{"id":13424578,"url":"https://github.com/google/flatbuffers","last_synced_at":"2025-09-09T20:25:34.935Z","repository":{"id":17185582,"uuid":"19953044","full_name":"google/flatbuffers","owner":"google","description":"FlatBuffers: Memory Efficient Serialization Library","archived":false,"fork":false,"pushed_at":"2025-08-28T23:06:18.000Z","size":21722,"stargazers_count":24715,"open_issues_count":148,"forks_count":3389,"subscribers_count":636,"default_branch":"master","last_synced_at":"2025-09-05T10:33:00.182Z","etag":null,"topics":["c","c-plus-plus","c-sharp","cross-platform","flatbuffers","go","grpc","java","javascript","json-parser","marshalling","mmap","protobuf","python","rpc","rust","serialization","serialization-library","typescript","zero-copy"],"latest_commit_sha":null,"homepage":"https://flatbuffers.dev/","language":"C++","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/google.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":"SECURITY.md","support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null}},"created_at":"2014-05-19T18:33:01.000Z","updated_at":"2025-09-05T08:43:33.000Z","dependencies_parsed_at":"2024-01-03T01:20:10.179Z","dependency_job_id":"5137cce9-2591-4c25-b9dc-d2cbe9b44461","html_url":"https://github.com/google/flatbuffers","commit_stats":{"total_commits":2857,"total_committers":701,"mean_commits":4.075606276747504,"dds":0.888694434721736,"last_synced_commit":"49061f8c7c99363eeea25c5e4337ebb499928467"},"previous_names":[],"tags_count":47,"template":false,"template_full_name":null,"purl":"pkg:github/google/flatbuffers","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fflatbuffers","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fflatbuffers/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fflatbuffers/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fflatbuffers/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/google","download_url":"https://codeload.github.com/google/flatbuffers/tar.gz/refs/heads/master","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fflatbuffers/sbom","scorecard":{"id":436906,"data":{"date":"2025-08-11","repo":{"name":"github.com/google/flatbuffers","commit":"5218e29aa4bcfbabee3904a7049d090b31199fd9"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":6.3,"checks":[{"name":"Maintained","score":10,"reason":"30 commit(s) and 3 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: SECURITY.md:1","Info: Found linked content: SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: SECURITY.md:1","Info: Found text in security policy: SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Code-Review","score":10,"reason":"all changesets reviewed","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: jobLevel 'actions' permission set to 'read': .github/workflows/build.yml:632","Info: jobLevel 'contents' permission set to 'read': .github/workflows/label.yml:16","Info: topLevel permissions set to 'read-all': .github/workflows/build.yml:2","Warn: topLevel 'contents' permission set to 'write': .github/workflows/docs.yml:14","Info: topLevel permissions set to 'read-all': .github/workflows/label.yml:9","Info: topLevel permissions set to 'read-all': .github/workflows/main.yml:2","Info: topLevel permissions set to 'read-all': .github/workflows/release.yml:2","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: Apache License 2.0: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Branch-Protection","score":8,"reason":"branch protection is not maximal on development and all release branches","details":["Info: 'allow deletion' disabled on branch 'master'","Info: 'force pushes' disabled on branch 'master'","Warn: required approving review count is 1 on branch 'master'","Warn: codeowners review is not required on branch 'master'","Info: status check found to merge onto on branch 'master'","Info: PRs are required in order to make changes on branch 'master'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Fuzzing","score":10,"reason":"project is fuzzed","details":["Info: OSSFuzz integration found","Info: SwiftLibFuzzer integration found: tests/swift/fuzzer/Sources/fuzzer/main.swift:19","Info: CppLibFuzzer integration found: tests/fuzzer/flatbuffers_64bit_fuzzer.cc:95","Info: CppLibFuzzer integration found: tests/fuzzer/flatbuffers_annotator_fuzzer.cc:47","Info: CppLibFuzzer integration found: tests/fuzzer/flatbuffers_monster_fuzzer.cc:109","Info: CppLibFuzzer integration found: tests/fuzzer/flatbuffers_parser_fuzzer.cc:22","Info: CppLibFuzzer integration found: tests/fuzzer/flatbuffers_scalar_fuzzer.cc:233","Info: CppLibFuzzer integration found: tests/fuzzer/flatbuffers_verifier_fuzzer.cc:10","Info: CppLibFuzzer integration found: tests/fuzzer/flexbuffers_verifier_fuzzer.cc:10","Info: CppLibFuzzer integration found: tests/fuzzer/flatbuffers_64bit_fuzzer.cc:95","Info: CppLibFuzzer integration found: tests/fuzzer/flatbuffers_annotator_fuzzer.cc:47","Info: CppLibFuzzer integration