{"id":13468558,"url":"https://github.com/h2oai/wave","last_synced_at":"2026-04-07T09:02:59.505Z","repository":{"id":37399675,"uuid":"264517908","full_name":"h2oai/wave","owner":"h2oai","description":"Realtime Web Apps and Dashboards for Python and R","archived":false,"fork":false,"pushed_at":"2026-03-24T07:29:40.000Z","size":116494,"stargazers_count":4228,"open_issues_count":221,"forks_count":360,"subscribers_count":130,"default_branch":"main","last_synced_at":"2026-03-25T09:09:53.722Z","etag":null,"topics":["app","dashboard","fedramp","hacktoberfest","python","r","realtime","typescript","visualization","webapp"],"latest_commit_sha":null,"homepage":"https://wave.h2o.ai","language":"Python","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/h2oai.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":".github/CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":".github/CODE_OF_CONDUCT.md","threat_model":null,"audit":null,"citation":null,"codeowners":"CODEOWNERS","security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":"NOTICE","maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null}},"created_at":"2020-05-16T20:07:18.000Z","updated_at":"2026-03-24T07:29:48.000Z","dependencies_parsed_at":"2024-01-15T15:42:40.970Z","dependency_job_id":"79f929ac-6cfe-45c3-b40f-f2bedd14d420","html_url":"https://github.com/h2oai/wave","commit_stats":{"total_commits":1964,"total_committers":48,"mean_commits":"40.916666666666664","dds":0.4714867617107943,"last_synced_commit":"2091ab4e27c6989028028a1b6756a8b4ffd514f8"},"previous_names":["h2oai/qd","h2oai/telesync"],"tags_count":99,"template":false,"template_full_name":null,"purl":"pkg:github/h2oai/wave","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/h2oai%2Fwave","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/h2oai%2Fwave/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/h2oai%2Fwave/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/h2oai%2Fwave/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/h2oai","download_url":"https://codeload.github.com/h2oai/wave/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/h2oai%2Fwave/sbom","scorecard":{"id":451647,"data":{"date":"2025-08-11","repo":{"name":"github.com/h2oai/wave","commit":"32c83fefd2e7e408a0979d5c08524cc4032bee51"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":3.2,"checks":[{"name":"Maintained","score":10,"reason":"20 commit(s) and 4 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Code-Review","score":0,"reason":"Found 2/29 approved changesets -- score normalized to 0","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: jobLevel 'contents' permission set to 'read': .github/workflows/publish-university.yml:88","Info: jobLevel 'contents' permission set to 'read': .github/workflows/wave-bundle-docker-build-publish.yaml:29","Warn: no topLevel permission defined: .github/workflows/publish-conda.yml:1","Warn: topLevel 'contents' permission set to 'write': .github/workflows/publish-docs.yml:11","Warn: no topLevel permission defined: .github/workflows/publish-lightwave.yml:1","Warn: no topLevel permission defined: .github/workflows/publish-university.yml:1","Warn: no topLevel permission defined: .github/workflows/release-pycharm-plugin.yml:1","Warn: no topLevel permission defined: .github/workflows/release-vsc-extension.yml:1","Warn: no topLevel permission defined: .github/workflows/release-wave-nightly.yml:1","Warn: topLevel 'contents' permission set to 'write': .github/workflows/release-wave.yml:21","Warn: no topLevel permission defined: .github/workflows/release-wavedb.yml:1","Warn: no topLevel permission defined: .github/workflows/wave-bundle-docker-build-publish.yaml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: Apache License 2.0: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Binary-Artifacts","score":0,"reason":"binaries present in source code","details":["Warn: binary detected: py/examples/tour-assets/pyodide/jedi-0.18.1-py2.py3-none-any.whl:1","Warn: binary detected: py/examples/tour-assets/pyodide/parso-0.8.3-py2.py3-none-any.whl:1","Warn: