Oracle Cloud Infrastructure SDK for TypeScript and JavaScript
oracle/oci-typescript-sdk 的健康指数为 100 分中的 90 分,处于「优秀」区间。 其得分最高的类别是Vitality(94/100),最低的是AI Readiness(50/100)。 最近一次更新在 2 天前。 近期的大部分工作由 1 位贡献者完成。
指标归入加权类别,统一采用 1–100 量表。总体分先取类别加权平均,再依据公开记录的分布进行校准,使各等级具有百分位含义;当公开证据触发高风险司法辖区政策时,评级会按政策调整,并设置 34(存在风险)的上限。
每条轴代表一个类别。形状比平均值更重要——健康的对象会填满整个图形,而“一峰一谷”式画像意味着某一维度的优势正掩盖另一维度的风险。
加权总体分 76 经校准后在公布的指数量表上为 90(记录校准 2026-08-02)。
| 注册表 | 软件包 | 版本 | 月下载量 | 版本数 | 最近发布 |
|---|---|---|---|---|---|
| npm | oci-sdk | 2.137.0 | 380,599 | 272 | 2 天前 |
项目是否仍有生命——是否仍在编写代码,是否仍在发布版本?
| 36/36 | 推送新近度 — 最近一次推送于 2 天前 |
| 31.8/36 | 提交节奏 — 52 周中有 46 周有提交 |
| 18/18 | 提交量 — 最近一年 168 次提交 |
| 10/10 | OpenSSF Scorecard:Maintained — 30 commit(s) and 5 issue activity found in the last 90 days -- score normalized to 10 |
| commits_last_year | 168 |
| human_commit_share | — |
| days_since_last_push | 2 |
| active_weeks_last_year | 46 |
| 27/27 | 有发布版本 — 已发布 100 个发布版本 |
| 36/36 | 发布时效 — 最近一次发布版本于 2 天前 |
| 27/27 | 发布节奏 — 约每 6.9 天发布一次 |
| 0/10 | OpenSSF Scorecard:Signed-Releases — Project has not signed or included provenance with any releases. |
| releases_count | 100 |
| latest_release_tag | v2.137.0 |
| releases_from_tags | 否 |
| days_since_latest_release | 2 |
| mean_days_between_releases | 6.9 |
项目是否拥有用户、下载量与关注度,并具备欢迎贡献者参与的配置?
| 32.2/60 | 星标 — 97 个星标 |
| 14.9/25 | 复刻 — 63 个复刻 |
| 7/15 | 关注者 — 19 位关注者 |
| forks | 63 |
| stars | 97 |
| watchers | 19 |
| growth_state | unverified |
| growth_factor_pct | 100 |
| growth_unverified_reason | no_history |
| 22.5/22.5 | README |
| 16.9/22.5 | 许可证 — 存在许可证文件,但不是可识别的许可证 |
| 18/18 | CONTRIBUTING 指南 |
| 13.5/13.5 | 行为准则 |
| 0/7.2 | 议题模板 |
| 0/6.3 | PR 模板 |
| has_readme | 是 |
| has_license | 是 |
| readme_badges | — |
| has_contributing | 是 |
| has_issue_template | 否 |
| has_code_of_conduct | 是 |
| readme_badge_services | — |
| has_pull_request_template | 否 |
| 74.4/80 | 月度下载量 — npm 合计每月 380,599 次下载 |
| 0/20 | 注册表被依赖数 — 该生态系统不报告此项 |
| packages | oci-sdk |
| dependents | — |
| ecosystems | npm |
| total_downloads | — |
| monthly_downloads | 380,599 |
| unverified_packages_excluded | — |
项目能否在其成员之外延续——巴士系数、响应能力、由谁支持,以及软件包的维护状况?
| 9/54 | 巴士系数 — 1 位贡献者贡献了半数提交 |
| 5.6/22.5 | 提交分布 — 头号贡献者编写了 75% 的提交 |
| 13.5/13.5 | 贡献者广度 — 20 位贡献者 |
| 10/10 | OpenSSF Scorecard:Contributors — project has 12 contributing companies or organizations |
| bus_factor | 1 |
| contributors_sampled | 20 |
| top_contributor_share | 0.749 |
| 24.3/42 | 议题解决 — 58% 的议题已关闭 |
| 26.7/30 | PR 接受 — 已裁定的 PR 中 304/341 已合并 |
| 0/13 | Newcomer PR acceptance — 30 天内没有首次贡献者的 PR 得到裁决 |
| 15/15 | OpenSSF Scorecard:Code-Review — all changesets reviewed |
| merged_prs | 304 |
| open_issues | 48 |
| closed_issues | 66 |
| prs_merged_7d | — |
| prs_decided_7d | — |
| prs_merged_30d | — |
| prs_decided_30d | — |
| issue_closed_ratio | 0.579 |
| closed_unmerged_prs | 37 |
| first_time_authors_30d | — |
| first_time_prs_merged_30d | — |
| first_time_prs_decided_30d | — |
| 30/30 | 所有权背书 — 组织持有 |
| 0/20 | 已验证域名 — 未读取该组织的域名验证状态 |
| 25/25 | 所有者影响力 — oracle 有 5,888 位关注者 |
| 25/25 | 既往记录 — 314 个公开仓库,账户约 13 年 |
| followers | 5,888 |
| owner_type | Organization |
| is_verified | — |
| owner_login | oracle |
| public_repos | 314 |
| account_age_days | 4,811 |
| 25/25 | 已发布且可解析 — npm 上有 1 个软件包 |
| 35/35 | 发布时效 — 最近一次发布于 2 天前 |
| 20/20 | 版本历史 — 272 个已发布版本 |
| 20/20 | 未被弃用 — 活跃,未被弃用或撤回 |
| packages | oci-sdk |
| ecosystems | npm |
| any_deprecated | 否 |
| min_days_since_publish | 2 |
基础的工程与文档实践是否到位?
