公开记录
软件健康报告模式 0.34.0 · 指标 2.10.0 · 2026-09-20 01:19 UTC

yk-kd / pulumi

Pulumi - Infrastructure as Code in any programming language. Build infrastructure intuitively on any cloud using familiar languages 🚀

Go · Python · TypeScriptApache-2.0★ 0 星标⑂ 0 复刻始于 2023年11月复刻在 GitHub 上查看 ↗
类型命令行工具终端界面如何判定

yk-kd/pulumi 的健康指数为 100 分中的 33 分,处于「存在风险」区间。 其得分最高的类别是AI Readiness(79/100),最低的是Community & Adoption(12/100)。 最近一次更新在 1039 天前。 近期的大部分工作由 5 位贡献者完成。

33
总分 / 100
存在风险

软件健康指数

指标归入加权类别,统一采用 1–100 量表。总体分先取类别加权平均,再依据公开记录的分布进行校准,使各等级具有百分位含义;当公开证据触发高风险司法辖区政策时,评级会按政策调整,并设置 34(存在风险)的上限。

33
卓越93-100公开记录中的最高层级(约前 5%);基本满足所有检验标准
优秀80-92各方面均表现强劲;仅有少量不足
良好65-79健康;不足之处有限且可控
中等50-64可接受,但存在明显不足;建议进行审查
薄弱35-49多个领域存在实质性薄弱环节
存在风险20-34存在重大薄弱环节;采用时应保持审慎
危急1-19问题严重(项目被弃置、仅有单一维护者、缺乏基本工程规范)
活力社区与采用可持续性与治理工程质量安全AI 就绪度

评分画像

每条轴代表一个类别。形状比平均值更重要——健康的对象会填满整个图形,而“一峰一谷”式画像意味着某一维度的优势正掩盖另一维度的风险。

加权总体分 38 经校准后在公布的指数量表上为 33(记录校准 2026-08-02)。

所有权

yk-kd个人账户
2 关注者10 个公开仓库始于 2015年3月

该仓库由个人账户拥有。相较于组织支持的项目,单一所有者项目的延续性风险更高。

软件包生态系统

注册表软件包版本月下载量版本数最近发布
Gogithub.com/pulumi/pulumi/pkg/v3指向其他仓库——不计分v3.263.0-3633 天前
Gogithub.com/pulumi/pulumi/sdk/v3指向其他仓库——不计分v3.263.0-3684 天前
npm@pulumi/pulumi指向其他仓库——不计分3.263.011,749,9705,4073 天前

按类别列示的指标

活力

项目是否仍有生命——是否仍在编写代码,是否仍在发布版本?

20存在风险 · 占总体的 21%
评分方式
0/36推送新近度最近一次推送于 1,039 天前
0/36提交节奏52 周中有 0 周有提交
0/18提交量最近一年 0 次提交
0/10OpenSSF Scorecard:Maintained0 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0
所用输入
commits_last_year0
human_commit_share0.98
days_since_last_push1,039
active_weeks_last_year0

发布纪律

48薄弱
评分方式
16.2/27有发布版本34 个版本标签(无 GitHub 发布版本)
0/36发布时效最近一次发布版本于 1,045 天前
27/27发布节奏约每 3.8 天发布一次
0/10OpenSSF Scorecard:Signed-Releases无数据
所用输入
releases_count34
latest_release_tagv3.93.0
releases_from_tags
days_since_latest_release1,045
mean_days_between_releases3.8
已排除计分(无数据或不适用):OpenSSF Scorecard:Signed-Releases。 其余权重已重新归一化。

社区与采用

项目是否拥有用户、下载量与关注度,并具备欢迎贡献者参与的配置?

12危急 · 占总体的 17%
评分方式
0/60星标0 个星标
0/25复刻0 个复刻
0/15关注者0 位关注者
所用输入
forks0
stars0
watchers0
growth_stateunverified
growth_factor_pct100
growth_unverified_reasonno_history

社区健康

25存在风险
评分方式
0/22.5README
22.5/22.5许可证可识别的许可证(Apache-2.0)
0/18CONTRIBUTING 指南
0/13.5行为准则
0/7.2议题模板
0/6.3PR 模板
所用输入
has_readme
has_license
readme_badges6
has_contributing
has_issue_template
has_code_of_conduct
readme_badge_servicesbadge.fury.io, shields.io
has_pull_request_template

可持续性与治理

项目能否在其成员之外延续——巴士系数、响应能力、由谁支持,以及软件包的维护状况?

46薄弱 · 占总体的 23%
评分方式
45.9/54巴士系数5 位贡献者贡献了半数提交
17.5/22.5提交分布头号贡献者编写了 22% 的提交
13.5/13.5贡献者广度98 位贡献者
10/10OpenSSF Scorecard:Contributorsproject has 23 contributing companies or organizations
所用输入
bus_factor5
contributors_sampled98
top_contributor_share0.221
评分方式
0/42议题解决没有议题或无数据
0/30PR 接受没有已裁定的拉取请求或无数据
0/13Newcomer PR acceptance30 天内没有首次贡献者的 PR 得到裁决
0/15OpenSSF Scorecard:Code-ReviewFound 0/30 approved changesets -- score normalized to 0
所用输入
merged_prs0
open_issues0
closed_issues0
prs_merged_7d0
prs_decided_7d0
prs_merged_30d0
prs_decided_30d0
issue_closed_ratio
closed_unmerged_prs0
first_time_authors_30d0
first_time_prs_merged_30d0
first_time_prs_decided_30d0
已排除计分(无数据或不适用):议题解决, PR 接受, Newcomer PR acceptance。 其余权重已重新归一化。
评分方式
10/30所有权背书个人(用户)账户
0/20已验证域名不适用于个人账户
3.4/25所有者影响力yk-kd 有 2 位关注者
19.6/25既往记录10 个公开仓库,账户约 11 年
所用输入
followers2
owner_typeUser
is_verified
owner_loginyk-kd
public_repos10
account_age_days4,193
已排除计分(无数据或不适用):已验证域名。 其余权重已重新归一化。

工程质量

基础的工程与文档实践是否到位?

58中等 · 占总体的 19%

工程实践

80优秀
评分方式
24/24CI 工作流26 个工作流
24/24存在测试
16/16Linter 配置.eslintrc.js, .golangci.yml, .pylintrc
0/9.6Pre-commit 钩子
0/6.4.editorconfig
0/20OpenSSF Scorecard:CI-Tests无数据
所用输入
has_ci
has_tests
has_editorconfig
has_linter_config
has_precommit_config
已排除计分(无数据或不适用):OpenSSF Scorecard:CI-Tests。 其余权重已重新归一化。

文档

25存在风险
评分方式
0/30README
0/25文档目录
15/15文档 / 主页站点https://www.pulumi.com
0/10仓库描述
0/10主题标签
10/10Wiki
所用输入
topics
has_wiki
homepagehttps://www.pulumi.com
docs_sitehttps://www.pulumi.com
has_readme
has_docs_dir
has_description

安全

可见的安全与供应链实践是否稳固,且不存在未解决的高风险司法辖区暴露?

