{"id":3640708,"name":"github.com/artifacthub/hub","ecosystem":"go","description":"","homepage":"https://github.com/artifacthub/hub","licenses":"Apache-2.0","normalized_licenses":["Apache-2.0"],"repository_url":"https://github.com/artifacthub/hub","keywords_array":[],"namespace":"github.com/artifacthub","versions_count":45,"first_release_published_at":"2020-06-03T14:19:07.000Z","latest_release_published_at":"2026-07-07T13:29:15.000Z","latest_release_number":"v1.23.0","latest_published_release_number":"v1.23.0","last_synced_at":"2026-10-29T15:24:55.935Z","created_at":"2022-04-11T08:59:22.614Z","updated_at":"2026-10-30T07:22:34.497Z","registry_url":"https://pkg.go.dev/github.com/artifacthub/hub","install_command":"go get github.com/artifacthub/hub","documentation_url":"https://pkg.go.dev/github.com/artifacthub/hub#section-documentation","metadata":null,"repo_metadata":{"id":37831285,"uuid":"233809604","full_name":"artifacthub/hub","owner":"artifacthub","description":"Find, install and publish Cloud Native packages","archived":false,"fork":false,"pushed_at":"2026-10-23T14:26:31.000Z","size":89404,"stargazers_count":2113,"open_issues_count":30,"forks_count":304,"subscribers_count":30,"default_branch":"master","last_synced_at":"2026-10-27T13:37:19.096Z","etag":null,"topics":["cloud-native","cncf","kubernetes","packages"],"latest_commit_sha":null,"homepage":"https://artifacthub.io","language":"TypeScript","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/artifacthub.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":"code-of-conduct.md","threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":"SECURITY-INSIGHTS.yml","accessibility":null,"support":null,"governance":"GOVERNANCE.md","roadmap":"ROADMAP.md","authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"claude":null,"gemini":null,"cursor":null,"copilot":null,"dco":null,"cla":null,"disclosure":null}},"created_at":"2020-01-14T09:53:51.000Z","updated_at":"2026-10-27T00:58:01.000Z","dependencies_parsed_at":"2026-10-19T09:27:09.619Z","dependency_job_id":null,"html_url":"https://github.com/artifacthub/hub","commit_stats":{"total_commits":1854,"total_committers":44,"mean_commits":42.13636363636363,"dds":"0.49568500539374327","last_synced_commit":"476a827a88633e169a9b40c67b3d8ec89a42afe1"},"previous_names":["cncf/hub"],"tags_count":45,"template":false,"template_full_name":null,"purl":"pkg:github/artifacthub/hub","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/artifacthub%2Fhub","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/artifacthub%2Fhub/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/artifacthub%2Fhub/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/artifacthub%2Fhub/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/artifacthub","download_url":"https://codeload.github.com/artifacthub/hub/tar.gz/refs/heads/master","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/artifacthub%2Fhub/sbom","scorecard":{"id":209529,"data":{"date":"2025-08-11","repo":{"name":"github.com/artifacthub/hub","commit":"b19bf5f7de92c3017d21cf07ad27b2af1482ee3f"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":7.4,"checks":[{"name":"Code-Review","score":10,"reason":"all changesets reviewed","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: SECURITY.md:1","Info: Found linked content: SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: SECURITY.md:1","Info: Found text in security policy: SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Maintained","score":10,"reason":"11 commit(s) and 27 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: Apache License 2.0: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"CII-Best-Practices","score":5,"reason":"badge detected: Passing","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Token-Permissions","score":10,"reason":"GitHub workflow tokens follow principle of least privilege","details":["Info: topLevel permissions set to 'read-all': .github/workflows/build-images.yml:8","Info: topLevel permissions set to 'read-all': .github/workflows/chart-testing.yml:9","Info: topLevel permissions set to 'read-all': .github/workflows/ci.yml:9","Info: topLevel permissions set to 'read-all': .github/workflows/codeql-analysis.yml:8","Info: topLevel permissions set to 'read-all': .github/workflows/fossa.yml:8","Info: topLevel permissions set to 'read-all': .github/workflows/release.yml:8","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Signed-Releases","score":8,"reason":"5 out of the last 5 releases have a total of 5 signed artifacts.","details":["Info: signed release artifact: ah_1.21.0_checksums.txt.sig: https://github.com/artifacthub/hub/releases/tag/v1.21.0","Info: signed release artifact: ah_1.20.0_checksums.txt.sig: https://github.com/artifacthub/hub/releases/tag/v1.20.0","Info: signed release artifact: ah_1.19.0_checksums.txt.sig: https://github.com/artifacthub/hub/releases/tag/v1.19.0","Info: signed release artifact: ah_1.18.0_checksums.txt.sig: https://github.com/artifacthub/hub/releases/tag/v1.18.0","Info: signed release artifact: ah_1.17.0_checksums.txt.sig: https://github.com/artifacthub/hub/releases/tag/v1.17.0","Warn: release artifact v1.21.0 does not have provenance: https://api.github.com/repos/artifacthub/hub/releases/214429237","Warn: release artifact v1.20.0 does not have provenance: https://api.github.com/repos/artifacthub/hub/releases/179499276","Warn: release artifact v1.19.0 does not have provenance: https://api.github.com/repos/artifacthub/hub/releases/162778604","Warn: release artifact v1.18.0 does not have provenance: https://api.github.com/repos/artifacthub/hub/releases/151722183","Warn: release artifact v1.17.0 does not have provenance: https://api.github.com/repos/artifacthub/hub/releases/137042920"],"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Packaging","score":10,"reason":"packaging workflow detected","details":["Info: Project packages its releases by way of GitHub Actions.: .github/workflows/build-images.yml:11"],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"SAST","score":7,"reason":"SAST tool detected but not run on all commits","details":["Info: SAST configuration detected: CodeQL","Warn: 0 commits out of 30 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Warn: third-party GitHubAction not pinned by hash: .github/workflows/build-images.yml:16: update your workflow using https://app.stepsecurity.io/secureworkflow/artifacthub/hub/build-images.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build-images.yml:18: update your workflow using https://app.stepsecurity.io/secureworkflow/artifacthub/hub/build-images.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/build-images.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/artifacthub/hub/build-images.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/build-images.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/artifacthub/hub/build-images.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/chart-testing.yml:16: update your workflow using https://app.stepsecurity.io/secureworkflow/artifacthub/hub/chart-testing.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/chart-testing.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/artifacthub/hub/chart-testing.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/chart-testing.yml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/artifacthub/hub/chart-testing.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/chart-testing.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/artifacthub/hub/chart-testing.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/chart-testing.yml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/artifacthub/hub/chart-testing.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:216: update your workflow using https://app.stepsecurity.io/secureworkflow/artifacthub/hub/ci.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:218: update your workflow using https://app.stepsecurity.io/secureworkflow/artifacthub/hub/ci.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:237: update your workflow using https://app.stepsecurity.io/secureworkflow/artifacthub/hub/ci.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:239: update your workflow using https://app.stepsecurity.io/secureworkflow/artifacthub/hub/ci.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:16: update your workflow using https://app.stepsecurity.io/secureworkflow/artifacthub/hub/ci.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:18: update your workflow using https://app.stepsecurity.io/secureworkflow/artifacthub/hub/ci.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/artifacthub/hub/ci.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:55: update your workflow using https://app.stepsecurity.io/secureworkflow/artifacthub/hub/ci.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:69: update your workflow using https://app.stepsecurity.io/secureworkflow/artifacthub/hub/ci.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:89: update your workflow using https://app.stepsecurity.io/secureworkflow/artifacthub/hub/ci.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:103: update your workflow using https://app.stepsecurity.io/secureworkflow/artifacthub/hub/ci.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:105: update your workflow using https://app.stepsecurity.io/secureworkflow/artifacthub/hub/ci.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:109: update your workflow using https://app.stepsecurity.io/secureworkflow/artifacthub/hub/ci.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:130: update your workflow using https://app.stepsecurity.io/secureworkflow/artifacthub/hub/ci.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:132: update your workflow using https://app.stepsecurity.io/secureworkflow/artifacthub/hub/ci.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:157: update your workflow using https://app.stepsecurity.io/secureworkflow/artifacthub/hub/ci.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:159: update your workflow using https://app.stepsecurity.io/secureworkflow/artifacthub/hub/ci.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:182: update your workflow using https://app.stepsecurity.io/secureworkflow/artifacthub/hub/ci.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:184: update your workflow using https://app.stepsecurity.io/secureworkflow/artifacthub/hub/ci.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:188: update your workflow using https://app.stepsecurity.io/secureworkflow/artifacthub/hub/ci.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/artifacthub/hub/ci.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/artifacthub/hub/ci.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/artifacthub/hub/codeql-analysis.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/artifacthub/hub/codeql-analysis.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/artifacthub/hub/codeql-analysis.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/artifacthub/hub/codeql-analysis.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fossa.yml:14: update your workflow using https://app.stepsecurity.io/secureworkflow/artifacthub/hub/fossa.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/fossa.yml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/artifacthub/hub/fossa.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/artifacthub/hub/release.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/artifacthub/hub/release.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:19: update your workflow using https://app.stepsecurity.io/secureworkflow/artifacthub/hub/release.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:23: update your workflow using https://app.stepsecurity.io/secureworkflow/artifacthub/hub/release.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/artifacthub/hub/release.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/artifacthub/hub/release.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/artifacthub/hub/release.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:42: update your workflow using https://app.stepsecurity.io/secureworkflow/artifacthub/hub/release.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:50: update your workflow using https://app.stepsecurity.io/secureworkflow/artifacthub/hub/release.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:52: update your workflow using https://app.stepsecurity.io/secureworkflow/artifacthub/hub/release.yml/master?enable=pin","Warn: containerImage not pinned by hash: .gitpod/Dockerfile:1: pin your Docker image by updating gitpod/workspace-postgres to gitpod/workspace-postgres@sha256:1bca95b222e78c45b5d389f97ec08053bc36a85aaa4e91404ad991fed7b3a725","Warn: containerImage not pinned by hash: cmd/ah/Dockerfile:2","Warn: containerImage not pinned by hash: cmd/ah/Dockerfile:13: pin your Docker image by updating alpine:3.22.0 to alpine:3.22.0@sha256:8a1f59ffb675680d47db6337b49d22281a139e9d709335b492be023728e11715","Warn: containerImage not pinned by hash: cmd/hub/Dockerfile:2","Warn: containerImage not pinned by hash: cmd/hub/Dockerfile:11","Warn: containerImage not pinned by hash: cmd/hub/Dockerfile:20","Warn: containerImage not pinned by hash: cmd/hub/Dockerfile:28","Warn: containerImage not pinned by hash: cmd/hub/Dockerfile:37: pin your Docker image by updating alpine:3.22.0 to alpine:3.22.0@sha256:8a1f59ffb675680d47db6337b49d22281a139e9d709335b492be023728e11715","Warn: containerImage not pinned by hash: cmd/scanner/Dockerfile:2","Warn: containerImage not pinned by hash: