{"id":13598452,"url":"https://github.com/surmon-china/nodepress","last_synced_at":"2026-03-17T08:16:50.153Z","repository":{"id":37706521,"uuid":"51637951","full_name":"surmon-china/nodepress","owner":"surmon-china","description":"🟢 A RESTful API service for https://surmon.me blog, built with @nestjs.","archived":false,"fork":false,"pushed_at":"2026-02-28T20:01:41.000Z","size":58970,"stargazers_count":1515,"open_issues_count":9,"forks_count":308,"subscribers_count":28,"default_branch":"main","last_synced_at":"2026-02-28T23:06:25.244Z","etag":null,"topics":["blog","blog-api","blog-engine","cms","cms-framework","express","jwt-token","mongodb","mongoose","nestjs","nestjs-blog","nestjs-cms","nestjs-webhook","nodejs","nodejs-blog","nodejs-cms","nodejs-typescript","nodepress","restful-api","typescript"],"latest_commit_sha":null,"homepage":"https://github.surmon.me/nodepress","language":"TypeScript","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/surmon-china.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null},"funding":{"github":"surmon-china","custom":["https://paypal.me/surmon","https://surmon.me/sponsor"]}},"created_at":"2016-02-13T08:16:02.000Z","updated_at":"2026-02-28T20:00:49.000Z","dependencies_parsed_at":"2023-11-27T22:25:39.338Z","dependency_job_id":"3a733225-52cc-466f-b0fc-20009b0ab191","html_url":"https://github.com/surmon-china/nodepress","commit_stats":{"total_commits":943,"total_committers":9,"mean_commits":"104.77777777777777","dds":"0.18769883351007421","last_synced_commit":"81012a15f476af08d205b29bee90a294f361278a"},"previous_names":[],"tags_count":102,"template":false,"template_full_name":null,"purl":"pkg:github/surmon-china/nodepress","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/surmon-china%2Fnodepress","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/surmon-china%2Fnodepress/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/surmon-china%2Fnodepress/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/surmon-china%2Fnodepress/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/surmon-china","download_url":"https://codeload.github.com/surmon-china/nodepress/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/surmon-china%2Fnodepress/sbom","scorecard":{"id":860227,"data":{"date":"2025-08-11","repo":{"name":"github.com/surmon-china/nodepress","commit":"eb0bdd7064556c11773b0b871526a222e761d803"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":4.4,"checks":[{"name":"Maintained","score":10,"reason":"22 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Code-Review","score":0,"reason":"Found 0/30 approved changesets -- score normalized to 0","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Warn: no topLevel permission defined: .github/workflows/deploy.yml:1","Warn: no topLevel permission defined: .github/workflows/documentation.yml:1","Warn: no topLevel permission defined: .github/workflows/release.yml:1","Warn: no topLevel permission defined: .github/workflows/test.yml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"SAST","score":0,"reason":"no SAST tool detected","details":["Warn: no pull requests merged into dev branch"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/deploy.yml:16: update your workflow using https://app.stepsecurity.io/secureworkflow/surmon-china/nodepress/deploy.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/deploy.yml:19: update your workflow using https://app.stepsecurity.io/secureworkflow/surmon-china/nodepress/deploy.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/deploy.yml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/surmon-china/nodepress/deploy.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/deploy.yml:42: update your workflow using https://app.stepsecurity.io/secureworkflow/surmon-china/nodepress/deploy.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/deploy.yml:49: update your workflow using https://app.stepsecurity.io/secureworkflow/surmon-china/nodepress/deploy.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/documentation.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/surmon-china/nodepress/documentation.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/documentation.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/surmon-china/nodepress/documentation.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/documentation.yml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/surmon-china/nodepress/documentation.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/documentation.yml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/surmon-china/nodepress/documentation.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/surmon-china/nodepress/release.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:18: update your workflow using https://app.stepsecurity.io/secureworkflow/surmon-china/nodepress/release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yml:11: update your workflow using https://app.stepsecurity.io/secureworkflow/surmon-china/nodepress/test.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test.yml:14: update your workflow using https://app.stepsecurity.io/secureworkflow/surmon-china/nodepress/test.