found: tests/fuzzer/flatbuffers_monster_fuzzer.cc:109","Info: CppLibFuzzer integration found: tests/fuzzer/flatbuffers_parser_fuzzer.cc:22","Info: CppLibFuzzer integration found: tests/fuzzer/flatbuffers_scalar_fuzzer.cc:233","Info: CppLibFuzzer integration found: tests/fuzzer/flatbuffers_verifier_fuzzer.cc:10","Info: CppLibFuzzer integration found: tests/fuzzer/flexbuffers_verifier_fuzzer.cc:10","Info: CppLibFuzzer integration found: tests/fuzzer/monster_debug.cpp:6","Info: CppLibFuzzer integration found: tests/fuzzer/monster_debug.cpp:25","Info: CppLibFuzzer integration found: tests/fuzzer/monster_debug.cpp:28","Info: CppLibFuzzer integration found: tests/fuzzer/scalar_debug.cpp:4","Info: CppLibFuzzer integration found: tests/fuzzer/scalar_debug.cpp:23","Info: CppLibFuzzer integration found: tests/fuzzer/scalar_debug.cpp:26"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Signed-Releases","score":0,"reason":"Project has not signed or included provenance with any releases.","details":["Warn: release artifact v25.2.10 not signed: https://api.github.com/repos/google/flatbuffers/releases/199521103","Warn: release artifact v25.1.24 not signed: https://api.github.com/repos/google/flatbuffers/releases/196739924","Warn: release artifact v25.1.21 not signed: https://api.github.com/repos/google/flatbuffers/releases/195966963","Warn: release artifact v24.12.23 not signed: https://api.github.com/repos/google/flatbuffers/releases/192161387","Warn: release artifact v24.3.25 not signed: https://api.github.com/repos/google/flatbuffers/releases/148406087","Warn: release artifact v25.2.10 does not have provenance: https://api.github.com/repos/google/flatbuffers/releases/199521103","Warn: release artifact v25.1.24 does not have provenance: https://api.github.com/repos/google/flatbuffers/releases/196739924","Warn: release artifact v25.1.21 does not have provenance: https://api.github.com/repos/google/flatbuffers/releases/195966963","Warn: release artifact v24.12.23 does not have provenance: https://api.github.com/repos/google/flatbuffers/releases/192161387","Warn: release artifact v24.3.25 does not have provenance: https://api.github.com/repos/google/flatbuffers/releases/148406087"],"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Binary-Artifacts","score":8,"reason":"binaries present in source code","details":["Warn: binary detected: android/gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: kotlin/gradle/wrapper/gradle-wrapper.jar:1"],"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yml:472: update your workflow using https://app.stepsecurity.io/secureworkflow/google/flatbuffers/build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yml:530: update your workflow using https://app.stepsecurity.io/secureworkflow/google/flatbuffers/build.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/build.yml:531: update your workflow using https://app.stepsecurity.io/secureworkflow/google/flatbuffers/build.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/build.yml:532: update your workflow using https://app.stepsecurity.io/secureworkflow/google/flatbuffers/build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yml:349: update your workflow using https://app.stepsecurity.io/secureworkflow/google/flatbuffers/build.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/build.yml:351: update your workflow using https://app.stepsecurity.io/secureworkflow/google/flatbuffers/build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yml:83: update your workflow using https://app.stepsecurity.io/secureworkflow/google/flatbuffers/build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yml:138: update your workflow using https://app.stepsecurity.io/secureworkflow/google/flatbuffers/build.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/build.yml:140: update your workflow using https://app.stepsecurity.io/secureworkflow/google/flatbuffers/build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yml:383: update your workflow using https://app.stepsecurity.io/secureworkflow/google/flatbuffers/build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yml:393: update your workflow using https://app.stepsecurity.io/secureworkflow/google/flatbuffers/build.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/build.yml:401: update your workflow using https://app.stepsecurity.io/secureworkflow/google/flatbuffers/build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yml:402: update your workflow using https://app.stepsecurity.io/secureworkflow/google/flatbuffers/build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yml:593: update your workflow using https://app.stepsecurity.io/secureworkflow/google/flatbuffers/build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/google/flatbuffers/build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yml:45: update your workflow using https://app.stepsecurity.io/secureworkflow/google/flatbuffers/build.