{"id":13558375,"url":"https://github.com/oxigraph/oxigraph","last_synced_at":"2026-10-19T10:16:32.453Z","repository":{"id":38671851,"uuid":"133687025","full_name":"oxigraph/oxigraph","owner":"oxigraph","description":"SPARQL graph database","archived":false,"fork":false,"pushed_at":"2026-10-12T16:19:59.000Z","size":8907,"stargazers_count":1989,"open_issues_count":155,"forks_count":181,"subscribers_count":32,"default_branch":"main","last_synced_at":"2026-10-14T07:58:47.532Z","etag":null,"topics":["graph-database","rdf-store","sparql"],"latest_commit_sha":null,"homepage":"","language":"Rust","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/oxigraph.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":null,"funding":".github/FUNDING.yml","license":"LICENSE-APACHE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":"CITATION.cff","codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"claude":null,"gemini":null,"cursor":null,"copilot":null,"dco":null,"cla":null,"disclosure":null},"funding":{"github":["Tpt"]}},"created_at":"2018-05-16T15:29:28.000Z","updated_at":"2026-10-13T05:32:54.000Z","dependencies_parsed_at":"2026-08-25T04:45:09.503Z","dependency_job_id":null,"html_url":"https://github.com/oxigraph/oxigraph","commit_stats":{"total_commits":1330,"total_committers":17,"mean_commits":78.23529411764706,"dds":0.2766917293233083,"last_synced_commit":"b8c5628e3bd659a4beeede52b2f0c3669321974b"},"previous_names":[],"tags_count":75,"template":false,"template_full_name":null,"purl":"pkg:github/oxigraph/oxigraph","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/oxigraph%2Foxigraph","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/oxigraph%2Foxigraph/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/oxigraph%2Foxigraph/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/oxigraph%2Foxigraph/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/oxigraph","download_url":"https://codeload.github.com/oxigraph/oxigraph/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/oxigraph%2Foxigraph/sbom","scorecard":{"id":102624,"data":{"date":"2025-08-04","repo":{"name":"github.com/oxigraph/oxigraph","commit":"7a470ed9b0e10e82235e692c12be42a6025396e2"},"scorecard":{"version":"v5.2.1-28-gc1d103a9","commit":"c1d103a9bb9f635ec7260bf9aa0699466fa4be0e"},"score":4.9,"checks":[{"name":"Code-Review","score":0,"reason":"Found 0/24 approved changesets -- score normalized to 0","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/c1d103a9bb9f635ec7260bf9aa0699466fa4be0e/docs/checks.md#code-review"}},{"name":"Maintained","score":10,"reason":"30 commit(s) and 22 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/c1d103a9bb9f635ec7260bf9aa0699466fa4be0e/docs/checks.md#maintained"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/c1d103a9bb9f635ec7260bf9aa0699466fa4be0e/docs/checks.md#cii-best-practices"}},{"name":"Security-Policy","score":0,"reason":"security policy file not detected","details":["Warn: no security policy file detected","Warn: no security file to analyze","Warn: no security file to analyze","Warn: no security file to analyze"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/c1d103a9bb9f635ec7260bf9aa0699466fa4be0e/docs/checks.md#security-policy"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/c1d103a9bb9f635ec7260bf9aa0699466fa4be0e/docs/checks.md#dangerous-workflow"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: jobLevel 'contents' permission set to 'read': .github/workflows/artifacts.yml:277","Info: jobLevel 'contents' permission set to 'read': .github/workflows/artifacts.yml:310","Warn: no topLevel permission defined: .github/workflows/artifacts.yml:1","Warn: no topLevel permission defined: .github/workflows/nightly.yml:1","Warn: no topLevel permission defined: .github/workflows/tests.yml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/c1d103a9bb9f635ec7260bf9aa0699466fa4be0e/docs/checks.md#token-permissions"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE-APACHE:0","Info: FSF or OSI recognized license: Apache License 2.0: LICENSE-APACHE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/c1d103a9bb9f635ec7260bf9aa0699466fa4be0e/docs/checks.md#license"}},{"name":"Fuzzing","score":10,"reason":"project is fuzzed","details":["Info: RustCargoFuzzer integration found: fuzz/fuzz_targets/jsonld.rs:3","Info: RustCargoFuzzer integration found: fuzz/fuzz_targets/n3.rs:3","Info: RustCargoFuzzer integration found: fuzz/fuzz_targets/nquads.rs:3","Info: RustCargoFuzzer integration found: fuzz/fuzz_targets/rdf_xml.rs:3","Info: RustCargoFuzzer integration found: fuzz/fuzz_targets/sparql_query.rs:2","Info: RustCargoFuzzer integration found: fuzz/fuzz_targets/sparql_query_eval.rs:3","Info: RustCargoFuzzer integration found: fuzz/fuzz_targets/sparql_results_json.rs:2","Info: RustCargoFuzzer integration found: fuzz/fuzz_targets/sparql_results_tsv.rs:2","Info: RustCargoFuzzer integration found: fuzz/fuzz_targets/sparql_results_xml.rs:2","Info: RustCargoFuzzer integration found: fuzz/fuzz_targets/sparql_update.rs:2","Info: RustCargoFuzzer integration found: fuzz/fuzz_targets/sparql_update_eval.rs:3","Info: RustCargoFuzzer integration found: fuzz/fuzz_targets/trig.rs:3"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/c1d103a9bb9f635ec7260bf9aa0699466fa4be0e/docs/checks.md#fuzzing"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/c1d103a9bb9f635ec7260bf9aa0699466fa4be0e/docs/checks.md#binary-artifacts"}},{"name":"Branch-Protection","score":3,"reason":"branch protection is not maximal on development and all release branches","details":["Info: 'allow deletion' disabled on branch 'main'","Info: 'force pushes' disabled on branch 'main'","Info: 'branch protection settings apply to administrators' is required to merge on branch 'main'","Warn: 'stale review dismissal' is disabled on branch 'main'","Warn: branch 'main' does not require approvers","Warn: codeowners review is not required on branch 'main'","Warn: 'last push approval' is disabled on branch 'main'","Warn: no status checks found to merge onto branch 'main'","Info: PRs are required in order to make changes on branch 'main'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/c1d103a9bb9f635ec7260bf9aa0699466fa4be0e/docs/checks.md#branch-protection"}},{"name":"Signed-Releases","score":0,"reason":"Project has not signed or included provenance with any releases.","details":["Warn: release artifact v0.5.0-beta.2 not signed: https://api.github.com/repos/oxigraph/oxigraph/releases/238406065","Warn: release artifact v0.5.0-beta.1 not signed: https://api.github.com/repos/oxigraph/oxigraph/releases/233753773","Warn: release artifact v0.4.11 not signed: https://api.github.com/repos/oxigraph/oxigraph/releases/220181327","Warn: release artifact v0.4.10 not signed: https://api.github.com/repos/oxigraph/oxigraph/releases/218939640","Warn: release artifact v0.4.9 not signed: https://api.github.com/repos/oxigraph/oxigraph/releases/204607859","Warn: release artifact v0.5.0-beta.2 does not have provenance: https://api.github.com/repos/oxigraph/oxigraph/releases/238406065","Warn: release artifact v0.5.0-beta.1 does not have provenance: https://api.github.com/repos/oxigraph/oxigraph/releases/233753773","Warn: release artifact v0.4.11 does not have provenance: https://api.github.com/repos/oxigraph/oxigraph/releases/220181327","Warn: release artifact v0.4.10 does not have provenance: https://api.github.com/repos/oxigraph/oxigraph/releases/218939640","Warn: release artifact v0.4.9 does not have provenance: https://api.github.com/repos/oxigraph/oxigraph/releases/204607859"],"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/c1d103a9bb9f635ec7260bf9aa0699466fa4be0e/docs/checks.md#signed-releases"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Info: Possibly incomplete results: error parsing job operating system: .github/workflows/tests.yml:179","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/artifacts.yml:63: update your workflow using https://app.stepsecurity.io/secureworkflow/oxigraph/oxigraph/artifacts.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/artifacts.yml:67: update your workflow using https://app.stepsecurity.io/secureworkflow/oxigraph/oxigraph/artifacts.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/artifacts.yml:72: update your workflow using https://app.stepsecurity.io/secureworkflow/oxigraph/oxigraph/artifacts.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/artifacts.yml:76: update your workflow using https://app.stepsecurity.io/secureworkflow/oxigraph/oxigraph/artifacts.