{"id":13591761,"url":"https://github.com/toggl-open-source/toggldesktop","last_synced_at":"2025-09-30T19:30:52.388Z","repository":{"id":14002383,"uuid":"16703726","full_name":"toggl-open-source/toggldesktop","owner":"toggl-open-source","description":"Toggl Desktop app for Windows, Mac and Linux","archived":true,"fork":false,"pushed_at":"2023-06-22T11:56:54.000Z","size":335119,"stargazers_count":1864,"open_issues_count":601,"forks_count":277,"subscribers_count":67,"default_branch":"master","last_synced_at":"2025-01-20T09:37:34.931Z","etag":null,"topics":["desktop","linux","macos","objective-c","poco","qt","swift","time-tracker","toggl","visual-studio","windows","wpf"],"latest_commit_sha":null,"homepage":"https://toggl.github.io/toggldesktop/","language":"C++","has_issues":false,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"bsd-3-clause","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/toggl-open-source.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":"AUTHORS"}},"created_at":"2014-02-10T17:50:41.000Z","updated_at":"2025-01-08T10:20:16.000Z","dependencies_parsed_at":"2024-01-02T21:57:56.201Z","dependency_job_id":"5021b8a0-723a-4658-8cd2-ceaa56df4d9f","html_url":"https://github.com/toggl-open-source/toggldesktop","commit_stats":null,"previous_names":[],"tags_count":2248,"template":false,"template_full_name":null,"purl":"pkg:github/toggl-open-source/toggldesktop","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/toggl-open-source%2Ftoggldesktop","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/toggl-open-source%2Ftoggldesktop/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/toggl-open-source%2Ftoggldesktop/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/toggl-open-source%2Ftoggldesktop/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/toggl-open-source","download_url":"https://codeload.github.com/toggl-open-source/toggldesktop/tar.gz/refs/heads/master","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/toggl-open-source%2Ftoggldesktop/sbom","scorecard":{"id":891352,"data":{"date":"2025-08-11","repo":{"name":"github.com/toggl-open-source/toggldesktop","commit":"013038304ee8e9154db4a45fb642716956cf153b"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":2.2,"checks":[{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Code-Review","score":0,"reason":"Found 0/30 approved changesets -- score normalized to 0","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Maintained","score":0,"reason":"project is archived","details":["Warn: Repository is archived."],"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Security-Policy","score":0,"reason":"security policy file not detected","details":["Warn: no security policy file detected","Warn: no security file to analyze","Warn: no security file to analyze","Warn: no security file to analyze"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: BSD 3-Clause \"New\" or \"Revised\" License: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Warn: no topLevel permission defined: .github/workflows/main.yml:1","Warn: no topLevel permission defined: .github/workflows/pr_lint.yml:1","Warn: no topLevel permission defined: .github/workflows/pr_tagger.yml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Signed-Releases","score":0,"reason":"Project has not signed or included provenance with any releases.","details":["Warn: release artifact v7.5.493 not signed: https://api.github.com/repos/toggl-open-source/toggldesktop/releases/109534413","Warn: release artifact v7.5.492 not signed: https://api.github.com/repos/toggl-open-source/toggldesktop/releases/109508725","Warn: release artifact v7.5.490 not signed: https://api.github.com/repos/toggl-open-source/toggldesktop/releases/94570975","Warn: release