cmd/scanner/Dockerfile:11","Warn: containerImage not pinned by hash: cmd/scanner/Dockerfile:16: pin your Docker image by updating alpine:3.22.0 to alpine:3.22.0@sha256:8a1f59ffb675680d47db6337b49d22281a139e9d709335b492be023728e11715","Warn: containerImage not pinned by hash: cmd/tracker/Dockerfile:2","Warn: containerImage not pinned by hash: cmd/tracker/Dockerfile:16","Warn: containerImage not pinned by hash: cmd/tracker/Dockerfile:24: pin your Docker image by updating debian:bullseye-slim to debian:bullseye-slim@sha256:849d9d34d5fe0bf88b5fb3d09eb9684909ac4210488b52f4f7bbe683eedcb851","Warn: containerImage not pinned by hash: database/migrations/Dockerfile:2","Warn: containerImage not pinned by hash: database/migrations/Dockerfile:7: pin your Docker image by updating alpine:3.22.0 to alpine:3.22.0@sha256:8a1f59ffb675680d47db6337b49d22281a139e9d709335b492be023728e11715","Warn: containerImage not pinned by hash: database/tests/Dockerfile-db-tests:2","Warn: containerImage not pinned by hash: database/tests/Dockerfile-db-tests:7: pin your Docker image by updating alpine:3.22.0 to alpine:3.22.0@sha256:8a1f59ffb675680d47db6337b49d22281a139e9d709335b492be023728e11715","Warn: containerImage not pinned by hash: database/tests/Dockerfile-postgres:2","Warn: containerImage not pinned by hash: database/tests/Dockerfile-postgres:11: pin your Docker image by updating postgres:13 to postgres:13@sha256:b3f6d36123944bbf4e2cc0170c21438321335facd83150da9ec68cbc8d303edd","Warn: downloadThenRun not pinned by hash: cmd/scanner/Dockerfile:13","Warn: goCommand not pinned by hash: database/migrations/Dockerfile:4","Warn: goCommand not pinned by hash: database/tests/Dockerfile-db-tests:4","Info:   0 out of  32 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of  15 third-party GitHubAction dependencies pinned","Info:   0 out of   1 downloadThenRun dependencies pinned","Info:   0 out of   2 goCommand dependencies pinned","Info:   0 out of  20 containerImage dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Vulnerabilities","score":0,"reason":"18 existing vulnerabilities detected","details":["Warn: Project is vulnerable to: GHSA-q7pp-wcgr-pffx","Warn: Project is vulnerable to: GO-2025-3830 / GHSA-x4rx-4gw3-53p4","Warn: Project is vulnerable to: GO-2025-3829","Warn: Project is vulnerable to: GO-2023-2181","Warn: Project is vulnerable to: GO-2024-2718 / GHSA-88jx-383q-w4qc","Warn: Project is vulnerable to: GO-2024-2719 / GHSA-95pr-fxf5-86gv","Warn: Project is vulnerable to: GO-2023-1901","Warn: Project is vulnerable to: GHSA-xffm-g5w8-qvg7","Warn: Project is vulnerable to: GHSA-v6h2-p8h4-qcjw","Warn: Project is vulnerable to: GHSA-fjxv-7rqg-78g4","Warn: Project is vulnerable to: GHSA-rp65-9cf3-cjxr","Warn: Project is vulnerable to: GHSA-76c9-3jph-rj3q","Warn: Project is vulnerable to: GHSA-7fh5-64p2-3v2j","Warn: Project is vulnerable to: GHSA-x7hr-w5r2-h6wg","Warn: Project is vulnerable to: GHSA-p8p7-x288-28g6","Warn: Project is vulnerable to: GHSA-72xf-g2v4-qvf3","Warn: Project is vulnerable to: GHSA-4v9v-hfq4-rm2v","Warn: Project is vulnerable to: GHSA-9jgg-88mc-972h"],"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}}]},"last_synced_at":"2025-08-17T00:29:42.416Z","repository_id":37831285,"created_at":"2025-08-17T00:29:42.416Z","updated_at":"2025-08-17T00:29:42.416Z"},"funding_links":[],"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":346510206,"owners_count":38561613,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-10-03T21:59:58.778Z","status":"online","status_checked_at":"2026-10-27T02:00:05.503Z","response_time":59,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"artifacthub","name":"artifacthub","uuid":"62354979","kind":"organization","description":null,"email":null,"website":null,"location":null,"twitter":null,"company":null,"icon_url":"https://avatars.githubusercontent.com/u/62354979?v=4","repositories_count":2,"last_synced_at":"2023-03-05T22:03:37.564Z","metadata":{"has_sponsors_listing":false},"html_url":"https://github.com/artifacthub","funding_links":[],"total_stars":null,"followers":null,"following":null,"created_at":"2022-11-15T23:42:05.586Z","updated_at":"2023-03-05T22:03:37.577Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/artifacthub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/artifacthub/repositories"},"tags":[{"name":"v1.23.0","sha":"f90cbb4ee79a31eaa348dbb2868ffa9d2cbe15d8","kind":"commit","published_at":"2026-07-07T14:26:40.000Z","download_url":"https://codeload.github.com/artifacthub/hub/tar.gz/v1.23.0","html_url":"https://github.com/artifacthub/hub/releases/tag/v1.23.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/artifacthub/hub@v1.23.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/artifacthub%2Fhub/tags/v1.23.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/artifacthub%2Fhub/tags/v1.23.0/manifests","release_url":null},{"name":"v1.22.0","sha":"106fd45a2d87de7487c86312be592d22cab8b226","kind":"commit","published_at":"2025-10-21T09:57:39.000Z","download_url":"https://codeload.github.com/artifacthub/hub/tar.gz/v1.22.0","html_url":"https://github.com/artifacthub/hub/releases/tag/v1.22.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/artifacthub/hub@v1.22.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/artifacthub%2Fhub/tags/v1.22.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/artifacthub%2Fhub/tags/v1.22.0/manifests","release_url":null},{"name":"v1.21.0","sha":"005f91e189256aea8d7daf3ef23c445fef2715ae","kind":"commit","published_at":"2025-04-24T07:00:22.000Z","download_url":"https://codeload.github.com/artifacthub/hub/tar.gz/v1.21.0","html_url":"https://github.com/artifacthub/hub/releases/tag/v1.21.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/artifacthub/hub@v1.21.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/artifacthub%2Fhub/tags/v1.21.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/artifacthub%2Fhub/tags/v1.21.0/manifests","release_url":null},{"name":"v1.20.0","sha":"0f6086559de04810e338ed0e786720a594564db7","kind":"commit","published_at":"2024-10-11T08:59:02.000Z","download_url":"https://codeload.github.com/artifacthub/hub/tar.gz/v1.20.0","html_url":"https://github.com/artifacthub/hub/releases/tag/v1.20.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/artifacthub/hub@v1.20.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/artifacthub%2Fhub/tags/v1.20.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/artifacthub%2Fhub/tags/v1.20.0/manifests","release_url":null},{"name":"v1.19.0","sha":"58eea18c57d33eafd5e0c64bee3710249353bafd","kind":"commit","published_at":"2024-06-27T12:49:15.000Z","download_url":"https://codeload.github.com/artifacthub/hub/tar.gz/v1.19.0","html_url":"https://github.com/artifacthub/hub/releases/tag/v1.19.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/artifacthub/hub@v1.19.