{"id":13406203,"url":"https://github.com/apache/superset","last_synced_at":"2026-01-21T23:02:46.423Z","repository":{"id":35205225,"uuid":"39464018","full_name":"apache/superset","owner":"apache","description":"Apache Superset is a Data Visualization and Data Exploration Platform","archived":false,"fork":false,"pushed_at":"2026-01-10T15:38:11.000Z","size":935038,"stargazers_count":69985,"open_issues_count":1037,"forks_count":16481,"subscribers_count":1532,"default_branch":"master","last_synced_at":"2026-01-11T13:41:57.399Z","etag":null,"topics":["analytics","apache","apache-superset","asf","bi","business-analytics","business-intelligence","data-analysis","data-analytics","data-engineering","data-science","data-visualization","data-viz","flask","python","react","sql-editor","superset"],"latest_commit_sha":null,"homepage":"https://superset.apache.org/","language":"TypeScript","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/apache.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE.txt","code_of_conduct":"CODE_OF_CONDUCT.md","threat_model":null,"audit":null,"citation":null,"codeowners":".github/CODEOWNERS","security":".github/SECURITY.md","support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":"NOTICE","maintainers":null,"copyright":null,"agents":"AGENTS.md","dco":null,"cla":null}},"created_at":"2015-07-21T18:55:34.000Z","updated_at":"2026-01-11T12:00:06.000Z","dependencies_parsed_at":"2023-10-05T03:43:49.201Z","dependency_job_id":"afdeb42b-948d-4b55-ade3-ddaaf5db3f50","html_url":"https://github.com/apache/superset","commit_stats":{"total_commits":15780,"total_committers":1212,"mean_commits":13.01980198019802,"dds":0.8726869455006337,"last_synced_commit":"0e9c0f621ac9ddbcf889045f3d4772b1ee213e8d"},"previous_names":["apache/incubator-superset","mistercrunch/panoramix","airbnb/superset","airbnb/caravel"],"tags_count":536,"template":false,"template_full_name":null,"purl":"pkg:github/apache/superset","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/apache%2Fsuperset","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/apache%2Fsuperset/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/apache%2Fsuperset/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/apache%2Fsuperset/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/apache","download_url":"https://codeload.github.com/apache/superset/tar.gz/refs/heads/master","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/apache%2Fsuperset/sbom","scorecard":{"id":173371,"data":{"date":"2025-08-11","repo":{"name":"github.com/apache/superset","commit":"cb899f691b7c3fe92e8f0ba8a3d34c1e75294d85"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":5.9,"checks":[{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: .github/SECURITY.md:1","Info: Found linked content: .github/SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: .github/SECURITY.md:1","Info: Found text in security policy: .github/SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Maintained","score":10,"reason":"30 commit(s) and 23 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Code-Review","score":10,"reason":"all changesets reviewed","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE.txt:0","Info: FSF or OSI recognized license: Apache License 2.0: LICENSE.txt:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Signed-Releases","score":0,"reason":"Project has not signed or included provenance with any releases.","details":["Warn: release artifact superset-helm-chart-0.15.0 not signed: https://api.github.com/repos/apache/superset/releases/238335448","Warn: release artifact superset-helm-chart-0.14.3 not signed: https://api.github.com/repos/apache/superset/releases/233283429","Warn: release artifact superset-helm-chart-0.15.0 does not have provenance: https://api.github.com/repos/apache/superset/releases/238335448","Warn: release artifact superset-helm-chart-0.14.3 does not have provenance: https://api.github.com/repos/apache/superset/releases/233283429"],"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Warn: jobLevel 'actions' permission set to 'write': .github/workflows/bump-python-package.yml:28","Warn: jobLevel 'contents' permission set to 'write': .github/workflows/bump-python-package.yml:29","Warn: jobLevel 'checks' permission set to 'write': .github/workflows/bump-python-package.yml:31","Warn: jobLevel 'actions' permission set to 'write': .github/workflows/cancel_duplicates.yml:14","Info: jobLevel 'contents' permission set to 'read': .github/workflows/cancel_duplicates.yml:15","Info: jobLevel 'contents' permission set to 'read': .github/workflows/check_db_migration_confict.yml:24","Warn: jobLevel 'contents' permission set to 'write': .github/workflows/claude.yml:68","Info: jobLevel 'contents' permission set to 'read': .github/workflows/codeql-analysis.yml:23","Info: jobLevel 'actions' permission set to 'read': .github/workflows/codeql-analysis.yml:22","Info: jobLevel 'contents' permission set to 'read': .github/workflows/ephemeral-env.yml:208","Info: jobLevel 'contents' permission set to 'read': .github/workflows/issue_creation.yml:14","Info: jobLevel 'contents' permission set to 'read': .github/workflows/labeler.yml:8","Warn: jobLevel 'contents' permission set to 'write': .github/workflows/latest-release-tag.yml:11","Info: jobLevel 'contents' permission set to 'read': .github/workflows/pr-lint.yml:15","Info: jobLevel 'contents' permission set to 'read': .github/workflows/prefer-typescript.yml:26","Info: jobLevel 'contents' permission set to 'read': .github/workflows/superset-e2e.yml:34","Info: jobLevel 'pull-requests' permission set to 'read': .github/workflows/superset-e2e.yml:35","Warn: jobLevel 'contents' permission set to 'write': .github/workflows/superset-helm-release.yml:25","Info: jobLevel 'contents' permission set to 'read': .github/workflows/supersetbot.yml:23","Info: jobLevel 'contents' permission set to 'read': .github/workflows/tag-release.yml:105","Warn: no topLevel permission defined: .github/workflows/bump-python-package.yml:1","Warn: no topLevel permission defined: .github/workflows/cancel_duplicates.yml:1","Warn: no topLevel permission defined: .github/workflows/check-python-deps.yml:1","Warn: no topLevel permission defined: .github/workflows/check_db_migration_confict.yml:1","Warn: no topLevel permission defined: .github/workflows/claude.yml:1","Warn: no topLevel permission defined: .github/workflows/codeql-analysis.yml:1","Info: topLevel 'contents' permission set to 'read': .github/workflows/dependency-review.yml:22","Warn: no topLevel permission defined: .github/workflows/docker.yml:1","Warn: no topLevel permission defined: .github/workflows/embedded-sdk-release.yml:1","Warn: no topLevel permission defined: .github/workflows/embedded-sdk-test.yml:1","Warn: no topLevel permission defined: .github/workflows/ephemeral-env-pr-close.yml:1","Warn: no topLevel permission defined: .github/workflows/ephemeral-env.yml:1","Warn: no topLevel permission defined: .github/workflows/generate-FOSSA-report.yml:1","Warn: no topLevel permission defined: .github/workflows/github-action-validator.yml:1","Warn: no topLevel permission defined: .github/workflows/issue_creation.yml:1","Warn: no topLevel permission defined: .github/workflows/labeler.yml:1","Warn: no topLevel permission defined: .github/workflows/latest-release-tag.yml:1","Warn: no topLevel permission defined: .github/workflows/license-check.yml:1","Warn: no topLevel permission defined: .github/workflows/no-hold-label.yml:1","Warn: no topLevel permission defined: .github/workflows/pr-lint.yml:1","Warn: no topLevel permission defined: .github/workflows/pre-commit.yml:1","Warn: no topLevel permission defined: .github/workflows/prefer-typescript.yml:1","Warn: no topLevel permission defined: .github/workflows/release.yml:1","Warn: no topLevel permission defined: .github/workflows/superset-applitool-cypress.yml:1","Warn: no topLevel permission defined: .github/workflows/superset-applitools-storybook.yml:1","Warn: no topLevel permission defined: .github/workflows/superset-cli.yml:1","Warn: no topLevel permission defined: .github/workflows/superset-docs-deploy.yml:1","Warn: no topLevel permission defined: .github/workflows/superset-docs-verify.yml:1","Warn: no topLevel permission defined: .github/workflows/superset-e2e.yml:1","Warn: no topLevel permission defined: .github/workflows/superset-frontend.yml:1","Warn: no topLevel permission defined: .github/workflows/superset-helm-lint.yml:1","Warn: no topLevel permission defined: .github/workflows/superset-helm-release.yml:1","Warn: no topLevel permission defined: .github/workflows/superset-python-integrationtest.yml:1","Warn: no topLevel permission defined: .github/workflows/superset-python-presto-hive.yml:1","Warn: no topLevel permission defined: .github/workflows/superset-python-unittest.yml:1","Warn: no topLevel permission defined: .github/workflows/superset-translations.yml:1","Warn: no topLevel permission defined: .github/workflows/superset-websocket.yml:1","Warn: no topLevel permission defined: .github/workflows/supersetbot.yml:1","Warn: no topLevel permission defined: .github/workflows/tag-release.yml:1","Warn: no topLevel permission defined: .github/workflows/tech-debt.yml:1","Warn: no topLevel permission defined: .github/workflows/welcome-new-users.yml:1"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Packaging","score":10,"reason":"packaging workflow detected","details":["Info: Project packages its releases by way of GitHub Actions.: .github/workflows/ephemeral-env.yml:142"],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Pinned-Dependencies","score":1,"reason":"dependency not pinned by hash detected -- score normalized to 1","details":["Info: Possibly incomplete results: error parsing shell code: reached EOF without closing quote \": .github/workflows/release.yml:34","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/bump-python-package.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/superset/bump-python-package.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/bump-python-package.yml:44: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/superset/bump-python-package.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cancel_duplicates.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/superset/cancel_duplicates.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/check-python-deps.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/superset/check-python-deps.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/check_db_migration_confict.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/superset/check_db_migration_confict.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/check_db_migration_confict.yml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/superset/check_db_migration_confict.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/claude.yml:47: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/superset/claude.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/claude.yml:74: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/superset/claude.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/claude.yml:79: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/superset/claude.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/superset/codeql-analysis.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:44: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/superset/codeql-analysis.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:56: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/superset/codeql-analysis.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/dependency-review.yml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/superset/dependency-review.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/dependency-review.yml:32: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/superset/dependency-review.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/dependency-review.yml:56: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/superset/dependency-review.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docker.yml:45: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/superset/docker.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docker.yml:120: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/superset/docker.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/embedded-sdk-release.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/superset/embedded-sdk-release.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/embedded-sdk-release.yml:32: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/superset/embedded-sdk-release.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/embedded-sdk-test.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/superset/embedded-sdk-test.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/embedded-sdk-test.