{"id":33106893,"url":"https://github.com/epam/Indigo","last_synced_at":"2025-11-16T02:01:35.956Z","repository":{"id":33835784,"uuid":"37536320","full_name":"epam/Indigo","owner":"epam","description":"Universal cheminformatics toolkit, utilities and database search tools","archived":false,"fork":false,"pushed_at":"2025-11-14T17:15:11.000Z","size":248459,"stargazers_count":365,"open_issues_count":625,"forks_count":117,"subscribers_count":40,"default_branch":"master","last_synced_at":"2025-11-14T19:21:09.212Z","etag":null,"topics":["bingo","cheminformatics","chemistry","dotnet","drug-discovery","inchi","indigo","java","molecule-visualization","molfile","postgresql","python","smarts","smiles","webassembly"],"latest_commit_sha":null,"homepage":"http://lifescience.opensource.epam.com","language":"C++","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/epam.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null}},"created_at":"2015-06-16T14:45:56.000Z","updated_at":"2025-11-12T11:03:38.000Z","dependencies_parsed_at":"2023-09-23T10:47:43.533Z","dependency_job_id":"9868f3ef-83f7-44f7-93e5-e859f120f02f","html_url":"https://github.com/epam/Indigo","commit_stats":{"total_commits":4792,"total_committers":86,"mean_commits":55.72093023255814,"dds":0.7996661101836394,"last_synced_commit":"f191642ea1a258c739051741d7c7c890e40d2a7c"},"previous_names":[],"tags_count":223,"template":false,"template_full_name":null,"purl":"pkg:github/epam/Indigo","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/epam%2FIndigo","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/epam%2FIndigo/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/epam%2FIndigo/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/epam%2FIndigo/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/epam","download_url":"https://codeload.github.com/epam/Indigo/tar.gz/refs/heads/master","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/epam%2FIndigo/sbom","scorecard":{"id":378788,"data":{"date":"2025-08-11","repo":{"name":"github.com/epam/Indigo","commit":"e43df9f0403032ff0faa09b9f293ab875307366c"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":4.9,"checks":[{"name":"Code-Review","score":10,"reason":"all changesets reviewed","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Maintained","score":10,"reason":"30 commit(s) and 25 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: Apache License 2.0: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Warn: no topLevel permission defined: .github/workflows/docker-images.yaml:1","Warn: no topLevel permission defined: .github/workflows/indigo-ci.yaml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Security-Policy","score":0,"reason":"security policy file not detected","details":["Warn: no security policy file detected","Warn: no security file to analyze","Warn: no security file to analyze","Warn: no security file to analyze"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Packaging","score":10,"reason":"packaging workflow detected","details":["Info: Project packages its releases by way of GitHub Actions.: .github/workflows/indigo-ci.yaml:1013"],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Binary-Artifacts","score":7,"reason":"binaries present in source code","details":["Warn: binary detected: api/tests/integration/common/rendering/dotnet/System.Drawing.Common.dll:1","Warn: binary detected: api/tests/integration/common/rendering/dotnet/System.Drawing.Common.unix.dll:1","Warn: binary detected: api/tests/integration/common/rendering/dotnet/System.Drawing.Common.win.dll:1"],"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 30 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Warn: third-party GitHubAction not pinned by hash: .github/workflows/docker-images.yaml:11: update your workflow using https://app.stepsecurity.io/secureworkflow/epam/Indigo/docker-images.yaml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docker-images.yaml:16: update your workflow using https://app.stepsecurity.io/secureworkflow/epam/Indigo/docker-images.yaml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docker-images.yaml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/epam/Indigo/docker-images.yaml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docker-images.yaml:32: update your workflow using