{"id":33251850,"url":"https://github.com/sarus-tech/dp-xgboost","last_synced_at":"2025-11-21T17:01:56.803Z","repository":{"id":57423898,"uuid":"417440283","full_name":"sarus-tech/dp-xgboost","owner":"sarus-tech","description":null,"archived":false,"fork":false,"pushed_at":"2024-01-10T16:32:58.000Z","size":2373,"stargazers_count":24,"open_issues_count":4,"forks_count":9,"subscribers_count":4,"default_branch":"master","last_synced_at":"2025-09-05T12:57:07.557Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":null,"language":"C++","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/sarus-tech.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":"CITATION","codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null}},"created_at":"2021-10-15T09:20:10.000Z","updated_at":"2025-08-05T18:06:35.000Z","dependencies_parsed_at":"2024-03-09T03:33:33.765Z","dependency_job_id":"e63f0d2d-8c4f-4bd0-b0cb-f13090eabdc4","html_url":"https://github.com/sarus-tech/dp-xgboost","commit_stats":{"total_commits":44,"total_committers":3,"mean_commits":"14.666666666666666","dds":0.09090909090909094,"last_synced_commit":"9deb88808fab5a3782acaeb04bf889c9454da87c"},"previous_names":[],"tags_count":23,"template":false,"template_full_name":null,"purl":"pkg:github/sarus-tech/dp-xgboost","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/sarus-tech%2Fdp-xgboost","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/sarus-tech%2Fdp-xgboost/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/sarus-tech%2Fdp-xgboost/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/sarus-tech%2Fdp-xgboost/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/sarus-tech","download_url":"https://codeload.github.com/sarus-tech/dp-xgboost/tar.gz/refs/heads/master","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/sarus-tech%2Fdp-xgboost/sbom","scorecard":{"id":800943,"data":{"date":"2025-08-11","repo":{"name":"github.com/sarus-tech/dp-xgboost","commit":"48e901fc9d4642a10015fbd972630cc589590eca"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":2.5,"checks":[{"name":"Code-Review","score":0,"reason":"Found 1/29 approved changesets -- score normalized to 0","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Maintained","score":0,"reason":"0 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Warn: no topLevel permission defined: .github/workflows/main.yml:1","Warn: no topLevel permission defined: .github/workflows/python-publish.yml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Security-Policy","score":0,"reason":"security policy file not detected","details":["Warn: no security policy file detected","Warn: no security file to analyze","Warn: no security file to analyze","Warn: no security file to analyze"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: Apache License 2.0: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Branch-Protection","score":0,"reason":"branch protection not enabled on development/release branches","details":["Warn: branch protection not enabled for branch 'master'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 2 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/main.yml:19: update your workflow using https://app.stepsecurity.io/secureworkflow/sarus-tech/dp-xgboost/main.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/main.yml:47: update your workflow using https://app.stepsecurity.io/secureworkflow/sarus-tech/dp-xgboost/main.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/main.yml:74: update your workflow using https://app.stepsecurity.io/secureworkflow/sarus-tech/dp-xgboost/main.