{"id":15156585,"url":"https://github.com/getstream/winds","last_synced_at":"2026-01-14T17:54:20.397Z","repository":{"id":37270002,"uuid":"68627122","full_name":"GetStream/Winds","owner":"GetStream","description":"A Beautiful Open Source RSS \u0026 Podcast App Powered by Getstream.io","archived":true,"fork":false,"pushed_at":"2021-10-11T20:32:23.000Z","size":61501,"stargazers_count":9313,"open_issues_count":0,"forks_count":637,"subscribers_count":228,"default_branch":"master","last_synced_at":"2025-12-25T03:46:49.057Z","etag":null,"topics":["activity-stream","algolia-api","create-react-app","electron","electron-app","express","feed","getstream","machine-learning","newsfeed","personalization","podcast","podcast-client","podcasts","react","react-native","redux","rss","rss-reader"],"latest_commit_sha":null,"homepage":"https://getstream.io/winds/","language":"JavaScript","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"bsd-3-clause","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/GetStream.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null}},"created_at":"2016-09-19T17:02:13.000Z","updated_at":"2025-12-22T15:58:14.000Z","dependencies_parsed_at":"2022-07-12T16:15:00.371Z","dependency_job_id":null,"html_url":"https://github.com/GetStream/Winds","commit_stats":null,"previous_names":[],"tags_count":547,"template":false,"template_full_name":null,"purl":"pkg:github/GetStream/Winds","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/GetStream%2FWinds","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/GetStream%2FWinds/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/GetStream%2FWinds/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/GetStream%2FWinds/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/GetStream","download_url":"https://codeload.github.com/GetStream/Winds/tar.gz/refs/heads/master","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/GetStream%2FWinds/sbom","scorecard":{"id":56070,"data":{"date":"2025-08-11","repo":{"name":"github.com/GetStream/Winds","commit":"23c0e6d44cf57d65960094c5b238820e502b16b1"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":1.8,"checks":[{"name":"Code-Review","score":0,"reason":"Found 0/30 approved changesets -- score normalized to 0","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Token-Permissions","score":-1,"reason":"No tokens found","details":null,"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Maintained","score":0,"reason":"project is archived","details":["Warn: Repository is archived."],"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Dangerous-Workflow","score":-1,"reason":"no workflows found","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Security-Policy","score":0,"reason":"security policy file not detected","details":["Warn: no security policy file detected","Warn: no security file to analyze","Warn: no security file to analyze","Warn: no security file to analyze"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: BSD 3-Clause \"New\" or \"Revised\" License: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Warn: containerImage not pinned by hash: Dockerfile:2: pin your Docker image by updating mhart/alpine-node:latest to mhart/alpine-node:latest@sha256:c9014e9e5b33f29d47c867ea548edc0235ba71677f40456409a44c278d8a8e01","Warn: containerImage not pinned by hash: api/Dockerfile:2: pin your Docker image by updating mhart/alpine-node:latest to mhart/alpine-node:latest@sha256:c9014e9e5b33f29d47c867ea548edc0235ba71677f40456409a44c278d8a8e01","Info:   0 out of   2 containerImage dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 1 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}},{"name":"Vulnerabilities","score":0,"reason":"212 existing vulnerabilities detected","details":["Warn: Project is vulnerable to: GHSA-968p-4wvh-cqc8","Warn: Project is vulnerable to: GHSA-67hx-6x53-jw92","Warn: Project is vulnerable to: GHSA-6chw-6frg-f759","Warn: Project is vulnerable to: GHSA-v88g-cgmw-v5xw","Warn: Project is vulnerable to: GHSA-93q8-gq69-wqmw","Warn: Project is vulnerable to: GHSA-fwr7-v2mv-hh25","Warn: Project is vulnerable to: GHSA-4w2v-q235-vp99","Warn: Project is vulnerable to: GHSA-cph5-m8f7-6c5x","Warn: Project is vulnerable to: GHSA-wf5p-g6vw-rhxx","Warn: Project is vulnerable to: GHSA-jr5f-v2jv-69x6","Warn: Project is vulnerable to: GHSA-pp7h-53gx-mx7r","Warn: Project is vulnerable to: GHSA-qwcr-r2fm-qrc7","Warn: Project is vulnerable to: GHSA-v6h2-p8h4-qcjw","Warn: Project is vulnerable to: GHSA-grv7-fg5c-xmjg","Warn: Project is