https://app.stepsecurity.io/secureworkflow/epam/Indigo/docker-images.yaml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docker-images.yaml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/epam/Indigo/docker-images.yaml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docker-images.yaml:42: update your workflow using https://app.stepsecurity.io/secureworkflow/epam/Indigo/docker-images.yaml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docker-images.yaml:53: update your workflow using https://app.stepsecurity.io/secureworkflow/epam/Indigo/docker-images.yaml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docker-images.yaml:58: update your workflow using https://app.stepsecurity.io/secureworkflow/epam/Indigo/docker-images.yaml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docker-images.yaml:63: update your workflow using https://app.stepsecurity.io/secureworkflow/epam/Indigo/docker-images.yaml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/indigo-ci.yaml:264: update your workflow using https://app.stepsecurity.io/secureworkflow/epam/Indigo/indigo-ci.yaml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/indigo-ci.yaml:275: update your workflow using https://app.stepsecurity.io/secureworkflow/epam/Indigo/indigo-ci.yaml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/indigo-ci.yaml:294: update your workflow using https://app.stepsecurity.io/secureworkflow/epam/Indigo/indigo-ci.yaml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/indigo-ci.yaml:401: update your workflow using https://app.stepsecurity.io/secureworkflow/epam/Indigo/indigo-ci.yaml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/indigo-ci.yaml:412: update your workflow using https://app.stepsecurity.io/secureworkflow/epam/Indigo/indigo-ci.yaml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/indigo-ci.yaml:426: update your workflow using https://app.stepsecurity.io/secureworkflow/epam/Indigo/indigo-ci.yaml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/indigo-ci.yaml:621: update your workflow using https://app.stepsecurity.io/secureworkflow/epam/Indigo/indigo-ci.yaml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/indigo-ci.yaml:632: update your workflow using https://app.stepsecurity.io/secureworkflow/epam/Indigo/indigo-ci.yaml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/indigo-ci.yaml:657: update your workflow using https://app.stepsecurity.io/secureworkflow/epam/Indigo/indigo-ci.yaml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/indigo-ci.yaml:671: update your workflow using https://app.stepsecurity.io/secureworkflow/epam/Indigo/indigo-ci.yaml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/indigo-ci.yaml:673: update your workflow using https://app.stepsecurity.io/secureworkflow/epam/Indigo/indigo-ci.yaml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/indigo-ci.yaml:681: update your workflow using https://app.stepsecurity.io/secureworkflow/epam/Indigo/indigo-ci.yaml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/indigo-ci.yaml:708: update your workflow using https://app.stepsecurity.io/secureworkflow/epam/Indigo/indigo-ci.yaml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/indigo-ci.yaml:817: update your workflow using https://app.stepsecurity.io/secureworkflow/epam/Indigo/indigo-ci.yaml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/indigo-ci.yaml:838: update your workflow using https://app.stepsecurity.io/secureworkflow/epam/Indigo/indigo-ci.yaml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/indigo-ci.yaml:931: update your workflow using https://app.stepsecurity.io/secureworkflow/epam/Indigo/indigo-ci.yaml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/indigo-ci.yaml:940: update your workflow using https://app.stepsecurity.io/secureworkflow/epam/Indigo/indigo-ci.yaml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/indigo-ci.yaml:951: update your workflow using https://app.stepsecurity.io/secureworkflow/epam/Indigo/indigo-ci.yaml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/indigo-ci.yaml:964: update your workflow using https://app.stepsecurity.io/secureworkflow/epam/Indigo/indigo-ci.yaml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/indigo-ci.yaml:968: update your workflow using