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/artifacts.yml:81: update your workflow using https://app.stepsecurity.io/secureworkflow/oxigraph/oxigraph/artifacts.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/artifacts.yml:87: update your workflow using https://app.stepsecurity.io/secureworkflow/oxigraph/oxigraph/artifacts.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/artifacts.yml:105: update your workflow using https://app.stepsecurity.io/secureworkflow/oxigraph/oxigraph/artifacts.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/artifacts.yml:108: update your workflow using https://app.stepsecurity.io/secureworkflow/oxigraph/oxigraph/artifacts.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/artifacts.yml:114: update your workflow using https://app.stepsecurity.io/secureworkflow/oxigraph/oxigraph/artifacts.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/artifacts.yml:135: update your workflow using https://app.stepsecurity.io/secureworkflow/oxigraph/oxigraph/artifacts.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/artifacts.yml:141: update your workflow using https://app.stepsecurity.io/secureworkflow/oxigraph/oxigraph/artifacts.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/artifacts.yml:153: update your workflow using https://app.stepsecurity.io/secureworkflow/oxigraph/oxigraph/artifacts.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/artifacts.yml:157: update your workflow using https://app.stepsecurity.io/secureworkflow/oxigraph/oxigraph/artifacts.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/artifacts.yml:162: update your workflow using https://app.stepsecurity.io/secureworkflow/oxigraph/oxigraph/artifacts.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/artifacts.yml:168: update your workflow using https://app.stepsecurity.io/secureworkflow/oxigraph/oxigraph/artifacts.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/artifacts.yml:186: update your workflow using https://app.stepsecurity.io/secureworkflow/oxigraph/oxigraph/artifacts.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/artifacts.yml:190: update your workflow using https://app.stepsecurity.io/secureworkflow/oxigraph/oxigraph/artifacts.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/artifacts.yml:201: update your workflow using https://app.stepsecurity.io/secureworkflow/oxigraph/oxigraph/artifacts.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/artifacts.yml:205: update your workflow using https://app.stepsecurity.io/secureworkflow/oxigraph/oxigraph/artifacts.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/artifacts.yml:210: update your workflow using https://app.stepsecurity.io/secureworkflow/oxigraph/oxigraph/artifacts.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/artifacts.yml:216: update your workflow using https://app.stepsecurity.io/secureworkflow/oxigraph/oxigraph/artifacts.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/artifacts.yml:238: update your workflow using https://app.stepsecurity.io/secureworkflow/oxigraph/oxigraph/artifacts.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/artifacts.yml:243: update your workflow using https://app.stepsecurity.io/secureworkflow/oxigraph/oxigraph/artifacts.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/artifacts.yml:368: update your workflow using https://app.stepsecurity.io/secureworkflow/oxigraph/oxigraph/artifacts.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/artifacts.yml:373: update your workflow using https://app.stepsecurity.io/secureworkflow/oxigraph/oxigraph/artifacts.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/artifacts.yml:475: update your workflow using https://app.stepsecurity.io/secureworkflow/oxigraph/oxigraph/artifacts.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/artifacts.yml:485: update your workflow using https://app.stepsecurity.io/secureworkflow/oxigraph/oxigraph/artifacts.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/artifacts.yml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/oxigraph/oxigraph/artifacts.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/artifacts.yml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/oxigraph/oxigraph/artifacts.