45薄弱 · 占总体的 16%

安全态势

31存在风险
评分方式
7.5/7.5Binary-Artifactsno binaries found in the repo
0/7.5Branch-Protectionbranch protection not enabled on development/release branches
0/2.5CI-Tests无数据
0/2.5CII-Best-Practicesno effort to earn an OpenSSF best practices badge detected
0/7.5Code-ReviewFound 0/30 approved changesets -- score normalized to 0
2.5/2.5Contributorsproject has 23 contributing companies or organizations
10/10Dangerous-Workflowno dangerous workflow patterns detected
0/7.5Dependency-Update-Toolno update tool detected
5/5Fuzzingproject is fuzzed
2.5/2.5许可证license file detected
0/7.5Maintained0 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0
0/5Packaging无数据
0.5/5Pinned-Dependenciesdependency not pinned by hash detected -- score normalized to 1
0/5SASTno SAST tool detected
0/5Security-Policysecurity policy file not detected
0/7.5Signed-Releases无数据
0/7.5Token-Permissionsdetected GitHub workflow tokens with excessive permissions
0/7.5Vulnerabilities114 existing vulnerabilities detected
所用输入
sourceopenssf_scorecard
checks_evaluated15
scorecard_versionv5.5.0
checks_inconclusive3
scorecard_aggregate3.1
已排除计分(无数据或不适用):CI-Tests, Packaging, Signed-Releases。 其余权重已重新归一化。
评分方式
35/35直接依赖不含已知公告没有直接依赖携带已知公告
25/25间接依赖不含已知公告没有间接依赖携带已知公告
0/40没有长期未处理的公告没有公告带有发布日期
所用输入
sourceosv
advisories0
affected_packages0
assessed_packages207
unassessed_packages0
affected_by_severitynone
direct_affected_packages0
已排除计分(无数据或不适用):没有长期未处理的公告。 其余权重已重新归一化。 比对的是 npm:@pulumi/pulumi@3.263.0 的运行时依赖闭包——安装已发布的软件包时真正被拉取进来的内容——共 207 个软件包。 未对可达性进行分析。