https://app.stepsecurity.io/secureworkflow/epam/Indigo/indigo-ci.yaml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/indigo-ci.yaml:983: update your workflow using https://app.stepsecurity.io/secureworkflow/epam/Indigo/indigo-ci.yaml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/indigo-ci.yaml:993: update your workflow using https://app.stepsecurity.io/secureworkflow/epam/Indigo/indigo-ci.yaml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/indigo-ci.yaml:1008: update your workflow using https://app.stepsecurity.io/secureworkflow/epam/Indigo/indigo-ci.yaml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/indigo-ci.yaml:1022: update your workflow using https://app.stepsecurity.io/secureworkflow/epam/Indigo/indigo-ci.yaml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/indigo-ci.yaml:1027: update your workflow using https://app.stepsecurity.io/secureworkflow/epam/Indigo/indigo-ci.yaml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/indigo-ci.yaml:1035: update your workflow using https://app.stepsecurity.io/secureworkflow/epam/Indigo/indigo-ci.yaml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/indigo-ci.yaml:1053: update your workflow using https://app.stepsecurity.io/secureworkflow/epam/Indigo/indigo-ci.yaml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/indigo-ci.yaml:1073: update your workflow using https://app.stepsecurity.io/secureworkflow/epam/Indigo/indigo-ci.yaml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/indigo-ci.yaml:1082: update your workflow using https://app.stepsecurity.io/secureworkflow/epam/Indigo/indigo-ci.yaml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/indigo-ci.yaml:1097: update your workflow using https://app.stepsecurity.io/secureworkflow/epam/Indigo/indigo-ci.yaml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/indigo-ci.yaml:1119: update your workflow using https://app.stepsecurity.io/secureworkflow/epam/Indigo/indigo-ci.yaml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/indigo-ci.yaml:249: update your workflow using https://app.stepsecurity.io/secureworkflow/epam/Indigo/indigo-ci.yaml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/indigo-ci.yaml:718: update your workflow using https://app.stepsecurity.io/secureworkflow/epam/Indigo/indigo-ci.yaml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/indigo-ci.yaml:732: update your workflow using https://app.stepsecurity.io/secureworkflow/epam/Indigo/indigo-ci.yaml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/indigo-ci.yaml:737: update your workflow using https://app.stepsecurity.io/secureworkflow/epam/Indigo/indigo-ci.yaml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/indigo-ci.yaml:741: update your workflow using https://app.stepsecurity.io/secureworkflow/epam/Indigo/indigo-ci.yaml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/indigo-ci.yaml:747: update your workflow using https://app.stepsecurity.io/secureworkflow/epam/Indigo/indigo-ci.yaml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/indigo-ci.yaml:766: update your workflow using https://app.stepsecurity.io/secureworkflow/epam/Indigo/indigo-ci.yaml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/indigo-ci.yaml:770: update your workflow using https://app.stepsecurity.io/secureworkflow/epam/Indigo/indigo-ci.yaml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/indigo-ci.yaml:806: update your workflow using https://app.stepsecurity.io/secureworkflow/epam/Indigo/indigo-ci.yaml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/indigo-ci.yaml:884: update your workflow using https://app.stepsecurity.io/secureworkflow/epam/Indigo/indigo-ci.yaml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/indigo-ci.yaml:894: update your workflow using https://app.stepsecurity.io/secureworkflow/epam/Indigo/indigo-ci.yaml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/indigo-ci.yaml:921: update your workflow using https://app.stepsecurity.io/secureworkflow/epam/Indigo/indigo-ci.yaml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/indigo-ci.yaml:1344: update your workflow using https://app.stepsecurity.io/secureworkflow/epam/Indigo/indigo-ci.yaml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/indigo-ci.yaml:1353: update your workflow using https://app.stepsecurity.io/secureworkflow/epam/Indigo/indigo-ci.yaml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/indigo-ci.yaml:1382: update your workflow using https://app.stepsecurity.io/secureworkflow/epam/Indigo/indigo-ci.yaml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/indigo-ci.yaml:44: update your workflow using https://app.stepsecurity.io/secureworkflow/epam/Indigo/indigo-ci.yaml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/indigo-ci.yaml:54: update your workflow using https://app.stepsecurity.io/secureworkflow/epam/Indigo/indigo-ci.yaml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/indigo-ci.yaml:81: update your workflow using https://app.stepsecurity.io/secureworkflow/epam/Indigo/indigo-ci.yaml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/indigo-ci.yaml:170: update your workflow using https://app.stepsecurity.io/secureworkflow/epam/Indigo/indigo-ci.yaml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/indigo-ci.yaml:181: update your workflow using https://app.stepsecurity.io/secureworkflow/epam/Indigo/indigo-ci.yaml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/indigo-ci.yaml:186: update your workflow using https://app.stepsecurity.io/secureworkflow/epam/Indigo/indigo-ci.yaml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/indigo-ci.yaml:191: update your workflow using https://app.stepsecurity.io/secureworkflow/epam/Indigo/indigo-ci.yaml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/indigo-ci.yaml:196: update your workflow using https://app.stepsecurity.io/secureworkflow/epam/Indigo/indigo-ci.yaml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/indigo-ci.yaml:201: update your workflow using https://app.stepsecurity.io/secureworkflow/epam/Indigo/indigo-ci.yaml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/indigo-ci.yaml:206: update your workflow using https://app.stepsecurity.io/secureworkflow/epam/Indigo/indigo-ci.yaml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/indigo-ci.yaml:219: update your workflow using https://app.stepsecurity.io/secureworkflow/epam/Indigo/indigo-ci.yaml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/indigo-ci.yaml:226: update your workflow using https://app.stepsecurity.io/secureworkflow/epam/Indigo/indigo-ci.yaml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/indigo-ci.yaml:233: update your workflow using https://app.stepsecurity.io/secureworkflow/epam/Indigo/indigo-ci.yaml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/indigo-ci.yaml:239: update your workflow using https://app.stepsecurity.io/secureworkflow/epam/Indigo/indigo-ci.yaml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/indigo-ci.yaml:356: update your workflow using https://app.stepsecurity.io/secureworkflow/epam/Indigo/indigo-ci.yaml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/indigo-ci.yaml:367: update your workflow using https://app.stepsecurity.io/secureworkflow/epam/Indigo/indigo-ci.yaml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/indigo-ci.yaml:372: update your workflow using https://app.stepsecurity.io/secureworkflow/epam/Indigo/indigo-ci.yaml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/indigo-ci.yaml:385: update your workflow using https://app.stepsecurity.io/secureworkflow/epam/Indigo/indigo-ci.yaml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/indigo-ci.yaml:488: update your workflow using https://app.stepsecurity.io/secureworkflow/epam/Indigo/indigo-ci.yaml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/indigo-ci.yaml:499: update your workflow using https://app.stepsecurity.io/secureworkflow/epam/Indigo/indigo-ci.yaml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/indigo-ci.yaml:503: update your workflow using https://app.stepsecurity.io/secureworkflow/epam/Indigo/indigo-ci.yaml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/indigo-ci.yaml:518: update your workflow using https://app.stepsecurity.io/secureworkflow/epam/Indigo/indigo-ci.yaml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/indigo-ci.yaml:1133: update your workflow using https://app.stepsecurity.io/secureworkflow/epam/Indigo/indigo-ci.yaml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/indigo-ci.yaml:1154: update your workflow using https://app.stepsecurity.io/secureworkflow/epam/Indigo/indigo-ci.yaml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/indigo-ci.yaml:1233: update your workflow using