{"id":13537836,"url":"https://github.com/statamic/cms","last_synced_at":"2026-04-13T23:06:11.737Z","repository":{"id":37260648,"uuid":"111562942","full_name":"statamic/cms","owner":"statamic","description":"The core Laravel CMS Composer package","archived":false,"fork":false,"pushed_at":"2026-04-07T20:43:29.000Z","size":74112,"stargazers_count":4775,"open_issues_count":296,"forks_count":617,"subscribers_count":30,"default_branch":"6.x","last_synced_at":"2026-04-07T22:32:36.854Z","etag":null,"topics":["api-rest","cms","composer-package","content-management-system","flat-file-cms","flatfile","flatfilecms","graphql","headless","jamstack","laravel","laravel-cms","laravel-package","php","php8","ssg","statamic","vuejs"],"latest_commit_sha":null,"homepage":"https://statamic.com","language":"PHP","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"other","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/statamic.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":"CONTRIBUTING.md","funding":".github/FUNDING.yml","license":"LICENSE.md","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":"SECURITY.md","support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null},"funding":{"github":"statamic"}},"created_at":"2017-11-21T14:56:36.000Z","updated_at":"2026-04-07T20:41:35.000Z","dependencies_parsed_at":"2026-01-16T11:10:26.264Z","dependency_job_id":null,"html_url":"https://github.com/statamic/cms","commit_stats":{"total_commits":10847,"total_committers":281,"mean_commits":38.60142348754449,"dds":"0.49313174149534433","last_synced_commit":"74387f0ca0df9e1a0f42c519f751a1c9cbcdac3a"},"previous_names":[],"tags_count":551,"template":false,"template_full_name":null,"purl":"pkg:github/statamic/cms","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/statamic%2Fcms","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/statamic%2Fcms/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/statamic%2Fcms/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/statamic%2Fcms/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/statamic","download_url":"https://codeload.github.com/statamic/cms/tar.gz/refs/heads/6.x","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/statamic%2Fcms/sbom","scorecard":{"id":390024,"data":{"date":"2025-08-11","repo":{"name":"github.com/statamic/cms","commit":"14fe78d2831d7859c8a641944f98f42f9142884d"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":3.9,"checks":[{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Code-Review","score":7,"reason":"Found 23/30 approved changesets -- score normalized to 7","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Maintained","score":10,"reason":"30 commit(s) and 19 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Dangerous-Workflow","score":-1,"reason":"no workflows found","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Token-Permissions","score":-1,"reason":"No tokens found","details":null,"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"License","score":9,"reason":"license file detected","details":["Info: project has a license file: LICENSE.md:0","Warn: project license file does not contain an FSF or OSI license."],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Security-Policy","score":0,"reason":"security policy file not detected","details":["Warn: no security policy file detected","Warn: no security file to analyze","Warn: no security file to analyze","Warn: no security file to analyze"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Pinned-Dependencies","score":-1,"reason":"no dependencies found","details":null,"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Signed-Releases","score":0,"reason":"Project has not signed or included provenance with any releases.","details":["Warn: release artifact v5.63.0 not signed: https://api.github.com/repos/statamic/cms/releases/238073815","Warn: release artifact v5.62.0 not signed: https://api.github.com/repos/statamic/cms/releases/237513561","Warn: release artifact v5.61.0 not signed: https://api.github.com/repos/statamic/cms/releases/235243817","Warn: release artifact v5.60.0 not signed: https://api.github.com/repos/statamic/cms/releases/232609599","Warn: release artifact v5.59.0 not signed: https://api.github.com/repos/statamic/cms/releases/231599091","Warn: release artifact v5.63.0 does not have provenance: https://api.github.com/repos/statamic/cms/releases/238073815","Warn: release artifact v5.62.0 does not have provenance: https://api.github.com/repos/statamic/cms/releases/237513561","Warn: release artifact v5.61.0 does not have provenance: https://api.github.com/repos/statamic/cms/releases/235243817","Warn: release artifact v5.60.0 does not have provenance: https://api.github.com/repos/statamic/cms/releases/232609599","Warn: release artifact v5.59.0 does not have provenance: https://api.github.com/repos/statamic/cms/releases/231599091"],"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 26 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}},{"name":"Vulnerabilities","score":0,"reason":"12 existing vulnerabilities detected","details":["Warn: Project is vulnerable to: GHSA-968p-4wvh-cqc8","Warn: Project is vulnerable to: GHSA-v6h2-p8h4-qcjw","Warn: Project is vulnerable to: GHSA-3xgq-45jj-v275","Warn: Project is vulnerable to: GHSA-67mh-4wv8-2f99","Warn: Project is vulnerable to: GHSA-952p-6rrq-rcjv","Warn: Project is vulnerable to: GHSA-vg6x-rcgg-rjx6","Warn: Project is vulnerable to: GHSA-x574-m823-4x7w","Warn: Project is vulnerable to: GHSA-4r4m-qw57-chr8","Warn: Project is vulnerable to: GHSA-xcj6-pq6g-qj4x","Warn: Project is vulnerable to: GHSA-356w-63v5-8wf4","Warn: Project is vulnerable to: GHSA-859w-5945-r5v3","Warn: Project is vulnerable to: GHSA-5j4c-8p2g-v4jx"],"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}}]},"last_synced_at":"2025-08-18T17:35:08.102Z","repository_id":37260648,"created_at":"2025-08-18T17:35:08.103Z","updated_at":"2025-08-18T17:35:08.103Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":31774550,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-04-13T20:17:16.280Z","status":"ssl_error","status_checked_at":"2026-04-13T20:17:08.216Z","response_time":93,"last_error":"SSL_read: unexpected eof while reading","robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":false,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["api-rest","cms","composer-package","content-management-system","flat-file-cms","flatfile","flatfilecms","graphql","headless","jamstack","laravel","laravel-cms","laravel-package","php","php8","ssg","statamic","vuejs"],"created_at":"2024-08-01T09:01:04.154Z","updated_at":"2026-04-13T23:06:11.711Z","avatar_url":"https://github.com/statamic.png","language":"PHP","readme":"\u003cp align=\"center\"\u003e\n\u003cpicture\u003e\n    \u003csource srcset=\"https://statamic.com/assets/branding/squircle/statamic-logo-lime-white.svg\" media=\"(prefers-color-scheme: dark)\"\u003e\n    \u003cimg align=\"center\" width=\"350\" alt=\"Statamic Logo\" src=\"https://statamic.com/assets/branding/squircle/statamic-logo-lime.svg\"\u003e\n\u003c/picture\u003e\n\u003c/p\u003e\n\n## About Statamic\n\nStatamic is the flat-first, Laravel + Git powered CMS designed for building beautiful, easy to manage websites.\n\n\u003e [!NOTE]\n\u003e This repository contains the code for the core Statamic Composer package, to be installed into an existing Laravel application. \n\u003e \n\u003e The [application repository][app-repo] is where you can find a Laravel application preconfigured with Statamic, which is used when creating a new project via the Statamic CLI tool.\n\n## Learning Statamic\n\nStatamic has extensive [documentation][docs]. We dedicate a significant amount of time and energy every day to improving them, so if something is unclear, feel free to open issues for anything you find confusing or incomplete. We are happy to consider anything you feel will make the docs and CMS better.\n\n## Support\n\nWe provide official developer support on [Statamic Pro](https://statamic.com/pricing) projects. Community-driven support is available on [GitHub Discussions](https://github.com/statamic/cms/discussions) and in [Discord][discord].\n\n\n## Contributing\n\nThank you for considering contributing to Statamic! We simply ask that you review the [contribution guide][contribution] before you open issues or send pull requests.\n\n\n## Code of Conduct\n\nIn order to ensure that the Statamic community is welcoming to all and generally a rad place to belong, please review and abide by the [Code of Conduct](https://github.com/statamic/cms/wiki/Code-of-Conduct).\n\n\n## Important Links\n\n- [Statamic Main Site](https://statamic.com)\n- [Statamic Documentation][docs]\n- [Statamic Application Repo][app-repo]\n- [Statamic Migrator](https://github.com/statamic/migrator)\n- [Statamic Discord][discord]\n\n[docs]: https://statamic.dev/\n[discord]: https://statamic.com/discord\n[contribution]: https://github.com/statamic/cms/blob/master/CONTRIBUTING.md\n[app-repo]: https://github.com/statamic/statamic\n","funding_links":["https://github.com/sponsors/statamic"],"categories":["Code of Conduct","PHP","后端开发框架及项目"],"sub_categories":["PHP开发"],"project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fstatamic%2Fcms","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fstatamic%2Fcms","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fstatamic%2Fcms/lists"}