| 24/24 | CI 工作流 — 3 个工作流 |
| 24/24 | 存在测试 |
| 0/16 | Linter 配置 |
| 0/9.6 | Pre-commit 钩子 |
| 0/6.4 | .editorconfig |
| 20/20 | OpenSSF Scorecard:CI-Tests — 11 out of 11 merged PRs checked by a CI test -- score normalized to 10 |
| has_ci | 是 |
| has_tests | 是 |
| has_editorconfig | 否 |
| has_linter_config | 否 |
| has_precommit_config | 否 |
| 30/30 | README |
| 0/25 | 文档目录 |
| 15/15 | 文档 / 主页站点 — https://docs.oracle.com/en-us/iaas/Content/API/SDKDocs/typescriptsdk.htm |
| 10/10 | 仓库描述 |
| 10/10 | 主题标签 — 6 个主题标签 |
| 10/10 | Wiki |
| topics | cloud, oracle-cloud, sdk, typescript, javascript, nodejs |
| has_wiki | 是 |
| homepage | https://docs.oracle.com/en-us/iaas/Content/API/SDKDocs/typescriptsdk.htm |
| docs_site | https://docs.oracle.com/en-us/iaas/Content/API/SDKDocs/typescriptsdk.htm |
| has_readme | 是 |
| has_docs_dir | 否 |
| has_description | 是 |
可见的安全与供应链实践是否稳固,且不存在未解决的高风险司法辖区暴露?
| 7.5/7.5 | Binary-Artifacts — no binaries found in the repo |
| 0/7.5 | Branch-Protection — 无数据 |
| 2.5/2.5 | CI-Tests — 11 out of 11 merged PRs checked by a CI test -- score normalized to 10 |
| 0/2.5 | CII-Best-Practices — no effort to earn an OpenSSF best practices badge detected |
| 7.5/7.5 | Code-Review — all changesets reviewed |
| 2.5/2.5 | Contributors — project has 12 contributing companies or organizations |
| 10/10 | Dangerous-Workflow — no dangerous workflow patterns detected |
| 0/7.5 | Dependency-Update-Tool — no update tool detected |
| 0/5 | Fuzzing — project is not fuzzed |
| 2.2/2.5 | 许可证 — license file detected |
| 7.5/7.5 | Maintained — 30 commit(s) and 5 issue activity found in the last 90 days -- score normalized to 10 |
| 0/5 | Packaging — 无数据 |
| 3/5 | Pinned-Dependencies — dependency not pinned by hash detected -- score normalized to 6 |
| 0/5 | SAST — SAST tool is not run on all commits -- score normalized to 0 |
| 5/5 | Security-Policy — security policy file detected |
| 0/7.5 | Signed-Releases — Project has not signed or included provenance with any releases. |
| 7.5/7.5 | Token-Permissions — GitHub workflow tokens follow principle of least privilege |
| 7.5/7.5 | Vulnerabilities — 0 existing vulnerabilities detected |
| source | openssf_scorecard |
| checks_evaluated | 16 |
| scorecard_version | v5.5.0 |
| checks_inconclusive | 2 |
| scorecard_aggregate | 6.8 |
该仓库在多大程度上具备与 AI 编码代理协同开发与维护的条件?权重刻意设小(4%):代理工具链是一项真实的维护信号,但完全不具备的仓库仍可达到 100/100。
| 0/45 | 代理指令 — 没有 CLAUDE.md / AGENTS.md / 编辑器规则 |
| 0/15 | 机器可读文档(llms.txt) |
| 0/40 | 可读的提交历史 — 无数据 |
| has_llms_txt | 否 |
| llms_txt_url | — |
| legible_history_share | — |
| agent_instruction_files | — |
| agent_instruction_max_bytes | — |
| 0/18 | 一条命令的引导启动 |
| 22/22 | 自动化测试 |
| 0/11 | Lint / 格式化配置 |
| 11/11 | 静态类型检查 — lib/accessgovernancecp/tsconfig.json, lib/adm/tsconfig.json, lib/aidataplatform/tsconfig.json, lib/aidocument/tsconfig.json, lib/ailanguage/tsconfig.json, lib/aispeech/tsconfig.json, lib/aivision/tsconfig.json, lib/analytics/tsconfig.json, lib/announcementsservice/tsconfig.json, lib/apiaccesscontrol/tsconfig.json, lib/apigateway/tsconfig.json, lib/apiplatform/tsconfig.json, lib/apmconfig/tsconfig.json, lib/apmcontrolplane/tsconfig.json, lib/apmsynthetics/tsconfig.json, lib/apmtraces/tsconfig.json, lib/appmgmtcontrol/tsconfig.json, lib/artifacts/tsconfig.json, lib/audit/tsconfig.json, lib/autoscaling/tsconfig.json, lib/bastion/tsconfig.json, lib/batch/tsconfig.json, lib/bds/tsconfig.json, lib/blockchain/tsconfig.json, lib/budget/tsconfig.json, lib/capacitymanagement/tsconfig.json, lib/certificates/tsconfig.json, lib/certificatesmanagement/tsconfig.json, lib/cims/tsconfig.json, lib/cloudbridge/tsconfig.json, lib/cloudguard/tsconfig.json, lib/cloudmigrations/tsconfig.json, lib/clusterplacementgroups/tsconfig.json, lib/common/tsconfig.json, lib/computecloudatcustomer/tsconfig.json, lib/computeinstanceagent/tsconfig.json, lib/containerengine/tsconfig.json, lib/containerinstances/tsconfig.json, lib/containerregistry/tsconfig.json, lib/core/tsconfig.json, lib/costad/tsconfig.json, lib/dashboardservice/tsconfig.json, lib/database/tsconfig.json, lib/databasemanagement/tsconfig.json, lib/databasemigration/