binary detected: py/examples/tour-assets/pyodide/pyodide.asm.wasm:1","Warn: binary detected: py/examples/tour-assets/pyodide/pyodide.asm.wasm.1:1","Warn: binary detected: studio/static/pyodide/jedi-0.18.1-py2.py3-none-any.whl:1","Warn: binary detected: studio/static/pyodide/parso-0.8.3-py2.py3-none-any.whl:1","Warn: binary detected: studio/static/pyodide/pyodide.asm.wasm:1","Warn: binary detected: studio/static/pyodide/pyodide.asm.wasm.1:1","Warn: binary detected: tools/intellij-plugin/bin/main/org/h2o/autocompletion/Function.class:1","Warn: binary detected: tools/intellij-plugin/bin/main/org/h2o/autocompletion/WaveCompletionContributor$1.class:1","Warn: binary detected: tools/intellij-plugin/bin/main/org/h2o/autocompletion/WaveCompletionContributor$2.class:1","Warn: binary detected: tools/intellij-plugin/bin/main/org/h2o/autocompletion/WaveCompletionContributor$3.class:1","Warn: binary detected: tools/intellij-plugin/bin/main/org/h2o/autocompletion/WaveCompletionContributor$4.class:1","Warn: binary detected: tools/intellij-plugin/bin/main/org/h2o/autocompletion/WaveCompletionContributor$5.class:1","Warn: binary detected: tools/intellij-plugin/bin/main/org/h2o/autocompletion/WaveCompletionContributor$6.class:1","Warn: binary detected: tools/intellij-plugin/bin/main/org/h2o/autocompletion/WaveCompletionContributor$7.class:1","Warn: binary detected: tools/intellij-plugin/bin/main/org/h2o/autocompletion/WaveCompletionContributor.class:1","Warn: binary detected: tools/intellij-plugin/bin/main/org/h2o/templates/WaveTemplateContext.class:1","Warn: binary detected: tools/intellij-plugin/bin/main/org/h2o/utils/RequirementsSingleton.class:1","Warn: binary detected: tools/intellij-plugin/bin/main/org/h2o/utils/Utils.class:1","Warn: binary detected: tools/intellij-plugin/bin/main/org/h2o/utils/UtilsResources.class:1","Warn: binary detected: tools/intellij-plugin/bin/test/CompletionContributorTestIcon.class:1","Warn: binary detected: tools/intellij-plugin/bin/test/CompletionContributorTestQApp.class:1","Warn: binary detected: tools/intellij-plugin/bin/test/CompletionContributorTestQArgs.class:1","Warn: binary detected: tools/intellij-plugin/bin/test/CompletionContributorTestQClient.class:1","Warn: binary detected: tools/intellij-plugin/bin/test/CompletionContributorTestQEvents.class:1","Warn: binary detected: tools/intellij-plugin/bin/test/CompletionContributorTestQUser.class:1","Warn: binary detected: tools/intellij-plugin/bin/test/CompletionContributorTestZone.class:1","Warn: binary detected: tools/intellij-plugin/gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: university/h2o_wave_university/static/pyodide/jedi-0.18.1-py2.py3-none-any.whl:1","Warn: binary detected: university/h2o_wave_university/static/pyodide/parso-0.8.3-py2.py3-none-any.whl:1","Warn: binary detected: university/h2o_wave_university/static/pyodide/pyodide.asm.wasm:1","Warn: binary detected: university/h2o_wave_university/static/pyodide/pyodide.asm.wasm.1:1"],"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Security-Policy","score":0,"reason":"security policy file not detected","details":["Warn: no security policy file detected","Warn: no security file to analyze","Warn: no security file to analyze","Warn: no security file to analyze"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Packaging","score":10,"reason":"packaging workflow detected","details":["Info: Project packages its releases by way of GitHub Actions.: .github/workflows/release-wave.yml:24"],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Signed-Releases","score":0,"reason":"Project has not signed or included provenance with any releases.","details":["Warn: release artifact v1.7.4 not signed: https://api.github.com/repos/h2oai/wave/releases/239888157","Warn: release artifact v1.7.3 not signed: https://api.github.com/repos/h2oai/wave/releases/238543933","Warn: release artifact v1.7.2 not signed: https://api.github.com/repos/h2oai/wave/releases/236196956","Warn: release artifact v1.7.1 not signed: https://api.github.com/repos/h2oai/wave/releases/224844602","Warn: release artifact v1.7.0 not signed: https://api.github.com/repos/h2oai/wave/releases/219623159","Warn: release artifact v1.7.4 does not have provenance: https://api.github.com/repos/h2oai/wave/releases/239888157","Warn: release artifact v1.7.3 does not have provenance: https://api.github.com/repos/h2oai/wave/releases/238543933","Warn: release artifact v1.7.2 does not have provenance: https://api.github.com/repos/h2oai/wave/releases/236196956","Warn: release artifact v1.7.1 does not have provenance: https://api.github.com/repos/h2oai/wave/releases/224844602","Warn: release artifact v1.7.0 does not have provenance: https://api.github.com/repos/h2oai/wave/releases/219623159"],"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"SAST","score":5,"reason":"SAST tool is not run on all commits -- score normalized to 5","details":["Warn: 2 commits out of 4 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-conda.yml:19: update your workflow using https://app.stepsecurity.io/secureworkflow/h2oai/wave/publish-conda.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/publish-conda.yml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/h2oai/wave/publish-conda.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-docs.yml:18: update your workflow using https://app.stepsecurity.io/secureworkflow/h2oai/wave/publish-docs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-docs.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/h2oai/wave/publish-docs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-docs.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/h2oai/wave/publish-docs.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/publish-docs.yml:36: update your workflow using https://app.stepsecurity.io/secureworkflow/h2oai/wave/publish-docs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-lightwave.yml:19: update your workflow using https://app.stepsecurity.io/secureworkflow/h2oai/wave/publish-lightwave.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-lightwave.yml:23: update your workflow using https://app.stepsecurity.io/secureworkflow/h2oai/wave/publish-lightwave.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/publish-lightwave.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/h2oai/wave/publish-lightwave.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/publish-lightwave.yml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/h2oai/wave/publish-lightwave.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-university.yml:19: update your workflow using https://app.stepsecurity.io/secureworkflow/h2oai/wave/publish-university.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/publish-university.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/h2oai/wave/publish-university.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-university.yml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/h2oai/wave/publish-university.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-university.yml:72: update your workflow using https://app.stepsecurity.io/secureworkflow/h2oai/wave/publish-university.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-university.yml:79: update your workflow using https://app.stepsecurity.io/secureworkflow/h2oai/wave/publish-university.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-pycharm-plugin.yml:16: update your workflow using https://app.stepsecurity.io/secureworkflow/h2oai/wave/release-pycharm-plugin.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-pycharm-plugin.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/h2oai/wave/release-pycharm-plugin.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-vsc-extension.yml:16: update your workflow using https://app.stepsecurity.io/secureworkflow/h2oai/wave/release-vsc-extension.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-vsc-extension.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/h2oai/wave/release-vsc-extension.