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/superset/embedded-sdk-test.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ephemeral-env-pr-close.yml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/superset/ephemeral-env-pr-close.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ephemeral-env-pr-close.yml:53: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/superset/ephemeral-env-pr-close.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ephemeral-env-pr-close.yml:66: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/superset/ephemeral-env-pr-close.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ephemeral-env.yml:152: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/superset/ephemeral-env.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ephemeral-env.yml:181: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/superset/ephemeral-env.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ephemeral-env.yml:189: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/superset/ephemeral-env.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ephemeral-env.yml:212: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/superset/ephemeral-env.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ephemeral-env.yml:217: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/superset/ephemeral-env.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ephemeral-env.yml:225: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/superset/ephemeral-env.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ephemeral-env.yml:240: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/superset/ephemeral-env.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ephemeral-env.yml:255: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/superset/ephemeral-env.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ephemeral-env.yml:288: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/superset/ephemeral-env.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ephemeral-env.yml:310: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/superset/ephemeral-env.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ephemeral-env.yml:323: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/superset/ephemeral-env.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ephemeral-env.yml:58: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/superset/ephemeral-env.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ephemeral-env.yml:89: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/superset/ephemeral-env.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ephemeral-env.yml:111: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/superset/ephemeral-env.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/generate-FOSSA-report.yml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/superset/generate-FOSSA-report.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/generate-FOSSA-report.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/superset/generate-FOSSA-report.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/github-action-validator.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/superset/github-action-validator.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/github-action-validator.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/superset/github-action-validator.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue_creation.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/superset/issue_creation.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/labeler.yml:12: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/superset/labeler.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/latest-release-tag.yml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/superset/latest-release-tag.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/license-check.yml:18: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/superset/license-check.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/license-check.yml:23: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/superset/license-check.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/no-hold-label.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/superset/no-hold-label.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-lint.yml:19: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/superset/pr-lint.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pre-commit.yml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/superset/pre-commit.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pre-commit.yml:42: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/superset/pre-commit.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pre-commit.yml:57: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/superset/pre-commit.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/prefer-typescript.yml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/superset/prefer-typescript.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/superset/release.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:45: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/superset/release.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:51: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/superset/release.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:65: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/superset/release.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/superset-applitool-cypress.yml:54: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/superset/superset-applitool-cypress.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/superset-applitool-cypress.yml:66: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/superset/superset-applitool-cypress.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/superset-applitools-storybook.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/superset/superset-applitools-storybook.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/superset-applitools-storybook.yml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/superset/superset-applitools-storybook.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/superset-cli.yml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/superset/superset-cli.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/superset-docs-deploy.