vulnerable to: GHSA-w8qv-6jwh-64r5","Warn: Project is vulnerable to: GHSA-4jwp-vfvf-657p","Warn: Project is vulnerable to: GHSA-v8w9-2789-6hhr","Warn: Project is vulnerable to: GHSA-xp63-6vf5-xf3v","Warn: Project is vulnerable to: GHSA-257v-vj4p-3w2h","Warn: Project is vulnerable to: GHSA-pxg6-pf52-xh8x","Warn: Project is vulnerable to: GHSA-h452-7996-h45h","Warn: Project is vulnerable to: GHSA-3xgq-45jj-v275","Warn: Project is vulnerable to: GHSA-gxpj-cx7g-858c","Warn: Project is vulnerable to: GHSA-w573-4hg7-7wgq","Warn: Project is vulnerable to: GHSA-wm7h-9275-46v2","Warn: Project is vulnerable to: GHSA-phwq-j96m-2c2q","Warn: Project is vulnerable to: GHSA-ghr5-ch3p-vcr6","Warn: Project is vulnerable to: GHSA-rv95-896h-c2vc","Warn: Project is vulnerable to: GHSA-qw6h-vgh9-j6wx","Warn: Project is vulnerable to: GHSA-fr76-2wp8-fp92","Warn: Project is vulnerable to: GHSA-6g6m-m6h5-w9gf","Warn: Project is vulnerable to: GHSA-2j2x-2gpw-g8fm","Warn: Project is vulnerable to: GHSA-74fj-2j2h-c42q","Warn: Project is vulnerable to: GHSA-pw2r-vq6v-hr8c","Warn: Project is vulnerable to: GHSA-jchw-25xp-jwwc","Warn: Project is vulnerable to: GHSA-cxjh-pqwp-8mfp","Warn: Project is vulnerable to: GHSA-fjxv-7rqg-78g4","Warn: Project is vulnerable to: GHSA-8r6j-v8pm-fqw3","Warn: Project is vulnerable to: MAL-2023-462","Warn: Project is vulnerable to: GHSA-4q6p-r6v2-jvc5","Warn: Project is vulnerable to: GHSA-ww39-953v-wcq6","Warn: Project is vulnerable to: GHSA-pfrx-2q88-qq97","Warn: Project is vulnerable to: GHSA-765h-qjxv-5f44","Warn: Project is vulnerable to: GHSA-f2jv-r9rf-7988","Warn: Project is vulnerable to: GHSA-c429-5p7v-vgjp","Warn: Project is vulnerable to: GHSA-rc47-6667-2j5j","Warn: Project is vulnerable to: GHSA-qqgx-2p2h-9c37","Warn: Project is vulnerable to: GHSA-gxr4-xjj5-5px2","Warn: Project is vulnerable to: GHSA-jpcq-cgw6-v4j6","Warn: Project is vulnerable to: GHSA-896r-f27r-55mw","Warn: Project is vulnerable to: GHSA-9c47-m6qq-7p4h","Warn: Project is vulnerable to: GHSA-q854-j362-cfq9","Warn: Project is vulnerable to: GHSA-hhfg-6hfc-rvxm","Warn: Project is vulnerable to: GHSA-8cf7-32gw-wr33","Warn: Project is vulnerable to: GHSA-hjrf-2m68-5959","Warn: Project is vulnerable to: GHSA-qwph-4952-7xr6","Warn: Project is vulnerable to: GHSA-6c8f-qphg-qjgp","Warn: Project is vulnerable to: GHSA-jf85-cpcp-j695","Warn: Project is vulnerable to: GHSA-p6mc-m468-83gw","Warn: Project is vulnerable to: GHSA-29mw-wpgm-hmr9","Warn: Project is vulnerable to: GHSA-35jh-r3h4-6jhm","Warn: Project is vulnerable to: GHSA-h726-x36v-rx45","Warn: Project is vulnerable to: GHSA-4xcv-9jjx-gfj3","Warn: Project is vulnerable to: GHSA-952p-6rrq-rcjv","Warn: Project is vulnerable to: GHSA-f8q6-p94x-37v3","Warn: Project is vulnerable to: GHSA-vh95-rmgr-6w4m","Warn: Project is vulnerable to: GHSA-xvch-5gv4-984h","Warn: Project is vulnerable to: GHSA-fhjf-83wg-r2j9","Warn: Project is vulnerable to: GHSA-8hfj-j24r-96c4","Warn: Project is vulnerable to: GHSA-wc69-rhjr-hc9g","Warn: Project is vulnerable to: GHSA-56x4-j7p9-fcf9","Warn: Project is vulnerable to: GHSA-v78c-4p63-2j6c","Warn: Project is vulnerable to: GHSA-8687-vv9j-hgph","Warn: Project is vulnerable to: GHSA-f825-f98c-gj3g","Warn: Project is vulnerable to: GHSA-h8hf-x3f4-xwgp","Warn: Project is vulnerable to: GHSA-9m93-w8w6-76hh","Warn: Project is vulnerable to: GHSA-m7xq-9374-9rvx","Warn: Project is vulnerable to: GHSA-vg7j-7cwx-8wgw","Warn: Project is vulnerable to: GHSA-p92x-r36w-9395","Warn: Project is vulnerable to: GHSA-45q2-34rf-mr94","Warn: Project is vulnerable to: GHSA-44fp-w29j-9vj5","Warn: Project is vulnerable to: GHSA-w7rc-rwvf-8q5r","Warn: Project is vulnerable to: GHSA-r683-j2x4-v87g","Warn: Project is vulnerable to: GHSA-px4h-xg32-q955","Warn: Project is vulnerable to: GHSA-rp65-9cf3-cjxr","Warn: Project is vulnerable to: GHSA-76c9-3jph-rj3q","Warn: Project is vulnerable to: GHSA-hj48-42vr-x3v9","Warn: Project is vulnerable to: GHSA-9wv6-86v2-598j","Warn: Project is vulnerable to: GHSA-rhx6-c78j-4q9w","Warn: Project is vulnerable to: GHSA-g6ww-v8xp-vmwg","Warn: Project is vulnerable to: GHSA-566m-qj78-rww5","Warn: Project is vulnerable to: GHSA-hwj9-h5mp-3pm3","Warn: Project is vulnerable to: GHSA-7fh5-64p2-3v2j","Warn: Project is vulnerable to: GHSA-hrpp-h998-j3pp","Warn: Project is vulnerable to: GHSA-35q2-47q7-3pc3","Warn: Project is vulnerable to: GHSA-p8p7-x288-28g6","Warn: Project is vulnerable to: GHSA-rjqq-98f6-6j3r","Warn: Project is vulnerable to: GHSA-mjxr-4v3x-q3m4","Warn: Project is vulnerable to: GHSA-cgfm-xwp7-2cvr","Warn: Project is vulnerable to: GHSA-rm97-x556-q36h","Warn: Project is vulnerable to: GHSA-c2qf-rxjj-qqgw","Warn: Project is vulnerable to: GHSA-m6fv-jmcg-4jfg","Warn: Project is vulnerable to: GHSA-cm22-4g7w-348p","Warn: Project is vulnerable to: GHSA-4g88-fppr-53pp","Warn: Project is vulnerable to: GHSA-4jqc-8m5r-9rpr","Warn: Project is vulnerable to: GHSA-3jfq-g458-7qm9","Warn: Project is vulnerable to: GHSA-r628-mhmh-qjhw","Warn: Project is vulnerable to: GHSA-9r2w-394v-53qc","Warn: Project is vulnerable to: GHSA-5955-9wpr-37jh","Warn: Project is vulnerable to: GHSA-qq89-hq3f-393p","Warn: Project is vulnerable to: GHSA-f5x3-32g6-xq36","Warn: Project is vulnerable to: GHSA-72xf-g2v4-qvf3","Warn: Project is vulnerable to: GHSA-w5p7-h5w8-2hfq","Warn: Project is vulnerable to: GHSA-332q-7ff2-57h2","Warn: Project is vulnerable to: GHSA-rv73-9c8w-jp4c","Warn: Project is vulnerable to: GHSA-qgmg-gppg-76g5","Warn: Project is vulnerable to: GHSA-xx4c-jj58-r7x6","Warn: Project is vulnerable to: GHSA-g78m-2chm-r7qv","Warn: Project is vulnerable to: GHSA-6fc8-4gx4-v693","Warn: Project is vulnerable to: GHSA-3h5v-q93c-6h6q","Warn: Project is vulnerable to: GHSA-c4w7-xm78-47vh","Warn: Project is vulnerable to: GHSA-p9pc-299p-vxgp","Warn: Project is vulnerable to: GHSA-whgm-jr23-g3j9","Warn: Project is vulnerable to: GHSA-r4pf-3v7r-hh55","Warn: Project is vulnerable to: GHSA-rrc9-gqf8-8rwg","Warn: Project is vulnerable to: GHSA-x9w5-v3q2-3rhw","Warn: Project is vulnerable to: GHSA-3wcq-x3mq-6r9p","Warn: Project is vulnerable to: GHSA-ff7x-qrg7-qggm","Warn: Project is vulnerable to: GHSA-2q4g-w47c-4674","Warn: Project is vulnerable to: GHSA-56pc-6jqp-xqj8","Warn: Project is vulnerable to: GHSA-hvf8-h2qh-37m9","Warn: Project is vulnerable to: GHSA-mpjm-v997-c4h4","Warn: Project is vulnerable to: GHSA-3p22-ghq8-v749","Warn: Project is vulnerable to: GHSA-77xc-hjv8-ww97","Warn: Project is vulnerable to: GHSA-mq8j-3h7h-p8g7","Warn: Project is vulnerable to: GHSA-p2jh-44qj-pf2v","Warn: Project is vulnerable to: GHSA-p7v2-p9m8-qqg7","Warn: Project is vulnerable to: GHSA-7x97-j373-85x5","Warn: Project is vulnerable to: GHSA-7m48-wc93-9g85","Warn: Project is vulnerable to: GHSA-qqvq-6xgj-jw8g","Warn: Project is vulnerable to: GHSA-6r2x-8pq8-9489","Warn: Project is vulnerable to: GHSA-9jxc-qjr9-vjxq","Warn: Project is vulnerable to: GHSA-vh7m-p724-62c2","Warn: Project is vulnerable to: GHSA-r9p9-mrjm-926w","Warn: Project is vulnerable to: GHSA-434g-2637-qmqr","Warn: Project is vulnerable to: GHSA-49q7-c7j4-3p7m","Warn: Project is vulnerable to: GHSA-977x-g7h5-7qgw","Warn: Project is vulnerable to: GHSA-f7q4-pwc6-w24p","Warn: Project is vulnerable to: GHSA-fc9h-whq2-v747","Warn: Project is vulnerable to: GHSA-vjh7-7g9h-fjfh","Warn: Project is vulnerable to: GHSA-4gmj-3p3h-gm8h","Warn: Project is vulnerable to: GHSA-6h5x-7c5m-7cr7","Warn: Project is vulnerable to: GHSA-xf7w-r453-m56c","Warn: Project is vulnerable to: GHSA-w457-6q6x-cgp9","Warn: Project is vulnerable to: GHSA-62gr-4qp9-h98f","Warn: Project is vulnerable to: GHSA-f52g-6jhx-586p","Warn: Project is vulnerable to: GHSA-2cf5-4w76-r9qv","Warn: Project is vulnerable to: GHSA-3cqr-58rm-57f8","Warn: Project is vulnerable to: GHSA-g9r4-xpmj-mj65","Warn: Project is vulnerable to: GHSA-q2c6-c6pm-g3gh","Warn: Project is vulnerable to: GHSA-43f8-2h32-f4cj","Warn: Project is vulnerable to: GHSA-6x33-pw7p-hmpq","Warn: Project is vulnerable to: GHSA-c7qv-q95q-8v27","Warn: Project is vulnerable to: GHSA-78xj-cgh5-2h22","Warn: Project is vulnerable to: GHSA-2p57-rm9w-gvfp","Warn: Project is vulnerable to: GHSA-7r28-3m3f-r2pr","Warn: Project is vulnerable to: GHSA-r8j5-h5cx-65gg","Warn: Project is vulnerable to: GHSA-2pr6-76vf-7546","Warn: Project is vulnerable to: GHSA-8j8c-7jfh-h6hx","Warn: Project is vulnerable to: GHSA-76p3-8jx3-jpfq","Warn: Project is vulnerable to: GHSA-3rfm-jhwj-7488","Warn: Project is vulnerable to: GHSA-hhq3-ff78-jv3g","Warn: Project is vulnerable to: GHSA-r6rj-9ch6-g264","Warn: Project is vulnerable to: GHSA-92xj-mqp7-vmcj","Warn: Project is vulnerable to: GHSA-wxgw-qj99-44c2","Warn: Project is vulnerable to: GHSA-5rrq-pxf6-6jx5","Warn: Project is vulnerable to: GHSA-8fr3-hfg3-gpgp","Warn: Project is vulnerable to: GHSA-gf8q-jrpm-jvxq","Warn: Project is vulnerable to: GHSA-2r2c-g63r-vccr","Warn: Project is vulnerable to: GHSA-cfm4-qjh2-4765","Warn: Project is vulnerable to: GHSA-x4jg-mjrx-434g","Warn: Project is vulnerable to: GHSA-5fw9-fq32-wv5p","Warn: Project is vulnerable to: GHSA-r8f7-9pfq-mjmv","Warn: Project is vulnerable to: GHSA-cwx2-736x-mf6w","Warn: Project is vulnerable to: GHSA-v39p-96qg-c8rf","Warn: Project is vulnerable to: GHSA-8v63-cqqc-6r2c","Warn: Project is vulnerable to: GHSA-h7cp-r72f-jxh6","Warn: Project is vulnerable to: GHSA-v62p-rq8g-8h59","Warn: Project is vulnerable to: GHSA-65rp-mhqf-8gj3","Warn: Project is vulnerable to: GHSA-5q6m-3h65-w53x","Warn: Project is vulnerable to: GHSA-7mwh-4pqv-wmr8","Warn: Project is vulnerable to: GHSA-hxcc-f52p-wc94","Warn: Project is vulnerable to: GHSA-g4rg-993r-mgx7","Warn: Project is vulnerable to: GHSA-c9g6-9335-x697","Warn: Project is vulnerable to: GHSA-vx3p-948g-6vhq","Warn: Project is vulnerable to: GHSA-j44m-qm6p-hp7m","Warn: Project is vulnerable to: GHSA-4wf5-vphf-c2xc","Warn: Project is vulnerable to: GHSA-52f5-9888-hmc6","Warn: Project is vulnerable to: GHSA-jgrx-mgxx-jf9v","Warn: Project is vulnerable to: GHSA-7p7h-4mm5-852v","Warn: Project is vulnerable to: GHSA-46c4-8wrp-j99v","Warn: Project is vulnerable to: GHSA-9m6j-fcg5-2442","Warn: Project is vulnerable to: GHSA-hh27-ffr2-f2jc","Warn: Project is vulnerable to: GHSA-rqff-837h-mm52","Warn: Project is vulnerable to: GHSA-8v38-pw62-9cw2","Warn: Project is vulnerable to: GHSA-hgjh-723h-mx2j","Warn: Project is vulnerable to: GHSA-jf5r-8hm2-f872","Warn: Project is vulnerable to: GHSA-wr3j-pwj9-hqq6","Warn: Project is vulnerable to: GHSA-4v9v-hfq4-rm2v","Warn: Project is vulnerable to: GHSA-9jgg-88mc-972h","Warn: Project is vulnerable to: GHSA-j8xg-fqg3-53r7","Warn: Project is vulnerable to: GHSA-776f-qx25-q3cc"],"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}}]},"last_synced_at":"2025-08-15T00:46:50.106Z","repository_id":37270002,"created_at":"2025-08-15T00:46:50.106Z","updated_at":"2025-08-15T00:46:50.106Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":28428985,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-01-14T16:38:47.836Z","status":"ssl_error","status_checked_at":"2026-01-14T16:34:59.695Z","response_time":107,"last_error":"SSL_connect returned=1 errno=0 peeraddr=140.82.121.5:443 state=error: unexpected eof while reading","robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":false,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["activity-stream","algolia-api","create-react-app","electron","electron-app","express","feed","getstream","machine-learning","newsfeed","personalization","podcast","podcast-client","podcasts","react","react-native","redux","rss","rss-reader"],"created_at":"2024-09-26T19:23:18.200Z","updated_at":"2026-01-14T17:54:20.375Z","avatar_url":"https://github.com/GetStream.png","language":"JavaScript","readme":"\u003e 🛑 **Notice**: This repository is no longer maintained; No further Issues or Pull Requests will be considered or approved.\n\n# Winds - A Beautiful Open Source RSS \u0026 Podcast App Powered by GetStream.io\n\n[![Slack Community](https://img.shields.io/badge/Slack%20Community-Get%20Invite-green.svg)](https://communityinviter.com/apps/winds-community-hq/winds-2-0)\n[![Build Status](https://travis-ci.org/GetStream/Winds.svg?branch=master)](https://travis-ci.org/GetStream/Winds)\n[![codecov](https://codecov.io/gh/GetStream/Winds/branch/master/graph/badge.svg)](https://codecov.io/gh/GetStream/Winds)\n[![Open Source](https://img.shields.io/badge/Open%20Source-100%25-green.svg)](https://shields.io/)\n[![Maintenance](https://img.shields.io/badge/Maintained%3F-Yes-green.svg)](https://github.com/GetStream/winds/graphs/commit-activity)\n[![Built With](https://img.shields.io/badge/Built%20With-❤️%20in%20Boulder,%20CO-green.svg)](httpds://shields.io/)\n[![StackShare](https://img.shields.io/badge/Tech-Stack-0690fa.svg?style=flat)](https://stackshare.io/stream/winds)\n\n## Description\n\nWinds is a beautiful open-source RSS and Podcast app created using React \u0026 Redux on the frontend and Express.js on the backend. Use the free hosted version or run it on your own server and customize it as you see fit. Contributions in form of pull requests are always appreciated. Activity Feeds \u0026 Discovery in Winds are powered by [Stream](https://getstream.io/get_started/), the app leverages [Algolia](https://algolia.com?ref=stream) for search, [AWS](https://aws.amazon.com/) for hosting, [MongoDB Atlas](http://mbsy.co/mongodb/228644) for a hosted database (DBaaS), and [SendGrid](https://sendgrid.com/) for email. All of these services have a free tier.