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/artifacthub%2Fhub/tags/v1.19.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/artifacthub%2Fhub/tags/v1.19.0/manifests","release_url":null},{"name":"v1.18.0","sha":"75c1a4939403f81b0b963a2470c43f9fca685917","kind":"commit","published_at":"2024-04-18T10:59:21.000Z","download_url":"https://codeload.github.com/artifacthub/hub/tar.gz/v1.18.0","html_url":"https://github.com/artifacthub/hub/releases/tag/v1.18.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/artifacthub/hub@v1.18.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/artifacthub%2Fhub/tags/v1.18.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/artifacthub%2Fhub/tags/v1.18.0/manifests","release_url":null},{"name":"v1.17.0","sha":"a7a9443c56696dc4ac7d60c536e2e36612bd55e8","kind":"commit","published_at":"2024-01-15T10:12:38.000Z","download_url":"https://codeload.github.com/artifacthub/hub/tar.gz/v1.17.0","html_url":"https://github.com/artifacthub/hub/releases/tag/v1.17.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/artifacthub/hub@v1.17.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/artifacthub%2Fhub/tags/v1.17.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/artifacthub%2Fhub/tags/v1.17.0/manifests","release_url":null},{"name":"v1.16.0","sha":"14dffa84b9974c787ecd550e570fe7807946e4dc","kind":"commit","published_at":"2023-09-13T16:12:43.000Z","download_url":"https://codeload.github.com/artifacthub/hub/tar.gz/v1.16.0","html_url":"https://github.com/artifacthub/hub/releases/tag/v1.16.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/artifacthub/hub@v1.16.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/artifacthub%2Fhub/tags/v1.16.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/artifacthub%2Fhub/tags/v1.16.0/manifests","release_url":null},{"name":"v1.15.0","sha":"053763fcbf1b9ceca27e1b8e42bd07e2b44fc32b","kind":"commit","published_at":"2023-08-24T10:44:35.000Z","download_url":"https://codeload.github.com/artifacthub/hub/tar.gz/v1.15.0","html_url":"https://github.com/artifacthub/hub/releases/tag/v1.15.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/artifacthub/hub@v1.15.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/artifacthub%2Fhub/tags/v1.15.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/artifacthub%2Fhub/tags/v1.15.0/manifests","release_url":null},{"name":"v1.14.0","sha":"9f556974c1c4999925546ee187cd8cf7b7abf993","kind":"commit","published_at":"2023-05-01T12:19:42.000Z","download_url":"https://codeload.github.com/artifacthub/hub/tar.gz/v1.14.0","html_url":"https://github.com/artifacthub/hub/releases/tag/v1.14.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/artifacthub/hub@v1.14.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/artifacthub%2Fhub/tags/v1.14.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/artifacthub%2Fhub/tags/v1.14.0/manifests","release_url":null},{"name":"v1.13.0","sha":"d4cddcf6d856f61e94d783ae8c46a183e45340ce","kind":"commit","published_at":"2023-03-01T15:16:12.000Z","download_url":"https://codeload.github.com/artifacthub/hub/tar.gz/v1.13.0","html_url":"https://github.com/artifacthub/hub/releases/tag/v1.13.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/artifacthub/hub@v1.13.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/artifacthub%2Fhub/tags/v1.13.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/artifacthub%2Fhub/tags/v1.13.0/manifests","release_url":null},{"name":"v1.12.0","sha":"bc512aa7db4ad9b72b5bf6d2ca73649ff0c1b70f","kind":"commit","published_at":"2023-01-27T17:20:09.000Z","download_url":"https://codeload.github.com/artifacthub/hub/tar.gz/v1.12.0","html_url":"https://github.com/artifacthub/hub/releases/tag/v1.12.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/artifacthub/hub@v1.12.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/artifacthub%2Fhub/tags/v1.12.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/artifacthub%2Fhub/tags/v1.12.0/manifests","release_url":null},{"name":"v1.11.0","sha":"2ccd5495b3ffe0bc487267ea5aab7399bd55c605","kind":"commit","published_at":"2022-12-05T09:10:12.000Z","download_url":"https://codeload.github.com/artifacthub/hub/tar.gz/v1.11.0","html_url":"https://github.com/artifacthub/hub/releases/tag/v1.11.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/artifacthub/hub@v1.11.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/artifacthub%2Fhub/tags/v1.11.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/artifacthub%2Fhub/tags/v1.11.0/manifests","release_url":null},{"name":"v1.10.0","sha":"e6d7cb44b96c1cb094efb155e43738937510d13b","kind":"commit","published_at":"2022-10-05T10:31:13.000Z","download_url":"https://codeload.github.com/artifacthub/hub/tar.gz/v1.10.0","html_url":"https://github.com/artifacthub/hub/releases/tag/v1.10.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/artifacthub/hub@v1.10.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/artifacthub%2Fhub/tags/v1.10.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/artifacthub%2Fhub/tags/v1.10.0/manifests","release_url":null},{"name":"v1.9.0","sha":"1b1997ffe0eb3d0ceb9afe8181b9d9736111702f","kind":"commit","published_at":"2022-07-26T17:49:38.000Z","download_url":"https://codeload.github.com/artifacthub/hub/tar.gz/v1.9.0","html_url":"https://github.com/artifacthub/hub/releases/tag/v1.9.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/artifacthub/hub@v1.9.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/artifacthub%2Fhub/tags/v1.9.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/artifacthub%2Fhub/tags/v1.9.0/manifests","release_url":null},{"name":"v1.8.0","sha":"2f26dc6d49346fc0be015193fde53eb9e0b3620d","kind":"commit","published_at":"2022-05-31T08:51:44.000Z","download_url":"https://codeload.github.com/artifacthub/hub/tar.gz/v1.8.0","html_url":"https://github.com/artifacthub/hub/releases/tag/v1.8.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/artifacthub/hub@v1.8.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/artifacthub%2Fhub/tags/v1.8.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/artifacthub%2Fhub/tags/v1.8.0/manifests","release_url":null},{"name":"v1.7.0","sha":"442e6c8da397cc581f5a3a645972862af16c72b6","kind":"commit","published_at":"2022-05-10T11:15:59.000Z","download_url":"https://codeload.github.com/artifacthub/hub/tar.gz/v1.7.0","html_url":"https://github.com/artifacthub/hub/releases/tag/v1.7.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/artifacthub/hub@v1.7.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/artifacthub%2Fhub/tags/v1.7.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/artifacthub%2Fhub/tags/v1.7.0/manifests","release_url":null},{"name":"v1.6.0","sha":"c2a6e0866ab13422221f2f458026b4506acd6b53","kind":"commit","published_at":"2022-02-08T15:38:15.000Z","download_url":"https://codeload.github.com/artifacthub/hub/tar.gz/v1.6.0","html_url":"https://github.com/artifacthub/hub/releases/tag/v1.6.