{"id":13512207,"url":"https://github.com/backdrop/backdrop","last_synced_at":"2026-06-11T00:00:48.877Z","repository":{"id":37276018,"uuid":"12285928","full_name":"backdrop/backdrop","owner":"backdrop","description":"Backdrop core code repository.","archived":false,"fork":false,"pushed_at":"2026-06-08T15:30:41.000Z","size":86072,"stargazers_count":1035,"open_issues_count":730,"forks_count":401,"subscribers_count":63,"default_branch":"1.x","last_synced_at":"2026-06-08T16:24:20.431Z","etag":null,"topics":["cms","php"],"latest_commit_sha":null,"homepage":"https://backdropcms.org","language":"PHP","has_issues":false,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"gpl-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/backdrop.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE.txt","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null}},"created_at":"2013-08-22T01:50:58.000Z","updated_at":"2026-06-08T15:32:07.000Z","dependencies_parsed_at":"2025-11-30T19:01:52.782Z","dependency_job_id":null,"html_url":"https://github.com/backdrop/backdrop","commit_stats":{"total_commits":23084,"total_committers":424,"mean_commits":"54.443396226415096","dds":0.5855570958239473,"last_synced_commit":"8327c07e7a34bb28582ac990f34385dea4af2734"},"previous_names":[],"tags_count":215,"template":false,"template_full_name":null,"purl":"pkg:github/backdrop/backdrop","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/backdrop%2Fbackdrop","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/backdrop%2Fbackdrop/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/backdrop%2Fbackdrop/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/backdrop%2Fbackdrop/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/backdrop","download_url":"https://codeload.github.com/backdrop/backdrop/tar.gz/refs/heads/1.x","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/backdrop%2Fbackdrop/sbom","scorecard":{"id":222612,"data":{"date":"2025-08-11","repo":{"name":"github.com/backdrop/backdrop","commit":"003ccb38a84d7b1c6181d60d439524c9cf4d71be"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":5,"checks":[{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Maintained","score":10,"reason":"15 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Code-Review","score":7,"reason":"Found 21/30 approved changesets -- score normalized to 7","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Warn: no topLevel permission defined: .github/workflows/phpcs-lint.yml:1","Warn: no topLevel permission defined: .github/workflows/simpletest-db-config.yml:1","Warn: no topLevel permission defined: .github/workflows/simpletest.yml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Security-Policy","score":0,"reason":"security policy file not detected","details":["Warn: no security policy file detected","Warn: no security file to analyze","Warn: no security file to analyze","Warn: no security file to analyze"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE.txt:0","Info: FSF or OSI recognized license: GNU General Public License v2.0: LICENSE.txt:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"CII-Best-Practices","score":5,"reason":"badge detected: Passing","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"Branch-Protection","score":3,"reason":"branch protection is not maximal on development and all release branches","details":["Info: 'allow deletion' disabled on branch '1.x'","Info: 'force pushes' disabled on branch '1.x'","Info: 'branch protection settings apply to administrators' is required to merge on branch '1.x'","Warn: could not determine whether codeowners review is allowed","Warn: no status checks found to merge onto branch '1.x'","Warn: PRs are not required to make changes on branch '1.x'; or we don't have data to detect it.If you think it might be the latter, make sure to run Scorecard with a PAT or use Repo Rules (that are always public) instead of Branch Protection settings"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Signed-Releases","score":0,"reason":"Project has not signed or included provenance with any releases.","details":["Warn: release artifact 1.31.0 not signed: https://api.github.com/repos/backdrop/backdrop/releases/218977791","Warn: release artifact 1.30.3 not signed: https://api.github.com/repos/backdrop/backdrop/releases/218977463","Warn: release artifact 1.31.0-preview not signed: https://api.github.com/repos/backdrop/backdrop/releases/216931890","Warn: release artifact 1.30.2 not signed: https://api.github.com/repos/backdrop/backdrop/releases/207028423","Warn: release artifact 1.29.5 not signed: https://api.github.com/repos/backdrop/backdrop/releases/207027941","Warn: release artifact 1.31.0 does not have provenance: https://api.github.com/repos/backdrop/backdrop/releases/218977791","Warn: release artifact 1.30.3 does not have provenance: https://api.github.com/repos/backdrop/backdrop/releases/218977463","Warn: release artifact 1.31.0-preview does not have provenance: https://api.github.com/repos/backdrop/backdrop/releases/216931890","Warn: release artifact 1.30.2 does not have provenance: https://api.github.com/repos/backdrop/backdrop/releases/207028423","Warn: release artifact 1.29.5 does not have provenance: https://api.github.com/repos/backdrop/backdrop/releases/207027941"],"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Warn: third-party GitHubAction not pinned by hash: .github/workflows/phpcs-lint.yml:12: update your workflow using https://app.stepsecurity.io/secureworkflow/backdrop/backdrop/phpcs-lint.yml/1.x?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/phpcs-lint.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/backdrop/backdrop/phpcs-lint.yml/1.x?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/phpcs-lint.yml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/backdrop/backdrop/phpcs-lint.yml/1.x?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/phpcs-lint.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/backdrop/backdrop/phpcs-lint.yml/1.x?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/phpcs-lint.yml:44: update your workflow using https://app.stepsecurity.io/secureworkflow/backdrop/backdrop/phpcs-lint.yml/1.x?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/phpcs-lint.yml:46: update your workflow using https://app.stepsecurity.io/secureworkflow/backdrop/backdrop/phpcs-lint.yml/1.x?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/simpletest-db-config.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/backdrop/backdrop/simpletest-db-config.yml/1.x?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/simpletest-db-config.yml:44: update your workflow using https://app.stepsecurity.io/secureworkflow/backdrop/backdrop/simpletest-db-config.yml/1.x?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/simpletest.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/backdrop/backdrop/simpletest.yml/1.x?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/simpletest.yml:54: update your workflow using https://app.stepsecurity.io/secureworkflow/backdrop/backdrop/simpletest.yml/1.x?enable=pin","Info:   0 out of   7 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of   3 third-party GitHubAction dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 25 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-17T02:56:48.126Z","repository_id":37276018,"created_at":"2025-08-17T02:56:48.127Z","updated_at":"2025-08-17T02:56:48.127Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":34175887,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-05-26T15:22:16.424Z","status":"online","status_checked_at":"2026-06-10T02:00:07.152Z","response_time":89,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["cms","php"],"created_at":"2024-08-01T03:01:35.679Z","updated_at":"2026-06-11T00:00:48.696Z","avatar_url":"https://github.com/backdrop.png","language":"PHP","funding_links":[],"categories":["PHP","php","Table of Contents"],"sub_categories":["Platforms"],"readme":"Backdrop is a full-featured content management system that allows non-technical\nusers to manage a wide variety of content. It can be used to create all kinds of\nwebsites including blogs, image galleries, social networks, intranets, and more.\n\nBackdrop aims to provide:\n- A CMS that can be used out-of-the-box.\n- Code that can be learned quickly.\n- Extensible APIs.\n\nRequirements\n------------\n- PHP 7.1.0 or higher. Even if Backdrop can run on older versions of PHP, we\n  strongly recommend that you use a\n  [supported version of PHP](https://secure.php.net/supported-versions.php).\n- MySQL 5.5.0 or higher with PDO enabled\n- Apache (recommended) or Nginx web server\n- 50 MB of disk space (recommended), 15 MB (minimum)\n\nInstallation\n------------\n\n1. Create a new database, username, and password for Backdrop to use in MySQL.\n\n2. Point your browser at the URL of your Backdrop installation. You will be\n   redirected to the install screen. If you're not redirected, visit the install\n   URL. If Backdrop was installed at http://example.com/backdrop, the install\n   URL would be http://example.com/backdrop/core/install.php.