AI 就绪度

该仓库在多大程度上具备与 AI 编码代理协同开发与维护的条件?权重刻意设小(4%):代理工具链是一项真实的维护信号,但完全不具备的仓库仍可达到 100/100。

79良好 · 占总体的 4%
评分方式
0/45代理指令没有 CLAUDE.md / AGENTS.md / 编辑器规则
15/15机器可读文档(llms.txt)项目网站提供 llms.txt(https://www.pulumi.com/llms.txt)
40/40可读的提交历史98 次人类提交中有 98 次说明了意图(结构化标题或解释性正文)
所用输入
has_llms_txt
llms_txt_urlhttps://www.pulumi.com/llms.txt
legible_history_share1
agent_instruction_files
agent_instruction_max_bytes
评分方式
18/18一条命令的引导启动Makefile, developer-docs/Makefile, sdk/go/Makefile, sdk/nodejs/Makefile, sdk/python/Makefile
22/22自动化测试
11/11Lint / 格式化配置.eslintrc.js, .golangci.yml, .pylintrc
11/11静态类型检查pkg/codegen/testing/test/testdata/azure-native-nested-types/nodejs/tsconfig.json, pkg/codegen/testing/test/testdata/azure-native-nested-types/python/pulumi_azure_native/py.typed, pkg/codegen/testing/test/testdata/cyclic-types/nodejs/tsconfig.json, pkg/codegen/testing/test/testdata/cyclic-types/python/pulumi_example/py.typed, pkg/codegen/testing/test/testdata/dash-named-schema/nodejs/tsconfig.json, pkg/codegen/testing/test/testdata/dash-named-schema/python/pulumi_foo_bar/py.typed, pkg/codegen/testing/test/testdata/dashed-import-schema/nodejs/tsconfig.json, pkg/codegen/testing/test/testdata/dashed-import-schema/python/pulumi_plant/py.typed, pkg/codegen/testing/test/testdata/different-enum/nodejs/tsconfig.json, pkg/codegen/testing/test/testdata/different-enum/python/pulumi_plant/py.typed, pkg/codegen/testing/test/testdata/embedded-crd-types/nodejs/tsconfig.json, pkg/codegen/testing/test/testdata/embedded-crd-types/python/pulumi_foo/py.typed, pkg/codegen/testing/test/testdata/enum-reference-python/nodejs/tsconfig.json, pkg/codegen/testing/test/testdata/enum-reference-python/python/pulumi_example/py.typed, pkg/codegen/testing/test/testdata/enum-reference/nodejs/tsconfig.json, pkg/codegen/testing/test/testdata/enum-reference/python/pulumi_example/py.typed, pkg/codegen/testing/test/testdata/external-enum/nodejs/tsconfig.json, pkg/codegen/testing/test/testdata/external-enum/python/pulumi_example/py.typed, pkg/codegen/testing/test/testdata/external-node-compatibility/nodejs/tsconfig.json, pkg/codegen/testing/test/testdata/external-python-same-module-name/python/pulumi_example/py.typed, pkg/codegen/testing/test/testdata/external-resource-schema/nodejs/tsconfig.json, pkg/codegen/testing/test/testdata/external-resource-schema/python/pulumi_example/py.typed, pkg/codegen/testing/test/testdata/functions-secrets/nodejs/tsconfig.json, pkg/codegen/testing/test/testdata/functions-secrets/python/pulumi_mypkg/py.typed, pkg/codegen/testing/test/testdata/hyphen-url/nodejs/tsconfig.json, pkg/codegen/testing/test/testdata/hyphen-url/python/pulumi_registrygeoreplication/py.typed, pkg/codegen/testing/test/testdata/hyphenated-symbols/python/pulumi_repro/py.typed, pkg/codegen/testing/test/testdata/naming-collisions/nodejs/tsconfig.json, pkg/codegen/testing/test/testdata/naming-collisions/python/pulumi_example/py.typed, pkg/codegen/testing/test/testdata/nested-module-thirdparty/nodejs/tsconfig.json, pkg/codegen/testing/test/testdata/nested-module-thirdparty/python/foo_bar/py.typed, pkg/codegen/testing/test/testdata/nested-module/nodejs/tsconfig.json, pkg/codegen/testing/test/testdata/nested-module/python/pulumi_foo/py.typed, pkg/codegen/testing/test/testdata/output-funcs-edgeorder/nodejs/tsconfig.json, pkg/codegen/testing/test/testdata/output-funcs-edgeorder/python/pulumi_myedgeorder/py.typed, pkg/codegen/testing/test/testdata/output-funcs-tfbridge20/nodejs/tsconfig.json, pkg/codegen/testing/test/testdata/output-funcs-tfbridge20/python/pulumi_mypkg/py.typed, pkg/codegen/testing/test/testdata/output-funcs/nodejs/tsconfig.json, pkg/codegen/testing/test/testdata/output-funcs/python/pulumi_mypkg/py.typed, pkg/codegen/testing/test/testdata/plain-and-default/nodejs/tsconfig.json, pkg/codegen/testing/test/testdata/plain-and-default/python/pulumi_foobar/py.typed, pkg/codegen/testing/test/testdata/plain-object-defaults/nodejs/tsconfig.json, pkg/codegen/testing/test/testdata/plain-object-defaults/python/pulumi_example/py.typed, pkg/codegen/testing/test/testdata/plain-object-disable-defaults/nodejs/tsconfig.json, pkg/codegen/testing/test/testdata/plain-object-disable-defaults/python/pulumi_example/py.typed, pkg/codegen/testing/test/testdata/plain-schema-gh6957/nodejs/tsconfig.json, pkg/codegen/testing/test/testdata/plain-schema-gh6957/python/pulumi_xyz/py.typed, pkg/codegen/testing/test/testdata/provider-config-schema/nodejs/tsconfig.json, pkg/codegen/testing/test/testdata/provider-config-schema/python/pulumi_configstation/py.typed, pkg/codegen/testing/test/testdata/provider-type-schema/nodejs/tsconfig.json, pkg/codegen/testing/test/testdata/provider-type-schema/python/pulumi_providerType/py.typed, pkg/codegen/testing/test/testdata/regress-8403/nodejs/tsconfig.json, pkg/codegen/testing/test/testdata/regress-8403/python/pulumi_mongodbatlas/py.typed, pkg/codegen/testing/test/testdata/regress-node-8110/nodejs/tsconfig.json, pkg/codegen/testing/test/testdata/regress-node-8110/python/pulumi_my8110/py.typed, pkg/codegen/testing/test/testdata/regress-py-12546/python/pulumi_plant/py.typed, pkg/codegen/testing/test/testdata/regress-py-14012/python/pulumi_foo/py.typed, pkg/codegen/testing/test/testdata/regress-py-tfbridge-611/python/pulumi_aws/py.typed, pkg/codegen/testing/test/testdata/replace-on-change/nodejs/tsconfig.json, pkg/codegen/testing/test/testdata/replace-on-change/python/pulumi_example/py.typed, pkg/codegen/testing/test/testdata/resource-args-python-case-insensitive/nodejs/tsconfig.json, pkg/codegen/testing/test/testdata/resource-args-python-case-insensitive/python/pulumi_example/py.typed, pkg/codegen/testing/test/testdata/resource-args-python/nodejs/tsconfig.json, pkg/codegen/testing/test/testdata/resource-args-python/python/pulumi_example/py.typed, pkg/codegen/testing/test/testdata/resource-property-overlap/nodejs/tsconfig.json, pkg/codegen/testing/test/testdata/resource-property-overlap/python/pulumi_example/py.typed, pkg/codegen/testing/test/testdata/secrets/nodejs/tsconfig.json, pkg/codegen/testing/test/testdata/secrets/python/pulumi_mypkg/py.typed, pkg/codegen/testing/test/testdata/simple-enum-schema/nodejs/tsconfig.json, pkg/codegen/testing/test/testdata/simple-enum-schema/python/pulumi_plant/py.typed, pkg/codegen/testing/test/testdata/simple-methods-schema-single-value-returns/nodejs/tsconfig.json, pkg/codegen/testing/test/testdata/simple-methods-schema-single-value-returns/python/pulumi_example/py.typed, pkg/codegen/testing/test/testdata/simple-methods-schema/nodejs/tsconfig.json, pkg/codegen/testing/test/testdata/simple-methods-schema/python/pulumi_example/py.typed, pkg/codegen/testing/test/testdata/simple-plain-schema-with-root-package/nodejs/tsconfig.json, pkg/codegen/testing/test/testdata/simple-plain-schema-with-root-package/python/pulumi_example/py.typed, pkg/codegen/testing/test/testdata/simple-plain-schema/nodejs/tsconfig.json, pkg/codegen/testing/test/testdata/simple-plain-schema/python/pulumi_example/py.typed, pkg/codegen/testing/test/testdata/simple-resource-schema-custom-pypackage-name/nodejs/tsconfig.json, pkg/codegen/testing/test/testdata/simple-resource-schema-custom-pypackage-name/python/custom_py_package/py.typed, pkg/codegen/testing/test/testdata/simple-resource-schema/nodejs/tsconfig.json, pkg/codegen/testing/test/testdata/simple-resource-schema/python/pulumi_example/py.typed, pkg/codegen/testing/test/testdata/simple-schema-pyproject/python/pulumi_example/py.typed, pkg/codegen/testing/test/testdata/simple-yaml-schema/nodejs/tsconfig.json, pkg/codegen/testing/test/testdata/simple-yaml-schema/python/pulumi_example/py.typed, pkg/codegen/testing/test/testdata/simplified-invokes/nodejs/tsconfig.json, pkg/codegen/testing/test/testdata/transpiled_examples/azure-app-service-pp/nodejs/tsconfig.json, pkg/codegen/testing/test/testdata/transpiled_examples/cue-random-pp/nodejs/tsconfig.json, pkg/codegen/testing/test/testdata/transpiled_examples/getting-started-pp/nodejs/tsconfig.json, pkg/codegen/testing/test/testdata/transpiled_examples/kubernetes-pp/nodejs/tsconfig.json, pkg/codegen/testing/test/testdata/transpiled_examples/readme-pp/nodejs/tsconfig.json, pkg/codegen/testing/test/testdata/transpiled_examples