artifact v7.5.489 not signed: https://api.github.com/repos/toggl-open-source/toggldesktop/releases/94385478","Warn: release artifact v7.5.493 does not have provenance: https://api.github.com/repos/toggl-open-source/toggldesktop/releases/109534413","Warn: release artifact v7.5.492 does not have provenance: https://api.github.com/repos/toggl-open-source/toggldesktop/releases/109508725","Warn: release artifact v7.5.490 does not have provenance: https://api.github.com/repos/toggl-open-source/toggldesktop/releases/94570975","Warn: release artifact v7.5.489 does not have provenance: https://api.github.com/repos/toggl-open-source/toggldesktop/releases/94385478"],"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 1 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}},{"name":"Fuzzing","score":10,"reason":"project is fuzzed","details":["Info: CLibFuzzer integration found: third_party/openssl/fuzz/driver.c:25"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Binary-Artifacts","score":0,"reason":"binaries present in source code","details":["Warn: binary detected: dist/windows/NSIS_plugins/KillProc.dll:1","Warn: binary detected: dist/windows/NSIS_plugins/KillProc.exe:1","Warn: binary detected: src/ui/osx/TogglDesktop/TogglDesktopLibrary/Dependencies/openssl/libcrypto.1.1.dylib:1","Warn: binary detected: src/ui/osx/TogglDesktop/TogglDesktopLibrary/Dependencies/openssl/libcrypto.a:1","Warn: binary detected: src/ui/osx/TogglDesktop/TogglDesktopLibrary/Dependencies/openssl/libssl.1.1.dylib:1","Warn: binary detected: src/ui/osx/TogglDesktop/TogglDesktopLibrary/Dependencies/openssl/libssl.a:1","Warn: binary detected: src/ui/osx/TogglDesktop/TogglDesktopLibrary/Dependencies/poco/libPocoCrypto.60.dylib:1","Warn: binary detected: src/ui/osx/TogglDesktop/TogglDesktopLibrary/Dependencies/poco/libPocoData.60.dylib:1","Warn: binary detected: src/ui/osx/TogglDesktop/TogglDesktopLibrary/Dependencies/poco/libPocoDataSQLite.60.dylib:1","Warn: binary detected: src/ui/osx/TogglDesktop/TogglDesktopLibrary/Dependencies/poco/libPocoFoundation.60.dylib:1","Warn: binary detected: src/ui/osx/TogglDesktop/TogglDesktopLibrary/Dependencies/poco/libPocoJSON.60.dylib:1","Warn: binary detected: src/ui/osx/TogglDesktop/TogglDesktopLibrary/Dependencies/poco/libPocoNet.60.dylib:1","Warn: binary detected: src/ui/osx/TogglDesktop/TogglDesktopLibrary/Dependencies/poco/libPocoNetSSL.60.dylib:1","Warn: binary detected: src/ui/osx/TogglDesktop/TogglDesktopLibrary/Dependencies/poco/libPocoUtil.60.dylib:1","Warn: binary detected: src/ui/osx/TogglDesktop/TogglDesktopLibrary/Dependencies/poco/libPocoXML.60.dylib:1","Warn: binary detected: third_party/openssl/libcrypto.dll:1","Warn: binary detected: third_party/openssl/libssl.dll:1","Warn: binary detected: third_party/openssl/test/rsa_complex:1","Warn: binary detected: third_party/openssl/test/versions:1","Warn: binary detected: third_party/plcrashreporter/Dependencies/protobuf-2.0.3/bin/protoc-c:1","Warn: binary detected: third_party/plcrashreporter/Resources/Tests/PLCrashAsyncCompactUnwindEncodingTests/test.ios:1","Warn: binary detected: third_party/plcrashreporter/Resources/Tests/PLCrashAsyncCompactUnwindEncodingTests/test.macosx:1","Warn: binary detected: third_party/plcrashreporter/Resources/Tests/PLCrashAsyncCompactUnwindEncodingTests/test.sim:1","Warn: binary detected: third_party/plcrashreporter/Resources/Tests/PLCrashAsyncDwarfEncodingTests/regression-bins/tbin.unwind_test_x86_64_disable_compact_frame.s.1:1","Warn: binary detected: third_party/plcrashreporter/Resources/Tests/PLCrashAsyncDwarfEncodingTests/regression-bins/tbin.unwind_test_x86_64_frame.s.2:1","Warn: binary detected: third_party/plcrashreporter/Resources/Tests/PLCrashAsyncDwarfEncodingTests/regression-bins/tbin.unwind_test_x86_64_frame.s.3:1","Warn: binary detected: third_party/plcrashreporter/Resources/Tests/PLCrashAsyncDwarfEncodingTests/regression-bins/tbin.unwind_test_x86_64_frame.s.4:1","Warn: binary detected: third_party/plcrashreporter/Resources/Tests/PLCrashAsyncDwarfEncodingTests/regression-bins/tbin.unwind_test_x86_64_frame.s.5:1","Warn: binary detected: third_party/plcrashreporter/Resources/Tests/PLCrashAsyncDwarfEncodingTests/regression-bins/tbin.unwind_test_x86_64_frameless.s.6:1","Warn: binary detected: third_party/plcrashreporter/Resources/Tests/PLCrashAsyncDwarfEncodingTests/regression-bins/tbin.unwind_test_x86_64_frameless.s.7:1","Warn: binary detected: third_party/plcrashreporter/Resources/Tests/PLCrashAsyncDwarfEncodingTests/regression-bins/tbin.unwind_test_x86_64_frameless_big.s.8:1","Warn: binary detected: third_party/plcrashreporter/Resources/Tests/PLCrashAsyncDwarfEncodingTests/regression-bins/tbin.unwind_test_x86_64_frameless_big.s.9:1","Warn: binary detected: third_party/plcrashreporter/Resources/Tests/PLCrashAsyncDwarfEncodingTests/regression-bins/tbin.unwind_test_x86_64_unusual.s.10:1","Warn: binary detected: third_party/plcrashreporter/Resources/Tests/PLCrashAsyncDwarfEncodingTests/regression-bins/tbin.unwind_test_x86_64_unusual.s.11:1","Warn: binary detected: third_party/plcrashreporter/Resources/Tests/PLCrashAsyncDwarfEncodingTests/regression-bins/tbin.unwind_test_x86_disable_compact_frame.s.12:1","Warn: binary detected: third_party/plcrashreporter/Resources/Tests/PLCrashAsyncDwarfEncodingTests/regression-bins/tbin.unwind_test_x86_frame.s.13:1","Warn: binary detected: third_party/plcrashreporter/Resources/Tests/PLCrashAsyncDwarfEncodingTests/regression-bins/tbin.unwind_test_x86_frame.s.14:1","Warn: binary detected: third_party/plcrashreporter/Resources/Tests/PLCrashAsyncDwarfEncodingTests/regression-bins/tbin.unwind_test_x86_frame.s.15:1","Warn: binary detected: third_party/plcrashreporter/Resources/Tests/PLCrashAsyncDwarfEncodingTests/regression-bins/tbin.unwind_test_x86_frame.s.16:1","Warn: binary detected: third_party/plcrashreporter/Resources/Tests/PLCrashAsyncDwarfEncodingTests/regression-bins/tbin.unwind_test_x86_frameless.s.17:1","Warn: binary detected: third_party/plcrashreporter/Resources/Tests/PLCrashAsyncDwarfEncodingTests/regression-bins/tbin.unwind_test_x86_frameless.s.18:1","Warn: binary detected: third_party/plcrashreporter/Resources/Tests/PLCrashAsyncDwarfEncodingTests/regression-bins/tbin.unwind_test_x86_frameless_big.s.19:1","Warn: binary detected: third_party/plcrashreporter/Resources/Tests/PLCrashAsyncDwarfEncodingTests/regression-bins/tbin.unwind_test_x86_frameless_big.s.20:1","Warn: binary detected: third_party/plcrashreporter/Resources/Tests/PLCrashAsyncDwarfEncodingTests/regression-bins/tbin.unwind_test_x86_unusual.s.21:1","Warn: binary detected: third_party/plcrashreporter/Resources/Tests/PLCrashAsyncDwarfEncodingTests/regression-bins/tbin.unwind_test_x86_unusual.s.22:1","Warn: binary detected: third_party/plcrashreporter/Resources/Tests/PLCrashAsyncDwarfEncodingTests/test.ios:1","Warn: binary detected: third_party/plcrashreporter/Resources/Tests/PLCrashAsyncDwarfEncodingTests/test.macosx:1","Warn: binary detected: third_party/plcrashreporter/Resources/Tests/PLCrashAsyncDwarfEncodingTests/test.sim:1","Warn: binary detected: third_party/plcrashreporter/Tools/google-toolbox-for-mac-trunk-r582/UnitTesting/iossim:1","Warn: binary detected: third_party/poco/openssl/build/win32/bin/debug/libcryptod.dll:1","Warn: binary detected: third_party/poco/openssl/build/win32/bin/debug/libcryptod.lib:1","Warn: binary detected: third_party/poco/openssl/build/win32/bin/debug/libssld.dll:1","Warn: binary detected: third_party/poco/openssl/build/win32/bin/debug/libssld.lib:1","Warn: binary detected: third_party/poco/openssl/build/win32/bin/release/libcrypto.dll:1","Warn: binary detected: third_party/poco/openssl/build/win32/bin/release/libcrypto.lib:1","Warn: binary detected: third_party/poco/openssl/build/win32/bin/release/libssl.dll:1","Warn: binary detected: third_party/poco/openssl/build/win32/bin/release/libssl.lib:1","Warn: binary detected: third_party/poco/openssl/build/win32/lib/debug/libcryptomtd.lib:1","Warn: binary detected: third_party/poco/openssl/build/win32/lib/debug/libsslmtd.lib:1","Warn: binary detected: third_party/poco/openssl/build/win32/lib/release/libcryptomt.lib:1","Warn: binary detected: third_party/poco/openssl/build/win32/lib/release/libsslmt.lib:1","Warn: binary detected: third_party/poco/openssl/build/win64/bin/debug/libcryptod.dll:1","Warn: binary detected: third_party/poco/openssl/build/win64/bin/debug/libcryptod.lib:1","Warn: binary detected: third_party/poco/openssl/build/win64/bin/debug/libssld.dll:1","Warn: binary detected: third_party/poco/openssl/build/win64/bin/debug/libssld.lib:1","Warn: binary detected: third_party/poco/openssl/build/win64/bin/release/libcrypto.dll:1","Warn: binary detected: third_party/poco/openssl/build/win64/bin/release/libcrypto.lib:1","Warn: binary detected: third_party/poco/openssl/build/win64/bin/release/libssl.dll:1","Warn: binary detected: third_party/poco/openssl/build/win64/bin/release/libssl.lib:1","Warn: binary detected: third_party/poco/openssl/build/win64/lib/debug/libcryptomtd.lib:1","Warn: binary detected: third_party/poco/openssl/build/win64/lib/debug/libsslmtd.lib:1","Warn: binary detected: third_party/poco/openssl/build/win64/lib/release/libcryptomt.lib:1","Warn: binary detected: third_party/poco/openssl/build/win64/lib/release/libsslmt.lib:1","Warn: binary detected: third_party/vs_redist/concrt140.dll:1","Warn: binary detected: third_party/vs_redist/msvcp140.dll:1","Warn: binary detected: third_party/vs_redist/msvcp140_1.dll:1","Warn: binary detected: third_party/vs_redist/msvcp140_2.dll:1","Warn: binary detected: third_party/vs_redist/vccorlib140.dll:1","Warn: binary detected: third_party/vs_redist/vcruntime140.dll:1","Warn: binary detected: third_party/vs_redist/x64/concrt140.dll:1","Warn: binary detected: third_party/vs_redist/x64/msvcp140.dll:1","Warn: binary detected: third_party/vs_redist/x64/msvcp140_1.dll:1","Warn: binary detected: third_party/vs_redist/x64/msvcp140_2.dll:1","Warn: binary detected: third_party/vs_redist/x64/vccorlib140.dll:1","Warn: binary detected: third_party/vs_redist/x64/vcruntime140.dll:1","Warn: binary detected: third_party/vs_redist/x64/vcruntime140_1.dll:1"],"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Info: Possibly incomplete results: error parsing shell code: \"foo(\" must be followed by ): third_party/openssl/util/shlib_wrap.sh.in:0","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/main.yml:402: update your workflow using https://app.stepsecurity.io/secureworkflow/toggl-open-source/toggldesktop/main.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/main.yml:420: update your workflow using https://app.stepsecurity.io/secureworkflow/toggl-open-source/toggldesktop/main.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/main.yml:426: update your workflow using https://app.stepsecurity.io/secureworkflow/toggl-open-source/toggldesktop/main.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/main.yml:459: update your workflow using https://app.stepsecurity.io/secureworkflow/toggl-open-source/toggldesktop/main.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/main.yml:472: update your workflow using https://app.stepsecurity.io/secureworkflow/toggl-open-source/toggldesktop/main.