{"id":3498144,"name":"github.com/dexidp/dex","ecosystem":"go","description":"","homepage":"https://github.com/dexidp/dex","licenses":"Apache-2.0","normalized_licenses":["Apache-2.0"],"repository_url":"https://github.com/dexidp/dex","keywords_array":[],"namespace":"github.com/dexidp","versions_count":45,"first_release_published_at":"2015-09-03T16:57:43.000Z","latest_release_published_at":"2018-11-07T05:27:28.000Z","latest_release_number":"v2.13.0+incompatible","latest_published_release_number":null,"last_synced_at":"2026-10-20T09:51:47.354Z","created_at":"2022-04-10T19:49:27.167Z","updated_at":"2026-10-21T02:16:45.539Z","registry_url":"https://pkg.go.dev/github.com/dexidp/dex","install_command":"go get github.com/dexidp/dex","documentation_url":"https://pkg.go.dev/github.com/dexidp/dex#section-documentation","metadata":null,"repo_metadata":{"id":36610137,"uuid":"40916314","full_name":"dexidp/dex","owner":"dexidp","description":"OpenID Connect (OIDC) identity and OAuth 2.0 provider with pluggable connectors","archived":false,"fork":false,"pushed_at":"2026-10-19T04:03:32.000Z","size":29373,"stargazers_count":11200,"open_issues_count":548,"forks_count":2006,"subscribers_count":166,"default_branch":"master","last_synced_at":"2026-10-20T04:28:30.514Z","etag":null,"topics":["hacktoberfest","identity-provider","idp","kubernetes","oidc"],"latest_commit_sha":null,"homepage":"https://dexidp.io","language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/dexidp.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":".github/CODE_OF_CONDUCT.md","threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":".github/SECURITY.md","accessibility":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":"MAINTAINERS.md","copyright":null,"agents":null,"claude":null,"gemini":null,"cursor":null,"copilot":null,"dco":".github/DCO","cla":null,"disclosure":null}},"created_at":"2015-08-17T17:57:06.000Z","updated_at":"2026-10-20T03:00:30.000Z","dependencies_parsed_at":"2026-10-16T15:09:36.566Z","dependency_job_id":"a8e5eddc-8818-4b4f-8775-c8f62bdfc284","html_url":"https://github.com/dexidp/dex","commit_stats":{"total_commits":1514,"total_committers":231,"mean_commits":6.554112554112554,"dds":0.8434610303830912,"last_synced_commit":"365485876a60d42a14182b4847a13f6110242ea9"},"previous_names":["coreos/dex"],"tags_count":99,"template":false,"template_full_name":null,"purl":"pkg:github/dexidp/dex","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/dexidp%2Fdex","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/dexidp%2Fdex/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/dexidp%2Fdex/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/dexidp%2Fdex/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/dexidp","download_url":"https://codeload.github.com/dexidp/dex/tar.gz/refs/heads/master","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/dexidp%2Fdex/sbom","scorecard":{"id":304798,"data":{"date":"2025-08-15T00:49:15Z","repo":{"name":"github.com/dexidp/dex","commit":"619f0e5451ff9599e72c112ddaeb757e4a269cf0"},"scorecard":{"version":"v5.2.1","commit":"ab2f6e92482462fe66246d9e32f642855a691dc1"},"score":7.9,"checks":[{"name":"Code-Review","score":7,"reason":"Found 3/4 approved changesets -- score normalized to 7","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#code-review"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: jobLevel 'actions' permission set to 'read': .github/workflows/analysis-scorecard.yaml:19","Info: jobLevel 'contents' permission set to 'read': .github/workflows/analysis-scorecard.yaml:20","Info: jobLevel 'contents' permission set to 'read': .github/workflows/artifacts.yaml:42","Warn: jobLevel 'security-events' permission set to 'write': .github/workflows/ci.yaml:166","Info: jobLevel 'contents' permission set to 'read': .github/workflows/ci.yaml:163","Warn: jobLevel 'packages' permission set to 'write': .github/workflows/ci.yaml:164","Info: jobLevel 'contents' permission set to 'read': .github/workflows/release.yaml:21","Warn: jobLevel 'packages' permission set to 'write': .github/workflows/release.yaml:22","Warn: jobLevel 'security-events' permission set to 'write': .github/workflows/release.yaml:24","Info: topLevel 'contents' permission set to 'read': .github/workflows/analysis-scorecard.yaml:11","Info: topLevel 'contents' permission set to 'read': .github/workflows/artifacts.yaml:28","Info: topLevel 'contents' permission set to 'read': .github/workflows/checks.yaml:8","Info: topLevel 'contents' permission set to 'read': .github/workflows/ci.yaml:9","Info: topLevel 'contents' permission set to 'read': .github/workflows/release.yaml:8","Warn: no topLevel permission defined: .github/workflows/trivydb-cache.yaml:1"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#token-permissions"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#dangerous-workflow"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: .github/SECURITY.md:1","Info: Found linked content: .github/SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: .github/SECURITY.md:1","Info: Found text in security policy: .github/SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#security-policy"}},{"name":"Maintained","score":10,"reason":"30 commit(s) and 3 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#maintained"}},{"name":"Dependency-Update-Tool","score":10,"reason":"update tool detected","details":["Info: detected update tool: Dependabot: .github/dependabot.yaml:1"],"documentation":{"short":"Determines if the project uses a dependency update tool.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#dependency-update-tool"}},{"name":"Pinned-Dependencies","score":9,"reason":"dependency not pinned by hash detected -- score normalized to 9","details":["Warn: containerImage not pinned by hash: Dockerfile:60","Info:  15 out of  15 GitHub-owned GitHubAction dependencies pinned","Info:  14 out of  14 third-party GitHubAction dependencies pinned","Info:   6 out of   7 containerImage dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#pinned-dependencies"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#binary-artifacts"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#cii-best-practices"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#packaging"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#fuzzing"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: Apache License 2.0: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#license"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#signed-releases"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#branch-protection"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#vulnerabilities"}},{"name":"SAST","score":10,"reason":"SAST tool is run on all commits","details":["Info: all commits (30) are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#sast"}},{"name":"CI-Tests","score":10,"reason":"23 out of 23 merged PRs checked by a CI test -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project runs tests before pull requests are merged.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#ci-tests"}},{"name":"Contributors","score":10,"reason":"project has 64 contributing companies or organizations","details":["Info: found contributions from: NixOS, StyraInc, aliter, apple, argoproj, atlrug, bank-vaults, banzaicloud, bloomberg, check-spelling, cisco-open, cloudflare, concourse, containerd, crusoe, dagger, deckhouse, dexidp, emperror, faro scanner production gmbh, flant, garnercorp, go-viper, gofrs, golang, google, googlers, grocer, guzzle, https://techorrect.com, inclusivenaming, iron-oxide, kilo-io, kube-logging, kubernetes, logur, machyve, meta, oauth2-proxy, oblique-security, observatorium, open-feature, ossf, palark, php-fig, php-http, portward, prometheus-community, red hat, riptidesio, riptideslabs, salesforce, securego, sigstore, styrainc @open-policy-agent, superfly, switch, thanos-io, thephpleague, todogroup, twirphp, uwu-tools, wavyland, winston-ci"],"documentation":{"short":"Determines if the project has a set of contributors from multiple organizations (e.g., companies).","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#contributors"}}]},"last_synced_at":"2025-08-17T21:46:26.985Z","repository_id":36610137,"created_at":"2025-08-17T21:46:26.985Z","updated_at":"2025-08-17T21:46:26.985Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":344872684,"owners_count":38388486,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-10-03T21:59:58.778Z","status":"online","status_checked_at":"2026-10-20T02:00:06.669Z","response_time":101,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"dexidp","name":"Dex IdP","uuid":"42422344","kind":"organization","description":"OpenID Connect Identity (OIDC) and OAuth 2.0 Provider with Pluggable Connectors","email":null,"website":"https://dexidp.io","location":null,"twitter":"dexidp","company":null,"icon_url":"https://avatars.githubusercontent.com/u/42422344?v=4","repositories_count":4,"last_synced_at":"2026-10-14T13:36:21.093Z","metadata":{"has_sponsors_listing":false,"funding":null},"html_url":"https://github.com/dexidp","funding_links":[],"total_stars":11266,"followers":102,"following":0,"created_at":"2022-11-14T01:51:27.230Z","updated_at":"2026-10-14T13:36:21.107Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/dexidp","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/dexidp/repositories"},"tags":[{"name":"v2.46.0","sha":"05a275057112ba93e17db21f600b756f000f1c21","kind":"tag","published_at":"2026-10-07T23:00:31.000Z","download_url":"https://codeload.github.com/dexidp/dex/tar.gz/v2.46.0","html_url":"https://github.com/dexidp/dex/releases/tag/v2.46.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/dexidp/dex@v2.46.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/dexidp%2Fdex/tags/v2.46.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/dexidp%2Fdex/tags/v2.46.0/manifests"},{"name":"v2.45.1","sha":"11d2eeb52b42e1980e14cb91e69dd9e3faab2076","kind":"commit","published_at":"2026-03-03T13:39:05.000Z","download_url":"https://codeload.github.com/dexidp/dex/tar.gz/v2.45.1","html_url":"https://github.com/dexidp/dex/releases/tag/v2.45.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/dexidp/dex@v2.45.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/dexidp%2Fdex/tags/v2.45.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/dexidp%2Fdex/tags/v2.45.1/manifests"},{"name":"v2.45.0","sha":"bcc2283694018a59e9b84c43c6c50ce996e9409b","kind":"commit","published_at":"2026-02-23T14:34:51.000Z","download_url":"https://codeload.github.com/dexidp/dex/tar.gz/v2.45.0","html_url":"https://github.com/dexidp/dex/releases/tag/v2.45.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/dexidp/dex@v2.45.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/dexidp%2Fdex/tags/v2.45.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/dexidp%2Fdex/tags/v2.45.0/manifests"},{"name":"api/v2.4.0","sha":"2dce75009acfcd9df77d57f2d144aae999a4c569","kind":"tag","published_at":"2025-09-01T13:22:53.000Z","download_url":"https://codeload.github.com/dexidp/dex/tar.gz/api/v2.4.0","html_url":"https://github.com/dexidp/dex/releases/tag/api/v2.4.