/stackreference-producer-pp/nodejs/tsconfig.json, pkg/codegen/testing/test/testdata/transpiled_examples/webserver-json-pp/nodejs/tsconfig.json, pkg/codegen/testing/test/testdata/transpiled_examples/webserver-pp/nodejs/tsconfig.json, sdk/go/auto/test/errors/compilation_error/typescript/tsconfig.json, sdk/go/auto/test/errors/runtime_error/typescript/tsconfig.json, sdk/nodejs/cmd/pulumi-language-nodejs/testdata/projects/l1-empty/tsconfig.json, sdk/nodejs/cmd/pulumi-language-nodejs/testdata/projects/l1-output-bool/tsconfig.json, sdk/nodejs/cmd/pulumi-language-nodejs/testdata/projects/l2-resource-simple/tsconfig.json, sdk/nodejs/cmd/pulumi-language-nodejs/testdata/sdks/simple-1.0.0/tsconfig.json, sdk/nodejs/tests/automation/data/tcfg/tsconfig.json, sdk/nodejs/tests/sxs_ts_test/tsconfig.json, sdk/nodejs/tsconfig.json, sdk/python/lib/pulumi/py.typed, sdk/python/lib/test/automation/errors/compilation_error/typescript/tsconfig.json, sdk/python/lib/test/automation/errors/runtime_error/typescript/tsconfig.json, sdk/python/mypy.ini, tests/examples/minimal/tsconfig.json, tests/examples/secrets/tsconfig.json, tests/integration/about/nodejs/tsconfig.json, tests/integration/cloud_secrets_provider/tsconfig.json, tests/integration/component_provider_schema/testcomponent/tsconfig.json, tests/integration/config_capture_e2e/nodejs/tsconfig.json, tests/integration/construct_component/testcomponent/tsconfig.json, tests/integration/construct_component_error_apply/testcomponent/tsconfig.json, tests/integration/construct_component_methods/testcomponent/tsconfig.json, tests/integration/construct_component_methods_errors/testcomponent/tsconfig.json, tests/integration/construct_component_methods_provider/testcomponent/tsconfig.json, tests/integration/construct_component_methods_resources/testcomponent/tsconfig.json, tests/integration/construct_component_methods_unknown/testcomponent/tsconfig.json, tests/integration/construct_component_output_values/testcomponent/tsconfig.json, tests/integration/construct_component_plain/testcomponent/tsconfig.json, tests/integration/construct_component_provider/testcomponent/tsconfig.json, tests/integration/construct_component_slow/testcomponent/tsconfig.json, tests/integration/construct_component_unknown/testcomponent/tsconfig.json, tests/integration/enums/nodejs/tsconfig.json, tests/integration/explicit_provider/tsconfig.json, tests/integration/get_created/tsconfig.json, tests/integration/invalid_package_json/tsconfig.json, tests/integration/large_resource/nodejs/tsconfig.json, tests/integration/nodejs/compiler_options/tsconfig.json, tests/integration/nodejs/esm-srcdir-ts/tsconfig.json, tests/integration/nodejs/esm-ts-compiled/tsconfig.json, tests/integration/nodejs/esm-ts-default-export/tsconfig.json, tests/integration/nodejs/esm-ts-nested-src/tsconfig.json, tests/integration/nodejs/esm-ts-specifier-resolution-node/tsconfig.json, tests/integration/nodejs/esm-ts/tsconfig.json, tests/integration/nodejs/omit-stacktrace/syntax-error/tsconfig.json, tests/integration/nodejs/omit-stacktrace/ts-error/tsconfig.json, tests/integration/nodejs/regression-12301/tsconfig.json, tests/integration/policy/policy_pack_w_config/tsconfig.json, tests/integration/policy/policy_pack_wo_config/tsconfig.json, tests/integration/provider_secret_config/tsconfig.json, tests/integration/read/import_acquire/step1/tsconfig.json, tests/integration/read/read_dbr/step1/tsconfig.json, tests/integration/read/read_relinquish/step1/tsconfig.json, tests/integration/read/read_replace/step1/tsconfig.json, tests/integration/secret_outputs/nodejs/tsconfig.json, tests/integration/stack_reference/nodejs/tsconfig.json, tests/integration/stack_reference_secrets/nodejs/step1/tsconfig.json, tests/integration/tsconfig/tsconfig.json
10/10可复现环境devcontainer, Dockerfile, lockfile
0/10已体现的代理实践最近 100 次提交中没有代理编写的提交
8/8自动化维护最近 100 次提交中有 2 次为自动依赖更新
1/10OpenSSF Scorecard:Pinned-Dependenciesdependency not pinned by hash detected -- score normalized to 1
所用输入
has_nix
has_tests
lockfilesgo.sum, package-lock.json, yarn.lock
has_dockerfile
typed_language
bootstrap_filesMakefile, developer-docs/Makefile, sdk/go/Makefile, sdk/nodejs/Makefile, sdk/python/Makefile
has_devcontainer
has_linter_config
typecheck_configspkg/codegen/testing/test/testdata/azure-native-nested-types/nodejs/tsconfig.json, pkg/codegen/testing/test/testdata/azure-native-nested-types/python/pulumi_azure_native/py.typed, pkg/codegen/testing/test/testdata/cyclic-types/nodejs/tsconfig.json, pkg/codegen/testing/test/testdata/cyclic-types/python/pulumi_example/py.typed, pkg/codegen/testing/test/testdata/dash-named-schema/nodejs/tsconfig.json, pkg/codegen/testing/test/testdata/dash-named-schema/python/pulumi_foo_bar/py.typed, pkg/codegen/testing/test/testdata/dashed-import-schema/nodejs/tsconfig.json, pkg/codegen/testing/test/testdata/dashed-import-schema/python/pulumi_plant/py.typed, pkg/codegen/testing/test/testdata/different-enum/nodejs/tsconfig.json, pkg/codegen/testing/test/testdata/different-enum/python/pulumi_plant/py.typed, pkg/codegen/testing/test/testdata/embedded-crd-types/nodejs/tsconfig.json, pkg/codegen/testing/test/testdata/embedded-crd-types/python/pulumi_foo/py.typed, pkg/codegen/testing/test/testdata/enum-reference-python/nodejs/tsconfig.json, pkg/codegen/testing/test/testdata/enum-reference-python/python/pulumi_example/py.typed, pkg/codegen/testing/test/testdata/enum-reference/nodejs/tsconfig.json, pkg/codegen/testing/test/testdata/enum-reference/python/pulumi_example/py.typed, pkg/codegen/testing/test/testdata/external-enum/nodejs/tsconfig.json, pkg/codegen/testing/test/testdata/external-enum/python/pulumi_example/py.typed, pkg/codegen/testing/test/testdata/external-node-compatibility/nodejs/tsconfig.json, pkg/codegen/testing/test/testdata/external-python-same-module-name/python/pulumi_example/py.typed, pkg/codegen/testing/test/testdata/external-resource-schema/nodejs/tsconfig.json, pkg/codegen/testing/test/testdata/external-resource-schema/python/pulumi_example/py.typed, pkg/codegen/testing/test/testdata/functions-secrets/nodejs/tsconfig.json, pkg/codegen/testing/test/testdata/functions-secrets/python/pulumi_mypkg/py.typed, pkg/codegen/testing/test/testdata/hyphen-url/nodejs/tsconfig.json, pkg/codegen/testing/test/testdata/hyphen-url/python/pulumi_registrygeoreplication/py.typed, pkg/codegen/testing/test/testdata/hyphenated-symbols/python/pulumi_repro/py.typed, pkg/codegen/testing/test/testdata/naming-collisions/nodejs/tsconfig.json, pkg/codegen/testing/test/testdata/naming-collisions/python/pulumi_example/py.typed, pkg/codegen/testing/test/testdata/nested-module-thirdparty/nodejs/tsconfig.json, pkg/codegen/testing/test/testdata/nested-module-thirdparty/python/foo_bar/py.typed, pkg/codegen/testing/test/testdata/nested-module/nodejs/tsconfig.json, pkg/codegen/testing/test/testdata/nested-module/python/pulumi_foo/py.typed, pkg/codegen/testing/test/testdata/output-funcs-edgeorder/nodejs/tsconfig.json, pkg/codegen/testing/test/testdata/output-funcs-edgeorder/python/pulumi_myedgeorder/py.typed, pkg/codegen/testing/test/testdata/output-funcs-tfbridge20/nodejs/tsconfig.json, pkg/codegen/testing/test/testdata/output-funcs-tfbridge20/python/pulumi_mypkg/py.typed, pkg/codegen/testing/test/testdata/output-funcs/nodejs/tsconfig.json, pkg/codegen/testing/test/testdata/output-funcs/python/pulumi_mypkg/py.typed, pkg/codegen/testing/test/testdata/plain-and-default/nodejs/tsconfig.json, pkg/codegen/testing/test/testdata/plain-and-default/python/pulumi_foobar/py.typed, pkg/codegen/testing/test/testdata/plain-object-defaults/nodejs/tsconfig.json, pkg/codegen/testing/test/testdata/plain-object-defaults/python/pulumi_example/py.typed, pkg/codegen/testing/test/testdata/plain-object-disable-defaults/nodejs/tsconfig.json, pkg/codegen/testing/test/testdata/plain-object-disable-defaults/python/pulumi_example/py.typed, pkg/codegen/testing/test/testdata/plain-schema-gh6957/nodejs/tsconfig.json, pkg/codegen/testing/test/testdata/plain-schema-gh6957/python/pulumi_xyz/py.typed, pkg/codegen/testing/test/testdata/provider-config-schema/nodejs/tsconfig.json, pkg/codegen/testing/test/testdata/provider-config-schema/python/pulumi_configstation/py.typed, pkg/codegen/testing/test