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/superset/superset-docs-deploy.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/superset-docs-deploy.yml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/superset/superset-docs-deploy.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/superset-docs-deploy.yml:44: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/superset/superset-docs-deploy.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/superset-docs-verify.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/superset/superset-docs-verify.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/superset-docs-verify.yml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/superset/superset-docs-verify.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/superset-docs-verify.yml:59: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/superset/superset-docs-verify.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/superset-docs-verify.yml:64: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/superset/superset-docs-verify.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/superset-e2e.yml:72: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/superset/superset-e2e.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/superset-e2e.yml:79: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/superset/superset-e2e.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/superset-e2e.yml:86: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/superset/superset-e2e.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/superset-e2e.yml:112: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/superset/superset-e2e.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/superset-e2e.yml:149: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/superset/superset-e2e.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/superset-frontend.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/superset/superset-frontend.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/superset-frontend.yml:61: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/superset/superset-frontend.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/superset-frontend.yml:76: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/superset/superset-frontend.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/superset-frontend.yml:93: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/superset/superset-frontend.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/superset-frontend.yml:104: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/superset/superset-frontend.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/superset-frontend.yml:116: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/superset/superset-frontend.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/superset-frontend.yml:130: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/superset/superset-frontend.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/superset-frontend.yml:154: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/superset/superset-frontend.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/superset-helm-lint.yml:19: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/superset/superset-helm-lint.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/superset-helm-lint.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/superset/superset-helm-lint.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/superset-helm-release.yml:32: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/superset/superset-helm-release.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/superset-helm-release.yml:45: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/superset/superset-helm-release.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/superset-helm-release.yml:104: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/superset/superset-helm-release.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/superset-python-integrationtest.yml:44: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/superset/superset-python-integrationtest.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/superset-python-integrationtest.yml:71: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/superset/superset-python-integrationtest.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/superset-python-integrationtest.yml:102: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/superset/superset-python-integrationtest.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/superset-python-integrationtest.yml:132: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/superset/superset-python-integrationtest.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/superset-python-integrationtest.yml:155: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/superset/superset-python-integrationtest.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/superset-python-integrationtest.yml:184: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/superset/superset-python-integrationtest.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/superset-python-presto-hive.yml:51: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/superset/superset-python-presto-hive.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/superset-python-presto-hive.yml:80: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/superset/superset-python-presto-hive.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/superset-python-presto-hive.yml:111: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/superset/superset-python-presto-hive.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/superset-python-presto-hive.yml:148: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/superset/superset-python-presto-hive.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/superset-python-unittest.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/superset/superset-python-unittest.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/superset-python-unittest.yml:56: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/superset/superset-python-unittest.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/superset-translations.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/superset/superset-translations.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/superset-translations.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/superset/superset-translations.