{"id":13564928,"url":"https://github.com/umee-network/umee","last_synced_at":"2026-01-30T12:09:07.332Z","repository":{"id":37082675,"uuid":"344339667","full_name":"umee-network/umee","owner":"umee-network","description":"A Golang implementation of the Umee network, a decentralized universal capital facility in the Cosmos ecosystem.","archived":false,"fork":false,"pushed_at":"2026-01-23T15:49:48.000Z","size":23872,"stargazers_count":220,"open_issues_count":81,"forks_count":173,"subscribers_count":17,"default_branch":"main","last_synced_at":"2026-01-24T16:48:28.230Z","etag":null,"topics":["cosmos","cosmos-sdk"],"latest_commit_sha":null,"homepage":"","language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/umee-network.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":".github/CODEOWNERS","security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null}},"created_at":"2021-03-04T03:37:20.000Z","updated_at":"2025-10-24T11:51:57.000Z","dependencies_parsed_at":"2023-12-22T18:30:28.415Z","dependency_job_id":"76113a20-f85b-4ce8-82c5-6534fa96ea98","html_url":"https://github.com/umee-network/umee","commit_stats":{"total_commits":1685,"total_committers":32,"mean_commits":52.65625,"dds":0.7507418397626113,"last_synced_commit":"4488942220237018d835601e413d99c47234039a"},"previous_names":[],"tags_count":128,"template":false,"template_full_name":null,"purl":"pkg:github/umee-network/umee","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/umee-network%2Fumee","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/umee-network%2Fumee/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/umee-network%2Fumee/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/umee-network%2Fumee/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/umee-network","download_url":"https://codeload.github.com/umee-network/umee/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/umee-network%2Fumee/sbom","scorecard":{"id":380402,"data":{"date":"2025-08-11","repo":{"name":"github.com/umee-network/umee","commit":"94e1b7d3d327dc059111dbfc8cb2f3a177c1b69c"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":4.2,"checks":[{"name":"Maintained","score":3,"reason":"4 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 3","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Code-Review","score":10,"reason":"all changesets reviewed","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Binary-Artifacts","score":7,"reason":"binaries present in source code","details":["Warn: binary detected: tests/artifacts/cw20_base.wasm:1","Warn: binary detected: tests/artifacts/cw4_group-aarch64.wasm:1","Warn: binary detected: tests/artifacts/umee_cosmwasm-aarch64.wasm:1"],"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: jobLevel 'actions' permission set to 'read': .github/workflows/codeql-analysis.yml:21","Info: jobLevel 'contents' permission set to 'read': .github/workflows/codeql-analysis.yml:22","Warn: no topLevel permission defined: .github/workflows/codeql-analysis.yml:1","Warn: no topLevel permission defined: .github/workflows/debug.yml:1","Info: topLevel 'contents' permission set to 'read': .github/workflows/dependencies-review.yml:5","Warn: no topLevel permission defined: .github/workflows/govulncheck.yml:1","Warn: no topLevel permission defined: .github/workflows/linkchecker.yml:1","Warn: no topLevel permission defined: .github/workflows/lint-pr.yml:1","Warn: no topLevel permission defined: .github/workflows/lint.yml:1","Warn: no topLevel permission defined: .github/workflows/proto.yml:1","Warn: no topLevel permission defined: .github/workflows/release-umee-docker.yml:1","Warn: no topLevel permission defined: .github/workflows/release-umee.yml:1","Warn: no topLevel permission defined: .github/workflows/simulations.yml:1","Warn: no topLevel permission defined: .github/workflows/tests.yml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Security-Policy","score":0,"reason":"security policy file not detected","details":["Warn: no security policy file detected","Warn: no security file to analyze","Warn: no security file to analyze","Warn: no security file to analyze"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: Apache License 2.0: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Signed-Releases","score":0,"reason":"Project has not signed or included provenance with any releases.","details":["Warn: release artifact v6.7.4-rc1 not signed: https://api.github.com/repos/umee-network/umee/releases/205859423","Warn: release artifact v6.7.3 not signed: https://api.github.com/repos/umee-network/umee/releases/198261485","Warn: release artifact v6.7.3-rc1 not signed: https://api.github.com/repos/umee-network/umee/releases/197720134","Warn: release artifact v6.7.2 not signed: https://api.github.com/repos/umee-network/umee/releases/191896348","Warn: release artifact v6.7.2-rc1 not signed: https://api.github.com/repos/umee-network/umee/releases/191575113","Warn: release artifact v6.7.4-rc1 does not have provenance: https://api.github.com/repos/umee-network/umee/releases/205859423","Warn: release artifact v6.7.3 does not have provenance: https://api.github.com/repos/umee-network/umee/releases/198261485","Warn: release artifact v6.7.3-rc1 does not have provenance: https://api.github.com/repos/umee-network/umee/releases/197720134","Warn: release artifact v6.7.2 does not have provenance: https://api.github.com/repos/umee-network/umee/releases/191896348","Warn: release artifact v6.7.2-rc1 does not have provenance: https://api.github.com/repos/umee-network/umee/releases/191575113"],"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Packaging","score":10,"reason":"packaging workflow detected","details":["Info: Project packages its releases by way of GitHub Actions.: .github/workflows/release-umee-docker.yml:14"],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during GetBranch(release/v6.5): error during branchesHandler.query: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/umee-network/umee/codeql-analysis.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/umee-network/umee/codeql-analysis.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/umee-network/umee/codeql-analysis.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:46: update your workflow using https://app.stepsecurity.io/secureworkflow/umee-network/umee/codeql-analysis.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/debug.yml:18: update your workflow using https://app.stepsecurity.io/secureworkflow/umee-network/umee/debug.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/debug.yml:23: update your workflow using https://app.stepsecurity.io/secureworkflow/umee-network/umee/debug.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/debug.yml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/umee-network/umee/debug.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/dependencies-review.yml:16: update your workflow using https://app.stepsecurity.io/secureworkflow/umee-network/umee/dependencies-review.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/dependencies-review.yml:18: update your workflow using https://app.stepsecurity.io/secureworkflow/umee-network/umee/dependencies-review.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/govulncheck.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/umee-network/umee/govulncheck.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/govulncheck.yml:18: update your workflow using https://app.stepsecurity.io/secureworkflow/umee-network/umee/govulncheck.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/govulncheck.yml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/umee-network/umee/govulncheck.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/linkchecker.yml:14: update your workflow using https://app.stepsecurity.io/secureworkflow/umee-network/umee/linkchecker.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/linkchecker.yml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/umee-network/umee/linkchecker.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/lint-pr.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/umee-network/umee/lint-pr.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/lint.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/umee-network/umee/lint.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/lint.yml:18: update your workflow using https://app.stepsecurity.io/secureworkflow/umee-network/umee/lint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/lint.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/umee-network/umee/lint.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/lint.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/umee-network/umee/lint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/lint.yml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/umee-network/umee/lint.