Speech-to-text, text-to-speech, speaker diarization, speech enhancement, source separation, and VAD using next-gen Kaldi with onnxruntime without Internet connection. Support embedded systems, Android, iOS, HarmonyOS, Raspberry Pi, RISC-V, RK NPU, Axera NPU, Ascend NPU, x86_64 servers, websocket server/client, support 12 programming languages
k2-fsa/sherpa-onnx 的健康指数为 100 分中的 84 分,处于「优秀」区间。 其得分最高的类别是Vitality(96/100),最低的是Security(43/100)。 最近一次更新在 2 天前。 近期的大部分工作由 1 位贡献者完成。
指标归入加权类别,统一采用 1–100 量表。总体分先取类别加权平均,再依据公开记录的分布进行校准,使各等级具有百分位含义;当公开证据触发高风险司法辖区政策时,评级会按政策调整,并设置 34(存在风险)的上限。
每条轴代表一个类别。形状比平均值更重要——健康的对象会填满整个图形,而“一峰一谷”式画像意味着某一维度的优势正掩盖另一维度的风险。
加权总体分 71 经校准后在公布的指数量表上为 84(记录校准 2026-08-02)。
项目是否仍有生命——是否仍在编写代码,是否仍在发布版本?
| 36/36 | 推送新近度 — 最近一次推送于 2 天前 |
| 36/36 | 提交节奏 — 52 周中有 52 周有提交 |
| 18/18 | 提交量 — 最近一年 681 次提交 |
| 10/10 | OpenSSF Scorecard:Maintained — 30 commit(s) and 13 issue activity found in the last 90 days -- score normalized to 10 |
| commits_last_year | 681 |
| human_commit_share | 1 |
| days_since_last_push | 2 |
| active_weeks_last_year | 52 |
| 27/27 | 有发布版本 — 已发布 100 个发布版本 |
| 36/36 | 发布时效 — 最近一次发布版本于 2 天前 |
| 27/27 | 发布节奏 — 约每 7.5 天发布一次 |
| 0/10 | OpenSSF Scorecard:Signed-Releases — Project has not signed or included provenance with any releases. |
| releases_count | 100 |
| latest_release_tag | tauri |
| releases_from_tags | 否 |
| days_since_latest_release | 2 |
| mean_days_between_releases | 7.5 |
项目是否拥有用户、下载量与关注度,并具备欢迎贡献者参与的配置?
| 60/60 | 星标 — 14,436 个星标 |
| 25/25 | 复刻 — 1,653 个复刻 |
| 11.5/15 | 关注者 — 116 位关注者 |
| forks | 1,653 |
| stars | 14,436 |
| watchers | 116 |
| growth_state | unverified |
| growth_factor_pct | 100 |
| growth_unverified_reason | no_history |
| 22.5/22.5 | README |
| 22.5/22.5 | 许可证 — 可识别的许可证(Apache-2.0) |
| 0/18 | CONTRIBUTING 指南 |
| 0/13.5 | 行为准则 |
| 0/7.2 | 议题模板 |
| 0/6.3 | PR 模板 |
| has_readme | 是 |
| has_license | 是 |
| readme_badges | 0 |
| has_contributing | 否 |
| has_issue_template | 否 |
| has_code_of_conduct | 否 |
| readme_badge_services | — |
| has_pull_request_template | 否 |
项目能否在其成员之外延续——巴士系数、响应能力、由谁支持,以及软件包的维护状况?
| 9/54 | 巴士系数 — 1 位贡献者贡献了半数提交 |
| 3.6/22.5 | 提交分布 — 头号贡献者编写了 84% 的提交 |
| 13.5/13.5 | 贡献者广度 — 100 位贡献者 |
| 10/10 | OpenSSF Scorecard:Contributors — project has 9 contributing companies or organizations |
| bus_factor | 1 |
| contributors_sampled | 100 |
| top_contributor_share | 0.841 |
| 26.9/42 | 议题解决 — 64% 的议题已关闭 |
| 28.7/30 | PR 接受 — 已裁定的 PR 中 2,028/2,121 已合并 |
| 13/13 | Newcomer PR acceptance — 30 天内首次贡献者的 PR 已合并 7/7 |
| 4.5/15 | OpenSSF Scorecard:Code-Review — Found 11/30 approved changesets -- score normalized to 3 |
| merged_prs | 2,028 |
| open_issues | 567 |
| closed_issues | 1,009 |
| prs_merged_7d | 3 |
| prs_decided_7d | 3 |
| prs_merged_30d | 44 |
| prs_decided_30d | 46 |
| issue_closed_ratio | 0.64 |
| closed_unmerged_prs | 93 |
| first_time_authors_30d | 5 |
| first_time_prs_merged_30d | 7 |
| first_time_prs_decided_30d | 7 |
| 30/30 | 所有权背书 — 组织持有 |
| 0/20 | 已验证域名 |
| 21.7/25 | 所有者影响力 — k2-fsa 有 1,036 位关注者 |
| 22.8/25 | 既往记录 — 31 个公开仓库,账户约 5 年 |
| followers | 1,036 |
| owner_type | Organization |
| is_verified | 否 |
| owner_login | k2-fsa |
| public_repos | 31 |
| account_age_days | 2,170 |
基础的工程与文档实践是否到位?
| 24/24 | CI 工作流 — 205 个工作流 |
| 24/24 | 存在测试 |
| 16/16 | Linter 配置 — .flake8, .rustfmt.toml |
| 0/9.6 | Pre-commit 钩子 |
| 6.4/6.4 | .editorconfig |
| 6/20 | OpenSSF Scorecard:CI-Tests — 11 out of 30 merged PRs checked by a CI test -- score normalized to 3 |
| has_ci | 是 |
| has_tests | 是 |
| has_editorconfig | 是 |
| has_linter_config | 是 |
| has_precommit_config | 否 |
| 30/30 | README |
| 0/25 | 文档目录 |
| 15/15 | 文档 / 主页站点 — https://k2-fsa.github.io/sherpa/onnx/index.html |
| 10/10 | 仓库描述 |
| 10/10 | 主题标签 — 20 个主题标签 |
| 10/10 | Wiki |
| topics | asr, onnx, windows, linux, macos, cpp, android, ios, raspberry-pi, aarch64, arm32, csharp, dotnet, mfc, speech-to-text, text-to-speech, vits, risc-v, lazarus, object-pascal |
| has_wiki | 是 |
| homepage | https://k2-fsa.github.io/sherpa/onnx/index.html |
| docs_site | https://k2-fsa.github.io/sherpa/onnx/index.html |
| has_readme | 是 |
| has_docs_dir | 否 |
| has_description | 是 |
可见的安全与供应链实践是否稳固,且不存在未解决的高风险司法辖区暴露?