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/main.yml:80: update your workflow using https://app.stepsecurity.io/secureworkflow/sarus-tech/dp-xgboost/main.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/main.yml:117: update your workflow using https://app.stepsecurity.io/secureworkflow/sarus-tech/dp-xgboost/main.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/main.yml:121: update your workflow using https://app.stepsecurity.io/secureworkflow/sarus-tech/dp-xgboost/main.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/main.yml:126: update your workflow using https://app.stepsecurity.io/secureworkflow/sarus-tech/dp-xgboost/main.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/main.yml:136: update your workflow using https://app.stepsecurity.io/secureworkflow/sarus-tech/dp-xgboost/main.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/python-publish.yml:77: update your workflow using https://app.stepsecurity.io/secureworkflow/sarus-tech/dp-xgboost/python-publish.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/python-publish.yml:81: update your workflow using https://app.stepsecurity.io/secureworkflow/sarus-tech/dp-xgboost/python-publish.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/python-publish.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/sarus-tech/dp-xgboost/python-publish.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/python-publish.yml:49: update your workflow using https://app.stepsecurity.io/secureworkflow/sarus-tech/dp-xgboost/python-publish.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/python-publish.yml:53: update your workflow using https://app.stepsecurity.io/secureworkflow/sarus-tech/dp-xgboost/python-publish.yml/master?enable=pin","Warn: containerImage not pinned by hash: jvm-packages/dev/Dockerfile:19: pin your Docker image by updating centos:6 to centos:6@sha256:a93df2e96e07f56ea48f215425c6f1673ab922927894595bb5c0ee4c5a955133","Warn: containerImage not pinned by hash: sarus-docker/Dockerfile:4: pin your Docker image by updating python:3.6 to python:3.6@sha256:f8652afaf88c25f0d22354d547d892591067aa4026a7fa9a6819df9f300af6fc","Warn: containerImage not pinned by hash: tests/ci_build/Dockerfile.aarch64:1: pin your Docker image by updating quay.io/pypa/manylinux2014_aarch64 to quay.io/pypa/manylinux2014_aarch64@sha256:39f402af1e44774ea8de8f36fd37860eee5b55b7a46a1d56b0db698e206ffa0f","Warn: containerImage not pinned by hash: tests/ci_build/Dockerfile.auditwheel_x86_64:1: pin your Docker image by updating quay.io/pypa/manylinux2010_x86_64 to quay.io/pypa/manylinux2010_x86_64@sha256:3b5eb5ab9bc73b93740ae4eda9962078951cd3bb7efe837b770360e78c7366fb","Warn: containerImage not pinned by hash: tests/ci_build/Dockerfile.clang_tidy:2","Warn: containerImage not pinned by hash: tests/ci_build/Dockerfile.cpu:1: pin your Docker image by updating ubuntu:18.04 to ubuntu:18.04@sha256:152dc042452c496007f07ca9127571cb9c29697f42acbfad72324b2bb2e43c98","Warn: containerImage not pinned by hash: tests/ci_build/Dockerfile.gpu:2","Warn: containerImage not pinned by hash: tests/ci_build/Dockerfile.gpu_build:2","Warn: containerImage not pinned by hash: tests/ci_build/Dockerfile.gpu_build_centos6:2","Warn: containerImage not pinned by hash: tests/ci_build/Dockerfile.gpu_build_r_centos6:2","Warn: containerImage not pinned by hash: tests/ci_build/Dockerfile.gpu_jvm:2","Warn: containerImage not pinned by hash: tests/ci_build/Dockerfile.jvm:1: pin your Docker image by updating centos:6 to centos:6@sha256:a93df2e96e07f56ea48f215425c6f1673ab922927894595bb5c0ee4c5a955133","Warn: containerImage not pinned by hash: tests/ci_build/Dockerfile.jvm_cross:1: pin your Docker image by updating