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/artifacts.yml:42: update your workflow using https://app.stepsecurity.io/secureworkflow/oxigraph/oxigraph/artifacts.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/artifacts.yml:46: update your workflow using https://app.stepsecurity.io/secureworkflow/oxigraph/oxigraph/artifacts.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/artifacts.yml:263: update your workflow using https://app.stepsecurity.io/secureworkflow/oxigraph/oxigraph/artifacts.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/artifacts.yml:268: update your workflow using https://app.stepsecurity.io/secureworkflow/oxigraph/oxigraph/artifacts.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/artifacts.yml:280: update your workflow using https://app.stepsecurity.io/secureworkflow/oxigraph/oxigraph/artifacts.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/artifacts.yml:284: update your workflow using https://app.stepsecurity.io/secureworkflow/oxigraph/oxigraph/artifacts.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/artifacts.yml:294: update your workflow using https://app.stepsecurity.io/secureworkflow/oxigraph/oxigraph/artifacts.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/artifacts.yml:313: update your workflow using https://app.stepsecurity.io/secureworkflow/oxigraph/oxigraph/artifacts.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/artifacts.yml:316: update your workflow using https://app.stepsecurity.io/secureworkflow/oxigraph/oxigraph/artifacts.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/artifacts.yml:317: update your workflow using https://app.stepsecurity.io/secureworkflow/oxigraph/oxigraph/artifacts.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/artifacts.yml:322: update your workflow using https://app.stepsecurity.io/secureworkflow/oxigraph/oxigraph/artifacts.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/artifacts.yml:327: update your workflow using https://app.stepsecurity.io/secureworkflow/oxigraph/oxigraph/artifacts.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/artifacts.yml:338: update your workflow using https://app.stepsecurity.io/secureworkflow/oxigraph/oxigraph/artifacts.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/artifacts.yml:350: update your workflow using https://app.stepsecurity.io/secureworkflow/oxigraph/oxigraph/artifacts.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/artifacts.yml:355: update your workflow using https://app.stepsecurity.io/secureworkflow/oxigraph/oxigraph/artifacts.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/artifacts.yml:455: update your workflow using https://app.stepsecurity.io/secureworkflow/oxigraph/oxigraph/artifacts.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/nightly.yml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/oxigraph/oxigraph/nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/nightly.yml:16: update your workflow using https://app.stepsecurity.io/secureworkflow/oxigraph/oxigraph/nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/tests.yml:503: update your workflow using https://app.stepsecurity.io/secureworkflow/oxigraph/oxigraph/tests.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/tests.yml:509: update your workflow using https://app.stepsecurity.io/secureworkflow/oxigraph/oxigraph/tests.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/tests.yml:512: update your workflow using https://app.stepsecurity.io/secureworkflow/oxigraph/oxigraph/tests.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/tests.yml:526: update your workflow using https://app.stepsecurity.io/secureworkflow/oxigraph/oxigraph/tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/tests.yml:275: update your workflow using https://app.stepsecurity.io/secureworkflow/oxigraph/oxigraph/tests.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/tests.yml:281: update your workflow using https://app.stepsecurity.io/secureworkflow/oxigraph/oxigraph/tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/tests.yml:349: update your workflow using https://app.stepsecurity.io/secureworkflow/oxigraph/oxigraph/tests.