| 0/7.5 | Binary-Artifacts — binaries present in source code |
| 0/7.5 | Branch-Protection — 无数据 |
| 0.8/2.5 | CI-Tests — 11 out of 30 merged PRs checked by a CI test -- score normalized to 3 |
| 0/2.5 | CII-Best-Practices — no effort to earn an OpenSSF best practices badge detected |
| 2.2/7.5 | Code-Review — Found 11/30 approved changesets -- score normalized to 3 |
| 2.5/2.5 | Contributors — project has 9 contributing companies or organizations |
| 10/10 | Dangerous-Workflow — no dangerous workflow patterns detected |
| 0/7.5 | Dependency-Update-Tool — no update tool detected |
| 0/5 | Fuzzing — project is not fuzzed |
| 2.5/2.5 | 许可证 — license file detected |
| 7.5/7.5 | Maintained — 30 commit(s) and 13 issue activity found in the last 90 days -- score normalized to 10 |
| 5/5 | Packaging — packaging workflow detected |
| 0/5 | Pinned-Dependencies — dependency not pinned by hash detected -- score normalized to 0 |
| 0/5 | SAST — SAST tool is not run on all commits -- score normalized to 0 |
| 0/5 | Security-Policy — security policy file not detected |
| 0/7.5 | Signed-Releases — Project has not signed or included provenance with any releases. |
| 0/7.5 | Token-Permissions — detected GitHub workflow tokens with excessive permissions |
| 0/7.5 | Vulnerabilities — 28 existing vulnerabilities detected |
| source | openssf_scorecard |
| checks_evaluated | 17 |
| scorecard_version | v5.5.0 |
| checks_inconclusive | 1 |
| scorecard_aggregate | 3.1 |
| 26.6/35 | 直接依赖不含已知公告 — 1 个受影响:anyhow 1.0.102 (unknown) |
| 0/25 | 间接依赖不含已知公告 — 在此范围内,传递依赖集合无法与开发和测试依赖区分 |
| 40/40 | 没有长期未处理的公告 — 没有公告公开超过 90 天 |
| source | osv |
| advisories | 37 |
| affected_packages | 27 |
| assessed_packages | 625 |
| unassessed_packages | 27 |
| affected_by_severity | high 4, moderate 3, low 2, unknown 18 |
| direct_affected_packages | 1 |
该仓库在多大程度上具备与 AI 编码代理协同开发与维护的条件?权重刻意设小(4%):代理工具链是一项真实的维护信号,但完全不具备的仓库仍可达到 100/100。
| 0/45 | 代理指令 — 没有 CLAUDE.md / AGENTS.md / 编辑器规则 |
| 15/15 | 机器可读文档(llms.txt) — 项目网站提供 llms.txt(https://decibri.dev/llms.txt) |
| 40/40 | 可读的提交历史 — 100 次人类提交中有 95 次说明了意图(结构化标题或解释性正文) |
| has_llms_txt | 是 |
| llms_txt_url | https://decibri.dev/llms.txt |
| legible_history_share | 0.95 |
| agent_instruction_files | — |
| agent_instruction_max_bytes | — |
| 18/18 | 一条命令的引导启动 — c-api-examples/Makefile, ffmpeg-examples/Makefile |
| 22/22 | 自动化测试 |
| 11/11 | Lint / 格式化配置 — .flake8, .rustfmt.toml |
| 11/11 | 静态类型检查 — scripts/node-addon-api/tsconfig.json |
| 10/10 | 可复现环境 — lockfile |
| 0/10 | 已体现的代理实践 — 最近 100 次提交中没有代理编写的提交 |
| 0/8 | 自动化维护 — 未观察到自动依赖更新 |
| 0/10 | OpenSSF Scorecard:Pinned-Dependencies — dependency not pinned by hash detected -- score normalized to 0 |
| has_nix | 否 |
| has_tests | 是 |
| lockfiles | Cargo.lock, go.sum |
| has_dockerfile | 否 |
| typed_language | 是 |
| bootstrap_files | c-api-examples/Makefile, ffmpeg-examples/Makefile |
| has_devcontainer | 否 |
| has_linter_config | 是 |
| typecheck_configs | scripts/node-addon-api/tsconfig.json |
| agent_commit_share | 0 |
| toolchain_manifests | android/SherpaOnnx/app/build.gradle, android/SherpaOnnx/build.gradle, android/SherpaOnnx2Pass/app/build.gradle, android/SherpaOnnx2Pass/build.gradle, android/SherpaOnnxAar/build.gradle.kts, android/SherpaOnnxAar/sherpa_onnx/build.gradle.kts, android/SherpaOnnxAudioTagging/app/build.gradle.kts, android/SherpaOnnxAudioTagging/build.gradle.kts, android/SherpaOnnxAudioTaggingWearOs/app/build.gradle.kts, android/SherpaOnnxAudioTaggingWearOs/build.gradle.kts, android/SherpaOnnxJavaDemo/app/build.gradle, android/SherpaOnnxJavaDemo/build.gradle, android/SherpaOnnxKws/app/build.gradle, android/SherpaOnnxKws/build.gradle, android/SherpaOnnxSimulateStreamingAsr/app/build.gradle.kts, android/SherpaOnnxSimulateStreamingAsr/build.gradle.kts, android/SherpaOnnxSimulateStreamingAsrWearOs/app/build.gradle.kts, android/SherpaOnnxSimulateStreamingAsrWearOs/build.gradle.kts, android/SherpaOnnxSpeakerDiarization/app/build.gradle.kts, android/SherpaOnnxSpeakerDiarization/build.gradle.kts, android/SherpaOnnxSpeakerIdentification/app/build.gradle.kts, android/SherpaOnnxSpeakerIdentification/build.gradle.kts, android/SherpaOnnxSpokenLanguageIdentification/app/build.gradle.kts, android/SherpaOnnxSpokenLanguageIdentification/build.gradle.kts, android/SherpaOnnxTts/app/build.gradle, android/SherpaOnnxTts/build.gradle, android/SherpaOnnxTtsEngine/app/build.gradle.kts, android/SherpaOnnxTtsEngine/build.gradle.kts, android/SherpaOnnxVad/app/build.gradle, android/SherpaOnnxVad/build.gradle, android/SherpaOnnxVadAsr/app/build.gradle, android/SherpaOnnxVadAsr/build.gradle, android/SherpaOnnxWebSocket/app/build.gradle, android/SherpaOnnxWebSocket/build.gradle, dotnet-examples/Common/Common.csproj, dotnet-examples/keyword-spotting-from-files/keyword-spotting-from-files.csproj, dotnet-examples/keyword-spotting-from-microphone/keyword-spotting-from-microphone.csproj, dotnet-examples/kitten-tts-play/kitten-tts-play.csproj, dotnet-examples/kitten-tts/kitten-tts.csproj, dotnet-examples/kokoro-tts-play/kokoro-tts-play.csproj, dotnet-examples/kokoro-tts/kokoro-tts.csproj, dotnet-examples/non-streaming-canary-decode-files/non-streaming-canary-decode-files.csproj, dotnet-examples/non-streaming-cohere-transcribe-decode-files/non-streaming-cohere-transcribe-decode-files.csproj, dotnet-examples/non-streaming-funasr-nano-decode-files/non-streaming-funasr-nano-decode-files.csproj, dotnet-examples/non-streaming-moonshine-v2-decode-files/non-streaming-moonshine-v2-decode-files.csproj, dotnet-examples/non-streaming-qwen3-asr-decode-files/non-streaming-qwen3-asr-decode-files.csproj, dotnet-examples/offline-audio-tagging/offline-audio-tagging.csproj, dotnet-examples/offline-decode-files/offline-decode-files.csproj, dotnet-examples/offline-punctuation/offline-punctuation.csproj, dotnet-examples/offline-speaker-diarization/offline-speaker-diarization.csproj, dotnet-examples/offline-tts-play/offline-tts-play.csproj, dotnet-examples/offline-tts/offline-tts.csproj, dotnet-examples/online-decode-files/online-decode-files.csproj, dotnet-examples/online-punctuation/online-punctuation.csproj, dotnet-examples/pocket-tts-zero-shot-play/pocket-tts-zero-shot-play.csproj, dotnet-examples/pocket-tts-zero-shot/pocket-tts-zero-shot.csproj, dotnet-examples/source-separation-spleeter/source-separation-spleeter.csproj, dotnet-examples/source-separation-uvr/source-separation-uvr.csproj, dotnet-examples/speaker-identification/speaker-identification.csproj, dotnet-examples/speech-enhancement-dpdfnet/speech-enhancement-dpdfnet.csproj, dotnet-examples/speech-enhancement-gtcrn/speech-enhancement-gtcrn.csproj, dotnet-examples/speech-recognition-from-microphone/speech-recognition-from-microphone.csproj, dotnet-examples/spoken-language-identification/spoken-language-identification.csproj, dotnet-examples/streaming-hlg-decoding/streaming-hlg-decoding.csproj, dotnet-examples/streaming-speech-enhancement-dpdfnet/streaming-speech-enhancement-dpdfnet.csproj, dotnet-examples/streaming-speech-enhancement-gtcrn/streaming-speech-enhancement-gtcrn.csproj, dotnet-examples/supertonic-tts/supertonic-tts.csproj, dotnet-examples/vad-non-streaming-asr-paraformer/vad-non-streaming-asr-paraformer.csproj, dotnet-examples/vad-non-streaming-funasr-nano/vad-non-streaming-funasr-nano.csproj, dotnet-examples/vad-non-streaming-qwen3-asr/vad-non-streaming-qwen3-asr.csproj, dotnet-examples/version-test/version-test.csproj, dotnet-examples/zipvoice-tts-play/zipvoice-tts-play.csproj, dotnet-examples/zipvoice-tts/zipvoice-tts.csproj, flutter-examples/hello_world/android/app/build.gradle.kts, flutter-examples/hello_world/android/build.gradle.kts, flutter-examples/offline-punctuation/android/app/build.gradle.kts, flutter-examples/offline-punctuation/android/build.gradle.kts, flutter-examples/online-punctuation/android/app/build.gradle.kts, flutter-examples/online-punctuation/android/build.gradle.kts, flutter-examples/streaming_asr/android/app/build.gradle, flutter-examples/streaming_asr/android/build.gradle, flutter-examples/tts/android/app/build.gradle, flutter-examples/tts/android/build.gradle, flutter-examples/vad-from-file/android/app/build.gradle.kts, flutter-examples/vad-from-file/android/build.gradle.kts, flutter-examples/vad-from-microphone/android/app/build.gradle.kts, flutter-examples/vad-from-microphone/android/build.gradle.kts, flutter-examples/vad-non-streaming-asr-from-file/android/app/build.gradle.kts, flutter-examples/vad-non-streaming-asr-from-file/android/build.gradle.kts, flutter-examples/vad-non-streaming-asr-from-microphone/android/app/build.gradle.kts, flutter-examples/vad-non-streaming-asr-from-microphone/android/build.gradle.kts, flutter/sherpa_onnx_android/android/build.gradle, flutter/sherpa_onnx_android_arm64/android/build.gradle, flutter/sherpa_onnx_android_armeabi/android/build.gradle, flutter/sherpa_onnx_android_x86/android/build.gradle, flutter/sherpa_onnx_android_x86_64/android/build.gradle, go-api-examples/add-punctuation-online/go.mod, go-api-examples/add-punctuation/go.mod, go-api-examples/audio-tagging/go.mod, go-api-examples/keyword-spotting-from-file/go.mod, go-api-examples/non-streaming-canary-decode-files/go.mod, go-api-examples/non-streaming-cohere-transcribe-decode-files/go.mod, go-api-examples/non-streaming-decode-files/go.mod, go-api-examples/non-streaming-fire-red-asr-ctc-decode-files/go.mod, go-api-examples/non-streaming-funasr-nano-decode-files/go.mod, go-api-examples/non-streaming-medasr-ctc-decode-files/go.mod, go-api-examples/non-streaming-moonshine-v2-decode-files/go.mod, go-api-examples/non-streaming-omnilingual-asr-ctc-decode-files/go.mod, go-api-examples/non-streaming-qwen3-asr-decode-files/go.mod, go-api-examples/non-streaming-speaker-diarization/go.mod, go-api-examples/non-streaming-tts/go.mod, go-api-examples/offline-tts-play/go.mod, go-api-examples/real-time-speech-recognition-from-microphone/go.mod, go-api-examples/source-separation/go.mod, go-api-examples/speaker-identification/go.mod, go-api-examples/speech-enhancement-dpdfnet/go.mod, go-api-examples/speech-enhancement-gtcrn/go.mod, go-api-examples/streaming-decode-files/go.mod, go-api-examples/streaming-hlg-decoding/go.mod, go-api-examples/streaming-speech-enhancement-dpdfnet/go.mod, go-api-examples/streaming-speech-enhancement-gtcrn/go.mod, go-api-examples/supertonic-tts/go.mod, go-api-examples/vad-asr-paraformer/go.mod, go-api-examples/vad-asr-whisper/go.mod, go-api-examples/vad-speaker-identification/go.mod, go-api-examples/vad-spoken-language-identification/go.mod, go-api-examples/vad/go.mod, go-api-examples/zero-shot-pocket-tts-play/go.mod, go-api-examples/zero-shot-pocket-tts/go.mod, go-api-examples/zero-shot-zipvoice-tts-play/go.mod, go-api-examples/zero-shot-zipvoice-tts/go.mod, java-api-examples/gradle-examples/build.gradle, java-api-examples/gradle-kts-examples/build.gradle.kts, java-api-examples/maven-examples/pom.xml, pom.xml, rust-api-examples/Cargo.toml, scripts/dotnet/examples/Common.csproj, scripts/go/_internal/add-punctuation-online/go.mod, scripts/go/_internal/add-punctuation/go.mod, scripts/go/_internal/audio-tagging/go.mod, scripts/go/_internal/go.mod, scripts/go/_internal/keyword-spotting-from-file/go.mod, scripts/go/_internal/non-streaming-canary-decode-files/go.mod, scripts/go/_internal/non-streaming-cohere-transcribe-decode-files/go.mod, scripts/go/_internal/non-streaming-decode-files/go.mod, scripts/go/_internal/non-streaming-fire-red-asr-ctc-decode-files/go.mod, scripts/go/_internal/non-streaming-funasr-nano-decode-files/go.mod, scripts/go/_internal/non-streaming-medasr-ctc-decode-files/go.mod, scripts/go/_internal/non-streaming-moonshine-v2-decode-files/go.mod, scripts/go/_internal/non-streaming-omnilingual-asr-ctc-decode-files/go.mod, scripts/go/_internal/non-streaming-qwen3-asr-decode-files/go.mod, scripts/go/_internal/non-streaming-speaker-diarization/go.mod, scripts/go/_internal/non-streaming-tts/go.mod, scripts/go/_internal/offline-tts-play/go.mod, scripts/go/_internal/real-time-speech-recognition-from-microphone/go.mod, scripts/go/_internal/source-separation/go.mod, scripts/go/_internal/speaker-identification/go.mod, scripts/go/_internal/speech-enhancement-dpdfnet/go.mod, scripts/go/_internal/speech-enhancement-gtcrn/go.mod, scripts/go/_internal/streaming-decode-files/go.mod, scripts/go/_internal/streaming-hlg-decoding/go.mod, scripts/go/_internal/streaming-speech-enhancement-dpdfnet/go.mod, scripts/go/_internal/streaming-speech-enhancement-gtcrn/go.mod, scripts/go/_internal/supertonic-tts/go.mod, scripts/go/_internal/vad-asr-paraformer/go.mod, scripts/go/_internal/vad-asr-whisper/go.mod, scripts/go/_internal/vad-speaker-identification/go.mod, scripts/go/_internal/vad-spoken-language-identification/go.mod, scripts/go/_internal/vad/go.mod, scripts/go/_internal/version/go.mod, scripts/go/_internal/zero-shot-pocket-tts-play/go.mod, scripts/go/_internal/zero-shot-pocket-tts/go.mod, scripts/go/_internal/zero-shot-zipvoice-tts-play/go.mod, scripts/go/_internal/zero-shot-zipvoice-tts/go.mod, sherpa-onnx/java-api/pom.xml, sherpa-onnx/rust/Cargo.toml, sherpa-onnx/rust/sherpa-onnx-sys/Cargo.toml, sherpa-onnx/rust/sherpa-onnx/Cargo.toml, tauri-examples/non-streaming-speech-recognition-from-file/src-tauri/Cargo.toml, tauri-examples/non-streaming-speech-recognition-from-microphone/src-tauri/Cargo.toml |