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-wave-nightly.yml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/h2oai/wave/release-wave-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-wave-nightly.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/h2oai/wave/release-wave-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-wave-nightly.yml:47: update your workflow using https://app.stepsecurity.io/secureworkflow/h2oai/wave/release-wave-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-wave-nightly.yml:51: update your workflow using https://app.stepsecurity.io/secureworkflow/h2oai/wave/release-wave-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-wave-nightly.yml:55: update your workflow using https://app.stepsecurity.io/secureworkflow/h2oai/wave/release-wave-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-wave-nightly.yml:84: update your workflow using https://app.stepsecurity.io/secureworkflow/h2oai/wave/release-wave-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-wave-nightly.yml:88: update your workflow using https://app.stepsecurity.io/secureworkflow/h2oai/wave/release-wave-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-wave-nightly.yml:92: update your workflow using https://app.stepsecurity.io/secureworkflow/h2oai/wave/release-wave-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-wave-nightly.yml:96: update your workflow using https://app.stepsecurity.io/secureworkflow/h2oai/wave/release-wave-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-wave-nightly.yml:119: update your workflow using https://app.stepsecurity.io/secureworkflow/h2oai/wave/release-wave-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-wave-nightly.yml:129: update your workflow using https://app.stepsecurity.io/secureworkflow/h2oai/wave/release-wave-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-wave-nightly.yml:133: update your workflow using https://app.stepsecurity.io/secureworkflow/h2oai/wave/release-wave-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-wave-nightly.yml:137: update your workflow using https://app.stepsecurity.io/secureworkflow/h2oai/wave/release-wave-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-wave-nightly.yml:167: update your workflow using https://app.stepsecurity.io/secureworkflow/h2oai/wave/release-wave-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-wave-nightly.yml:171: update your workflow using https://app.stepsecurity.io/secureworkflow/h2oai/wave/release-wave-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-wave-nightly.yml:175: update your workflow using https://app.stepsecurity.io/secureworkflow/h2oai/wave/release-wave-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release-wave-nightly.yml:182: update your workflow using https://app.stepsecurity.io/secureworkflow/h2oai/wave/release-wave-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release-wave-nightly.yml:183: update your workflow using https://app.stepsecurity.io/secureworkflow/h2oai/wave/release-wave-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-wave-nightly.yml:201: update your workflow using https://app.stepsecurity.io/secureworkflow/h2oai/wave/release-wave-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release-wave-nightly.yml:222: update your workflow using https://app.stepsecurity.io/secureworkflow/h2oai/wave/release-wave-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-wave.yml:32: update your workflow using https://app.stepsecurity.io/secureworkflow/h2oai/wave/release-wave.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-wave.yml:36: update your workflow using https://app.stepsecurity.io/secureworkflow/h2oai/wave/release-wave.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-wave.yml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/h2oai/wave/release-wave.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-wave.yml:44: update your workflow using https://app.stepsecurity.io/secureworkflow/h2oai/wave/release-wave.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-wave.yml:67: update your workflow using https://app.stepsecurity.io/secureworkflow/h2oai/wave/release-wave.