{"id":15034389,"url":"https://github.com/qiskit/qiskit","last_synced_at":"2026-10-18T22:30:08.305Z","repository":{"id":37244383,"uuid":"83821669","full_name":"Qiskit/qiskit","owner":"Qiskit","description":"Qiskit is an open-source SDK for working with quantum computers at the level of extended quantum circuits, operators, and primitives.","archived":false,"fork":false,"pushed_at":"2026-10-14T01:56:04.000Z","size":179742,"stargazers_count":7886,"open_issues_count":1033,"forks_count":3079,"subscribers_count":233,"default_branch":"main","last_synced_at":"2026-10-14T06:55:57.904Z","etag":null,"topics":["c","python","qiskit","quantum","quantum-circuit","quantum-computing","quantum-programming-language","rust","sdk"],"latest_commit_sha":null,"homepage":"https://www.ibm.com/quantum/qiskit","language":"Python","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/Qiskit.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE.txt","code_of_conduct":"CODE_OF_CONDUCT.md","threat_model":null,"audit":null,"citation":"CITATION.bib","codeowners":".github/CODEOWNERS","security":"SECURITY.md","support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"claude":null,"gemini":null,"cursor":null,"copilot":null,"dco":null,"cla":null,"disclosure":null}},"created_at":"2017-03-03T17:02:42.000Z","updated_at":"2026-10-14T03:16:50.000Z","dependencies_parsed_at":"2026-09-22T12:52:59.752Z","dependency_job_id":null,"html_url":"https://github.com/Qiskit/qiskit","commit_stats":{"total_commits":8320,"total_committers":571,"mean_commits":14.57092819614711,"dds":0.8623798076923077,"last_synced_commit":"b872e886ce71d94d467612a8c14d7946bd0dd4cf"},"previous_names":["qiskit/qiskit-terra"],"tags_count":172,"template":false,"template_full_name":null,"purl":"pkg:github/Qiskit/qiskit","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/Qiskit%2Fqiskit","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/Qiskit%2Fqiskit/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/Qiskit%2Fqiskit/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/Qiskit%2Fqiskit/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/Qiskit","download_url":"https://codeload.github.com/Qiskit/qiskit/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/Qiskit%2Fqiskit/sbom","scorecard":{"id":112112,"data":{"date":"2025-08-11","repo":{"name":"github.com/Qiskit/qiskit","commit":"76454f96a39ca67c5cc132dc0daf7c55b140a563"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":4.8,"checks":[{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: SECURITY.md:1","Info: Found linked content: SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: SECURITY.md:1","Info: Found text in security policy: SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Maintained","score":10,"reason":"30 commit(s) and 16 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Code-Review","score":10,"reason":"all changesets reviewed","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Dangerous-Workflow","score":0,"reason":"dangerous workflow patterns detected","details":["Warn: script injection with untrusted input ' github.event.pull_request.head.ref ': .github/workflows/backport.yml:26"],"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE.txt:0","Info: FSF or OSI recognized license: Apache License 2.0: LICENSE.txt:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Warn: no topLevel permission defined: .github/workflows/backport.yml:1","Warn: no topLevel permission defined: .github/workflows/coverage.yml:1","Warn: no topLevel permission defined: .github/workflows/ctests.yml:1","Warn: no topLevel permission defined: .github/workflows/docs_deploy.yml:1","Warn: no topLevel permission defined: .github/workflows/image-tests.yml:1","Warn: no topLevel permission defined: .github/workflows/lint_docs.yml:1","Warn: no topLevel permission defined: .github/workflows/miri.yml:1","Warn: no topLevel permission defined: .github/workflows/neko.yml:1","Warn: no topLevel permission defined: .github/workflows/on-merge-queue.yml:1","Warn: no topLevel permission defined: .github/workflows/on-nightly.yml:1","Warn: no topLevel permission defined: .github/workflows/on-pull-request.yml:1","Warn: no topLevel permission defined: .github/workflows/on-push.yml:1","Warn: no topLevel permission defined: .github/workflows/qpy.yml:1","Warn: no topLevel permission defined: .github/workflows/randomized_tests.yml:1","Warn: no topLevel permission defined: .github/workflows/rust-tests.yml:1","Warn: no topLevel permission defined: .github/workflows/slow.yml:1","Warn: no