding":null,"dist-tags":{"latest":"6.0.1"},"contentPolicy":null},"repo_metadata":{"id":4936633,"uuid":"6093469","full_name":"hughsk/flat","owner":"hughsk","description":":steam_locomotive: Flatten/unflatten nested Javascript objects","archived":false,"fork":false,"pushed_at":"2026-03-19T17:45:04.000Z","size":366,"stargazers_count":1817,"open_issues_count":60,"forks_count":195,"subscribers_count":14,"default_branch":"master","last_synced_at":"2026-10-07T06:06:49.563Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":"","language":"JavaScript","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":"IBM-Bluemix/phonebot","license":"bsd-3-clause","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/hughsk.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null}},"created_at":"2012-10-05T16:51:00.000Z","updated_at":"2026-10-07T04:02:08.000Z","dependencies_parsed_at":"2024-01-15T20:48:32.681Z","dependency_job_id":"952ce337-854a-4a4f-8195-817f6b5439e6","html_url":"https://github.com/hughsk/flat","commit_stats":{"total_commits":111,"total_committers":28,"mean_commits":"3.9642857142857144","dds":0.6666666666666667,"last_synced_commit":"9d8da940f04416b1f560899de414465ea86e1e52"},"previous_names":[],"tags_count":24,"template":false,"template_full_name":null,"purl":"pkg:github/hughsk/flat","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hughsk%2Fflat","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hughsk%2Fflat/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hughsk%2Fflat/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hughsk%2Fflat/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/hughsk","download_url":"https://codeload.github.com/hughsk/flat/tar.gz/refs/heads/master","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hughsk%2Fflat/sbom","scorecard":{"id":472465,"data":{"date":"2025-08-11","repo":{"name":"github.com/hughsk/flat","commit":"9d8da940f04416b1f560899de414465ea86e1e52"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":3.4,"checks":[{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Code-Review","score":0,"reason":"Found 1/21 approved changesets -- score normalized to 0","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Maintained","score":0,"reason":"0 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Warn: no topLevel permission defined: .github/workflows/main.yml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Pinned-Dependencies","score":3,"reason":"dependency not pinned by hash detected -- score normalized to 3","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/main.yml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/hughsk/flat/main.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/main.yml:18: update your workflow using https://app.stepsecurity.io/secureworkflow/hughsk/flat/main.yml/master?enable=pin","Info:   0 out of   2 GitHub-owned GitHubAction dependencies pinned","Info:   1 out of   1 npmCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Security-Policy","score":0,"reason":"security policy file not detected","details":["Warn: no security policy file detected","Warn: no security file to analyze","Warn: no security file to analyze","Warn: no security file to analyze"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: BSD 3-Clause \"New\" or \"Revised\" License: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Branch-Protection","score":0,"reason":"branch protection not enabled on development/release branches","details":["Warn: branch protection not enabled for branch 'master'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 26 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}},{"name":"Vulnerabilities","score":8,"reason":"2 existing vulnerabilities detected","details":["Warn: Project is vulnerable to: GHSA-v6h2-p8h4-qcjw","Warn: Project is vulnerable to: GHSA-3xgq-45jj-v275"],"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}}]},"last_synced_at":"2025-08-19T14:19:02.474Z","repository_id":4936633,"created_at":"2025-08-19T14:19:02.474Z","updated_at":"2025-08-19T14:19:02.474Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":343170754,"owners_count":38111908,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-10-03T21:59:58.778Z","status":"online","status_checked_at":"2026-10-08T02:00:05.744Z","response_time":97,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"hughsk","name":"Hugh Kennedy","uuid":"569817","kind":"user","description":"🐨 💻 