https://app.stepsecurity.io/secureworkflow/epam/Indigo/indigo-ci.yaml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/indigo-ci.yaml:1244: update your workflow using https://app.stepsecurity.io/secureworkflow/epam/Indigo/indigo-ci.yaml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/indigo-ci.yaml:1249: update your workflow using https://app.stepsecurity.io/secureworkflow/epam/Indigo/indigo-ci.yaml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/indigo-ci.yaml:95: update your workflow using https://app.stepsecurity.io/secureworkflow/epam/Indigo/indigo-ci.yaml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/indigo-ci.yaml:112: update your workflow using https://app.stepsecurity.io/secureworkflow/epam/Indigo/indigo-ci.yaml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/indigo-ci.yaml:126: update your workflow using https://app.stepsecurity.io/secureworkflow/epam/Indigo/indigo-ci.yaml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/indigo-ci.yaml:136: update your workflow using https://app.stepsecurity.io/secureworkflow/epam/Indigo/indigo-ci.yaml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/indigo-ci.yaml:155: update your workflow using https://app.stepsecurity.io/secureworkflow/epam/Indigo/indigo-ci.yaml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/indigo-ci.yaml:442: update your workflow using https://app.stepsecurity.io/secureworkflow/epam/Indigo/indigo-ci.yaml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/indigo-ci.yaml:453: update your workflow using https://app.stepsecurity.io/secureworkflow/epam/Indigo/indigo-ci.yaml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/indigo-ci.yaml:459: update your workflow using https://app.stepsecurity.io/secureworkflow/epam/Indigo/indigo-ci.yaml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/indigo-ci.yaml:472: update your workflow using https://app.stepsecurity.io/secureworkflow/epam/Indigo/indigo-ci.yaml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/indigo-ci.yaml:849: update your workflow using https://app.stepsecurity.io/secureworkflow/epam/Indigo/indigo-ci.yaml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/indigo-ci.yaml:870: update your workflow using https://app.stepsecurity.io/secureworkflow/epam/Indigo/indigo-ci.yaml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/indigo-ci.yaml:1195: update your workflow using https://app.stepsecurity.io/secureworkflow/epam/Indigo/indigo-ci.yaml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/indigo-ci.yaml:1206: update your workflow using https://app.stepsecurity.io/secureworkflow/epam/Indigo/indigo-ci.yaml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/indigo-ci.yaml:1211: update your workflow using https://app.stepsecurity.io/secureworkflow/epam/Indigo/indigo-ci.yaml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/indigo-ci.yaml:1216: update your workflow using https://app.stepsecurity.io/secureworkflow/epam/Indigo/indigo-ci.yaml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/indigo-ci.yaml:1265: update your workflow using https://app.stepsecurity.io/secureworkflow/epam/Indigo/indigo-ci.yaml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/indigo-ci.yaml:1276: update your workflow using https://app.stepsecurity.io/secureworkflow/epam/Indigo/indigo-ci.yaml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/indigo-ci.yaml:1281: update your workflow using https://app.stepsecurity.io/secureworkflow/epam/Indigo/indigo-ci.yaml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/indigo-ci.yaml:1401: update your workflow using https://app.stepsecurity.io/secureworkflow/epam/Indigo/indigo-ci.yaml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/indigo-ci.yaml:1410: update your workflow using https://app.stepsecurity.io/secureworkflow/epam/Indigo/indigo-ci.yaml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/indigo-ci.yaml:1418: update your workflow using https://app.stepsecurity.io/secureworkflow/epam/Indigo/indigo-ci.yaml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/indigo-ci.yaml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/epam/Indigo/indigo-ci.yaml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/indigo-ci.yaml:535: update your workflow using https://app.stepsecurity.io/secureworkflow/epam/Indigo/indigo-ci.yaml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/indigo-ci.yaml:546: update your workflow using https://app.stepsecurity.io/secureworkflow/epam/Indigo/indigo-ci.yaml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/indigo-ci.yaml:605: update your workflow using https://app.stepsecurity.io/secureworkflow/epam/Indigo/indigo-ci.yaml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/indigo-ci.yaml:1302: update your workflow using https://app.stepsecurity.io/secureworkflow/epam/Indigo/indigo-ci.yaml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/indigo-ci.yaml:1313: update your workflow using https://app.stepsecurity.io/secureworkflow/epam/Indigo/indigo-ci.yaml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/indigo-ci.yaml:310: update your workflow using https://app.stepsecurity.io/secureworkflow/epam/Indigo/indigo-ci.yaml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/indigo-ci.yaml:321: update your workflow using https://app.stepsecurity.io/secureworkflow/epam/Indigo/indigo-ci.yaml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/indigo-ci.yaml:327: update your workflow using https://app.stepsecurity.io/secureworkflow/epam/Indigo/indigo-ci.yaml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/indigo-ci.yaml:340: update your workflow using https://app.stepsecurity.io/secureworkflow/epam/Indigo/indigo-ci.yaml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/indigo-ci.yaml:1168: update your workflow using https://app.stepsecurity.io/secureworkflow/epam/Indigo/indigo-ci.yaml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/indigo-ci.yaml:1183: update your workflow using https://app.stepsecurity.io/secureworkflow/epam/Indigo/indigo-ci.yaml/master?enable=pin","Warn: containerImage not pinned by hash: .ci/docker/buildpack-almalinux8/Dockerfile:1: pin your Docker image by updating almalinux:8 to almalinux:8@sha256:2d4abdee2caecd851d2d6591dfb2205ba18549bc080ad5377875c990331e41c4","Warn: containerImage not pinned by hash: .ci/docker/buildpack-arm64/Dockerfile:1: pin your Docker image by updating ubuntu:20.04 to ubuntu:20.04@sha256:8feb4d8ca5354def3d8fce243717141ce31e2c428701f6682bd2fafe15388214","Warn: containerImage not pinned by hash: .ci/docker/buildpack-centos7/Dockerfile:1: pin your Docker image by updating centos:7 to centos:7@sha256:be65f488b7764ad3638f236b7b515b3678369a5124c47b8d32916d6487418ea4","Warn: containerImage not pinned by hash: .ci/docker/indigo-tester/Dockerfile:1: pin your Docker image by updating debian:stable-slim to debian:stable-slim@sha256:8810492a2dd16b7f59239c1e0cc1e56c1a1a5957d11f639776bd6798e795608b","Warn: containerImage not pinned by hash: .devcontainer/Dockerfile:2: pin your Docker image by updating debian:12 to debian:12@sha256:731dd1380d6a8d170a695dbeb17fe0eade0e1c29f654cf0a3a07f372191c3f4b","Warn: containerImage not pinned by hash: api/http/Dockerfile:19","Warn: containerImage not pinned by hash: api/http/Dockerfile:51: pin your Docker image by updating python:3.9-slim-buster to python:3.9-slim-buster@sha256:320a7a4250aba4249f458872adecf92eea88dc6abd2d76dc5c0f01cac9b53990","Warn: containerImage not pinned by hash: bingo/postgres/Dockerfile:3","Warn: containerImage not pinned by hash: utils/indigo-service/backend/Dockerfile:1: pin your Docker image by updating ubuntu:22.04 to ubuntu:22.04@sha256:1aa979d85661c488ce030ac292876cf6ed04535d3a237e49f61542d8e5de5ae0","Warn: containerImage not pinned by hash: utils/indigo-service/backend/service/tests/Dockerfile:1: pin your Docker image by updating debian:stretch to debian:stretch@sha256:c5c5200ff1e9c73ffbf188b4a67eb1c91531b644856b4aefe86a58d2f0cb05be","Warn: containerImage not pinned by hash: utils/indigo-service/db/Dockerfile:1: pin your Docker image by updating epmlsop/bingo-postgres:12-latest to epmlsop/bingo-postgres:12-latest@sha256:7e51ec12a48a3f63b117b00dacdbeb5989253beb780bfa8e91821d265475fad6","Warn: containerImage not pinned by hash: utils/indigo-service/frontend/Dockerfile:1","Warn: containerImage not pinned by hash: utils/indigo-service/frontend/Dockerfile:8: pin your Docker image by updating nginx:latest to nginx:latest@sha256:33e0bbc7ca9ecf108140af6288c7c9d1ecc77548cbfd3952fd8466a75edefe57","Warn: pipCommand not pinned by hash: .ci/docker/buildpack-centos7/Dockerfile:24","Warn: pipCommand not pinned by hash: .ci/docker/indigo-tester/Dockerfile:10-69","Warn: pipCommand not pinned by hash: .ci/docker/indigo-tester/Dockerfile:84-89","Warn: pipCommand not pinned by hash: .ci/docker/indigo-tester/Dockerfile:92","Warn: pipCommand not pinned by hash: .devcontainer/Dockerfile:32-47","Warn: pipCommand not pinned by hash: .devcontainer/Dockerfile:32-47","Warn: pipCommand not pinned by hash: api/http/Dockerfile:44-48","Warn: pipCommand not pinned by hash: api/http/Dockerfile:44-48","Warn: pipCommand not pinned by hash: api/http/Dockerfile:69","Warn: pipCommand not pinned by hash: utils/indigo-service/backend/Dockerfile:56","Warn: pipCommand not pinned by hash: utils/indigo-service/backend/service/tests/Dockerfile:9","Warn: pipCommand not pinned by hash: recipe-conda/build.sh:2","Warn: pipCommand not pinned by hash: .github/workflows/indigo-ci.yaml:687","Warn: pipCommand not pinned by hash: .github/workflows/indigo-ci.yaml:690","Warn: pipCommand not pinned by hash: .github/workflows/indigo-ci.yaml:698","Warn: pipCommand not pinned by hash: .github/workflows/indigo-ci.yaml:1065","Warn: pipCommand not pinned by hash: .github/workflows/indigo-ci.yaml:32","Warn: pipCommand not pinned by hash: .github/workflows/indigo-ci.yaml:212","Warn: pipCommand not pinned by hash: .github/workflows/indigo-ci.yaml:281","Info:   0 out of  88 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of  27 third-party GitHubAction dependencies pinned","Info:   5 out of  24 pipCommand dependencies pinned","Info:   0 out of  13 containerImage dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Vulnerabilities","score":0,"reason":"28 existing vulnerabilities detected","details":["Warn: Project is vulnerable to: PYSEC-2024-38","Warn: Project is vulnerable to: GHSA-vqfr-h8mv-ghfj","Warn: Project is vulnerable to: GHSA-2c2j-9gv5-cj73","Warn: Project is vulnerable to: PYSEC-2022-42969","Warn: Project is vulnerable to: GHSA-4vvm-4w3v-6mr8","Warn: Project is vulnerable to: GHSA-9hjg-9r4m-mvj7","Warn: Project is vulnerable to: GHSA-48p4-8xcf-vxj5","Warn: Project is vulnerable to: GHSA-pq67-6m6q-mj2v","Warn: Project is vulnerable to: CVE-2025-27363","Warn: Project is vulnerable to: CVE-2022-31567","Warn: Project is vulnerable to: CVE-2022-37434","Warn: Project is vulnerable to: CVE-2023-45853","Warn: Project is vulnerable to: GHSA-3749-ghw9-m3mg","Warn: Project is vulnerable to: PYSEC-2025-41 / GHSA-53q9-r3pm-6pq6","Warn: Project is vulnerable to: GHSA-887c-mr87-cxwp","Warn: Project is vulnerable to: PYSEC-2024-259","Warn: Project is vulnerable to: GHSA-968p-4wvh-cqc8","Warn: Project is vulnerable to: GHSA-jr5f-v2jv-69x6","Warn: Project is vulnerable to: GHSA-v6h2-p8h4-qcjw","Warn: Project is vulnerable to: GHSA-fjxv-7rqg-78g4","Warn: Project is vulnerable to: GHSA-4www-5p9h-95mh","Warn: Project is vulnerable to: GHSA-9gqv-wp59-fq42","Warn: Project is vulnerable to: GHSA-rp65-9cf3-cjxr","Warn: Project is vulnerable to: GHSA-76c9-3jph-rj3q","Warn: Project is vulnerable to: GHSA-7fh5-64p2-3v2j","Warn: Project is vulnerable to: GHSA-4v9v-hfq4-rm2v","Warn: Project is vulnerable to: GHSA-9jgg-88mc-972h","Warn: Project is vulnerable to: GHSA-3h5v-q93c-6h6q"],"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}}]},"last_synced_at":"2025-08-18T14:54:42.657Z","repository_id":33835784,"created_at":"2025-08-18T14:54:42.657Z","updated_at":"2025-08-18T14:54:42.657Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":284650210,"owners_count":27041043,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","status":"online","status_checked_at":"2025-11-16T02:00:05.974Z","response_time":65,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["bingo","cheminformatics","chemistry","dotnet","drug-discovery","inchi","indigo","java","molecule-visualization","molfile","postgresql","python","smarts","smiles","webassembly"],"created_at":"2025-11-15T00:00:27.710Z","updated_at":"2025-11-16T02:01:30.946Z","avatar_url":"https://github.com/epam.png","language":"C++","readme":null,"funding_links":[],"categories":["📚 فهرست","Simulations","Libraries"],"sub_categories":["کتابخانه هاي داروسازي","General Purpose"],"project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fepam%2FIndigo","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fepam%2FIndigo","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fepam%2FIndigo/lists"}