\n\n3. Follow the instructions provided by the installer.\n\nBug Reports and Feature Requests\n--------------------------------\nPlease use the GitHub\n[issue tracker](https://github.com/backdrop/backdrop-issues/issues) for\nreporting all bugs and features. We use a separate issue tracker that is not\npart of the main Backdrop code repository because of GitHub's restrictions on\nthe use of labels and issue management.\n\nSecurity Issues\n---------------\nIf you have discovered a security issue with Backdrop CMS or any of its\n[contributed modules](https://github.com/backdrop-contrib/), please contact the\nBackdrop Security Team directly at\n[security@backdropcms.org](mailto:security@backdropcms.org).\nWe manage security issues separately in a private repository until the issue has\nbeen resolved. Even if you're not sure if it's a security problem, please\ncontact the security team before filing an issue.\n\nDevelopers\n----------\nBackdrop is a fork of Drupal. It preserves the legacy audience of developers who\nvalue ease of use and speed of learning over architectural flexibility. You can\njoin Backdrop's developer community by\n[forking Backdrop](https://github.com/backdrop/backdrop) on GitHub.\n\nYou can submit changes to Backdrop by creating a pull request that references an\nissue in the [issue tracker](https://github.com/backdrop/backdrop-issues/issues).\nDetails about how to do this are in the\n[Contribute to Backdrop Core](https://docs.backdropcms.org/documentation/contribute-to-backdrop-core)\ndocumentation.\n\nThanks to the following companies for providing sponsorship through services and\nproducts which may be used by Backdrop contributors to build and improve the\nproject:\n\n- [BrowserStack](https://www.browserstack.com) for interface testing across\n  desktop and mobile browsers. *(Contact info@backdropcms.org for access\n  information.)*\n- [JetBrains](https://www.jetbrains.com/phpstorm) for use of the PHPStorm IDE\n  for development. *(Contact info@backdropcms.org for a license.)*\n- [Fastly](https://fastly.com) for CDN services for all backdropcms.org properties.\n- [GitHub](https://github.com) for collaboration and code management tools.\n- [Tugboat](https://www.tugboat.qa) for powering our [demo site sandboxes](https://backdropcms.org/demo).\n- [ZenCI](https://zen.ci) for continuous automated testing and sandbox testing.\n- [Linode](https://linode.com) for web hosting.\n- [1Password](https://1password.com) for keeping our passwords safe.\n- [SendGrid](https://sendgrid.com) for getting our emails into your inboxes.\n\nUser Guide\n----------\nPlease see the [Backdrop Handbook](https://docs.backdropcms.org/documentation/getting-started).\n\nDeveloper Documentation\n-----------------------\nPlease see the [Backdrop API Documentation](https://docs.backdropcms.org/api/backdrop/groups).\n\nCode of Conduct\n---------------\nA primary goal of the Backdrop CMS community is to be inclusive to the largest\nnumber of contributors, with the most varied and diverse backgrounds possible.\nAs such, we are committed to providing a friendly, safe and welcoming\nenvironment for all, regardless of ability, ethnicity, gender, sexual\norientation, sexual preferences, socioeconomic status, geographic location, or\nreligion (or lack thereof).\n\nOur\n[code of conduct](https://github.com/backdrop-ops/conduct/blob/main/code_of_conduct.md)\noutlines our expectations for all those who participate in our community, as\nwell as the consequences for unacceptable behavior.\n\nWe invite all those who participate in the Backdrop CMS community to help us\ncreate safe and positive experiences for everyone.\n\nLicense\n-------\nBackdrop is [GPL v2](http://www.gnu.org/licenses/gpl-2.0.html) (or higher)\nsoftware. See the LICENSE.txt file for complete text. Distributions of this\nsoftware may relicense it as any later version of the GPL.\n\nAll Backdrop code is Copyright 2001 - 2026 by the original authors.\n\nBackdrop also includes works under different copyright notices that are\ndistributed according to the terms of the GNU General Public License or a\ncompatible license. These individual works may have specific copyright\ninformation noted within their source code files or directories.\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fbackdrop%2Fbackdrop","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fbackdrop%2Fbackdrop","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fbackdrop%2Fbackdrop/lists"}