tsconfig.json, lib/databasetools/tsconfig.json, lib/databasetoolsruntime/tsconfig.json, lib/datacatalog/tsconfig.json, lib/datacc/tsconfig.json, lib/dataflow/tsconfig.json, lib/dataintegration/tsconfig.json, lib/datalabelingservice/tsconfig.json, lib/datalabelingservicedataplane/tsconfig.json, lib/datasafe/tsconfig.json, lib/datascience/tsconfig.json, lib/dblm/tsconfig.json, lib/dbmulticloud/tsconfig.json, lib/delegateaccesscontrol/tsconfig.json, lib/demandsignal/tsconfig.json, lib/desktops/tsconfig.json, lib/devops/tsconfig.json, lib/dif/tsconfig.json, lib/disasterrecovery/tsconfig.json, lib/distributeddatabase/tsconfig.json, lib/dns/tsconfig.json, lib/email/tsconfig.json, lib/emaildataplane/tsconfig.json, lib/emwarehouse/tsconfig.json, lib/events/tsconfig.json, lib/filestorage/tsconfig.json, lib/fleetappsmanagement/tsconfig.json, lib/fleetsoftwareupdate/tsconfig.json, lib/functions/tsconfig.json, lib/fusionapps/tsconfig.json, lib/gdp/tsconfig.json, lib/generativeai/tsconfig.json, lib/generativeaiagent/tsconfig.json, lib/generativeaiagentruntime/tsconfig.json, lib/generativeaidata/tsconfig.json, lib/generativeaiinference/tsconfig.json, lib/genericartifactscontent/tsconfig.json, lib/goldengate/tsconfig.json, lib/governancerulescontrolplane/tsconfig.json, lib/healthchecks/tsconfig.json, lib/identity/tsconfig.json, lib/identitydataplane/tsconfig.json, lib/identitydomains/tsconfig.json, lib/integration/tsconfig.json, lib/iot/tsconfig.json, lib/jms/tsconfig.json, lib/jmsjavadownloads/tsconfig.json, lib/jmsutils/tsconfig.json, lib/keymanagement/tsconfig.json, lib/licensemanager/tsconfig.json, lib/limits/tsconfig.json, lib/limitsincrease/tsconfig.json, lib/loadbalancer/tsconfig.json, lib/lockbox/tsconfig.json, lib/loganalytics/tsconfig.json, lib/logging/tsconfig.json, lib/loggingingestion/tsconfig.json, lib/loggingsearch/tsconfig.json, lib/lustrefilestorage/tsconfig.json, lib/managedkafka/tsconfig.json, lib/managementagent/tsconfig.json, lib/managementdashboard/tsconfig.json, lib/marketplace/tsconfig.json, lib/marketplaceprivateoffer/tsconfig.json, lib/marketplacepublisher/tsconfig.json, lib/mediaservices/tsconfig.json, lib/mngdmac/tsconfig.json, lib/modeldeployment/tsconfig.json, lib/monitoring/tsconfig.json, lib/multicloud/tsconfig.json, lib/mysql/tsconfig.json, lib/networkfirewall/tsconfig.json, lib/networkloadbalancer/tsconfig.json, lib/nosql/tsconfig.json, lib/objectstorage/tsconfig.json, lib/oce/tsconfig.json, lib/ocicontrolcenter/tsconfig.json, lib/ocvp/tsconfig.json, lib/oda/tsconfig.json, lib/onesubscription/tsconfig.json, lib/ons/tsconfig.json, lib/opa/tsconfig.json, lib/opensearch/tsconfig.json, lib/operatoraccesscontrol/tsconfig.json, lib/opsi/tsconfig.json, lib/optimizer/tsconfig.json, lib/osmanagementhub/tsconfig.json, lib/ospgateway/tsconfig.json, lib/osubbillingschedule/tsconfig.json, lib/osuborganizationsubscription/tsconfig.json, lib/osubsubscription/tsconfig.json, lib/osubusage/tsconfig.json, lib/psa/tsconfig.json, lib/psql/tsconfig.json, lib/queue/tsconfig.json, lib/recovery/tsconfig.json, lib/redis/tsconfig.json, lib/resourceanalytics/tsconfig.json, lib/resourcemanager/tsconfig.json, lib/resourcescheduler/tsconfig.json, lib/resourcesearch/tsconfig.json, lib/rover/tsconfig.json, lib/sch/tsconfig.json, lib/secrets/tsconfig.json, lib/securityattribute/tsconfig.json, lib/self/tsconfig.json, lib/servicecatalog/tsconfig.json, lib/servicemanagerproxy/tsconfig.json, lib/stackmonitoring/tsconfig.json, lib/streaming/tsconfig.json, lib/tenantmanagercontrolplane/tsconfig.json, lib/threatintelligence/tsconfig.json, lib/usage/tsconfig.json, lib/usageapi/tsconfig.json, lib/vault/tsconfig.json, lib/vbsinst/tsconfig.json, lib/visualbuilder/tsconfig.json, lib/vnmonitoring/tsconfig.json, lib/vulnerabilityscanning/tsconfig.json, lib/waa/tsconfig.json, lib/waas/tsconfig.json, lib/waf/tsconfig.json, lib/wlms/tsconfig.json, lib/workrequests/tsconfig.json, lib/zpr/tsconfig.json, tsconfig.json |
| 0/10 | 可复现环境 |
| 0/10 | 已体现的代理实践 — 无数据 |
| 0/8 | 自动化维护 — 无数据 |
| 6/10 | OpenSSF Scorecard:Pinned-Dependencies — dependency not pinned by hash detected -- score normalized to 6 |