/testdata/provider-type-schema/nodejs/tsconfig.json, pkg/codegen/testing/test/testdata/provider-type-schema/python/pulumi_providerType/py.typed, pkg/codegen/testing/test/testdata/regress-8403/nodejs/tsconfig.json, pkg/codegen/testing/test/testdata/regress-8403/python/pulumi_mongodbatlas/py.typed, pkg/codegen/testing/test/testdata/regress-node-8110/nodejs/tsconfig.json, pkg/codegen/testing/test/testdata/regress-node-8110/python/pulumi_my8110/py.typed, pkg/codegen/testing/test/testdata/regress-py-12546/python/pulumi_plant/py.typed, pkg/codegen/testing/test/testdata/regress-py-14012/python/pulumi_foo/py.typed, pkg/codegen/testing/test/testdata/regress-py-tfbridge-611/python/pulumi_aws/py.typed, pkg/codegen/testing/test/testdata/replace-on-change/nodejs/tsconfig.json, pkg/codegen/testing/test/testdata/replace-on-change/python/pulumi_example/py.typed, pkg/codegen/testing/test/testdata/resource-args-python-case-insensitive/nodejs/tsconfig.json, pkg/codegen/testing/test/testdata/resource-args-python-case-insensitive/python/pulumi_example/py.typed, pkg/codegen/testing/test/testdata/resource-args-python/nodejs/tsconfig.json, pkg/codegen/testing/test/testdata/resource-args-python/python/pulumi_example/py.typed, pkg/codegen/testing/test/testdata/resource-property-overlap/nodejs/tsconfig.json, pkg/codegen/testing/test/testdata/resource-property-overlap/python/pulumi_example/py.typed, pkg/codegen/testing/test/testdata/secrets/nodejs/tsconfig.json, pkg/codegen/testing/test/testdata/secrets/python/pulumi_mypkg/py.typed, pkg/codegen/testing/test/testdata/simple-enum-schema/nodejs/tsconfig.json, pkg/codegen/testing/test/testdata/simple-enum-schema/python/pulumi_plant/py.typed, pkg/codegen/testing/test/testdata/simple-methods-schema-single-value-returns/nodejs/tsconfig.json, pkg/codegen/testing/test/testdata/simple-methods-schema-single-value-returns/python/pulumi_example/py.typed, pkg/codegen/testing/test/testdata/simple-methods-schema/nodejs/tsconfig.json, pkg/codegen/testing/test/testdata/simple-methods-schema/python/pulumi_example/py.typed, pkg/codegen/testing/test/testdata/simple-plain-schema-with-root-package/nodejs/tsconfig.json, pkg/codegen/testing/test/testdata/simple-plain-schema-with-root-package/python/pulumi_example/py.typed, pkg/codegen/testing/test/testdata/simple-plain-schema/nodejs/tsconfig.json, pkg/codegen/testing/test/testdata/simple-plain-schema/python/pulumi_example/py.typed, pkg/codegen/testing/test/testdata/simple-resource-schema-custom-pypackage-name/nodejs/tsconfig.json, pkg/codegen/testing/test/testdata/simple-resource-schema-custom-pypackage-name/python/custom_py_package/py.typed, pkg/codegen/testing/test/testdata/simple-resource-schema/nodejs/tsconfig.json, pkg/codegen/testing/test/testdata/simple-resource-schema/python/pulumi_example/py.typed, pkg/codegen/testing/test/testdata/simple-schema-pyproject/python/pulumi_example/py.typed, pkg/codegen/testing/test/testdata/simple-yaml-schema/nodejs/tsconfig.json, pkg/codegen/testing/test/testdata/simple-yaml-schema/python/pulumi_example/py.typed, pkg/codegen/testing/test/testdata/simplified-invokes/nodejs/tsconfig.json, pkg/codegen/testing/test/testdata/transpiled_examples/azure-app-service-pp/nodejs/tsconfig.json, pkg/codegen/testing/test/testdata/transpiled_examples/cue-random-pp/nodejs/tsconfig.json, pkg/codegen/testing/test/testdata/transpiled_examples/getting-started-pp/nodejs/tsconfig.json, pkg/codegen/testing/test/testdata/transpiled_examples/kubernetes-pp/nodejs/tsconfig.json, pkg/codegen/testing/test/testdata/transpiled_examples/readme-pp/nodejs/tsconfig.json, pkg/codegen/testing/test/testdata/transpiled_examples/stackreference-producer-pp/nodejs/tsconfig.json, pkg/codegen/testing/test/testdata/transpiled_examples/webserver-json-pp/nodejs/tsconfig.json, pkg/codegen/testing/test/testdata/transpiled_examples/webserver-pp/nodejs/tsconfig.json, sdk/go/auto/test/errors/compilation_error/typescript/tsconfig.json, sdk/go/auto/test/errors/runtime_error/typescript/tsconfig.json, sdk/nodejs/cmd/pulumi-language-nodejs/testdata/projects/l1-empty/tsconfig.json, sdk/nodejs/cmd/pulumi-language-nodejs/testdata/projects/l1-output-bool/tsconfig.json, sdk/nodejs/cmd/pulumi-language-nodejs/testdata/projects/l2-resource-simple/tsconfig.json, sdk/nodejs/cmd/pulumi-language-nodejs/testdata/sdks/simple-1.0.0/tsconfig.json, sdk/nodejs/tests/automation/data/tcfg/tsconfig.json, sdk/nodejs/tests/sxs_ts_test/tsconfig.json, sdk/nodejs/tsconfig.json, sdk/python/lib/pulumi/py.typed, sdk/python/lib/test/automation/errors/compilation_error/typescript/tsconfig.json, sdk/python/lib/test/automation/errors/runtime_error/typescript/tsconfig.json, sdk/python/mypy.ini, tests/examples/minimal/tsconfig.json, tests/examples/secrets/tsconfig.json, tests/integration/about/nodejs/tsconfig.json, tests/integration/cloud_secrets_provider/tsconfig.json, tests/integration/component_provider_schema/testcomponent/tsconfig.json, tests/integration/config_capture_e2e/nodejs/tsconfig.json, tests/integration/construct_component/testcomponent/tsconfig.json, tests/integration/construct_component_error_apply/testcomponent/tsconfig.json, tests/integration/construct_component_methods/testcomponent/tsconfig.json, tests/integration/construct_component_methods_errors/testcomponent/tsconfig.json, tests/integration/construct_component_methods_provider/testcomponent/tsconfig.json, tests/integration/construct_component_methods_resources/testcomponent/tsconfig.json, tests/integration/construct_component_methods_unknown/testcomponent/tsconfig.json, tests/integration/construct_component_output_values/testcomponent/tsconfig.json, tests/integration/construct_component_plain/testcomponent/tsconfig.json, tests/integration/construct_component_provider/testcomponent/tsconfig.json, tests/integration/construct_component_slow/testcomponent/tsconfig.json, tests/integration/construct_component_unknown/testcomponent/tsconfig.json, tests/integration/enums/nodejs/tsconfig.json, tests/integration/explicit_provider/tsconfig.json, tests/integration/get_created/tsconfig.json, tests/integration/invalid_package_json/tsconfig.json, tests/integration/large_resource/nodejs/tsconfig.json, tests/integration/nodejs/compiler_options/tsconfig.json, tests/integration/nodejs/esm-srcdir-ts/tsconfig.json, tests/integration/nodejs/esm-ts-compiled/tsconfig.json, tests/integration/nodejs/esm-ts-default-export/tsconfig.json, tests/integration/nodejs/esm-ts-nested-src/tsconfig.json, tests/integration/nodejs/esm-ts-specifier-resolution-node/tsconfig.json, tests/integration/nodejs/esm-ts/tsconfig.json, tests/integration/nodejs/omit-stacktrace/syntax-error/tsconfig.json, tests/integration/nodejs/omit-stacktrace/ts-error/tsconfig.json, tests/integration/nodejs/regression-12301/tsconfig.json, tests/integration/policy/policy_pack_w_config/tsconfig.json, tests/integration/policy/policy_pack_wo_config/tsconfig.json, tests/integration/provider_secret_config/tsconfig.json, tests/integration/read/import_acquire/step1/tsconfig.json, tests/integration/read/read_dbr/step1/tsconfig.json, tests/integration/read/read_relinquish/step1/tsconfig.json, tests/integration/read/read_replace/step1/tsconfig.json, tests/integration/secret_outputs/nodejs/tsconfig.json, tests/integration/stack_reference/nodejs/tsconfig.json, tests/integration/stack_reference_secrets/nodejs/step1/tsconfig.json, tests/integration/tsconfig/tsconfig.json
agent_commit_share0