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/main.yml:490: update your workflow using https://app.stepsecurity.io/secureworkflow/toggl-open-source/toggldesktop/main.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/main.yml:496: update your workflow using https://app.stepsecurity.io/secureworkflow/toggl-open-source/toggldesktop/main.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/main.yml:529: update your workflow using https://app.stepsecurity.io/secureworkflow/toggl-open-source/toggldesktop/main.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/main.yml:545: update your workflow using https://app.stepsecurity.io/secureworkflow/toggl-open-source/toggldesktop/main.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/main.yml:558: update your workflow using https://app.stepsecurity.io/secureworkflow/toggl-open-source/toggldesktop/main.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr_lint.yml:14: update your workflow using https://app.stepsecurity.io/secureworkflow/toggl-open-source/toggldesktop/pr_lint.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr_tagger.yml:10: update your workflow using https://app.stepsecurity.io/secureworkflow/toggl-open-source/toggldesktop/pr_tagger.yml/master?enable=pin","Warn: npmCommand not pinned by hash: dist/osx/build.sh:112","Info:   0 out of  12 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of   1 npmCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Vulnerabilities","score":0,"reason":"15 existing vulnerabilities detected","details":["Warn: Project is vulnerable to: GHSA-cr5q-6q9f-rq6q","Warn: Project is vulnerable to: GHSA-j6gc-792m-qgm2","Warn: Project is vulnerable to: GHSA-pj73-v5mw-pm9j","Warn: Project is vulnerable to: GHSA-jxhc-q857-3j6g","Warn: Project is vulnerable to: GHSA-7627-mp87-jf6q","Warn: Project is vulnerable to: GHSA-g397-v4w5-4m79","Warn: Project is vulnerable to: GHSA-5cm2-9h8c-rvfx","Warn: Project is vulnerable to: CVE-2016-6305","Warn: Project is vulnerable to: CVE-2016-6307","Warn: Project is vulnerable to: CVE-2016-6308","Warn: Project is vulnerable to: CVE-2016-6309","Warn: Project is vulnerable to: CVE-2016-7053","Warn: Project is vulnerable to: CVE-2016-7054","Warn: Project is vulnerable to: CVE-2023-52389","Warn: Project is vulnerable to: CVE-2025-6375"],"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}}]},"last_synced_at":"2025-08-24T11:57:05.759Z","repository_id":14002383,"created_at":"2025-08-24T11:57:05.759Z","updated_at":"2025-08-24T11:57:05.759Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":277746955,"owners_count":25870057,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","status":"online","status_checked_at":"2025-09-30T02:00:09.208Z","response_time":75,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["desktop","linux","macos","objective-c","poco","qt","swift","time-tracker","toggl","visual-studio","windows","wpf"],"created_at":"2024-08-01T16:01:01.692Z","updated_at":"2025-09-30T19:30:47.365Z","avatar_url":"https://github.com/toggl-open-source.png","language":"C++","funding_links":[],"categories":["时间跟踪","Applications","Tools","Open Sources","linux","C++"],"sub_categories":["Productivity","Time tracking and contractor management","⏱️ Productivity (54)"],"readme":"### ⚠️ Project Status: Superseded by new rewritten apps.\n\nWe have rewritten our MacOS and Windows apps and for that reason **we will no longer implement nor accept pull requests** implementing new features in this repository.