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/superset-translations.yml:52: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/superset/superset-translations.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/superset-websocket.yml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/superset/superset-websocket.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/supersetbot.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/superset/supersetbot.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/supersetbot.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/superset/supersetbot.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/tag-release.yml:50: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/superset/tag-release.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/tag-release.yml:63: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/superset/tag-release.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/tag-release.yml:110: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/superset/tag-release.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/tag-release.yml:115: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/superset/tag-release.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/tech-debt.yml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/superset/tech-debt.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/tech-debt.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/superset/tech-debt.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/welcome-new-users.yml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/superset/welcome-new-users.yml/master?enable=pin","Warn: containerImage not pinned by hash: .devcontainer/Dockerfile:2","Warn: containerImage not pinned by hash: Dockerfile:32","Warn: containerImage not pinned by hash: Dockerfile:79","Warn: containerImage not pinned by hash: Dockerfile:104","Warn: containerImage not pinned by hash: Dockerfile:126","Warn: containerImage not pinned by hash: Dockerfile:146","Warn: containerImage not pinned by hash: Dockerfile:218","Warn: containerImage not pinned by hash: Dockerfile:234","Warn: containerImage not pinned by hash: Dockerfile:259","Warn: containerImage not pinned by hash: RELEASING/Dockerfile.from_local_tarball:17: pin your Docker image by updating python:3.10-slim-bookworm to python:3.10-slim-bookworm@sha256:f3fc6b72ff54ef94e52b1c9ede8a3d03281adc8a87f393ffbaf42dfc2ff593cc","Warn: containerImage not pinned by hash: RELEASING/Dockerfile.from_svn_tarball:17: pin your Docker image by updating python:3.10-slim-bookworm to python:3.10-slim-bookworm@sha256:f3fc6b72ff54ef94e52b1c9ede8a3d03281adc8a87f393ffbaf42dfc2ff593cc","Warn: containerImage not pinned by hash: RELEASING/Dockerfile.make_docs:17: pin your Docker image by updating python:3.10-slim-bookworm to python:3.10-slim-bookworm@sha256:f3fc6b72ff54ef94e52b1c9ede8a3d03281adc8a87f393ffbaf42dfc2ff593cc","Warn: containerImage not pinned by hash: RELEASING/Dockerfile.make_tarball:17: pin your Docker image by updating python:3.10-slim-bookworm to python:3.10-slim-bookworm@sha256:f3fc6b72ff54ef94e52b1c9ede8a3d03281adc8a87f393ffbaf42dfc2ff593cc","Warn: containerImage not pinned by hash: dockerize.Dockerfile:18: pin your Docker image by updating alpine:latest to alpine:latest@sha256:4bcff63911fcb4448bd4fdacec207030997caf25e9bea4045fa6c8c44de311d1","Warn: containerImage not pinned by hash: superset-websocket/Dockerfile:15","Warn: containerImage not pinned by hash: superset-websocket/Dockerfile:25: pin your Docker image by updating node:16-alpine to node:16-alpine@sha256:a1f9d027912b58a7c75be7716c97cfbc6d3099f3a97ed84aa490be9dee20e787","Warn: downloadThenRun not pinned by hash: .devcontainer/Dockerfile:16-17","Warn: pipCommand not pinned by hash: Dockerfile:117","Warn: downloadThenRun not pinned by hash: RELEASING/Dockerfile.from_local_tarball:37-40","Warn: pipCommand not pinned by hash: RELEASING/Dockerfile.from_local_tarball:60-62","Warn: pipCommand not pinned by hash: RELEASING/Dockerfile.from_local_tarball:60-62","Warn: pipCommand not pinned by hash: RELEASING/Dockerfile.from_local_tarball:60-62","Warn: downloadThenRun not pinned by hash: RELEASING/Dockerfile.from_svn_tarball:37-40","Warn: pipCommand not pinned by hash: RELEASING/Dockerfile.from_svn_tarball:59-61","Warn: pipCommand not pinned by hash: RELEASING/Dockerfile.from_svn_tarball:59-61","Warn: pipCommand not pinned by hash: RELEASING/Dockerfile.from_svn_tarball:59-61","Warn: pipCommand not pinned by hash: RELEASING/Dockerfile.make_docs:23","Warn: npmCommand not pinned by hash: .devcontainer/setup-dev.sh:34","Warn: pipCommand not pinned by hash: .github/workflows/bashlib.sh:36","Warn: pipCommand not pinned by hash: .github/workflows/bashlib.sh:112","Warn: pipCommand not pinned by hash: docker/docker-bootstrap.sh:45","Warn: pipCommand not pinned by hash: docker/docker-bootstrap.sh:56","Warn: npmCommand not pinned by hash: docker/docker-frontend.sh:35","Warn: npmCommand not pinned by hash: docker/docker-frontend.sh:36","Warn: downloadThenRun not pinned by hash: scripts/fossa.sh:22","Warn: pipCommand not pinned by hash: .github/workflows/bump-python-package.yml:50","Warn: pipCommand not pinned by hash: .github/workflows/cancel_duplicates.yml:42","Warn: npmCommand not pinned by hash: .github/workflows/github-action-validator.yml:26","Warn: pipCommand not pinned by hash: .github/workflows/superset-cli.yml:60","Warn: downloadThenRun not pinned by hash: .github/workflows/superset-docs-deploy.yml:56","Warn: npmCommand not pinned by hash: .github/workflows/superset-frontend.yml:141","Warn: pipCommand not pinned by hash: .github/workflows/superset-python-presto-hive.yml:145","Info:   0 out of  93 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of  19 third-party GitHubAction dependencies pinned","Info:   0 out of   5 downloadThenRun dependencies pinned","Info:  16 out of  21 npmCommand dependencies pinned","Info:   0 out of  16 pipCommand dependencies pinned","Info:   0 out of  16 containerImage dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"SAST","score":9,"reason":"SAST tool detected but not run on all commits","details":["Info: SAST configuration detected: CodeQL","Warn: 26 commits out of 30 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}},{"name":"Vulnerabilities","score":0,"reason":"26 existing vulnerabilities detected","details":["Warn: Project is vulnerable to: PYSEC-2019-217 / GHSA-462w-v97r-4m45","Warn: Project is vulnerable to: PYSEC-2014-8 / GHSA-8r7q-cvjq-x353","Warn: Project is vulnerable to: GHSA-cpwx-vrp4-4pq7","Warn: Project is vulnerable to: PYSEC-2014-82 / GHSA-fqh9-2qgg-h84h","Warn: Project is vulnerable to: PYSEC-2021-66 / GHSA-g3rq-g295-4j3m","Warn: Project is vulnerable to: GHSA-h5c8-rqwp-cp95","Warn: Project is vulnerable to: GHSA-h75v-3vvj-5mfj","Warn: Project is vulnerable to: PYSEC-2019-220 / GHSA-hj2j-77xm-mc5v","Warn: Project is vulnerable to: GHSA-q2x7-8rv6-6q7h","Warn: Project is vulnerable to: GHSA-76c9-3jph-rj3q","Warn: Project is vulnerable to: GHSA-x7hr-w5r2-h6wg","Warn: Project is vulnerable to: GHSA-4v9v-hfq4-rm2v","Warn: Project is vulnerable to: GHSA-9jgg-88mc-972h","Warn: Project is vulnerable to: GHSA-968p-4wvh-cqc8","Warn: Project is vulnerable to: GHSA-v6h2-p8h4-qcjw","Warn: Project is vulnerable to: GHSA-p8p7-x288-28g6","Warn: Project is vulnerable to: GHSA-36jr-mh4h-2g58","Warn: Project is vulnerable to: GHSA-fjxv-7rqg-78g4","Warn: Project is vulnerable to: GHSA-h5c3-5r3r-rr8q","Warn: Project is vulnerable to: GHSA-rmvr-2pp2-xj38","Warn: Project is vulnerable to: GHSA-xx4v-prfh-6cgc","Warn: Project is vulnerable to: GHSA-67mh-4wv8-2f99","Warn: Project is vulnerable to: MAL-2025-3935","Warn: Project is vulnerable to: GHSA-4wx3-54gh-9fr9","Warn: Project is vulnerable to: GHSA-52f5-9888-hmc6","Warn: Project is vulnerable to: GHSA-xffm-g5w8-qvg7"],"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}}]},"last_synced_at":"2025-08-16T17:07:50.401Z","repository_id":35205225,"created_at":"2025-08-16T17:07:50.401Z","updated_at":"2025-08-16T17:07:50.401Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":28380802,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-01-13T08:40:31.739Z","status":"ssl_error","status_checked_at":"2026-01-13T08:40:23.736Z","response_time":56,"last_error":"SSL_read: unexpected eof while reading","robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":false,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["analytics","apache","apache-superset","asf","bi","business-analytics","business-intelligence","data-analysis","data-analytics","data-engineering","data-science","data-visualization","data-viz","flask","python","react","sql-editor","superset"],"created_at":"2024-07-30T19:02:24.002Z","updated_at":"2026-01-21T23:02:46.392Z","avatar_url":"https://github.com/apache.png","language":"TypeScript","readme":"\u003c!--\nLicensed to the Apache Software Foundation (ASF) under one\nor more contributor license agreements.  See the NOTICE file\ndistributed with this work for additional information\nregarding copyright ownership.  The ASF licenses this file\nto you under the Apache License, Version 2.0 (the\n\"License\"); you may not use this file except in compliance\nwith the License.  You may obtain a copy of the License at\n\n  http://www.apache.org/licenses/LICENSE-2.0\n\nUnless required by applicable law or agreed to in writing,\nsoftware distributed under the License is distributed on an\n\"AS IS\" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY\nKIND, either express or implied.  See the License for the\nspecific language governing permissions and limitations\nunder the License.\n--\u003e\n\n# Superset\n\n[![License](https://img.shields.io/badge/License-Apache%202.0-blue.svg)](https://opensource.org/license/apache-2-0)\n[![Latest Release on Github](https://img.shields.io/github/v/release/apache/superset?sort=semver)](https://github.com/apache/superset/releases/latest)\n[![Build Status](https://github.com/apache/superset/actions/workflows/superset-python-unittest.yml/badge.svg)](https://github.com/apache/superset/actions)\n[![PyPI version](https://badge.fury.io/py/apache_superset.svg)](https://badge.fury.io/py/apache_superset)\n[![Coverage Status](https://codecov.io/github/apache/superset/coverage.svg?branch=master)](https://codecov.io/github/apache/superset)\n[![PyPI](https://img.shields.io/pypi/pyversions/apache_superset.svg?maxAge=2592000)](https://pypi.python.org/pypi/apache_superset)\n[![Get on Slack](https://img.shields.io/badge/slack-join-orange.svg)](http://bit.ly/join-superset-slack)\n[![Documentation](https://img.shields.io/badge/docs-apache.org-blue.svg)](https://superset.apache.org)\n\n\u003cpicture width=\"500\"\u003e\n  \u003csource\n    width=\"600\"\n    media=\"(prefers-color-scheme: dark)\"\n    src=\"https://superset.apache.org/img/superset-logo-horiz-dark.svg\"\n    alt=\"Superset logo (dark)\"\n  /\u003e\n  \u003cimg\n    width=\"600\"\n    src=\"https://superset.apache.org/img/superset-logo-horiz-apache.svg\"\n    alt=\"Superset logo (light)\"\n  /\u003e\n\u003c/picture\u003e\n\nA modern, enterprise-ready business intelligence web application.\n\n[**Why Superset?**](#why-superset) |\n[**Supported Databases**](#supported-databases) |\n[**Installation and Configuration**](#installation-and-configuration) |\n[**Release Notes**](https://github.com/apache/superset/blob/master/RELEASING/README.md#release-notes-for-recent-releases) |\n[**Get Involved**](#get-involved) |\n[**Contributor Guide**](#contributor-guide) |\n[**Resources**](#resources) |\n[**Organizations Using Superset**](https://github.com/apache/superset/blob/master/RESOURCES/INTHEWILD.md)\n\n## Why Superset?\n\nSuperset is a modern data exploration and data visualization platform. Superset can replace or augment proprietary business intelligence tools for many teams. Superset integrates well with a variety of data sources.\n\nSuperset provides:\n\n- A **no-code interface** for building charts quickly\n- A powerful, web-based **SQL Editor** for advanced querying\n- A **lightweight semantic layer** for quickly defining custom dimensions and metrics\n- Out of the box support for **nearly any SQL** database or data engine\n- A wide array of **beautiful visualizations** to showcase your data, ranging from simple bar charts to geospatial visualizations\n- Lightweight, configurable **caching layer** to help ease database load\n- Highly extensible **security roles and authentication** options\n- An **API** for programmatic customization\n- A **cloud-native architecture** designed from the ground up for scale\n\n## Screenshots \u0026 Gifs\n\n**Video Overview**\n\n\u003c!