{"id":13452394,"url":"https://github.com/wasmerio/wasmer","last_synced_at":"2026-10-26T20:18:27.197Z","repository":{"id":37270224,"uuid":"152572186","full_name":"wasmerio/wasmer","owner":"wasmerio","description":"🚀 Fast and lightweight sandboxes for your apps and AI agents","archived":false,"fork":false,"pushed_at":"2026-10-20T17:03:43.000Z","size":3523338,"stargazers_count":21179,"open_issues_count":294,"forks_count":1025,"subscribers_count":194,"default_branch":"main","last_synced_at":"2026-10-20T18:54:06.258Z","etag":null,"topics":["emscripten","linux","macos","rust","wasi","wasix","wasm","wasmer","webassembly","windows"],"latest_commit_sha":null,"homepage":"https://wasmer.io","language":"Rust","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/wasmerio.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":"docs/CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":".github/CODEOWNERS","security":"docs/SECURITY.md","accessibility":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":"AGENTS.md","claude":"CLAUDE.md","gemini":null,"cursor":null,"copilot":".github/copilot-instructions.md","dco":null,"cla":null,"disclosure":null}},"created_at":"2018-10-11T10:15:53.000Z","updated_at":"2026-10-20T14:55:05.000Z","dependencies_parsed_at":"2026-10-13T15:23:36.756Z","dependency_job_id":null,"html_url":"https://github.com/wasmerio/wasmer","commit_stats":{"total_commits":14689,"total_committers":203,"mean_commits":72.35960591133005,"dds":0.8163251412621689,"last_synced_commit":"1d03406174b204ac403f61e2deb0a41601c8e41b"},"previous_names":[],"tags_count":155,"template":false,"template_full_name":null,"purl":"pkg:github/wasmerio/wasmer","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/wasmerio%2Fwasmer","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/wasmerio%2Fwasmer/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/wasmerio%2Fwasmer/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/wasmerio%2Fwasmer/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/wasmerio","download_url":"https://codeload.github.com/wasmerio/wasmer/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/wasmerio%2Fwasmer/sbom","scorecard":{"id":381702,"data":{"date":"2025-07-21","repo":{"name":"github.com/wasmerio/wasmer","commit":"641030b8d9414ac0ddd31500631d3cd863c1608f"},"scorecard":{"version":"v5.2.1-24-gc29a04d4","commit":"c29a04d46d1570393e94662bc34e9906398e1bfa"},"score":5.1,"checks":[{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: docs/SECURITY.md:1","Info: Found linked content: docs/SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: docs/SECURITY.md:1","Info: Found text in security policy: docs/SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/c29a04d46d1570393e94662bc34e9906398e1bfa/docs/checks.md#security-policy"}},{"name":"Maintained","score":10,"reason":"30 commit(s) and 9 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/c29a04d46d1570393e94662bc34e9906398e1bfa/docs/checks.md#maintained"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/c29a04d46d1570393e94662bc34e9906398e1bfa/docs/checks.md#cii-best-practices"}},{"name":"Code-Review","score":10,"reason":"all changesets reviewed","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/c29a04d46d1570393e94662bc34e9906398e1bfa/docs/checks.md#code-review"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: MIT License: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/c29a04d46d1570393e94662bc34e9906398e1bfa/docs/checks.md#license"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/c29a04d46d1570393e94662bc34e9906398e1bfa/docs/checks.md#dangerous-workflow"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/c29a04d46d1570393e94662bc34e9906398e1bfa/docs/checks.md#packaging"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Warn: no topLevel permission defined: .github/workflows/benchmark.yaml:1","Warn: no topLevel permission defined: .github/workflows/build.yml:1","Warn: no topLevel permission defined: .github/workflows/cache-bucket-cleanup.yaml:1","Warn: no topLevel permission defined: .github/workflows/check-public-api.yaml:1","Warn: no topLevel permission defined: .github/workflows/cloudcompiler.yaml:1","Warn: no topLevel permission defined: .github/workflows/documentation.yaml:1","Warn: no topLevel permission defined: .github/workflows/test.yaml:1","Warn: no topLevel permission defined: .github/workflows/wasmer-config.yaml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/c29a04d46d1570393e94662bc34e9906398e1bfa/docs/checks.md#token-permissions"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/c29a04d46d1570393e94662bc34e9906398e1bfa/docs/checks.md#branch-protection"}},{"name":"Binary-Artifacts","score":0,"reason":"binaries present in source code","details":["Warn: binary detected: benches/mods/argon2.wasm:1","Warn: binary detected: benches/mods/bulk_ops.wasm:1","Warn: binary detected: benches/mods/counter.wasm:1","Warn: binary detected: benches/mods/fib_iter.wasm:1","Warn: binary detected: benches/mods/fib_rec.wasm:1","Warn: binary detected: benches/mods/matmul.wasm:1","Warn: binary detected: benches/mods/primes.wasm:1","Warn: binary detected: lib/api/tests/simple-name-section.wasm:1","Warn: binary detected: lib/c-api/examples/assets/call_trap.wasm:1","Warn: binary detected: lib/c-api/examples/assets/qjs.wasm:1","Warn: binary detected: lib/c-api/tests/wasm-c-api/example/callback.wasm:1","Warn: binary detected: lib/c-api/tests/wasm-c-api/example/finalize.wasm:1","Warn: binary detected: lib/c-api/tests/wasm-c-api/example/global.wasm:1","Warn: binary detected: lib/c-api/tests/wasm-c-api/example/hello.wasm:1","Warn: binary detected: lib/c-api/tests/wasm-c-api/example/hostref.wasm:1","Warn: binary detected: lib/c-api/tests/wasm-c-api/example/memory.wasm:1","Warn: binary detected: lib/c-api/tests/wasm-c-api/example/multi.wasm:1","Warn: binary detected: lib/c-api/tests/wasm-c-api/example/reflect.wasm:1","Warn: binary detected: lib/c-api/tests/wasm-c-api/example/serialize.wasm:1","Warn: binary detected: lib/c-api/tests/wasm-c-api/example/start.wasm:1","Warn: binary detected: lib/c-api/tests/wasm-c-api/example/table.wasm:1","Warn: binary detected: lib/c-api/tests/wasm-c-api/example/threads.wasm:1","Warn: binary detected: lib/c-api/tests/wasm-c-api/example/trap.wasm:1","Warn: binary detected: lib/wasix/tests/envvar.wasm:1","Warn: binary detected: lib/wasix/tests/example-condvar.wasm:1","Warn: binary detected: lib/wasix/tests/example-epoll.wasm:1","Warn: binary detected: lib/wasix/tests/example-execve.wasm:1","Warn: binary detected: lib/wasix/tests/example-fork-longjmp.wasm:1","Warn: binary detected: lib/wasix/tests/example-fork.wasm:1","Warn: binary detected: lib/wasix/tests/example-longjmp.wasm:1","Warn: binary detected: lib/wasix/tests/example-pipe.wasm:1","Warn: binary detected: lib/wasix/tests/example-signal.wasm:1","Warn: binary detected: lib/wasix/tests/example-sleep.wasm:1","Warn: binary detected: lib/wasix/tests/example-spawn.wasm:1","Warn: binary detected: lib/wasix/tests/example-stack.wasm:1","Warn: binary detected: lib/wasix/tests/example-tcp-client.wasm:1","Warn: binary detected: lib/wasix/tests/example-tcp-listener.wasm:1","Warn: binary detected: lib/wasix/tests/example-thread-local.wasm:1","Warn: binary detected: lib/wasix/tests/example-vfork.wasm:1","Warn: binary detected: lib/wasix/tests/stack.wasm:1","Warn: binary detected: lib/wasix/tests/stdin-hello.wasm:1","Warn: binary detected: lib/wasix/tests/web-server.wasm:1","Warn: binary detected: tests/compilers/data/4519_singlepass_panic.wasm:1","Warn: binary detected: tests/integration/cli/tests/packages/list-cwd/main.wasm:1","Warn: binary detected: tests/integration/cli/tests/packages/nested-mounted-paths/main.o:1","Warn: binary detected: tests/integration/cli/tests/wasm/bash.wasm:1","Warn: binary detected: tests/integration/cli/tests/wasm/catsay.wasm:1","Warn: binary detected: tests/integration/cli/tests/wasm/coreutils.wasm:1","Warn: binary detected: tests/integration/cli/tests/wasm/cowsay.wasm:1","Warn: binary detected: tests/integration/cli/tests/wasm/dash.wasm:1","Warn: binary detected: tests/integration/cli/tests/wasm/dlopen.wasm:1","Warn: binary detected: tests/integration/cli/tests/wasm/dylink-needed.wasm:1","Warn: binary detected: tests/integration/cli/tests/wasm/example-condvar.wasm:1","Warn: binary detected: tests/integration/cli/tests/wasm/example-epoll.wasm:1","Warn: binary detected: tests/integration/cli/tests/wasm/example-execve.wasm:1","Warn: binary detected: tests/integration/cli/tests/wasm/example-file-copy.wasm:1","Warn: binary detected: tests/integration/cli/tests/wasm/example-fork-longjmp.wasm:1","Warn: binary detected: tests/integration/cli/tests/wasm/example-fork.wasm:1","Warn: binary detected: tests/integration/cli/tests/wasm/example-http-ok.wasm:1","Warn: binary detected: tests/integration/cli/tests/wasm/example-longjmp.wasm:1","Warn: binary detected: tests/integration/cli/tests/wasm/example-multi-threading.wasm:1","Warn: binary detected: tests/integration/cli/tests/wasm/example-pipe.wasm:1","Warn: binary detected: tests/integration/cli/tests/wasm/example-readdir_tree.wasm:1","Warn: binary detected: tests/integration/cli/tests/wasm/example-signal.wasm:1","Warn: binary detected: tests/integration/cli/tests/wasm/example-sleep.wasm:1","Warn: binary detected: tests/integration/cli/tests/wasm/example-spawn.wasm:1","Warn: binary detected: tests/integration/cli/tests/wasm/example-stack.wasm:1","Warn: binary detected: tests/integration/cli/tests/wasm/example-tcp-client.wasm:1","Warn: binary detected: tests/integration/cli/tests/wasm/example-tcp-listener.wasm:1","Warn: binary detected: tests/integration/cli/tests/wasm/example-thread-local.wasm:1","Warn: binary detected: tests/integration/cli/tests/wasm/example-tokio.wasm:1","Warn: binary detected: tests/integration/cli/tests/wasm/example-unix-pipe.wasm:1","Warn: binary detected: tests/integration/cli/tests/wasm/example-vfork.wasm:1","Warn: binary detected: tests/integration/cli/tests/wasm/exit-0-from-main.wasm:1","Warn: binary detected: tests/integration/cli/tests/wasm/exit-0-from-worker.wasm:1","Warn: binary detected: tests/integration/cli/tests/wasm/exit-1-from-main.wasm:1","Warn: binary detected: tests/integration/cli/tests/wasm/exit-1-from-worker.wasm:1","Warn: binary detected: tests/integration/cli/tests/wasm/fs-rename.wasm:1","Warn: binary detected: tests/integration/cli/tests/wasm/kibi.wasm:1","Warn: binary detected: tests/integration/cli/tests/wasm/libside1.so:1","Warn: binary detected: tests/integration/cli/tests/wasm/libside2.so:1","Warn: binary detected: tests/integration/cli/tests/wasm/minimodem.wasm:1","Warn: binary detected: tests/integration/cli/tests/wasm/mkdir-rename.wasm:1","Warn: binary detected: tests/integration/cli/tests/wasm/mother.wasm:1","Warn: binary detected: tests/integration/cli/tests/wasm/multi-threading.wasm:1","Warn: binary detected: tests/integration/cli/tests/wasm/php.wasm:1","Warn: binary detected: tests/integration/cli/tests/wasm/python-3.11.3.wasm:1","Warn: binary detected: tests/integration/cli/tests/wasm/qjs.wasm:1","Warn: binary detected: tests/integration/cli/tests/wasm/stdin-hello.wasm:1","Warn: binary detected: tests/integration/cli/tests/wasm/threaded-memory.wasm:1","Warn: binary detected: tests/integration/cli/tests/wasm/wasi-threads.wasm:1","Warn: binary detected: tests/integration/cli/tests/wasm/web-server-epoll.wasm:1","Warn: binary detected: tests/integration/cli/tests/wasm/web-server-poll.wasm:1","Warn: binary detected: tests/integration/cli/tests/wasm/worker-panicking.wasm:1","Warn: binary detected: tests/integration/cli/tests/wasm/worker-terminating-normally.wasm:1","Warn: binary detected: tests/wasi-wast/wasi/nightly_2022_10_18/close_preopen_fd.wasm:1","Warn: binary detected: tests/wasi-wast/wasi/nightly_2022_10_18/create_dir.wasm:1","Warn: binary detected: tests/wasi-wast/wasi/nightly_2022_10_18/envvar.wasm:1","Warn: binary detected: tests/wasi-wast/wasi/nightly_2022_10_18/fd_append.wasm:1","Warn: binary detected: tests/wasi-wast/wasi/nightly_2022_10_18/fd_rename_path.wasm:1","Warn: binary detected: tests/wasi-wast/wasi/nightly_2022_10_18/fd_rights.wasm:1","Warn: binary detected: tests/wasi-wast/wasi/nightly_2022_10_18/fd_sync.wasm:1","Warn: binary detected: tests/wasi-wast/wasi/nightly_2022_10_18/file_metadata.wasm:1","Warn: binary detected: tests/wasi-wast/wasi/nightly_2022_10_18/fs_sandbox_test.wasm:1","Warn: binary detected: tests/wasi-wast/wasi/nightly_2022_10_18/fseek.wasm:1","Warn: binary detected: tests/wasi-wast/wasi/nightly_2022_10_18/hello.wasm:1","Warn: binary detected: tests/wasi-wast/wasi/nightly_2022_10_18/isatty.wasm:1","Warn: binary detected: tests/wasi-wast/wasi/nightly_2022_10_18/mapdir.wasm:1","Warn: binary detected: tests/wasi-wast/wasi/nightly_2022_10_18/mapdir_with_leading_slash.wasm:1","Warn: binary detected: tests/wasi-wast/wasi/nightly_2022_10_18/path_link.wasm:1","Warn: binary detected: tests/wasi-wast/wasi/nightly_2022_10_18/path_rename.wasm:1","Warn: binary detected: tests/wasi-wast/wasi/nightly_2022_10_18/path_symlink.wasm:1","Warn: binary detected: tests/wasi-wast/wasi/nightly_2022_10_18/pipe_reverse.wasm:1","Warn: binary detected: tests/wasi-wast/wasi/nightly_2022_10_18/quine.wasm:1","Warn: binary detected: tests/wasi-wast/wasi/nightly_2022_10_18/readlink.wasm:1","Warn: binary detected: tests/wasi-wast/wasi/nightly_2022_10_18/unix_open_special_files.wasm:1","Warn: binary detected: tests/wasi-wast/wasi/nightly_2022_10_18/wasi_sees_virtual_root.wasm:1","Warn: binary detected: tests/wasi-wast/wasi/nightly_2022_10_18/writing.wasm:1","Warn: binary detected: tests/wasi-wast/wasi/snapshot1/close_preopen_fd.wasm:1","Warn: binary detected: tests/wasi-wast/wasi/snapshot1/create_dir.wasm:1","Warn: binary detected: tests/wasi-wast/wasi/snapshot1/envvar.wasm:1","Warn: binary detected: tests/wasi-wast/wasi/snapshot1/fd_allocate.wasm:1","Warn: binary detected: tests/wasi-wast/wasi/snapshot1/fd_append.wasm:1","Warn: binary detected: tests/wasi-wast/wasi/snapshot1/fd_close.wasm:1","Warn: binary detected: tests/wasi-wast/wasi/snapshot1/fd_pread.wasm:1","Warn: binary detected: tests/wasi-wast/wasi/snapshot1/fd_read.wasm:1","Warn: binary detected: tests/wasi-wast/wasi/snapshot1/fd_rename_path.wasm:1","Warn: binary detected: tests/wasi-wast/wasi/snapshot1/fd_sync.wasm:1","Warn: binary detected: tests/wasi-wast/wasi/snapshot1/file_metadata.wasm:1","Warn: binary detected: tests/wasi-wast/wasi/snapshot1/fs_sandbox_test.wasm:1","Warn: binary detected: tests/wasi-wast/wasi/snapshot1/fseek.wasm:1","Warn: binary detected: tests/wasi-wast/wasi/snapshot1/hello.wasm:1","Warn: binary detected: tests/wasi-wast/wasi/snapshot1/inode.wasm:1","Warn: binary detected: tests/wasi-wast/wasi/snapshot1/isatty.wasm:1","Warn: binary detected: tests/wasi-wast/wasi/snapshot1/mapdir.wasm:1","Warn: binary detected: tests/wasi-wast/wasi/snapshot1/mapdir_with_leading_slash.wasm:1","Warn: binary detected: tests/wasi-wast/wasi/snapshot1/path_link.wasm:1","Warn: binary detected: tests/wasi-wast/wasi/snapshot1/path_rename.wasm:1","Warn: binary detected: tests/wasi-wast/wasi/snapshot1/path_symlink.wasm:1","Warn: binary detected: tests/wasi-wast/wasi/snapshot1/pipe_reverse.wasm:1","Warn: binary detected: tests/wasi-wast/wasi/snapshot1/poll_oneoff.wasm:1","Warn: binary detected: tests/wasi-wast/wasi/snapshot1/quine.wasm:1","Warn: binary detected: tests/wasi-wast/wasi/snapshot1/readlink.wasm:1","Warn: binary detected: tests/wasi-wast/wasi/snapshot1/unix_open_special_files.wasm:1","Warn: binary detected: tests/wasi-wast/wasi/snapshot1/wasi_sees_virtual_root.wasm:1","Warn: binary detected: tests/wasi-wast/wasi/snapshot1/writing.wasm:1","Warn: binary detected: tests/wasi-wast/wasi/unstable/close_preopen_fd.wasm:1","Warn: binary detected: tests/wasi-wast/wasi/unstable/create_dir.wasm:1","Warn: binary detected: tests/wasi-wast/wasi/unstable/envvar.wasm:1","Warn: binary detected: tests/wasi-wast/wasi/unstable/fd_allocate.wasm:1","Warn: binary detected: tests/wasi-wast/wasi/unstable/fd_append.wasm:1","Warn: binary detected: tests/wasi-wast/wasi/unstable/fd_close.wasm:1","Warn: binary detected: tests/wasi-wast/wasi/unstable/fd_pread.wasm:1","Warn: binary detected: tests/wasi-wast/wasi/unstable/fd_read.wasm:1","Warn: binary detected: tests/wasi-wast/wasi/unstable/fd_sync.wasm:1","Warn: binary detected: tests/wasi-wast/wasi/unstable/file_metadata.wasm:1","Warn: binary detected: tests/wasi-wast/wasi/unstable/fs_sandbox_test.wasm:1","Warn: binary detected: tests/wasi-wast/wasi/unstable/fseek.wasm:1","Warn: binary detected: tests/wasi-wast/wasi/unstable/hello.wasm:1","Warn: binary detected: tests/wasi-wast/wasi/unstable/isatty.wasm:1","Warn: binary detected: tests/wasi-wast/wasi/unstable/mapdir.wasm:1","Warn: binary detected: tests/wasi-wast/wasi/unstable/mapdir_with_leading_slash.wasm:1","Warn: binary detected: tests/wasi-wast/wasi/unstable/path_link.wasm:1","Warn: binary detected: tests/wasi-wast/wasi/unstable/path_rename.wasm:1","Warn: binary detected: tests/wasi-wast/wasi/unstable/path_symlink.wasm:1","Warn: binary detected: tests/wasi-wast/wasi/unstable/pipe_reverse.wasm:1","Warn: binary detected: tests/wasi-wast/wasi/unstable/poll_oneoff.wasm:1","Warn: binary detected: tests/wasi-wast/wasi/unstable/quine.wasm:1","Warn: binary detected: tests/wasi-wast/wasi/unstable/readlink.wasm:1","Warn: binary detected: tests/wasi-wast/wasi/unstable/unix_open_special_files.wasm:1","Warn: binary detected: tests/wasi-wast/wasi/unstable/wasi_sees_virtual_root.wasm:1","Warn: binary detected: tests/wasi-wast/wasi/unstable/writing.wasm:1"],"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/c29a04d46d1570393e94662bc34e9906398e1bfa/docs/checks.md#binary-artifacts"}},{"name":"Fuzzing","score":10,"reason":"project is fuzzed","details":["Info: OSSFuzz integration found","Info: RustCargoFuzzer integration found: fuzz/fuzz_targets/deterministic.rs:3","Info: RustCargoFuzzer integration found: fuzz/fuzz_targets/equivalence_universal.rs:5","Info: RustCargoFuzzer integration found: fuzz/fuzz_targets/metering.rs:3","Info: RustCargoFuzzer integration found: fuzz/fuzz_targets/universal_cranelift.rs:3","Info: RustCargoFuzzer integration found: fuzz/fuzz_targets/universal_llvm.rs:3","Info: RustCargoFuzzer integration found: fuzz/fuzz_targets/universal_singlepass.rs:3"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/c29a04d46d1570393e94662bc34e9906398e1bfa/docs/checks.md#fuzzing"}},{"name":"Signed-Releases","score":0,"reason":"Project has not signed or included provenance with any releases.","details":["Warn: release artifact v6.1.0-rc.2 not signed: https://api.github.com/repos/wasmerio/wasmer/releases/232931149","Warn: release artifact v6.0.1 not signed: https://api.github.com/repos/wasmerio/wasmer/releases/217629918","Warn: release artifact v5.0.6 not signed: https://api.github.com/repos/wasmerio/wasmer/releases/216201675","Warn: release artifact v6.0.0 not signed: https://api.github.com/repos/wasmerio/wasmer/releases/214626918","Warn: release artifact v6.0.0-beta.1 not signed: https://api.github.com/repos/wasmerio/wasmer/releases/204340191","Warn: release artifact v6.1.0-rc.2 does not