| has_nix | 否 |
| has_tests | 是 |
| lockfiles | — |
| has_dockerfile | 否 |
| typed_language | 是 |
| bootstrap_files | — |
| has_devcontainer | 否 |
| has_linter_config | 否 |
| typecheck_configs | lib/accessgovernancecp/tsconfig.json, lib/adm/tsconfig.json, lib/aidataplatform/tsconfig.json, lib/aidocument/tsconfig.json, lib/ailanguage/tsconfig.json, lib/aispeech/tsconfig.json, lib/aivision/tsconfig.json, lib/analytics/tsconfig.json, lib/announcementsservice/tsconfig.json, lib/apiaccesscontrol/tsconfig.json, lib/apigateway/tsconfig.json, lib/apiplatform/tsconfig.json, lib/apmconfig/tsconfig.json, lib/apmcontrolplane/tsconfig.json, lib/apmsynthetics/tsconfig.json, lib/apmtraces/tsconfig.json, lib/appmgmtcontrol/tsconfig.json, lib/artifacts/tsconfig.json, lib/audit/tsconfig.json, lib/autoscaling/tsconfig.json, lib/bastion/tsconfig.json, lib/batch/tsconfig.json, lib/bds/tsconfig.json, lib/blockchain/tsconfig.json, lib/budget/tsconfig.json, lib/capacitymanagement/tsconfig.json, lib/certificates/tsconfig.json, lib/certificatesmanagement/tsconfig.json, lib/cims/tsconfig.json, lib/cloudbridge/tsconfig.json, lib/cloudguard/tsconfig.json, lib/cloudmigrations/tsconfig.json, lib/clusterplacementgroups/tsconfig.json, lib/common/tsconfig.json, lib/computecloudatcustomer/tsconfig.json, lib/computeinstanceagent/tsconfig.json, lib/containerengine/tsconfig.json, lib/containerinstances/tsconfig.json, lib/containerregistry/tsconfig.json, lib/core/tsconfig.json, lib/costad/tsconfig.json, lib/dashboardservice/tsconfig.json, lib/database/tsconfig.json, lib/databasemanagement/tsconfig.json, lib/databasemigration/tsconfig.json, lib/databasetools/tsconfig.json, lib/databasetoolsruntime/tsconfig.json, lib/datacatalog/tsconfig.json, lib/datacc/tsconfig.json, lib/dataflow/tsconfig.json, lib/dataintegration/tsconfig.json, lib/datalabelingservice/tsconfig.json, lib/datalabelingservicedataplane/tsconfig.json, lib/datasafe/tsconfig.json, lib/datascience/tsconfig.json, lib/dblm/tsconfig.json, lib/dbmulticloud/tsconfig.json, lib/delegateaccesscontrol/tsconfig.json, lib/demandsignal/tsconfig.json, lib/desktops/tsconfig.json, lib/devops/tsconfig.json, lib/dif/tsconfig.json, lib/disasterrecovery/tsconfig.json, lib/distributeddatabase/tsconfig.json, lib/dns/tsconfig.json, lib/email/tsconfig.json, lib/emaildataplane/tsconfig.json, lib/emwarehouse/tsconfig.json, lib/events/tsconfig.json, lib/filestorage/tsconfig.json, lib/fleetappsmanagement/tsconfig.json, lib/fleetsoftwareupdate/tsconfig.json, lib/functions/tsconfig.json, lib/fusionapps/tsconfig.json, lib/gdp/tsconfig.json, lib/generativeai/tsconfig.json, lib/generativeaiagent/tsconfig.json, lib/generativeaiagentruntime/tsconfig.json, lib/generativeaidata/tsconfig.json, lib/generativeaiinference/tsconfig.json, lib/genericartifactscontent/tsconfig.json, lib/goldengate/tsconfig.json, lib/governancerulescontrolplane/tsconfig.json, lib/healthchecks/tsconfig.json, lib/identity/tsconfig.json, lib/identitydataplane/tsconfig.json, lib/identitydomains/tsconfig.json, lib/integration/tsconfig.json, lib/iot/tsconfig.json, lib/jms/tsconfig.json, lib/jmsjavadownloads/tsconfig.json, lib/jmsutils/tsconfig.json, lib/keymanagement/tsconfig.json, lib/licensemanager/tsconfig.json, lib/limits/tsconfig.json, lib/limitsincrease/tsconfig.json, lib/loadbalancer/tsconfig.json, lib/lockbox/tsconfig.json, lib/loganalytics/tsconfig.json, lib/logging/tsconfig.json, lib/loggingingestion/tsconfig.json, lib/loggingsearch/tsconfig.json, lib/lustrefilestorage/tsconfig.json, lib/managedkafka/tsconfig.json, lib/managementagent/tsconfig.json, lib/managementdashboard/tsconfig.json, lib/marketplace/tsconfig.json, lib/marketplaceprivateoffer/tsconfig.json, lib/marketplacepublisher/tsconfig.json, lib/mediaservices/tsconfig.json, lib/mngdmac/tsconfig.json, lib/modeldeployment/tsconfig.json, lib/monitoring/tsconfig.json, lib/multicloud/tsconfig.json, lib/mysql/tsconfig.json, lib/networkfirewall/tsconfig.json, lib/networkloadbalancer/tsconfig.json, lib/nosql/tsconfig.json, lib/objectstorage/tsconfig.json, lib/oce/tsconfig.json, lib/ocicontrolcenter/tsconfig.json, lib/ocvp/tsconfig.json, lib/oda/tsconfig.json, lib/onesubscription/tsconfig.json, lib/ons/tsconfig.json, lib/opa/tsconfig.json, lib/opensearch/tsconfig.json, lib/operatoraccesscontrol/tsconfig.json, lib/opsi/tsconfig.json, lib/optimizer/tsconfig.json, lib/osmanagementhub/tsconfig.json, lib/ospgateway/tsconfig.json, lib/osubbillingschedule/tsconfig.json, lib/osuborganizationsubscription/tsconfig.json, lib/osubsubscription/tsconfig.json, lib/osubusage/tsconfig.json, lib/psa/tsconfig.json, lib/psql/tsconfig.json, lib/queue/tsconfig.json, lib/recovery/tsconfig.json, lib/redis/tsconfig.json, lib/resourceanalytics/tsconfig.json, lib/resourcemanager/tsconfig.json, lib/resourcescheduler/tsconfig.json, lib/resourcesearch/tsconfig.json, lib/rover/tsconfig.json, lib/sch/tsconfig.json, lib/secrets/tsconfig.json, lib/securityattribute/tsconfig.json, lib/self/tsconfig.json, lib/servicecatalog/tsconfig.json, lib/servicemanagerproxy/tsconfig.json, lib/stackmonitoring/tsconfig.json, lib/streaming/tsconfig.json, lib/tenantmanagercontrolplane/tsconfig.json, lib/threatintelligence/tsconfig.json, lib/usage/tsconfig.json, lib/usageapi/tsconfig.json, lib/vault/tsconfig.json, lib/vbsinst/tsconfig.json, lib/visualbuilder/tsconfig.json, lib/vnmonitoring/tsconfig.json, lib/vulnerabilityscanning/tsconfig.json, lib/waa/tsconfig.json, lib/waas/tsconfig.json, lib/waf/tsconfig.json, lib/wlms/tsconfig.json, lib/workrequests/tsconfig.json, lib/zpr/tsconfig.json, tsconfig.json |
| agent_commit_share | — |
| toolchain_manifests | — |
| dependency_bot_commit_share | — |
| 45/45 | 可类型检查的代码 — TypeScript(静态类型) |
| 54.8/55 | 可控的文件大小 — 采样的 34,893 个源文件中有 142 个超过 60KB |
| primary_language | TypeScript |
| largest_source_bytes | 1,955,547 |
| source_files_sampled | 34,893 |
| oversized_source_files | 142 |
| 0/40 | API 模式(OpenAPI/GraphQL/proto) — 不适用于此类软件 |
| 20/20 | MCP 服务器 |
| 40/40 | 可运行示例 — examples |
| example_dirs | examples |
| has_mcp_signal | 是 |
| api_schema_files | — |
| interfaces_expected_of | — |
来自开源项目 OpenSSF Scorecard 的独立、工具无关的安全评估。每项检查奖励的是安全实践本身,而非特定供应商的工具。Scorecard 无法判定的检查项标记为 不适用,并从安全评分中剔除(绝不按零分计)。
| 10 | Binary-Artifacts | no binaries found in the repo |
| 不适用 | Branch-Protection | internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md |
| 10 | CI-Tests | 11 out of 11 merged PRs checked by a CI test -- score normalized to 10 |
| 0 | CII-Best-Practices | no effort to earn an OpenSSF best practices badge detected |
| 10 | Code-Review | all changesets reviewed |
| 10 | Contributors | project has 12 contributing companies or organizations |
| 10 | Dangerous-Workflow | no dangerous workflow patterns detected |
| 0 | Dependency-Update-Tool | no update tool detected |
| 0 | Fuzzing | project is not fuzzed |
| 9 | License | license file detected |
| 10 | Maintained | 30 commit(s) and 5 issue activity found in the last 90 days -- score normalized to 10 |
| 不适用 | Packaging | packaging workflow not detected |
| 6 | Pinned-Dependencies | dependency not pinned by hash detected -- score normalized to 6 |
| 0 | SAST | SAST tool is not run on all commits -- score normalized to 0 |
| 10 | Security-Policy | security policy file detected |
| 0 | Signed-Releases | Project has not signed or included provenance with any releases. |
| 10 | Token-Permissions | GitHub workflow tokens follow principle of least privilege |
| 10 | Vulnerabilities | 0 existing vulnerabilities detected |
| 注册表 | 软件包 | 版本约束 | 清单文件 |
|---|---|---|---|
| npm | oci-accessgovernancecp | file:lib/accessgovernancecp | package.json |
| npm | oci-adm | file:lib/adm | package.json |
| npm | oci-aidataplatform | file:lib/aidataplatform | package.json |
| npm | oci-aidocument | file:lib/aidocument | package.json |
| npm | oci-ailanguage | file:lib/ailanguage | package.json |
| npm | oci-aispeech | file:lib/aispeech | package.json |
| npm | oci-aivision | file:lib/aivision | package.json |
| npm | oci-analytics | file:lib/analytics | package.json |
| npm | oci-announcementsservice | file:lib/announcementsservice | package.json |
| npm | oci-apiaccesscontrol | file:lib/apiaccesscontrol | package.json |
| npm | oci-apigateway | file:lib/apigateway | package.json |