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/artifacthub/hub@v1.6.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/artifacthub%2Fhub/tags/v1.6.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/artifacthub%2Fhub/tags/v1.6.0/manifests","release_url":null},{"name":"v1.5.0","sha":"0c0e789ab6f4e74dfa59a4e7c1ece4788881e279","kind":"commit","published_at":"2021-12-15T14:43:18.000Z","download_url":"https://codeload.github.com/artifacthub/hub/tar.gz/v1.5.0","html_url":"https://github.com/artifacthub/hub/releases/tag/v1.5.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/artifacthub/hub@v1.5.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/artifacthub%2Fhub/tags/v1.5.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/artifacthub%2Fhub/tags/v1.5.0/manifests","release_url":null},{"name":"v1.4.0","sha":"e6d0aaacd1de6f0bd126800f293a7c3fc39d591a","kind":"commit","published_at":"2021-11-02T13:13:41.000Z","download_url":"https://codeload.github.com/artifacthub/hub/tar.gz/v1.4.0","html_url":"https://github.com/artifacthub/hub/releases/tag/v1.4.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/artifacthub/hub@v1.4.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/artifacthub%2Fhub/tags/v1.4.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/artifacthub%2Fhub/tags/v1.4.0/manifests","release_url":null},{"name":"v1.3.0","sha":"80eec099e4bfa73747514e1882ddaaca4b1c998a","kind":"commit","published_at":"2021-10-06T15:37:44.000Z","download_url":"https://codeload.github.com/artifacthub/hub/tar.gz/v1.3.0","html_url":"https://github.com/artifacthub/hub/releases/tag/v1.3.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/artifacthub/hub@v1.3.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/artifacthub%2Fhub/tags/v1.3.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/artifacthub%2Fhub/tags/v1.3.0/manifests","release_url":null},{"name":"v1.2.0","sha":"3f1c1f66ed22719b9b5aca28e713bb2afc859593","kind":"commit","published_at":"2021-09-10T07:30:32.000Z","download_url":"https://codeload.github.com/artifacthub/hub/tar.gz/v1.2.0","html_url":"https://github.com/artifacthub/hub/releases/tag/v1.2.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/artifacthub/hub@v1.2.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/artifacthub%2Fhub/tags/v1.2.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/artifacthub%2Fhub/tags/v1.2.0/manifests","release_url":null},{"name":"v1.1.1","sha":"12e6c26ecfd1386a9c3d6c5ff64130f4f9afc9fb","kind":"commit","published_at":"2021-08-18T08:01:41.000Z","download_url":"https://codeload.github.com/artifacthub/hub/tar.gz/v1.1.1","html_url":"https://github.com/artifacthub/hub/releases/tag/v1.1.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/artifacthub/hub@v1.1.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/artifacthub%2Fhub/tags/v1.1.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/artifacthub%2Fhub/tags/v1.1.1/manifests","release_url":null},{"name":"v1.1.0","sha":"5eb83eda0cb0c78a3c012c56bef6d30bd66992e0","kind":"commit","published_at":"2021-08-12T10:49:57.000Z","download_url":"https://codeload.github.com/artifacthub/hub/tar.gz/v1.1.0","html_url":"https://github.com/artifacthub/hub/releases/tag/v1.1.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/artifacthub/hub@v1.1.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/artifacthub%2Fhub/tags/v1.1.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/artifacthub%2Fhub/tags/v1.1.0/manifests","release_url":null},{"name":"v1.0.0","sha":"449b6bd377a54b3641eddeb51aae44425f9e8abd","kind":"commit","published_at":"2021-06-22T11:02:36.000Z","download_url":"https://codeload.github.com/artifacthub/hub/tar.gz/v1.0.0","html_url":"https://github.com/artifacthub/hub/releases/tag/v1.0.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/artifacthub/hub@v1.0.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/artifacthub%2Fhub/tags/v1.0.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/artifacthub%2Fhub/tags/v1.0.0/manifests","release_url":null},{"name":"v0.20.0","sha":"95720b74b350595a7906714a04641d6060e81a0b","kind":"commit","published_at":"2021-06-02T11:39:43.000Z","download_url":"https://codeload.github.com/artifacthub/hub/tar.gz/v0.20.0","html_url":"https://github.com/artifacthub/hub/releases/tag/v0.20.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/artifacthub/hub@v0.20.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/artifacthub%2Fhub/tags/v0.20.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/artifacthub%2Fhub/tags/v0.20.0/manifests","release_url":null},{"name":"v0.19.0","sha":"20c6540ae16feb7035ba0429fb45b0f0c8a105d4","kind":"commit","published_at":"2021-04-26T10:31:42.000Z","download_url":"https://codeload.github.com/artifacthub/hub/tar.gz/v0.19.0","html_url":"https://github.com/artifacthub/hub/releases/tag/v0.19.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/artifacthub/hub@v0.19.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/artifacthub%2Fhub/tags/v0.19.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/artifacthub%2Fhub/tags/v0.19.0/manifests","release_url":null},{"name":"v0.18.0","sha":"783c8aa50d8c84bd3448a13c15442e6a226a442e","kind":"commit","published_at":"2021-03-30T10:09:29.000Z","download_url":"https://codeload.github.com/artifacthub/hub/tar.gz/v0.18.0","html_url":"https://github.com/artifacthub/hub/releases/tag/v0.18.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/artifacthub/hub@v0.18.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/artifacthub%2Fhub/tags/v0.18.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/artifacthub%2Fhub/tags/v0.18.0/manifests","release_url":null},{"name":"v0.17.0","sha":"729bfd5d938862efbcaa3af1d51484c36e789f29","kind":"commit","published_at":"2021-03-15T17:28:46.000Z","download_url":"https://codeload.github.com/artifacthub/hub/tar.gz/v0.17.0","html_url":"https://github.com/artifacthub/hub/releases/tag/v0.17.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/artifacthub/hub@v0.17.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/artifacthub%2Fhub/tags/v0.17.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/artifacthub%2Fhub/tags/v0.17.0/manifests","release_url":null},{"name":"v0.16.0","sha":"71c15b2585e6b0cabf0fdb7b0a61662dd2492c26","kind":"commit","published_at":"2021-02-26T11:21:04.000Z","download_url":"https://codeload.github.com/artifacthub/hub/tar.gz/v0.16.0","html_url":"https://github.com/artifacthub/hub/releases/tag/v0.16.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/artifacthub/hub@v0.16.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/artifacthub%2Fhub/tags/v0.16.