have provenance: https://api.github.com/repos/wasmerio/wasmer/releases/232931149","Warn: release artifact v6.0.1 does not have provenance: https://api.github.com/repos/wasmerio/wasmer/releases/217629918","Warn: release artifact v5.0.6 does not have provenance: https://api.github.com/repos/wasmerio/wasmer/releases/216201675","Warn: release artifact v6.0.0 does not have provenance: https://api.github.com/repos/wasmerio/wasmer/releases/214626918","Warn: release artifact v6.0.0-beta.1 does not have provenance: https://api.github.com/repos/wasmerio/wasmer/releases/204340191"],"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/c29a04d46d1570393e94662bc34e9906398e1bfa/docs/checks.md#signed-releases"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 30 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/c29a04d46d1570393e94662bc34e9906398e1bfa/docs/checks.md#sast"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/benchmark.yaml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/wasmerio/wasmer/benchmark.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/benchmark.yaml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/wasmerio/wasmer/benchmark.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/benchmark.yaml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/wasmerio/wasmer/benchmark.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/benchmark.yaml:62: update your workflow using https://app.stepsecurity.io/secureworkflow/wasmerio/wasmer/benchmark.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yml:120: update your workflow using https://app.stepsecurity.io/secureworkflow/wasmerio/wasmer/build.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/build.yml:155: update your workflow using https://app.stepsecurity.io/secureworkflow/wasmerio/wasmer/build.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/build.yml:158: update your workflow using https://app.stepsecurity.io/secureworkflow/wasmerio/wasmer/build.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/build.yml:162: update your workflow using https://app.stepsecurity.io/secureworkflow/wasmerio/wasmer/build.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yml:199: update your workflow using https://app.stepsecurity.io/secureworkflow/wasmerio/wasmer/build.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yml:205: update your workflow using https://app.stepsecurity.io/secureworkflow/wasmerio/wasmer/build.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/build.yml:304: update your workflow using https://app.stepsecurity.io/secureworkflow/wasmerio/wasmer/build.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yml:328: update your workflow using https://app.stepsecurity.io/secureworkflow/wasmerio/wasmer/build.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yml:339: update your workflow using https://app.stepsecurity.io/secureworkflow/wasmerio/wasmer/build.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/build.yml:344: update your workflow using https://app.stepsecurity.io/secureworkflow/wasmerio/wasmer/build.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yml:395: update your workflow using https://app.stepsecurity.io/secureworkflow/wasmerio/wasmer/build.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yml:406: update your workflow using https://app.stepsecurity.io/secureworkflow/wasmerio/wasmer/build.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/build.yml:407: update your workflow using https://app.stepsecurity.io/secureworkflow/wasmerio/wasmer/build.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yml:428: update your workflow using https://app.stepsecurity.io/secureworkflow/wasmerio/wasmer/build.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yml:439: update your workflow using https://app.stepsecurity.io/secureworkflow/wasmerio/wasmer/build.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/build.yml:440: update your workflow using https://app.stepsecurity.io/secureworkflow/wasmerio/wasmer/build.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yml:457: update your workflow using https://app.stepsecurity.io/secureworkflow/wasmerio/wasmer/build.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yml:468: update your workflow using https://app.stepsecurity.io/secureworkflow/wasmerio/wasmer/build.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/build.yml:469: update your workflow using https://app.stepsecurity.io/secureworkflow/wasmerio/wasmer/build.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yml:522: update your workflow using https://app.stepsecurity.io/secureworkflow/wasmerio/wasmer/build.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yml:535: update your workflow using https://app.stepsecurity.io/secureworkflow/wasmerio/wasmer/build.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yml:540: update your workflow using https://app.stepsecurity.io/secureworkflow/wasmerio/wasmer/build.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yml:549: update your workflow using https://app.stepsecurity.io/secureworkflow/wasmerio/wasmer/build.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yml:558: update your workflow using https://app.stepsecurity.io/secureworkflow/wasmerio/wasmer/build.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yml:567: update your workflow using https://app.stepsecurity.io/secureworkflow/wasmerio/wasmer/build.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yml:576: update your workflow using https://app.stepsecurity.io/secureworkflow/wasmerio/wasmer/build.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yml:585: update your workflow using https://app.stepsecurity.io/secureworkflow/wasmerio/wasmer/build.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yml:594: update your workflow using https://app.stepsecurity.io/secureworkflow/wasmerio/wasmer/build.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yml:613: update your workflow using https://app.stepsecurity.io/secureworkflow/wasmerio/wasmer/build.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yml:622: update your workflow using https://app.stepsecurity.io/secureworkflow/wasmerio/wasmer/build.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cache-bucket-cleanup.yaml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/wasmerio/wasmer/cache-bucket-cleanup.