toolchain_manifestscmd/pulumi-test-language/go.mod, developer-docs/go.mod, pkg/codegen/testing/test/testdata/azure-native-nested-types/dotnet/Pulumi.AzureNative.csproj, pkg/codegen/testing/test/testdata/cyclic-types/dotnet/Pulumi.Example.csproj, pkg/codegen/testing/test/testdata/dash-named-schema/dotnet/Pulumi.FooBar.csproj, pkg/codegen/testing/test/testdata/dashed-import-schema/dotnet/Pulumi.Plant.csproj, pkg/codegen/testing/test/testdata/different-enum/dotnet/Pulumi.Plant.csproj, pkg/codegen/testing/test/testdata/enum-reference/dotnet/Pulumi.Example.csproj, pkg/codegen/testing/test/testdata/external-enum/dotnet/Pulumi.Example.csproj, pkg/codegen/testing/test/testdata/external-resource-schema/dotnet/Pulumi.Example.csproj, pkg/codegen/testing/test/testdata/functions-secrets/dotnet/Pulumi.Mypkg.csproj, pkg/codegen/testing/test/testdata/hyphen-url/dotnet/Pulumi.Registrygeoreplication.csproj, pkg/codegen/testing/test/testdata/naming-collisions/dotnet/Pulumi.Example.csproj, pkg/codegen/testing/test/testdata/nested-module-thirdparty/dotnet/Pulumi.FooBar.csproj, pkg/codegen/testing/test/testdata/nested-module/dotnet/Pulumi.Foo.csproj, pkg/codegen/testing/test/testdata/other-owned/dotnet/Other.Example.csproj, pkg/codegen/testing/test/testdata/output-funcs-edgeorder/dotnet/Pulumi.Myedgeorder.csproj, pkg/codegen/testing/test/testdata/output-funcs-tfbridge20/dotnet/Pulumi.Mypkg.csproj, pkg/codegen/testing/test/testdata/output-funcs/dotnet/Pulumi.Mypkg.csproj, pkg/codegen/testing/test/testdata/plain-and-default/dotnet/Pulumi.FooBar.csproj, pkg/codegen/testing/test/testdata/plain-object-defaults/dotnet/Pulumi.Example.csproj, pkg/codegen/testing/test/testdata/plain-object-disable-defaults/dotnet/Pulumi.Example.csproj, pkg/codegen/testing/test/testdata/plain-schema-gh6957/dotnet/Pulumi.Xyz.csproj, pkg/codegen/testing/test/testdata/provider-config-schema/dotnet/Configstation.Pulumi.Configstation.csproj, pkg/codegen/testing/test/testdata/provider-type-schema/dotnet/Pulumi.ProviderType.csproj, pkg/codegen/testing/test/testdata/regress-8403/dotnet/Pulumi.Mongodbatlas.csproj, pkg/codegen/testing/test/testdata/regress-node-8110/dotnet/Pulumi.My8110.csproj, pkg/codegen/testing/test/testdata/replace-on-change/dotnet/Pulumi.Example.csproj, pkg/codegen/testing/test/testdata/resource-args-python-case-insensitive/dotnet/Pulumi.Example.csproj, pkg/codegen/testing/test/testdata/resource-args-python/dotnet/Pulumi.Example.csproj, pkg/codegen/testing/test/testdata/resource-property-overlap/dotnet/Pulumi.Example.csproj, pkg/codegen/testing/test/testdata/secrets/dotnet/Pulumi.Mypkg.csproj, pkg/codegen/testing/test/testdata/simple-enum-schema/dotnet/Pulumi.Plant.csproj, pkg/codegen/testing/test/testdata/simple-methods-schema-single-value-returns/dotnet/Pulumi.Example.csproj, pkg/codegen/testing/test/testdata/simple-methods-schema/dotnet/Pulumi.Example.csproj, pkg/codegen/testing/test/testdata/simple-plain-schema-with-root-package/dotnet/Pulumi.Example.csproj, pkg/codegen/testing/test/testdata/simple-plain-schema/dotnet/Pulumi.Example.csproj, pkg/codegen/testing/test/testdata/simple-resource-schema-custom-pypackage-name/dotnet/Pulumi.Example.csproj, pkg/codegen/testing/test/testdata/simple-resource-schema/dotnet/Pulumi.Example.csproj, pkg/codegen/testing/test/testdata/simple-yaml-schema/dotnet/Pulumi.Example.csproj, pkg/codegen/testing/test/testdata/simplified-invokes/dotnet/Pulumi.Std.csproj, pkg/codegen/testing/test/testdata/transpiled_examples/cue-random-pp/dotnet/dotnet.csproj, pkg/codegen/testing/test/testdata/transpiled_examples/getting-started-pp/dotnet/dotnet.csproj, pkg/codegen/testing/test/testdata/transpiled_examples/kubernetes-pp/dotnet/dotnet.csproj, pkg/codegen/testing/test/testdata/transpiled_examples/random-pp/dotnet/dotnet.csproj, pkg/go.mod, sdk/go.mod, sdk/go/auto/test/errors/compilation_error/dotnet/dotnet.csproj, sdk/go/auto/test/errors/compilation_error/go/go.mod, sdk/go/auto/test/errors/conflict_error/go.mod, sdk/go/auto/test/errors/runtime_error/dotnet/adsfsdf.csproj, sdk/go/auto/test/errors/runtime_error/go/go.mod, sdk/go/auto/test/testproj/go.mod, sdk/go/pulumi-language-go/go.mod, sdk/go/pulumi-language-go/testdata/sample/dep/go.mod, sdk/go/pulumi-language-go/testdata/sample/indirect-dep/go.mod, sdk/go/pulumi-language-go/testdata/sample/plugin/go.mod, sdk/go/pulumi-language-go/testdata/sample/prog-subdir/go.mod, sdk/go/pulumi-language-go/testdata/sample/prog/go.mod, sdk/nodejs/cmd/pulumi-language-nodejs/go.mod, sdk/nodejs/tests/automation/data/testproj/go.mod, sdk/nodejs/tests/automation/data/testproj_dotnet/TestProj.csproj, sdk/python/cmd/pulumi-language-python/go.mod, sdk/python/lib/test/automation/data/testproj/go.mod, sdk/python/lib/test/automation/errors/compilation_error/dotnet/dotnet.csproj, sdk/python/lib/test/automation/errors/compilation_error/go/go.mod, sdk/python/lib/test/automation/errors/conflict_error/go.mod, sdk/python/lib/test/automation/errors/runtime_error/dotnet/adsfsdf.csproj, sdk/python/lib/test/automation/errors/runtime_error/go/go.mod, tests/benchmarks/go-alias-norm/go.mod, tests/go.mod, tests/integration/about/go/go.mod, tests/integration/aliases/go/adopt_component_child/step1/go.mod, tests/integration/aliases/go/adopt_into_component/step1/go.mod, tests/integration/aliases/go/extract_component_child/step1/go.mod, tests/integration/aliases/go/rename/step1/go.mod, tests/integration/aliases/go/rename_component/step1/go.mod, tests/integration/aliases/go/rename_component_and_child/step1/go.mod, tests/integration/aliases/go/rename_component_child/step1/go.mod, tests/integration/aliases/go/retype_component/step1/go.mod, tests/integration/aliases/go/retype_component_child/step1/go.mod, tests/integration/aliases/go/retype_parents/step1/go.mod, tests/integration/aliases/go/retype_remote_component_and_child/step1/go.mod, tests/integration/config_basic/go/go.mod, tests/integration/config_missing/go/go.mod, tests/integration/config_secrets_warn/go/go.mod, tests/integration/construct_component/go/go.mod, tests/integration/construct_component_methods/go/go.mod, tests/integration/construct_component_methods_errors/go/go.mod, tests/integration/construct_component_methods_provider/go/go.mod, tests/integration/construct_component_methods_resources/go/go.mod, tests/integration/construct_component_methods_unknown/go/go.mod, tests/integration/construct_component_output_values/go/go.mod, tests/integration/construct_component_plain/go/go.mod, tests/integration/construct_component_provider/go/go.mod, tests/integration/construct_component_provider_explicit/go/go.mod, tests/integration/construct_component_provider_propagation/go/go.mod, tests/integration/construct_component_resource_options/go/go.mod, tests/integration/construct_component_unknown/go/go.mod, tests/integration/construct_nested_component/go/go.mod, tests/integration/deleted_with/go/go.mod, tests/integration/empty/go/go.mod, tests/integration/empty/gorun/go.mod, tests/integration/empty/gorun_main/gorun_main_src/go.mod, tests/integration/gather_plugin/go/go.mod, tests/integration/get_resource/go/go.mod, tests/integration/go/component-configure-panic/go/go.mod, tests/integration/go/go-build-target/go.mod, tests/integration/go/go-exit-5/go.mod, tests/integration/go/go-exit-error/go.mod, tests/integration/go/program-panic/go.mod, tests/integration/large_resource/go/go.mod, tests/integration/printf/go/go.mod, tests/integration/project_main/go/a/path/to/main/go.mod, tests/integration/refresh/go/go.mod, tests/integration/resource_refs_get_resource/go/go.mod, tests/integration/rotate_passphrase/go.mod, tests/integration/stack_reference/go/go.mod, tests/integration/state_rename_parent/go.mod
dependency_bot_commit_share0.02
评分方式
45/45可类型检查的代码Go(静态类型)
54.5/55可控的文件大小采样的 3,626 个源文件中有 30 个超过 60KB
所用输入
primary_languageGo
largest_source_bytes285,817
source_files_sampled3,626
oversized_source_files30
评分方式
40/40API 模式(OpenAPI/GraphQL/proto)proto/google/protobuf/status.proto, proto/pulumi/alias.proto, proto/pulumi/analyzer.proto, proto/pulumi/codegen/hcl.proto, proto/pulumi/codegen/loader.proto, proto/pulumi/codegen/mapper.proto, proto/pulumi/converter.proto, proto/pulumi/engine.proto, proto/pulumi/errors.proto, proto/pulumi/language.proto, proto/pulumi/plugin.proto, proto/pulumi/provider.proto, proto/pulumi/resource.proto, proto/pulumi/source.proto, proto/pulumi/testing/language.proto
0/20MCP 服务器不适用于此类软件
40/40可运行示例example, examples, sample
所用输入
example_dirsexample, examples, sample
has_mcp_signal
api_schema_filesproto/google/protobuf/status.proto, proto/pulumi/alias.proto, proto/pulumi/analyzer.proto, proto/pulumi/codegen/hcl.proto, proto/pulumi/codegen/loader.proto, proto/pulumi/codegen/mapper.proto, proto/pulumi/converter.proto, proto/pulumi/engine.proto, proto/pulumi/errors.proto, proto/pulumi/language.proto, proto/pulumi/plugin.proto, proto/pulumi/provider.proto, proto/pulumi/resource.proto, proto/pulumi/source.proto, proto/pulumi/testing/language.proto
interfaces_expected_of
已排除计分(无数据或不适用):MCP 服务器。 其余权重已重新归一化。