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release-wave.yml:74: update your workflow using https://app.stepsecurity.io/secureworkflow/h2oai/wave/release-wave.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release-wave.yml:93: update your workflow using https://app.stepsecurity.io/secureworkflow/h2oai/wave/release-wave.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release-wave.yml:104: update your workflow using https://app.stepsecurity.io/secureworkflow/h2oai/wave/release-wave.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release-wave.yml:110: update your workflow using https://app.stepsecurity.io/secureworkflow/h2oai/wave/release-wave.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release-wave.yml:139: update your workflow using https://app.stepsecurity.io/secureworkflow/h2oai/wave/release-wave.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release-wave.yml:155: update your workflow using https://app.stepsecurity.io/secureworkflow/h2oai/wave/release-wave.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release-wave.yml:161: update your workflow using https://app.stepsecurity.io/secureworkflow/h2oai/wave/release-wave.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release-wave.yml:167: update your workflow using https://app.stepsecurity.io/secureworkflow/h2oai/wave/release-wave.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-wave.yml:202: update your workflow using https://app.stepsecurity.io/secureworkflow/h2oai/wave/release-wave.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-wave.yml:209: update your workflow using https://app.stepsecurity.io/secureworkflow/h2oai/wave/release-wave.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-wavedb.yml:23: update your workflow using https://app.stepsecurity.io/secureworkflow/h2oai/wave/release-wavedb.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-wavedb.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/h2oai/wave/release-wavedb.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release-wavedb.yml:32: update your workflow using https://app.stepsecurity.io/secureworkflow/h2oai/wave/release-wavedb.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-wavedb.yml:42: update your workflow using https://app.stepsecurity.io/secureworkflow/h2oai/wave/release-wavedb.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-wavedb.yml:45: update your workflow using https://app.stepsecurity.io/secureworkflow/h2oai/wave/release-wavedb.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release-wavedb.yml:51: update your workflow using https://app.stepsecurity.io/secureworkflow/h2oai/wave/release-wavedb.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-wavedb.yml:61: update your workflow using https://app.stepsecurity.io/secureworkflow/h2oai/wave/release-wavedb.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-wavedb.yml:64: update your workflow using https://app.stepsecurity.io/secureworkflow/h2oai/wave/release-wavedb.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release-wavedb.yml:70: update your workflow using https://app.stepsecurity.io/secureworkflow/h2oai/wave/release-wavedb.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/wave-bundle-docker-build-publish.yaml:32: update your workflow using https://app.stepsecurity.io/secureworkflow/h2oai/wave/wave-bundle-docker-build-publish.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/wave-bundle-docker-build-publish.yaml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/h2oai/wave/wave-bundle-docker-build-publish.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/wave-bundle-docker-build-publish.yaml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/h2oai/wave/wave-bundle-docker-build-publish.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/wave-bundle-docker-build-publish.yaml:49: update your workflow using https://app.stepsecurity.io/secureworkflow/h2oai/wave/wave-bundle-docker-build-publish.