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/dexidp/dex@api%2Fv2.4.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/dexidp%2Fdex/tags/api%2Fv2.4.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/dexidp%2Fdex/tags/api%2Fv2.4.0/manifests"},{"name":"v2.44.0","sha":"2dce75009acfcd9df77d57f2d144aae999a4c569","kind":"tag","published_at":"2025-09-01T13:22:08.000Z","download_url":"https://codeload.github.com/dexidp/dex/tar.gz/v2.44.0","html_url":"https://github.com/dexidp/dex/releases/tag/v2.44.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/dexidp/dex@v2.44.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/dexidp%2Fdex/tags/v2.44.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/dexidp%2Fdex/tags/v2.44.0/manifests"},{"name":"v2.43.1","sha":"6e602d3315ea09d0cdeef6b51e61f2fd4ae52502","kind":"tag","published_at":"2025-05-22T09:02:23.000Z","download_url":"https://codeload.github.com/dexidp/dex/tar.gz/v2.43.1","html_url":"https://github.com/dexidp/dex/releases/tag/v2.43.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/dexidp/dex@v2.43.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/dexidp%2Fdex/tags/v2.43.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/dexidp%2Fdex/tags/v2.43.1/manifests"},{"name":"v2.43.0","sha":"8e96058e71257eb0a32e1b0a42303094dea9d8fb","kind":"tag","published_at":"2025-05-19T17:36:27.000Z","download_url":"https://codeload.github.com/dexidp/dex/tar.gz/v2.43.0","html_url":"https://github.com/dexidp/dex/releases/tag/v2.43.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/dexidp/dex@v2.43.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/dexidp%2Fdex/tags/v2.43.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/dexidp%2Fdex/tags/v2.43.0/manifests"},{"name":"v2.42.1","sha":"4c3e83b90135339575b66d7cf878fb1a6326c243","kind":"tag","published_at":"2025-04-14T23:46:09.000Z","download_url":"https://codeload.github.com/dexidp/dex/tar.gz/v2.42.1","html_url":"https://github.com/dexidp/dex/releases/tag/v2.42.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/dexidp/dex@v2.42.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/dexidp%2Fdex/tags/v2.42.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/dexidp%2Fdex/tags/v2.42.1/manifests"},{"name":"v2.42.0","sha":"7d1a7473c8a07e22ee97925cc10236c70e5ecf34","kind":"tag","published_at":"2025-02-19T13:17:23.000Z","download_url":"https://codeload.github.com/dexidp/dex/tar.gz/v2.42.0","html_url":"https://github.com/dexidp/dex/releases/tag/v2.42.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/dexidp/dex@v2.42.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/dexidp%2Fdex/tags/v2.42.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/dexidp%2Fdex/tags/v2.42.0/manifests"},{"name":"api/v2.3.0","sha":"38ca3ed3dfecb706dd994c1c9155ab33a23ba76c","kind":"tag","published_at":"2025-02-19T13:07:47.000Z","download_url":"https://codeload.github.com/dexidp/dex/tar.gz/api/v2.3.0","html_url":"https://github.com/dexidp/dex/releases/tag/api/v2.3.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/dexidp/dex@api%2Fv2.3.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/dexidp%2Fdex/tags/api%2Fv2.3.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/dexidp%2Fdex/tags/api%2Fv2.3.0/manifests"},{"name":"api/v2.2.0","sha":"d0f1777c412e7226d1388e1e731f513bc0ddcb0c","kind":"commit","published_at":"2024-08-29T15:12:25.000Z","download_url":"https://codeload.github.com/dexidp/dex/tar.gz/api/v2.2.0","html_url":"https://github.com/dexidp/dex/releases/tag/api/v2.2.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/dexidp/dex@api%2Fv2.2.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/dexidp%2Fdex/tags/api%2Fv2.2.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/dexidp%2Fdex/tags/api%2Fv2.2.0/manifests"},{"name":"v2.41.1","sha":"43956db7fd75c488a82c70cf231f44287300a75d","kind":"commit","published_at":"2024-08-07T17:45:18.000Z","download_url":"https://codeload.github.com/dexidp/dex/tar.gz/v2.41.1","html_url":"https://github.com/dexidp/dex/releases/tag/v2.41.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/dexidp/dex@v2.41.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/dexidp%2Fdex/tags/v2.41.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/dexidp%2Fdex/tags/v2.41.1/manifests"},{"name":"v2.41.0","sha":"257a821cca118f0946db47f9a70e28548db319a1","kind":"commit","published_at":"2024-08-02T15:44:20.000Z","download_url":"https://codeload.github.com/dexidp/dex/tar.gz/v2.41.0","html_url":"https://github.com/dexidp/dex/releases/tag/v2.41.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/dexidp/dex@v2.41.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/dexidp%2Fdex/tags/v2.41.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/dexidp%2Fdex/tags/v2.41.0/manifests"},{"name":"v2.40.0","sha":"23efe9200ccd9e0a69242bf61cd221462370d1f4","kind":"commit","published_at":"2024-06-03T19:43:42.000Z","download_url":"https://codeload.github.com/dexidp/dex/tar.gz/v2.40.0","html_url":"https://github.com/dexidp/dex/releases/tag/v2.40.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/dexidp/dex@v2.40.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/dexidp%2Fdex/tags/v2.40.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/dexidp%2Fdex/tags/v2.40.0/manifests"},{"name":"v2.39.1","sha":"3705207f0190a7dc55b85a076b83b58d77fdafec","kind":"commit","published_at":"2024-04-09T11:05:06.000Z","download_url":"https://codeload.github.com/dexidp/dex/tar.gz/v2.39.1","html_url":"https://github.com/dexidp/dex/releases/tag/v2.39.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/dexidp/dex@v2.39.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/dexidp%2Fdex/tags/v2.39.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/dexidp%2Fdex/tags/v2.39.1/manifests"},{"name":"v2.39.0","sha":"f6114706f62ee32cab29e5baf6a15491339a50b4","kind":"commit","published_at":"2024-03-22T20:16:21.000Z","download_url":"https://codeload.github.com/dexidp/dex/tar.gz/v2.39.0","html_url":"https://github.com/dexidp/dex/releases/tag/v2.39.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/dexidp/dex@v2.39.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/dexidp%2Fdex/tags/v2.39.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/dexidp%2Fdex/tags/v2.39.0/manifests"},{"name":"v2.38.0","sha":"9451d87ca0c940463d043e9def0c967711e55ddf","kind":"tag","published_at":"2024-01-25T14:30:04.000Z","download_url":"https://codeload.github.com/dexidp/dex/tar.gz/v2.38.0","html_url":"https://github.com/dexidp/dex/releases/tag/v2.38.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/dexidp/dex@v2.38.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/dexidp%2Fdex/tags/v2.38.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/dexidp%2Fdex/tags/v2.38.0/manifests"},{"name":"v2.37.0","sha":"08bb7fb98b164ab078be17ecda4077b2d21c9bb3","kind":"commit","published_at":"2023-06-30T13:28:44.000Z","download_url":"https://codeload.github.com/dexidp/dex/tar.gz/v2.37.0","html_url":"https://github.com/dexidp/dex/releases/tag/v2.37.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/dexidp/dex@v2.37.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/dexidp%2Fdex/tags/v2.37.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/dexidp%2Fdex/tags/v2.37.0/manifests"},{"name":"v2.36.0","sha":"2bb4896d120efec1adc98f5db178a6d7206c9cc7","kind":"tag","published_at":"2023-03-20T12:57:52.000Z","download_url":"https://codeload.github.com/dexidp/dex/tar.gz/v2.36.0","html_url":"https://github.com/dexidp/dex/releases/tag/v2.36.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/dexidp/dex@v2.36.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/dexidp%2Fdex/tags/v2.36.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/dexidp%2Fdex/tags/v2.36.0/manifests"},{"name":"v2.35.3","sha":"54c9e8231fb8305875f4ee0f7bf1f5090e82e4ad","kind":"tag","published_at":"2022-10-11T12:20:00.000Z","download_url":"https://codeload.github.com/dexidp/dex/tar.gz/v2.35.3","html_url":"https://github.com/dexidp/dex/releases/tag/v2.35.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/dexidp/dex@v2.35.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/dexidp%2Fdex/tags/v2.35.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/dexidp%2Fdex/tags/v2.35.3/manifests"},{"name":"v2.35.2","sha":"9063c7902326fe00baaa3465b05207601171f4e1","kind":"tag","published_at":"2022-10-06T23:15:03.000Z","download_url":"https://codeload.github.com/dexidp/dex/tar.gz/v2.35.2","html_url":"https://github.com/dexidp/dex/releases/tag/v2.35.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/dexidp/dex@v2.35.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/dexidp%2Fdex/tags/v2.35.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/dexidp%2Fdex/tags/v2.35.2/manifests"},{"name":"v2.35.1","sha":"20274136be24027449bd2df93000f18b29f5875c","kind":"tag","published_at":"2022-10-04T08:38:20.000Z","download_url":"https://codeload.github.com/dexidp/dex/tar.gz/v2.35.1","html_url":"https://github.com/dexidp/dex/releases/tag/v2.35.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/dexidp/dex@v2.35.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/dexidp%2Fdex/tags/v2.35.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/dexidp%2Fdex/tags/v2.35.1/manifests"},{"name":"v2.35.0","sha":"e4bceef9f3d1ff97a12fbbdb464047c5f1fac8b5","kind":"tag","published_at":"2022-10-03T14:35:28.000Z","download_url":"https://codeload.github.com/dexidp/dex/tar.gz/v2.35.0","html_url":"https://github.com/dexidp/dex/releases/tag/v2.35.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/dexidp/dex@v2.35.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/dexidp%2Fdex/tags/v2.35.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/dexidp%2Fdex/tags/v2.35.0/manifests"},{"name":"v2.32.1","sha":"2207f1d7b61f2b1ff038969e77ce5f60e496e55a","kind":"tag","published_at":"2022-09-29T13:36:40.000Z","download_url":"https://codeload.github.com/dexidp/dex/tar.gz/v2.32.1","html_url":"https://github.com/dexidp/dex/releases/tag/v2.32.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/dexidp/dex@v2.32.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/dexidp%2Fdex/tags/v2.32.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/dexidp%2Fdex/tags/v2.32.1/manifests"},{"name":"v2.34.0","sha":"7b589ba3a7b169052a48e70a123ae9c9b48398c6","kind":"commit","published_at":"2022-09-14T11:38:42.000Z","download_url":"https://codeload.github.com/dexidp/dex/tar.gz/v2.34.0","html_url":"https://github.com/dexidp/dex/releases/tag/v2.34.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/dexidp/dex@v2.34.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/dexidp%2Fdex/tags/v2.34.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/dexidp%2Fdex/tags/v2.34.0/manifests"},{"name":"v2.33.1","sha":"8aab5bc478f6e635e819d66ade9b0307ece19770","kind":"tag","published_at":"2022-09-08T09:54:10.000Z","download_url":"https://codeload.github.com/dexidp/dex/tar.gz/v2.33.1","html_url":"https://github.com/dexidp/dex/releases/tag/v2.33.