topLevel permission defined: .github/workflows/test-linux.yml:1","Warn: no topLevel permission defined: .github/workflows/test-mac.yml:1","Warn: no topLevel permission defined: .github/workflows/test-windows.yml:1","Warn: no topLevel permission defined: .github/workflows/wheels-build.yml:1","Warn: no topLevel permission defined: .github/workflows/wheels-pr.yml:1","Warn: no topLevel permission defined: .github/workflows/wheels.yml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Branch-Protection","score":8,"reason":"branch protection is not maximal on development and all release branches","details":["Info: 'allow deletion' disabled on branch 'main'","Info: 'force pushes' disabled on branch 'main'","Warn: required approving review count is 1 on branch 'main'","Info: codeowner review is required on branch 'main'","Info: status check found to merge onto on branch 'main'","Info: PRs are required in order to make changes on branch 'main'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/coverage.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/Qiskit/qiskit/coverage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/coverage.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/Qiskit/qiskit/coverage.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/coverage.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/Qiskit/qiskit/coverage.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/coverage.yml:98: update your workflow using https://app.stepsecurity.io/secureworkflow/Qiskit/qiskit/coverage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ctests.yml:23: update your workflow using https://app.stepsecurity.io/secureworkflow/Qiskit/qiskit/ctests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs_deploy.yml:18: update your workflow using https://app.stepsecurity.io/secureworkflow/Qiskit/qiskit/docs_deploy.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs_deploy.yml:23: update your workflow using https://app.stepsecurity.io/secureworkflow/Qiskit/qiskit/docs_deploy.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs_deploy.yml:48: update your workflow using https://app.stepsecurity.io/secureworkflow/Qiskit/qiskit/docs_deploy.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/image-tests.yml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/Qiskit/qiskit/image-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/image-tests.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/Qiskit/qiskit/image-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/image-tests.yml:52: update your workflow using https://app.stepsecurity.io/secureworkflow/Qiskit/qiskit/image-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/lint_docs.yml:18: update your workflow using https://app.stepsecurity.io/secureworkflow/Qiskit/qiskit/lint_docs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/lint_docs.yml:23: update your workflow using https://app.stepsecurity.io/secureworkflow/Qiskit/qiskit/lint_docs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/lint_docs.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/Qiskit/qiskit/lint_docs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/lint_docs.yml:47: update your workflow using https://app.stepsecurity.io/secureworkflow/Qiskit/qiskit/lint_docs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/lint_docs.yml:52: update your workflow using https://app.stepsecurity.io/secureworkflow/Qiskit/qiskit/lint_docs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/miri.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/Qiskit/qiskit/miri.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/miri.yml:23: update your workflow using https://app.stepsecurity.io/secureworkflow/Qiskit/qiskit/miri.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/neko.yml:16: update your workflow using https://app.stepsecurity.io/secureworkflow/Qiskit/qiskit/neko.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/qpy.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/Qiskit/qiskit/qpy.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/qpy.yml:23: update your workflow using https://app.stepsecurity.io/secureworkflow/Qiskit/qiskit/qpy.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/qpy.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/Qiskit/qiskit/qpy.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/qpy.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/Qiskit/qiskit/qpy.