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/wave-bundle-docker-build-publish.yaml:56: update your workflow using https://app.stepsecurity.io/secureworkflow/h2oai/wave/wave-bundle-docker-build-publish.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/wave-bundle-docker-build-publish.yaml:85: update your workflow using https://app.stepsecurity.io/secureworkflow/h2oai/wave/wave-bundle-docker-build-publish.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/wave-bundle-docker-build-publish.yaml:97: update your workflow using https://app.stepsecurity.io/secureworkflow/h2oai/wave/wave-bundle-docker-build-publish.yaml/main?enable=pin","Warn: containerImage not pinned by hash: e2e/keycloak.dockerfile:1: pin your Docker image by updating quay.io/keycloak/keycloak:21.0.1 to quay.io/keycloak/keycloak:21.0.1@sha256:057e1264cae9adbd9be65235d0c837087b0accc183275803b7da81b1b7a2a94c","Warn: containerImage not pinned by hash: r/Dockerfile:2: pin your Docker image by updating r-base:latest to r-base:latest@sha256:c143ac223eff70f437c56f980ed582b4960dbb460a499b1d5119ff461a9f051b","Info:   0 out of  46 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of  24 third-party GitHubAction dependencies pinned","Info:   0 out of   2 containerImage dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Vulnerabilities","score":0,"reason":"100 existing vulnerabilities detected","details":["Warn: Project is vulnerable to: PYSEC-2024-230 / GHSA-248v-346w-9cwc","Warn: Project is vulnerable to: PYSEC-2023-135 / GHSA-xqr8-7jwr-rhp7","Warn: Project is vulnerable to: PYSEC-2024-60 / GHSA-jjg7-2v4v-x38h","Warn: Project is vulnerable to: GHSA-9hjg-9r4m-mvj7","Warn: Project is vulnerable to: GHSA-9wx4-h78v-vm56","Warn: Project is vulnerable to: PYSEC-2023-74 / GHSA-j8r2-6x86-q33q","Warn: Project is vulnerable to: GHSA-34jh-p97f-mpxf","Warn: Project is vulnerable to: PYSEC-2023-212 / GHSA-g4mx-q9vg-27p4","Warn: Project is vulnerable to: GHSA-pq67-6m6q-mj2v","Warn: Project is vulnerable to: PYSEC-2023-192 / GHSA-v845-jxx5-vc9f","Warn: Project is vulnerable to: GHSA-968p-4wvh-cqc8","Warn: Project is vulnerable to: GHSA-67hx-6x53-jw92","Warn: Project is vulnerable to: GHSA-whgm-jr23-g3j9","Warn: Project is vulnerable to: GHSA-93q8-gq69-wqmw","Warn: Project is vulnerable to: GHSA-fwr7-v2mv-hh25","Warn: Project is vulnerable to: GHSA-qwcr-r2fm-qrc7","Warn: Project is vulnerable to: GHSA-v6h2-p8h4-qcjw","Warn: Project is vulnerable to: GHSA-grv7-fg5c-xmjg","Warn: Project is vulnerable to: GHSA-w8qv-6jwh-64r5","Warn: Project is vulnerable to: GHSA-pxg6-pf52-xh8x","Warn: Project is vulnerable to: GHSA-3xgq-45jj-v275","Warn: Project is vulnerable to: GHSA-gxpj-cx7g-858c","Warn: Project is vulnerable to: GHSA-w573-4hg7-7wgq","Warn: Project is vulnerable to: GHSA-3wcq-x3mq-6r9p","Warn: Project is vulnerable to: GHSA-6h5x-7c5m-7cr7","Warn: Project is vulnerable to: GHSA-rv95-896h-c2vc","Warn: Project is vulnerable to: GHSA-qw6h-vgh9-j6wx","Warn: Project is vulnerable to: GHSA-74fj-2j2h-c42q","Warn: Project is vulnerable to: GHSA-pw2r-vq6v-hr8c","Warn: Project is vulnerable to: GHSA-jchw-25xp-jwwc","Warn: Project is vulnerable to: GHSA-cxjh-pqwp-8mfp","Warn: Project is vulnerable to: GHSA-c7qv-q95q-8v27","Warn: Project is vulnerable to: GHSA-78xj-cgh5-2h22","Warn: Project is vulnerable to: GHSA-2p57-rm9w-gvfp","Warn: Project is vulnerable to: GHSA-9c47-m6qq-7p4h","Warn: Project is vulnerable to: GHSA-76p3-8jx3-jpfq","Warn: Project is vulnerable to: GHSA-3rfm-jhwj-7488","Warn: Project is vulnerable to: GHSA-hhq3-ff78-jv3g","Warn: Project is vulnerable to: GHSA-952p-6rrq-rcjv","Warn: Project is vulnerable to: GHSA-f8q6-p94x-37v3","Warn: Project is vulnerable to: GHSA-xvch-5gv4-984h","Warn: Project is vulnerable to: GHSA-5rrq-pxf6-6jx5","Warn: Project is vulnerable to: GHSA-8fr3-hfg3-gpgp","Warn: Project is vulnerable to: GHSA-gf8q-jrpm-jvxq","Warn: Project is vulnerable to: GHSA-2r2c-g63r-vccr","Warn: Project is vulnerable to: GHSA-cfm4-qjh2-4765","Warn: Project is vulnerable to: GHSA-x4jg-mjrx-434g","Warn: Project is vulnerable to: GHSA-rp65-9cf3-cjxr","Warn: Project is vulnerable to: GHSA-76c9-3jph-rj3q","Warn: Project