🎨","email":"","website":"https://hughsk.io/","location":null,"twitter":null,"company":null,"icon_url":"https://avatars.githubusercontent.com/u/569817?u=5a4330987b1182f0685e605fc0a3a3a39976a618\u0026v=4","repositories_count":493,"last_synced_at":"2026-10-09T11:22:29.722Z","metadata":{"has_sponsors_listing":false,"funding":null},"html_url":"https://github.com/hughsk","funding_links":[],"total_stars":11564,"followers":1552,"following":262,"created_at":"2022-11-02T16:19:13.257Z","updated_at":"2026-10-09T11:22:29.740Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/hughsk","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/hughsk/repositories"},"tags":[{"name":"v6.0.1","sha":"05ac9ca6c4f612ca5ac30cd3ca8ccc396d97c4bf","kind":"tag","published_at":"2023-09-19T14:46:32.000Z","download_url":"https://codeload.github.com/hughsk/flat/tar.gz/v6.0.1","html_url":"https://github.com/hughsk/flat/releases/tag/v6.0.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/hughsk/flat@v6.0.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hughsk%2Fflat/tags/v6.0.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hughsk%2Fflat/tags/v6.0.1/manifests"},{"name":"v6.0.0","sha":"95b2a9f1bf93506e526350a5c0b94d040d0e11b2","kind":"tag","published_at":"2022-09-20T10:14:59.000Z","download_url":"https://codeload.github.com/hughsk/flat/tar.gz/v6.0.0","html_url":"https://github.com/hughsk/flat/releases/tag/v6.0.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/hughsk/flat@v6.0.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hughsk%2Fflat/tags/v6.0.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hughsk%2Fflat/tags/v6.0.0/manifests"},{"name":"1.6.2","sha":"e246ac18b036b376015592359690a5350d3f8304","kind":"tag","published_at":"2020-08-06T15:47:14.000Z","download_url":"https://codeload.github.com/hughsk/flat/tar.gz/1.6.2","html_url":"https://github.com/hughsk/flat/releases/tag/1.6.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/hughsk/flat@1.6.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hughsk%2Fflat/tags/1.6.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hughsk%2Fflat/tags/1.6.2/manifests"},{"name":"2.0.2","sha":"c9bccfc45bee8772929d3048bf33643fb6cbd3f8","kind":"tag","published_at":"2020-08-06T15:41:51.000Z","download_url":"https://codeload.github.com/hughsk/flat/tar.gz/2.0.2","html_url":"https://github.com/hughsk/flat/releases/tag/2.0.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/hughsk/flat@2.0.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hughsk%2Fflat/tags/2.0.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hughsk%2Fflat/tags/2.0.2/manifests"},{"name":"3.0.1","sha":"3099b93f6706d1a8d847f04c109de609f6f6edd3","kind":"tag","published_at":"2020-08-06T15:39:58.000Z","download_url":"https://codeload.github.com/hughsk/flat/tar.gz/3.0.1","html_url":"https://github.com/hughsk/flat/releases/tag/3.0.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/hughsk/flat@3.0.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hughsk%2Fflat/tags/3.0.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hughsk%2Fflat/tags/3.0.1/manifests"},{"name":"4.1.1","sha":"d2ed12bea2bce66254b3d013e5a1cfc73b77c71e","kind":"tag","published_at":"2020-08-06T15:32:09.000Z","download_url":"https://codeload.github.com/hughsk/flat/tar.gz/4.1.1","html_url":"https://github.com/hughsk/flat/releases/tag/4.1.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/hughsk/flat@4.1.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hughsk%2Fflat/tags/4.1.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hughsk%2Fflat/tags/4.1.1/manifests"},{"name":"5.0.2","sha":"e5ffd664df8a1fcc05adc22dd0ac6a2b32a0955d","kind":"tag","published_at":"2020-08-06T15:28:53.000Z","download_url":"https://codeload.github.com/hughsk/flat/tar.gz/5.0.2","html_url":"https://github.com/hughsk/flat/releases/tag/5.0.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/hughsk/flat@5.0.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hughsk%2Fflat/tags/5.0.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hughsk%2Fflat/tags/5.0.2/manifests"},{"name":"5.0.1","sha":"f25d3a11306bc460e43a14affa64d44a1d3cf8ed","kind":"tag","published_at":"2020-08-06T15:18:00.000Z","download_url":"https://codeload.github.com/hughsk/flat/tar.gz/5.0.1","html_url":"https://github.com/hughsk/flat/releases/tag/5.0.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/hughsk/flat@5.0.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hughsk%2Fflat/tags/5.0.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hughsk%2Fflat/tags/5.0.1/manifests"},{"name":"5.0.0","sha":"38239cce29330b715d3e31aa96115641bfcc22bd","kind":"tag","published_at":"2019-10-22T05:18:09.000Z","download_url":"https://codeload.github.com/hughsk/flat/tar.gz/5.0.0","html_url":"https://github.com/hughsk/flat/releases/tag/5.0.