Skip to content

Commit

Permalink
update measureauthoringtool data: Sun Jan 19 14:44:53 UTC 2025
Browse files Browse the repository at this point in the history
  • Loading branch information
GitHub Actions committed Jan 19, 2025
1 parent bf78397 commit f7fd2cc
Show file tree
Hide file tree
Showing 72 changed files with 1,573 additions and 1,573 deletions.
Original file line number Diff line number Diff line change
Expand Up @@ -145,14 +145,14 @@
"dryness_table": "───────────────────────────────────────────────────────────────────────────────\nLanguage Files Lines Blanks Comments Code Complexity\n───────────────────────────────────────────────────────────────────────────────\nJava 155 9845 2038 100 7707 457\n(ULOC) 3269\n-------------------------------------------------------------------------------\nMarkdown 40 2665 141 0 2524 0\n(ULOC) 891\n-------------------------------------------------------------------------------\nJSON 7 24828 0 0 24828 0\n(ULOC) 3372\n-------------------------------------------------------------------------------\nYAML 2 62 10 0 52 0\n(ULOC) 47\n-------------------------------------------------------------------------------\nPlain Text 1 16 2 0 14 0\n(ULOC) 15\n-------------------------------------------------------------------------------\nXML 1 132 6 1 125 0\n(ULOC) 86\n───────────────────────────────────────────────────────────────────────────────\nTotal 206 37548 2197 101 35250 457\n───────────────────────────────────────────────────────────────────────────────\nUnique Lines of Code (ULOC) 7636\nDRYness % 0.20\n───────────────────────────────────────────────────────────────────────────────\nEstimated Cost to Develop (organic) $1,137,921\nEstimated Schedule Effort (organic) 14.45 months\nEstimated People Required (organic) 7.00\n───────────────────────────────────────────────────────────────────────────────\nProcessed 1258729 bytes, 1.259 megabytes (SI)\n───────────────────────────────────────────────────────────────────────────────\n"
},
"ossf_scorecard": {
"date": "2025-01-12T10:35:20Z",
"date": "2025-01-19T14:37:04Z",
"repo": {
"name": "github.com/measureauthoringtool/bonnie-patient-conversion",
"commit": "2b49ce0f84ae0f01a8c17edcc95944def250ac6f"
},
"scorecard": {
"version": "v5.0.0-132-g43d5832d",
"commit": "43d5832d25ccc597a9b94926b6ad43da25204085"
"version": "v5.0.0-135-gd28512b6",
"commit": "d28512b65877e042871b0df77f2204c5f65fa76b"
},
"score": 4.3,
"checks": [
Expand All @@ -162,7 +162,7 @@
"reason": "no binaries found in the repo",
"name": "Binary-Artifacts",
"documentation": {
"url": "https://github.com/ossf/scorecard/blob/43d5832d25ccc597a9b94926b6ad43da25204085/docs/checks.md#binary-artifacts",
"url": "https://github.com/ossf/scorecard/blob/d28512b65877e042871b0df77f2204c5f65fa76b/docs/checks.md#binary-artifacts",
"short": "Determines if the project has generated executable (binary) artifacts in the source repository."
}
},
Expand All @@ -172,7 +172,7 @@
"reason": "branch protection is not maximal on development and all release branches",
"name": "Branch-Protection",
"documentation": {
"url": "https://github.com/ossf/scorecard/blob/43d5832d25ccc597a9b94926b6ad43da25204085/docs/checks.md#branch-protection",
"url": "https://github.com/ossf/scorecard/blob/d28512b65877e042871b0df77f2204c5f65fa76b/docs/checks.md#branch-protection",
"short": "Determines if the default and release branches are protected with GitHub's branch protection settings."
}
},
Expand All @@ -182,7 +182,7 @@
"reason": "2 out of 12 merged PRs checked by a CI test -- score normalized to 1",
"name": "CI-Tests",
"documentation": {
"url": "https://github.com/ossf/scorecard/blob/43d5832d25ccc597a9b94926b6ad43da25204085/docs/checks.md#ci-tests",
"url": "https://github.com/ossf/scorecard/blob/d28512b65877e042871b0df77f2204c5f65fa76b/docs/checks.md#ci-tests",
"short": "Determines if the project runs tests before pull requests are merged."