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/lint.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/umee-network/umee/lint.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/lint.yml:48: update your workflow using https://app.stepsecurity.io/secureworkflow/umee-network/umee/lint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/lint.yml:58: update your workflow using https://app.stepsecurity.io/secureworkflow/umee-network/umee/lint.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/lint.yml:59: update your workflow using https://app.stepsecurity.io/secureworkflow/umee-network/umee/lint.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/lint.yml:63: update your workflow using https://app.stepsecurity.io/secureworkflow/umee-network/umee/lint.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/lint.yml:65: update your workflow using https://app.stepsecurity.io/secureworkflow/umee-network/umee/lint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/proto.yml:16: update your workflow using https://app.stepsecurity.io/secureworkflow/umee-network/umee/proto.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-umee-docker.yml:19: update your workflow using https://app.stepsecurity.io/secureworkflow/umee-network/umee/release-umee-docker.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release-umee-docker.yml:23: update your workflow using https://app.stepsecurity.io/secureworkflow/umee-network/umee/release-umee-docker.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release-umee-docker.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/umee-network/umee/release-umee-docker.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release-umee-docker.yml:44: update your workflow using https://app.stepsecurity.io/secureworkflow/umee-network/umee/release-umee-docker.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release-umee-docker.yml:56: update your workflow using https://app.stepsecurity.io/secureworkflow/umee-network/umee/release-umee-docker.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-umee.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/umee-network/umee/release-umee.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-umee.yml:23: update your workflow using https://app.stepsecurity.io/secureworkflow/umee-network/umee/release-umee.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release-umee.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/umee-network/umee/release-umee.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release-umee.yml:46: update your workflow using https://app.stepsecurity.io/secureworkflow/umee-network/umee/release-umee.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/simulations.yml:16: update your workflow using https://app.stepsecurity.io/secureworkflow/umee-network/umee/simulations.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/simulations.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/umee-network/umee/simulations.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/simulations.yml:32: update your workflow using https://app.stepsecurity.io/secureworkflow/umee-network/umee/simulations.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/simulations.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/umee-network/umee/simulations.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/simulations.yml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/umee-network/umee/simulations.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/simulations.yml:57: update your workflow using https://app.stepsecurity.io/secureworkflow/umee-network/umee/simulations.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/simulations.yml:58: update your workflow using https://app.stepsecurity.io/secureworkflow/umee-network/umee/simulations.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/simulations.yml:65: update your workflow using https://app.stepsecurity.io/secureworkflow/umee-network/umee/simulations.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/simulations.yml:70: update your workflow using https://app.stepsecurity.io/secureworkflow/umee-network/umee/simulations.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/simulations.yml:87: update your workflow using https://app.stepsecurity.io/secureworkflow/umee-network/umee/simulations.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/simulations.yml:88: update your workflow using https://app.stepsecurity.io/secureworkflow/umee-network/umee/simulations.