-- File hosted here https://github.com/apache/superset-site/raw/lfs/superset-video-4k.mp4 --\u003e\n\n[superset-video-1080p.webm](https://github.com/user-attachments/assets/b37388f7-a971-409c-96a7-90c4e31322e6)\n\n\u003cbr/\u003e\n\n**Large Gallery of Visualizations**\n\n\u003ckbd\u003e\u003cimg title=\"Gallery\" src=\"https://superset.apache.org/img/screenshots/gallery.jpg\"/\u003e\u003c/kbd\u003e\u003cbr/\u003e\n\n**Craft Beautiful, Dynamic Dashboards**\n\n\u003ckbd\u003e\u003cimg title=\"View Dashboards\" src=\"https://superset.apache.org/img/screenshots/slack_dash.jpg\"/\u003e\u003c/kbd\u003e\u003cbr/\u003e\n\n**No-Code Chart Builder**\n\n\u003ckbd\u003e\u003cimg title=\"Slice \u0026 dice your data\" src=\"https://superset.apache.org/img/screenshots/explore.jpg\"/\u003e\u003c/kbd\u003e\u003cbr/\u003e\n\n**Powerful SQL Editor**\n\n\u003ckbd\u003e\u003cimg title=\"SQL Lab\" src=\"https://superset.apache.org/img/screenshots/sql_lab.jpg\"/\u003e\u003c/kbd\u003e\u003cbr/\u003e\n\n## Supported Databases\n\nSuperset can query data from any SQL-speaking datastore or data engine (Presto, Trino, Athena, [and more](https://superset.apache.org/docs/configuration/databases)) that has a Python DB-API driver and a SQLAlchemy dialect.\n\nHere are some of the major database solutions that are supported:\n\n\u003cp align=\"center\"\u003e\n  \u003cimg src=\"https://superset.apache.org/img/databases/redshift.png\" alt=\"redshift\" border=\"0\" width=\"200\"/\u003e\n  \u003cimg src=\"https://superset.apache.org/img/databases/google-biquery.png\" alt=\"google-biquery\" border=\"0\" width=\"200\"/\u003e\n  \u003cimg src=\"https://superset.apache.org/img/databases/snowflake.png\" alt=\"snowflake\" border=\"0\" width=\"200\"/\u003e\n  \u003cimg src=\"https://superset.apache.org/img/databases/trino.png\" alt=\"trino\" border=\"0\" width=\"150\" /\u003e\n  \u003cimg src=\"https://superset.apache.org/img/databases/presto.png\" alt=\"presto\" border=\"0\" width=\"200\"/\u003e\n  \u003cimg src=\"https://superset.apache.org/img/databases/databricks.png\" alt=\"databricks\" border=\"0\" width=\"160\" /\u003e\n  \u003cimg src=\"https://superset.apache.org/img/databases/druid.png\" alt=\"druid\" border=\"0\" width=\"200\" /\u003e\n  \u003cimg src=\"https://superset.apache.org/img/databases/firebolt.png\" alt=\"firebolt\" border=\"0\" width=\"200\" /\u003e\n  \u003cimg src=\"https://superset.apache.org/img/databases/timescale.png\" alt=\"timescale\" border=\"0\" width=\"200\" /\u003e\n  \u003cimg src=\"https://superset.apache.org/img/databases/rockset.png\" alt=\"rockset\" border=\"0\" width=\"200\" /\u003e\n  \u003cimg src=\"https://superset.apache.org/img/databases/postgresql.png\" alt=\"postgresql\" border=\"0\" width=\"200\" /\u003e\n  \u003cimg src=\"https://superset.apache.org/img/databases/mysql.png\" alt=\"mysql\" border=\"0\" width=\"200\" /\u003e\n  \u003cimg src=\"https://superset.apache.org/img/databases/mssql-server.png\" alt=\"mssql-server\" border=\"0\" width=\"200\" /\u003e\n  \u003cimg src=\"https://superset.apache.org/img/databases/ibm-db2.svg\" alt=\"db2\" border=\"0\" width=\"220\" /\u003e\n  \u003cimg src=\"https://superset.apache.org/img/databases/sqlite.png\" alt=\"sqlite\" border=\"0\" width=\"200\" /\u003e\n  \u003cimg src=\"https://superset.apache.org/img/databases/sybase.png\" alt=\"sybase\" border=\"0\" width=\"200\" /\u003e\n  \u003cimg src=\"https://superset.apache.org/img/databases/mariadb.png\" alt=\"mariadb\" border=\"0\" width=\"200\" /\u003e\n  \u003cimg src=\"https://superset.apache.org/img/databases/vertica.png\" alt=\"vertica\" border=\"0\" width=\"200\" /\u003e\n  \u003cimg src=\"https://superset.apache.org/img/databases/oracle.png\" alt=\"oracle\" border=\"0\" width=\"200\" /\u003e\n  \u003cimg src=\"https://superset.apache.org/img/databases/firebird.png\" alt=\"firebird\" border=\"0\" width=\"200\" /\u003e\n  \u003cimg src=\"https://superset.apache.org/img/databases/greenplum.png\" alt=\"greenplum\" border=\"0\" width=\"200\"  /\u003e\n  \u003cimg src=\"https://superset.apache.org/img/databases/clickhouse.png\" alt=\"clickhouse\" border=\"0\" width=\"200\" /\u003e\n  \u003cimg src=\"https://superset.apache.org/img/databases/exasol.png\" alt=\"exasol\" border=\"0\" width=\"160\" /\u003e\n  \u003cimg src=\"https://superset.apache.org/img/databases/monet-db.png\" alt=\"monet-db\" border=\"0\" width=\"200\"  /\u003e\n  \u003cimg src=\"https://superset.apache.org/img/databases/apache-kylin.png\" alt=\"apache-kylin\" border=\"0\" width=\"80\"/\u003e\n  \u003cimg src=\"https://superset.apache.org/img/databases/hologres.png\" alt=\"hologres\" border=\"0\" width=\"80\"/\u003e\n  \u003cimg src=\"https://superset.apache.org/img/databases/netezza.png\" alt=\"netezza\" border=\"0\" width=\"80\"/\u003e\n  \u003cimg src=\"https://superset.apache.org/img/databases/pinot.png\" alt=\"pinot\" border=\"0\" width=\"200\" /\u003e\n  \u003cimg src=\"https://superset.apache.org/img/databases/teradata.png\" alt=\"teradata\" border=\"0\" width=\"200\" /\u003e\n  \u003cimg src=\"https://superset.apache.org/img/databases/yugabyte.png\" alt=\"yugabyte\" border=\"0\" width=\"200\" /\u003e\n  \u003cimg src=\"https://superset.apache.org/img/databases/databend.png\" alt=\"databend\" border=\"0\" width=\"200\" /\u003e\n  \u003cimg src=\"https://superset.apache.org/img/databases/starrocks.png\" alt=\"starrocks\" border=\"0\" width=\"200\" /\u003e\n  \u003cimg src=\"https://superset.apache.org/img/databases/doris.png\" alt=\"doris\" border=\"0\" width=\"200\" /\u003e\n  \u003cimg src=\"https://superset.apache.org/img/databases/oceanbase.svg\" alt=\"oceanbase\" border=\"0\" width=\"220\" /\u003e\n  \u003cimg src=\"https://superset.apache.org/img/databases/sap-hana.png\" alt=\"oceanbase\" border=\"0\" width=\"220\" /\u003e\n  \u003cimg src=\"https://superset.apache.org/img/databases/denodo.png\" alt=\"denodo\" border=\"0\" width=\"200\" /\u003e\n  \u003cimg src=\"https://superset.apache.org/img/databases/ydb.svg\" alt=\"ydb\" border=\"0\" width=\"200\" /\u003e\n  \u003cimg src=\"https://superset.apache.org/img/databases/tdengine.png\" alt=\"TDengine\" border=\"0\" width=\"200\" /\u003e\n\u003c/p\u003e\n\n**A more comprehensive list of supported databases** along with the configuration instructions can be found [here](https://superset.apache.org/docs/configuration/databases).\n\nWant to add support for your datastore or data engine? Read more [here](https://superset.apache.org/docs/frequently-asked-questions#does-superset-work-with-insert-database-engine-here) about the technical requirements.