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/hughsk/flat@5.0.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hughsk%2Fflat/tags/5.0.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hughsk%2Fflat/tags/5.0.0/manifests"},{"name":"4.1.0","sha":"32432ddde3f08c44cc9e9e4f01616cd3fbf355bf","kind":"tag","published_at":"2018-07-02T07:53:36.000Z","download_url":"https://codeload.github.com/hughsk/flat/tar.gz/4.1.0","html_url":"https://github.com/hughsk/flat/releases/tag/4.1.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/hughsk/flat@4.1.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hughsk%2Fflat/tags/4.1.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hughsk%2Fflat/tags/4.1.0/manifests"},{"name":"4.0.0","sha":"b6633d0f2c1f06080e6fb51913ec5de749b884dc","kind":"tag","published_at":"2017-07-25T07:18:08.000Z","download_url":"https://codeload.github.com/hughsk/flat/tar.gz/4.0.0","html_url":"https://github.com/hughsk/flat/releases/tag/4.0.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/hughsk/flat@4.0.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hughsk%2Fflat/tags/4.0.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hughsk%2Fflat/tags/4.0.0/manifests"},{"name":"3.0.0","sha":"91211e8f2ae9fc677cc0ebb03d50f4bd540bca88","kind":"tag","published_at":"2017-07-23T06:46:10.000Z","download_url":"https://codeload.github.com/hughsk/flat/tar.gz/3.0.0","html_url":"https://github.com/hughsk/flat/releases/tag/3.0.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/hughsk/flat@3.0.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hughsk%2Fflat/tags/3.0.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hughsk%2Fflat/tags/3.0.0/manifests"},{"name":"v2.0.1","sha":"1b9c3c414b488af6105abb61dd3f32297c998904","kind":"tag","published_at":"2016-06-22T22:46:17.000Z","download_url":"https://codeload.github.com/hughsk/flat/tar.gz/v2.0.1","html_url":"https://github.com/hughsk/flat/releases/tag/v2.0.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/hughsk/flat@v2.0.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hughsk%2Fflat/tags/v2.0.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hughsk%2Fflat/tags/v2.0.1/manifests"},{"name":"v2.0.0","sha":"75442fd5704e4f57c523055bb92eb0eaaec5205e","kind":"tag","published_at":"2016-01-30T22:53:47.000Z","download_url":"https://codeload.github.com/hughsk/flat/tar.gz/v2.0.0","html_url":"https://github.com/hughsk/flat/releases/tag/v2.0.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/hughsk/flat@v2.0.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hughsk%2Fflat/tags/v2.0.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hughsk%2Fflat/tags/v2.0.0/manifests"},{"name":"v1.6.1","sha":"d6418d11df572e0c58e9ae727675ce41df6787fb","kind":"tag","published_at":"2016-01-30T22:29:18.000Z","download_url":"https://codeload.github.com/hughsk/flat/tar.gz/v1.6.1","html_url":"https://github.com/hughsk/flat/releases/tag/v1.6.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/hughsk/flat@v1.6.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hughsk%2Fflat/tags/v1.6.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hughsk%2Fflat/tags/v1.6.1/manifests"},{"name":"v1.6.0","sha":"2dfe75aabaf6e44396f86d6ed9f9f72323129b68","kind":"tag","published_at":"2015-05-27T21:38:58.000Z","download_url":"https://codeload.github.com/hughsk/flat/tar.gz/v1.6.0","html_url":"https://github.com/hughsk/flat/releases/tag/v1.6.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/hughsk/flat@v1.6.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hughsk%2Fflat/tags/v1.6.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hughsk%2Fflat/tags/v1.6.0/manifests"},{"name":"v1.5.1","sha":"b573069344ad88a5e65ad88a5e58804649345c8f","kind":"tag","published_at":"2015-03-19T04:04:08.000Z","download_url":"https://codeload.github.com/hughsk/flat/tar.gz/v1.5.1","html_url":"https://github.com/hughsk/flat/releases/tag/v1.5.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/hughsk/flat@v1.5.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hughsk%2Fflat/tags/v1.5.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hughsk%2Fflat/tags/v1.5.1/manifests"},{"name":"v1.5.0","sha":"90f4598f59a3292e352ed8b45c7540983d0d76e9","kind":"tag","published_at":"2015-01-14T03:25:23.000Z","download_url":"https://codeload.github.com/hughsk/flat/tar.gz/v1.5.0","html_url":"https://github.com/hughsk/flat/releases/tag/v1.5.