}
},
Expand All @@ -192,7 +192,7 @@
"reason": "no effort to earn an OpenSSF best practices badge detected",
"name": "CII-Best-Practices",
"documentation": {
"url": "https://github.com/ossf/scorecard/blob/43d5832d25ccc597a9b94926b6ad43da25204085/docs/checks.md#cii-best-practices",
"url": "https://github.com/ossf/scorecard/blob/d28512b65877e042871b0df77f2204c5f65fa76b/docs/checks.md#cii-best-practices",
"short": "Determines if the project has an OpenSSF (formerly CII) Best Practices Badge."
}
},
Expand All @@ -202,7 +202,7 @@
"reason": "all changesets reviewed",
"name": "Code-Review",
"documentation": {
"url": "https://github.com/ossf/scorecard/blob/43d5832d25ccc597a9b94926b6ad43da25204085/docs/checks.md#code-review",
"url": "https://github.com/ossf/scorecard/blob/d28512b65877e042871b0df77f2204c5f65fa76b/docs/checks.md#code-review",
"short": "Determines if the project requires human code review before pull requests (aka merge requests) are merged."
}
},
Expand All @@ -212,7 +212,7 @@
"reason": "project has 1 contributing companies or organizations -- score normalized to 3",
"name": "Contributors",
"documentation": {
"url": "https://github.com/ossf/scorecard/blob/43d5832d25ccc597a9b94926b6ad43da25204085/docs/checks.md#contributors",
"url": "https://github.com/ossf/scorecard/blob/d28512b65877e042871b0df77f2204c5f65fa76b/docs/checks.md#contributors",
"short": "Determines if the project has a set of contributors from multiple organizations (e.g., companies)."
}
},
Expand All @@ -222,7 +222,7 @@
"reason": "no dangerous workflow patterns detected",
"name": "Dangerous-Workflow",
"documentation": {
"url": "https://github.com/ossf/scorecard/blob/43d5832d25ccc597a9b94926b6ad43da25204085/docs/checks.md#dangerous-workflow",
"url": "https://github.com/ossf/scorecard/blob/d28512b65877e042871b0df77f2204c5f65fa76b/docs/checks.md#dangerous-workflow",
"short": "Determines if the project's GitHub Action workflows avoid dangerous patterns."
}
},
Expand All @@ -232,7 +232,7 @@
"reason": "update tool detected",
"name": "Dependency-Update-Tool",
"documentation": {
"url": "https://github.com/ossf/scorecard/blob/43d5832d25ccc597a9b94926b6ad43da25204085/docs/checks.md#dependency-update-tool",
"url": "https://github.com/ossf/scorecard/blob/d28512b65877e042871b0df77f2204c5f65fa76b/docs/checks.md#dependency-update-tool",
"short": "Determines if the project uses a dependency update tool."
}
},
Expand All @@ -242,7 +242,7 @@
"reason": "project is not fuzzed",
"name": "Fuzzing",
"documentation": {
"url": "https://github.com/ossf/scorecard/blob/43d5832d25ccc597a9b94926b6ad43da25204085/docs/checks.md#fuzzing",
"url": "https://github.com/ossf/scorecard/blob/d28512b65877e042871b0df77f2204c5f65fa76b/docs/checks.md#fuzzing",
"short": "Determines if the project uses fuzzing."
}
},
Expand All @@ -252,7 +252,7 @@
"reason": "license file not detected",
"name": "License",
"documentation": {
"url": "https://github.com/ossf/scorecard/blob/43d5832d25ccc597a9b94926b6ad43da25204085/docs/checks.md#license",
"url": "https://github.com/ossf/scorecard/blob/d28512b65877e042871b0df77f2204c5f65fa76b/docs/checks.md#license",
"short": "Determines if the project has defined a license."