\n\n## Getting Started\n\nTo get started with Winds, please download [the latest release](https://s3.amazonaws.com/winds-2.0-releases/latest.html)\n\n## Featured RSS \u0026 Podcasts\n\nHave a popular RSS or Podcast and want to be featured? Reach out to winds@getstream.io. We reply to every message.\n\n# Features at a Glance\nWinds is packed full of awesome features behind a beautiful user interface and user experience. Here's a quick look at what the project has to offer:\n\n## Beautiful UI\n![Winds UI](https://i.imgur.com/W1fpowV.png)\n\n## RSS \u0026 Podcast Recommendations\n![Winds RSS \u0026 Podcast Recommendations](https://i.imgur.com/AlVgDTg.png)\n\n## Integrated Search\n![Winds Search](https://i.imgur.com/zaWtNfV.png)\n\n## Podcast Player\n![Winds Podcast Player](https://i.imgur.com/th247rA.png)\n\n## RSS Reader\n![Winds RSS Reader](https://i.imgur.com/D3wt7W3.png)\n\n\n## TOCd\n\n*   [Roadmap](#roadmap)\n*   [Powered By](#powered-by)\n    *   [Stream](#stream)\n    *   [Algolia](#algolia)\n    *   [MongoDB](#mongodb)\n    *   [SendGrid](https://sendgrid.com)\n    *   [AWS](https://aws.amazon.com/)\n*   [Tutorials](#tutorials)\n*   [Download](#download)\n*   [Contributing to Winds](#contributing-to-winds)\n*   [Support](#support)\n*   [Maintenance \u0026 Contributions](#maintenance-and-contributions)\n\n## Roadmap\n\nHelp us improve Winds and/or vote on the [Roadmap for 2.1](https://github.com/GetStream/Winds/issues/191)\n\n*   [ ] Search detail screen\n*   [ ] Playlist support (partially implemented)\n*   [ ] Team support (share an activity feed with colleagues or friends to discover and collaborate)\n*   [ ] Mobile application powered by React Native\n\n## Powered By\n\n1.  [Express](https://expressjs.com?ref=winds)\n2.  [React](https://reactjs.org?ref=winds) \u0026 [Redux](https://redux.js.org?ref=winds)\n3.  [Algolia](https://www.algolia.com?ref=winds)\n4.  [MongoDB Atlas](http://mbsy.co/mongodb/228644)\n5.  [SendGrid](https://sendgrid.com?ref=winds)\n6.  [Bull](https://github.com/OptimalBits/bull?ref=winds)\n7.  [Mercury](https://mercury.postlight.com?ref=winds)\n8.  [Stream](https://getstream.io?ref=winds)\n9.  [Sentry](https://sentry.io/?ref=winds)\n10. [AWS](https://aws.amazon.com/?ref=winds)\n\n**The full stack can be found on [StackShare.io](https://stackshare.io/stream/winds).**\n\n### Stream\n\n[Stream](https://getstream.io/?ref=winds) is an API for building activity feeds. For Winds the follow suggestions and the list of articles from the feeds you follow is powered by Stream. Stream accounts are free for up to 3 million feed updates and handle personalization (machine learning) for up to 100 users.\n\n### Algolia\n\n[Algolia](https://algolia.com?ref=winds) is used for lightning fast and relevant search. We use their [JavaScript search client](https://www.npmjs.com/package/algoliasearch?ref=winds) to easily setup the Winds search implementation. Algolia, accounts are free up to 10k records and 100k operations.\n\n### MongoDB\n\n[MongoDB Atlas](http://mbsy.co/mongodb/228644) provides a Database as a Service, and serves as the backend datastore for Winds.\n\n## Tutorials \u0026 Blog Posts\n\nThe following tutorials will not only help you start contributing to Winds, but also provide inspiration for your next app.\n\n**Note:** We're actively working on this portion of the README. To stay up to date with the latest information, please signup for the hosted version at [https://getstream.io/winds](https://getstream.io/winds).\n\n1.  [Implementing search with Algolia](https://hackernoon.com/integrating-algolia-search-in-winds-a-beautiful-rss-podcast-application-f231e49cdab5)\n2.  [Stream and Winds](https://getstream.io/blog/the-engine-that-powers-winds/)\n3.  [Running PM2 \u0026 Node.js in Production Environments](https://hackernoon.com/running-pm2-node-js-in-production-environments-13e703fc108a)\n4.  [Creating a RESTful API design with Express.js](https://hackernoon.com/building-a-node-js-powered-api-with-express-mongoose-mongodb-19b14fd4b51e)\n5. [Takeaways on Building a React Based App with Electron](https://medium.com/@nparsons08/publishing-a-react-based-app-with-electron-and-nodejs-f5ec44169366)\n6. [The Winds Stack](https://stackshare.io/stream/how-stream-built-a-modern-rss-reader-with-javascript)\n7. [Building Touch Bar Support for macOS in Electron with React](https://hackernoon.com/winds-2-1-building-touch-bar-support-for-macos-in-electron-with-react-e10adb811c91)\n8. [Testing Node.js in 2018](https://hackernoon.com/testing-node-js-in-2018-10a04dd77391)\n9. [Simple Steps to Optimize Your App Performance with MongoDB, Redis, and Node.js](https://hackernoon.com/simple-steps-to-optimize-your-app-performance-5700d8b58f58)\n10. [Getting Started with Winds \u0026 Open Source](https://hackernoon.com/winds-an-in-depth-tutorial-on-making-your-first-contribution-to-open-source-software-ebf259f21db2)\n11. [Deploying the Winds App to Amazon S3 and CloudFront](https://getstream.io/blog/deploying-the-winds-app-to-amazon-s3-and-cloudfront/)\n12. [Deploying the Winds API to AWS ECS with Docker Compose](https://getstream.io/blog/deploying-the-winds-api-to-aws-ecs-with-docker-compose/)\n\n## Download\n\nTo download Winds, visit [https://getstream.io/winds/](https://getstream.io/winds/).