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/dexidp/dex@v2.33.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/dexidp%2Fdex/tags/v2.33.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/dexidp%2Fdex/tags/v2.33.1/manifests"},{"name":"v2.33.0","sha":"4bcdcf8e1ee07203b46ad771fca6491ef0d160ae","kind":"commit","published_at":"2022-07-28T12:39:50.000Z","download_url":"https://codeload.github.com/dexidp/dex/tar.gz/v2.33.0","html_url":"https://github.com/dexidp/dex/releases/tag/v2.33.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/dexidp/dex@v2.33.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/dexidp%2Fdex/tags/v2.33.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/dexidp%2Fdex/tags/v2.33.0/manifests"},{"name":"v2.32.0","sha":"3836196af2e70dda95fdd7d40de72af32d861340","kind":"tag","published_at":"2022-06-07T14:00:20.000Z","download_url":"https://codeload.github.com/dexidp/dex/tar.gz/v2.32.0","html_url":"https://github.com/dexidp/dex/releases/tag/v2.32.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/dexidp/dex@v2.32.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/dexidp%2Fdex/tags/v2.32.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/dexidp%2Fdex/tags/v2.32.0/manifests"},{"name":"v2.31.2","sha":"447b68845a89f3e624eddbb4f4fd54358c8cc80d","kind":"tag","published_at":"2022-05-26T14:59:25.000Z","download_url":"https://codeload.github.com/dexidp/dex/tar.gz/v2.31.2","html_url":"https://github.com/dexidp/dex/releases/tag/v2.31.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/dexidp/dex@v2.31.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/dexidp%2Fdex/tags/v2.31.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/dexidp%2Fdex/tags/v2.31.2/manifests"},{"name":"v2.31.1","sha":"83ca67f1402cff93923421c0445fea5445372dd1","kind":"tag","published_at":"2022-03-22T14:05:59.000Z","download_url":"https://codeload.github.com/dexidp/dex/tar.gz/v2.31.1","html_url":"https://github.com/dexidp/dex/releases/tag/v2.31.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/dexidp/dex@v2.31.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/dexidp%2Fdex/tags/v2.31.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/dexidp%2Fdex/tags/v2.31.1/manifests"},{"name":"v2.31.0","sha":"102762062b6b8f211bbd94b8a7ed016f8695db9e","kind":"tag","published_at":"2022-02-08T23:43:26.000Z","download_url":"https://codeload.github.com/dexidp/dex/tar.gz/v2.31.0","html_url":"https://github.com/dexidp/dex/releases/tag/v2.31.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/dexidp/dex@v2.31.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/dexidp%2Fdex/tags/v2.31.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/dexidp%2Fdex/tags/v2.31.0/manifests"},{"name":"api/v2.1.0","sha":"f8685d2e83b626f4991e36310794680670a28dc1","kind":"tag","published_at":"2022-02-08T22:14:08.000Z","download_url":"https://codeload.github.com/dexidp/dex/tar.gz/api/v2.1.0","html_url":"https://github.com/dexidp/dex/releases/tag/api/v2.1.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/dexidp/dex@api%2Fv2.1.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/dexidp%2Fdex/tags/api%2Fv2.1.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/dexidp%2Fdex/tags/api%2Fv2.1.0/manifests"},{"name":"v2.30.3","sha":"d5f2651d635e08f007bc16be141655fd03e8b84d","kind":"commit","published_at":"2022-02-02T17:48:05.000Z","download_url":"https://codeload.github.com/dexidp/dex/tar.gz/v2.30.3","html_url":"https://github.com/dexidp/dex/releases/tag/v2.30.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/dexidp/dex@v2.30.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/dexidp%2Fdex/tags/v2.30.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/dexidp%2Fdex/tags/v2.30.3/manifests"},{"name":"v2.30.2","sha":"6e30b362b7238d5de80b8277bb47ece3994fec95","kind":"tag","published_at":"2021-11-15T18:47:19.000Z","download_url":"https://codeload.github.com/dexidp/dex/tar.gz/v2.30.2","html_url":"https://github.com/dexidp/dex/releases/tag/v2.30.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/dexidp/dex@v2.30.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/dexidp%2Fdex/tags/v2.30.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/dexidp%2Fdex/tags/v2.30.2/manifests"},{"name":"v2.30.1","sha":"7e826fd68dfb9d8567bbd1d1f54dc9c1957c41da","kind":"tag","published_at":"2021-11-15T14:19:02.000Z","download_url":"https://codeload.github.com/dexidp/dex/tar.gz/v2.30.1","html_url":"https://github.com/dexidp/dex/releases/tag/v2.30.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/dexidp/dex@v2.30.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/dexidp%2Fdex/tags/v2.30.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/dexidp%2Fdex/tags/v2.30.1/manifests"},{"name":"v2.30.0","sha":"3fac2ab6bc3bc3cb56afa6d71adce293d5abbed8","kind":"commit","published_at":"2021-08-02T20:34:54.000Z","download_url":"https://codeload.github.com/dexidp/dex/tar.gz/v2.30.0","html_url":"https://github.com/dexidp/dex/releases/tag/v2.30.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/dexidp/dex@v2.30.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/dexidp%2Fdex/tags/v2.30.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/dexidp%2Fdex/tags/v2.30.0/manifests"},{"name":"v2.29.0","sha":"0780edbcbe43efc9ca613d708d5a5994b9cf0ba2","kind":"tag","published_at":"2021-06-29T14:50:54.000Z","download_url":"https://codeload.github.com/dexidp/dex/tar.gz/v2.29.0","html_url":"https://github.com/dexidp/dex/releases/tag/v2.29.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/dexidp/dex@v2.29.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/dexidp%2Fdex/tags/v2.29.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/dexidp%2Fdex/tags/v2.29.0/manifests"},{"name":"v2.28.1","sha":"a1adf86e535a865b187aeea59eca2d0993432967","kind":"tag","published_at":"2021-03-20T14:23:41.000Z","download_url":"https://codeload.github.com/dexidp/dex/tar.gz/v2.28.1","html_url":"https://github.com/dexidp/dex/releases/tag/v2.28.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/dexidp/dex@v2.28.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/dexidp%2Fdex/tags/v2.28.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/dexidp%2Fdex/tags/v2.28.1/manifests"},{"name":"v2.28.0","sha":"83ad7bc4e3beaf21ac3a56a03dd4e223249215fe","kind":"tag","published_at":"2021-03-12T21:53:31.000Z","download_url":"https://codeload.github.com/dexidp/dex/tar.gz/v2.28.0","html_url":"https://github.com/dexidp/dex/releases/tag/v2.28.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/dexidp/dex@v2.28.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/dexidp%2Fdex/tags/v2.28.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/dexidp%2Fdex/tags/v2.28.0/manifests"},{"name":"v2.27.0","sha":"0f9e2888ab65c5b18c4881eaeeb7e38d997e1d92","kind":"tag","published_at":"2020-12-14T08:42:03.000Z","download_url":"https://codeload.github.com/dexidp/dex/tar.gz/v2.27.0","html_url":"https://github.com/dexidp/dex/releases/tag/v2.27.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/dexidp/dex@v2.27.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/dexidp%2Fdex/tags/v2.27.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/dexidp%2Fdex/tags/v2.27.0/manifests"},{"name":"v2.26.0","sha":"71bbbee0752781a65d7f9dde198d58f97ddec097","kind":"commit","published_at":"2020-11-05T14:53:54.000Z","download_url":"https://codeload.github.com/dexidp/dex/tar.gz/v2.26.0","html_url":"https://github.com/dexidp/dex/releases/tag/v2.26.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/dexidp/dex@v2.26.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/dexidp%2Fdex/tags/v2.26.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/dexidp%2Fdex/tags/v2.26.0/manifests"},{"name":"v2.25.0","sha":"e837475ca6f2d2d3c1ecf7c55611a3800f7b1f0f","kind":"commit","published_at":"2020-09-09T15:47:18.000Z","download_url":"https://codeload.github.com/dexidp/dex/tar.gz/v2.25.0","html_url":"https://github.com/dexidp/dex/releases/tag/v2.25.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/dexidp/dex@v2.25.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/dexidp%2Fdex/tags/v2.25.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/dexidp%2Fdex/tags/v2.25.0/manifests"},{"name":"api/v2.0.0","sha":"a8cedc8bc35846ec95579f483d18097563a1b62b","kind":"commit","published_at":"2020-07-16T07:54:43.000Z","download_url":"https://codeload.github.com/dexidp/dex/tar.gz/api/v2.0.0","html_url":"https://github.com/dexidp/dex/releases/tag/api/v2.0.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/dexidp/dex@api%2Fv2.0.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/dexidp%2Fdex/tags/api%2Fv2.0.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/dexidp%2Fdex/tags/api%2Fv2.0.0/manifests"},{"name":"v2.24.0","sha":"709d4169d646e6a748e53dd809a7b45dfb5b85a1","kind":"tag","published_at":"2020-05-13T11:54:51.000Z","download_url":"https://codeload.github.com/dexidp/dex/tar.gz/v2.24.0","html_url":"https://github.com/dexidp/dex/releases/tag/v2.24.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/dexidp/dex@v2.24.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/dexidp%2Fdex/tags/v2.24.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/dexidp%2Fdex/tags/v2.24.0/manifests"},{"name":"v2.23.0","sha":"d820fd45d80cef74d4c65f5fcc5766ddb1fa514e","kind":"commit","published_at":"2020-03-03T10:05:08.000Z","download_url":"https://codeload.github.com/dexidp/dex/tar.gz/v2.23.0","html_url":"https://github.com/dexidp/dex/releases/tag/v2.23.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/dexidp/dex@v2.23.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/dexidp%2Fdex/tags/v2.23.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/dexidp%2Fdex/tags/v2.23.0/manifests"},{"name":"v2.22.0","sha":"26061f9558f3011bea53ef5a5bb02ac669d612e0","kind":"tag","published_at":"2020-01-30T15:55:03.000Z","download_url":"https://codeload.github.com/dexidp/dex/tar.gz/v2.22.0","html_url":"https://github.com/dexidp/dex/releases/tag/v2.22.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/dexidp/dex@v2.22.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/dexidp%2Fdex/tags/v2.22.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/dexidp%2Fdex/tags/v2.22.0/manifests"},{"name":"v2.21.0","sha":"c41035732f9622dfc004341fe20f19e2e4ec132c","kind":"commit","published_at":"2019-11-27T13:00:36.000Z","download_url":"https://codeload.github.com/dexidp/dex/tar.gz/v2.21.0","html_url":"https://github.com/dexidp/dex/releases/tag/v2.21.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/dexidp/dex@v2.21.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/dexidp%2Fdex/tags/v2.21.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/dexidp%2Fdex/tags/v2.21.0/manifests"},{"name":"v2.20.0","sha":"6d41541964c5e87e2150a4c10d4c77658bccaad7","kind":"tag","published_at":"2019-10-30T13:33:46.000Z","download_url":"https://codeload.github.com/dexidp/dex/tar.gz/v2.20.0","html_url":"https://github.com/dexidp/dex/releases/tag/v2.20.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/dexidp/dex@v2.20.