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/build.yml:54: update your workflow using https://app.stepsecurity.io/secureworkflow/google/flatbuffers/build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yml:451: update your workflow using https://app.stepsecurity.io/secureworkflow/google/flatbuffers/build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yml:543: update your workflow using https://app.stepsecurity.io/secureworkflow/google/flatbuffers/build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yml:577: update your workflow using https://app.stepsecurity.io/secureworkflow/google/flatbuffers/build.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/build.yml:581: update your workflow using https://app.stepsecurity.io/secureworkflow/google/flatbuffers/build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yml:71: update your workflow using https://app.stepsecurity.io/secureworkflow/google/flatbuffers/build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yml:420: update your workflow using https://app.stepsecurity.io/secureworkflow/google/flatbuffers/build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yml:421: update your workflow using https://app.stepsecurity.io/secureworkflow/google/flatbuffers/build.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/build.yml:425: update your workflow using https://app.stepsecurity.io/secureworkflow/google/flatbuffers/build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yml:115: update your workflow using https://app.stepsecurity.io/secureworkflow/google/flatbuffers/build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yml:233: update your workflow using https://app.stepsecurity.io/secureworkflow/google/flatbuffers/build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yml:250: update your workflow using https://app.stepsecurity.io/secureworkflow/google/flatbuffers/build.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/build.yml:259: update your workflow using https://app.stepsecurity.io/secureworkflow/google/flatbuffers/build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yml:337: update your workflow using https://app.stepsecurity.io/secureworkflow/google/flatbuffers/build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yml:368: update your workflow using https://app.stepsecurity.io/secureworkflow/google/flatbuffers/build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yml:374: update your workflow using https://app.stepsecurity.io/secureworkflow/google/flatbuffers/build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yml:460: update your workflow using https://app.stepsecurity.io/secureworkflow/google/flatbuffers/build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yml:502: update your workflow using https://app.stepsecurity.io/secureworkflow/google/flatbuffers/build.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/build.yml:503: update your workflow using https://app.stepsecurity.io/secureworkflow/google/flatbuffers/build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yml:517: update your workflow using https://app.stepsecurity.io/secureworkflow/google/flatbuffers/build.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/build.yml:518: update your workflow using https://app.stepsecurity.io/secureworkflow/google/flatbuffers/build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yml:204: update your workflow using https://app.stepsecurity.io/secureworkflow/google/flatbuffers/build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yml:206: update your workflow using https://app.stepsecurity.io/secureworkflow/google/flatbuffers/build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yml:315: update your workflow using https://app.stepsecurity.io/secureworkflow/google/flatbuffers/build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yml:317: update your workflow using https://app.stepsecurity.io/secureworkflow/google/flatbuffers/build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yml:562: update your workflow using https://app.stepsecurity.io/secureworkflow/google/flatbuffers/build.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/build.yml:563: update your workflow using https://app.stepsecurity.io/secureworkflow/google/flatbuffers/build.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/build.yml:635: update your workflow using https://app.stepsecurity.io/secureworkflow/google/flatbuffers/build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yml:163: update your workflow using https://app.stepsecurity.io/secureworkflow/google/flatbuffers/build.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/build.yml:165: update your workflow using https://app.stepsecurity.io/secureworkflow/google/flatbuffers/build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yml:173: update your workflow using https://app.stepsecurity.io/secureworkflow/google/flatbuffers/build.