\n\n## Contributing to Winds\n\n### TL;DR\n\nCommands:\n\n*   `brew install redis mongodb`\n*   `brew services start mongodb`\n*   `brew services start redis`\n*   `cd Winds`\n*   `cd api \u0026\u0026 yarn`\n*   `cd ../app \u0026\u0026 yarn`\n\n\nSign up for both Stream and Algolia, and create the following `.env` file in the `app` directory, replacing the keys where indicated:\n\n```\nDATABASE_URI=mongodb://localhost/WINDS_DEV\nCACHE_URI=redis://localhost:6379\nJWT_SECRET=YOUR_JWT_SECRET\n\nAPI_PORT=8080\nREACT_APP_API_ENDPOINT=http://localhost:8080\nSTREAM_API_BASE_URL=https://windspersonalization.getstream.io/personalization/v1.0\n\nSTREAM_APP_ID=YOUR_STREAM_APP_ID\nREACT_APP_STREAM_APP_ID=YOUR_STREAM_APP_ID\nREACT_APP_STREAM_API_KEY=YOUR_STREAM_API_KEY\nREACT_APP_STREAM_ANALYTICS=YOUR_STREAM_ANALYTICS_TOKEN\nSTREAM_API_KEY=YOUR_STREAM_API_KEY\nSTREAM_API_SECRET=YOUR_STREAM_API_SECRET\n\nREACT_APP_ALGOLIA_APP_ID=YOUR_ALGOLIA_APP_ID\nREACT_APP_ALGOLIA_SEARCH_KEY=YOUR_ALGOLIA_SEARCH_ONLY_API_KEY\nALGOLIA_WRITE_KEY=YOUR_ALGOLIA_ADMIN_API_KEY\n```\n\n\u003e Note: If you are running the test suite, you will need to have a test version of the `.env` file inside of the `api/test` directory.\n\nThen run:\n\n*   `pm2 start process_dev.json`\n*   `cd app \u0026\u0026 yarn start`\n\n### Clone the Repo\n\n```bash\ngit clone git@github.com:GetStream/Winds.git\n```\n\n### Install dependencies\n\nThe following instructions are geared towards Mac users who can use `brew` ([Homebrew](https://brew.sh/)) to install most dependencies. Ubuntu users can use `apt`, and Windows users will have to install directly from the dependency's site. Non-debian-based Linux users will probably be able to figure it out on their own :)\n\n*   `cd Winds/app`\n*   `yarn`\n*   `cd ../api`\n*   `yarn`\n\n### Start MongoDB Locally\n\nWinds uses MongoDB as the main datastore - it contains all users, rss feeds, podcasts, episodes, articles, and shares.\n\nIf you're on a Mac, you can install MongoDB through [Homebrew](https://brew.sh/) by running:\n\n```\nbrew install mongodb\n```\n\n_(You can also install MongoDB from the [official MongoDB site](https://www.mongodb.com/download-center).)_\n\nYou can also run MongoDB in the background by running:\n\n```\nbrew services start mongodb\n```\n\n### Start Redis Locally\n\nAt Stream, we use Redis as an in-memory storage for the Winds podcast processing and RSS processing workers. It contains a list of podcasts and RSS feeds, which the workers pick up and process using the `bull` messaging system.\n\nIf you're on a Mac, you can install Redis through [Homebrew](https://brew.sh/) by running:\n\n```\nbrew install redis\n```\n\n_(You can also install Redis from the [official Redis site](https://redis.io/download).)_\n\nThen, start Redis by running:\n\n```\nredis-server\n```\n\n...which creates (by default) a `dump.rdb` file in your current directory and stores a cached version of the database in that location.\n\nYou can also run Redis in the background by running:\n\n```\nbrew services start redis\n```\n\n### Loading Test Data\n\nFor testing purposes, you will want to use the test data located [here](https://s3.amazonaws.com/winds-hosted/static/export/WINDS.zip).\n\nUse [`mongoimport`](https://docs.mongodb.com/manual/reference/program/mongoimport/) or [`mongorestore`](https://docs.mongodb.com/manual/reference/program/mongorestore/) to import the data. There are two username and password combinations for testing:\n\n**Username**: `admin@admin.com`\u003cbr/\u003e\n**Password**: `admin`\n\u003cbr/\u003e\u003cbr/\u003e\n**Username**: `test@test.com`\u003cbr/\u003e\n**Password**: `test`\n\nYou will need to run the `FLUSHALL` command in Redis to ensure that the new content is picked up.\n\n\u003e Note: This will override any local data that you may have. Please be cautious! Also, this will not create Stream follows – please follow feeds manually to generate them.