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/dexidp%2Fdex/tags/v2.20.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/dexidp%2Fdex/tags/v2.20.0/manifests"},{"name":"v2.19.0","sha":"179cce36efda5343404194ebc292bfbc0dc183c3","kind":"tag","published_at":"2019-09-03T07:43:40.000Z","download_url":"https://codeload.github.com/dexidp/dex/tar.gz/v2.19.0","html_url":"https://github.com/dexidp/dex/releases/tag/v2.19.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/dexidp/dex@v2.19.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/dexidp%2Fdex/tags/v2.19.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/dexidp%2Fdex/tags/v2.19.0/manifests"},{"name":"v2.18.0","sha":"aeb2861a40b50b283d3dcd964a421be7780b43b7","kind":"tag","published_at":"2019-08-14T10:09:20.000Z","download_url":"https://codeload.github.com/dexidp/dex/tar.gz/v2.18.0","html_url":"https://github.com/dexidp/dex/releases/tag/v2.18.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/dexidp/dex@v2.18.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/dexidp%2Fdex/tags/v2.18.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/dexidp%2Fdex/tags/v2.18.0/manifests"},{"name":"v2.17.0","sha":"39dc5dcfb79d5f926194c5e0b1b5a1cfe2e3ea33","kind":"tag","published_at":"2019-07-03T08:15:54.000Z","download_url":"https://codeload.github.com/dexidp/dex/tar.gz/v2.17.0","html_url":"https://github.com/dexidp/dex/releases/tag/v2.17.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/dexidp/dex@v2.17.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/dexidp%2Fdex/tags/v2.17.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/dexidp%2Fdex/tags/v2.17.0/manifests"},{"name":"v2.16.0","sha":"60f47c4228b7719889eee4ca6c4c6cc60834d910","kind":"commit","published_at":"2019-04-18T22:21:23.000Z","download_url":"https://codeload.github.com/dexidp/dex/tar.gz/v2.16.0","html_url":"https://github.com/dexidp/dex/releases/tag/v2.16.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/dexidp/dex@v2.16.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/dexidp%2Fdex/tags/v2.16.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/dexidp%2Fdex/tags/v2.16.0/manifests"},{"name":"v2.15.0","sha":"7bd4071b4c8ced39568fbc48332641b5cdcc164c","kind":"tag","published_at":"2019-02-09T19:59:14.000Z","download_url":"https://codeload.github.com/dexidp/dex/tar.gz/v2.15.0","html_url":"https://github.com/dexidp/dex/releases/tag/v2.15.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/dexidp/dex@v2.15.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/dexidp%2Fdex/tags/v2.15.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/dexidp%2Fdex/tags/v2.15.0/manifests"},{"name":"v2.14.0","sha":"f1581ff873a200cf9dd01bf261e056267d57b991","kind":"tag","published_at":"2019-01-11T15:14:03.000Z","download_url":"https://codeload.github.com/dexidp/dex/tar.gz/v2.14.0","html_url":"https://github.com/dexidp/dex/releases/tag/v2.14.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/dexidp/dex@v2.14.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/dexidp%2Fdex/tags/v2.14.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/dexidp%2Fdex/tags/v2.14.0/manifests"},{"name":"v2.13.0","sha":"57b1031352a11789b9f87e95f58f60a46bc611de","kind":"commit","published_at":"2018-11-07T05:27:28.000Z","download_url":"https://codeload.github.com/dexidp/dex/tar.gz/v2.13.0","html_url":"https://github.com/dexidp/dex/releases/tag/v2.13.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/dexidp/dex@v2.13.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/dexidp%2Fdex/tags/v2.13.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/dexidp%2Fdex/tags/v2.13.0/manifests"},{"name":"v2.12.0","sha":"ffbeb2e479ee3adf2bcde5eae309dc9258957b36","kind":"tag","published_at":"2018-10-12T09:00:05.000Z","download_url":"https://codeload.github.com/dexidp/dex/tar.gz/v2.12.0","html_url":"https://github.com/dexidp/dex/releases/tag/v2.12.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/dexidp/dex@v2.12.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/dexidp%2Fdex/tags/v2.12.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/dexidp%2Fdex/tags/v2.12.0/manifests"},{"name":"v2.11.0","sha":"29bc098620352eaa51c2681ee054d4e31844deb1","kind":"tag","published_at":"2018-09-11T06:46:20.000Z","download_url":"https://codeload.github.com/dexidp/dex/tar.gz/v2.11.0","html_url":"https://github.com/dexidp/dex/releases/tag/v2.11.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/dexidp/dex@v2.11.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/dexidp%2Fdex/tags/v2.11.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/dexidp%2Fdex/tags/v2.11.0/manifests"},{"name":"v2.10.0","sha":"218d671a96865df2a4cf7f310efb99b8bfc5a5e2","kind":"tag","published_at":"2018-03-05T19:11:20.000Z","download_url":"https://codeload.github.com/dexidp/dex/tar.gz/v2.10.0","html_url":"https://github.com/dexidp/dex/releases/tag/v2.10.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/dexidp/dex@v2.10.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/dexidp%2Fdex/tags/v2.10.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/dexidp%2Fdex/tags/v2.10.0/manifests"},{"name":"v2.9.0","sha":"18da6288427f0ba51a370ae98c06e0d9fccbeb09","kind":"tag","published_at":"2017-12-05T15:42:32.000Z","download_url":"https://codeload.github.com/dexidp/dex/tar.gz/v2.9.0","html_url":"https://github.com/dexidp/dex/releases/tag/v2.9.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/dexidp/dex@v2.9.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/dexidp%2Fdex/tags/v2.9.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/dexidp%2Fdex/tags/v2.9.0/manifests"},{"name":"v2.8.1","sha":"3eb528f90f8d9ce3879b7835b398c00d5e85e1a6","kind":"tag","published_at":"2017-11-15T23:27:30.000Z","download_url":"https://codeload.github.com/dexidp/dex/tar.gz/v2.8.1","html_url":"https://github.com/dexidp/dex/releases/tag/v2.8.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/dexidp/dex@v2.8.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/dexidp%2Fdex/tags/v2.8.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/dexidp%2Fdex/tags/v2.8.1/manifests"},{"name":"v2.8.0","sha":"2c0b3752ddafedf1351e9bef6c1470e2514f756f","kind":"tag","published_at":"2017-11-15T21:40:31.000Z","download_url":"https://codeload.github.com/dexidp/dex/tar.gz/v2.8.0","html_url":"https://github.com/dexidp/dex/releases/tag/v2.8.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/dexidp/dex@v2.8.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/dexidp%2Fdex/tags/v2.8.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/dexidp%2Fdex/tags/v2.8.0/manifests"},{"name":"v2.7.1","sha":"64c97c73080bfc951d5f01906257a633bd164909","kind":"tag","published_at":"2017-09-19T22:42:48.000Z","download_url":"https://codeload.github.com/dexidp/dex/tar.gz/v2.7.1","html_url":"https://github.com/dexidp/dex/releases/tag/v2.7.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/dexidp/dex@v2.7.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/dexidp%2Fdex/tags/v2.7.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/dexidp%2Fdex/tags/v2.7.1/manifests"},{"name":"v2.7.0","sha":"4c435db52efa37e1b02571076ee3082c68894741","kind":"tag","published_at":"2017-09-18T21:43:36.000Z","download_url":"https://codeload.github.com/dexidp/dex/tar.gz/v2.7.0","html_url":"https://github.com/dexidp/dex/releases/tag/v2.7.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/dexidp/dex@v2.7.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/dexidp%2Fdex/tags/v2.7.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/dexidp%2Fdex/tags/v2.7.0/manifests"},{"name":"v2.6.1","sha":"400e328e1e282019bbbb28d16c521b0b3c7c99a2","kind":"tag","published_at":"2017-08-21T22:55:06.000Z","download_url":"https://codeload.github.com/dexidp/dex/tar.gz/v2.6.1","html_url":"https://github.com/dexidp/dex/releases/tag/v2.6.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/dexidp/dex@v2.6.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/dexidp%2Fdex/tags/v2.6.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/dexidp%2Fdex/tags/v2.6.1/manifests"},{"name":"v2.6.0","sha":"e361bc6c388c304069535ec0642ae4d36bfe982c","kind":"tag","published_at":"2017-08-11T23:48:34.000Z","download_url":"https://codeload.github.com/dexidp/dex/tar.gz/v2.6.0","html_url":"https://github.com/dexidp/dex/releases/tag/v2.6.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/dexidp/dex@v2.6.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/dexidp%2Fdex/tags/v2.6.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/dexidp%2Fdex/tags/v2.6.0/manifests"},{"name":"v2.5.0","sha":"0e0b4c53ef86a8795a6647ac47fac2855f1ad91e","kind":"tag","published_at":"2017-07-19T18:17:43.000Z","download_url":"https://codeload.github.com/dexidp/dex/tar.gz/v2.5.0","html_url":"https://github.com/dexidp/dex/releases/tag/v2.5.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/dexidp/dex@v2.5.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/dexidp%2Fdex/tags/v2.5.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/dexidp%2Fdex/tags/v2.5.0/manifests"},{"name":"v2.4.1","sha":"10253725de77740cc8662d5110483c8adbf23baa","kind":"tag","published_at":"2017-05-02T04:53:10.000Z","download_url":"https://codeload.github.com/dexidp/dex/tar.gz/v2.4.1","html_url":"https://github.com/dexidp/dex/releases/tag/v2.4.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/dexidp/dex@v2.4.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/dexidp%2Fdex/tags/v2.4.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/dexidp%2Fdex/tags/v2.4.1/manifests"},{"name":"v2.4.0","sha":"9b0af83604b2634e9de6717b75be2820e797a422","kind":"tag","published_at":"2017-04-11T21:20:21.000Z","download_url":"https://codeload.github.com/dexidp/dex/tar.gz/v2.4.0","html_url":"https://github.com/dexidp/dex/releases/tag/v2.4.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/dexidp/dex@v2.4.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/dexidp%2Fdex/tags/v2.4.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/dexidp%2Fdex/tags/v2.4.0/manifests"},{"name":"v2.3.1","sha":"da60fa82ac1cf4c542b78b118315b8eb1087ad34","kind":"tag","published_at":"2017-04-04T18:25:22.000Z","download_url":"https://codeload.github.com/dexidp/dex/tar.gz/v2.3.1","html_url":"https://github.com/dexidp/dex/releases/tag/v2.3.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/dexidp/dex@v2.3.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/dexidp%2Fdex/tags/v2.3.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/dexidp%2Fdex/tags/v2.3.1/manifests"},{"name":"v2.3.0","sha":"6e50c18458842b8eec2f5219e3588fec918d5663","kind":"tag","published_at":"2017-03-24T20:24:33.000Z","download_url":"https://codeload.github.com/dexidp/dex/tar.gz/v2.3.0","html_url":"https://github.com/dexidp/dex/releases/tag/v2.3.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/dexidp/dex@v2.3.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/dexidp%2Fdex/tags/v2.3.