| dependency_bot_commit_share | 0 |
| 45/45 | 可类型检查的代码 — C++(静态类型) |
| 54.8/55 | 可控的文件大小 — 采样的 2,981 个源文件中有 10 个超过 60KB |
| primary_language | C++ |
| largest_source_bytes | 167,345 |
| source_files_sampled | 2,981 |
| oversized_source_files | 10 |
| 0/40 | API 模式(OpenAPI/GraphQL/proto) — 不适用于此类软件 |
| 0/20 | MCP 服务器 — 不适用于此类软件 |
| 40/40 | 可运行示例 — example, examples |
| example_dirs | example, examples |
| has_mcp_signal | 否 |
| api_schema_files | — |
| interfaces_expected_of | — |
每颗 star 和每个 fork 的添加时间,来自 GitHub 并按天汇总。累计增长位于其构成来源——每日新增——的正上方,二者可相互对照:稳定的自然增长与短暂的突增形态截然不同。当这一差别可被衡量时,它会作为增长真实性予以报告。
仅显示最近的历史——该仓库超出采集窗口,因此未采集最早的历史记录。
每个点涵盖 2 天。
来自开源项目 OpenSSF Scorecard 的独立、工具无关的安全评估。每项检查奖励的是安全实践本身,而非特定供应商的工具。Scorecard 无法判定的检查项标记为 不适用,并从安全评分中剔除(绝不按零分计)。
| 0 | Binary-Artifacts | binaries present in source code |
| 不适用 | Branch-Protection | internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md |
| 3 | CI-Tests | 11 out of 30 merged PRs checked by a CI test -- score normalized to 3 |
| 0 | CII-Best-Practices | no effort to earn an OpenSSF best practices badge detected |
| 3 | Code-Review | Found 11/30 approved changesets -- score normalized to 3 |
| 10 | Contributors | project has 9 contributing companies or organizations |
| 10 | Dangerous-Workflow | no dangerous workflow patterns detected |
| 0 | Dependency-Update-Tool | no update tool detected |
| 0 | Fuzzing | project is not fuzzed |
| 10 | License | license file detected |
| 10 | Maintained | 30 commit(s) and 13 issue activity found in the last 90 days -- score normalized to 10 |
| 10 | Packaging | packaging workflow detected |
| 0 | Pinned-Dependencies | dependency not pinned by hash detected -- score normalized to 0 |
| 0 | SAST | SAST tool is not run on all commits -- score normalized to 0 |
| 0 | Security-Policy | security policy file not detected |
| 0 | Signed-Releases | Project has not signed or included provenance with any releases. |
| 0 | Token-Permissions | detected GitHub workflow tokens with excessive permissions |
| 0 | Vulnerabilities | 28 existing vulnerabilities detected |
| 注册表 | 软件包 | 版本约束 | 清单文件 |
|---|---|---|---|
| npm | node-cpal | ^0.1.1 | nodejs-addon-examples/package.json |
| npm | sherpa-onnx-node | ^1.13.6 | nodejs-addon-examples/package.json |
| npm | mic | ^2.1.2 | nodejs-examples/package.json |
| npm | naudiodon2 | ^2.4.0 | nodejs-examples/package.json |
| npm | sherpa-onnx | ^1.13.6 | nodejs-examples/package.json |
| npm | wav | ^1.0.2 | nodejs-examples/package.json |
| crates.io | anyhow | 1.0 | rust-api-examples/Cargo.toml |
| crates.io | clap | 4.5 | rust-api-examples/Cargo.toml |
| crates.io | sherpa-onnx | 1.13.6 | rust-api-examples/Cargo.toml |
| crates.io | serde_json | 1.0 | rust-api-examples/Cargo.toml |
| crates.io | cpal | 0.16 | rust-api-examples/Cargo.toml |
| crates.io | ctrlc | 3.4 | rust-api-examples/Cargo.toml |
| NuGet | org.k2fsa.sherpa.onnx | * | dotnet-examples/Common/Common.csproj |
| NuGet | PortAudioSharp2 | * | dotnet-examples/keyword-spotting-from-microphone/keyword-spotting-from-microphone.csproj |
| NuGet | PortAudioSharp2 | * | dotnet-examples/kitten-tts-play/kitten-tts-play.csproj |
| NuGet | PortAudioSharp2 | * | dotnet-examples/kokoro-tts-play/kokoro-tts-play.csproj |
| NuGet | CommandLineParser | 2.9.1 | dotnet-examples/offline-decode-files/offline-decode-files.csproj |
| NuGet | CommandLineParser | 2.9.1 | dotnet-examples/offline-tts-play/offline-tts-play.csproj |
| NuGet | PortAudioSharp2 | * | dotnet-examples/offline-tts-play/offline-tts-play.csproj |
| NuGet | CommandLineParser | 2.9.1 | dotnet-examples/offline-tts/offline-tts.csproj |
| NuGet | CommandLineParser | 2.9.1 | dotnet-examples/online-decode-files/online-decode-files.csproj |
来自 GitHub 依赖图的完整解析依赖集合:17 个直接依赖与 635 个间接(传递)软件包。仓库提交锁文件时,传递闭包才是完整的。
| 注册表 | 软件包 | 版本 | 关系 |
|---|---|---|---|
| crates.io | anyhow | 1.0.102 | 直接 |
| crates.io | clap | 4.5.60 | 直接 |
| crates.io | cpal | 0.16.0 | 直接 |
| crates.io | ctrlc | 3.5.2 | 直接 |
| crates.io | serde_json | — | 直接 |
| crates.io | serde_json | 1.0.149 | 直接 |
| crates.io | sherpa-onnx | 1.12.39 | 直接 |
| crates.io | sherpa-onnx | 1.13.6 | 直接 |
| npm | mic | ^2.1.2 | 直接 |
| npm | naudiodon2 | ^2.4.0 | 直接 |
| npm | node-cpal | ^0.1.1 | 直接 |
| npm | sherpa-onnx | ^1.13.6 | 直接 |
| npm | sherpa-onnx-node | ^1.13.6 | 直接 |
| npm | wav | ^1.0.2 | 直接 |
| NuGet | CommandLineParser | 2.9.1 | 直接 |
| NuGet | org.k2fsa.sherpa.onnx | — | 直接 |
| NuGet | PortAudioSharp2 | — | 直接 |
| crates.io | adler2 | 2.0.1 | 间接 |
| crates.io | aho-corasick | 1.1.4 | 间接 |
| crates.io | alloc-no-stdlib | 2.0.4 | 间接 |
| crates.io | alloc-stdlib | 0.2.2 | 间接 |
| crates.io | alsa | 0.9.1 | 间接 |
| crates.io | alsa-sys | 0.3.1 | 间接 |
| crates.io | android_system_properties | 0.1.5 | 间接 |
| crates.io | anstream | 0.6.21 | 间接 |
| crates.io | anstyle | 1.0.14 | 间接 |
| crates.io | anstyle-parse | 0.2.7 | 间接 |
| crates.io | anstyle-query | 1.1.5 | 间接 |
| crates.io | anstyle-wincon | 3.0.11 | 间接 |
| crates.io | arrayvec | 0.7.6 | 间接 |
| crates.io | atk | 0.18.2 | 间接 |
| crates.io | atk-sys | 0.18.2 | 间接 |
| crates.io | atomic-waker | 1.1.2 | 间接 |
| crates.io | autocfg | 1.5.0 | 间接 |
| crates.io | base64 | 0.21.7 | 间接 |
| crates.io | base64 | 0.22.1 | 间接 |
| crates.io | bit-set | 0.8.0 | 间接 |
| crates.io | bit-vec | 0.8.0 | 间接 |
| crates.io | bitflags | 1.3.2 | 间接 |
| crates.io | bitflags | 2.11.0 | 间接 |
| crates.io | bitflags | 2.11.1 | 间接 |
| crates.io | block-buffer | 0.10.4 | 间接 |
| crates.io | block2 | 0.6.2 | 间接 |
| crates.io | brotli | 8.0.2 | 间接 |
| crates.io | brotli-decompressor | 5.0.0 | 间接 |
| crates.io | bumpalo | 3.20.2 | 间接 |
| crates.io | bytemuck | 1.25.0 | 间接 |
| crates.io | byteorder | 1.5.0 | 间接 |
| crates.io | bytes | 1.11.1 | 间接 |
| crates.io | bzip2 | — | 间接 |
| crates.io | bzip2 | 0.4.4 | 间接 |
| crates.io | bzip2-sys | 0.1.13+1.0.8 | 间接 |
| crates.io | cairo-rs | 0.18.5 | 间接 |
| crates.io | cairo-sys-rs | 0.18.2 | 间接 |
| crates.io | camino | 1.2.2 | 间接 |
| crates.io | cargo-platform | 0.1.9 | 间接 |
| crates.io | cargo_metadata | 0.19.2 | 间接 |
| crates.io | cargo_toml | 0.22.3 | 间接 |
| crates.io | cc | 1.2.57 | 间接 |
| crates.io | cc | 1.2.60 | 间接 |
| crates.io | cesu8 | 1.1.0 | 间接 |
| crates.io | cfb | 0.7.3 | 间接 |
| crates.io | cfg-expr | 0.15.8 | 间接 |
| crates.io | cfg-if | 1.0.4 | 间接 |
| crates.io | cfg_aliases | 0.2.1 | 间接 |
| crates.io | chrono | 0.4.44 | 间接 |