| npm | oci-apiplatform | file:lib/apiplatform | package.json |
| npm | oci-apmconfig | file:lib/apmconfig | package.json |
| npm | oci-apmcontrolplane | file:lib/apmcontrolplane | package.json |
| npm | oci-apmsynthetics | file:lib/apmsynthetics | package.json |
| npm | oci-apmtraces | file:lib/apmtraces | package.json |
| npm | oci-appmgmtcontrol | file:lib/appmgmtcontrol | package.json |
| npm | oci-artifacts | file:lib/artifacts | package.json |
| npm | oci-audit | file:lib/audit | package.json |
| npm | oci-autoscaling | file:lib/autoscaling | package.json |
| npm | oci-bastion | file:lib/bastion | package.json |
| npm | oci-batch | file:lib/batch | package.json |
| npm | oci-bds | file:lib/bds | package.json |
| npm | oci-blockchain | file:lib/blockchain | package.json |
| npm | oci-budget | file:lib/budget | package.json |
| npm | oci-capacitymanagement | file:lib/capacitymanagement | package.json |
| npm | oci-certificates | file:lib/certificates | package.json |
| npm | oci-certificatesmanagement | file:lib/certificatesmanagement | package.json |
| npm | oci-cims | file:lib/cims | package.json |
| npm | oci-cloudbridge | file:lib/cloudbridge | package.json |
| npm | oci-cloudguard | file:lib/cloudguard | package.json |
| npm | oci-cloudmigrations | file:lib/cloudmigrations | package.json |
| npm | oci-clusterplacementgroups | file:lib/clusterplacementgroups | package.json |
| npm | oci-common | file:lib/common | package.json |
| npm | oci-computecloudatcustomer | file:lib/computecloudatcustomer | package.json |
| npm | oci-computeinstanceagent | file:lib/computeinstanceagent | package.json |
| npm | oci-containerengine | file:lib/containerengine | package.json |
| npm | oci-containerinstances | file:lib/containerinstances | package.json |
| npm | oci-core | file:lib/core | package.json |
| npm | oci-dashboardservice | file:lib/dashboardservice | package.json |
| npm | oci-database | file:lib/database | package.json |
| npm | oci-databasemanagement | file:lib/databasemanagement | package.json |
| npm | oci-databasemigration | file:lib/databasemigration | package.json |
| npm | oci-databasetools | file:lib/databasetools | package.json |
| npm | oci-datacatalog | file:lib/datacatalog | package.json |
| npm | oci-dataflow | file:lib/dataflow | package.json |
| npm | oci-dataintegration | file:lib/dataintegration | package.json |
| npm | oci-datalabelingservice | file:lib/datalabelingservice | package.json |
| npm | oci-datalabelingservicedataplane | file:lib/datalabelingservicedataplane | package.json |
| npm | oci-datasafe | file:lib/datasafe | package.json |
| npm | oci-datascience | file:lib/datascience | package.json |
| npm | oci-dblm | file:lib/dblm | package.json |
| npm | oci-dbmulticloud | file:lib/dbmulticloud | package.json |
| npm | oci-delegateaccesscontrol | file:lib/delegateaccesscontrol | package.json |
| npm | oci-demandsignal | file:lib/demandsignal | package.json |
| npm | oci-desktops | file:lib/desktops | package.json |
| npm | oci-devops | file:lib/devops | package.json |
| npm | oci-dif | file:lib/dif | package.json |
| npm | oci-disasterrecovery | file:lib/disasterrecovery | package.json |
| npm | oci-distributeddatabase | file:lib/distributeddatabase | package.json |
| npm | oci-dns | file:lib/dns | package.json |
| npm | oci-email | file:lib/email | package.json |
| npm | oci-emaildataplane | file:lib/emaildataplane | package.json |
| npm | oci-emwarehouse | file:lib/emwarehouse | package.json |
| npm | oci-events | file:lib/events | package.json |
| npm | oci-filestorage | file:lib/filestorage | package.json |
| npm | oci-fleetappsmanagement | file:lib/fleetappsmanagement | package.json |
| npm | oci-fleetsoftwareupdate | file:lib/fleetsoftwareupdate | package.json |
| npm | oci-functions | file:lib/functions | package.json |
| npm | oci-fusionapps | file:lib/fusionapps | package.json |
| npm | oci-gdp | file:lib/gdp | package.json |
| npm | oci-generativeai | file:lib/generativeai | package.json |
| npm | oci-generativeaiagent | file:lib/generativeaiagent | package.json |
| npm | oci-generativeaiagentruntime | file:lib/generativeaiagentruntime | package.json |