}
},
Expand All @@ -262,7 +262,7 @@
"reason": "project is archived",
"name": "Maintained",
"documentation": {
"url": "https://github.com/ossf/scorecard/blob/43d5832d25ccc597a9b94926b6ad43da25204085/docs/checks.md#maintained",
"url": "https://github.com/ossf/scorecard/blob/d28512b65877e042871b0df77f2204c5f65fa76b/docs/checks.md#maintained",
"short": "Determines if the project is \"actively maintained\"."
}
},
Expand All @@ -272,7 +272,7 @@
"reason": "packaging workflow not detected",
"name": "Packaging",
"documentation": {
"url": "https://github.com/ossf/scorecard/blob/43d5832d25ccc597a9b94926b6ad43da25204085/docs/checks.md#packaging",
"url": "https://github.com/ossf/scorecard/blob/d28512b65877e042871b0df77f2204c5f65fa76b/docs/checks.md#packaging",
"short": "Determines if the project is published as a package that others can easily download, install, easily update, and uninstall."
}
},
Expand All @@ -282,7 +282,7 @@
"reason": "dependency not pinned by hash detected -- score normalized to 0",
"name": "Pinned-Dependencies",
"documentation": {
"url": "https://github.com/ossf/scorecard/blob/43d5832d25ccc597a9b94926b6ad43da25204085/docs/checks.md#pinned-dependencies",
"url": "https://github.com/ossf/scorecard/blob/d28512b65877e042871b0df77f2204c5f65fa76b/docs/checks.md#pinned-dependencies",
"short": "Determines if the project has declared and pinned the dependencies of its build process."
}
},
Expand All @@ -292,7 +292,7 @@
"reason": "SAST tool is not run on all commits -- score normalized to 0",
"name": "SAST",
"documentation": {
"url": "https://github.com/ossf/scorecard/blob/43d5832d25ccc597a9b94926b6ad43da25204085/docs/checks.md#sast",
"url": "https://github.com/ossf/scorecard/blob/d28512b65877e042871b0df77f2204c5f65fa76b/docs/checks.md#sast",
"short": "Determines if the project uses static code analysis."
}
},
Expand All @@ -302,7 +302,7 @@
"reason": "security policy file not detected",
"name": "Security-Policy",
"documentation": {
"url": "https://github.com/ossf/scorecard/blob/43d5832d25ccc597a9b94926b6ad43da25204085/docs/checks.md#security-policy",
"url": "https://github.com/ossf/scorecard/blob/d28512b65877e042871b0df77f2204c5f65fa76b/docs/checks.md#security-policy",
"short": "Determines if the project has published a security policy."
}
},
Expand All @@ -312,7 +312,7 @@
"reason": "no releases found",
"name": "Signed-Releases",
"documentation": {
"url": "https://github.com/ossf/scorecard/blob/43d5832d25ccc597a9b94926b6ad43da25204085/docs/checks.md#signed-releases",
"url": "https://github.com/ossf/scorecard/blob/d28512b65877e042871b0df77f2204c5f65fa76b/docs/checks.md#signed-releases",
"short": "Determines if the project cryptographically signs release artifacts."
}
},
Expand All @@ -322,7 +322,7 @@
"reason": "detected GitHub workflow tokens with excessive permissions",
"name": "Token-Permissions",
"documentation": {
"url": "https://github.com/ossf/scorecard/blob/43d5832d25ccc597a9b94926b6ad43da25204085/docs/checks.md#token-permissions",
"url": "https://github.com/ossf/scorecard/blob/d28512b65877e042871b0df77f2204c5f65fa76b/docs/checks.md#token-permissions",
"short": "Determines if the project's workflows follow the principle of least privilege."
}
},
Expand All @@ -332,7 +332,7 @@
"reason": "45 existing vulnerabilities detected",
"name": "Vulnerabilities",
"documentation": {
"url": "https://github.com/ossf/scorecard/blob/43d5832d25ccc597a9b94926b6ad43da25204085/docs/checks.md#vulnerabilities",
"url": "https://github.com/ossf/scorecard/blob/d28512b65877e042871b0df77f2204c5f65fa76b/docs/checks.md#vulnerabilities",
"short": "Determines if the project has open, known unfixed vulnerabilities."
}
}
Expand Down
Loading

0 comments on commit f7fd2cc

Please sign in to comment.