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/dexidp%2Fdex/tags/v2.3.0/manifests"},{"name":"v2.2.5","sha":"11d4d78d6bef77881caf6b6ae79db01a948dad3e","kind":"tag","published_at":"2017-03-14T00:01:13.000Z","download_url":"https://codeload.github.com/dexidp/dex/tar.gz/v2.2.5","html_url":"https://github.com/dexidp/dex/releases/tag/v2.2.5","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/dexidp/dex@v2.2.5","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/dexidp%2Fdex/tags/v2.2.5","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/dexidp%2Fdex/tags/v2.2.5/manifests"},{"name":"v2.2.4","sha":"29af9b4c75cdd918dd8f6784f8a6891e23c28372","kind":"tag","published_at":"2017-03-01T21:25:58.000Z","download_url":"https://codeload.github.com/dexidp/dex/tar.gz/v2.2.4","html_url":"https://github.com/dexidp/dex/releases/tag/v2.2.4","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/dexidp/dex@v2.2.4","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/dexidp%2Fdex/tags/v2.2.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/dexidp%2Fdex/tags/v2.2.4/manifests"},{"name":"v2.2.3","sha":"bb896a822261af20d8ebc42baa740bb672b42a8b","kind":"tag","published_at":"2017-02-27T19:35:03.000Z","download_url":"https://codeload.github.com/dexidp/dex/tar.gz/v2.2.3","html_url":"https://github.com/dexidp/dex/releases/tag/v2.2.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/dexidp/dex@v2.2.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/dexidp%2Fdex/tags/v2.2.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/dexidp%2Fdex/tags/v2.2.3/manifests"},{"name":"v2.2.2","sha":"565805b716704b018eadd48efcf818e537b9781e","kind":"tag","published_at":"2017-02-24T23:31:35.000Z","download_url":"https://codeload.github.com/dexidp/dex/tar.gz/v2.2.2","html_url":"https://github.com/dexidp/dex/releases/tag/v2.2.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/dexidp/dex@v2.2.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/dexidp%2Fdex/tags/v2.2.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/dexidp%2Fdex/tags/v2.2.2/manifests"},{"name":"v2.2.1","sha":"f8aec4c1c5b6445328032d30144086a62781c817","kind":"tag","published_at":"2017-02-24T03:45:37.000Z","download_url":"https://codeload.github.com/dexidp/dex/tar.gz/v2.2.1","html_url":"https://github.com/dexidp/dex/releases/tag/v2.2.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/dexidp/dex@v2.2.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/dexidp%2Fdex/tags/v2.2.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/dexidp%2Fdex/tags/v2.2.1/manifests"},{"name":"v2.2.0","sha":"af0d9cebd1310dd29ee9c6cae3b6637577f3e9f8","kind":"tag","published_at":"2017-02-22T23:27:01.000Z","download_url":"https://codeload.github.com/dexidp/dex/tar.gz/v2.2.0","html_url":"https://github.com/dexidp/dex/releases/tag/v2.2.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/dexidp/dex@v2.2.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/dexidp%2Fdex/tags/v2.2.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/dexidp%2Fdex/tags/v2.2.0/manifests"},{"name":"v2.1.0","sha":"a3ef8d26bc6dcc478854fef0e53f4f0a47c3dee9","kind":"tag","published_at":"2017-01-18T00:38:04.000Z","download_url":"https://codeload.github.com/dexidp/dex/tar.gz/v2.1.0","html_url":"https://github.com/dexidp/dex/releases/tag/v2.1.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/dexidp/dex@v2.1.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/dexidp%2Fdex/tags/v2.1.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/dexidp%2Fdex/tags/v2.1.0/manifests"},{"name":"v2.0.2","sha":"7c30eb6566bac3738f4a8dfd923f65d536b7f73d","kind":"tag","published_at":"2017-01-10T16:52:29.000Z","download_url":"https://codeload.github.com/dexidp/dex/tar.gz/v2.0.2","html_url":"https://github.com/dexidp/dex/releases/tag/v2.0.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/dexidp/dex@v2.0.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/dexidp%2Fdex/tags/v2.0.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/dexidp%2Fdex/tags/v2.0.2/manifests"},{"name":"v2.0.1","sha":"4ddc5eb061b7df6d466475ac86d9852e4ce9f109","kind":"tag","published_at":"2017-01-07T00:25:00.000Z","download_url":"https://codeload.github.com/dexidp/dex/tar.gz/v2.0.1","html_url":"https://github.com/dexidp/dex/releases/tag/v2.0.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/dexidp/dex@v2.0.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/dexidp%2Fdex/tags/v2.0.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/dexidp%2Fdex/tags/v2.0.1/manifests"},{"name":"v2.0.0","sha":"79c51f2983d36ecfb5db49b63f907c9fcbf25302","kind":"tag","published_at":"2016-12-12T23:32:17.000Z","download_url":"https://codeload.github.com/dexidp/dex/tar.gz/v2.0.0","html_url":"https://github.com/dexidp/dex/releases/tag/v2.0.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/dexidp/dex@v2.0.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/dexidp%2Fdex/tags/v2.0.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/dexidp%2Fdex/tags/v2.0.0/manifests"},{"name":"v2.0.0-beta.3","sha":"7516d120b38bee43c68d2da556eb95355cb8ddbd","kind":"tag","published_at":"2016-12-01T23:20:47.000Z","download_url":"https://codeload.github.com/dexidp/dex/tar.gz/v2.0.0-beta.3","html_url":"https://github.com/dexidp/dex/releases/tag/v2.0.0-beta.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/dexidp/dex@v2.0.0-beta.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/dexidp%2Fdex/tags/v2.0.0-beta.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/dexidp%2Fdex/tags/v2.0.0-beta.3/manifests"},{"name":"v2.0.0-beta.2","sha":"2e74b4849284aaaed63a44080f30a79fdb209faa","kind":"tag","published_at":"2016-11-17T06:12:44.000Z","download_url":"https://codeload.github.com/dexidp/dex/tar.gz/v2.0.0-beta.2","html_url":"https://github.com/dexidp/dex/releases/tag/v2.0.0-beta.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/dexidp/dex@v2.0.0-beta.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/dexidp%2Fdex/tags/v2.0.0-beta.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/dexidp%2Fdex/tags/v2.0.0-beta.2/manifests"},{"name":"v2.0.0-beta.1","sha":"96fb0733feeb2f9158594da9f315fd8d011ff4a4","kind":"tag","published_at":"2016-11-07T16:36:56.000Z","download_url":"https://codeload.github.com/dexidp/dex/tar.gz/v2.0.0-beta.1","html_url":"https://github.com/dexidp/dex/releases/tag/v2.0.0-beta.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/dexidp/dex@v2.0.0-beta.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/dexidp%2Fdex/tags/v2.0.0-beta.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/dexidp%2Fdex/tags/v2.0.0-beta.1/manifests"},{"name":"v2.0.0-alpha.5","sha":"a7c2fca039bd07fc2468c791811355626650b3a0","kind":"tag","published_at":"2016-10-28T20:48:09.000Z","download_url":"https://codeload.github.com/dexidp/dex/tar.gz/v2.0.0-alpha.5","html_url":"https://github.com/dexidp/dex/releases/tag/v2.0.0-alpha.5","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/dexidp/dex@v2.0.0-alpha.5","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/dexidp%2Fdex/tags/v2.0.0-alpha.5","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/dexidp%2Fdex/tags/v2.0.0-alpha.5/manifests"},{"name":"v2.0.0-alpha.4","sha":"ea52bf263b6c121ccbe49c6e6c4348613adf755a","kind":"tag","published_at":"2016-10-19T20:59:48.000Z","download_url":"https://codeload.github.com/dexidp/dex/tar.gz/v2.0.0-alpha.4","html_url":"https://github.com/dexidp/dex/releases/tag/v2.0.0-alpha.4","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/dexidp/dex@v2.0.0-alpha.4","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/dexidp%2Fdex/tags/v2.0.0-alpha.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/dexidp%2Fdex/tags/v2.0.0-alpha.4/manifests"},{"name":"v2.0.0-alpha.3","sha":"ade27b3d5eca5ab6224cfc2361c3bdf1a6d5abe8","kind":"tag","published_at":"2016-10-14T16:37:18.000Z","download_url":"https://codeload.github.com/dexidp/dex/tar.gz/v2.0.0-alpha.3","html_url":"https://github.com/dexidp/dex/releases/tag/v2.0.0-alpha.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/dexidp/dex@v2.0.0-alpha.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/dexidp%2Fdex/tags/v2.0.0-alpha.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/dexidp%2Fdex/tags/v2.0.0-alpha.3/manifests"},{"name":"v2.0.0-alpha.2","sha":"8518c30123a2d804954abcada6579ececb7f8da0","kind":"tag","published_at":"2016-10-07T18:56:47.000Z","download_url":"https://codeload.github.com/dexidp/dex/tar.gz/v2.0.0-alpha.2","html_url":"https://github.com/dexidp/dex/releases/tag/v2.0.0-alpha.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/dexidp/dex@v2.0.0-alpha.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/dexidp%2Fdex/tags/v2.0.0-alpha.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/dexidp%2Fdex/tags/v2.0.0-alpha.2/manifests"},{"name":"v2.0.0-alpha.1","sha":"182f14fb301ebc61973e8bc695c0fc47f6e81e59","kind":"tag","published_at":"2016-10-06T17:43:25.000Z","download_url":"https://codeload.github.com/dexidp/dex/tar.gz/v2.0.0-alpha.1","html_url":"https://github.com/dexidp/dex/releases/tag/v2.0.0-alpha.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/dexidp/dex@v2.0.0-alpha.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/dexidp%2Fdex/tags/v2.0.0-alpha.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/dexidp%2Fdex/tags/v2.0.0-alpha.1/manifests"},{"name":"v0.6.1","sha":"372e4a0576232e03c607b56bda596a834aca5b82","kind":"tag","published_at":"2016-09-29T23:45:15.000Z","download_url":"https://codeload.github.com/dexidp/dex/tar.gz/v0.6.1","html_url":"https://github.com/dexidp/dex/releases/tag/v0.6.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/dexidp/dex@v0.6.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/dexidp%2Fdex/tags/v0.6.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/dexidp%2Fdex/tags/v0.6.1/manifests"},{"name":"v0.6.0","sha":"f1f7d1c4748a3ca20d1c1b3b1ba2cdef7d67b638","kind":"tag","published_at":"2016-09-29T22:05:46.000Z","download_url":"https://codeload.github.com/dexidp/dex/tar.gz/v0.6.0","html_url":"https://github.com/dexidp/dex/releases/tag/v0.6.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/dexidp/dex@v0.6.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/dexidp%2Fdex/tags/v0.6.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/dexidp%2Fdex/tags/v0.6.0/manifests"},{"name":"v0.5.1","sha":"f816cfb1876f9228483c38d1a1e05e7c31aac801","kind":"tag","published_at":"2016-06-30T22:48:58.000Z","download_url":"https://codeload.github.com/dexidp/dex/tar.gz/v0.5.1","html_url":"https://github.com/dexidp/dex/releases/tag/v0.5.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/dexidp/dex@v0.5.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/dexidp%2Fdex/tags/v0.5.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/dexidp%2Fdex/tags/v0.5.1/manifests"},{"name":"v0.5.0","sha":"1cc816097a56eeaa74b226ca0e242e477f457471","kind":"tag","published_at":"2016-06-27T23:41:33.000Z","download_url":"https://codeload.github.com/dexidp/dex/tar.gz/v0.5.0","html_url":"https://github.com/dexidp/dex/releases/tag/v0.5.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/dexidp/dex@v0.5.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/dexidp%2Fdex/tags/v0.5.