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/tests.yml:358: update your workflow using https://app.stepsecurity.io/secureworkflow/oxigraph/oxigraph/tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/tests.yml:133: update your workflow using https://app.stepsecurity.io/secureworkflow/oxigraph/oxigraph/tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/tests.yml:175: update your workflow using https://app.stepsecurity.io/secureworkflow/oxigraph/oxigraph/tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/tests.yml:184: update your workflow using https://app.stepsecurity.io/secureworkflow/oxigraph/oxigraph/tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/tests.yml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/oxigraph/oxigraph/tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/tests.yml:101: update your workflow using https://app.stepsecurity.io/secureworkflow/oxigraph/oxigraph/tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/tests.yml:117: update your workflow using https://app.stepsecurity.io/secureworkflow/oxigraph/oxigraph/tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/tests.yml:290: update your workflow using https://app.stepsecurity.io/secureworkflow/oxigraph/oxigraph/tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/tests.yml:402: update your workflow using https://app.stepsecurity.io/secureworkflow/oxigraph/oxigraph/tests.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/tests.yml:403: update your workflow using https://app.stepsecurity.io/secureworkflow/oxigraph/oxigraph/tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/tests.yml:85: update your workflow using https://app.stepsecurity.io/secureworkflow/oxigraph/oxigraph/tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/tests.yml:236: update your workflow using https://app.stepsecurity.io/secureworkflow/oxigraph/oxigraph/tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/tests.yml:372: update your workflow using https://app.stepsecurity.io/secureworkflow/oxigraph/oxigraph/tests.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/tests.yml:376: update your workflow using https://app.stepsecurity.io/secureworkflow/oxigraph/oxigraph/tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/tests.yml:488: update your workflow using https://app.stepsecurity.io/secureworkflow/oxigraph/oxigraph/tests.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/tests.yml:492: update your workflow using https://app.stepsecurity.io/secureworkflow/oxigraph/oxigraph/tests.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/tests.yml:495: update your workflow using https://app.stepsecurity.io/secureworkflow/oxigraph/oxigraph/tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/tests.yml:387: update your workflow using https://app.stepsecurity.io/secureworkflow/oxigraph/oxigraph/tests.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/tests.yml:391: update your workflow using https://app.stepsecurity.io/secureworkflow/oxigraph/oxigraph/tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/tests.yml:435: update your workflow using https://app.stepsecurity.io/secureworkflow/oxigraph/oxigraph/tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/tests.yml:438: update your workflow using https://app.stepsecurity.io/secureworkflow/oxigraph/oxigraph/tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/tests.yml:454: update your workflow using https://app.stepsecurity.io/secureworkflow/oxigraph/oxigraph/tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/tests.yml:463: update your workflow using https://app.stepsecurity.io/secureworkflow/oxigraph/oxigraph/tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/tests.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/oxigraph/oxigraph/tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/tests.yml:219: update your workflow using https://app.stepsecurity.io/secureworkflow/oxigraph/oxigraph/tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/tests.yml:155: update your workflow using https://app.stepsecurity.io/secureworkflow/oxigraph/oxigraph/tests.