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/build.yml:182: update your workflow using https://app.stepsecurity.io/secureworkflow/google/flatbuffers/build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yml:276: update your workflow using https://app.stepsecurity.io/secureworkflow/google/flatbuffers/build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yml:293: update your workflow using https://app.stepsecurity.io/secureworkflow/google/flatbuffers/build.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/build.yml:302: update your workflow using https://app.stepsecurity.io/secureworkflow/google/flatbuffers/build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yml:442: update your workflow using https://app.stepsecurity.io/secureworkflow/google/flatbuffers/build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yml:484: update your workflow using https://app.stepsecurity.io/secureworkflow/google/flatbuffers/build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs.yml:19: update your workflow using https://app.stepsecurity.io/secureworkflow/google/flatbuffers/docs.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs.yml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/google/flatbuffers/docs.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/google/flatbuffers/docs.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/main.yml:19: update your workflow using https://app.stepsecurity.io/secureworkflow/google/flatbuffers/main.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/main.yml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/google/flatbuffers/main.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/main.yml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/google/flatbuffers/main.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/google/flatbuffers/release.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:16: update your workflow using https://app.stepsecurity.io/secureworkflow/google/flatbuffers/release.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:32: update your workflow using https://app.stepsecurity.io/secureworkflow/google/flatbuffers/release.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/google/flatbuffers/release.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:60: update your workflow using https://app.stepsecurity.io/secureworkflow/google/flatbuffers/release.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:61: update your workflow using https://app.stepsecurity.io/secureworkflow/google/flatbuffers/release.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:83: update your workflow using https://app.stepsecurity.io/secureworkflow/google/flatbuffers/release.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:86: update your workflow using https://app.stepsecurity.io/secureworkflow/google/flatbuffers/release.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:111: update your workflow using https://app.stepsecurity.io/secureworkflow/google/flatbuffers/release.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:113: update your workflow using https://app.stepsecurity.io/secureworkflow/google/flatbuffers/release.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:136: update your workflow using https://app.stepsecurity.io/secureworkflow/google/flatbuffers/release.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:137: update your workflow using https://app.stepsecurity.io/secureworkflow/google/flatbuffers/release.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:143: update your workflow using https://app.stepsecurity.io/secureworkflow/google/flatbuffers/release.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:149: update your workflow using https://app.stepsecurity.io/secureworkflow/google/flatbuffers/release.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/stale.yml:18: update your workflow using https://app.stepsecurity.io/secureworkflow/google/flatbuffers/stale.yml/master?enable=pin","Warn: containerImage not pinned by hash: tests/docker/Dockerfile.testing.build_flatc_debian_stretch:1","Warn: containerImage not pinned by hash: tests/docker/Dockerfile.testing.build_flatc_debian_stretch:4","Warn: containerImage not pinned by hash: tests/docker/Dockerfile.testing.cpp.debian_buster:1","Warn: containerImage not pinned by hash: tests/docker/Dockerfile.testing.cpp.debian_buster:6","Warn: containerImage not pinned by hash: tests/docker/TODO.Dockerfile.testing.php.hhvm_2019_01_16:10","Warn: containerImage not pinned by hash: tests/docker/TODO.Dockerfile.testing.python.pypy_6_0_0_py2:1","Warn: containerImage not pinned by hash: tests/docker/TODO.Dockerfile.testing.python.pypy_6_0_0_py3:1","Warn: containerImage not pinned by hash: tests/docker/languages/Dockerfile.testing.csharp.mono_5_18:1","Warn: containerImage not pinned by hash: tests/docker/languages/Dockerfile.testing.golang.1_11:1","Warn: containerImage not pinned by hash: tests/docker/languages/Dockerfile.testing.java.openjdk_10_0_2:1","Warn: containerImage not pinned by hash: tests/docker/languages/Dockerfile.testing.java.openjdk_11_0_1:1","Warn: containerImage not pinned by hash: tests/docker/languages/Dockerfile.testing.node.12_20_1:1","Warn: containerImage not pinned by hash: tests/docker/languages/Dockerfile.testing.node.14_15_4:1","Warn: containerImage not pinned by hash: tests/docker/languages/Dockerfile.testing.php.zend_7_3:1","Warn: containerImage not pinned by hash: tests/docker/languages/Dockerfile.testing.python.cpython_2_7_15:1","Warn: containerImage not pinned by hash: tests/docker/languages/Dockerfile.testing.python.cpython_3_7_1:1","Warn: containerImage not pinned by hash: tests/docker/languages/Dockerfile.testing.python.numpy.cpython_2_7_15:1","Warn: containerImage not pinned by hash: tests/docker/languages/Dockerfile.testing.python.numpy.cpython_3_7_1:1","Warn: containerImage not pinned by hash: tests/docker/languages/Dockerfile.testing.rust.1_51_0:1","Warn: containerImage not pinned by hash: tests/docker/languages/Dockerfile.testing.rust.big_endian.1_51_0:1","Warn: containerImage not pinned by hash: tests/docker/languages/Dockerfile.testing.rust.nightly:1","Warn: containerImage not pinned by hash: tests/docker/languages/Dockerfile.testing.swift_5_2:1: pin your Docker image by updating swift:5.2 to swift:5.2@sha256:eed194e951dea8d4e4925e1fc905c9b4a52f86f239af99aff699615618ca00b0","Warn: npmCommand not pinned by hash: tests/docker/languages/Dockerfile.testing.node.12_20_1:5","Warn: npmCommand not pinned by hash: tests/docker/languages/Dockerfile.testing.node.14_15_4:5","Warn: pipCommand not pinned by hash: tests/docker/languages/Dockerfile.testing.python.cpython_2_7_15:7","Warn: pipCommand not pinned by hash: tests/docker/languages/Dockerfile.testing.python.cpython_3_7_1:7","Warn: pipCommand not pinned by hash: tests/docker/languages/Dockerfile.testing.python.numpy.cpython_2_7_15:7","Warn: pipCommand not pinned by hash: tests/docker/languages/Dockerfile.testing.python.numpy.cpython_2_7_15:8","Warn: pipCommand not pinned by hash: tests/docker/languages/Dockerfile.testing.python.numpy.cpython_3_7_1:7","Warn: pipCommand not pinned by hash: tests/docker/languages/Dockerfile.testing.python.numpy.cpython_3_7_1:8","Warn: npmCommand not pinned by hash: .github/workflows/build.yml:549","Warn: pipCommand not pinned by hash: .github/workflows/docs.yml:35","Warn: pipCommand not pinned by hash: .github/workflows/docs.yml:36","Warn: pipCommand not pinned by hash: .github/workflows/release.yml:39","Warn: pipCommand not pinned by hash: .github/workflows/release.yml:40","Info:   1 out of  54 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of  21 third-party GitHubAction dependencies pinned","Info:   0 out of  22 containerImage dependencies pinned","Info:   0 out of   3 npmCommand dependencies pinned","Info:   0 out of  10 pipCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 30 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}},{"name":"Vulnerabilities","score":8,"reason":"2 existing vulnerabilities detected","details":["Warn: Project is vulnerable to: GHSA-xffm-g5w8-qvg7","Warn: Project is vulnerable to: GHSA-v6h2-p8h4-qcjw"],"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}}]},"last_synced_at":"2025-08-19T04:54:34.010Z","repository_id":17185582,"created_at":"2025-08-19T04:54:34.010Z","updated_at":"2025-08-19T04:54:34.010Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":273854822,"owners_count":25180020,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","status":"online","status_checked_at":"2025-09-06T02:00:13.247Z","response_time":2576,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["c","c-plus-plus","c-sharp","cross-platform","flatbuffers","go","grpc","java","javascript","json-parser","marshalling","mmap","protobuf","python","rpc","rust","serialization","serialization-library","typescript","zero-copy"],"created_at":"2024-07-31T00:00:56.579Z","updated_at":"2025-09-09T20:25:34.926Z","avatar_url":"https://github.com/google.png","language":"C++","readme":"![logo](https://flatbuffers.dev/assets/flatbuffers_logo.svg) FlatBuffers\n===========\n\n![Build status](https://github.com/google/flatbuffers/actions/workflows/build.yml/badge.svg?branch=master)\n[![BuildKite status](https://badge.buildkite.com/7979d93bc6279aa539971f271253c65d5e8fe2fe43c90bbb25.svg)](https://buildkite.com/bazel/flatbuffers)\n[![Fuzzing Status](https://oss-fuzz-build-logs.storage.googleapis.com/badges/flatbuffers.svg)](https://bugs.chromium.org/p/oss-fuzz/issues/list?sort=-opened\u0026can=1\u0026q=proj:flatbuffers)\n[![Discord Chat](https://img.shields.io/discord/656202785926152206.svg)](https:///discord.gg/6qgKs3R)\n[![Twitter Follow](https://img.shields.io/twitter/follow/wvo.svg?style=social)](https://twitter.com/wvo)\n[![Twitter Follow](https://img.shields.io/twitter/follow/dbaileychess.svg?style=social)](https://twitter.com/dbaileychess)\n\n\n**FlatBuffers** is a cross platform serialization library architected for\nmaximum memory efficiency. It allows you to directly access serialized data without parsing/unpacking it first, while still having great forwards/backwards compatibility.