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/check-public-api.yaml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/wasmerio/wasmer/check-public-api.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/check-public-api.yaml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/wasmerio/wasmer/check-public-api.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/check-public-api.yaml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/wasmerio/wasmer/check-public-api.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cloudcompiler.yaml:19: update your workflow using https://app.stepsecurity.io/secureworkflow/wasmerio/wasmer/cloudcompiler.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/cloudcompiler.yaml:23: update your workflow using https://app.stepsecurity.io/secureworkflow/wasmerio/wasmer/cloudcompiler.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/cloudcompiler.yaml:32: update your workflow using https://app.stepsecurity.io/secureworkflow/wasmerio/wasmer/cloudcompiler.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/cloudcompiler.yaml:73: update your workflow using https://app.stepsecurity.io/secureworkflow/wasmerio/wasmer/cloudcompiler.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/documentation.yaml:18: update your workflow using https://app.stepsecurity.io/secureworkflow/wasmerio/wasmer/documentation.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/documentation.yaml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/wasmerio/wasmer/documentation.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/documentation.yaml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/wasmerio/wasmer/documentation.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yaml:221: update your workflow using https://app.stepsecurity.io/secureworkflow/wasmerio/wasmer/test.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yaml:445: update your workflow using https://app.stepsecurity.io/secureworkflow/wasmerio/wasmer/test.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yaml:477: update your workflow using https://app.stepsecurity.io/secureworkflow/wasmerio/wasmer/test.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yaml:828: update your workflow using https://app.stepsecurity.io/secureworkflow/wasmerio/wasmer/test.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test.yaml:843: update your workflow using https://app.stepsecurity.io/secureworkflow/wasmerio/wasmer/test.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test.yaml:858: update your workflow using https://app.stepsecurity.io/secureworkflow/wasmerio/wasmer/test.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test.yaml:863: update your workflow using https://app.stepsecurity.io/secureworkflow/wasmerio/wasmer/test.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test.yaml:899: update your workflow using https://app.stepsecurity.io/secureworkflow/wasmerio/wasmer/test.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test.yaml:1125: update your workflow using https://app.stepsecurity.io/secureworkflow/wasmerio/wasmer/test.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yaml:100: update your workflow using https://app.stepsecurity.io/secureworkflow/wasmerio/wasmer/test.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test.yaml:101: update your workflow using https://app.stepsecurity.io/secureworkflow/wasmerio/wasmer/test.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yaml:163: update your workflow using https://app.stepsecurity.io/secureworkflow/wasmerio/wasmer/test.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test.yaml:165: update your workflow using https://app.stepsecurity.io/secureworkflow/wasmerio/wasmer/test.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test.yaml:178: update your workflow using https://app.stepsecurity.io/secureworkflow/wasmerio/wasmer/test.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yaml:571: update your workflow using https://app.stepsecurity.io/secureworkflow/wasmerio/wasmer/test.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test.yaml:593: update your workflow using https://app.stepsecurity.io/secureworkflow/wasmerio/wasmer/test.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test.yaml:598: update your workflow using https://app.stepsecurity.io/secureworkflow/wasmerio/wasmer/test.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test.yaml:600: update your workflow using https://app.stepsecurity.io/secureworkflow/wasmerio/wasmer/test.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test.yaml:681: update your workflow using https://app.stepsecurity.io/secureworkflow/wasmerio/wasmer/test.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yaml:737: update your workflow using https://app.stepsecurity.io/secureworkflow/wasmerio/wasmer/test.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yaml:744: update your workflow using https://app.stepsecurity.io/secureworkflow/wasmerio/wasmer/test.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yaml:954: update your workflow using https://app.stepsecurity.io/secureworkflow/wasmerio/wasmer/test.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test.yaml:955: update your workflow using https://app.stepsecurity.io/secureworkflow/wasmerio/wasmer/test.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yaml:965: update your workflow using https://app.stepsecurity.io/secureworkflow/wasmerio/wasmer/test.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yaml:969: update your workflow using https://app.stepsecurity.io/secureworkflow/wasmerio/wasmer/test.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test.yaml:975: update your workflow using https://app.stepsecurity.io/secureworkflow/wasmerio/wasmer/test.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test.yaml:980: update your workflow using https://app.stepsecurity.io/secureworkflow/wasmerio/wasmer/test.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test.yaml:982: update your workflow using https://app.stepsecurity.io/secureworkflow/wasmerio/wasmer/test.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yaml:1000: update your workflow using https://app.stepsecurity.io/secureworkflow/wasmerio/wasmer/test.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yaml:1004: update your workflow using https://app.stepsecurity.io/secureworkflow/wasmerio/wasmer/test.