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/randomized_tests.yml:12: update your workflow using https://app.stepsecurity.io/secureworkflow/Qiskit/qiskit/randomized_tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/randomized_tests.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/Qiskit/qiskit/randomized_tests.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/randomized_tests.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/Qiskit/qiskit/randomized_tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/rust-tests.yml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/Qiskit/qiskit/rust-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/rust-tests.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/Qiskit/qiskit/rust-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/slow.yml:12: update your workflow using https://app.stepsecurity.io/secureworkflow/Qiskit/qiskit/slow.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/slow.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/Qiskit/qiskit/slow.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/slow.yml:32: update your workflow using https://app.stepsecurity.io/secureworkflow/Qiskit/qiskit/slow.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-linux.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/Qiskit/qiskit/test-linux.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-linux.yml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/Qiskit/qiskit/test-linux.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-linux.yml:44: update your workflow using https://app.stepsecurity.io/secureworkflow/Qiskit/qiskit/test-linux.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-linux.yml:140: update your workflow using https://app.stepsecurity.io/secureworkflow/Qiskit/qiskit/test-linux.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-mac.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/Qiskit/qiskit/test-mac.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-mac.yml:36: update your workflow using https://app.stepsecurity.io/secureworkflow/Qiskit/qiskit/test-mac.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-mac.yml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/Qiskit/qiskit/test-mac.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-mac.yml:87: update your workflow using https://app.stepsecurity.io/secureworkflow/Qiskit/qiskit/test-mac.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-windows.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/Qiskit/qiskit/test-windows.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-windows.yml:36: update your workflow using https://app.stepsecurity.io/secureworkflow/Qiskit/qiskit/test-windows.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-windows.yml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/Qiskit/qiskit/test-windows.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-windows.yml:86: update your workflow using https://app.stepsecurity.io/secureworkflow/Qiskit/qiskit/test-windows.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/wheels-build.yml:82: update your workflow using https://app.stepsecurity.io/secureworkflow/Qiskit/qiskit/wheels-build.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/wheels-build.yml:83: update your workflow using https://app.stepsecurity.io/secureworkflow/Qiskit/qiskit/wheels-build.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/wheels-build.yml:86: update your workflow using https://app.stepsecurity.io/secureworkflow/Qiskit/qiskit/wheels-build.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/wheels-build.yml:120: update your workflow using https://app.stepsecurity.io/secureworkflow/Qiskit/qiskit/wheels-build.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/wheels-build.yml:121: update your workflow using https://app.stepsecurity.io/secureworkflow/Qiskit/qiskit/wheels-build.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/wheels-build.yml:130: update your workflow using https://app.stepsecurity.io/secureworkflow/Qiskit/qiskit/wheels-build.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/wheels-build.yml:131: update your workflow using https://app.stepsecurity.io/secureworkflow/Qiskit/qiskit/wheels-build.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/wheels-build.yml:135: update your workflow using https://app.stepsecurity.io/secureworkflow/Qiskit/qiskit/wheels-build.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/wheels-build.yml:136: update your workflow using https://app.stepsecurity.io/secureworkflow/Qiskit/qiskit/wheels-build.