关键数据

0GitHub 星标
98贡献者
0最近 12 个月提交数
1,039距最近推送天数
34发布版本数
5巴士系数(bus factor)
0开放议题
Go, PyPI软件包生态系统数

数据采集警告

  • Community profile unavailable
  • go package 'github.com/pulumi/pulumi/pkg/v3' points at a different repository (https://github.com/pulumi/pulumi); excluded from ecosystem scoring
  • go package 'github.com/pulumi/pulumi/sdk/v3' points at a different repository (https://github.com/pulumi/pulumi); excluded from ecosystem scoring
  • Could not fetch go package 'github.com/pulumi/pulumi/developer-docs' from its registry
  • npm package '@pulumi/pulumi' points at a different repository (https://github.com/pulumi/pulumi); excluded from ecosystem scoring
  • Could not fetch go package 'github.com/pulumi/pulumi/cmd/pulumi-test-language' from its registry
  • GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository

更多细节

OpenSSF Scorecard 3.1 / 10
3.1综合

来自开源项目 OpenSSF Scorecard 的独立、工具无关的安全评估。每项检查奖励的是安全实践本身,而非特定供应商的工具。Scorecard 无法判定的检查项标记为 不适用,并从安全评分中剔除(绝不按零分计)。Scorecard v5.5.0 · 2026-09-20 01:18 UTC

10Binary-Artifactsno binaries found in the repo
0Branch-Protectionbranch protection not enabled on development/release branches
不适用CI-Testsno pull request found
0CII-Best-Practicesno effort to earn an OpenSSF best practices badge detected
0Code-ReviewFound 0/30 approved changesets -- score normalized to 0
10Contributorsproject has 23 contributing companies or organizations
10Dangerous-Workflowno dangerous workflow patterns detected
0Dependency-Update-Toolno update tool detected
10Fuzzingproject is fuzzed
10Licenselicense file detected
0Maintained0 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0
不适用Packaginginternal error: Client.Actions.ListWorkflowRunsByFileName: internal error: ListWorkflowRunsByFileName: GET https://api.github.com/repos/yk-kd/pulumi/actions/workflows/ci-build-binaries.yml/runs?status=success: 404 Not Found []
1Pinned-Dependenciesdependency not pinned by hash detected -- score normalized to 1
0SASTno SAST tool detected
0Security-Policysecurity policy file not detected
不适用Signed-Releasesno releases found
0Token-Permissionsdetected GitHub workflow tokens with excessive permissions
0Vulnerabilities114 existing vulnerabilities detected
直接依赖 154
注册表软件包版本约束清单文件
Gogithub.com/pulumi/pulumi/sdk/v3v3.73.0developer-docs/go.mod
Gogithub.com/santhosh-tekuri/jsonschema/v5v5.0.0developer-docs/go.mod
Gocloud.google.com/go/loggingv1.7.0pkg/go.mod
Gocloud.google.com/go/storagev1.30.1pkg/go.mod
Gogithub.com/aws/aws-sdk-gov1.44.298pkg/go.mod
Gogithub.com/blang/semverv3.5.1+incompatiblepkg/go.mod
Gogithub.com/davecgh/go-spewv1.1.1pkg/go.mod
Gogithub.com/djherbis/timesv1.5.0pkg/go.mod
Gogithub.com/dustin/go-humanizev1.0.1pkg/go.mod
Gogithub.com/gedex/inflectorv0.0.0-20170307190818-16278e9db813pkg/go.mod
Gogithub.com/gofrs/uuidv4.2.0+incompatiblepkg/go.mod
Gogithub.com/golang/glogv1.1.0pkg/go.mod
Gogithub.com/golang/protobufv1.5.3pkg/go.mod
Gogithub.com/google/go-querystringv1.1.0pkg/go.mod
Gogithub.com/google/pprofv0.0.0-20230406165453-00490a63f317pkg/go.mod
Gogithub.com/gorilla/muxv1.8.0pkg/go.mod
Gogithub.com/grpc-ecosystem/grpc-opentracingv0.0.0-20180507213350-8e809c8a8645pkg/go.mod
Gogithub.com/hashicorp/go-multierrorv1.1.1pkg/go.mod
Gogithub.com/hashicorp/hcl/v2v2.17.0pkg/go.mod
Gogithub.com/iancoleman/strcasev0.2.0pkg/go.mod
Gogithub.com/ijc/Gottyv0.0.0-20170406111628-a8b993ba6abdpkg/go.mod
Gogithub.com/mitchellh/copystructurev1.2.0pkg/go.mod
Gogithub.com/moby/mobyv23.0.3+incompatiblepkg/go.mod
Gogithub.com/moby/termv0.0.0-20210619224110-3f7ff695adc6pkg/go.mod
Gogithub.com/mxschmitt/golang-combinationsv1.0.0pkg/go.mod
Gogithub.com/nbutton23/zxcvbn-gov0.0.0-20180912185939-ae427f1e4c1dpkg/go.mod
Gogithub.com/opentracing/opentracing-gov1.2.0pkg/go.mod
Gogithub.com/pgavlin/goldmarkv1.1.33-0.20200616210433-b5eb04559386pkg/go.mod
Gogithub.com/pulumi/pulumi/sdk/v3v3.92.0pkg/go.mod
Gogithub.com/santhosh-tekuri/jsonschema/v5v5.0.0pkg/go.mod
Gogithub.com/sergi/go-diffv1.3.1pkg/go.mod
Gogithub.com/spf13/cobrav1.7.0pkg/go.mod
Gogithub.com/spf13/pflagv1.0.5pkg/go.mod
Gogithub.com/stretchr/testifyv1.8.4pkg/go.mod
Gogithub.com/tweekmonster/luserv0.0.0-20161003172636-3fa38070dbd7pkg/go.mod
Gogithub.com/xeipuuv/gojsonschemav1.2.0pkg/go.mod
Gogithub.com/zclconf/go-ctyv1.13.2pkg/go.mod
Gogocloud.devv0.27.0pkg/go.mod
Gogocloud.dev/secrets/hashivaultv0.27.0pkg/go.mod
Gogolang.org/x/netv0.17.0pkg/go.mod
Gogolang.org/x/oauth2v0.8.0pkg/go.mod
Gogolang.org/x/syncv0.4.0pkg/go.mod
Gogoogle.golang.org/apiv0.126.0pkg/go.mod
Gogoogle.golang.org/genprotov0.0.0-20230726155614-23370e0ffb3epkg/go.mod
Gogoogle.golang.org/grpcv1.57.1pkg/go.mod
Gogopkg.in/yaml.v3v3.0.1pkg/go.mod
Gopgregory.net/rapidv0.6.1pkg/go.mod
Gosourcegraph.com/sourcegraph/appdashv0.0.0-20211028080628-e2786a622600pkg/go.mod
Gogithub.com/AlecAivazis/survey/v2v2.3.7pkg/go.mod
Gogithub.com/BurntSushi/tomlv1.2.1pkg/go.mod
Gogithub.com/Netflix/go-expectv0.0.0-20220104043353-73e0943537d2pkg/go.mod
Gogithub.com/aws/aws-sdk-go-v2v1.17.3pkg/go.mod
Gogithub.com/aws/aws-sdk-go-v2/configv1.15.15pkg/go.mod
Gogithub.com/aws/aws-sdk-go-v2/service/iamv1.19.0pkg/go.mod
Gogithub.com/aws/aws-sdk-go-v2/service/kmsv1.18.1pkg/go.mod
Gogithub.com/aws/aws-sdk-go-v2/service/stsv1.16.10pkg/go.mod
Gogithub.com/creack/ptyv1.1.17pkg/go.mod
Gogithub.com/edsrzf/mmap-gov1.1.0pkg/go.mod
Gogithub.com/go-git/go-git/v5v5.9.0pkg/go.mod