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/hughsk/flat@v1.5.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hughsk%2Fflat/tags/v1.5.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hughsk%2Fflat/tags/v1.5.0/manifests"},{"name":"v1.4.0","sha":"0c9422d6c9b6af64f18493dde46215b18c1fc3f4","kind":"tag","published_at":"2015-01-14T03:19:37.000Z","download_url":"https://codeload.github.com/hughsk/flat/tar.gz/v1.4.0","html_url":"https://github.com/hughsk/flat/releases/tag/v1.4.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/hughsk/flat@v1.4.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hughsk%2Fflat/tags/v1.4.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hughsk%2Fflat/tags/v1.4.0/manifests"},{"name":"v1.3.0","sha":"0b447a22423f3ae8ab2d25ebbbd4d198221bec36","kind":"commit","published_at":"2014-09-28T02:19:33.000Z","download_url":"https://codeload.github.com/hughsk/flat/tar.gz/v1.3.0","html_url":"https://github.com/hughsk/flat/releases/tag/v1.3.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/hughsk/flat@v1.3.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hughsk%2Fflat/tags/v1.3.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hughsk%2Fflat/tags/v1.3.0/manifests"},{"name":"v1.2.1","sha":"d856544c2242ca7d7acecc53c0f08a45cf65f540","kind":"tag","published_at":"2014-04-16T19:07:55.000Z","download_url":"https://codeload.github.com/hughsk/flat/tar.gz/v1.2.1","html_url":"https://github.com/hughsk/flat/releases/tag/v1.2.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/hughsk/flat@v1.2.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hughsk%2Fflat/tags/v1.2.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hughsk%2Fflat/tags/v1.2.1/manifests"},{"name":"v1.2.0","sha":"e7c9281f20e8ecdfa3bc92fb8edbd0d2e70ac80f","kind":"tag","published_at":"2014-02-17T00:27:24.000Z","download_url":"https://codeload.github.com/hughsk/flat/tar.gz/v1.2.0","html_url":"https://github.com/hughsk/flat/releases/tag/v1.2.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/hughsk/flat@v1.2.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hughsk%2Fflat/tags/v1.2.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hughsk%2Fflat/tags/v1.2.0/manifests"},{"name":"v1.1.0","sha":"1542ed4866cf14129015b4f90ccbc8f88ee0215b","kind":"tag","published_at":"2013-12-16T11:37:07.000Z","download_url":"https://codeload.github.com/hughsk/flat/tar.gz/v1.1.0","html_url":"https://github.com/hughsk/flat/releases/tag/v1.1.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/hughsk/flat@v1.1.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hughsk%2Fflat/tags/v1.1.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hughsk%2Fflat/tags/v1.1.0/manifests"},{"name":"v1.0.0","sha":"fc632f433aa24f3f368503b2674d50f4551e7e59","kind":"tag","published_at":"2013-04-30T03:54:37.000Z","download_url":"https://codeload.github.com/hughsk/flat/tar.gz/v1.0.0","html_url":"https://github.com/hughsk/flat/releases/tag/v1.0.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/hughsk/flat@v1.0.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hughsk%2Fflat/tags/v1.0.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hughsk%2Fflat/tags/v1.0.0/manifests"}]},"repo_metadata_updated_at":"2026-10-14T02:03:11.726Z","dependent_packages_count":2250,"downloads":134967997,"downloads_period":"last-month","dependent_repos_count":441511,"rankings":{"downloads":0.030528507328484552,"dependent_repos_count":0.05475965440086914,"dependent_packages_count":0.0353199770885606,"stargazers_count":2.022876393222507,"forks_count":2.314060855499129,"docker_downloads_count":0.03370456728373496,"average":0.7485416591372142},"purl":"pkg:npm/flat","advisories":[{"uuid":"GSA_kwCzR0hTQS0yajJ4LTJncHctZzhmbc4AAwl4","url":"https://github.com/advisories/GHSA-2j2x-2gpw-g8fm","title":"flat vulnerable to Prototype Pollution","description":"flat helps flatten/unflatten nested Javascript objects. A vulnerability, which was classified as critical, was found in hughsk flat up to 5.0.0. This affects the function unflatten of the file index.js. The manipulation leads to improperly controlled modification of object prototype attributes ('prototype pollution'). It is possible to initiate the attack remotely. Upgrading to version 5.0.1 can address this issue. The name of the patch is 20ef0ef55dfa028caddaedbcb33efbdb04d18e13. It is recommended to upgrade the affected component. The identifier VDB-216777 was assigned to this vulnerability.","origin":"UNSPECIFIED","severity":"CRITICAL","published_at":"2022-12-25T21:30:22.