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/tests.yml:159: update your workflow using https://app.stepsecurity.io/secureworkflow/oxigraph/oxigraph/tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/tests.yml:161: update your workflow using https://app.stepsecurity.io/secureworkflow/oxigraph/oxigraph/tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/tests.yml:247: update your workflow using https://app.stepsecurity.io/secureworkflow/oxigraph/oxigraph/tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/tests.yml:303: update your workflow using https://app.stepsecurity.io/secureworkflow/oxigraph/oxigraph/tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/tests.yml:305: update your workflow using https://app.stepsecurity.io/secureworkflow/oxigraph/oxigraph/tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/tests.yml:410: update your workflow using https://app.stepsecurity.io/secureworkflow/oxigraph/oxigraph/tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/tests.yml:147: update your workflow using https://app.stepsecurity.io/secureworkflow/oxigraph/oxigraph/tests.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/tests.yml:148: update your workflow using https://app.stepsecurity.io/secureworkflow/oxigraph/oxigraph/tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/tests.yml:261: update your workflow using https://app.stepsecurity.io/secureworkflow/oxigraph/oxigraph/tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/tests.yml:265: update your workflow using https://app.stepsecurity.io/secureworkflow/oxigraph/oxigraph/tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/tests.yml:320: update your workflow using https://app.stepsecurity.io/secureworkflow/oxigraph/oxigraph/tests.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/tests.yml:324: update your workflow using https://app.stepsecurity.io/secureworkflow/oxigraph/oxigraph/tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/tests.yml:470: update your workflow using https://app.stepsecurity.io/secureworkflow/oxigraph/oxigraph/tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/tests.yml:476: update your workflow using https://app.stepsecurity.io/secureworkflow/oxigraph/oxigraph/tests.yml/main?enable=pin","Warn: containerImage not pinned by hash: cli/Dockerfile:1","Warn: containerImage not pinned by hash: cli/Dockerfile:22: pin your Docker image by updating gcr.io/distroless/cc-debian12 to gcr.io/distroless/cc-debian12@sha256:bf0494952368db47e9e38eecc325c33f5ee299b1b1ccc5d9e30bdf1e5e4e3a58","Warn: npmCommand not pinned by hash: .github/workflows/artifacts.yml:291","Warn: npmCommand not pinned by hash: .github/workflows/tests.yml:311","Info:   0 out of  63 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of  31 third-party GitHubAction dependencies pinned","Info:   0 out of   2 containerImage dependencies pinned","Info:   0 out of   2 npmCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/c1d103a9bb9f635ec7260bf9aa0699466fa4be0e/docs/checks.md#pinned-dependencies"}},{"name":"Packaging","score":10,"reason":"packaging workflow detected","details":["Info: Project packages its releases by way of GitHub Actions.: .github/workflows/artifacts.yml:223"],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/c1d103a9bb9f635ec7260bf9aa0699466fa4be0e/docs/checks.md#packaging"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 30 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/c1d103a9bb9f635ec7260bf9aa0699466fa4be0e/docs/checks.md#sast"}},{"name":"Vulnerabilities","score":7,"reason":"3 existing vulnerabilities detected","details":["Warn: Project is vulnerable to: RUSTSEC-2018-0015","Warn: Project is vulnerable to: GHSA-wf5p-g6vw-rhxx","Warn: Project is vulnerable to: GHSA-jr5f-v2jv-69x6"],"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/c1d103a9bb9f635ec7260bf9aa0699466fa4be0e/docs/checks.md#vulnerabilities"}}]},"last_synced_at":"2025-08-15T10:28:11.615Z","repository_id":38671851,"created_at":"2025-08-15T10:28:11.615Z","updated_at":"2025-08-15T10:28:11.615Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":344872684,"owners_count":38341143,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-10-03T21:59:58.778Z","status":"online","status_checked_at":"2026-10-18T02:00:06.448Z","response_time":63,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["graph-database","rdf-store","sparql"],"created_at":"2024-08-01T12:04:55.130Z","updated_at":"2026-10-19T10:16:32.447Z","avatar_url":"https://github.com/oxigraph.png","language":"Rust","funding_links":["https://github.com/sponsors/Tpt"],"categories":["Graph