| npm | oci-generativeaiinference | file:lib/generativeaiinference | package.json |
| npm | oci-genericartifactscontent | file:lib/genericartifactscontent | package.json |
| npm | oci-goldengate | file:lib/goldengate | package.json |
| npm | oci-governancerulescontrolplane | file:lib/governancerulescontrolplane | package.json |
| npm | oci-healthchecks | file:lib/healthchecks | package.json |
| npm | oci-identity | file:lib/identity | package.json |
| npm | oci-identitydataplane | file:lib/identitydataplane | package.json |
| npm | oci-identitydomains | file:lib/identitydomains | package.json |
| npm | oci-integration | file:lib/integration | package.json |
| npm | oci-iot | file:lib/iot | package.json |
| npm | oci-jms | file:lib/jms | package.json |
| npm | oci-jmsjavadownloads | file:lib/jmsjavadownloads | package.json |
| npm | oci-jmsutils | file:lib/jmsutils | package.json |
| npm | oci-keymanagement | file:lib/keymanagement | package.json |
| npm | oci-licensemanager | file:lib/licensemanager | package.json |
| npm | oci-limits | file:lib/limits | package.json |
| npm | oci-limitsincrease | file:lib/limitsincrease | package.json |
| npm | oci-loadbalancer | file:lib/loadbalancer | package.json |
| npm | oci-lockbox | file:lib/lockbox | package.json |
| npm | oci-loganalytics | file:lib/loganalytics | package.json |
| npm | oci-logging | file:lib/logging | package.json |
| npm | oci-loggingingestion | file:lib/loggingingestion | package.json |
| npm | oci-loggingsearch | file:lib/loggingsearch | package.json |
| npm | oci-lustrefilestorage | file:lib/lustrefilestorage | package.json |
| npm | oci-managedkafka | file:lib/managedkafka | package.json |
| npm | oci-managementagent | file:lib/managementagent | package.json |
| npm | oci-managementdashboard | file:lib/managementdashboard | package.json |
| npm | oci-marketplace | file:lib/marketplace | package.json |
| npm | oci-marketplaceprivateoffer | file:lib/marketplaceprivateoffer | package.json |
| npm | oci-marketplacepublisher | file:lib/marketplacepublisher | package.json |
| npm | oci-mediaservices | file:lib/mediaservices | package.json |
| npm | oci-mngdmac | file:lib/mngdmac | package.json |
| npm | oci-modeldeployment | file:lib/modeldeployment | package.json |
| npm | oci-monitoring | file:lib/monitoring | package.json |
| npm | oci-multicloud | file:lib/multicloud | package.json |
| npm | oci-mysql | file:lib/mysql | package.json |
| npm | oci-networkfirewall | file:lib/networkfirewall | package.json |
| npm | oci-networkloadbalancer | file:lib/networkloadbalancer | package.json |
| npm | oci-nosql | file:lib/nosql | package.json |
| npm | oci-objectstorage | file:lib/objectstorage | package.json |
| npm | oci-oce | file:lib/oce | package.json |
| npm | oci-ocicontrolcenter | file:lib/ocicontrolcenter | package.json |
| npm | oci-ocvp | file:lib/ocvp | package.json |
| npm | oci-oda | file:lib/oda | package.json |
| npm | oci-onesubscription | file:lib/onesubscription | package.json |
| npm | oci-ons | file:lib/ons | package.json |
| npm | oci-opa | file:lib/opa | package.json |
| npm | oci-opensearch | file:lib/opensearch | package.json |
| npm | oci-operatoraccesscontrol | file:lib/operatoraccesscontrol | package.json |
| npm | oci-opsi | file:lib/opsi | package.json |
| npm | oci-optimizer | file:lib/optimizer | package.json |
| npm | oci-osmanagementhub | file:lib/osmanagementhub | package.json |
| npm | oci-ospgateway | file:lib/ospgateway | package.json |
| npm | oci-osubbillingschedule | file:lib/osubbillingschedule | package.json |
| npm | oci-osuborganizationsubscription | file:lib/osuborganizationsubscription | package.json |
| npm | oci-osubsubscription | file:lib/osubsubscription | package.json |
| npm | oci-osubusage | file:lib/osubusage | package.json |
| npm | oci-psa | file:lib/psa | package.json |
| npm | oci-psql | file:lib/psql | package.json |
| npm | oci-queue | file:lib/queue | package.json |
| npm | oci-recovery | file:lib/recovery | package.json |
| npm | oci-redis | file:lib/redis | package.json |
| npm | oci-resourceanalytics | file:lib/resourceanalytics | package.json |
