{"id":33175202,"url":"https://github.com/UiPath/corewf","last_synced_at":"2025-11-20T20:02:11.561Z","repository":{"id":41807508,"uuid":"66589457","full_name":"UiPath/CoreWF","owner":"UiPath","description":"WF runtime ported to work on .NET 6","archived":false,"fork":false,"pushed_at":"2025-11-06T12:45:08.000Z","size":9274,"stargazers_count":1177,"open_issues_count":33,"forks_count":226,"subscribers_count":92,"default_branch":"develop","last_synced_at":"2025-11-06T14:25:38.851Z","etag":null,"topics":["workflows"],"latest_commit_sha":null,"homepage":"","language":"C#","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/UiPath.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":"CODEOWNERS","security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null}},"created_at":"2016-08-25T20:07:20.000Z","updated_at":"2025-11-03T15:08:22.000Z","dependencies_parsed_at":"2025-08-19T17:18:03.375Z","dependency_job_id":"c2805a6c-464d-434c-83da-9cc2cca92dfa","html_url":"https://github.com/UiPath/CoreWF","commit_stats":{"total_commits":435,"total_committers":33,"mean_commits":"13.181818181818182","dds":0.4275862068965517,"last_synced_commit":"5f387a3bb2bce9b45019f758f3562f7f6f1572b4"},"previous_names":[],"tags_count":1,"template":false,"template_full_name":null,"purl":"pkg:github/UiPath/CoreWF","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/UiPath%2FCoreWF","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/UiPath%2FCoreWF/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/UiPath%2FCoreWF/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/UiPath%2FCoreWF/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/UiPath","download_url":"https://codeload.github.com/UiPath/CoreWF/tar.gz/refs/heads/develop","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/UiPath%2FCoreWF/sbom","scorecard":{"id":145654,"data":{"date":"2025-08-11","repo":{"name":"github.com/UiPath/CoreWF","commit":"4e3b160b51f4369b867ba0651a42e1e4db4f1779"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":5.3,"checks":[{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Code-Review","score":10,"reason":"all changesets reviewed","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Maintained","score":7,"reason":"9 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 7","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Warn: no topLevel permission defined: .github/workflows/lock.yml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Security-Policy","score":0,"reason":"security policy file not detected","details":["Warn: no security policy file detected","Warn: no security file to analyze","Warn: no security file to analyze","Warn: no security file to analyze"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: MIT License: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Binary-Artifacts","score":8,"reason":"binaries present in source code","details":["Warn: binary detected: src/Test/TestCases.Workflows/TestData/CompilerMissingAssembly.dll:1","Warn: binary detected: src/Test/TestCases.Workflows/TestData/JsonFileInstanceStore.dll:1"],"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Warn: third-party GitHubAction not pinned by hash: .github/workflows/lock.yml:11: update your workflow using https://app.stepsecurity.io/secureworkflow/UiPath/CoreWF/lock.yml/develop?enable=pin","Info:   0 out of   1 third-party GitHubAction dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 30 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-16T09:21:16.515Z","repository_id":41807508,"created_at":"2025-08-16T09:21:16.515Z","updated_at":"2025-08-16T09:21:16.515Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":285503668,"owners_count":27182913,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","status":"online","status_checked_at":"2025-11-20T02:00:05.334Z","response_time":54,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["workflows"],"created_at":"2025-11-16T02:00:36.117Z","updated_at":"2025-11-20T20:02:11.541Z","avatar_url":"https://github.com/UiPath.png","language":"C#","readme":"[![Build Status](https://uipath.visualstudio.com/CoreWF/_apis/build/status/UiPath.CoreWF?repoName=UiPath%2FCoreWF\u0026branchName=develop)](https://uipath.visualstudio.com/CoreWF/_build/latest?definitionId=2249\u0026repoName=UiPath%2FCoreWF\u0026branchName=develop)\n\n# CoreWF\n\nA port of the Windows Workflow Foundation (WF) runtime to .NET 6. It\nis [licensed](LICENSE) under the MIT License.