\n\nIf you'd like to try these rewritten native apps, visit:\n\n* [ ] 🍏 [MacOS Toggl Track](https://toggl.com/track/time-tracking-mac)\n* [ ] 🖥 [Windows Toggl Track](https://toggl.com/track/time-tracking-windows/)\n\n\u003ch1\u003e\u003c/h1\u003e\n\n\u003ch1 align=\"center\"\u003e\n  \u003ca href=\"https://toggl.com\"\u003e\u003cimg src=\"https://raw.githubusercontent.com/toggl-open-source/toggldesktop/gh-pages/assets/toggl-track-wide.png\" alt=\"Toggl Track\"\u003e\u003c/a\u003e\n\u003c/h1\u003e\n\n\u003ch4 align=\"center\"\u003eNative desktop applications for the leading time tracking tool \u003ca href=\"https://toggl.com\" target=\"_blank\"\u003eToggl\u003c/a\u003e.\u003c/h4\u003e\n\n\u003cp align=\"center\"\u003e\n    \u003ca href=\"https://github.com/toggl-open-source/toggldesktop/commits/master\"\u003e\n    \u003cimg src=\"https://img.shields.io/github/last-commit/toggl-open-source/toggldesktop.svg?style=flat\u0026logo=github\u0026logoColor=white\"\n         alt=\"GitHub last commit\"\u003e\n    \u003ca href=\"https://github.com/toggl/toggldesktop/issues\"\u003e\n    \u003cimg src=\"https://img.shields.io/github/issues-raw/toggl-open-source/toggldesktop.svg?style=flat\u0026logo=github\u0026logoColor=white\"\n         alt=\"GitHub issues\"\u003e\n    \u003ca href=\"https://github.com/toggl/toggldesktop/pulls\"\u003e\n    \u003cimg src=\"https://img.shields.io/github/issues-pr-raw/toggl-open-source/toggldesktop.svg?style=flat\u0026logo=github\u0026logoColor=white\"\n         alt=\"GitHub pull requests\"\u003e\n    \u003cimg src=\"https://img.shields.io/badge/licence-BSD--3-green\"\n         alt=\"Licence BSD-3\"\u003e\n\u003c/p\u003e\n\n\u003cp align=\"center\"\u003e\n  \u003ca href=\"#about\"\u003eAbout\u003c/a\u003e •\n  \u003ca href=\"#download\"\u003eDownload\u003c/a\u003e •\n  \u003ca href=\"#build\"\u003eBuild\u003c/a\u003e •\n  \u003ca href=\"#change-log\"\u003eChange log\u003c/a\u003e •\n  \u003ca href=\"#contribute\"\u003eContribute\u003c/a\u003e\n\u003c/p\u003e\n\n# About\n\n  **Toggl Desktop** is a Toggl time tracking client with many helper functions that make tracking time more effortless and smooth. Features such as Idle detection, reminders to track and Pomodoro Timer make this app a great companion when productivity and efficiency is the goal.\n\n\u003cimg src=\"https://user-images.githubusercontent.com/842229/63856838-3a869580-c9ab-11e9-9e36-7db23059ce29.png\"\n         alt=\"Toggl Desktop apps\"\u003e\n\n# Download\n\nToggl built and signed apps for all platforms\n\n## Mac\n\n\u003cbr\u003e\n\u003ca href=\"https://toggl.github.io/toggldesktop/download/macos-stable/\"\u003e64bit dmg\u003c/a\u003e\u0026nbsp;\u0026nbsp;\u0026nbsp;\u0026nbsp;|\u0026nbsp;\u0026nbsp;\u0026nbsp;\u0026nbsp;\u003ca href='https://itunes.apple.com/ee/app/toggl-desktop/id957734279?mt=12'\u003e\n  Mac App Store\u003c/a\u003e\n\u003cbr/\u003e\n\u003cbr/\u003e\n\u003ci\u003eOfficially macOS 10.11 and newer stable macOS versions are supported.\u003c/i\u003e\n\n## Windows\n\n\u003cbr/\u003e\n\u003ca href=\"https://toggl.github.io/toggldesktop/download/windows64-stable/\"\u003e64bit installer\u003c/a\u003e\u0026nbsp;\u0026nbsp;\u0026nbsp;\u0026nbsp;|\u0026nbsp;\u0026nbsp;\u0026nbsp;\u0026nbsp;\u003ca href=\"https://toggl.github.io/toggldesktop/download/windows-stable/\"\u003e32bit installer\u003c/a\u003e\u0026nbsp;\u0026nbsp;\u0026nbsp;|\u0026nbsp;\u0026nbsp;\u0026nbsp;\u0026nbsp;\u003ca href=\"https://chocolatey.org/packages/toggl\"\u003eChocolatey\u003c/a\u003e\u0026nbsp;\u0026nbsp;\u0026nbsp;\u0026nbsp;|\u0026nbsp;\u0026nbsp;\u0026nbsp;\u0026nbsp;\u003ca href='//www.microsoft.com/store/apps/9nk3rf9nbjnp?cid=storebadge\u0026ocid=badge'\u003eMicrosoft Store\u003c/a\u003e\n\u003cbr/\u003e\n\u003cbr/\u003e\n\u003ci\u003eApp has been tested on Windows 7, 8, 8.1 and 10. Toggl Desktop Windows app has not been tested on Surface type touchscreen environments.