\n\n## Installation and Configuration\n\nTry out Superset's [quickstart](https://superset.apache.org/docs/quickstart/) guide or learn about [the options for production deployments](https://superset.apache.org/docs/installation/architecture/).\n\n## Get Involved\n\n- Ask and answer questions on [StackOverflow](https://stackoverflow.com/questions/tagged/apache-superset) using the **apache-superset** tag\n- [Join our community's Slack](http://bit.ly/join-superset-slack)\n  and please read our [Slack Community Guidelines](https://github.com/apache/superset/blob/master/CODE_OF_CONDUCT.md#slack-community-guidelines)\n- [Join our dev@superset.apache.org Mailing list](https://lists.apache.org/list.html?dev@superset.apache.org). To join, simply send an email to [dev-subscribe@superset.apache.org](mailto:dev-subscribe@superset.apache.org)\n- If you want to help troubleshoot GitHub Issues involving the numerous database drivers that Superset supports, please consider adding your name and the databases you have access to on the [Superset Database Familiarity Rolodex](https://docs.google.com/spreadsheets/d/1U1qxiLvOX0kBTUGME1AHHi6Ywel6ECF8xk_Qy-V9R8c/edit#gid=0)\n- Join Superset's Town Hall and [Operational Model](https://preset.io/blog/the-superset-operational-model-wants-you/) recurring meetings. Meeting info is available on the [Superset Community Calendar](https://superset.apache.org/community)\n\n## Contributor Guide\n\nInterested in contributing? Check out our\n[CONTRIBUTING.md](https://github.com/apache/superset/blob/master/CONTRIBUTING.md)\nto find resources around contributing along with a detailed guide on\nhow to set up a development environment.\n\n## Resources\n\n- [Superset \"In the Wild\"](https://github.com/apache/superset/blob/master/RESOURCES/INTHEWILD.md) - open a PR to add your org to the list!\n- [Feature Flags](https://github.com/apache/superset/blob/master/RESOURCES/FEATURE_FLAGS.md) - the status of Superset's Feature Flags.\n- [Standard Roles](https://github.com/apache/superset/blob/master/RESOURCES/STANDARD_ROLES.md) - How RBAC permissions map to roles.\n- [Superset Wiki](https://github.com/apache/superset/wiki) - Tons of additional community resources: best practices, community content and other information.\n- [Superset SIPs](https://github.com/orgs/apache/projects/170) - The status of Superset's SIPs (Superset Improvement Proposals) for both consensus and implementation status.\n\nUnderstanding the Superset Points of View\n\n- [The Case for Dataset-Centric Visualization](https://preset.io/blog/dataset-centric-visualization/)\n- [Understanding the Superset Semantic Layer](https://preset.io/blog/understanding-superset-semantic-layer/)\n\n- Getting Started with Superset\n  - [Superset in 2 Minutes using Docker Compose](https://superset.apache.org/docs/installation/docker-compose#installing-superset-locally-using-docker-compose)\n  - [Installing Database Drivers](https://superset.apache.org/docs/configuration/databases#installing-database-drivers)\n  - [Building New Database Connectors](https://preset.io/blog/building-database-connector/)\n  - [Create Your First Dashboard](https://superset.apache.org/docs/using-superset/creating-your-first-dashboard/)\n  - [Comprehensive Tutorial for Contributing Code to Apache Superset\n    ](https://preset.io/blog/tutorial-contributing-code-to-apache-superset/)\n- [Resources to master Superset by Preset](https://preset.io/resources/)\n\n- Deploying Superset\n\n  - [Official Docker image](https://hub.docker.com/r/apache/superset)\n  - [Helm Chart](https://github.com/apache/superset/tree/master/helm/superset)\n\n- Recordings of Past [Superset Community Events](https://preset.io/events)\n\n  - [Mixed Time Series Charts](https://preset.io/events/mixed-time-series-visualization-in-superset-workshop/)\n  - [How the Bing Team Customized Superset for the Internal Self-Serve Data \u0026 Analytics Platform](https://preset.io/events/how-the-bing-team-heavily-customized-superset-for-their-internal-data/)\n  - [Live Demo: Visualizing MongoDB and Pinot Data using Trino](https://preset.io/events/2021-04-13-visualizing-mongodb-and-pinot-data-using-trino/)\n  - [Introduction to the Superset API](https://preset.io/events/introduction-to-the-superset-api/)\n  - [Building a Database Connector for Superset](https://preset.io/events/2021-02-16-building-a-database-connector-for-superset/)\n\n- Visualizations\n\n  - [Creating Viz Plugins](https://superset.apache.org/docs/contributing/creating-viz-plugins/)\n  - [Managing and Deploying Custom Viz Plugins](https://medium.com/nmc-techblog/apache-superset-manage-custom-viz-plugins-in-production-9fde1a708e55)\n  - [Why Apache Superset is Betting on Apache ECharts](https://preset.io/blog/2021-4-1-why-echarts/)\n\n- [Superset API](https://superset.apache.org/docs/rest-api)\n\n## Repo Activity\n\n\u003ca href=\"https://next.ossinsight.io/widgets/official/compose-last-28-days-stats?repo_id=39464018\" target=\"_blank\" align=\"center\"\u003e\n  \u003cpicture\u003e\n    \u003csource media=\"(prefers-color-scheme: dark)\" srcset=\"https://next.ossinsight.io/widgets/official/compose-last-28-days-stats/thumbnail.png?repo_id=39464018\u0026image_size=auto\u0026color_scheme=dark\" width=\"655\" height=\"auto\" /\u003e\n    \u003cimg alt=\"Performance Stats of apache/superset - Last 28 days\" src=\"https://next.ossinsight.io/widgets/official/compose-last-28-days-stats/thumbnail.png?repo_id=39464018\u0026image_size=auto\u0026color_scheme=light\" width=\"655\" height=\"auto\" /\u003e\n  \u003c/picture\u003e\n\u003c/a\u003e\n\n\u003c!-- Made with [OSS Insight](https://ossinsight.io/) --\u003e\n\n\u003c!-- telemetry/analytics pixel: --\u003e\n\u003cimg referrerpolicy=\"no-referrer-when-downgrade\" src=\"https://static.scarf.sh/a.png?x-pxid=bc1c90cd-bc04-4e11-8c7b-289fb2839492\" /\u003e\n","funding_links":[],"categories":["TypeScript","Python","Uncategorized","Jupyter Notebook","数据中台","Business Intelligence tools","Data Visualization","Industry Strength Visualisation","Applications","Application Recommendation","business-intelligence","Repos","flask","Analytics, BI"],"sub_categories":["Uncategorized","Data Table Format","Web","📊 Data Analysis","CI/CD"],"project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fapache%2Fsuperset","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fapache%2Fsuperset","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fapache%2Fsuperset/lists"}