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/simulations.yml:95: update your workflow using https://app.stepsecurity.io/secureworkflow/umee-network/umee/simulations.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/simulations.yml:100: update your workflow using https://app.stepsecurity.io/secureworkflow/umee-network/umee/simulations.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/simulations.yml:116: update your workflow using https://app.stepsecurity.io/secureworkflow/umee-network/umee/simulations.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/simulations.yml:117: update your workflow using https://app.stepsecurity.io/secureworkflow/umee-network/umee/simulations.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/simulations.yml:124: update your workflow using https://app.stepsecurity.io/secureworkflow/umee-network/umee/simulations.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/simulations.yml:129: update your workflow using https://app.stepsecurity.io/secureworkflow/umee-network/umee/simulations.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/tests.yml:16: update your workflow using https://app.stepsecurity.io/secureworkflow/umee-network/umee/tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/tests.yml:19: update your workflow using https://app.stepsecurity.io/secureworkflow/umee-network/umee/tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/tests.yml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/umee-network/umee/tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/tests.yml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/umee-network/umee/tests.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/tests.yml:44: update your workflow using https://app.stepsecurity.io/secureworkflow/umee-network/umee/tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/tests.yml:53: update your workflow using https://app.stepsecurity.io/secureworkflow/umee-network/umee/tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/tests.yml:70: update your workflow using https://app.stepsecurity.io/secureworkflow/umee-network/umee/tests.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/tests.yml:71: update your workflow using https://app.stepsecurity.io/secureworkflow/umee-network/umee/tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/tests.yml:78: update your workflow using https://app.stepsecurity.io/secureworkflow/umee-network/umee/tests.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/tests.yml:87: update your workflow using https://app.stepsecurity.io/secureworkflow/umee-network/umee/tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/tests.yml:102: update your workflow using https://app.stepsecurity.io/secureworkflow/umee-network/umee/tests.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/tests.yml:103: update your workflow using https://app.stepsecurity.io/secureworkflow/umee-network/umee/tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/tests.yml:110: update your workflow using https://app.stepsecurity.io/secureworkflow/umee-network/umee/tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/tests.yml:127: update your workflow using https://app.stepsecurity.io/secureworkflow/umee-network/umee/tests.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/tests.yml:128: update your workflow using https://app.stepsecurity.io/secureworkflow/umee-network/umee/tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/tests.yml:139: update your workflow using https://app.stepsecurity.io/secureworkflow/umee-network/umee/tests.yml/main?enable=pin","Warn: containerImage not pinned by hash: contrib/images/umee.e2e-static.dockerfile:5","Warn: containerImage not pinned by hash: contrib/images/umee.e2e-static.dockerfile:28: pin your Docker image by updating alpine:3.19 to alpine:3.19@sha256:3be987e6cde1d07e873c012bf6cfe941e6e85d16ca5fc5b8bedc675451d2de67","Warn: containerImage not pinned by hash: contrib/images/umee.e2e.dockerfile:4","Warn: containerImage not pinned by hash: contrib/images/umee.e2e.dockerfile:21: pin your Docker image by updating ubuntu:24.04 to ubuntu:24.04@sha256:7c06e91f61fa88c08cc74f7e1b7c69ae24910d745357e0dfe1d2c0322aaf20f9","Warn: containerImage not pinned by hash: contrib/images/umeed.dockerfile:4","Warn: containerImage not pinned by hash: contrib/images/umeed.dockerfile:17: pin your Docker image by