\u003c/i\u003e\n\n## Linux\n\n\u003cbr\u003e\n\u003ca href=\"https://toggl.github.io/toggldesktop/download/linux_tar.gz-stable/\"\u003eTarball\u003c/a\u003e\u0026nbsp;\u0026nbsp;\u0026nbsp;\u0026nbsp;|\u0026nbsp;\u0026nbsp;\u0026nbsp;\u0026nbsp;\u003ca href='https://flathub.org/apps/details/com.toggl.TogglDesktop'\u003eFlathub\u003c/a\u003e\u0026nbsp;\u0026nbsp;\u0026nbsp;\u0026nbsp;\n\u003cbr/\u003e\n\u003cbr/\u003e\n\u003ci\u003eOnly 64bit is supported\u003c/i\u003e\n\n# Build\n\nPlease check OS specific requirements below.\n\n_By default the app builds for testing server. To use the compiled app with live server see this guide [https://github.com/toggl-open-source/toggldesktop/wiki/Building-Toggl-Desktop-from-source-for-usage-with-live-servers](https://github.com/toggl-open-source/toggldesktop/wiki/Building-Toggl-Desktop-from-source-for-usage-with-live-servers)_\n\n## macOS\n### Requirements\n- macOS 11+, Xcode 12.2+ and Swift 5+\n- Install Bundler\n```bash\n$ sudo gem install bundler\n```\n\n### Build\n```bash\n# Prepare cocoapod\n$ make init_cocoapods\n```\nRun `bundle exec pod repo update` in case there is an error about out-of-date source repos (some pod version is missing).\n\n- Open workspace at `src/ui/osx/TogglDesktop.xcworkspace`\n- Select TogglDesktop scheme and build.\n\n## Linux\n\n### Dependencies\n\nYou'll need these Qt (at version 5.12 or higher) modules: QtWidgets (with private headers), QtNetwork, QtNetworkAuth, QtDBus, QtX11Extras\n\nIf Qt is not installed from your distribution's package manager, you will need to set the `CMAKE_PREFIX_PATH` environment variable to point to the `lib/cmake` folder in the Qt version you wish to use.\n\nThese dependencies are mandatory:\n * libXScrnSaver (`libxss-dev` in deb-based distros and `libXScrnSaver-devel` in rpm-based)\n\n You can install them all in debian with a command:\n```bash\n $ sudo apt install libxss-dev build-essential libgl-dev libreadline-dev\n\n ```\n \nThese dependencies are optional and will be bundled if the `USE_BUNDLED_LIBRARIES` CMake argument is set or your system does NOT have their development packages installed:\n * POCO\n * Lua\n * jsoncpp\n * Qxt\n\nThese libraries will be bundled regardless of your system:\n * bugsnag-qt\n * qt-oauth-lib\n\n### Build the app\n\n*in the toggldesktop source tree root*\n```bash\nmkdir -p build \u0026\u0026 pushd build             # Create build directory\ncmake ..                                  # Setup cmake configs\nmake -j8                                  # Build the app. The number defines the count of parallel jobs (number of your CPU cores is a good value for that)\n./src/ui/linux/TogglDesktop/TogglDesktop  # Run the built app\n```\n\n## Windows\n\nInstall Visual Studio 2019 with `.NET desktop development`, `Desktop development with C++` and `Universal Windows Platform development` components checked during installation. You can download free Visual Studio Community [here](https://visualstudio.microsoft.com/vs/community/).\n\nThen open the solution file `src\\ui\\windows\\TogglDesktop\\TogglDesktop.sln` and run it in `Debug` mode.\n\nThe solution is using OpenSSL binaries. To rebuild OpenSSL from sources refer to [this page](docs/win/build-openSSL.md).\n\n\n# Change log\n\nChange log can be viewed at [http://toggl.github.io/toggldesktop/](http://toggl.github.io/toggldesktop/)\n\n# Contribute\n\nBefore sending us a pull request, please format the source code:\n\n```bash\n$ make fmt\n```\n\nAlso, please check for any cpplint issues:\n\n```bash\n$ make lint\n```\n\nCheck if unit tests continue to pass:\n\n```bash\n$ make test\n```\n\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Ftoggl-open-source%2Ftoggldesktop","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Ftoggl-open-source%2Ftoggldesktop","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Ftoggl-open-source%2Ftoggldesktop/lists"}