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/artifacthub%2Fhub/tags/v0.16.0/manifests","release_url":null},{"name":"v0.15.0","sha":"716767afdb1b21e091a89ed3ac776faa0dfa88a9","kind":"commit","published_at":"2021-02-12T07:41:15.000Z","download_url":"https://codeload.github.com/artifacthub/hub/tar.gz/v0.15.0","html_url":"https://github.com/artifacthub/hub/releases/tag/v0.15.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/artifacthub/hub@v0.15.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/artifacthub%2Fhub/tags/v0.15.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/artifacthub%2Fhub/tags/v0.15.0/manifests","release_url":null},{"name":"v0.14.0","sha":"cac138fefafe87793788ef704fd98e142bc38996","kind":"commit","published_at":"2021-01-28T15:47:05.000Z","download_url":"https://codeload.github.com/artifacthub/hub/tar.gz/v0.14.0","html_url":"https://github.com/artifacthub/hub/releases/tag/v0.14.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/artifacthub/hub@v0.14.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/artifacthub%2Fhub/tags/v0.14.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/artifacthub%2Fhub/tags/v0.14.0/manifests","release_url":null},{"name":"v0.13.0","sha":"ab428ae83a2ba703226fcb98bec1e645a4e6b323","kind":"commit","published_at":"2021-01-11T13:31:57.000Z","download_url":"https://codeload.github.com/artifacthub/hub/tar.gz/v0.13.0","html_url":"https://github.com/artifacthub/hub/releases/tag/v0.13.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/artifacthub/hub@v0.13.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/artifacthub%2Fhub/tags/v0.13.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/artifacthub%2Fhub/tags/v0.13.0/manifests","release_url":null},{"name":"v0.12.0","sha":"b4851dfb8464c788c8e2c1ca0c7bbfcae427420a","kind":"commit","published_at":"2020-12-18T08:03:13.000Z","download_url":"https://codeload.github.com/artifacthub/hub/tar.gz/v0.12.0","html_url":"https://github.com/artifacthub/hub/releases/tag/v0.12.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/artifacthub/hub@v0.12.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/artifacthub%2Fhub/tags/v0.12.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/artifacthub%2Fhub/tags/v0.12.0/manifests","release_url":null},{"name":"v0.11.0","sha":"4db1973c5a0f9b3106dee1f234cfa3dd2e9602a4","kind":"commit","published_at":"2020-12-03T14:52:16.000Z","download_url":"https://codeload.github.com/artifacthub/hub/tar.gz/v0.11.0","html_url":"https://github.com/artifacthub/hub/releases/tag/v0.11.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/artifacthub/hub@v0.11.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/artifacthub%2Fhub/tags/v0.11.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/artifacthub%2Fhub/tags/v0.11.0/manifests","release_url":null},{"name":"v0.10.0","sha":"aec721b18c4822a1ae482c7d647a571841707ecc","kind":"commit","published_at":"2020-11-19T07:11:25.000Z","download_url":"https://codeload.github.com/artifacthub/hub/tar.gz/v0.10.0","html_url":"https://github.com/artifacthub/hub/releases/tag/v0.10.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/artifacthub/hub@v0.10.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/artifacthub%2Fhub/tags/v0.10.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/artifacthub%2Fhub/tags/v0.10.0/manifests","release_url":null},{"name":"v0.9.0","sha":"7ade5acc762d9602b751c6921f6513608afaad1e","kind":"commit","published_at":"2020-11-02T08:49:49.000Z","download_url":"https://codeload.github.com/artifacthub/hub/tar.gz/v0.9.0","html_url":"https://github.com/artifacthub/hub/releases/tag/v0.9.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/artifacthub/hub@v0.9.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/artifacthub%2Fhub/tags/v0.9.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/artifacthub%2Fhub/tags/v0.9.0/manifests","release_url":null},{"name":"v0.8.0","sha":"1eb36aaeec50d594dd176718a484a8c14fed5874","kind":"commit","published_at":"2020-10-23T07:16:32.000Z","download_url":"https://codeload.github.com/artifacthub/hub/tar.gz/v0.8.0","html_url":"https://github.com/artifacthub/hub/releases/tag/v0.8.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/artifacthub/hub@v0.8.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/artifacthub%2Fhub/tags/v0.8.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/artifacthub%2Fhub/tags/v0.8.0/manifests","release_url":null},{"name":"v0.7.0","sha":"d2919c736bef1e59cc5ac9a4f0e54eb9d4d275cf","kind":"commit","published_at":"2020-10-14T12:25:49.000Z","download_url":"https://codeload.github.com/artifacthub/hub/tar.gz/v0.7.0","html_url":"https://github.com/artifacthub/hub/releases/tag/v0.7.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/artifacthub/hub@v0.7.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/artifacthub%2Fhub/tags/v0.7.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/artifacthub%2Fhub/tags/v0.7.0/manifests","release_url":null},{"name":"v0.6.0","sha":"65c003d67d8bc1de50c57ca17ecda46a388256c6","kind":"commit","published_at":"2020-09-23T06:18:25.000Z","download_url":"https://codeload.github.com/artifacthub/hub/tar.gz/v0.6.0","html_url":"https://github.com/artifacthub/hub/releases/tag/v0.6.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/artifacthub/hub@v0.6.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/artifacthub%2Fhub/tags/v0.6.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/artifacthub%2Fhub/tags/v0.6.0/manifests","release_url":null},{"name":"v0.5.0","sha":"952c6fdf5881af1ed43b372afb7a4378663792ba","kind":"commit","published_at":"2020-09-03T09:51:14.000Z","download_url":"https://codeload.github.com/artifacthub/hub/tar.gz/v0.5.0","html_url":"https://github.com/artifacthub/hub/releases/tag/v0.5.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/artifacthub/hub@v0.5.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/artifacthub%2Fhub/tags/v0.5.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/artifacthub%2Fhub/tags/v0.5.0/manifests","release_url":null},{"name":"v0.4.0","sha":"0327262de803c0f0df848143c81a1319f6816632","kind":"commit","published_at":"2020-08-06T14:50:54.000Z","download_url":"https://codeload.github.com/artifacthub/hub/tar.gz/v0.4.0","html_url":"https://github.com/artifacthub/hub/releases/tag/v0.4.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/artifacthub/hub@v0.4.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/artifacthub%2Fhub/tags/v0.4.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/artifacthub%2Fhub/tags/v0.4.0/manifests","release_url":null},{"name":"v0.3.0","sha":"00f7d0c1de105cc71722815ba2bff6b18e3114d8","kind":"commit","published_at":"2020-07-03T23:26:30.000Z","download_url":"https://codeload.github.com/artifacthub/hub/tar.gz/v0.3.0","html_url":"https://github.com/artifacthub/hub/releases/tag/v0.3.