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/dexidp%2Fdex/tags/v0.5.0/manifests"},{"name":"v0.4.0","sha":"ea4c04fde83bd6c48f4d43862c406deb4ea9dba2","kind":"tag","published_at":"2016-05-04T22:19:55.000Z","download_url":"https://codeload.github.com/dexidp/dex/tar.gz/v0.4.0","html_url":"https://github.com/dexidp/dex/releases/tag/v0.4.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/dexidp/dex@v0.4.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/dexidp%2Fdex/tags/v0.4.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/dexidp%2Fdex/tags/v0.4.0/manifests"},{"name":"v0.3.0","sha":"38be227aa24117b892f5788429af9300746439d3","kind":"tag","published_at":"2016-03-03T05:41:17.000Z","download_url":"https://codeload.github.com/dexidp/dex/tar.gz/v0.3.0","html_url":"https://github.com/dexidp/dex/releases/tag/v0.3.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/dexidp/dex@v0.3.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/dexidp%2Fdex/tags/v0.3.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/dexidp%2Fdex/tags/v0.3.0/manifests"},{"name":"v0.2.3","sha":"b5c7f1978e0718d9631e512c385eb0dea99b732d","kind":"tag","published_at":"2016-01-13T23:54:29.000Z","download_url":"https://codeload.github.com/dexidp/dex/tar.gz/v0.2.3","html_url":"https://github.com/dexidp/dex/releases/tag/v0.2.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/dexidp/dex@v0.2.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/dexidp%2Fdex/tags/v0.2.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/dexidp%2Fdex/tags/v0.2.3/manifests"},{"name":"v0.2.2","sha":"7aa3d925d5b8572e3602420d25552e8d3136b54d","kind":"tag","published_at":"2015-12-29T00:28:38.000Z","download_url":"https://codeload.github.com/dexidp/dex/tar.gz/v0.2.2","html_url":"https://github.com/dexidp/dex/releases/tag/v0.2.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/dexidp/dex@v0.2.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/dexidp%2Fdex/tags/v0.2.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/dexidp%2Fdex/tags/v0.2.2/manifests"},{"name":"v0.2.1","sha":"0f7fed8d5b94e5d182cc076daccf1c22d7935b71","kind":"tag","published_at":"2015-12-21T23:53:55.000Z","download_url":"https://codeload.github.com/dexidp/dex/tar.gz/v0.2.1","html_url":"https://github.com/dexidp/dex/releases/tag/v0.2.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/dexidp/dex@v0.2.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/dexidp%2Fdex/tags/v0.2.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/dexidp%2Fdex/tags/v0.2.1/manifests"},{"name":"v0.2.0","sha":"35dfd8adb0296b14ffd10dda4dfce86faceb90b3","kind":"tag","published_at":"2015-12-16T22:36:29.000Z","download_url":"https://codeload.github.com/dexidp/dex/tar.gz/v0.2.0","html_url":"https://github.com/dexidp/dex/releases/tag/v0.2.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/dexidp/dex@v0.2.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/dexidp%2Fdex/tags/v0.2.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/dexidp%2Fdex/tags/v0.2.0/manifests"},{"name":"v0.1.0","sha":"7f49efd87394e3d5e143c66334103167b4846300","kind":"commit","published_at":"2015-09-03T16:57:43.000Z","download_url":"https://codeload.github.com/dexidp/dex/tar.gz/v0.1.0","html_url":"https://github.com/dexidp/dex/releases/tag/v0.1.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/dexidp/dex@v0.1.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/dexidp%2Fdex/tags/v0.1.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/dexidp%2Fdex/tags/v0.1.0/manifests"}]},"repo_metadata_updated_at":"2026-10-20T04:53:06.779Z","dependent_packages_count":49,"downloads":null,"downloads_period":null,"dependent_repos_count":67,"rankings":{"downloads":null,"dependent_repos_count":0.7101578505357103,"dependent_packages_count":0.7025775139288686,"stargazers_count":0.7276125729856752,"forks_count":0.6332573304847227,"docker_downloads_count":0.49282162071586305,"average":0.6532853777301679},"purl":"pkg:golang/github.com/dexidp/dex","advisories":[{"uuid":"GSA_kwCzR0hTQS03cWp4LWdwOWgtNjVxas4ABYea","url":"https://github.com/advisories/GHSA-7qjx-gp9h-65qj","title":"Dex: Token-exchange endpoint is missing AllowedConnectors enforcement","description":"## Summary\n\n`server/handlers.go::handleTokenExchange` (lines 1804-1893) does not call `isConnectorAllowed(client.AllowedConnectors, connID)` before issuing tokens, while sibling handlers do. This is a per-client connector ACL gap on the token-exchange endpoint; the redirect-flow paths enforce the same field correctly.\n\n## Affected code path\n\n`handleTokenExchange` reads `connector_id` from the request body at `server/handlers.go:1822`. Validators called between read and token issuance:\n\n- `s.getConnector(ctx, connID)` at line 1836 - confirms connector exists\n- `GrantTypeAllowed(conn.GrantTypes, grantTypeTokenExchange)` at line 1842 - confirms connector permits this grant\n- **(missing)** `isConnectorAllowed(client.AllowedConnectors, connID)` - never called\n\nTokens are issued at lines 1887 / 1889, bound to `client.ID` carrying claims derived from `connID`.\n\nSibling handlers DO enforce the check:\n\n- `server/handlers.go::handleConnectorLogin:377` - calls `isConnectorAllowed`, returns HTTP 403 \"Connector not allowed for this client.\" (line 380).\n- `server/oauth2.go::parseAuthorizationRequest:535` - same enforcement for the authorization-code flow.\n\nThe doc-string at `storage/storage.go:192-194` reads:\n\n\u003e *AllowedConnectors is a list of connector IDs that the client is allowed to use for authentication. If empty, all connectors are allowed.*\n\nThe phrasing is unconditional - a permission ACL, not a UX filter.\n\n## Impact (concrete scenario)\n\n- Connector `corp-okta` - high-trust, gates production access\n- Connector `dev-google` - low-trust, internal Gmail\n- Client `dev-app` configured with `allowedConnectors: [\"dev-google\"]` (admin intent: dev-app only sees dev-google identities)\n- `dev-app`s client secret leaks (CI artifact, env file, breached service-account secret store)\n\nWithout the bug, the leaked secret would only allow the attacker to mint tokens via `dev-google` - blast radius bounded by what any dev-google user can already do.\n\nWith the bug, an attacker holding their own legitimate `corp-okta` ID token sends:\n\n```\nPOST /token\nContent-Type: application/x-www-form-urlencoded\n\ngrant_type=urn:ietf:params:oauth:grant-type:token-exchange\n\u0026client_id=dev-app\n\u0026client_secret=\u003cleaked\u003e\n\u0026connector_id=corp-okta\n\u0026subject_token=\u003cattackers own corp-okta id token\u003e\n\u0026subject_token_type=urn:ietf:params:oauth:token-type:id_token\n\u0026scope=openid+groups\n```\n\nDex returns an ID token signed by Dex, `aud=dev-app`, carrying the attackers `corp-okta` groups. Downstream services trusting tokens issued for `dev-app` see the attacker as a `corp-okta` user - a combination the admins policy explicitly forbade.\n\n## Severity (self-assessed)\n\nCVSS 3.1 vector: `AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:N` -\u003e **8.7 HIGH**.\n\nThe `PR:H` precondition is a real reduction (requires leaked confidential client_secret PLUS attacker holding a `subject_token` from a forbidden connector that has token-exchange enabled). Defer to your scoring - HIGH and MEDIUM are both defensible.\n\n## Affected version\n\n`master` only - **not yet in any released tag**. Latest release `v2.45.1` (2026-03-03) predates PR #4610 (commit `f80a89d`, 2026-03-11) which introduced `AllowedConnectors`. Production deployments on stable releases are NOT affected; deployments pulling from master / nightly images are. A fix can be merged ahead of the next release without an embargo for past versions.\n\n## Precedent / lineage\n\n- PR #4610 (commit `f80a89d`, 2026-03-11) - added the `AllowedConnectors` field, `isConnectorAllowed`, `filterConnectors`, and the redirect-flow check sites (`handleConnectorLogin:377`, `parseAuthorizationRequest:535`). Did not modify `handleTokenExchange`.\n- PR #4619 (commit `7777773`, 2026-03-11, same author, one day earlier) - added `GrantTypeAllowed(conn.GrantTypes, grantTypeTokenExchange)` to `handleTokenExchange`. Added a connector-side grant-type gate but did not add the symmetric client-side connector ACL.\n\n## Suggested fix\n\nInsert `isConnectorAllowed(client.AllowedConnectors, connID)` between the existing `getConnector` / `GrantTypeAllowed` checks and the connector cast at line 1847, returning HTTP 403 via the token-endpoint error helper. Mirror the existing patterns at `handlers.go:377-380` and `oauth2.go:535`. One-block addition.\n\n## Verification methodology\n\nTwo-stage verification per IRIS / XBOW pattern (LLM-assisted research with non-LLM verifier as last stage):\n\n1. **Code-mechanics** - independent cold-read of `server/handlers.go`, `server/oauth2.go`, `storage/storage.go` confirmed the missing check at `handleTokenExchange` and the present checks at the two siblings; cross-checked diffs of PR #4610 (`f80a89d`) and PR #4619 (`7777773`).\n2. **External grounding** - cross-checked `docs/configuration/customization`, `docs/guides/token-exchange/`, RFC 8693 (which defers per-client policy to implementations), `.github/SECURITY.md`, GHSA dashboard, huntr.com, and existing issues including #3546 (different mechanism: connector-level disable list, orthogonal to this finding). No prior public report of this gap was found.\n\n`semgrep` (`p/golang` + `p/security-audit`) on `server/` returned no ERROR-severity findings - the static tool cannot detect missing-validator gaps; evidence rests on file:line grep + sibling-handler comparison above.\n\n## Reporter\n\nMatteo Panzeri (GitHub: @matte1782, contact: matteo1782@gmail.com). Please credit as **Matteo Panzeri** if a CVE is requested.","origin":"UNSPECIFIED","severity":"HIGH","published_at":"2026-06-09T21:59:33.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":8.7,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:N","references":["https://github.com/dexidp/dex/security/advisories/GHSA-7qjx-gp9h-65qj","https://github.com/dexidp/dex/commit/204dbb2e3ff7692af3b7ca4362b1ee46fb43c227","https://github.com/advisories/GHSA-7qjx-gp9h-65qj"],"source_kind":"github","identifiers":["GHSA-7qjx-gp9h-65qj"],"repository_url":null,"blast_radius":0.0,"created_at":"2026-06-09T22:00:09.626Z","updated_at":"2026-06-10T15:00:09.012Z","epss_percentage":null,"epss_percentile":null,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS03cWp4LWdwOWgtNjVxas4ABYea","html_url":"https://advisories.ecosyste.ms/advisories/GSA_kwCzR0hTQS03cWp4LWdwOWgtNjVxas4ABYea","packages":[{"ecosystem":"go","package_name":"github.com/dexidp/dex","versions":[{"first_patched_version":"0.0.0-20260303131938-204dbb2e3ff7","vulnerable_version_range":"\u003c 0.0.0-20260303131938-204dbb2e3ff7"}],"purl":"pkg:go/github.com%2Fdexidp%2Fdex"}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS03cWp4LWdwOWgtNjVxas4ABYea/related_packages","related_advisories":[]},{"uuid":"GSA_kwCzR0hTQS1ncjc5LTl2NnYtZ2M5cs4AA430","url":"https://github.com/advisories/GHSA-gr79-9v6v-gc9r","title":"Dex discarding TLSconfig and always serves deprecated TLS 1.0/1.1 and insecure ciphers","description":"### Summary\n\nDex 2.37.0 is serving HTTPS with insecure TLS 1.0 and TLS 1.1.