\n\n## Quick Start\n\n1. Build the compiler for flatbuffers (`flatc`)\n\n    Use `cmake` to create the build files for your platform and then perform the compilation (Linux example).\n\n    ```\n    cmake -G \"Unix Makefiles\"\n    make -j\n    ```\n\n2. Define your flatbuffer schema (`.fbs`)\n\n    Write the [schema](https://flatbuffers.dev/flatbuffers_guide_writing_schema.html) to define the data you want to serialize. See [monster.fbs](https://github.com/google/flatbuffers/blob/master/samples/monster.fbs) for an example.\n\n3. Generate code for your language(s)\n\n    Use the `flatc` compiler to take your schema and generate language-specific code:\n\n    ```\n    ./flatc --cpp --rust monster.fbs\n    ```\n    \n    Which generates `monster_generated.h` and `monster_generated.rs` files.\n\n4. Serialize data\n\n    Use the generated code, as well as the `FlatBufferBuilder` to construct your serialized buffer. ([`C++` example](https://github.com/google/flatbuffers/blob/master/samples/sample_binary.cpp#L24-L56))\n\n5. Transmit/store/save Buffer\n\n    Use your serialized buffer however you want. Send it to someone, save it for later, etc...\n\n6. Read the data\n\n    Use the generated accessors to read the data from the serialized buffer.\n    \n    It doesn't need to be the same language/schema version, FlatBuffers ensures the data is readable across languages and schema versions. See the [`Rust` example](https://github.com/google/flatbuffers/blob/master/samples/sample_binary.rs#L92-L106) reading the data written by `C++`.\n\n## Documentation\n\n**Go to our [landing page][] to browse our documentation.**\n\n## Supported operating systems\n- Windows\n- macOS\n- Linux\n- Android\n- And any others with a recent C++ compiler (C++ 11 and newer)\n\n## Supported programming languages\n\nCode generation and runtime libraries for many popular languages.\n\n1. C\n1. C++ - [snapcraft.io](https://snapcraft.io/flatbuffers)\n1. C# - [nuget.org](https://www.nuget.org/packages/Google.FlatBuffers)\n1. Dart - [pub.dev](https://pub.dev/packages/flat_buffers)\n1. Go - [go.dev](https://pkg.go.dev/github.com/google/flatbuffers)\n1. Java - [Maven](https://search.maven.org/artifact/com.google.flatbuffers/flatbuffers-java)\n1. JavaScript - [NPM](https://www.npmjs.com/package/flatbuffers)\n1. Kotlin\n1. Lobster\n1. Lua\n1. PHP\n1. Python - [PyPI](https://pypi.org/project/flatbuffers/)\n1. Rust - [crates.io](https://crates.io/crates/flatbuffers)\n1. Swift - [swiftpackageindex](https://swiftpackageindex.com/google/flatbuffers)\n1. TypeScript - [NPM](https://www.npmjs.com/package/flatbuffers)\n1. Nim\n\n## Versioning\n\nFlatBuffers does not follow traditional SemVer versioning (see [rationale](https://github.com/google/flatbuffers/wiki/Versioning)) but rather uses a format of the date of the release.\n\n## Contribution\n\n* [FlatBuffers Issues Tracker][] to submit an issue.\n* [stackoverflow.com][] with [`flatbuffers` tag][] for any questions regarding FlatBuffers.\n\n*To contribute to this project,* see [CONTRIBUTING][].\n\n## Community\n\n* [Discord Server](https:///discord.gg/6qgKs3R)\n\n## Security\n\nPlease see our [Security Policy](SECURITY.md) for reporting vulnerabilities.\n\n## Licensing\n*Flatbuffers* is licensed under the Apache License, Version 2.0. See [LICENSE][] for the full license text.\n\n\u003cbr\u003e\n\n   [CONTRIBUTING]: http://github.com/google/flatbuffers/blob/master/CONTRIBUTING.md\n   [`flatbuffers` tag]: https://stackoverflow.com/questions/tagged/flatbuffers\n   [FlatBuffers Google Group]: https://groups.google.com/forum/#!forum/flatbuffers\n   [FlatBuffers Issues Tracker]: http://github.com/google/flatbuffers/issues\n   [stackoverflow.com]: http://stackoverflow.com/search?q=flatbuffers\n   [landing page]: https://google.github.io/flatbuffers\n   [LICENSE]: https://github.com/google/flatbuffers/blob/master/LICENSE\n","funding_links":[],"categories":["Serialization","C++","Solutions","Projects","Libraries and frameworks","Repositories","\u003ca name=\"cpp\"\u003e\u003c/a\u003eC++","C++ (70)","Serializer and Deserializer","Data Format \u0026 I/O","Objects","其他","Common libraries","正则表达式","序列化","Data Encoding","c-sharp","Repos","Data Serialization","项目","Serializers","I. Development","Network","\u003ca name=\"C%2B%2B\"\u003e\u003c/a\u003eC++","Libraries"],"sub_categories":["Serialization","Streaming Data Management","Saving/Loading Objects, Compositing Packets","网络服务_其他","序列化","FlatBuffers","6. Useful libraries","C++"],"project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fgoogle%2Fflatbuffers","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fgoogle%2Fflatbuffers","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fgoogle%2Fflatbuffers/lists"}