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/artifacthub/hub@v0.3.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/artifacthub%2Fhub/tags/v0.3.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/artifacthub%2Fhub/tags/v0.3.0/manifests","release_url":null},{"name":"v0.2.0","sha":"c985b464509268478368488c7a43cc03845e0041","kind":"commit","published_at":"2020-06-12T14:53:04.000Z","download_url":"https://codeload.github.com/artifacthub/hub/tar.gz/v0.2.0","html_url":"https://github.com/artifacthub/hub/releases/tag/v0.2.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/artifacthub/hub@v0.2.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/artifacthub%2Fhub/tags/v0.2.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/artifacthub%2Fhub/tags/v0.2.0/manifests","release_url":null},{"name":"v0.1.0","sha":"c7c66dc2c8c325d3711d2aa1cc07fc7ff17db6de","kind":"commit","published_at":"2020-06-03T14:19:07.000Z","download_url":"https://codeload.github.com/artifacthub/hub/tar.gz/v0.1.0","html_url":"https://github.com/artifacthub/hub/releases/tag/v0.1.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/artifacthub/hub@v0.1.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/artifacthub%2Fhub/tags/v0.1.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/artifacthub%2Fhub/tags/v0.1.0/manifests","release_url":null}]},"repo_metadata_updated_at":"2026-10-27T14:56:25.128Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":9.345852080216646,"dependent_packages_count":6.999148183520997,"stargazers_count":1.2310375438954837,"forks_count":1.3914124778207864,"average":4.7418625713634786},"purl":"pkg:golang/github.com/artifacthub/hub","advisories":[{"uuid":"GSA_kwCzR0hTQS1obXE0LWMycjQtNXE4aM4AA2kJ","url":"https://github.com/advisories/GHSA-hmq4-c2r4-5q8h","title":"Artifact Hub arbitrary file read vulnerability","description":"### Impact\n\nDuring a security audit of Artifact Hub's code base, a security researcher at [OffSec](https://www.offsec.com/) identified a bug in which by using symbolic links in certain kinds of repositories loaded into Artifact Hub, it was possible to read internal files.\n\nArtifact Hub indexes content from a variety of sources, including git repositories. When processing git based repositories, Artifact Hub clones the repository and, depending on the artifact kind, reads some files from it. During this process, in some cases, no validation was done to check if the file was a symbolic link. This made possible to read arbitrary files in the system, potentially leaking sensitive information.\n\n### Patches\n\nThis issue has been resolved in version [1.16.0](https://artifacthub.io/packages/helm/artifact-hub/artifact-hub?modal=changelog\u0026version=1.16.0).","origin":"UNSPECIFIED","severity":"HIGH","published_at":"2023-10-19T17:06:42.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":7.5,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","references":["https://github.com/artifacthub/hub/security/advisories/GHSA-hmq4-c2r4-5q8h","https://artifacthub.io/packages/helm/artifact-hub/artifact-hub?modal=changelog\u0026version=1.16.0","https://nvd.nist.gov/vuln/detail/CVE-2023-45823","https://github.com/advisories/GHSA-hmq4-c2r4-5q8h"],"source_kind":"github","identifiers":["GHSA-hmq4-c2r4-5q8h","CVE-2023-45823"],"repository_url":"https://github.com/artifacthub/hub","blast_radius":1.0,"created_at":"2023-10-19T18:05:57.670Z","updated_at":"2026-10-30T06:13:04.319Z","epss_percentage":0.00754,"epss_percentile":0.54539,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS1obXE0LWMycjQtNXE4aM4AA2kJ","html_url":"https://advisories.ecosyste.ms/advisories/GSA_kwCzR0hTQS1obXE0LWMycjQtNXE4aM4AA2kJ","packages":[{"ecosystem":"go","package_name":"github.com/artifacthub/hub","versions":[{"first_patched_version":"1.16.0","vulnerable_version_range":"\u003c 1.16.0"}],"purl":"pkg:go/github.com%2Fartifacthub%2Fhub","statistics":{"dependent_packages_count":0,"dependent_repos_count":0,"downloads":null,"downloads_period":null},"affected_versions":["v0.1.0","v0.2.0","v0.3.0","v0.4.0","v0.5.0","v0.6.0","v0.7.0","v0.8.0","v0.9.0","v0.10.0","v0.11.0","v0.12.0","v0.13.0","v0.14.0","v0.15.0","v0.16.0","v0.17.0","v0.18.0","v0.19.0","v0.20.0","v1.0.0","v1.1.0","v1.1.1","v1.2.0","v1.3.0","v1.4.0","v1.5.0","v1.6.0","v1.7.0","v1.8.0","v1.9.0","v1.10.0","v1.11.0","v1.12.0","v1.13.0","v1.14.0","v1.15.0"],"unaffected_versions":["v1.16.0","v1.17.0","v1.18.0","v1.19.0","v1.20.0","v1.21.0","v1.22.0","v1.23.0"]}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS1obXE0LWMycjQtNXE4aM4AA2kJ/related_packages","related_advisories":[]},{"uuid":"GSA_kwCzR0hTQS05cGM4LW00dnAtZ2d2Zs4AA2kI","url":"https://github.com/advisories/GHSA-9pc8-m4vp-ggvf","title":"Artifact Hub allows unsafe rego built-in","description":"### Impact\n\nDuring a security audit of Artifact Hub's code base, a security researcher at [OffSec](https://www.offsec.com/) identified a bug in which a default unsafe rego built-in was allowed to be used when defining authorization policies.\n\nArtifact Hub includes a fine-grained authorization mechanism that allows organizations to define what actions can be performed by their members. It is based on customizable authorization policies that are enforced by the [Open Policy Agent](https://www.openpolicyagent.org/). Policies are written using [rego](https://www.openpolicyagent.org/docs/latest/#rego) and their data files are expected to be json documents. By default, `rego` allows policies to make HTTP requests, which can be abused to send requests to internal resources and forward the responses to an external entity. In the context of Artifact Hub, this capability should have been disabled.\n\n### Patches\n\nThis issue has been resolved in version [1.16.0](https://artifacthub.io/packages/helm/artifact-hub/artifact-hub?modal=changelog\u0026version=1.16.0).","origin":"UNSPECIFIED","severity":"LOW","published_at":"2023-10-19T17:05:16.