\n\n\n### Details\nWhile working on https://github.com/dexidp/dex/issues/2848 and implementing configurable TLS support, I noticed my changes did not have any effect in TLS config, so I started investigating. \n\nhttps://github.com/dexidp/dex/blob/70d7a2c7c1bb2646b1a540e49616cbc39622fb83/cmd/dex/serve.go#L425 is seemingly setting TLS 1.2 as minimum version, but the whole tlsConfig is ignored after \"TLS cert reloader\" was introduced in https://github.com/dexidp/dex/pull/2964. Configured cipher suites are not respected either, as seen on the output.\n\n### PoC\nBuild Dex, generate certs with `gencert.sh`, modify `config.dev.yaml` to run on https, using generated certs.\n\n```console\nissuer: http://127.0.0.1:5556/dex\n\nstorage:\n  type: sqlite3\n  config:\n    file: dex.db\n\nweb:\n  https: 127.0.0.1:5556\n  tlsCert: examples/k8s/ssl/cert.pem\n  tlsKey: examples/k8s/ssl/key.pem\n\n\u003crest as default\u003e\n```\n\nRun dex `bin/dex serve config.dev.yaml`.\n\nInstall `sslyze`, easy to use SSL connection analyzer:\n\n```console\npip3 install sslyze\nsslyze 127.0.0.1:5556\n```\n\nIn Dex 2.37.0, TLS 1.0 and TLS 1.1 are enabled in addition to expected TLS 1.2 and TLS 1.3.\n```console\n * TLS 1.0 Cipher Suites:\n     Attempted to connect using 80 cipher suites.\n\n     The server accepted the following 6 cipher suites:\n        TLS_RSA_WITH_AES_256_CBC_SHA                      256                      \n        TLS_RSA_WITH_AES_128_CBC_SHA                      128                      \n        TLS_RSA_WITH_3DES_EDE_CBC_SHA                     168                      \n        TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA                256       ECDH: prime256v1 (256 bits)\n        TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA                128       ECDH: prime256v1 (256 bits)\n        TLS_ECDHE_RSA_WITH_3DES_EDE_CBC_SHA               168       ECDH: prime256v1 (256 bits)\n\n     The group of cipher suites supported by the server has the following properties:\n       Forward Secrecy                    OK - Supported\n       Legacy RC4 Algorithm               OK - Not Supported\n\n\n * TLS 1.1 Cipher Suites:\n     Attempted to connect using 80 cipher suites.\n\n     The server accepted the following 6 cipher suites:\n        TLS_RSA_WITH_AES_256_CBC_SHA                      256                      \n        TLS_RSA_WITH_AES_128_CBC_SHA                      128                      \n        TLS_RSA_WITH_3DES_EDE_CBC_SHA                     168                      \n        TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA                256       ECDH: prime256v1 (256 bits)\n        TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA                128       ECDH: prime256v1 (256 bits)\n        TLS_ECDHE_RSA_WITH_3DES_EDE_CBC_SHA               168       ECDH: prime256v1 (256 bits)\n\n     The group of cipher suites supported by the server has the following properties:\n       Forward Secrecy                    OK - Supported\n       Legacy RC4 Algorithm               OK - Not Supported\n\n\n * TLS 1.2 Cipher Suites:\n     Attempted to connect using 156 cipher suites.\n\n     The server accepted the following 11 cipher suites:\n        TLS_RSA_WITH_AES_256_GCM_SHA384                   256                      \n        TLS_RSA_WITH_AES_256_CBC_SHA                      256                      \n        TLS_RSA_WITH_AES_128_GCM_SHA256                   128                      \n        TLS_RSA_WITH_AES_128_CBC_SHA                      128                      \n        TLS_RSA_WITH_3DES_EDE_CBC_SHA                     168                      \n        TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256       256       ECDH: X25519 (253 bits)\n        TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384             256       ECDH: prime256v1 (256 bits)\n        TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA                256       ECDH: prime256v1 (256 bits)\n        TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256             128       ECDH: prime256v1 (256 bits)\n        TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA                128       ECDH: prime256v1 (256 bits)\n        TLS_ECDHE_RSA_WITH_3DES_EDE_CBC_SHA               168       ECDH: prime256v1 (256 bits)\n\n     The group of cipher suites supported by the server has the following properties:\n       Forward Secrecy                    OK - Supported\n       Legacy RC4 Algorithm               OK - Not Supported\n\n\n * TLS 1.3 Cipher Suites:\n     Attempted to connect using 5 cipher suites.\n\n     The server accepted the following 3 cipher suites:\n        TLS_CHACHA20_POLY1305_SHA256                      256       ECDH: X25519 (253 bits)\n        TLS_AES_256_GCM_SHA384                            256       ECDH: X25519 (253 bits)\n        TLS_AES_128_GCM_SHA256                            128       ECDH: X25519 (253 bits)\n```\n\nIn Dex 2.36.0, TLS 1.0 and TLS 1.1 are disabled as expected.\n```console\n * TLS 1.0 Cipher Suites:\n     Attempted to connect using 80 cipher suites; the server rejected all cipher suites.\n\n * TLS 1.1 Cipher Suites:\n     Attempted to connect using 80 cipher suites; the server rejected all cipher suites.\n\n * TLS 1.2 Cipher Suites:\n     Attempted to connect using 156 cipher suites.\n\n     The server accepted the following 5 cipher suites:\n        TLS_RSA_WITH_AES_256_GCM_SHA384                   256                      \n        TLS_RSA_WITH_AES_128_GCM_SHA256                   128                      \n        TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256       256       ECDH: X25519 (253 bits)\n        TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384             256       ECDH: prime256v1 (256 bits)\n        TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256             128       ECDH: prime256v1 (256 bits)\n\n     The group of cipher suites supported by the server has the following properties:\n       Forward Secrecy                    OK - Supported\n       Legacy RC4 Algorithm               OK - Not Supported\n\n\n * TLS 1.3 Cipher Suites:\n     Attempted to connect using 5 cipher suites.\n\n     The server accepted the following 3 cipher suites:\n        TLS_CHACHA20_POLY1305_SHA256                      256       ECDH: X25519 (253 bits)\n        TLS_AES_256_GCM_SHA384                            256       ECDH: X25519 (253 bits)\n```\n\n### Impact\nTLS 1.0 and TLS 1.1 connections can be decrypted by the attacker, and hence decrypt the traffic to Dex.","origin":"UNSPECIFIED","severity":"HIGH","published_at":"2024-01-26T01:57:31.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":8.7,"cvss_vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N","references":["https://github.com/dexidp/dex/security/advisories/GHSA-gr79-9v6v-gc9r","https://nvd.nist.gov/vuln/detail/CVE-2024-23656","https://github.com/dexidp/dex/issues/2848","https://github.com/dexidp/dex/pull/2964","https://github.com/dexidp/dex/commit/5bbdb4420254ba73b9c4df4775fe7bdacf233b17","https://github.com/dexidp/dex/blob/70d7a2c7c1bb2646b1a540e49616cbc39622fb83/cmd/dex/serve.go#L425","https://github.com/advisories/GHSA-gr79-9v6v-gc9r"],"source_kind":"github","identifiers":["GHSA-gr79-9v6v-gc9r","CVE-2024-23656"],"repository_url":"https://github.com/dexidp/dex","blast_radius":15.886850783497188,"created_at":"2024-01-26T02:04:36.374Z","updated_at":"2026-10-21T01:10:12.675Z","epss_percentage":0.00435,"epss_percentile":0.35506,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS1ncjc5LTl2NnYtZ2M5cs4AA430","html_url":"https://advisories.ecosyste.ms/advisories/GSA_kwCzR0hTQS1ncjc5LTl2NnYtZ2M5cs4AA430","packages":[{"ecosystem":"go","package_name":"github.com/dexidp/dex","versions":[{"first_patched_version":"0.0.0-20240125115555-5bbdb4420254","vulnerable_version_range":"\u003c 0.0.0-20240125115555-5bbdb4420254"},{"first_patched_version":"2.38.0","vulnerable_version_range":"= 2.37.0"}],"purl":"pkg:go/github.com%2Fdexidp%2Fdex"}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS1ncjc5LTl2NnYtZ2M5cs4AA430/related_packages","related_advisories":[]},{"uuid":"GSA_kwCzR0hTQS12aDdnLXAyNmMtajJjd84AAvJw","url":"https://github.com/advisories/GHSA-vh7g-p26c-j2cw","title":"Dex vulnerable to Man-in-the-Middle allowing ID token capture via intercepted authorization code","description":"### Impact\nDex instances with public clients (and by extension, clients accepting tokens issued by those Dex instances) are affected by this vulnerability.\n\nAn attacker can exploit this vulnerability by making a victim navigate to a malicious website and guiding them through the OIDC flow, stealing the OAuth authorization code in the process. The authorization code then can be exchanged by the attacker for a token, gaining access to applications accepting that token.\n\n### Steps to reproduce\n\n1) A victim navigates to a malicious website\n\n2) The webserver initiates a connection with a Dex instance directly - https://dexexample.com/auth/https:%252F%252Faccounts.google.com?access_type=online\u0026client_id=example\u0026nonce=2AaJAimQU9CbeOFsNra1d7CJTWB\u0026redirect_uri=http%3A%2F%2Flocalhost%3A40393%2Fauth%2Fcallback\u0026response_type=code\u0026scope=openid+email\u0026state=2AaJAjhpUmsB25csCo5muvorMTl. In this example, the Dex instance is hosted on `dexexample.com`, and the connector is `accounts.google.com`.\n\n3) Dex returns a 302 Redirect to the connector IDP, https://accounts.google.com/o/oauth2/v2/auth?client_id=237800849078-hri2ndt7gdafpf34kq8crd5sik9pe3so.apps.googleusercontent.com\u0026redirect_uri=https%3A%2F%2Fdexexample.com%2Fauth%2Fcallback\u0026response_type=code\u0026scope=openid+email\u0026state=g3dkmpontsr3ugocoddjx72ef. The attacker records the state parameter value g3dkmpontsr3ugocoddjx72ef which will be used as the request ID later on.\n\n4) The malicious website redirects the victim’s browser to the connector IDP.\n\n5) The user authenticates to the connector IDP. If they have authenticated before, they may not be presented with an authentication challenge. The user will silently be taken through the following steps:\n\n    Authentication with the connector IDP, which redirects the browser to the Dex callback with a code - https://dexexample.com/callback?state=g3dkmpontsr3ugocoddjx72ef\u0026code=4%2F0AX4XfWizg1PQEQNl18hmP0_YQ3iUYII2ed13n9ikKr_ZcV7uCZpZaPcIlxBzX5QwFIcs-w\u0026scope=email+openid+https%3A%2F%[2Fwww.googleapis.com](http://2fwww.googleapis.com/)%2Fauth%2Fuserinfo.email\u0026authuser=0\u0026hd=[google.com](http://google.com/)\u0026prompt=none\n\n    Dex handles the callback, fetching the user claims from the connector IDP, persisting them and generating an OAuth code. Then Dex redirects the browser to the approval endpoint https://dexexample.com/approval?req=g3dkmpontsr3ugocoddjx72ef. Note that the req parameter is the same as the attacker's recorded state parameter.