Gogithub.com/google/shlexv0.0.0-20191202100458-e7afc7fbc510pkg/go.mod
Gogithub.com/hexops/gotextdiffv1.0.3pkg/go.mod
Gogithub.com/hinshun/vt10xv0.0.0-20220301184237-5011da428d02pkg/go.mod
Gogithub.com/json-iterator/gov1.1.12pkg/go.mod
Gogithub.com/kballard/go-shellquotev0.0.0-20180428030007-95032a82bc51pkg/go.mod
Gogithub.com/muesli/cancelreaderv0.2.2pkg/go.mod
Gogithub.com/natefinch/atomicv1.0.1pkg/go.mod
Gogithub.com/pgavlin/diffv0.0.0-20230503175810-113847418e2epkg/go.mod
Gogithub.com/pkg/browserv0.0.0-20210115035449-ce105d075bb4pkg/go.mod
Gogithub.com/pkg/errorsv0.9.1pkg/go.mod
Gogithub.com/pulumi/escv0.5.7-0.20231030195049-f71961c0d5fapkg/go.mod
Gogithub.com/pulumi/pulumi-java/pkgv0.9.8pkg/go.mod
Gogithub.com/pulumi/pulumi-yamlv1.4.0pkg/go.mod
Gogithub.com/segmentio/encodingv0.3.5pkg/go.mod
Gogithub.com/shirou/gopsutil/v3v3.22.3pkg/go.mod
Gogithub.com/spf13/aferov1.9.5pkg/go.mod
Gogo.pennock.tech/tabularv1.1.3pkg/go.mod
Gogolang.org/x/modv0.13.0pkg/go.mod
Gogolang.org/x/termv0.13.0pkg/go.mod
Gogoogle.golang.org/protobufv1.31.0pkg/go.mod
Gogithub.com/blang/semverv3.5.1+incompatiblesdk/go.mod
Gogithub.com/cheggaaa/pbv1.0.29sdk/go.mod
Gogithub.com/djherbis/timesv1.5.0sdk/go.mod
Gogithub.com/golang/glogv1.1.0sdk/go.mod
Gogithub.com/golang/protobufv1.5.3sdk/go.mod
Gogithub.com/grpc-ecosystem/grpc-opentracingv0.0.0-20180507213350-8e809c8a8645sdk/go.mod
Gogithub.com/hashicorp/go-multierrorv1.1.1sdk/go.mod
Gogithub.com/mitchellh/go-psv1.0.0sdk/go.mod
Gogithub.com/nxadm/tailv1.4.8sdk/go.mod
Gogithub.com/opentracing/opentracing-gov1.2.0sdk/go.mod
Gogithub.com/pkg/errorsv0.9.1sdk/go.mod
Gogithub.com/rivo/unisegv0.4.4sdk/go.mod
Gogithub.com/rogpeppe/go-internalv1.11.0sdk/go.mod
Gogithub.com/sabhiram/go-gitignorev0.0.0-20210923224102-525f6e181f06sdk/go.mod
Gogithub.com/spf13/castv1.4.1sdk/go.mod
Gogithub.com/spf13/cobrav1.7.0sdk/go.mod
Gogithub.com/stretchr/testifyv1.8.4sdk/go.mod
Gogithub.com/texttheater/golang-levenshteinv1.0.1sdk/go.mod
Gogithub.com/tweekmonster/luserv0.0.0-20161003172636-3fa38070dbd7sdk/go.mod
Gogithub.com/uber/jaeger-client-gov2.30.0+incompatiblesdk/go.mod
Gogolang.org/x/cryptov0.14.0sdk/go.mod
Gogolang.org/x/modv0.13.0sdk/go.mod
Gogolang.org/x/netv0.17.0sdk/go.mod
Gogolang.org/x/sysv0.13.0sdk/go.mod
Gogoogle.golang.org/grpcv1.57.1sdk/go.mod
Gogopkg.in/yaml.v2v2.4.0sdk/go.mod
Gogopkg.in/yaml.v3v3.0.1sdk/go.mod
Gopgregory.net/rapidv0.5.5sdk/go.mod
Gosourcegraph.com/sourcegraph/appdashv0.0.0-20211028080628-e2786a622600sdk/go.mod
Gogithub.com/charmbracelet/bubblesv0.16.1sdk/go.mod
Gogithub.com/charmbracelet/bubbleteav0.24.2sdk/go.mod
Gogithub.com/charmbracelet/lipglossv0.7.1sdk/go.mod
Gogithub.com/go-git/go-git/v5v5.9.0sdk/go.mod
Gogithub.com/hashicorp/hcl/v2v2.17.0sdk/go.mod
Gogithub.com/pkg/termv1.1.0sdk/go.mod
Gogithub.com/pulumi/escv0.5.6sdk/go.mod
Gogithub.com/santhosh-tekuri/jsonschema/v5v5.0.0sdk/go.mod
Gogolang.org/x/termv0.13.0sdk/go.mod
Golukechampine.com/frandv1.4.2sdk/go.mod
Gogithub.com/hashicorp/go-versionv1.6.0sdk/go.mod
Gogithub.com/kevinburke/ssh_configv1.2.0sdk/go.mod
Gogoogle.golang.org/protobufv1.31.0sdk/go.mod
Gogithub.com/blang/semverv3.5.1+incompatiblecmd/pulumi-test-language/go.mod
Gogithub.com/pulumi/pulumi/pkg/v3v3.81.0cmd/pulumi-test-language/go.mod
Gogithub.com/pulumi/pulumi/sdk/v3v3.92.0cmd/pulumi-test-language/go.mod
Gogithub.com/segmentio/encodingv0.3.6cmd/pulumi-test-language/go.mod
Gogithub.com/stretchr/testifyv1.8.4cmd/pulumi-test-language/go.mod
Gogoogle.golang.org/grpcv1.57.1cmd/pulumi-test-language/go.mod
Gogoogle.golang.org/protobufv1.31.0cmd/pulumi-test-language/go.mod
Gogopkg.in/yaml.v2v2.4.0cmd/pulumi-test-language/go.mod
npm@grpc/grpc-js1.9.6sdk/nodejs/package.json
npm@logdna/tail-file^2.0.6sdk/nodejs/package.json
npm@opentelemetry/api^1.2.0sdk/nodejs/package.json
npm@opentelemetry/exporter-zipkin^1.6.0sdk/nodejs/package.json
npm@opentelemetry/instrumentation^0.32.0sdk/nodejs/package.json
npm@opentelemetry/instrumentation-grpc^0.32.0sdk/nodejs/package.json
npm@opentelemetry/resources^1.6.0sdk/nodejs/package.json
npm@opentelemetry/sdk-trace-base^1.6.0sdk/nodejs/package.json
npm@opentelemetry/sdk-trace-node^1.6.0sdk/nodejs/package.json
npm@opentelemetry/semantic-conventions^1.6.0sdk/nodejs/package.json
npm@pulumi/query^0.3.0sdk/nodejs/package.json
npmexeca^5.1.0sdk/nodejs/package.json
npmgoogle-protobuf^3.5.0sdk/nodejs/package.json
npmini^2.0.0sdk/nodejs/package.json
npmjs-yaml^3.14.0sdk/nodejs/package.json
npmminimist^1.2.6sdk/nodejs/package.json
npmnormalize-package-data^3.0.0sdk/nodejs/package.json
npmpkg-dir^7.0.0sdk/nodejs/package.json
npmread-package-tree^5.3.1sdk/nodejs/package.json
npmrequire-from-string^2.0.1sdk/nodejs/package.json
npmsemver^7.5.2sdk/nodejs/package.json
npmsource-map-support^0.5.6sdk/nodejs/package.json
npmts-node^7.0.1sdk/nodejs/package.json
npmtypescript~3.8.3sdk/nodejs/package.json
npmupath^1.1.0sdk/nodejs/package.json
全部依赖 未采集

本报告未能采集到解析后的依赖集合:GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository

依赖安全公告 0

安装 npm:@pulumi/pulumi@3.263.0 会引入 207 个包(直接与传递):其中 0 个存在已知公告,0 个为直接依赖。

没有已知公告影响已评估的依赖。

公告表示依赖图中记录的版本落入某条公告的受影响范围。可达性未经分析,且依赖图包含开发与测试的版本固定——某项发现可能只涉及工具链而非交付的软件。

原始 JSON 报告 机器可读

反馈

发现这份报告有不准确之处,或有想法要分享?错误的测量、未识别的工具、建议、疑问——都欢迎提出。每条消息都会被阅读并得到回复。

登录过程中消息不会丢失。

评分是信号,而非担保。 评分反映的是 GitHub 上公开可见的实践——不是代码审计,也不是安全保证。

缺失数据将被剔除并重新归一化权重,绝不按零分计。方法论已版本化并公开:指标 v2.10.0、模式 v0.34.0—— 完整方法论 · 指标知识库.

单项结果在整体记录中的位置: 汇总统计Go, npm.