Databases","Rust","others","Applications","Recently Updated","Databases","Semantic Web","Infrastructure"],"sub_categories":["Triple Stores (RDF Databases)","Database","[Oct 31, 2024](/content/2024/10/31/README.md)","Data Cube extensions","RDF, Linked Data \u0026 SPARQL","Triple Stores"],"readme":"# Oxigraph\n\n[![Latest Version](https://img.shields.io/crates/v/oxigraph.svg)](https://crates.io/crates/oxigraph)\n[![Released API docs](https://docs.rs/oxigraph/badge.svg)](https://docs.rs/oxigraph)\n[![PyPI](https://img.shields.io/pypi/v/pyoxigraph)](https://pypi.org/project/pyoxigraph/)\n[![npm](https://img.shields.io/npm/v/oxigraph)](https://www.npmjs.com/package/oxigraph)\n[![tests status](https://github.com/oxigraph/oxigraph/actions/workflows/tests.yml/badge.svg)](https://github.com/oxigraph/oxigraph/actions)\n[![artifacts status](https://github.com/oxigraph/oxigraph/actions/workflows/artifacts.yml/badge.svg)](https://github.com/oxigraph/oxigraph/actions)\n[![dependency status](https://deps.rs/repo/github/oxigraph/oxigraph/status.svg)](https://deps.rs/repo/github/oxigraph/oxigraph)\n[![Gitter](https://badges.gitter.im/oxigraph/community.svg)](https://gitter.im/oxigraph/community)\n[![Twitter URL](https://img.shields.io/twitter/url?style=social\u0026url=https%3A%2F%2Ftwitter.com%2Foxigraph)](https://twitter.com/oxigraph)\n\nOxigraph is both a graph database and a [RDF](https://www.w3.org/TR/rdf11-primer/) and [SPARQL](https://www.w3.org/TR/sparql11-overview/) toolkit.\n\nIts goal is to provide a compliant, safe, and fast graph database based on the [RocksDB](https://rocksdb.org/) key-value store.\nIt also provides a set of utilities for RDF basic manipulation (parsing, serialization, canonicalization) and building SPARQL implementations (SPARQL results parsers/serializers, SPARQL parser...).\n\nOxigraph is in heavy development and SPARQL query evaluation has not been optimized yet.\nOxigraph internal design [is described on the wiki](https://github.com/oxigraph/oxigraph/wiki/Architecture).\n\nOxigraph implements the following specifications:\n\n- [SPARQL Query](https://www.w3.org/TR/sparql-query/), [SPARQL Update](https://www.w3.org/TR/sparql-update/), and [SPARQL Federated Query](https://www.w3.org/TR/sparql-federated-query/).\n- [Turtle](https://www.w3.org/TR/turtle/), [TriG](https://www.w3.org/TR/trig/), [N-Triples](https://www.w3.org/TR/n-triples/), [N-Quads](https://www.w3.org/TR/n-quads/), [RDF/XML](https://www.w3.org/TR/rdf-syntax-grammar/) and [JSON-LD](https://www.w3.org/TR/json-ld/) RDF serialization formats for both data ingestion and retrieval.\n- [SPARQL Query Results XML Format](https://www.w3.org/TR/rdf-sparql-XMLres/), [SPARQL Query Results JSON Format](https://www.w3.org/TR/sparql-results-json/) and [SPARQL Query Results CSV and TSV Formats](https://www.w3.org/TR/sparql-results-csv-tsv/).\n- [RDF Dataset Canonicalization](https://www.w3.org/TR/rdf-canon/).\n\nMost implementations are nearly fully conformant with the latest recommendations (1.1 for RDF, SPARQL and JSON-LD) with preliminary support for 1.2 RDF and SPARQL drafts.\n\nIt is split into multiple parts:\n\n- [The database written as a Rust library](./lib/oxigraph). Its source code is in the `lib` directory.\n  [![Latest Version](https://img.shields.io/crates/v/oxigraph.svg)](https://crates.io/crates/oxigraph)\n  [![Released API docs](https://docs.rs/oxigraph/badge.svg)](https://docs.rs/oxigraph)\n- [`pyoxigraph` that exposes Oxigraph to the Python world](./python). Its source code is in the `python` directory. [![PyPI](https://img.shields.io/pypi/v/pyoxigraph)](https://pypi.org/project/pyoxigraph/)\n- [JavaScript bindings for Oxigraph](./js). WebAssembly is used to package Oxigraph into a NodeJS compatible NPM package. Its source code is in the `js` directory.\n  [![npm](https://img.shields.io/npm/v/oxigraph)](https://www.npmjs.com/package/oxigraph)\n- [Oxigraph binary](./cli) that provides a standalone command-line tool allowing to manipulate RDF data and spawn a web server implementing the [SPARQL 1.1 Protocol](https://www.w3.org/TR/sparql11-protocol/) and the [SPARQL 1.1 Graph Store Protocol](https://www.w3.org/TR/sparql11-http-rdf-update/). Its source code and instructions (including Docker) are in the `cli` directory.