updating ubuntu:24.04 to ubuntu:24.04@sha256:7c06e91f61fa88c08cc74f7e1b7c69ae24910d745357e0dfe1d2c0322aaf20f9","Warn: containerImage not pinned by hash: tests/e2e/docker/gaia.Dockerfile:1: pin your Docker image by updating golang:1.20 to golang:1.20@sha256:8f9af7094d0cb27cc783c697ac5ba25efdc4da35f8526db21f7aebb0b0b4f18a","Warn: containerImage not pinned by hash: tests/e2e/docker/hermes.Dockerfile:1","Warn: containerImage not pinned by hash: tests/e2e/docker/hermes.Dockerfile:3: pin your Docker image by updating debian:buster-slim to debian:buster-slim@sha256:bb3dc79fddbca7e8903248ab916bb775c96ec61014b3d02b4f06043b604726dc","Warn: pipCommand not pinned by hash: contrib/scripts/process_genesis.sh:15","Warn: goCommand not pinned by hash: contrib/scripts/protoc-update-swagger-docs.sh:45","Info:   0 out of  42 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of  27 third-party GitHubAction dependencies pinned","Info:   0 out of   9 containerImage dependencies pinned","Info:   0 out of   1 pipCommand dependencies pinned","Info:   2 out of   3 goCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"SAST","score":7,"reason":"SAST tool detected but not run on all commits","details":["Info: SAST configuration detected: CodeQL","Warn: 4 commits out of 30 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}},{"name":"Vulnerabilities","score":0,"reason":"14 existing vulnerabilities detected","details":["Warn: Project is vulnerable to: GO-2024-3082 / GHSA-g8w7-7vgg-x7xg","Warn: Project is vulnerable to: GO-2024-3059 / GHSA-m3rh-cvr5-x6q4","Warn: Project is vulnerable to: GO-2024-3319 / GHSA-vmg2-r3xv-r3xf","Warn: Project is vulnerable to: GO-2022-0635","Warn: Project is vulnerable to: GO-2022-0646","Warn: Project is vulnerable to: GO-2025-3442 / GHSA-22qq-3xwm-r5x4","Warn: Project is vulnerable to: GO-2025-3443 / GHSA-r3r4-g7hq-pq4f","Warn: Project is vulnerable to: GHSA-555p-m4v6-cqxv","Warn: Project is vulnerable to: GO-2025-3803 / GHSA-p22h-3m2v-cmgh","Warn: Project is vulnerable to: GO-2023-1881 / GHSA-w5w5-2882-47pc","Warn: Project is vulnerable to: GO-2023-1821","Warn: Project is vulnerable to: GO-2025-3829 / GHSA-4vq8-7jfc-9cvp","Warn: Project is vulnerable to: GO-2025-3787 / GHSA-fv92-fjc5-jj9h","Warn: Project is vulnerable to: GO-2025-3488 / GHSA-6v2p-p543-phr9"],"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}}]},"last_synced_at":"2025-08-18T15:18:35.935Z","repository_id":37082675,"created_at":"2025-08-18T15:18:35.935Z","updated_at":"2025-08-18T15:18:35.935Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":28912335,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-01-30T11:55:24.701Z","status":"ssl_error","status_checked_at":"2026-01-30T11:54:13.194Z","response_time":66,"last_error":"SSL_read: unexpected eof while reading","robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":false,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["cosmos","cosmos-sdk"],"created_at":"2024-08-01T13:01:38.075Z","updated_at":"2026-01-30T12:09:07.311Z","avatar_url":"https://github.com/umee-network.png","language":"Go","funding_links":[],"categories":["Go"],"sub_categories":[],"readme":"\u003c!-- markdownlint-disable MD041 --\u003e\n\u003c!-- markdownlint-disable MD013 --\u003e\n\n![Logo!](assets/umee-logo.png)\n\n[![Project Status: Active – The project has reached a stable, usable state and is being actively developed.](https://www.repostatus.org/badges/latest/active.svg)](https://www.repostatus.org/#wip)\n[![GoDoc](https://img.shields.io/badge/godoc-reference-blue?style=flat-square\u0026logo=go)](https://godoc.org/github.com/umee-network/umee)\n[![Go Report Card](https://goreportcard.com/badge/github.com/umee-network/umee?style=flat-square)](https://goreportcard.com/report/github.com/umee-network/umee)\n[![Version](https://img.shields.io/github/tag/umee-network/umee.svg?style=flat-square)](https://github.com/umee-network/umee/releases/latest)\n[![License: Apache-2.0](https://img.shields.io/github/license/umee-network/umee.svg?style=flat-square)](https://github.com/umee-network/umee/blob/main/LICENSE)\n[![GitHub Super-Linter](https://img.shields.io/github/actions/workflow/status/umee-network/umee/lint.yml?branch=main)](https://github.com/marketplace/actions/super-linter)\n\n\u003e A Golang implementation of the Umee network, a decentralized universal capital\n\u003e facility in the Cosmos ecosystem.