is vulnerable to: GHSA-hj48-42vr-x3v9","Warn: Project is vulnerable to: GHSA-9wv6-86v2-598j","Warn: Project is vulnerable to: GHSA-rhx6-c78j-4q9w","Warn: Project is vulnerable to: GHSA-566m-qj78-rww5","Warn: Project is vulnerable to: GHSA-hwj9-h5mp-3pm3","Warn: Project is vulnerable to: GHSA-7fh5-64p2-3v2j","Warn: Project is vulnerable to: GHSA-hrpp-h998-j3pp","Warn: Project is vulnerable to: GHSA-c2qf-rxjj-qqgw","Warn: Project is vulnerable to: GHSA-m6fv-jmcg-4jfg","Warn: Project is vulnerable to: GHSA-cm22-4g7w-348p","Warn: Project is vulnerable to: GHSA-4wf5-vphf-c2xc","Warn: Project is vulnerable to: GHSA-hh27-ffr2-f2jc","Warn: Project is vulnerable to: GHSA-rqff-837h-mm52","Warn: Project is vulnerable to: GHSA-8v38-pw62-9cw2","Warn: Project is vulnerable to: GHSA-hgjh-723h-mx2j","Warn: Project is vulnerable to: GHSA-jf5r-8hm2-f872","Warn: Project is vulnerable to: GHSA-hc6q-2mpp-qw7j","Warn: Project is vulnerable to: GHSA-4vvj-4cpr-p986","Warn: Project is vulnerable to: GHSA-wr3j-pwj9-hqq6","Warn: Project is vulnerable to: GHSA-4v9v-hfq4-rm2v","Warn: Project is vulnerable to: GHSA-9jgg-88mc-972h","Warn: Project is vulnerable to: GHSA-6fc8-4gx4-v693","Warn: Project is vulnerable to: GHSA-3h5v-q93c-6h6q","Warn: Project is vulnerable to: GHSA-qr4w-53vh-m672","Warn: Project is vulnerable to: PYSEC-2023-183","Warn: Project is vulnerable to: PYSEC-2024-110 / GHSA-jw8x-6495-233v","Warn: Project is vulnerable to: GHSA-p8p7-x288-28g6","Warn: Project is vulnerable to: GHSA-fjxv-7rqg-78g4","Warn: Project is vulnerable to: GHSA-896r-f27r-55mw","Warn: Project is vulnerable to: GHSA-52f5-9888-hmc6","Warn: Project is vulnerable to: GHSA-72xf-g2v4-qvf3","Warn: Project is vulnerable to: GHSA-67mh-4wv8-2f99","Warn: Project is vulnerable to: GHSA-wpg7-2c88-r8xv","Warn: Project is vulnerable to: GHSA-pq67-2wwv-3xjx","Warn: Project is vulnerable to: GHSA-8cj5-5rvv-wf4v","Warn: Project is vulnerable to: GHSA-j8xg-fqg3-53r7","Warn: Project is vulnerable to: GHSA-776f-qx25-q3cc","Warn: Project is vulnerable to: GHSA-c2jc-4fpr-4vhg","Warn: Project is vulnerable to: GHSA-wf5p-g6vw-rhxx","Warn: Project is vulnerable to: GHSA-jr5f-v2jv-69x6","Warn: Project is vulnerable to: GHSA-mf6x-hrgr-658f","Warn: Project is vulnerable to: GHSA-xrh7-m5pp-39r6","Warn: Project is vulnerable to: GHSA-pfrx-2q88-qq97","Warn: Project is vulnerable to: GHSA-rc47-6667-2j5j","Warn: Project is vulnerable to: GHSA-4www-5p9h-95mh","Warn: Project is vulnerable to: GHSA-9gqv-wp59-fq42","Warn: Project is vulnerable to: GHSA-mwcw-c2x4-8c55","Warn: Project is vulnerable to: GHSA-x7hr-w5r2-h6wg","Warn: Project is vulnerable to: GHSA-76p7-773f-r4q5","Warn: Project is vulnerable to: GHSA-w5p7-h5w8-2hfq","Warn: Project is vulnerable to: GHSA-fhg7-m89q-25r3"],"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}}]},"last_synced_at":"2025-08-19T08:19:23.387Z","repository_id":37399675,"created_at":"2025-08-19T08:19:23.387Z","updated_at":"2025-08-19T08:19:23.387Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":31506582,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-04-07T03:10:19.677Z","status":"ssl_error","status_checked_at":"2026-04-07T03:10:13.982Z","response_time":105,"last_error":"SSL_connect returned=1 errno=0 peeraddr=140.82.121.5:443 state=error: unexpected eof while reading","robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":false,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["app","dashboard","fedramp","hacktoberfest","python","r","realtime","typescript","visualization","webapp"],"created_at":"2024-07-31T15:01:13.510Z","updated_at":"2026-04-07T09:02:59.486Z","avatar_url":"https://github.com/h2oai.png","language":"Python","readme":null,"funding_links":[],"categories":["Python","HarmonyOS","Web UI","TypeScript","📈 Dashboards \u0026 BI"],"sub_categories":["Windows Manager","Misc","Tools"],"project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fh2oai%2Fwave","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fh2oai%2Fwave","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fh2oai%2Fwave/lists"}