\n\n    Dex uses the request ID to look up the OAuth code, and builds a redirect to the original callback with the code - http://localhost:40393/auth/callback?code=bz5p3oov2wlh5k3rboa4atxas\u0026state=2AaJAjhpUmsB25csCo5muvorMTl.\n\n\nIn step 2., when the webserver initiates the connection to Dex and receives the redirect to the connector IDP, the webserver will persist the connector state parameter (`g3dkmpontsr3ugocoddjx72ef`), which is used as the request ID to later look up the OAuth code. As the user goes through the authentication flow with the connector IDP, the webserver will repeatedly request `/approval?req=\u003cstate\u003e`. Once the user has successfully authenticated, if the webserver is able to call /approval before the victim’s browser calls `/approval`, then an attacker can fetch the Dex OAuth code which can be exchanged for an ID token using the `/token` endpoint.\n\nNote that PKCE does not defend against this attack since the webserver initiates the request to Dex with a known code challenge.\n\n### Fix\n\nThe request has been made unpredictable with message authentication. This was accomplished by creating an [HMAC](https://en.wikipedia.org/wiki/HMAC) using a randomly generated per-request secret. This secret is persisted between the initial login request and the approval request. Since the HMAC is derived using a secret key, its value cannot be known to an attacker, so they will be unable to poll `/approval` for the code.\n\n### Patches\nUpdate to 2.35.0.\n\n### Workarounds\nNo known workarounds (without impacting behavior) for existing versions.\n\nDisabling public clients is the only way to defend against attacks exploiting this vulnerability.\n\n### References\n\n### For more information\nIf you have any questions or comments about this advisory:\n* Start a new [discussion](https://github.com/dexidp/dex/discussions/new?category=q-a)\n* Email us at [cncf-dex-maintainers@lists.cncf.io](mailto:cncf-dex-maintainers@lists.cncf.io)\n","origin":"UNSPECIFIED","severity":"CRITICAL","published_at":"2022-10-03T19:12:03.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":9.3,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:N","references":["https://github.com/dexidp/dex/security/advisories/GHSA-vh7g-p26c-j2cw","https://github.com/dexidp/dex/releases/tag/v2.35.0","https://nvd.nist.gov/vuln/detail/CVE-2022-39222","https://github.com/dexidp/dex/commit/49471b14c8080ddb034d4855841123d378b7a634","https://github.com/advisories/GHSA-vh7g-p26c-j2cw"],"source_kind":"github","identifiers":["GHSA-vh7g-p26c-j2cw","CVE-2022-39222"],"repository_url":"https://github.com/dexidp/dex","blast_radius":0.0,"created_at":"2022-12-21T16:11:56.399Z","updated_at":"2026-10-05T15:15:01.979Z","epss_percentage":0.01584,"epss_percentile":0.74715,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS12aDdnLXAyNmMtajJjd84AAvJw","html_url":"https://advisories.ecosyste.ms/advisories/GSA_kwCzR0hTQS12aDdnLXAyNmMtajJjd84AAvJw","packages":[{"ecosystem":"go","package_name":"github.com/dexidp/dex","versions":[{"first_patched_version":"2.35.0","vulnerable_version_range":"\u003c= 2.34.0"}],"purl":"pkg:go/github.com%2Fdexidp%2Fdex"}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS12aDdnLXAyNmMtajJjd84AAvJw/related_packages","related_advisories":[]},{"uuid":"MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLW05aHAtN3I5OS05NGg1","url":"https://github.com/advisories/GHSA-m9hp-7r99-94h5","title":"Critical security issues in XML encoding in github.com/dexidp/dex","description":"### Impact\n\nThe following vulnerabilities have been disclosed, which impact users leveraging the SAML connector:\n\nSignature Validation Bypass (CVE-2020-15216): https://github.com/russellhaering/goxmldsig/security/advisories/GHSA-q547-gmf8-8jr7\n\n`encoding/xml` instabilities:\n - [Element namespace prefix instability (CVE-2020-29511)](https://github.com/mattermost/xml-roundtrip-validator/blob/master/advisories/unstable-elements.md)\n - [Attribute namespace prefix instability (CVE-2020-29509)](https://github.com/mattermost/xml-roundtrip-validator/blob/master/advisories/unstable-attributes.md)\n - [Directive comment instability (CVE-2020-29510)](https://github.com/mattermost/xml-roundtrip-validator/blob/master/advisories/unstable-directives.md)\n\n### Patches\n\nImmediately update to [Dex v2.27.0](https://github.com/dexidp/dex/releases/tag/v2.27.0).\n\n### Workarounds\n\nThere are no known workarounds.","origin":"UNSPECIFIED","severity":"CRITICAL","published_at":"2021-12-20T17:53:53.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":9.3,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:N","references":["https://github.com/dexidp/dex/security/advisories/GHSA-m9hp-7r99-94h5","https://github.com/russellhaering/goxmldsig/security/advisories/GHSA-q547-gmf8-8jr7","https://nvd.nist.gov/vuln/detail/CVE-2020-26290","https://github.com/dexidp/dex/commit/324b1c886b407594196113a3dbddebe38eecd4e8","https://github.com/dexidp/dex/releases/tag/v2.27.0","https://github.com/mattermost/xml-roundtrip-validator/blob/master/advisories/unstable-attributes.md","https://github.com/mattermost/xml-roundtrip-validator/blob/master/advisories/unstable-directives.md","https://github.com/mattermost/xml-roundtrip-validator/blob/master/advisories/unstable-elements.md","https://mattermost.com/blog/coordinated-disclosure-go-xml-vulnerabilities/","https://github.com/russellhaering/goxmldsig/commit/f6188febf0c29d7ffe26a0436212b19cb9615e64","https://pkg.go.dev/vuln/GO-2020-0050","https://github.com/advisories/GHSA-m9hp-7r99-94h5"],"source_kind":"github","identifiers":["GHSA-m9hp-7r99-94h5","CVE-2020-26290"],"repository_url":"https://github.com/dexidp/dex","blast_radius":0.0,"created_at":"2022-12-21T16:13:01.190Z","updated_at":"2026-10-16T06:12:35.092Z","epss_percentage":0.00989,"epss_percentile":0.61524,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLW05aHAtN3I5OS05NGg1","html_url":"https://advisories.ecosyste.ms/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLW05aHAtN3I5OS05NGg1","packages":[{"ecosystem":"go","package_name":"github.com/russellhaering/goxmldsig","versions":[{"first_patched_version":"1.1.0","vulnerable_version_range":"\u003c 1.1.0"}],"purl":"pkg:go/github.com%2Frussellhaering%2Fgoxmldsig"},{"ecosystem":"go","package_name":"github.com/dexidp/dex","versions":[{"first_patched_version":"2.27.0","vulnerable_version_range":"\u003c 2.27.0"}],"purl":"pkg:go/github.com%2Fdexidp%2Fdex"}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLW05aHAtN3I5OS05NGg1/related_packages","related_advisories":[]},{"uuid":"MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTJ4MzItam05NS0yY3B4","url":"https://github.com/advisories/GHSA-2x32-jm95-2cpx","title":"Authentication Bypass in dex","description":"A vulnerability exists in the SAML connector of the github.com/dexidp/dex library used to process SAML Signature Validation. This flaw allows an attacker to bypass SAML authentication. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability. This flaw affects dex versions before 2.27.0.","origin":"UNSPECIFIED","severity":"CRITICAL","published_at":"2021-12-20T17:52:12.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":9.8,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","references":["https://github.com/dexidp/dex/security/advisories/GHSA-m9hp-7r99-94h5","https://nvd.nist.gov/vuln/detail/CVE-2020-27847","https://bugzilla.redhat.com/show_bug.cgi?id=1907732","https://mattermost.com/blog/coordinated-disclosure-go-xml-vulnerabilities/","https://github.com/advisories/GHSA-2x32-jm95-2cpx"],"source_kind":"github","identifiers":["GHSA-2x32-jm95-2cpx","CVE-2020-27847"],"repository_url":"https://github.com/dexidp/dex","blast_radius":0.0,"created_at":"2022-12-21T16:13:00.153Z","updated_at":"2026-09-30T09:18:26.597Z","epss_percentage":0.01718,"epss_percentile":0.7652,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTJ4MzItam05NS0yY3B4","html_url":"https://advisories.ecosyste.ms/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTJ4MzItam05NS0yY3B4","packages":[{"ecosystem":"go","package_name":"github.com/dexidp/dex","versions":[{"first_patched_version":"2.27.0","vulnerable_version_range":"\u003c 2.27.0"}],"purl":"pkg:go/github.com%2Fdexidp%2Fdex"}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTJ4MzItam05NS0yY3B4/related_packages","related_advisories":[]}],"docker_usage_url":"https://docker.ecosyste.ms/usage/go/github.com/dexidp/dex","docker_dependents_count":43,"docker_downloads_count":2662530,"usage_url":"https://repos.ecosyste.ms/usage/go/github.com/dexidp/dex","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/go/github.com/dexidp/dex/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-10-19T07:00:24.655Z","issues_count":1252,"pull_requests_count":4287,"avg_time_to_close_issue":18663594.39955605,"avg_time_to_close_pull_request":2889207.250449987,"issues_closed_count":901,"pull_requests_closed_count":3889,"pull_request_authors_count":600,"issue_authors_count":655,"avg_comments_per_issue":3.142172523961661,"avg_comments_per_pull_request":1.1614182411943084,"merged_pull_requests_count":2713,"bot_issues_count":6,"bot_pull_requests_count":2342,"past_year_issues_count":62,"past_year_pull_requests_count":611,"past_year_avg_time_to_close_issue":3386956.3181818184,"past_year_avg_time_to_close_pull_request":646192.3759398496,"past_year_issues_closed_count":22,"past_year_pull_requests_closed_count":532,"past_year_pull_request_authors_count":97,"past_year_issue_authors_count":48,"past_year_avg_comments_per_issue":1.2580645161290323,"past_year_avg_comments_per_pull_request":0.5941080196399345,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":369,"past_year_merged_pull_requests_count":429,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/dexidp%2Fdex/issues","maintainers":[{"login":"nabokihms","count":301,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/nabokihms"},{"login":"sagikazarmark","count":169,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/sagikazarmark"},{"login":"bonifaido","count":21,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/bonifaido"},{"login":"justaugustus","count":7,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/justaugustus"},{"login":"arlac77","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/arlac77"}],"active_maintainers":[{"login":"nabokihms","count":106,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/nabokihms"},{"login":"sagikazarmark","count":5,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/sagikazarmark"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fdexidp%2Fdex/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fdexidp%2Fdex/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fdexidp%2Fdex/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fdexidp%2Fdex/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fdexidp%2Fdex/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fdexidp%2Fdex/codemeta","maintainers":[]}