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yaml:1008: update your workflow using https://app.stepsecurity.io/secureworkflow/wasmerio/wasmer/test.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yaml:1012: update your workflow using https://app.stepsecurity.io/secureworkflow/wasmerio/wasmer/test.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yaml:1016: update your workflow using https://app.stepsecurity.io/secureworkflow/wasmerio/wasmer/test.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yaml:1020: update your workflow using https://app.stepsecurity.io/secureworkflow/wasmerio/wasmer/test.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yaml:1038: update your workflow using https://app.stepsecurity.io/secureworkflow/wasmerio/wasmer/test.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yaml:1043: update your workflow using https://app.stepsecurity.io/secureworkflow/wasmerio/wasmer/test.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yaml:1048: update your workflow using https://app.stepsecurity.io/secureworkflow/wasmerio/wasmer/test.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yaml:1053: update your workflow using https://app.stepsecurity.io/secureworkflow/wasmerio/wasmer/test.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yaml:1058: update your workflow using https://app.stepsecurity.io/secureworkflow/wasmerio/wasmer/test.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yaml:279: update your workflow using https://app.stepsecurity.io/secureworkflow/wasmerio/wasmer/test.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test.yaml:282: update your workflow using https://app.stepsecurity.io/secureworkflow/wasmerio/wasmer/test.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test.yaml:285: update your workflow using https://app.stepsecurity.io/secureworkflow/wasmerio/wasmer/test.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test.yaml:290: update your workflow using https://app.stepsecurity.io/secureworkflow/wasmerio/wasmer/test.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yaml:337: update your workflow using https://app.stepsecurity.io/secureworkflow/wasmerio/wasmer/test.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test.yaml:338: update your workflow using https://app.stepsecurity.io/secureworkflow/wasmerio/wasmer/test.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yaml:384: update your workflow using https://app.stepsecurity.io/secureworkflow/wasmerio/wasmer/test.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test.yaml:385: update your workflow using https://app.stepsecurity.io/secureworkflow/wasmerio/wasmer/test.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yaml:418: update your workflow using https://app.stepsecurity.io/secureworkflow/wasmerio/wasmer/test.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yaml:55: update your workflow using https://app.stepsecurity.io/secureworkflow/wasmerio/wasmer/test.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test.yaml:57: update your workflow using https://app.stepsecurity.io/secureworkflow/wasmerio/wasmer/test.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test.yaml:73: update your workflow using https://app.stepsecurity.io/secureworkflow/wasmerio/wasmer/test.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yaml:129: update your workflow using https://app.stepsecurity.io/secureworkflow/wasmerio/wasmer/test.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test.yaml:131: update your workflow using https://app.stepsecurity.io/secureworkflow/wasmerio/wasmer/test.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yaml:231: update your workflow using https://app.stepsecurity.io/secureworkflow/wasmerio/wasmer/test.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test.yaml:232: update your workflow using https://app.stepsecurity.io/secureworkflow/wasmerio/wasmer/test.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yaml:237: update your workflow using https://app.stepsecurity.io/secureworkflow/wasmerio/wasmer/test.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yaml:109: update your workflow using https://app.stepsecurity.io/secureworkflow/wasmerio/wasmer/test.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test.yaml:111: update your workflow using https://app.stepsecurity.io/secureworkflow/wasmerio/wasmer/test.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yaml:115: update your workflow using https://app.stepsecurity.io/secureworkflow/wasmerio/wasmer/test.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/wasmer-config.yaml:23: update your workflow using https://app.stepsecurity.io/secureworkflow/wasmerio/wasmer/wasmer-config.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/wasmer-config.yaml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/wasmerio/wasmer/wasmer-config.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/wasmer-config.yaml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/wasmerio/wasmer/wasmer-config.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/wasmer-config.yaml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/wasmerio/wasmer/wasmer-config.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/wasmer-config.yaml:44: update your workflow using https://app.stepsecurity.io/secureworkflow/wasmerio/wasmer/wasmer-config.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/wasmer-config.yaml:46: update your workflow using https://app.stepsecurity.io/secureworkflow/wasmerio/wasmer/wasmer-config.