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":3.7,"cvss_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","references":["https://github.com/artifacthub/hub/security/advisories/GHSA-9pc8-m4vp-ggvf","https://artifacthub.io/packages/helm/artifact-hub/artifact-hub?modal=changelog\u0026version=1.16.0","https://nvd.nist.gov/vuln/detail/CVE-2023-45822","https://www.openpolicyagent.org/","https://www.openpolicyagent.org/docs/latest/#rego","https://github.com/advisories/GHSA-9pc8-m4vp-ggvf"],"source_kind":"github","identifiers":["GHSA-9pc8-m4vp-ggvf","CVE-2023-45822"],"repository_url":"https://github.com/artifacthub/hub","blast_radius":1.0,"created_at":"2023-10-19T18:05:57.684Z","updated_at":"2026-10-30T06:13:04.319Z","epss_percentage":0.0064,"epss_percentile":0.50518,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS05cGM4LW00dnAtZ2d2Zs4AA2kI","html_url":"https://advisories.ecosyste.ms/advisories/GSA_kwCzR0hTQS05cGM4LW00dnAtZ2d2Zs4AA2kI","packages":[{"ecosystem":"go","package_name":"github.com/artifacthub/hub","versions":[{"first_patched_version":"1.16.0","vulnerable_version_range":"\u003c 1.16.0"}],"purl":"pkg:go/github.com%2Fartifacthub%2Fhub","statistics":{"dependent_packages_count":0,"dependent_repos_count":0,"downloads":null,"downloads_period":null},"affected_versions":["v0.1.0","v0.2.0","v0.3.0","v0.4.0","v0.5.0","v0.6.0","v0.7.0","v0.8.0","v0.9.0","v0.10.0","v0.11.0","v0.12.0","v0.13.0","v0.14.0","v0.15.0","v0.16.0","v0.17.0","v0.18.0","v0.19.0","v0.20.0","v1.0.0","v1.1.0","v1.1.1","v1.2.0","v1.3.0","v1.4.0","v1.5.0","v1.6.0","v1.7.0","v1.8.0","v1.9.0","v1.10.0","v1.11.0","v1.12.0","v1.13.0","v1.14.0","v1.15.0"],"unaffected_versions":["v1.16.0","v1.17.0","v1.18.0","v1.19.0","v1.20.0","v1.21.0","v1.22.0","v1.23.0"]}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS05cGM4LW00dnAtZ2d2Zs4AA2kI/related_packages","related_advisories":[]},{"uuid":"GSA_kwCzR0hTQS1nNnBxLXg1MzktN3c0as4AA2kH","url":"https://github.com/advisories/GHSA-g6pq-x539-7w4j","title":"Artifact Hub has Incorrect Docker Hub registry check","description":"### Impact\n\nDuring a security audit of Artifact Hub's code base, a security researcher at [OffSec](https://www.offsec.com/) identified a bug in which the `registryIsDockerHub` function was only checking that the registry domain had the `docker.io` suffix.\n\nArtifact Hub allows providing some Docker credentials that are used to increase the rate limit applied when interacting with the Docker Hub registry API to read publicly available content. Due to the incorrect check described above, it'd be possible to hijack those credentials by purchasing a domain which ends with `docker.io` and deploying a fake OCI registry on it.\n\n\u003chttps://artifacthub.io/\u003e uses some credentials that only have permissions to read public content available in the Docker Hub. However, even though credentials for private repositories (disabled on `artifacthub.io`) are handled in a different way, other Artifact Hub deployments could have been using them for a different purpose.\n\n### Patches\n\nThis issue has been resolved in version [1.16.0](https://artifacthub.io/packages/helm/artifact-hub/artifact-hub?modal=changelog\u0026version=1.16.0).","origin":"UNSPECIFIED","severity":"MODERATE","published_at":"2023-10-19T17:04:50.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":5.4,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L","references":["https://github.com/artifacthub/hub/security/advisories/GHSA-g6pq-x539-7w4j","https://artifacthub.io/packages/helm/artifact-hub/artifact-hub?modal=changelog\u0026version=1.16.0","https://nvd.nist.gov/vuln/detail/CVE-2023-45821","https://github.com/advisories/GHSA-g6pq-x539-7w4j"],"source_kind":"github","identifiers":["GHSA-g6pq-x539-7w4j","CVE-2023-45821"],"repository_url":"https://github.com/artifacthub/hub","blast_radius":1.0,"created_at":"2023-10-19T18:05:57.698Z","updated_at":"2026-10-30T06:13:04.319Z","epss_percentage":0.00243,"epss_percentile":0.15515,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS1nNnBxLXg1MzktN3c0as4AA2kH","html_url":"https://advisories.ecosyste.ms/advisories/GSA_kwCzR0hTQS1nNnBxLXg1MzktN3c0as4AA2kH","packages":[{"ecosystem":"go","package_name":"github.com/artifacthub/hub","versions":[{"first_patched_version":"1.16.0","vulnerable_version_range":"\u003c 1.16.0"}],"purl":"pkg:go/github.com%2Fartifacthub%2Fhub","statistics":{"dependent_packages_count":0,"dependent_repos_count":0,"downloads":null,"downloads_period":null},"affected_versions":["v0.1.0","v0.2.0","v0.3.0","v0.4.0","v0.5.0","v0.6.0","v0.7.0","v0.8.0","v0.9.0","v0.10.0","v0.11.0","v0.12.0","v0.13.0","v0.14.0","v0.15.0","v0.16.0","v0.17.0","v0.18.0","v0.19.0","v0.20.0","v1.0.0","v1.1.0","v1.1.1","v1.2.0","v1.3.0","v1.4.0","v1.5.0","v1.6.0","v1.7.0","v1.8.0","v1.9.0","v1.10.0","v1.11.0","v1.12.0","v1.13.0","v1.14.0","v1.15.0"],"unaffected_versions":["v1.16.0","v1.17.0","v1.18.0","v1.19.0","v1.20.0","v1.21.0","v1.22.0","v1.23.0"]}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS1nNnBxLXg1MzktN3c0as4AA2kH/related_packages","related_advisories":[]}],"docker_usage_url":"https://docker.ecosyste.ms/usage/go/github.com/artifacthub/hub","docker_dependents_count":2,"docker_downloads_count":14,"usage_url":"https://repos.ecosyste.ms/usage/go/github.com/artifacthub/hub","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/go/github.com/artifacthub/hub/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-10-23T11:00:23.963Z","issues_count":333,"pull_requests_count":924,"avg_time_to_close_issue":633607.2379182156,"avg_time_to_close_pull_request":607257.9568062827,"issues_closed_count":269,"pull_requests_closed_count":764,"pull_request_authors_count":33,"issue_authors_count":262,"avg_comments_per_issue":1.5135135135135136,"avg_comments_per_pull_request":0.6201298701298701,"merged_pull_requests_count":188,"bot_issues_count":1,"bot_pull_requests_count":721,"past_year_issues_count":57,"past_year_pull_requests_count":8,"past_year_avg_time_to_close_issue":687330.1777777778,"past_year_avg_time_to_close_pull_request":47395.125,"past_year_issues_closed_count":45,"past_year_pull_requests_closed_count":8,"past_year_pull_request_authors_count":5,"past_year_issue_authors_count":50,"past_year_avg_comments_per_issue":1.3508771929824561,"past_year_avg_comments_per_pull_request":0.25,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":0,"past_year_merged_pull_requests_count":7,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/artifacthub%2Fhub/issues","maintainers":[{"login":"tegioz","count":107,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/tegioz"},{"login":"cynthia-sg","count":63,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/cynthia-sg"},{"login":"mattfarina","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mattfarina"},{"login":"mabartos","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mabartos"}],"active_maintainers":[{"login":"tegioz","count":4,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/tegioz"},{"login":"cynthia-sg","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/cynthia-sg"},{"login":"mattfarina","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mattfarina"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fartifacthub%2Fhub/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fartifacthub%2Fhub/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fartifacthub%2Fhub/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fartifacthub%2Fhub/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fartifacthub%2Fhub/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fartifacthub%2Fhub/codemeta","maintainers":[]}