| npm | oci-resourcemanager | file:lib/resourcemanager | package.json |
| npm | oci-resourcescheduler | file:lib/resourcescheduler | package.json |
| npm | oci-resourcesearch | file:lib/resourcesearch | package.json |
| npm | oci-rover | file:lib/rover | package.json |
| npm | oci-sch | file:lib/sch | package.json |
| npm | oci-secrets | file:lib/secrets | package.json |
| npm | oci-securityattribute | file:lib/securityattribute | package.json |
| npm | oci-servicecatalog | file:lib/servicecatalog | package.json |
| npm | oci-servicemanagerproxy | file:lib/servicemanagerproxy | package.json |
| npm | oci-stackmonitoring | file:lib/stackmonitoring | package.json |
| npm | oci-streaming | file:lib/streaming | package.json |
| npm | oci-tenantmanagercontrolplane | file:lib/tenantmanagercontrolplane | package.json |
| npm | oci-threatintelligence | file:lib/threatintelligence | package.json |
| npm | oci-usageapi | file:lib/usageapi | package.json |
| npm | oci-vault | file:lib/vault | package.json |
| npm | oci-vbsinst | file:lib/vbsinst | package.json |
| npm | oci-visualbuilder | file:lib/visualbuilder | package.json |
| npm | oci-vnmonitoring | file:lib/vnmonitoring | package.json |
| npm | oci-vulnerabilityscanning | file:lib/vulnerabilityscanning | package.json |
| npm | oci-waas | file:lib/waas | package.json |
| npm | oci-waf | file:lib/waf | package.json |
| npm | oci-wlms | file:lib/wlms | package.json |
| npm | oci-workrequests | file:lib/workrequests | package.json |
| npm | oci-zpr | file:lib/zpr | package.json |
| npm | oci-generativeaidata | file:lib/generativeaidata | package.json |
| npm | oci-containerregistry | file:lib/containerregistry | package.json |
| npm | oci-self | file:lib/self | package.json |
| npm | oci-databasetoolsruntime | file:lib/databasetoolsruntime | package.json |
| npm | oci-waa | file:lib/waa | package.json |
| npm | oci-usage | file:lib/usage | package.json |
| npm | oci-costad | file:lib/costad | package.json |
| npm | oci-datacc | file:lib/datacc | package.json |
来自 GitHub 依赖图的完整解析依赖集合:2 个直接依赖与 48 个间接(传递)软件包。仓库提交锁文件时,传递闭包才是完整的。
| 注册表 | 软件包 | 版本 | 关系 |
|---|---|---|---|
| npm | oci-common | ../common | 直接 |
| npm | oci-workrequests | ../workrequests | 直接 |
| npm | @types/asn1 | ^0.2.1 | 间接 |
| npm | @types/chai | 4.1.7 | 间接 |
| npm | @types/isomorphic-fetch | 0.0.35 | 间接 |
| npm | @types/jsonwebtoken | 9.0.3 | 间接 |
| npm | @types/mocha | 5.2.5 | 间接 |
| npm | @types/node | 14.14.43 | 间接 |
| npm | @types/node | 16.11.11 | 间接 |
| npm | @types/node-fetch | 2.6.5 | 间接 |
| npm | @types/opossum | 4.1.1 | 间接 |
| npm | @types/sshpk | 1.10.3 | 间接 |
| npm | @types/uuid | 8.3.4 | 间接 |
| npm | @types/ws | ^7.4.7 | 间接 |
| npm | @typescript-eslint/eslint-plugin | 1.10.2 | 间接 |
| npm | @typescript-eslint/parser | 1.9.0 | 间接 |
| npm | await-semaphore | ^0.1.3 | 间接 |
| npm | awesome-typescript-loader | 3.1.3 | 间接 |
| npm | chai | ^4.2.0 | 间接 |
| npm | es6-promise | 4.2.6 | 间接 |
| npm | eslint | ^5.0.0 | 间接 |
| npm | http-signature | 1.3.0 | 间接 |
| npm | http-signature | 1.3.1 | 间接 |
| npm | husky | ^3.0.3 | 间接 |
| npm | isomorphic-fetch | 3.0.0 | 间接 |
| npm | jsonwebtoken | 9.0.3 | 间接 |
| npm | jssha | 3.3.1 | 间接 |
| npm | karma | ^6.4.1 | 间接 |
| npm | karma-chai | ^0.1.0 | 间接 |
| npm | karma-chrome-launcher | ^2.2.0 | 间接 |
| npm | karma-firefox-launcher | ^1.1.0 | 间接 |
| npm | karma-mocha | ^1.3.0 | 间接 |
| npm | karma-teamcity-reporter | ^1.1.0 | 间接 |
| npm | mocha | ^5.2.0 | 间接 |
| npm | mocha-teamcity-reporter | ^3.0.0 | 间接 |
| npm | node-fetch | 2.6.5 | 间接 |
| npm | opossum | 5.0.1 | 间接 |
| npm | prettier | ^1.18.2 | 间接 |
| npm | pretty-quick | ^1.11.1 | 间接 |
| npm | random-number-csprng | ^1.0.2 | 间接 |
| npm | source-map-loader | 0.2.1 | 间接 |
| npm | sshpk | 1.18.0 | 间接 |
| npm | ts-node | ^8.0.2 | 间接 |
| npm | typedoc | 0.19.0 | 间接 |
| npm | typedoc-neo-theme | 1.1.1 | 间接 |
| npm | typedoc-plugin-sourcefile-url | 1.0.4 | 间接 |
| npm | typescript | 4.1.3 | 间接 |
| npm | uuid | 11.0.2 | 间接 |
| npm | webpack | 4.0.0 | 间接 |
| npm | webpack-cli | ^3.3.0 | 间接 |
发现这份报告有不准确之处,或有想法要分享?错误的测量、未识别的工具、建议、疑问——都欢迎提出。每条消息都会被阅读并得到回复。