\n\nUmee is a Universal Capital Facility that can collateralize assets on one blockchain\ntowards borrowing assets on another blockchain. The platform specializes in\nallowing staked assets from PoS blockchains to be used as collateral for borrowing\nacross blockchains. The platform uses a combination of algorithmically determined\ninterest rates based on market driven conditions. As a cross chain DeFi protocol,\nUmee will allow a multitude of decentralized debt products.\n\n## Table of Contents\n\n- [Table of Contents](#table-of-contents)\n- [Releases](#releases)\n  - [Release Compatibility Matrix](#release-compatibility-matrix)\n    - [Price Feeder](#price-feeder)\n    - [libwasmvm](#libwasmvm)\n  - [Active Networks](#active-networks)\n- [Build](#build)\n  - [Docker build](#docker-build)\n  - [Recommended Database Backend](#recommended-database-backend)\n  - [Swagger](#swagger)\n  - [Cosmovisor](#cosmovisor)\n- [Validators](#validators)\n- [Liquidators](#liquidators)\n\n## Releases\n\nSee [Release procedure](CONTRIBUTING.md#release-procedure) for more information about the release model.\n\n### Release Compatibility Matrix\n\n| Umee Version | Mainnet | Cosmos SDK |  IBC   |  Peggo  |  Price Feeder  |       Gravity Bridge       | libwasmvm |\n| :----------: | :-----: | :--------: | :----: | :-----: | :------------: | :------------------------: | :-------: |\n|    v0.8.x    |    ✗    |  v0.45.x   | v2.0.x | v0.2.x  |     v0.1.x     |                            |           |\n|    v1.x.x    |    ✓    |  v0.45.x   | v2.0.x | v0.2.x  |      N/A       | umee/v1 module/v1.4.x-umee |           |\n|    v2.x.x    |    ✗    |  v0.45.x   | v2.3.x | v0.2.x  |     v0.2.x     |   umee/v2 module/v1.4.x    |           |\n|   v3.0-1.x   |    ✓    |  v0.46.x   | v5.0.x | v1.3.x+ |     v1.0.x     | umee/v3 module/v1.5.x-umee |           |\n|  v3.1.0-cw1  |    ✗    |  v0.46.x   | v5.0.x | v1.3.x+ |     v2.0.x     | umee/v3 module/v1.5.x-umee |           |\n|    v3.2.x    |    ✓    |  v0.46.6+  | v5.1.x | v1.3.x+ |     v2.0.x     |   umee/v3 v1.5.3-umee-3    |  v1.1.1   |\n|    v3.3.x    |    ✓    |  v0.46.6+  | v5.1.x | v1.3.x+ |     v2.0.2     |   umee/v3 v1.5.3-umee-3    |  v1.1.1   |\n|    v4.0.x    |    ✓    |  v0.46.6+  | v5.1.x | v1.3.x+ |     v2.0.3     |   umee/v4 v1.5.3-umee-4    |  v1.1.1   |\n|    v4.1.x    |    ✓    |  v0.46.7+  | v5.2.x | v1.3.x+ |     v2.1.0     |   umee/v4 v1.5.3-umee-4    |  v1.1.1   |\n|    v4.2.x    |    ✓    | v0.46.10+  | v5.2.x | v1.3.x+ |  umee/v2.1.1   |   umee/v4 v1.5.3-umee-4    |  v1.1.1   |\n|    v4.3.x    |    ✓    | v0.46.11+  | v6.1.x | v1.3.x+ |  umee/v2.1.1   |   umee/v4 v1.5.3-umee-6    |  v1.2.1   |\n|    v4.4.x    |    ✓    | v0.46.11+  | v6.1.x | v1.3.x+ |  umee/v2.1.4+  |   umee/v4 v1.5.3-umee-6    |  v1.2.3   |\n|    v5.0.x    |    ✓    | v0.46.13+  | v6.2.x | v1.3.x+ |  umee/v2.1.4+  |   umee/v4 v1.5.3-umee-8    |  v1.2.4   |\n|    v5.1.x    |    ✓    | v0.46.13+  | v6.2.x |   ---   |  umee/v2.1.6+  |   umee/v4 v1.5.3-umee-10   |  v1.2.4   |\n|    v5.2.x    |    ✓    | v0.46.13+  | v6.2.x |   ---   |  umee/v2.1.6+  |   umee/v4 v1.5.3-umee-10   |  v1.2.4   |\n|    v6.0.x    |    ✓    | v0.46.14+  | v6.2.x |   ---   | umee/v2.1.6-1+ |            ---             |  v1.3.0   |\n|    v6.1.x    |    ✓    | v0.46.15+  | v6.2.x |   ---   |  umee/v2.1.7+  |            ---             |  v1.3.0   |\n|    v6.2.x    |    ✓    |  v0.47.6+  | v7.2.x |   ---   |  umee/v2.3.0   |            ---             |  v1.5.0   |\n|    v6.3.x    |    ✓    |  v0.47.7+  | v7.3.1 |   ---   |  umee/v2.3.0+  |            ---             |  v1.5.0   |\n|    v6.4.x    |    x    | v0.47.10+  | v7.3.2 |   ---   |  umee/v2.4.1+  |            ---             |  v1.5.2   |\n|    v6.5.x    |    x    | v0.47.11+  | v7.6.0 |   ---   |  umee/v2.4.3+  |            ---             |  v1.5.2   |\n|    v6.6.x    |    x    | v0.47.11+  | v7.6.0 |   ---   |  umee/v2.4.3+  |            ---             |  v1.5.2   |\n|    v6.7.x    |    x    | v0.47.14+  | v7.8.0 |   ---   |  umee/v2.4.4+  |            ---             |  v1.5.5   |\n\n#### Price Feeder\n\nSince `Price Feeder v2.4.4` the recommended oracle price feeder has been moved to this [repository](https://github.com/ojo-network/price-feeder/tree/umee) with the version prefix `umee/`.\n\n#### libwasmvm\n\nWhen you build the binary from source on the server machine you probably don't need any change. Building from source automatically link the `libwasmvm.