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/wheels-build.yml:139: update your workflow using https://app.stepsecurity.io/secureworkflow/Qiskit/qiskit/wheels-build.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/wheels-build.yml:143: update your workflow using https://app.stepsecurity.io/secureworkflow/Qiskit/qiskit/wheels-build.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/wheels-build.yml:153: update your workflow using https://app.stepsecurity.io/secureworkflow/Qiskit/qiskit/wheels-build.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/wheels-build.yml:154: update your workflow using https://app.stepsecurity.io/secureworkflow/Qiskit/qiskit/wheels-build.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/wheels-build.yml:158: update your workflow using https://app.stepsecurity.io/secureworkflow/Qiskit/qiskit/wheels-build.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/wheels-build.yml:159: update your workflow using https://app.stepsecurity.io/secureworkflow/Qiskit/qiskit/wheels-build.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/wheels-build.yml:162: update your workflow using https://app.stepsecurity.io/secureworkflow/Qiskit/qiskit/wheels-build.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/wheels-build.yml:166: update your workflow using https://app.stepsecurity.io/secureworkflow/Qiskit/qiskit/wheels-build.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/wheels-build.yml:176: update your workflow using https://app.stepsecurity.io/secureworkflow/Qiskit/qiskit/wheels-build.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/wheels-build.yml:177: update your workflow using https://app.stepsecurity.io/secureworkflow/Qiskit/qiskit/wheels-build.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/wheels-build.yml:185: update your workflow using https://app.stepsecurity.io/secureworkflow/Qiskit/qiskit/wheels-build.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/wheels.yml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/Qiskit/qiskit/wheels.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/wheels.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/Qiskit/qiskit/wheels.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/wheels.yml:50: update your workflow using https://app.stepsecurity.io/secureworkflow/Qiskit/qiskit/wheels.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/wheels.yml:55: update your workflow using https://app.stepsecurity.io/secureworkflow/Qiskit/qiskit/wheels.yml/main?enable=pin","Warn: pipCommand not pinned by hash: tools/build_pgo.sh:26","Warn: pipCommand not pinned by hash: tools/build_pgo.sh:27","Warn: downloadThenRun not pinned by hash: tools/install_rust.sh:5","Warn: downloadThenRun not pinned by hash: tools/install_rust_msrv.sh:5","Warn: pipCommand not pinned by hash: tools/install_ubuntu_docs_dependencies.sh:7","Warn: pipCommand not pinned by hash: tools/install_ubuntu_docs_dependencies.sh:8","Warn: pipCommand not pinned by hash: .github/workflows/coverage.yml:43","Warn: pipCommand not pinned by hash: .github/workflows/coverage.yml:46","Warn: pipCommand not pinned by hash: .github/workflows/coverage.yml:54","Warn: pipCommand not pinned by hash: .github/workflows/image-tests.yml:34","Warn: pipCommand not pinned by hash: .github/workflows/lint_docs.yml:57","Warn: pipCommand not pinned by hash: .github/workflows/randomized_tests.yml:19","Warn: pipCommand not pinned by hash: .github/workflows/randomized_tests.yml:20","Warn: pipCommand not pinned by hash: .github/workflows/rust-tests.yml:41","Warn: pipCommand not pinned by hash: .github/workflows/slow.yml:19","Warn: pipCommand not pinned by hash: .github/workflows/slow.yml:20","Warn: pipCommand not pinned by hash: .github/workflows/slow.yml:21","Warn: pipCommand not pinned by hash: .github/workflows/slow.yml:22","Warn: pipCommand not pinned by hash: .github/workflows/slow.yml:23","Warn: pipCommand not pinned by hash: .github/workflows/test-linux.yml:55","Warn: pipCommand not pinned by hash: .github/workflows/test-linux.yml:62","Warn: pipCommand not pinned by hash: .github/workflows/test-linux.yml:64","Warn: pipCommand not pinned by hash: .github/workflows/test-linux.yml:74","Warn: pipCommand not pinned by hash: .github/workflows/test-linux.yml:83","Warn: pipCommand not pinned by hash: .github/workflows/test-mac.yml:51","Warn: pipCommand not pinned by hash: .github/workflows/test-mac.yml:54","Warn: pipCommand not pinned by hash: .github/workflows/test-mac.yml:55","Warn: pipCommand not pinned by hash: .github/workflows/test-mac.yml:65","Warn: pipCommand not pinned by hash: .github/workflows/test-windows.yml:50","Warn: pipCommand not pinned by hash: .github/workflows/test-windows.yml:53","Warn: pipCommand not pinned by hash: .github/workflows/test-windows.yml:54","Warn: pipCommand not pinned by hash: .github/workflows/test-windows.yml:63","Warn: pipCommand not pinned by hash: .github/workflows/wheels-build.yml:183","Info:   0 out of  50 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of  17 third-party GitHubAction dependencies pinned","Info:   0 out of  31 pipCommand dependencies pinned","Info:   0 out of   2 downloadThenRun dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Packaging","score":10,"reason":"packaging workflow detected","details":["Info: Project packages its releases by way of GitHub Actions.: .github/workflows/wheels.yml:16"],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 30 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}},{"name":"Vulnerabilities","score":0,"reason":"66 existing vulnerabilities detected","details":["Warn: Project is vulnerable to: RUSTSEC-2024-0436","Warn: Project is vulnerable to: RUSTSEC-2024-0370","Warn: Project is vulnerable to: PYSEC-2024-48 / GHSA-fj7x-q9j7-g6q6","Warn: Project is vulnerable to: PYSEC-2013-22 / GHSA-27x4-j476-jp5f","Warn: Project is vulnerable to: PYSEC-2025-49 / GHSA-5rjg-fvgr-3xxf","Warn: Project is vulnerable to: GHSA-cx63-2mw6-8hw5","Warn: Project is vulnerable to: PYSEC-2022-43012 / GHSA-r9hx-vwmv-q579","Warn: Project is vulnerable to: GHSA-29gw-9793-fvw7","Warn: Project is vulnerable to: PYSEC-2015-24 / GHSA-4vwq-x64q-j4cj","Warn: Project is vulnerable to: PYSEC-2017-46 / GHSA-66gw-5xpf-gfp5","Warn: Project is vulnerable to: PYSEC-2015-25 / GHSA-92mr-v722-f48m","Warn: Project is vulnerable to: PYSEC-2022-12 / GHSA-pq7m-3gw7-gq5x","Warn: Project is vulnerable to: PYSEC-2017-47","Warn: Project is vulnerable to: GHSA-3f63-hfp8-52jq","Warn: Project is vulnerable to: PYSEC-2021-41 / GHSA-3wvg-mj6g-m9cv","Warn: Project is vulnerable to: PYSEC-2020-77 / GHSA-3xv8-3j54-hgrp","Warn: Project is vulnerable to: PYSEC-2020-80 / GHSA-43fq-w8qq-v88h","Warn: Project is vulnerable to: GHSA-44wm-f244-xhp3","Warn: Project is vulnerable to: GHSA-4fx9-vc88-q2xc","Warn: Project is vulnerable to: PYSEC-2021-35 / GHSA-57h3-9rgr-c24m","Warn: Project is vulnerable to: PYSEC-2020-172 / GHSA-5gm3-px64-rw72","Warn: Project is vulnerable to: PYSEC-2021-331 / GHSA-7534-mm45-c74v","Warn: Project is vulnerable to: PYSEC-2021-137 / GHSA-77gc-v2xv-rvvh","Warn: Project is vulnerable to: PYSEC-2021-92 / GHSA-7r7m-5h27-29hp","Warn: Project is vulnerable to: PYSEC-2020-78 / GHSA-8843-m7mw-mxqm","Warn: Project is vulnerable to: PYSEC-2023-227 / GHSA-8ghj-p4vj-mr35","Warn: Project is vulnerable to: PYSEC-2022-10 / GHSA-8vj2-vxx3-667w","Warn: Project is vulnerable to: PYSEC-2021-36 / GHSA-8xjq-8fcg-g5hw","Warn: Project is vulnerable to: PYSEC-2021-42 / GHSA-95q3-8gr9-gm8w","Warn: Project is vulnerable to: PYSEC-2022-168 / GHSA-9j59-75qj-795w","Warn: Project is vulnerable to: PYSEC-2020-76 / GHSA-cqhg-xjhh-p8hf","Warn: Project is vulnerable to: PYSEC-2021-40 / GHSA-f4w8-cv6p-x6r5","Warn: Project is vulnerable to: PYSEC-2021-69 / GHSA-f5g8-5qq7-938w","Warn: Project is vulnerable to: PYSEC-2021-139 / GHSA-g6rj-rv7j-xwp4","Warn: Project is vulnerable to: PYSEC-2020-84 / GHSA-hj69-c76v-86wr","Warn: Project is vulnerable to: GHSA-j7hp-h8jx-5ppr","Warn: Project is vulnerable to: PYSEC-2019-110 / GHSA-j7mj-748x-7p78","Warn: Project is vulnerable to: GHSA-jgpv-4h4c-xhw3","Warn: Project is vulnerable to: PYSEC-2022-42979 / GHSA-m2vv-5vj5-2hm7","Warn: Project is vulnerable to: PYSEC-2021-37 / GHSA-mvg9-xffr-p774","Warn: Project is vulnerable to: PYSEC-2020-83 / GHSA-p49h-hjvm-jg3h","Warn: Project is vulnerable to: PYSEC-2022-8 / GHSA-pw3c-h7wp-cvhx","Warn: Project is vulnerable to: PYSEC-2021-93 / GHSA-q5hq-fp76-qmrc","Warn: Project is vulnerable to: PYSEC-2020-82 / GHSA-r7rm-8j6h-r933","Warn: Project is vulnerable to: PYSEC-2021-138 / GHSA-rwv7-3v45-hg29","Warn: Project is vulnerable to: PYSEC-2020-81 / GHSA-vcqg-3p29-xw73","Warn: Project is vulnerable to: PYSEC-2020-79 / GHSA-vj42-xq3r-hr3r","Warn: Project is vulnerable to: PYSEC-2021-70 / GHSA-vqcj-wrf2-7v73","Warn: Project is vulnerable to: PYSEC-2022-9 / GHSA-xrcv-f9gm-v42c","Warn: Project is vulnerable to: PYSEC-2021-317","Warn: Project is vulnerable to: PYSEC-2021-38","Warn: Project is vulnerable to: PYSEC-2021-39","Warn: Project is vulnerable to: PYSEC-2021-94","Warn: Project is vulnerable to: PYSEC-2023-175","Warn: Project is