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":9.8,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","references":["https://nvd.nist.gov/vuln/detail/CVE-2020-36632","https://github.com/hughsk/flat/issues/105","https://github.com/hughsk/flat/pull/106","https://github.com/hughsk/flat/commit/20ef0ef55dfa028caddaedbcb33efbdb04d18e13","https://github.com/hughsk/flat/releases/tag/5.0.1","https://vuldb.com/?ctiid.216777","https://vuldb.com/?id.216777","https://github.com/hughsk/flat/compare/3.0.0...3.0.1","https://github.com/hughsk/flat/compare/4.1.0...4.1.1","https://github.com/hughsk/flat/compare/v1.6.0...1.6.2","https://github.com/hughsk/flat/compare/v2.0.1...2.0.2","https://github.com/advisories/GHSA-2j2x-2gpw-g8fm"],"source_kind":"github","identifiers":["GHSA-2j2x-2gpw-g8fm","CVE-2020-36632"],"repository_url":"https://github.com/hughsk/flat","blast_radius":0.0,"created_at":"2022-12-30T17:09:53.449Z","updated_at":"2026-10-14T09:07:18.560Z","epss_percentage":0.01167,"epss_percentile":0.66519,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS0yajJ4LTJncHctZzhmbc4AAwl4","html_url":"https://advisories.ecosyste.ms/advisories/GSA_kwCzR0hTQS0yajJ4LTJncHctZzhmbc4AAwl4","packages":[{"ecosystem":"npm","package_name":"flat","versions":[{"first_patched_version":"5.0.1","vulnerable_version_range":"= 5.0.0"},{"first_patched_version":"4.0.2","vulnerable_version_range":"\u003e= 4.0.0, \u003c 4.0.2"},{"first_patched_version":"3.0.1","vulnerable_version_range":"= 3.0.0"},{"first_patched_version":"2.0.2","vulnerable_version_range":"\u003e= 2.0.0, \u003c 2.0.2"},{"first_patched_version":"1.6.2","vulnerable_version_range":"\u003c 1.6.2"}],"purl":"pkg:npm/flat"}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS0yajJ4LTJncHctZzhmbc4AAwl4/related_packages","related_advisories":[]}],"docker_usage_url":"https://docker.ecosyste.ms/usage/npm/flat","docker_dependents_count":5141,"docker_downloads_count":3790916426,"usage_url":"https://repos.ecosyste.ms/usage/npm/flat","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/npm/flat/dependencies","status":null,"funding_links":[],"critical":true,"issue_metadata":{"last_synced_at":"2026-10-12T23:01:20.474Z","issues_count":56,"pull_requests_count":83,"avg_time_to_close_issue":91356883.03333333,"avg_time_to_close_pull_request":20273467.0,"issues_closed_count":30,"pull_requests_closed_count":57,"pull_request_authors_count":38,"issue_authors_count":53,"avg_comments_per_issue":2.5,"avg_comments_per_pull_request":1.0240963855421688,"merged_pull_requests_count":32,"bot_issues_count":0,"bot_pull_requests_count":22,"past_year_issues_count":2,"past_year_pull_requests_count":5,"past_year_avg_time_to_close_issue":null,"past_year_avg_time_to_close_pull_request":827031.0,"past_year_issues_closed_count":0,"past_year_pull_requests_closed_count":1,"past_year_pull_request_authors_count":5,"past_year_issue_authors_count":2,"past_year_avg_comments_per_issue":0.0,"past_year_avg_comments_per_pull_request":0.4,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":1,"past_year_merged_pull_requests_count":0,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/hughsk%2Fflat/issues","maintainers":[{"login":"jonkoops","count":21,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jonkoops"}],"active_maintainers":[]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/flat/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/flat/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/flat/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/flat/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/flat/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/flat/codemeta","maintainers":[{"uuid":"timoxley","login":"timoxley","name":null,"email":"secoif@gmail.com","url":null,"packages_count":189,"html_url":"https://www.npmjs.com/~timoxley","role":null,"created_at":"2022-11-10T12:02:25.440Z","updated_at":"2022-11-10T12:02:25.440Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/timoxley/packages"},{"uuid":"hughsk","login":"hughsk","name":null,"email":"hughskennedy@gmail.com","url":null,"packages_count":680,"html_url":"https://www.npmjs.com/~hughsk","role":null,"created_at":"2022-11-10T12:02:25.437Z","updated_at":"2022-11-10T12:02:25.437Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/hughsk/packages"},{"uuid":"jkoops","login":"jkoops","name":null,"email":"jonkoops@gmail.com","url":null,"packages_count":20,"html_url":"https://www.npmjs.com/~jkoops","role":null,"created_at":"2023-09-18T12:57:41.930Z","updated_at":"2023-09-18T12:57:41.930Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/jkoops/packages"}]}