$(uname -m).so` created as a part of the build process.\n\nHowever when you download a binary from GitHub, or from another source, make sure you have the required version of `libwasmvm.\u003ccpu_arch\u003e.so` (should be in your lib directory, e.g.: `/usr/local/lib/`). You can get it:\n\n- from your build machine: copy `$GOPATH/pkg/mod/github.com/!cosm!wasm/wasmvm@v\u003cversion\u003e/internal/api/libwasmvm.$(uname -m).so`\n- or download from CosmWasm GitHub `wget https://raw.githubusercontent.com/CosmWasm/wasmvm/v\u003cversion\u003e/internal/api/libwasmvm.$(uname -m).so -O /lib/libwasmvm.$(uname -m).so`\n\nYou don't need to do anything if you are using our Docker image.\n\n### Active Networks\n\nPublic:\n\n- [umee-1](networks/umee-1) (mainnet)\n- canon-4 (testnet)\n\n## Build\n\nTo install the `umeed` binary:\n\n```shell\n$ make build\n```\n\n### Docker build\n\n```bash\ndocker build -t umee-network/umeed -f contrib/images/umeed.dockerfile .\n\n# start bash\ndocker run -it --name umeed umee-network/umeed bash\n\n# or start the node if you already have a node directory setup\ndocker run -it --name umeed umee-network/umeed umeed start\n```\n\n### Recommended Database Backend\n\nWe recommend to use RocksDB. It requires to install `rocksdb` system libraries.\nWe plan to migrate newer version of badgerdb, which brings lot of improvements and simplifies the setup.\n\nTo build with `rocksdb` enabled:\n\n```bash\nENABLE_ROCKSDB=true COSMOS_BUILD_OPTIONS=rocksdb  make build\n```\n\nOnce you generate config files, you need to update:\n\n```bash\n# app.toml / base configuration options\napp-db-backend = \"rocksdb\"\n\n# config.toml / base configuration options\ndb_backend = \"rocksdb\"\n```\n\n### Swagger\n\n- To update the latest swagger docs, follow these steps\n\nGenerate the latest swagger:\n\n```bash\n $ make proto-swagger-gen\n $ make proto-update-swagger-docs\n```\n\nBuild the new binary or install the new binary with the latest swagger docs:\n\n```bash\n$ make build\n# or\n$ make install\n```\n\nMake sure to execute these commands whenever you want to update the swagger documentation.\n\n- To enable it, modify the node config at `$UMEE_HOME/config/app.toml` to `api.swagger` `true`\n- Run the node normally `umeed start`\n- Enter the swagger docs `http://localhost:1317/swagger/`\n\n### Cosmovisor\n\n\u003e [Docs](https://github.com/cosmos/cosmos-sdk/tree/main/tools/cosmovisor)\n\u003e Note: `cosmovisor` only works for upgrades in the `umeed`, for off-chain processes updates like `peggo` or `price-feeder`, manual steps are required.\n\n- `cosmovisor` is a small process manager for Cosmos SDK application binaries that monitors the governance module for incoming chain upgrade proposals. If it sees a proposal that gets approved, `cosmovisor` can automatically download\n  the new binary, stop the current binary, switch from the old binary to the new one, and finally restart the node with the new binary.\n\n- Install it with go\n\n```shell\ngo install cosmossdk.io/tools/cosmovisor/cmd/cosmovisor@latest\n```\n\n- Create folders for Cosmovisor\n\n```shell\nmkdir -p ~/.umee/cosmovisor/genesis/bin\nmkdir -p ~/.umee/cosmovisor/upgrades\n\ncp \u003cpath-to-umeed-binary\u003e ~/.umee/cosmovisor/genesis/bin\n```\n\n- For the usual use of `cosmovisor`, we recommend setting theses env variables\n\n```shell\nexport DAEMON_NAME=umeed\nexport DAEMON_HOME={NODE_HOME}\nexport DAEMON_RESTART_AFTER_UPGRADE=true\nexport DAEMON_ALLOW_DOWNLOAD_BINARIES=true\nexport DAEMON_PREUPGRADE_MAX_RETRIES=3\n```\n\n- If you didn't build binary from source in the machine, you have to download the respective `libwasmvm` into your machine.\n\n```bash\n$ wget https://raw.githubusercontent.com/CosmWasm/wasmvm/v1.5.0/internal/api/libwasmvm.$(uname -m).so -O /lib/libwasmvm.$(uname -m).so\n```\n\n- To use `cosmovisor` for starting `umeed` process, instead of calling `umeed start`, use `cosmovisor run start [umeed flags]`\n\n## Validators\n\nPlease follow [Validator Instructions](./docs/VALIDATOR.md) for setting up a validator node.\n\n## Liquidators\n\nA guide to running liquidations on Umee can be found [here](./x/leverage/LIQUIDATION.md)\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fumee-network%2Fumee","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fumee-network%2Fumee","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fumee-network%2Fumee/lists"}