ubuntu:18.04 to ubuntu:18.04@sha256:152dc042452c496007f07ca9127571cb9c29697f42acbfad72324b2bb2e43c98","Warn: containerImage not pinned by hash: tests/ci_build/Dockerfile.jvm_gpu_build:2","Warn: containerImage not pinned by hash: tests/ci_build/Dockerfile.rmm:2","Warn: containerImage not pinned by hash: tests/ci_build/Dockerfile.s390x:1: pin your Docker image by updating s390x/ubuntu:20.04 to s390x/ubuntu:20.04@sha256:221f5f8e28d896556d0e55605cd6936450e6231544e9d83d687beae2d0e71afd","Warn: downloadThenRun not pinned by hash: jvm-packages/dev/Dockerfile:22-37","Warn: downloadThenRun not pinned by hash: jvm-packages/dev/Dockerfile:22-37","Warn: pipCommand not pinned by hash: jvm-packages/dev/Dockerfile:47-48","Warn: pipCommand not pinned by hash: sarus-docker/Dockerfile:19","Warn: pipCommand not pinned by hash: sarus-docker/Dockerfile:34-35","Warn: downloadThenRun not pinned by hash: tests/ci_build/Dockerfile.aarch64:6-14","Warn: downloadThenRun not pinned by hash: tests/ci_build/Dockerfile.clang_tidy:9-18","Warn: pipCommand not pinned by hash: tests/ci_build/Dockerfile.clang_tidy:26-27","Warn: downloadThenRun not pinned by hash: tests/ci_build/Dockerfile.cpu:8-16","Warn: downloadThenRun not pinned by hash: tests/ci_build/Dockerfile.cpu:8-16","Warn: downloadThenRun not pinned by hash: tests/ci_build/Dockerfile.gpu:10-15","Warn: downloadThenRun not pinned by hash: tests/ci_build/Dockerfile.gpu_build:10-18","Warn: downloadThenRun not pinned by hash: tests/ci_build/Dockerfile.gpu_build:10-18","Warn: downloadThenRun not pinned by hash: tests/ci_build/Dockerfile.gpu_build_centos6:12-34","Warn: pipCommand not pinned by hash: tests/ci_build/Dockerfile.gpu_build_centos6:12-34","Warn: downloadThenRun not pinned by hash: tests/ci_build/Dockerfile.gpu_build_centos6:12-34","Warn: downloadThenRun not pinned by hash: tests/ci_build/Dockerfile.gpu_build_r_centos6:38-97","Warn: pipCommand not pinned by hash: tests/ci_build/Dockerfile.gpu_build_r_centos6:38-97","Warn: downloadThenRun not pinned by hash: tests/ci_build/Dockerfile.gpu_build_r_centos6:38-97","Warn: downloadThenRun not pinned by hash: tests/ci_build/Dockerfile.gpu_jvm:11-28","Warn: pipCommand not pinned by hash: tests/ci_build/Dockerfile.gpu_jvm:11-28","Warn: pipCommand not pinned by hash: tests/ci_build/Dockerfile.gpu_jvm:33-34","Warn: downloadThenRun not pinned by hash: tests/ci_build/Dockerfile.jvm:8-26","Warn: downloadThenRun not pinned by hash: tests/ci_build/Dockerfile.jvm:8-26","Warn: pipCommand not pinned by hash: tests/ci_build/Dockerfile.jvm:34-35","Warn: downloadThenRun not pinned by hash: tests/ci_build/Dockerfile.jvm_cross:9-26","Warn: pipCommand not pinned by hash: tests/ci_build/Dockerfile.jvm_cross:9-26","Warn: pipCommand not pinned by hash: tests/ci_build/Dockerfile.jvm_cross:31-32","Warn: downloadThenRun not pinned by hash: tests/ci_build/Dockerfile.jvm_gpu_build:12-30","Warn: downloadThenRun not pinned by hash: tests/ci_build/Dockerfile.jvm_gpu_build:12-30","Warn: pipCommand not pinned by hash: tests/ci_build/Dockerfile.jvm_gpu_build:48-49","Warn: downloadThenRun not pinned by hash: tests/ci_build/Dockerfile.rmm:10-18","Warn: downloadThenRun not pinned by hash: tests/ci_build/Dockerfile.rmm:10-18","Warn: pipCommand not pinned by hash: tests/ci_build/Dockerfile.s390x:8-12","Warn: pipCommand not pinned by hash: tests/ci_build/test_python.sh:18","Warn: pipCommand not pinned by hash: tests/ci_build/test_python.sh:23","Warn: pipCommand not pinned by hash: tests/travis/run_test.sh:13","Warn: pipCommand not pinned by hash: tests/travis/run_test.sh:61","Warn: pipCommand not pinned by hash: tests/travis/run_test.sh:105","Warn: downloadThenRun not pinned by hash: tests/travis/setup.sh:15","Warn: pipCommand not pinned by hash: tests/travis/setup.sh:24","Warn: pipCommand not pinned by hash: .github/workflows/main.yml:132","Warn: pipCommand not pinned by hash: .github/workflows/main.yml:133","Warn: pipCommand not pinned by hash: .github/workflows/python-publish.yml:36","Warn: pipCommand not pinned by hash: .github/workflows/python-publish.yml:64","Warn: pipCommand not pinned by hash: .github/workflows/python-publish.yml:68","Warn: pipCommand not pinned by hash: .github/workflows/python-publish.yml:88","Info:   0 out of  11 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of   2 third-party GitHubAction dependencies pinned","Info:   0 out of  16 containerImage dependencies pinned","Info:   0 out of  22 downloadThenRun dependencies pinned","Info:   0 out of  25 pipCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Vulnerabilities","score":0,"reason":"89 existing vulnerabilities detected","details":["Warn: Project is vulnerable to: PYSEC-2018-34 / GHSA-2fc2-6r4j-p65h","Warn: Project is vulnerable to: PYSEC-2021-856 / GHSA-5545-2q6w-2gh6","Warn: Project is vulnerable to: PYSEC-2019-108 / GHSA-9fq2-x9r6-wfmf","Warn: Project is vulnerable to: PYSEC-2018-33 / GHSA-cw6w-4rcx-xphc","Warn: Project is vulnerable to: PYSEC-2021-857 / GHSA-f7c7-j99h-c22f","Warn: Project is vulnerable to: GHSA-fpfv-jqm9-f5jm","Warn: Project is vulnerable to: PYSEC-2017-1 / GHSA-frgw-fgh6-9g52","Warn: Project is vulnerable to: GHSA-4jrv-ppp4-jm57","Warn: Project is vulnerable to: GHSA-5mg8-w23w-74h3","Warn: Project is vulnerable to: GHSA-7g45-4rm6-3mm3","Warn: Project is vulnerable to: GHSA-mvr2-9pj6-7w5j","Warn: Project is vulnerable to: GHSA-4gg5-vx3j-xwc7","Warn: Project is vulnerable to: GHSA-735f-pc8j-v9w8","Warn: Project is vulnerable to: GHSA-77rm-9x9h-xj3g","Warn: Project is vulnerable to: GHSA-g5ww-5jh7-63cx","Warn: Project is vulnerable to: GHSA-h4h5-3hr4-j3g2","Warn: Project is vulnerable to: GHSA-wrvw-hg22-4m67","Warn: Project is vulnerable to: GHSA-3vrc-rrpw-r5pw","Warn: Project is vulnerable to: GHSA-q446-82vq-w674","Warn: Project is vulnerable to: GHSA-5m48-vr54-vmh3","Warn: Project is vulnerable to: GHSA-6phf-73q6-gh87","Warn: Project is vulnerable to: GHSA-wxr5-93ph-8wr9","Warn: Project is vulnerable to: GHSA-pvp8-3xj6-8c6x","Warn: Project is vulnerable to: GHSA-3832-9276-x7gf","Warn: Project is vulnerable to: GHSA-78wr-2p64-hpwj","Warn: Project is vulnerable to: GHSA-gwrp-pvrq-jmwv","Warn: Project is vulnerable to: GHSA-j288-q9x7-2f5v","Warn: Project is vulnerable to: GHSA-cgp8-4m63-fhh5","Warn: Project is vulnerable to: GHSA-5mcr-gq6c-3hq2","Warn: Project is vulnerable to: GHSA-7vpq-g998-qpv7","Warn: Project is vulnerable to: GHSA-9vjp-v76f-g363","Warn: Project is vulnerable to: GHSA-cqqj-4p63-rrmm","Warn: Project is vulnerable to: GHSA-f256-j965-7f32","Warn: Project is vulnerable to: GHSA-grg4-wf29-r9vv","Warn: Project is vulnerable to: GHSA-p2v9-g2qv-p635","Warn: Project is vulnerable to: GHSA-wm47-8v5p-wjpj","Warn: Project is vulnerable to: GHSA-wx5j-54mm-rqqq","Warn: Project is vulnerable to: GHSA-xfv3-rrfm-f2rv","Warn: Project is vulnerable to: GHSA-p979-4mfw-53vg","Warn: Project is vulnerable to: GHSA-2qrg-x229-3v8q","Warn: Project is vulnerable to: GHSA-65fg-84f6-3jq3","Warn: Project is vulnerable to: GHSA-f7vh-qwp3-x37m","Warn: Project is vulnerable to: GHSA-fp5r-v3w9-4333","Warn: Project is vulnerable to: GHSA-w9p3-5cr8-m3jj","Warn: Project is vulnerable to: GHSA-r7pg-v2c8-mfg3","Warn: Project is vulnerable to: GHSA-rhrv-645h-fjfh","Warn: Project is vulnerable to: GHSA-4g9r-vxhx-9pgx","Warn: Project is vulnerable to: GHSA-7hfm-57qf-j43q","Warn: Project is vulnerable to: GHSA-crv7-7245-f45f","Warn: Project is vulnerable to: GHSA-mc84-pj99-q6hh","Warn: Project is vulnerable to: GHSA-xqfj-vm6h-2x34","Warn: Project is vulnerable to: GHSA-8wm5-8h9c-47pc","Warn: Project is vulnerable to: GHSA-f5fw-25gw-5m92","Warn: Project is vulnerable to: GHSA-f8vc-wfc8-hxqh","Warn: Project is vulnerable to: GHSA-gx2c-fvhc-ph4j","Warn: Project is vulnerable to: GHSA-h24p-qwf4-84q8","Warn: Project is vulnerable to: GHSA-mf7c-35mq-75pj","Warn: Project is vulnerable to: GHSA-rmpj-7c96-mrg8","Warn: Project is vulnerable to: GHSA-2x83-r56g-cv47","Warn: Project is vulnerable to: GHSA-7r82-7xv7-xcpj","Warn: Project is vulnerable to: GHSA-cfh5-3ghh-wfjx","Warn: Project is vulnerable to: GHSA-fmj5-wv96-r2ch","Warn: Project is vulnerable to: GHSA-2hw2-62cp-p9p7","Warn: Project is vulnerable to: GHSA-7286-pgfv-vxvh","Warn: Project is vulnerable to: GHSA-7cwj-j333-x7f7","Warn: Project is vulnerable to: GHSA-ccqf-c5hq-77mp","Warn: Project is vulnerable to: GHSA-c27h-mcmw-48hv","Warn: Project is vulnerable to: GHSA-r6j9-8759-g62w","Warn: Project is vulnerable to: GHSA-56h3-78gp-v83r","Warn: Project is vulnerable to: GHSA-7rf3-mqpx-h7xg","Warn: Project is vulnerable to: GHSA-grr4-wv38-f68w","Warn: Project is vulnerable to: GHSA-q6g2-g7f3-rr83","Warn: Project is vulnerable to: GHSA-x27m-9w8j-5vcw","Warn: Project is vulnerable to: GHSA-55g7-9cwv-5qfv","Warn: Project is vulnerable to: GHSA-fjpj-2g6w-x25r","Warn: Project is vulnerable to: GHSA-pqr6-cmr2-h8hf","Warn: Project is vulnerable to: GHSA-qcwq-55hx-v3vh","Warn: Project is vulnerable to: GHSA-334p-wv2m-w3vp","Warn: Project is vulnerable to: GHSA-7j4h-8wpf-rqfh","Warn: Project is vulnerable to: GHSA-h65f-jvqw-m9fj","Warn: Project is vulnerable to: GHSA-vmqm-g3vh-847m","Warn: Project is vulnerable to: GHSA-w4jq-qh47-hvjq","Warn: Project is vulnerable to: GHSA-6p56-wp2h-9hxr","Warn: Project is vulnerable to: PYSEC-2020-73","Warn: Project is vulnerable to: PYSEC-2020-107 / GHSA-jjw5-xxj6-pcv5","Warn: Project is vulnerable to: PYSEC-2024-110 / GHSA-jw8x-6495-233v","Warn: Project is vulnerable to: PYSEC-2020-108","Warn: Project is vulnerable to: PYSEC-2023-102","Warn: Project is vulnerable to: PYSEC-2023-114"],"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}}]},"last_synced_at":"2025-08-23T10:28:02.312Z","repository_id":57423898,"created_at":"2025-08-23T10:28:02.312Z","updated_at":"2025-08-23T10:28:02.312Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":285655011,"owners_count":27209077,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","status":"online","status_checked_at":"2025-11-21T02:00:06.175Z","response_time":61,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":[],"created_at":"2025-11-17T00:00:37.461Z","updated_at":"2025-11-21T17:01:56.798Z","avatar_url":"https://github.com/sarus-tech.png","language":"C++","funding_links":[],"categories":["4. Code","Code and Projects"],"sub_categories":["2.4 Differential Privacy in CCS, S\u0026P, NDSS, USENIX, Infocom from 2015-2019 (some of them are from 2020)"],"readme":"\u003cimg src=logo-dp-xgboost.svg width=500/\u003e \n\n[![DP-XGBoost-CI](https://github.com/sarus-tech/dp-xgboost/workflows/DP-XGBoost-CI/badge.svg?branch=master)](https://github.com/sarus-tech/dp-xgboost/actions)\n[![Publish-Python-Package](https://github.com/sarus-tech/dp-xgboost/workflows/Publish-Python-Package/badge.svg?branch=master)](https://github.com/sarus-tech/dp-xgboost/actions)\n![PyPI](https://img.shields.io/pypi/v/dp-xgboost)\n![PyPI - Python Version](https://img.shields.io/pypi/pyversions/dp-xgboost)\n![Twitter Follow](https://img.shields.io/twitter/follow/Sarus_tech?style=social)\n\n# What is Sarus DP-XGBoost?