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/wasmer-config.yaml:48: update your workflow using https://app.stepsecurity.io/secureworkflow/wasmerio/wasmer/wasmer-config.yaml/main?enable=pin","Warn: containerImage not pinned by hash: .github/cross-linux-aarch64/Dockerfile:1: pin your Docker image by updating rust:1 to rust:1@sha256:af306cfa71d987911a781c37b59d7d67d934f49684058f96cf72079c3626bfe0","Warn: containerImage not pinned by hash: .github/cross-linux-riscv64/Dockerfile:1","Warn: containerImage not pinned by hash: lib/c-api/tests/wasm-c-api/Dockerfile:1: pin your Docker image by updating ubuntu:bionic to ubuntu:bionic@sha256:152dc042452c496007f07ca9127571cb9c29697f42acbfad72324b2bb2e43c98","Warn: downloadThenRun not pinned by hash: .github/cross-linux-aarch64/Dockerfile:8-11","Warn: downloadThenRun not pinned by hash: .github/cross-linux-riscv64/Dockerfile:29","Warn: pipCommand not pinned by hash: .github/workflows/benchmark.yaml:67","Warn: pipCommand not pinned by hash: .github/workflows/benchmark.yaml:68","Warn: chocoCommand not pinned by hash: .github/workflows/build.yml:143","Warn: pipCommand not pinned by hash: .github/workflows/cache-bucket-cleanup.yaml:20","Warn: downloadThenRun not pinned by hash: .github/workflows/test.yaml:120","Warn: chocoCommand not pinned by hash: .github/workflows/test.yaml:310","Warn: downloadThenRun not pinned by hash: .github/workflows/test.yaml:137","Warn: downloadThenRun not pinned by hash: .github/workflows/test.yaml:175","Info:   0 out of  65 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of  46 third-party GitHubAction dependencies pinned","Info:   0 out of   2 chocoCommand dependencies pinned","Info:   0 out of   3 containerImage dependencies pinned","Info:   0 out of   5 downloadThenRun dependencies pinned","Info:   0 out of   3 pipCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/c29a04d46d1570393e94662bc34e9906398e1bfa/docs/checks.md#pinned-dependencies"}},{"name":"Vulnerabilities","score":4,"reason":"6 existing vulnerabilities detected","details":["Warn: Project is vulnerable to: RUSTSEC-2024-0436","Warn: Project is vulnerable to: RUSTSEC-2021-0127","Warn: Project is vulnerable to: RUSTSEC-2020-0071 / GHSA-wcg3-cvx6-7396","Warn: Project is vulnerable to: GHSA-c827-hfw6-qwvm","Warn: Project is vulnerable to: RUSTSEC-2023-0075 / GHSA-r24f-hg58-vfrw","Warn: Project is vulnerable to: RUSTSEC-2023-0018 / GHSA-mc8h-8q98-g5hr"],"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/c29a04d46d1570393e94662bc34e9906398e1bfa/docs/checks.md#vulnerabilities"}}]},"last_synced_at":"2025-08-18T15:36:01.365Z","repository_id":37270224,"created_at":"2025-08-18T15:36:01.365Z","updated_at":"2025-08-18T15:36:01.365Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":344872684,"owners_count":38411383,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-10-03T21:59:58.778Z","status":"online","status_checked_at":"2026-10-20T02:00:06.669Z","response_time":101,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["emscripten","linux","macos","rust","wasi","wasix","wasm","wasmer","webassembly","windows"],"created_at":"2024-07-31T07:01:22.906Z","updated_at":"2026-10-20T20:26:19.130Z","avatar_url":"https://github.com/wasmerio.png","language":"Rust","funding_links":[],"categories":["Rust","Applications","应用程序 Applications","Non-Web Embeddings","Libraries","Web Development","WebAssembly","windows","Virtual Machines","linux","库","WASI-compatible Runtimes","Runtime","Runtimes","应用程序"],"sub_categories":["Interpreting and Compiling WebAssembly","C++/C Toolkit","CNCF WASM Working Group","**Rust**"],"readme":"\u003cdiv align=\"center\"\u003e\n  \u003ca href=\"https://wasmer.io\"\u003e\n    \u003cpicture\u003e\n      \u003csource media=\"(prefers-color-scheme: dark)\" srcset=\"./assets/logo-white.svg\"\u003e\n      \u003cimg width=\"300\" src=\"./assets/logo.svg\" alt=\"Wasmer\"\u003e\n    \u003c/picture\u003e\n  \u003c/a\u003e\n\n  \u003ch3\u003eLightweight sandboxes for your apps and AI agents\u003c/h3\u003e\n\n  \u003cp\u003e\n    \u003ca href=\"#run-your-first-sandbox\"\u003eRun with the CLI\u003c/a\u003e ·\n    \u003ca href=\"#wasmer-sdk\"\u003eEmbed with the SDK\u003c/a\u003e ·\n    \u003ca href=\"https://wasmer.sh\"\u003eTry in your browser\u003c/a\u003e\n  \u003c/p\u003e\n\n  \u003cp\u003e\n    \u003ca href=\"https://github.com/wasmerio/wasmer/releases\"\u003e\n      \u003cimg src=\"https://img.shields.io/github/v/release/wasmerio/wasmer\" alt=\"CLI release\"\u003e\n    \u003c/a\u003e\n    \u003ca href=\"./LICENSE\"\u003e\n      \u003cimg src=\"https://img.shields.io/github/license/wasmerio/wasmer.svg\" alt=\"MIT license\"\u003e\n    \u003c/a\u003e\n    \u003ca href=\"https://github.com/wasmerio/wasmer-sdk\"\u003e\n      \u003cimg src=\"https://img.shields.io/badge/SDK-sandboxes-6f42c1\" alt=\"Wasmer Sandbox SDK\"\u003e\n    \u003c/a\u003e\n    \u003ca href=\"https://discord.gg/rWkMNStrEW\"\u003e\n      \u003cimg src=\"https://img.shields.io/discord/1110300506942881873?label=Discord\u0026logo=discord\u0026logoColor=white\" alt=\"Wasmer on Discord\"\u003e\n    \u003c/a\u003e\n  \u003c/p\u003e\n\u003c/div\u003e\n\nWasmer runs your apps in *fast*, *secure*, and *lightweight sandboxes*: locally,\nin the cloud, or in your browser.\n\n- **Secure** by default. You control file, network, and environment access.\n- **Lightweight**. Fast startup with a small memory footprint.\n- **Ready to run**. Python, JavaScript, Bash, and more from the [registry](https://wasmer.io/explore).\n- **Embeddable**. Add sandboxes to your app with the [Wasmer SDK](#wasmer-sdk).\n\n## Run your first sandbox\n\nInstall the CLI on macOS or Linux:\n\n```sh\ncurl https://get.wasmer.io -sSfL | sh\n```\n\n\u003cdetails\u003e\n\u003csummary\u003eWindows and other installation options\u003c/summary\u003e\n\n**Windows (PowerShell)**\n\n```powershell\niwr https://win.wasmer.io -useb | iex\n```\n\n**Homebrew (macOS / Linux)**\n\n```sh\nbrew install wasmer\n```\n\nSee the [installation guide](https://docs.wasmer.io/install/) for more options.\n\n\u003c/details\u003e\n\nRun Python in a sandbox:\n\n```sh\nwasmer run python/python -- -c \"print('Hello from Wasmer')\"\n```\n\n```text\nHello from Wasmer\n```\n\nOr try a shell command and Cowsay:\n\n```sh\nwasmer run wasmer/bash -- -c \"echo 'Hello from Wasmer'\"\nwasmer run syrusakbary/cowsay -- \"Hello from Wasmer\"\n```\n\nWasmer downloads the package and caches it for future runs. Use `--` to separate\nWasmer options from the arguments passed to your program. To work with local\nfiles, grant access to a directory with `--volume`; enable host networking with\n`--net` when your program needs it. See the\n[CLI guide](https://docs.wasmer.io/runtime/cli/) for details.\n\n**No installation needed:** open [wasmer.sh](https://wasmer.sh) to try a sandbox\nin your browser.\n\n## Wasmer SDK\n\nCreate a sandbox, choose your tools, and run code directly in your app with the\n[Wasmer SDK](https://github.com/wasmerio/wasmer-sdk).