vulnerable to: PYSEC-2020-107 / GHSA-jjw5-xxj6-pcv5","Warn: Project is vulnerable to: PYSEC-2024-110 / GHSA-jw8x-6495-233v","Warn: Project is vulnerable to: PYSEC-2020-108","Warn: Project is vulnerable to: PYSEC-2018-34 / GHSA-2fc2-6r4j-p65h","Warn: Project is vulnerable to: PYSEC-2021-856 / GHSA-5545-2q6w-2gh6","Warn: Project is vulnerable to: PYSEC-2019-108 / GHSA-9fq2-x9r6-wfmf","Warn: Project is vulnerable to: PYSEC-2018-33 / GHSA-cw6w-4rcx-xphc","Warn: Project is vulnerable to: PYSEC-2021-857 / GHSA-f7c7-j99h-c22f","Warn: Project is vulnerable to: GHSA-fpfv-jqm9-f5jm","Warn: Project is vulnerable to: PYSEC-2017-1 / GHSA-frgw-fgh6-9g52","Warn: Project is vulnerable to: PYSEC-2023-102","Warn: Project is vulnerable to: PYSEC-2023-114"],"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}}]},"last_synced_at":"2025-08-15T12:31:37.252Z","repository_id":37244383,"created_at":"2025-08-15T12:31:37.252Z","updated_at":"2025-08-15T12:31:37.252Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":344872684,"owners_count":38342766,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-10-03T21:59:58.778Z","status":"online","status_checked_at":"2026-10-18T02:00:06.448Z","response_time":63,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["c","python","qiskit","quantum","quantum-circuit","quantum-computing","quantum-programming-language","rust","sdk"],"created_at":"2024-09-24T20:24:49.904Z","updated_at":"2026-10-18T22:30:08.297Z","avatar_url":"https://github.com/Qiskit.png","language":"Python","funding_links":[],"categories":[],"sub_categories":[],"readme":"# Qiskit\n\n[![License](https://img.shields.io/github/license/Qiskit/qiskit.svg?)](https://opensource.org/licenses/Apache-2.0) \u003c!--- long-description-skip-begin --\u003e\n[![Current Release](https://img.shields.io/github/release/Qiskit/qiskit.svg?logo=Qiskit)](https://github.com/Qiskit/qiskit/releases)\n[![Downloads](https://img.shields.io/pypi/dm/qiskit.svg)](https://pypi.org/project/qiskit/)\n[![Coverage Status](https://coveralls.io/repos/github/Qiskit/qiskit/badge.svg?branch=main)](https://coveralls.io/github/Qiskit/qiskit?branch=main)\n![PyPI - Python Version](https://img.shields.io/pypi/pyversions/qiskit)\n[![Minimum rustc 1.89](https://img.shields.io/badge/rustc-1.89+-blue.svg)](https://rust-lang.github.io/rfcs/2495-min-rust-version.html)\n[![Downloads](https://static.pepy.tech/badge/qiskit)](https://pepy.tech/project/qiskit)\u003c!--- long-description-skip-end --\u003e\n[![DOI](https://zenodo.org/badge/DOI/10.5281/zenodo.2583252.svg)](https://doi.org/10.5281/zenodo.2583252)\n\n**Qiskit** is an open-source SDK for working with quantum computers at the level of extended quantum circuits, operators, and primitives.\n\nThis library is the core component of Qiskit, which contains the building blocks for creating and working with quantum circuits, quantum operators, and primitive functions (Sampler and Estimator).\nIt also contains a transpiler that supports optimizing quantum circuits, and a quantum information toolbox for creating advanced operators.\n\nQiskit provides two public APIs: a Python API and a C API. The Python API is the primary interface and prior to Qiskit 2.0 was the only public API available\nfor Qiskit. The C API is designed to provide direct access to Qiskit's internal data model (which is written in Rust). The C API can be consumed as either a\nshared library (`libqiskit.so`) for standalone use, or from its embedding in the `qiskit` Python package [for writing Python extension modules](https://quantum.cloud.ibm.com/docs/guides/c-extension-for-python).\n\nFor more details on how to use Qiskit, refer to the documentation located here:\n\n\u003chttps://quantum.cloud.ibm.com/docs/\u003e\n\n\n## Installation\n\n### Python\n\nFor running Qiskit on Python we recommend installing Qiskit via ``pip``:\n\n```bash\npip install qiskit\n```\n\nPip will handle all dependencies automatically and you will always install the latest (and well-tested) version.\n\nTo install from source, follow the instructions in the [documentation](https://quantum.cloud.ibm.com/docs/guides/install-qiskit-source).\n\n### Standalone C library\n\nTo install Qiskit as a standalone C library the only option is currently to build Qiskit from source. This requires having the\n[Rust](https://rust-lang.org/) compiler installed.\nWe recommend installing [GNU Make](https://www.gnu.org/software/make/) to simplify the build process.