\n\n__This is not an official Microsoft release of WF on .NET 6. CoreWF is a derivative work of Microsoft's copyrighted\nWindows Workflow Foundation.__\n\n## WF Overview\n\nWorkflows are multi-step processes composed of activities. Activities are single-purpose elements that can be composed\nof other activities. Workflows have only one root activity in the same way that an XML document has only one root\nelement.\n\nDevelopers can create workflows in code:\n\n```csharp\nvar helloWorldActivity = new Sequence()\n{\n    Activities =\n    {\n        new WriteLine\n        {\n            Text = \"Hello World!\"\n        }\n    }\n};\n```\n\nThe workflow can be run with the following code:\n\n```csharp\nSystem.Activities.WorkflowInvoker.Invoke(helloWorldActivity);\n```\n\nThe similarity of workflow/activity concepts to XML's document/element concepts means it's possible to write workflows\nin XML; specifically, an extension of XML called [XAML](https://docs.microsoft.com/dotnet/desktop-wpf/fundamentals/xaml)\n. The \"Hello World!\" workflow from above can be written as:\n\n```xml\n\u003cActivity \n x:Class=\"WorkflowConsoleApplication1.HelloWorld\"\n xmlns=\"http://schemas.microsoft.com/netfx/2009/xaml/activities\"\n xmlns:x=\"http://schemas.microsoft.com/winfx/2006/xaml\"\u003e\n  \u003cSequence\u003e\n    \u003cWriteLine Text=\"Hello World!\" /\u003e\n  \u003c/Sequence\u003e\n\u003c/Activity\u003e\n```\n\nThe XAML workflow can be loaded in CoreWF\nthrough [ActivityXamlServices](https://docs.microsoft.com/dotnet/api/system.activities.xamlintegration.activityxamlservices):\n\n```csharp\nvar helloWorldActivity = ActivityXamlServices.Load(new StringReader(xamlString));\nSystem.Activities.WorkflowInvoker.Invoke(helloWorldActivity);\n```\n\nWF in the .NET Framework includes a visual, drag-and-drop designer for workflows that produces XAML. The \"Hello World!\"\nworkflow looks like this in the designer:\n\n![Hello World! workflow in WF designer](WfDesignerHelloWorld.png)\n\nThe designer experience is not part of CoreWF but the XAML produced by the designer can be run in CoreWF (with some\nlimitations). The WF designer experience is available in Visual Studio 2019 by enabling the \"Windows Workflow\nFoundation\" individual component in the Visual Studio Installer.\n\n## Target Frameworks\n\nCoreWF targets .NET 6 and .NET 6 Windows. The .NET Windows target uses the **System.Xaml** included in the .NET Desktop\nRuntime. To use CoreWF on non-Windows runtimes, use the portable .NET 6 target. This is possible because CoreWF includes\na copy of the **System.Xaml** code.\n\n## Usage\n\nTo add this library to your project, use\nthe [NuGet package](https://www.nuget.org/packages/UiPath.Workflow).\n\n## Debug using Source Link\n\n[Preview builds setup](https://docs.microsoft.com/en-us/azure/devops/pipelines/artifacts/symbols?view=azure-devops#set-up-visual-studio)\n\n[![MyGet (dev)](https://img.shields.io/badge/CoreWf-Preview-brightgreen.svg)](https://uipath.visualstudio.com/Public.Feeds/_packaging?_a=package\u0026feed=UiPath-Internal\u0026view=versions\u0026package=UiPath.Workflow\u0026protocolType=NuGet)\n## Contributing\n\nCheck out the [contributing guide](CONTRIBUTING.md) for information on how to help CoreWF.\n\n## Code of Conduct\n\nThis project has adopted the code of conduct defined by the Contributor Covenant to clarify expected behavior in our\ncommunity. For more information see the [.NET Foundation Code of Conduct](https://dotnetfoundation.org/code-of-conduct).\n\n## .NET Foundation\n\nThis project is supported by the [.NET Foundation](https://dotnetfoundation.org).\n","funding_links":[],"categories":["Library (embedded usage)"],"sub_categories":[],"project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2FUiPath%2Fcorewf","html_url":"https://awesome.ecosyste.ms/projects/github.com%2FUiPath%2Fcorewf","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2FUiPath%2Fcorewf/lists"}