\n  Note that it was previously named [Oxigraph server](https://crates.io/crates/oxigraph-server).\n  [![Latest Version](https://img.shields.io/crates/v/oxigraph-cli.svg)](https://crates.io/crates/oxigraph-cli)\n\nAlso, some parts of Oxigraph are available as standalone Rust crates to be reused in other Rust projects:\n* [`oxrdf`](./lib/oxrdf), datastructures encoding RDF basic concepts (the [`oxigraph::model`](crate::model) module).\n* [`oxrdfio`](./lib/oxrdfio), a unified parser and serializer API for RDF formats (the [`oxigraph::io`](crate::io) module). It itself relies on:\n  * [`oxttl`](./lib/oxttl), N-Triple, N-Quad, Turtle, TriG and N3 parsing and serialization.\n  * [`oxrdfxml`](./lib/oxrdfxml), RDF/XML parsing and serialization.\n  * [`oxjsonld`](./lib/oxjsonld), JSON-LD RDF serialization/deserialization algorithms.\n* [`spareval`](./lib/spareval), a SPARQL evaluator.\n* [`spargebra`](./lib/spargebra), a SPARQL parser.\n* [`sparesults`](./lib/sparesults), parsers and serializers for SPARQL result formats.\n* [`sparopt`](./lib/sparopt), a SPARQL optimizer.\n* [`oxsdatatypes`](./lib/oxsdatatypes), an implementation of some XML Schema datatypes.\n* [`spargeo`](./lib/spargeo), a partial implementation of [GeoSPARQL](https://docs.ogc.org/is/22-047r1/22-047r1.html).\n\nThe library layers in Oxigraph. The elements above depend on the elements below:\n![Oxigraph libraries architecture diagram](./docs/arch-diagram.svg)\n\nThere is [a document describing Oxigraph technical architecture](https://github.com/oxigraph/oxigraph/wiki/Architecture).\n\n## Help\n\nFeel free to use [GitHub discussions](https://github.com/oxigraph/oxigraph/discussions) or [the Gitter chat](https://gitter.im/oxigraph/community) to ask questions or talk about Oxigraph.\n[Bug reports](https://github.com/oxigraph/oxigraph/issues) are also very welcome.\n\nIf you need advanced support or are willing to pay to get some extra features, feel free to reach out to [Tpt](https://github.com/Tpt/).\n\n\n## License\n\nThis project is licensed under either of\n\n- Apache License, Version 2.0, ([LICENSE-APACHE](LICENSE-APACHE) or\n  http://www.apache.org/licenses/LICENSE-2.0)\n- MIT license ([LICENSE-MIT](LICENSE-MIT) or\n  http://opensource.org/licenses/MIT)\n\nat your option.\n\n### Contribution\n\nWhen cloning this codebase, clone the submodules using\n`git clone --recursive https://github.com/oxigraph/oxigraph.git` to clone the repository including submodules or\n`git submodule update --init` to add the submodules to the already cloned repository.\n\nUnless you explicitly state otherwise, any contribution intentionally submitted for inclusion in Oxigraph by you, as defined in the Apache-2.0 license, shall be dual licensed as above, without any additional terms or conditions.\n\n\n## Sponsors\n\n* [Zazuko](https://zazuko.com/), a knowledge graph consulting company.\n* [RelationLabs](https://relationlabs.ai/) that is building [Relation-Graph](https://github.com/relationlabs/Relation-Graph), a SPARQL database module for the [Substrate blockchain platform](https://substrate.io/) based on Oxigraph.\n* [Field 33](https://field33.com) that was building [an ontology management platform](https://plow.pm/).\n* [Magnus Bakken](https://github.com/magbak) who is building [Data Treehouse](https://www.data-treehouse.com/), a time-series + RDF datalake platform, and [chrontext](https://github.com/magbak/chrontext), a SPARQL query endpoint on top of joint RDF and time series databases.\n* [DeciSym.AI](https://www.decisym.ai/) a cybersecurity consulting company providing RDF-based software.\n* [ACE IoT Solutions](https://aceiotsolutions.com/), a building IOT platform.\n* [Albin Larsson](https://byabbe.se/) who is building [GovDirectory](https://www.govdirectory.org/), a directory of public agencies based on Wikidata.\n\nAnd [others](https://github.com/sponsors/Tpt). Many thanks to them!\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Foxigraph%2Foxigraph","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Foxigraph%2Foxigraph","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Foxigraph%2Foxigraph/lists"}