| crates.io | clap_builder | 4.5.60 | 间接 |
| crates.io | clap_derive | 4.5.55 | 间接 |
| crates.io | clap_lex | 1.1.0 | 间接 |
| crates.io | colorchoice | 1.0.5 | 间接 |
| crates.io | combine | 4.6.7 | 间接 |
| crates.io | convert_case | 0.4.0 | 间接 |
| crates.io | cookie | 0.18.1 | 间接 |
| crates.io | core-foundation | 0.10.1 | 间接 |
| crates.io | core-foundation-sys | 0.8.7 | 间接 |
| crates.io | core-graphics | 0.25.0 | 间接 |
| crates.io | core-graphics-types | 0.2.0 | 间接 |
| crates.io | coreaudio-rs | 0.13.0 | 间接 |
| crates.io | cpufeatures | 0.2.17 | 间接 |
| crates.io | crc32fast | 1.5.0 | 间接 |
| crates.io | crossbeam-channel | 0.5.15 | 间接 |
| crates.io | crossbeam-utils | 0.8.21 | 间接 |
| crates.io | crypto-common | 0.1.7 | 间接 |
| crates.io | cssparser | 0.29.6 | 间接 |
| crates.io | cssparser | 0.36.0 | 间接 |
| crates.io | cssparser-macros | 0.6.1 | 间接 |
| crates.io | ctor | 0.2.9 | 间接 |
| crates.io | darling | 0.23.0 | 间接 |
| crates.io | darling_core | 0.23.0 | 间接 |
| crates.io | darling_macro | 0.23.0 | 间接 |
| crates.io | dasp_sample | 0.11.0 | 间接 |
| crates.io | deranged | 0.5.8 | 间接 |
| crates.io | derive_more | 0.99.20 | 间接 |
| crates.io | derive_more | 2.1.1 | 间接 |
| crates.io | derive_more-impl | 2.1.1 | 间接 |
| crates.io | digest | 0.10.7 | 间接 |
| crates.io | dirs | 6.0.0 | 间接 |
| crates.io | dirs-sys | 0.5.0 | 间接 |
| crates.io | dispatch2 | 0.3.0 | 间接 |
| crates.io | dispatch2 | 0.3.1 | 间接 |
| crates.io | displaydoc | 0.2.5 | 间接 |
| crates.io | dlopen2 | 0.8.2 | 间接 |
| crates.io | dlopen2_derive | 0.4.3 | 间接 |
| crates.io | dom_query | 0.27.0 | 间接 |
| crates.io | dpi | 0.1.2 | 间接 |
| crates.io | dtoa | 1.0.11 | 间接 |
| crates.io | dtoa-short | 0.3.5 | 间接 |
| crates.io | dunce | 1.0.5 | 间接 |
| crates.io | dyn-clone | 1.0.20 | 间接 |
| crates.io | embed-resource | 3.0.8 | 间接 |
| crates.io | embed_plist | 1.2.2 | 间接 |
| crates.io | encoding_rs | 0.8.35 | 间接 |
| crates.io | equivalent | 1.0.2 | 间接 |
| crates.io | erased-serde | 0.4.10 | 间接 |
| crates.io | errno | 0.3.14 | 间接 |
| crates.io | extended | 0.1.0 | 间接 |
| crates.io | fastrand | 2.4.1 | 间接 |
| crates.io | fdeflate | 0.3.7 | 间接 |
| crates.io | field-offset | 0.3.6 | 间接 |
| crates.io | filetime | 0.2.27 | 间接 |
| crates.io | find-msvc-tools | 0.1.9 | 间接 |
| crates.io | flate2 | 1.1.9 | 间接 |
| crates.io | fnv | 1.0.7 | 间接 |
| crates.io | foldhash | 0.1.5 | 间接 |
| crates.io | foldhash | 0.2.0 | 间接 |
| crates.io | foreign-types | 0.5.0 | 间接 |
| crates.io | foreign-types-macros | 0.2.3 | 间接 |
| crates.io | foreign-types-shared | 0.3.1 | 间接 |
| crates.io | form_urlencoded | 1.2.2 | 间接 |
| crates.io | futf | 0.1.5 | 间接 |
| crates.io | futures-channel | 0.3.32 | 间接 |
| crates.io | futures-core | 0.3.32 | 间接 |
| crates.io | futures-executor | 0.3.32 | 间接 |
| crates.io | futures-io | 0.3.32 | 间接 |
| crates.io | futures-macro | 0.3.32 | 间接 |
| crates.io | futures-sink | 0.3.32 | 间接 |
| crates.io | futures-task | 0.3.32 | 间接 |
| crates.io | futures-util | 0.3.32 | 间接 |
| crates.io | fxhash | 0.2.1 | 间接 |
| crates.io | gdk | 0.18.2 | 间接 |
| crates.io | gdk-pixbuf | 0.18.5 | 间接 |
| crates.io | gdk-pixbuf-sys | 0.18.0 | 间接 |
| crates.io | gdk-sys | 0.18.2 | 间接 |
| crates.io | gdkwayland-sys | 0.18.2 | 间接 |
| crates.io | gdkx11 | 0.18.2 | 间接 |
| crates.io | gdkx11-sys | 0.18.2 | 间接 |
| crates.io | generic-array | 0.14.7 | 间接 |
| crates.io | getrandom | 0.1.16 | 间接 |
| crates.io | getrandom | 0.2.17 | 间接 |
| crates.io | getrandom | 0.3.4 | 间接 |
| crates.io | getrandom | 0.4.2 | 间接 |
| crates.io | gio | 0.18.4 | 间接 |
| crates.io | gio-sys | 0.18.1 | 间接 |
| crates.io | glib | 0.18.5 | 间接 |
| crates.io | glib-macros | 0.18.5 | 间接 |
| crates.io | glib-sys | 0.18.1 | 间接 |
| crates.io | glob | 0.3.3 | 间接 |
| crates.io | gobject-sys | 0.18.0 | 间接 |
| crates.io | gtk | 0.18.2 | 间接 |
| crates.io | gtk-sys | 0.18.2 | 间接 |
| crates.io | gtk3-macros | 0.18.2 | 间接 |
| crates.io | hashbrown | 0.12.3 | 间接 |
| crates.io | hashbrown | 0.15.5 | 间接 |
| crates.io | hashbrown | 0.16.1 | 间接 |
| crates.io | hashbrown | 0.17.0 | 间接 |
| crates.io | heck | 0.4.1 | 间接 |
| crates.io | heck | 0.5.0 | 间接 |
| crates.io | hex | 0.4.3 | 间接 |
| crates.io | html5ever | 0.29.1 | 间接 |
| crates.io | html5ever | 0.38.0 | 间接 |
| crates.io | http | 1.4.0 | 间接 |
| crates.io | http-body | 1.0.1 | 间接 |
| crates.io | http-body-util | 0.1.3 | 间接 |
| crates.io | http-range | 0.1.5 | 间接 |
| crates.io | httparse | 1.10.1 | 间接 |
| crates.io | hyper | 1.9.0 | 间接 |
| crates.io | hyper-util | 0.1.20 | 间接 |
| crates.io | iana-time-zone | 0.1.65 | 间接 |
| crates.io | iana-time-zone-haiku | 0.1.2 | 间接 |
| crates.io | ico | 0.5.0 | 间接 |
| crates.io | icu_collections | 2.1.1 | 间接 |
| crates.io | icu_collections | 2.2.0 | 间接 |
| crates.io | icu_locale_core | 2.1.1 | 间接 |
| crates.io | icu_locale_core | 2.2.0 | 间接 |
| crates.io | icu_normalizer | 2.1.1 | 间接 |
| crates.io | icu_normalizer | 2.2.0 | 间接 |
| crates.io | icu_normalizer_data | 2.1.1 | 间接 |
| crates.io | icu_normalizer_data | 2.2.0 | 间接 |
| crates.io | icu_properties | 2.1.2 | 间接 |
| crates.io | icu_properties | 2.2.0 | 间接 |
| crates.io | icu_properties_data | 2.1.2 | 间接 |
| crates.io | icu_properties_data | 2.2.0 | 间接 |
| crates.io | icu_provider | 2.1.1 | 间接 |
| crates.io | icu_provider | 2.2.0 | 间接 |
| crates.io | id-arena | 2.3.0 | 间接 |
| crates.io | ident_case | 1.0.1 | 间接 |
| crates.io | idna | 1.1.0 | 间接 |
| crates.io | idna_adapter | 1.2.1 | 间接 |
| crates.io | indexmap | 1.9.3 | 间接 |
| crates.io | indexmap | 2.13.0 | 间接 |
| crates.io | indexmap | 2.14.0 | 间接 |
| crates.io | infer | 0.19.0 | 间接 |
| crates.io | ipnet | 2.12.0 | 间接 |
| crates.io | iri-string | 0.7.12 | 间接 |
| crates.io | is-docker | 0.2.0 | 间接 |
| crates.io | is-wsl | 0.4.0 | 间接 |
| crates.io | is_terminal_polyfill | 1.70.2 | 间接 |
| crates.io | itoa | 1.0.17 | 间接 |
| crates.io | itoa | 1.0.18 | 间接 |
| crates.io | javascriptcore-rs | 1.1.2 | 间接 |
| crates.io | javascriptcore-rs-sys | 1.1.1 | 间接 |
| crates.io | jni | 0.21.1 | 间接 |
| crates.io | jni-sys | 0.3.0 | 间接 |
| crates.io | jni-sys | 0.3.1 | 间接 |
| crates.io | jni-sys | 0.4.1 | 间接 |
| crates.io | jni-sys-macros | 0.4.1 | 间接 |
| crates.io | js-sys | 0.3.89 | 间接 |
| crates.io | js-sys | 0.3.95 | 间接 |
| crates.io | json-patch | 3.0.1 | 间接 |
| crates.io | jsonptr | 0.6.3 | 间接 |
| crates.io | keyboard-types | 0.7.0 | 间接 |
| crates.io | kuchikiki | 0.8.8-speedreader | 间接 |
| crates.io | lazy_static | 1.5.0 | 间接 |
| crates.io | leb128fmt | 0.1.0 | 间接 |
| crates.io | libappindicator | 0.9.0 | 间接 |
| crates.io | libappindicator-sys | 0.9.0 | 间接 |
| crates.io | libc | 0.2.182 | 间接 |
| crates.io | libc | 0.2.185 | 间接 |