\nWith these requirements installed you can run:\n\n```bash\nmake c\n```\n\nThis will compile the C library and put the `dist/c` directory in the root of the repository which will contain the shared library and C headers for\nthe library.\n\nYou can refer to the [documentation](https://quantum.cloud.ibm.com/docs/guides/install-c-api) on installing the C API for more details and how to\nuse the built library.\n\n## Create your first quantum program in Qiskit\n\nNow that Qiskit is installed, it's time to begin working with Qiskit. We will use the Python interface to demonstrate creating a quantum program.\nThe essential parts of a quantum program are:\n1. Define and build a quantum circuit that represents the quantum state\n2. Define the classical output by measurements or a set of observable operators\n3. Depending on the output, use the Sampler primitive to sample outcomes or the Estimator primitive to estimate expectation values.\n\nCreate an example quantum circuit using the `QuantumCircuit` class:\n\n```python\nimport numpy as np\nfrom qiskit import QuantumCircuit\n\n# 1. A quantum circuit for preparing the quantum state |000\u003e + i |111\u003e / √2\nqc = QuantumCircuit(3)\nqc.h(0)             # generate superposition\nqc.p(np.pi / 2, 0)  # add quantum phase\nqc.cx(0, 1)         # 0th-qubit-Controlled-NOT gate on 1st qubit\nqc.cx(0, 2)         # 0th-qubit-Controlled-NOT gate on 2nd qubit\n```\n\nThis simple example creates an entangled state known as a [GHZ state](https://en.wikipedia.org/wiki/Greenberger%E2%80%93Horne%E2%80%93Zeilinger_state) $(|000\\rangle + i|111\\rangle)/\\sqrt{2}$. It uses the standard quantum gates: Hadamard gate (`h`), Phase gate (`p`), and CNOT gate (`cx`). \n\nOnce you've made your first quantum circuit, choose which primitive you will use. Starting with the Sampler,\nwe use `measure_all(inplace=False)` to get a copy of the circuit in which all the qubits are measured:\n\n```python\n# 2. Add the classical output in the form of measurement of all qubits\nqc_measured = qc.measure_all(inplace=False)\n\n# 3. Execute using the Sampler primitive\nfrom qiskit.primitives import StatevectorSampler\nsampler = StatevectorSampler()\njob = sampler.run([qc_measured], shots=1000)\nresult = job.result()\nprint(f\" \u003e Counts: {result[0].data['meas'].get_counts()}\")\n```\nRunning this will give an outcome similar to `{'000': 497, '111': 503}` which is `000` 50% of the time and `111` 50% of the time up to statistical fluctuations.\nTo illustrate the power of the Estimator, we now use the quantum information toolbox to create the operator $XXY+XYX+YXX-YYY$ and pass it to the `run()` function, along with our quantum circuit. Note that the Estimator requires a circuit _**without**_ measurements, so we use the `qc` circuit we created earlier.\n\n```python\n# 2. Define the observable to be measured \nfrom qiskit.quantum_info import SparsePauliOp\noperator = SparsePauliOp.from_list([(\"XXY\", 1), (\"XYX\", 1), (\"YXX\", 1), (\"YYY\", -1)])\n\n# 3. Execute using the Estimator primitive\nfrom qiskit.primitives import StatevectorEstimator\nestimator = StatevectorEstimator()\njob = estimator.run([(qc, operator)], precision=1e-3)\nresult = job.result()\nprint(f\" \u003e Expectation values: {result[0].data.evs}\")\n```\n\nRunning this will give the outcome `4`. For fun, try to assign a value of +/- 1 to each single-qubit operator X and Y \nand see if you can achieve this outcome. (Spoiler alert: this is not possible!)\n\nUsing the Qiskit-provided `qiskit.primitives.StatevectorSampler` and `qiskit.primitives.StatevectorEstimator` will not take you very far.\nThe power of quantum computing cannot be simulated on classical computers and you need to use real quantum hardware to scale to larger quantum circuits.\nHowever, running a quantum circuit on hardware requires rewriting to the basis gates and connectivity of the quantum hardware.\nThe tool that does this is the [transpiler](https://quantum.cloud.ibm.com/docs/api/qiskit/transpiler), and Qiskit includes transpiler passes for synthesis, optimization, mapping, and scheduling.\nHowever, it also includes a default compiler, which works very well in most examples.\nThe following code will map the example circuit to the `basis_gates = [\"cz\", \"sx\", \"rz\"]` and a\nbidirectional linear chain of qubits $0 \\leftrightarrow 1 \\leftrightarrow 2$ with the\n`coupling_map = [[0, 1], [1, 0], [1, 2], [2, 1]]`.