\n\n### Stream\n\n#### Sign up and Create a Stream App\n\nTo contribute to Winds, sign up for [Stream](https://getstream.io/get_started?ref=winds) to utilize the activity and timeline feeds.\n\n_(Reminder: Stream is free for applications with less than 3,000,000 updates per month.)_\n\n*   [Sign up for Stream here](https://getstream.io/get_started?ref=winds)\n*   Create a new Stream app\n*   Find the App ID, API Key, and API Secret for your new Stream app\n\n#### Add your Stream App ID, API Key, and API Secret to your `.env`\n\nAppend the Stream App ID, API Key, and API secret to your `.env` file:\n\n```\nSTREAM_APP_ID=YOUR_STREAM_APP_ID\nSTREAM_API_KEY=YOUR_STREAM_API_KEY\nSTREAM_API_SECRET=YOUR_STREAM_API_SECRET\n```\n\n#### Create Your Stream Feed Groups\n\nOnce you've signed in, create \"feed groups\" for your Stream app.\n\nA \"feed group\" defines a certain type of feed within your application. Use the \"Add Feed Group\" button to create the following feeds:\n\n| Feed Group Name | Feed Group Type |\n| --------------- | --------------- |\n| `podcast`       | flat            |\n| `rss`           | flat            |\n| `user`          | flat            |\n| `timeline`      | flat            |\n| `folder`        | flat            |\n| `user_episode`  | flat            |\n| `user_article`  | flat            |\n\nIt's fine to enable \"Realtime Notifications\" for each of these feed groups, though we won't be using those yet.\n\n### Algolia\n\n#### Sign up for Algolia and Create an Algolia App and Index\n\nIn addition to Stream, you also need to sign up for [Algolia](https://www.algolia.com/users/sign_up?ref=winds), to contribute to Winds, for the search functionality.\n\n_(Algolia is free for applications with up to 10k records.)_\n\n*   [Sign up for Algolia here](https://www.algolia.com/users/sign_up?ref=winds)\n*   From the [Applications page](https://www.algolia.com/manage/applications), click \"New Application\" and create a new Algolia application. (We recommend something similar to `my-winds-app`)\n    *   (Select the datacenter that's closest to you.)\n*   From the application page, select \"Indices\" and click \"Add New Index\". (We recommend something similar to `winds-main-index`)\n\n#### Add Your Algolia Application Id, Search-Only Api Key and Admin Api Key to Your `.env` File\n\nFrom your app, click the \"API Keys\" button on the left to find your app ID and API keys.\n\nAppend your Algolia application ID, search-only API Key and Admin API Key to your `.env` file to look like this:\n\n```\nREACT_APP_ALGOLIA_APP_ID=YOUR_ALGOLIA_APP_ID\nREACT_APP_ALGOLIA_SEARCH_KEY=YOUR_ALGOLIA_SEARCH_ONLY_API_KEY\nALGOLIA_WRITE_KEY=YOUR_ALGOLIA_ADMIN_API_KEY\n```\n\n### Start Backend Services\n\nFrom the root directory, run:\n\n```\npm2 start process_dev.json\n```\n\nTo see logging information for all processes, run:\n\n```\npm2 logs\n```\n\n### Start Frontend Electron / Web App Server\n\n```\ncd app \u0026\u0026 yarn start\n```\n\n### Running tests\n\nWinds API server uses:\n\n* [Mocha](https://mochajs.org) as testing framework\n* [Chai](https://chaijs.org) as assertion library\n* [Sinon](https://sinonjs.org) as mocking library\n* [nock](https://github.com/node-nock/nock) as HTTP mocking library\n* [mock-require](https://github.com/boblauer/mock-require) as module mocking library\n\nTests are located in [`api/test` folder](https://github.com/GetStream/Winds/tree/master/api/test).\n\nFile structure is intentionally mirroring files in `api/src` to simplify matching tests to tested code.\n\nTo run tests:\n\n```\ncd api \u0026\u0026 yarn run test\n```\n\nTo run tests with extended stack traces (useful when debugging async issues):\n\n```\ncd api \u0026\u0026 yarn run test_deep\n```\n\n#### Adding new tests\n\nAdd your code to a file in `api/test` folder (preferably mirroring existing file from `api/src` folder).\n\nRefer to [Mocha documentation](https://mochajs.org/#getting-started) for examples of using BDD-like DSL for writing tests.\n\nModules are mocked in [`api/test-entry.js`](https://github.com/GetStream/Winds/blob/master/api/test-entry.js#L21L27) as mocks have to be installed before any modules are loaded.\n\nFixtures are loaded via [`loadFixture`](https://github.com/GetStream/Winds/blob/master/api/test/utils.js#L59L101) function from [`api/test/fixtures` folder](https://github.com/GetStream/Winds/tree/master/api/test/fixtures)\n\nVarious utility functions are provided in [`api/test/util.js`](https://github.com/GetStream/Winds/blob/master/api/test/utils.js) (See other tests for examples of usage).