| crates.io | libloading | 0.7.4 | 间接 |
| crates.io | libredox | 0.1.14 | 间接 |
| crates.io | libredox | 0.1.16 | 间接 |
| crates.io | linux-raw-sys | 0.12.1 | 间接 |
| crates.io | litemap | 0.8.1 | 间接 |
| crates.io | litemap | 0.8.2 | 间接 |
| crates.io | lock_api | 0.4.14 | 间接 |
| crates.io | log | 0.4.29 | 间接 |
| crates.io | mac | 0.1.1 | 间接 |
| crates.io | mach2 | 0.4.3 | 间接 |
| crates.io | markup5ever | 0.14.1 | 间接 |
| crates.io | markup5ever | 0.38.0 | 间接 |
| crates.io | match_token | 0.1.0 | 间接 |
| crates.io | matches | 0.1.10 | 间接 |
| crates.io | memchr | 2.8.0 | 间接 |
| crates.io | memoffset | 0.9.1 | 间接 |
| crates.io | mime | 0.3.17 | 间接 |
| crates.io | miniz_oxide | 0.8.9 | 间接 |
| crates.io | mio | 1.2.0 | 间接 |
| crates.io | muda | 0.17.2 | 间接 |
| crates.io | ndk | 0.9.0 | 间接 |
| crates.io | ndk-context | 0.1.1 | 间接 |
| crates.io | ndk-sys | 0.6.0+11769913 | 间接 |
| crates.io | new_debug_unreachable | 1.0.6 | 间接 |
| crates.io | nix | 0.31.2 | 间接 |
| crates.io | nodrop | 0.1.14 | 间接 |
| crates.io | num-conv | 0.2.1 | 间接 |
| crates.io | num-derive | 0.4.2 | 间接 |
| crates.io | num-traits | 0.2.19 | 间接 |
| crates.io | num_enum | 0.7.5 | 间接 |
| crates.io | num_enum | 0.7.6 | 间接 |
| crates.io | num_enum_derive | 0.7.5 | 间接 |
| crates.io | num_enum_derive | 0.7.6 | 间接 |
| crates.io | objc2 | 0.6.3 | 间接 |
| crates.io | objc2 | 0.6.4 | 间接 |
| crates.io | objc2-app-kit | 0.3.2 | 间接 |
| crates.io | objc2-audio-toolbox | 0.3.2 | 间接 |
| crates.io | objc2-core-audio | 0.3.2 | 间接 |
| crates.io | objc2-core-audio-types | 0.3.2 | 间接 |
| crates.io | objc2-core-foundation | 0.3.2 | 间接 |
| crates.io | objc2-core-graphics | 0.3.2 | 间接 |
| crates.io | objc2-encode | 4.1.0 | 间接 |
| crates.io | objc2-exception-helper | 0.1.1 | 间接 |
| crates.io | objc2-foundation | 0.3.2 | 间接 |
| crates.io | objc2-io-surface | 0.3.2 | 间接 |
| crates.io | objc2-quartz-core | 0.3.2 | 间接 |
| crates.io | objc2-ui-kit | 0.3.2 | 间接 |
| crates.io | objc2-web-kit | 0.3.2 | 间接 |
| crates.io | once_cell | 1.21.3 | 间接 |
| crates.io | once_cell | 1.21.4 | 间接 |
| crates.io | once_cell_polyfill | 1.70.2 | 间接 |
| crates.io | open | 5.3.4 | 间接 |
| crates.io | option-ext | 0.2.0 | 间接 |
| crates.io | os_pipe | 1.2.3 | 间接 |
| crates.io | pango | 0.18.3 | 间接 |
| crates.io | pango-sys | 0.18.0 | 间接 |
| crates.io | parking_lot | 0.12.5 | 间接 |
| crates.io | parking_lot_core | 0.9.12 | 间接 |
| crates.io | pathdiff | 0.2.3 | 间接 |
| crates.io | percent-encoding | 2.3.2 | 间接 |
| crates.io | phf | 0.10.1 | 间接 |
| crates.io | phf | 0.11.3 | 间接 |
| crates.io | phf | 0.13.1 | 间接 |
| crates.io | phf | 0.8.0 | 间接 |
| crates.io | phf_codegen | 0.11.3 | 间接 |
| crates.io | phf_codegen | 0.13.1 | 间接 |
| crates.io | phf_codegen | 0.8.0 | 间接 |
| crates.io | phf_generator | 0.10.0 | 间接 |
| crates.io | phf_generator | 0.11.3 | 间接 |
| crates.io | phf_generator | 0.13.1 | 间接 |
| crates.io | phf_generator | 0.8.0 | 间接 |
| crates.io | phf_macros | 0.10.0 | 间接 |
| crates.io | phf_macros | 0.11.3 | 间接 |
| crates.io | phf_macros | 0.13.1 | 间接 |
| crates.io | phf_shared | 0.10.0 | 间接 |
| crates.io | phf_shared | 0.11.3 | 间接 |
| crates.io | phf_shared | 0.13.1 | 间接 |
| crates.io | phf_shared | 0.8.0 | 间接 |
| crates.io | pin-project-lite | 0.2.16 | 间接 |
| crates.io | pin-project-lite | 0.2.17 | 间接 |
| crates.io | pkg-config | 0.3.32 | 间接 |
| crates.io | pkg-config | 0.3.33 | 间接 |
| crates.io | plain | 0.2.3 | 间接 |
| crates.io | plist | 1.8.0 | 间接 |
| crates.io | png | 0.17.16 | 间接 |
| crates.io | potential_utf | 0.1.4 | 间接 |
| crates.io | potential_utf | 0.1.5 | 间接 |
| crates.io | powerfmt | 0.2.0 | 间接 |
| crates.io | ppv-lite86 | 0.2.21 | 间接 |
| crates.io | precomputed-hash | 0.1.1 | 间接 |
| crates.io | prettyplease | 0.2.37 | 间接 |
| crates.io | proc-macro-crate | 1.3.1 | 间接 |
| crates.io | proc-macro-crate | 2.0.2 | 间接 |
| crates.io | proc-macro-crate | 3.4.0 | 间接 |
| crates.io | proc-macro-crate | 3.5.0 | 间接 |
| crates.io | proc-macro-error | 1.0.4 | 间接 |
| crates.io | proc-macro-error-attr | 1.0.4 | 间接 |
| crates.io | proc-macro-hack | 0.5.20+deprecated | 间接 |
| crates.io | proc-macro2 | 1.0.106 | 间接 |
| crates.io | quick-xml | 0.38.4 | 间接 |
| crates.io | quote | 1.0.44 | 间接 |
| crates.io | quote | 1.0.45 | 间接 |
| crates.io | r-efi | 5.3.0 | 间接 |
| crates.io | r-efi | 6.0.0 | 间接 |
| crates.io | rand | 0.7.3 | 间接 |
| crates.io | rand | 0.8.5 | 间接 |
| crates.io | rand | 0.8.6 | 间接 |
| crates.io | rand_chacha | 0.2.2 | 间接 |
| crates.io | rand_chacha | 0.3.1 | 间接 |
| crates.io | rand_core | 0.5.1 | 间接 |
| crates.io | rand_core | 0.6.4 | 间接 |
| crates.io | rand_hc | 0.2.0 | 间接 |
| crates.io | rand_pcg | 0.2.1 | 间接 |
| crates.io | raw-window-handle | 0.6.2 | 间接 |
| crates.io | redox_syscall | 0.5.18 | 间接 |
| crates.io | redox_syscall | 0.7.3 | 间接 |
| crates.io | redox_syscall | 0.7.4 | 间接 |
| crates.io | redox_users | 0.5.2 | 间接 |
| crates.io | ref-cast | 1.0.25 | 间接 |
| crates.io | ref-cast-impl | 1.0.25 | 间接 |
| crates.io | regex | 1.12.3 | 间接 |
| crates.io | regex-automata | 0.4.14 | 间接 |
| crates.io | regex-syntax | 0.8.10 | 间接 |
| crates.io | reqwest | 0.13.2 | 间接 |
| crates.io | rfd | 0.16.0 | 间接 |
| crates.io | ring | 0.17.14 | 间接 |
| crates.io | rustc-hash | 2.1.2 | 间接 |
| crates.io | rustc_version | 0.4.1 | 间接 |
| crates.io | rustix | 1.1.4 | 间接 |
| crates.io | rustls | 0.23.37 | 间接 |
| crates.io | rustls | 0.23.38 | 间接 |
| crates.io | rustls-pki-types | 1.14.0 | 间接 |
| crates.io | rustls-webpki | 0.103.10 | 间接 |
| crates.io | rustls-webpki | 0.103.12 | 间接 |
| crates.io | rustls-webpki | 0.103.13 | 间接 |
| crates.io | rustversion | 1.0.22 | 间接 |
| crates.io | same-file | 1.0.6 | 间接 |
| crates.io | schemars | 0.8.22 | 间接 |
| crates.io | schemars | 0.9.0 | 间接 |
| crates.io | schemars | 1.2.1 | 间接 |
| crates.io | schemars_derive | 0.8.22 | 间接 |
| crates.io | scopeguard | 1.2.0 | 间接 |
| crates.io | selectors | 0.24.0 | 间接 |
| crates.io | selectors | 0.36.1 | 间接 |
| crates.io | semver | 1.0.28 | 间接 |
| crates.io | serde | — | 间接 |
| crates.io | serde | 1.0.228 | 间接 |
| crates.io | serde-untagged | 0.1.9 | 间接 |
| crates.io | serde_core | 1.0.228 | 间接 |
| crates.io | serde_derive | 1.0.228 | 间接 |
| crates.io | serde_derive_internals | 0.29.1 | 间接 |
| crates.io | serde_repr | 0.1.20 | 间接 |
| crates.io | serde_spanned | 0.6.9 | 间接 |
| crates.io | serde_spanned | 1.1.1 | 间接 |
| crates.io | serde_with | 3.18.0 | 间接 |
| crates.io | serde_with_macros | 3.18.0 | 间接 |
| crates.io | serialize-to-javascript | 0.1.2 | 间接 |
| crates.io | serialize-to-javascript-impl | 0.1.2 | 间接 |
| crates.io | servo_arc | 0.2.0 | 间接 |
| crates.io | servo_arc | 0.4.3 | 间接 |