\n\n```python\nfrom qiskit import transpile\nfrom qiskit.transpiler import Target, CouplingMap\ntarget = Target.from_configuration(\n    basis_gates=[\"cz\", \"sx\", \"rz\"],\n    coupling_map=CouplingMap.from_line(3),\n)\nqc_transpiled = transpile(qc, target=target)\n```\n\n### Executing your code on real quantum hardware\n\nQiskit provides an abstraction layer that lets users run quantum circuits on hardware from any vendor that provides a compatible interface. \nThe best way to use Qiskit is with a runtime environment that provides optimized implementations of Sampler and Estimator for a given hardware platform. This runtime may involve using pre- and post-processing, such as optimized transpiler passes with error suppression, error mitigation, and, eventually, error correction built in. A runtime implements the `qiskit.primitives.BaseSamplerV2` and `qiskit.primitives.BaseEstimatorV2` interfaces. For example,\nsome packages that provide implementations of a runtime primitive are:\n\n* https://github.com/Qiskit/qiskit-ibm-runtime\n\nQiskit also provides a lower-level abstract interface for describing quantum backends. This interface, located in\n``qiskit.providers``, defines an abstract `BackendV2` class that providers can implement to represent their\nhardware or simulators to Qiskit. The backend class includes a common interface for executing circuits on the backends; however, in this interface each provider may perform different types of pre- and post-processing and return outcomes that are vendor-defined. Some examples of published provider packages that interface with real hardware are:\n\n* https://github.com/qiskit-community/qiskit-ionq\n* https://github.com/qiskit-community/qiskit-aqt-provider\n* https://github.com/qiskit-community/qiskit-braket-provider\n* https://github.com/qiskit-community/qiskit-quantinuum-provider\n* https://github.com/rigetti/qiskit-rigetti\n\n\u003c!-- This is not an exhaustive list, and if you maintain a provider package, please feel free to open a PR to add new providers --\u003e\n\nYou can refer to the documentation of these packages for further instructions\non how to get access and use these systems.\n\n## Contribution Guidelines\n\nIf you'd like to contribute to Qiskit, please take a look at our\n[contribution guidelines](CONTRIBUTING.md). By participating, you are expected to uphold our [code of conduct](CODE_OF_CONDUCT.md).\n\nWe use [GitHub issues](https://github.com/Qiskit/qiskit/issues) for tracking requests and bugs. Please\n[join the Qiskit Slack community](https://qisk.it/join-slack) for discussion, comments, and questions.\nFor questions related to running or using Qiskit, [Stack Overflow has a `qiskit`](https://stackoverflow.com/questions/tagged/qiskit).\nFor questions on quantum computing with Qiskit, use the `qiskit` tag in the [Quantum Computing Stack Exchange](https://quantumcomputing.stackexchange.com/questions/tagged/qiskit) (please, read first the [guidelines on how to ask](https://quantumcomputing.stackexchange.com/help/how-to-ask) in that forum).\n\n\n## Authors and Citation\n\nQiskit is the work of [many people](https://github.com/Qiskit/qiskit/graphs/contributors) who contribute\nto the project at different levels. If you use Qiskit, please cite as per the included [BibTeX file](CITATION.bib).\n\n## Changelog and Release Notes\n\nThe changelog for a particular release is dynamically generated and gets\nwritten to the release page on GitHub for each release. For example, you can\nfind the page for the `1.2.0` release here:\n\n\u003chttps://github.com/Qiskit/qiskit/releases/tag/1.2.0\u003e\n\nThe changelog for the current release can be found in the releases tab:\n[![Releases](https://img.shields.io/github/release/Qiskit/qiskit.svg?style=flat\u0026label=)](https://github.com/Qiskit/qiskit/releases)\nThe changelog provides a quick overview of notable changes for a given\nrelease.\n\nAdditionally, as part of each release, detailed release notes are written to\ndocument in detail what has changed. This includes any documentation on\npotential breaking changes on upgrade, and new features. See [all release notes\nhere](https://quantum.cloud.ibm.com/docs/api/qiskit/release-notes).\n\n## Acknowledgements\n\nWe acknowledge partial support for Qiskit development from the DOE Office of Science National Quantum Information Science Research Centers, Co-design Center for Quantum Advantage (C2QA) under contract number DE-SC0012704.\n\n## License\n\n[Apache License 2.0](LICENSE.txt)\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fqiskit%2Fqiskit","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fqiskit%2Fqiskit","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fqiskit%2Fqiskit/lists"}