\n\n### Building a Production Version\n\nBuild a production version of Winds by running from root directory:\n\n```\n./api/build.sh\n```\n\nThis creates production-ready JS files in api/dist.\n\nTo run the production JS files:\n\n```\npm2 start process_prod.json\n```\n\nOR\n\n**Prepare the build for Docker**:\n\n`cd api \u0026\u0026 cd scripts \u0026\u0026 ./make-build.sh`\n\n**Build the Docker container (API \u0026 all workers)**:\n\n`cd ../ \u0026\u0026 docker-compose up`\n\nThe commands above will prepare and start the API (and all workers). The frontend will still need to be started manually.\n\n## Debugging RSS \u0026 Podcast Issues\n\nUnfortunately there is no unified standard for RSS.\nGo to the `api` directory and run `yarn link` to make these commands available:\n\n```\nwinds rss https://techcrunch.com/feed/\n```\n\n**Podcasts**:\n\n```\nwinds podcast https://www.npr.org/rss/podcast.php\\?id\\=510289\n```\n\n**Open Graph scraping**:\n\n```\nwinds og http://www.planetary.org/multimedia/planetary-radio/show/2018/0509-amy-mainzer-neowise.html\n```\n\n**RSS Discovery**:\n\n```\nwinds discover mashable.com\n```\n\n**Article parsing (w/ Mercury)**:\n\n```\nwinds article https://alexiskold.net/2018/04/12/meet-12-startups-from-techstars-nyc-winter-2018-program/\n```\n\nPull requests for improved RSS compatibility are much appreciated.\nMost of the parsing codebase is located in `api/src/parsers/`.\n\n## Support\n\nAll support is handled via [GitHub Issues](https://github.com/getstream/winds/issues). If you're unfamiliar with creating an Issue on GitHub, please follow [these instructions](https://help.github.com/articles/creating-an-issue/).\n\n## Maintenance and Contributions\n\nThank you to all of the maintainers and contributors who've helped Winds become what it is today and help it stay up and running every day. We couldn't do it without you!\n\n### Special Shoutouts To:\n\n*   [Hackernoon](https://hackernoon.com/)\n*   [Product Hunt](https://www.producthunt.com/)\n*   [StackShare](https://stackshare.io/stream/how-stream-built-a-modern-rss-reader-with-javascript)\n\n### Primary Maintainers\n\n*   [Nick Parsons](https://github.com/nparsons08)\n*   [Amin Mahboubi](https://github.com/mahboubii)\n*   [Thierry Schellenbach](https://github.com/tschellenbach)\n*   [Josh Tilton](https://github.com/tilton)\n\n### Contributors\n\n*   [Tommaso Barbugli](https://github.com/tbarbugli)\n*   [Ken Hoff](https://github.com/kenhoff)\n*   [Dwight Gunning](https://github.com/dwightgunning)\n*   [Matt Gauger](https://github.com/mathias)\n*   [Max Klyga](https://github.com/nekuromento)\n*   [Zhomart Mukhamejanov](https://github.com/Zhomart)\n*   [Julian Xhokaxhiu](https://github.com/julianxhokaxhiu)\n*   [Jonathon Belotti](https://github.com/thundergolfer)\n*   [The Gitter Badger](https://github.com/gitter-badger)\n*   [Meriadec Pillet](https://github.com/meriadec)\n*   [Alex Sinnott](https://github.com/sifex)\n*   [Lawal Sauban](https://github.com/sauban)\n\n## Revive RSS\n\nRSS is an amazing open standard. It is probably the most pleasant way to stay up to date with the sites and podcasts you care about. Our reasons for contributing to Winds are explained in the blogpost [Winds 2.0 It's time to Revive RSS](https://getstream.io/blog/winds-2-0-its-time-to-revive-rss/). In this section we will list other open source and commercial projects that are having an impact on Reviving RSS:\n\n* [Miniflux](https://github.com/miniflux/miniflux)\n* [TwitRSSMe](https://twitrss.me/)\n* [Feedly](https://feedly.com/)\n* [NewsBlur](https://newsblur.com/)\n* [Feedity](https://feedity.com/)\n* [SaveRSS](https://mg.guelker.eu/saverss/)\n\n\n## We are hiring!\n\nWe've recently closed a [$38 million Series B funding round](https://techcrunch.com/2021/03/04/stream-raises-38m-as-its-chat-and-activity-feed-apis-power-communications-for-1b-users/) and we keep actively growing.\nOur APIs are used by more than a billion end-users, and you'll have a chance to make a huge impact on the product within a team of the strongest engineers all over the world.\n\nCheck out our current openings and apply via [Stream's website](https://getstream.io/team/#jobs).\n","funding_links":[],"categories":[],"sub_categories":[],"project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fgetstream%2Fwinds","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fgetstream%2Fwinds","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fgetstream%2Fwinds/lists"}