| crates.io | sha2 | 0.10.9 | 间接 |
| crates.io | shared_child | 1.1.1 | 间接 |
| crates.io | sherpa-onnx-sys | — | 间接 |
| crates.io | sherpa-onnx-sys | 1.12.39 | 间接 |
| crates.io | sherpa-onnx-sys | 1.13.6 | 间接 |
| crates.io | shlex | 1.3.0 | 间接 |
| crates.io | sigchld | 0.2.4 | 间接 |
| crates.io | signal-hook | 0.3.18 | 间接 |
| crates.io | signal-hook-registry | 1.4.8 | 间接 |
| crates.io | simd-adler32 | 0.3.8 | 间接 |
| crates.io | simd-adler32 | 0.3.9 | 间接 |
| crates.io | siphasher | 0.3.11 | 间接 |
| crates.io | siphasher | 1.0.2 | 间接 |
| crates.io | slab | 0.4.12 | 间接 |
| crates.io | smallvec | 1.15.1 | 间接 |
| crates.io | socket2 | 0.6.3 | 间接 |
| crates.io | softbuffer | 0.4.8 | 间接 |
| crates.io | soup3 | 0.5.0 | 间接 |
| crates.io | soup3-sys | 0.5.0 | 间接 |
| crates.io | stable_deref_trait | 1.2.1 | 间接 |
| crates.io | string_cache | 0.8.9 | 间接 |
| crates.io | string_cache | 0.9.0 | 间接 |
| crates.io | string_cache_codegen | 0.5.4 | 间接 |
| crates.io | string_cache_codegen | 0.6.1 | 间接 |
| crates.io | strsim | 0.11.1 | 间接 |
| crates.io | subtle | 2.6.1 | 间接 |
| crates.io | swift-rs | 1.0.7 | 间接 |
| crates.io | symphonia | 0.5.5 | 间接 |
| crates.io | symphonia-bundle-flac | 0.5.5 | 间接 |
| crates.io | symphonia-bundle-mp3 | 0.5.5 | 间接 |
| crates.io | symphonia-codec-aac | 0.5.5 | 间接 |
| crates.io | symphonia-codec-adpcm | 0.5.5 | 间接 |
| crates.io | symphonia-codec-pcm | 0.5.5 | 间接 |
| crates.io | symphonia-codec-vorbis | 0.5.5 | 间接 |
| crates.io | symphonia-core | 0.5.5 | 间接 |
| crates.io | symphonia-format-caf | 0.5.5 | 间接 |
| crates.io | symphonia-format-isomp4 | 0.5.5 | 间接 |
| crates.io | symphonia-format-mkv | 0.5.5 | 间接 |
| crates.io | symphonia-format-ogg | 0.5.5 | 间接 |
| crates.io | symphonia-format-riff | 0.5.5 | 间接 |
| crates.io | symphonia-metadata | 0.5.5 | 间接 |
| crates.io | symphonia-utils-xiph | 0.5.5 | 间接 |
| crates.io | syn | 1.0.109 | 间接 |
| crates.io | syn | 2.0.117 | 间接 |
| crates.io | sync_wrapper | 1.0.2 | 间接 |
| crates.io | synstructure | 0.13.2 | 间接 |
| crates.io | system-deps | 6.2.2 | 间接 |
| crates.io | tao | 0.34.8 | 间接 |
| crates.io | tao-macros | 0.1.3 | 间接 |
| crates.io | tar | — | 间接 |
| crates.io | tar | 0.4.45 | 间接 |
| crates.io | target-lexicon | 0.12.16 | 间接 |
| crates.io | tauri | 2.10.3 | 间接 |
| crates.io | tauri-build | 2.5.6 | 间接 |
| crates.io | tauri-codegen | 2.5.5 | 间接 |
| crates.io | tauri-macros | 2.5.5 | 间接 |
| crates.io | tauri-plugin | 2.5.4 | 间接 |
| crates.io | tauri-plugin-dialog | 2.7.0 | 间接 |
| crates.io | tauri-plugin-fs | 2.5.0 | 间接 |
| crates.io | tauri-plugin-shell | 2.3.5 | 间接 |
| crates.io | tauri-runtime | 2.10.1 | 间接 |
| crates.io | tauri-runtime-wry | 2.10.1 | 间接 |
| crates.io | tauri-utils | 2.8.3 | 间接 |
| crates.io | tauri-winres | 0.3.5 | 间接 |
| crates.io | tendril | 0.4.3 | 间接 |
| crates.io | tendril | 0.5.0 | 间接 |
| crates.io | thiserror | 1.0.69 | 间接 |
| crates.io | thiserror | 2.0.18 | 间接 |
| crates.io | thiserror-impl | 1.0.69 | 间接 |
| crates.io | thiserror-impl | 2.0.18 | 间接 |
| crates.io | time | 0.3.47 | 间接 |
| crates.io | time-core | 0.1.8 | 间接 |
| crates.io | time-macros | 0.2.27 | 间接 |
| crates.io | tinystr | 0.8.2 | 间接 |
| crates.io | tinystr | 0.8.3 | 间接 |
| crates.io | tokio | 1.52.1 | 间接 |
| crates.io | tokio-util | 0.7.18 | 间接 |
| crates.io | toml | 0.8.2 | 间接 |
| crates.io | toml | 0.9.12+spec-1.1.0 | 间接 |
| crates.io | toml_datetime | 0.6.3 | 间接 |
| crates.io | toml_datetime | 0.7.5+spec-1.1.0 | 间接 |
| crates.io | toml_datetime | 1.1.1+spec-1.1.0 | 间接 |
| crates.io | toml_edit | 0.19.15 | 间接 |
| crates.io | toml_edit | 0.20.2 | 间接 |
| crates.io | toml_edit | 0.23.10+spec-1.0.0 | 间接 |
| crates.io | toml_edit | 0.25.11+spec-1.1.0 | 间接 |
| crates.io | toml_parser | 1.0.9+spec-1.1.0 | 间接 |
| crates.io | toml_parser | 1.1.2+spec-1.1.0 | 间接 |
| crates.io | toml_writer | 1.1.1+spec-1.1.0 | 间接 |
| crates.io | tower | 0.5.3 | 间接 |
| crates.io | tower-http | 0.6.8 | 间接 |
| crates.io | tower-layer | 0.3.3 | 间接 |
| crates.io | tower-service | 0.3.3 | 间接 |
| crates.io | tracing | 0.1.44 | 间接 |
| crates.io | tracing-core | 0.1.36 | 间接 |
| crates.io | tray-icon | 0.21.3 | 间接 |
| crates.io | try-lock | 0.2.5 | 间接 |
| crates.io | typeid | 1.0.3 | 间接 |
| crates.io | typenum | 1.19.0 | 间接 |
| crates.io | typenum | 1.20.0 | 间接 |
| crates.io | unic-char-property | 0.9.0 | 间接 |
| crates.io | unic-char-range | 0.9.0 | 间接 |
| crates.io | unic-common | 0.9.0 | 间接 |
| crates.io | unic-ucd-ident | 0.9.0 | 间接 |
| crates.io | unic-ucd-version | 0.9.0 | 间接 |
| crates.io | unicode-ident | 1.0.24 | 间接 |
| crates.io | unicode-segmentation | 1.13.2 | 间接 |
| crates.io | unicode-xid | 0.2.6 | 间接 |
| crates.io | untrusted | 0.9.0 | 间接 |
| crates.io | ureq | — | 间接 |
| crates.io | ureq | 2.12.1 | 间接 |
| crates.io | url | 2.5.8 | 间接 |
| crates.io | urlpattern | 0.3.0 | 间接 |
| crates.io | utf-8 | 0.7.6 | 间接 |
| crates.io | utf8_iter | 1.0.4 | 间接 |
| crates.io | utf8parse | 0.2.2 | 间接 |
| crates.io | uuid | 1.23.1 | 间接 |
| crates.io | version-compare | 0.2.1 | 间接 |
| crates.io | version_check | 0.9.5 | 间接 |
| crates.io | vswhom | 0.1.0 | 间接 |
| crates.io | vswhom-sys | 0.1.3 | 间接 |
| crates.io | walkdir | 2.5.0 | 间接 |
| crates.io | want | 0.3.1 | 间接 |
| crates.io | wasi | 0.11.1+wasi-snapshot-preview1 | 间接 |
| crates.io | wasi | 0.9.0+wasi-snapshot-preview1 | 间接 |
| crates.io | wasip2 | 1.0.2+wasi-0.2.9 | 间接 |
| crates.io | wasip2 | 1.0.3+wasi-0.2.9 | 间接 |
| crates.io | wasip3 | 0.4.0+wasi-0.3.0-rc-2026-01-06 | 间接 |
| crates.io | wasm-bindgen | 0.2.112 | 间接 |
| crates.io | wasm-bindgen | 0.2.118 | 间接 |
| crates.io | wasm-bindgen-futures | 0.4.62 | 间接 |
| crates.io | wasm-bindgen-futures | 0.4.68 | 间接 |
| crates.io | wasm-bindgen-macro | 0.2.112 | 间接 |
| crates.io | wasm-bindgen-macro | 0.2.118 | 间接 |
| crates.io | wasm-bindgen-macro-support | 0.2.112 | 间接 |
| crates.io | wasm-bindgen-macro-support | 0.2.118 | 间接 |
| crates.io | wasm-bindgen-shared | 0.2.112 | 间接 |
| crates.io | wasm-bindgen-shared | 0.2.118 | 间接 |
| crates.io | wasm-encoder | 0.244.0 | 间接 |
| crates.io | wasm-metadata | 0.244.0 | 间接 |
| crates.io | wasm-streams | 0.5.0 | 间接 |
| crates.io | wasmparser | 0.244.0 | 间接 |
| crates.io | web-sys | 0.3.89 | 间接 |
| crates.io | web-sys | 0.3.95 | 间接 |
| crates.io | web_atoms | 0.2.3 | 间接 |
| crates.io | web_atoms | 0.2.4 | 间接 |
| crates.io | webkit2gtk | 2.0.2 | 间接 |
| crates.io | webkit2gtk-sys | 2.0.2 | 间接 |
| crates.io | webpki-roots | 0.26.11 | 间接 |
| crates.io | webpki-roots | 1.0.6 | 间接 |
| crates.io | webpki-roots | 1.0.7 | 间接 |
| crates.io | webview2-com | 0.38.2 | 间接 |
| crates.io | webview2-com-macros | 0.8.1 | 间接 |