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yml:19: update your workflow using https://app.stepsecurity.io/secureworkflow/surmon-china/nodepress/test.yml/main?enable=pin","Info:   0 out of   7 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of   7 third-party GitHubAction dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: MIT License: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Security-Policy","score":0,"reason":"security policy file not detected","details":["Warn: no security policy file detected","Warn: no security file to analyze","Warn: no security file to analyze","Warn: no security file to analyze"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Vulnerabilities","score":6,"reason":"4 existing vulnerabilities detected","details":["Warn: Project is vulnerable to: GHSA-xffm-g5w8-qvg7","Warn: Project is vulnerable to: GHSA-fjxv-7rqg-78g4","Warn: Project is vulnerable to: GHSA-76c9-3jph-rj3q","Warn: Project is vulnerable to: GHSA-52f5-9888-hmc6"],"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}}]},"last_synced_at":"2025-08-24T01:02:19.189Z","repository_id":37706521,"created_at":"2025-08-24T01:02:19.189Z","updated_at":"2025-08-24T01:02:19.189Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":30204452,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-03-06T19:07:06.838Z","status":"ssl_error","status_checked_at":"2026-03-06T18:57:34.882Z","response_time":250,"last_error":"SSL_connect returned=1 errno=0 peeraddr=140.82.121.6:443 state=error: unexpected eof while reading","robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":false,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["blog","blog-api","blog-engine","cms","cms-framework","express","jwt-token","mongodb","mongoose","nestjs","nestjs-blog","nestjs-cms","nestjs-webhook","nodejs","nodejs-blog","nodejs-cms","nodejs-typescript","nodepress","restful-api","typescript"],"created_at":"2024-08-01T17:00:52.740Z","updated_at":"2026-03-17T08:16:50.147Z","avatar_url":"https://github.com/surmon-china.png","language":"TypeScript","funding_links":["https://github.com/sponsors/surmon-china","https://paypal.me/surmon","https://surmon.me/sponsor"],"categories":["Resources","TypeScript","blog","资源","⚙️ Backend \u0026 APIs"],"sub_categories":[],"readme":"\u003cbr /\u003e\n\n\u003cp align=\"center\"\u003e\n  \u003ca href=\"https://github.com/surmon-china/nodepress\" target=\"blank\"\u003e\n    \u003cimg src=\"https://raw.githubusercontent.com/surmon-china/nodepress/main/branding/logo.png\" height=\"118\" alt=\"nodepress Logo\" /\u003e\n  \u003c/a\u003e\n\u003c/p\u003e\n\n# NodePress\n\n[![nodepress](https://raw.githubusercontent.com/surmon-china/nodepress/main/branding/badge.svg)](https://github.com/surmon-china/nodepress)\n\u0026nbsp;\n[![GitHub stars](https://img.shields.io/github/stars/surmon-china/nodepress.svg?style=for-the-badge)](https://github.com/surmon-china/nodepress/stargazers)\n\u0026nbsp;\n[![GitHub issues](https://img.shields.io/github/issues-raw/surmon-china/nodepress.svg?style=for-the-badge)](https://github.com/surmon-china/nodepress/issues)\n\u0026nbsp;\n[![Uptime Robot ratio (30 days)](https://img.shields.io/uptimerobot/ratio/m791570584-8027b44860687b0ac0af7b4c?style=for-the-badge)](https://stats.uptimerobot.com/Q2k7OTXxJN/791570584)\n\u0026nbsp;\n[![GitHub license](https://img.shields.io/github/license/surmon-china/nodepress.svg?style=for-the-badge)](/LICENSE)\n\n**A RESTful API service for [surmon.me](https://github.com/surmon-china/surmon.me) blog, built with [NestJS](https://github.com/nestjs/nest), required [MongoDB](https://www.mongodb.com/) and [Redis](https://redis.io/).**\n\n适用于 [surmon.me](https://github.com/surmon-china/surmon.me) 的 RESTful API 服务端应用；基于 [NestJS](https://github.com/nestjs/nest) 开发，需安装 [MongoDB](https://www.mongodb.com/) 和 [Redis](https://redis.io/) 方可完整运行。\n\n- [Architecture](/ARCHITECTURE.md) | [中文架构文档](/ARCHITECTURE.zh-CN.md)\n- [API Documentation](https://github.surmon.me/nodepress)\n- [Changelog](/CHANGELOG.md#changelog)\n\n**Related projects:**\n\n- **SSR blog:** [`surmon.me`](https://github.com/surmon-china/surmon.me) built with Vue.\n- **Blog AI Agent:** [`surmon.me.ai`](https://github.com/surmon-china/surmon.me.ai) built on Cloudflare.\n- **Blog admin site:** [`surmon.me.admin`](https://github.com/surmon-china/surmon.me.admin) built with React and [Veact](https://github.com/veactjs/veact).\n- **Blog native app:** [`surmon.me.native`](https://github.com/surmon-china/surmon.me.native) built with React Native.\n\n---\n\n### Development\n\n```bash\n$ pnpm install\n\n# dev\n$ pnpm run start:dev\n\n# test\n$ pnpm run lint\n$ pnpm run test\n$ pnpm run test:watch\n$ pnpm run test:cov\n\n# build\n$ pnpm run build\n\n# run\n$ pnpm run start:prod\n```\n\n### Actions\n\n- Any PR open → `CI:Build test`\n- New tag `v*` → `CI:Create release`\n- Release created → `CI:Deploy` → `CI:Execute server deploy script`\n\n### TODO\n\n- About ES Modules support [#13319](https://github.com/nestjs/nest/issues/13319) / [#13817](https://github.com/nestjs/nest/issues/13817)\n\n### Changelog\n\nDetailed changes for each release are documented in the [release notes](/CHANGELOG.md).\n\n### License\n\nLicensed under the [MIT](/LICENSE) License.\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fsurmon-china%2Fnodepress","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fsurmon-china%2Fnodepress","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fsurmon-china%2Fnodepress/lists"}