\n\nThis is a fork of [XGBoost](https://github.com/dmlc/xgboost) that aims at adding differential-privacy to gradient boosted trees.\n\nA detailed explanation of the theory and methods used can be found in:\n[Grislain, Nicolas and Joan Gonzalvez. “DP-XGBoost: Private Machine Learning at Scale.” (2021).](https://arxiv.org/abs/2110.12770).\n\n# Quick Start\n\nYou can start using `dp-xgboost` with the [following notebook](https://colab.research.google.com/github/sarus-tech/dp-xgboost/blob/master/sarus/python/DP_XGBoost_Getting_Started.ipynb).\nOther Python examples which build a DP model are given in `sarus/python/`.\n\n# Installing Sarus DP-XGBoost\n\nTo install DP-XGBoost simply run:\n`pip install dp-xgboost`\n\n# Usage\n\nPython examples which build a DP model are given in `sarus/python/`. \n\nThe main parameters involved in DP learning are: \n- `tree_method` which must be set to `approxDP` to use Sarus XGBoost DP tree learning. \n- `dp_epsilon_per_tree`: the privacy budget of a single tree.\n- `min_child_weight`: the minimum weight needed to construct a leaf, this influences the DP noise.\n- `subsample`: the fraction of the dataset randomly sampled to each tree, subsampling improve the privacy.\n- `num_boost_rounds`: the number of trees built. \n\nThe privacy queries used during training are stored in the model and accessible via \n`booster.save_model()`. \n\n# Privacy consumption \n\nNote that the total privacy consumption of the boosted trees is given by:\n\n$$n \\log{ \\left( 1 + \\gamma(e^{\\epsilon} - 1) \\right) }$$\n\nWhere $n$ is the number of trees, $\\gamma$ the subsample fraction (between 0 and 1), and $\\epsilon$\nis the budget per tree. You can refer to our explaining article in `doc/sarus` for more details on privacy consumption. \n\n# Differential Privacy in the C++ library\n\nDP is added at three levels in the XGBoost C++ shared library (under the `src` repo): to construct sketches (with a histogram query), for split selection (with an exponential mech), and for leaf values (with a Laplace mechanism). The mechanisms are located in\n`include/xgboost/mechanisms.h`. \n\nRelevant classes are in the `src/tree/updater_histmaker.cc` file and especially the `DPHistMaker` class which is the DP tree updater called when setting `approxDP` as `tree_method` param in XGBoost. \n\n# Building for the JVM \n\nTo use with Spark, please follow https://xgboost.readthedocs.io/en/latest/jvm/xgboost4j_spark_tutorial.html. \n\n- Needed: Java JDK 1.8, Spark 2.12, Maven 3\n- Set the JAVA_HOME env variable first:\n`export JAVA_HOME=/Library/Java/JavaVirtualMachines/jdk1.8.0_221.jdk/Contents/Home/` \n- In the `jvm-packages` folder run `mvn package install -DskipTests -Dmaven.test.skip=true`\n\nThis should build the jars `xgboost4j` and `xgboost4j-spark` which will then be passed to\n`spark-submit`. The `sarus/spark` folder contains an example of Spark project in Scala with a POM file that should compile and launch Sarus XGBoost with 2 workers.\n\n# Developer guide\n\n1. Get the submodules (s.a. dmlc)\n\n ```shell\n git submodule sync\n git submodule update --init --recursive\n ```\n\n2. (Optional) Install prerequisites (s.a. `cmake`, `g++`, `libomp`\n3. Build\n\n ```shell\n mkdir build\n cd build\n cmake ..\n ```\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fsarus-tech%2Fdp-xgboost","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fsarus-tech%2Fdp-xgboost","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fsarus-tech%2Fdp-xgboost/lists"}