| crates.io | webview2-com-sys | 0.38.2 | 间接 |
| crates.io | winapi | 0.3.9 | 间接 |
| crates.io | winapi-i686-pc-windows-gnu | 0.4.0 | 间接 |
| crates.io | winapi-util | 0.1.11 | 间接 |
| crates.io | winapi-x86_64-pc-windows-gnu | 0.4.0 | 间接 |
| crates.io | window-vibrancy | 0.6.0 | 间接 |
| crates.io | windows | 0.54.0 | 间接 |
| crates.io | windows | 0.61.3 | 间接 |
| crates.io | windows-collections | 0.2.0 | 间接 |
| crates.io | windows-core | 0.54.0 | 间接 |
| crates.io | windows-core | 0.61.2 | 间接 |
| crates.io | windows-core | 0.62.2 | 间接 |
| crates.io | windows-future | 0.2.1 | 间接 |
| crates.io | windows-implement | 0.60.2 | 间接 |
| crates.io | windows-interface | 0.59.3 | 间接 |
| crates.io | windows-link | 0.1.3 | 间接 |
| crates.io | windows-link | 0.2.1 | 间接 |
| crates.io | windows-numerics | 0.2.0 | 间接 |
| crates.io | windows-result | 0.1.2 | 间接 |
| crates.io | windows-result | 0.3.4 | 间接 |
| crates.io | windows-result | 0.4.1 | 间接 |
| crates.io | windows-strings | 0.4.2 | 间接 |
| crates.io | windows-strings | 0.5.1 | 间接 |
| crates.io | windows-sys | 0.45.0 | 间接 |
| crates.io | windows-sys | 0.52.0 | 间接 |
| crates.io | windows-sys | 0.59.0 | 间接 |
| crates.io | windows-sys | 0.60.2 | 间接 |
| crates.io | windows-sys | 0.61.2 | 间接 |
| crates.io | windows-targets | 0.42.2 | 间接 |
| crates.io | windows-targets | 0.52.6 | 间接 |
| crates.io | windows-targets | 0.53.5 | 间接 |
| crates.io | windows-threading | 0.1.0 | 间接 |
| crates.io | windows-version | 0.1.7 | 间接 |
| crates.io | windows_aarch64_gnullvm | 0.42.2 | 间接 |
| crates.io | windows_aarch64_gnullvm | 0.52.6 | 间接 |
| crates.io | windows_aarch64_gnullvm | 0.53.1 | 间接 |
| crates.io | windows_aarch64_msvc | 0.42.2 | 间接 |
| crates.io | windows_aarch64_msvc | 0.52.6 | 间接 |
| crates.io | windows_aarch64_msvc | 0.53.1 | 间接 |
| crates.io | windows_i686_gnu | 0.42.2 | 间接 |
| crates.io | windows_i686_gnu | 0.52.6 | 间接 |
| crates.io | windows_i686_gnu | 0.53.1 | 间接 |
| crates.io | windows_i686_gnullvm | 0.52.6 | 间接 |
| crates.io | windows_i686_gnullvm | 0.53.1 | 间接 |
| crates.io | windows_i686_msvc | 0.42.2 | 间接 |
| crates.io | windows_i686_msvc | 0.52.6 | 间接 |
| crates.io | windows_i686_msvc | 0.53.1 | 间接 |
| crates.io | windows_x86_64_gnu | 0.42.2 | 间接 |
| crates.io | windows_x86_64_gnu | 0.52.6 | 间接 |
| crates.io | windows_x86_64_gnu | 0.53.1 | 间接 |
| crates.io | windows_x86_64_gnullvm | 0.42.2 | 间接 |
| crates.io | windows_x86_64_gnullvm | 0.52.6 | 间接 |
| crates.io | windows_x86_64_gnullvm | 0.53.1 | 间接 |
| crates.io | windows_x86_64_msvc | 0.42.2 | 间接 |
| crates.io | windows_x86_64_msvc | 0.52.6 | 间接 |
| crates.io | windows_x86_64_msvc | 0.53.1 | 间接 |
| crates.io | winnow | 0.5.40 | 间接 |
| crates.io | winnow | 0.7.14 | 间接 |
| crates.io | winnow | 0.7.15 | 间接 |
| crates.io | winnow | 1.0.1 | 间接 |
| crates.io | winreg | 0.55.0 | 间接 |
| crates.io | wit-bindgen | 0.51.0 | 间接 |
| crates.io | wit-bindgen | 0.57.1 | 间接 |
| crates.io | wit-bindgen-core | 0.51.0 | 间接 |
| crates.io | wit-bindgen-rust | 0.51.0 | 间接 |
| crates.io | wit-bindgen-rust-macro | 0.51.0 | 间接 |
| crates.io | wit-component | 0.244.0 | 间接 |
| crates.io | wit-parser | 0.244.0 | 间接 |
| crates.io | writeable | 0.6.2 | 间接 |
| crates.io | writeable | 0.6.3 | 间接 |
| crates.io | wry | 0.54.4 | 间接 |
| crates.io | x11 | 2.21.0 | 间接 |
| crates.io | x11-dl | 2.21.0 | 间接 |
| crates.io | xattr | 1.6.1 | 间接 |
| crates.io | yoke | 0.8.1 | 间接 |
| crates.io | yoke | 0.8.2 | 间接 |
| crates.io | yoke-derive | 0.8.1 | 间接 |
| crates.io | yoke-derive | 0.8.2 | 间接 |
| crates.io | zerocopy | 0.8.48 | 间接 |
| crates.io | zerocopy-derive | 0.8.48 | 间接 |
| crates.io | zerofrom | 0.1.6 | 间接 |
| crates.io | zerofrom | 0.1.7 | 间接 |
| crates.io | zerofrom-derive | 0.1.6 | 间接 |
| crates.io | zerofrom-derive | 0.1.7 | 间接 |
| crates.io | zeroize | 1.8.2 | 间接 |
| crates.io | zerotrie | 0.2.3 | 间接 |
| crates.io | zerotrie | 0.2.4 | 间接 |
| crates.io | zerovec | 0.11.5 | 间接 |
| crates.io | zerovec | 0.11.6 | 间接 |
| crates.io | zerovec-derive | 0.11.2 | 间接 |
| crates.io | zerovec-derive | 0.11.3 | 间接 |
| crates.io | zmij | 1.0.21 | 间接 |
| Maven | com.github.k2-fsa.sherpa-onnx:sherpa-onnx-jvm | v1.13.6 | 间接 |
| Maven | com.github.k2-fsa.sherpa-onnx:sherpa-onnx-native-lib-osx-aarch64 | v1.13.6 | 间接 |
| Maven | org.apache.maven.plugins:maven-compiler-plugin | 3.11.0 | 间接 |
| Maven | org.apache.maven.plugins:maven-jar-plugin | 3.3.0 | 间接 |
| Maven | org.apache.maven.plugins:maven-shade-plugin | 3.5.1 | 间接 |
| npm | @tauri-apps/cli | ^2 | 间接 |
| npm | @types/node | ^24.10.4 | 间接 |
| npm | cmake-js | ^7.3.0 | 间接 |
| npm | node-addon-api | ^8.3.0 | 间接 |
| npm | perf_hooks | * | 间接 |
| npm | sherpa-onnx-darwin-arm64 | ^SHERPA_ONNX_VERSION | 间接 |
| npm | sherpa-onnx-darwin-x64 | ^SHERPA_ONNX_VERSION | 间接 |
| npm | sherpa-onnx-linux-arm64 | ^SHERPA_ONNX_VERSION | 间接 |
| npm | sherpa-onnx-linux-x64 | ^SHERPA_ONNX_VERSION | 间接 |
| npm | sherpa-onnx-win-ia32 | ^SHERPA_ONNX_VERSION | 间接 |
| npm | sherpa-onnx-win-x64 | ^SHERPA_ONNX_VERSION | 间接 |
| npm | typescript | ^5.9.3 | 间接 |
| PyPI | openai-whisper | — | 间接 |
| PyPI | sherpa-onnx-core | 1.13.6 | 间接 |
该仓库未发布可被索引解析的包,因此评估的是其自身的依赖图——共 625 个包,其中也包含从不交付的开发与测试版本固定:27 个存在已知公告,1 个为直接依赖。 有 27 个无法评估——没有已解析的版本、生态系统不受支持,或不在所列包清单之内。
| 软件包 | 版本 | 关系 | 严重程度 | 公告数 | 修复版本 |
|---|---|---|---|---|---|
| quick-xml | 0.38.4 | 间接 | 高 | 2 | 0.41.0 |
| rustls-webpki | 0.103.10 | 间接 | 高 | 6 | 0.104.0-alpha.7 |
| rustls-webpki | 0.103.12 | 间接 | 高 | 2 | 0.104.0-alpha.7 |
| tauri | 2.10.3 | 间接 | 高 | 1 | 2.11.1 |
| glib | 0.18.5 | 间接 | 中 | 2 | 0.20.0 |
| serde_with | 3.18.0 | 间接 | 中 | 1 | 3.21.0 |
| tar | 0.4.45 | 间接 | 中 | 1 | 0.4.46 |
| rand | 0.7.3 | 间接 | 低 | 2 | 0.10.1 |
| rand | 0.8.5 | 间接 | 低 | 2 | 0.10.1 |
| anyhow | 1.0.102 | 直接 | 未知 | 1 | 1.0.103 |
| atk | 0.18.2 | 间接 | 未知 | 1 | — |
| atk-sys | 0.18.2 | 间接 | 未知 | 1 | — |
| fxhash | 0.2.1 | 间接 | 未知 | 1 | — |
| gdk | 0.18.2 | 间接 | 未知 | 1 | — |
| gdk-sys | 0.18.2 | 间接 | 未知 | 1 | — |
| gdkwayland-sys | 0.18.2 | 间接 | 未知 | 1 | — |
| gdkx11 | 0.18.2 | 间接 | 未知 | 1 | — |
| gdkx11-sys | 0.18.2 | 间接 | 未知 | 1 | — |
| gtk | 0.18.2 | 间接 | 未知 | 1 | — |
| gtk-sys | 0.18.2 | 间接 | 未知 | 1 | — |
| gtk3-macros | 0.18.2 | 间接 | 未知 | 1 | — |
| proc-macro-error | 1.0.4 | 间接 | 未知 | 1 | — |
| unic-char-property | 0.9.0 | 间接 | 未知 | 1 | — |
| unic-char-range | 0.9.0 | 间接 | 未知 | 1 | — |
| unic-common | 0.9.0 | 间接 | 未知 | 1 | — |
| unic-ucd-ident | 0.9.0 | 间接 | 未知 | 1 | — |
| unic-ucd-version | 0.9.0 | 间接 | 未知 | 1 | — |
公告表示依赖图中记录的版本落入某条公告的受影响范围。可达性未经分析,且依赖图包含开发与测试的版本固定——某项发现可能只涉及工具链而非交付的软件。
发现这份报告有不准确之处,或有想法要分享?错误的测量、未识别的工具、建议、疑问——都欢迎提出。每条消息都会被阅读并得到回复。