\n\n### Install the SDK\n\n**JavaScript / TypeScript** (Node.js 20 or newer):\n\n```sh\nnpm install @wasmer/sdk\n```\n\n\u003cdetails\u003e\n\u003csummary\u003eRust\u003c/summary\u003e\n\nThe Rust SDK currently uses a source dependency. Clone\n[`wasmerio/wasmer-sdk`](https://github.com/wasmerio/wasmer-sdk), then point your\napplication at its `rust` directory:\n\n```toml\n[dependencies]\nwasmer-sdk = { path = \"../wasmer-sdk/rust\" }\ntokio = { version = \"1\", features = [\"macros\", \"rt-multi-thread\"] }\n```\n\nFollow the [Rust setup guide](https://github.com/wasmerio/wasmer-sdk/tree/main/rust)\nfor the required toolchain and workspace patches. Crates.io publishing is\ncurrently disabled.\n\n\u003c/details\u003e\n\n\u003cdetails\u003e\n\u003csummary\u003ePython\u003c/summary\u003e\n\n```sh\npython -m pip install wasmer-sdk\n```\n\nThe SDK's Python wheels support macOS and Linux on Intel and ARM64.\nSee the [Python guide](https://github.com/wasmerio/wasmer-sdk/tree/main/python).\n\n\u003c/details\u003e\n\n\u003cdetails\u003e\n\u003csummary\u003eSwift (iOS and macOS)\u003c/summary\u003e\n\nUse Swift 6 or newer. The SDK supports macOS 12+ and iOS 27+; iOS apps require\nXcode 27 or newer.\n\nAdd the package to your `Package.swift` dependencies:\n\n```swift\n.package(\n    url: \"https://github.com/wasmerio/wasmer-sdk.git\",\n    revision: \"wasmer-sdk-swift-v0.4.0\"\n)\n```\n\nThen add the product to your target's dependencies:\n\n```swift\n.product(name: \"WasmerSDK\", package: \"wasmer-sdk\")\n```\n\nIn Xcode, you can instead add the repository URL, select\n`wasmer-sdk-swift-v0.4.0` as a revision, and choose the **WasmerSDK** product.\nSwiftPM downloads the prebuilt macOS binaries and iOS runtime resources.\n\nFor iOS, set the deployment target to **iOS 27.0** and allow local networking\nin your app's `Info.plist`:\n\n```xml\n\u003ckey\u003eNSAppTransportSecurity\u003c/key\u003e\n\u003cdict\u003e\n    \u003ckey\u003eNSAllowsLocalNetworking\u003c/key\u003e\n    \u003ctrue/\u003e\n\u003c/dict\u003e\n```\n\nBoth platforms use `import WasmerSDK` and the same API. On iOS, the SDK manages\na hidden `WKWebView`; your app does not need to display one. See the\n[Swift guide](https://github.com/wasmerio/wasmer-sdk/tree/main/swift) and\n[iOS setup guide](https://github.com/wasmerio/wasmer-sdk/tree/main/swift/WasmerWKSDK#add-to-an-app)\nfor more details.\n\n\u003c/details\u003e\n\n### Run code in a sandbox\n\n**JavaScript / TypeScript**\n\nSave this as `sandbox.mjs`:\n\n```javascript\nimport { Wasmer } from \"@wasmer/sdk/node\";\n\nconst wasmer = new Wasmer();\nconst sandbox = await wasmer.sandboxes.create({\n  packages: [\"python/python@=3.13.20\"],\n});\n\nconst output = await sandbox\n  .command(\"python\", [\"-c\", \"print('Hello from Wasmer')\"])\n  .run();\n\nconsole.log(output.text());\n```\n\nRun it with `node sandbox.mjs`. Python executes inside the sandbox; you don't\nneed Python installed on the host. See the\n[JavaScript guide](https://github.com/wasmerio/wasmer-sdk/tree/main/js).\n\n\u003cdetails\u003e\n\u003csummary\u003ePython example\u003c/summary\u003e\n\nSave this as `sandbox.py`:\n\n```python\nimport asyncio\n\nfrom wasmer_sdk import Wasmer\n\n\nasync def main():\n    wasmer = Wasmer()\n    sandbox = await wasmer.sandboxes.create(\n        packages=[\"python/python@=3.13.20\"],\n    )\n    output = await sandbox.command(\n        \"python\", [\"-c\", \"print('Hello from Wasmer')\"]\n    ).run()\n    print(output.text())\n\n\nasyncio.run(main())\n```\n\nRun it with `python sandbox.py`. See the\n[Python guide](https://github.com/wasmerio/wasmer-sdk/tree/main/python).\n\n\u003c/details\u003e\n\n\u003cdetails\u003e\n\u003csummary\u003eSwift example (iOS and macOS)\u003c/summary\u003e\n\nUse this code in an `async throws` context:\n\n```swift\nimport WasmerSDK\n\nlet wasmer = try Wasmer()\nlet sandbox = try await wasmer.sandboxes.create(\n    packages: [\"python/python@=3.13.20\"]\n)\nlet output = try await sandbox.command(\n    \"python\", [\"-c\", \"print('Hello from Swift!')\"]\n).run(timeout: 30)\nprint(try output.text())\n```\n\nSee the [Swift guide](https://github.com/wasmerio/wasmer-sdk/tree/main/swift)\nfor embedding in an iOS or macOS app and more examples.\n\n\u003c/details\u003e\n\n\u003cdetails\u003e\n\u003csummary\u003eJavaScript in the browser\u003c/summary\u003e\n\nUse the same JavaScript sandbox API with the `@wasmer/sdk/browser` import.\nExecution happens in the browser. Your page needs cross-origin isolation\n(`Cross-Origin-Opener-Policy: same-origin` and\n`Cross-Origin-Embedder-Policy: require-corp`) for worker-backed execution.\nFollow the [browser setup guide](https://github.com/wasmerio/wasmer-sdk/tree/main/js#browser)\nor explore [wasmer.sh](https://wasmer.sh).\n\n\u003c/details\u003e\n\n\u003cdetails\u003e\n\u003csummary\u003eRust example\u003c/summary\u003e\n\n```rust\nuse wasmer_sdk::{Result, Wasmer};\n\n#[tokio::main]\nasync fn main() -\u003e Result\u003c()\u003e {\n    let wasmer = Wasmer::new()?;\n    let sandbox = wasmer\n        .sandboxes()\n        .create()\n        .package(\"python/python@=3.13.20\")\n        .await?;\n\n    let output = sandbox\n        .command(\"python\")\n        .args([\"-c\", \"print('Hello from Wasmer')\"])\n        .run()\n        .await?;\n\n    println!(\"{}\", output.text()?);\n    Ok(())\n}\n```\n\nSee the [Rust guide](https://github.com/wasmerio/wasmer-sdk/tree/main/rust)\nfor workspace setup and more examples.\n\n\u003c/details\u003e\n\n### Go further\n\nBuild more with the sandbox API:\n\n- **Commands**. Run code and capture output.\n- **Processes**. Stream output and manage long-running tasks.\n- **Files**. Read and write the sandbox workspace.\n- **Tools**. Combine languages and packages in one sandbox.\n- **Services**. Run servers with explicit network access.\n\nThe SDK is currently **alpha**. See the language guides for platform support and\ncapabilities, and the [SDK examples](https://github.com/wasmerio/wasmer-sdk#what-can-you-run)\nfor Python scripts, an Edge.js HTTP server, PostgreSQL, and multiple tools sharing\none sandbox.\n\n## Software you can run\n\nStart with packages from the registry:\n\n| Software | Package |\n| --- | --- |\n| Python | [`python/python`](https://wasmer.io/python/python) |\n| JavaScript / Node.js-compatible apps | [`wasmer/edgejs`](https://wasmer.io/wasmer/edgejs) |\n| Bash | [`wasmer/bash`](https://wasmer.io/wasmer/bash) |\n| PHP | [`php/php`](https://wasmer.io/php/php) |\n| PostgreSQL | [`wasmer/pglite`](https://wasmer.io/wasmer/pglite) |\n| SQLite | [`sqlite/sqlite`](https://wasmer.io/sqlite/sqlite) |\n| FFmpeg | [`wasmer/ffmpeg`](https://wasmer.io/wasmer/ffmpeg) |\n\n[Explore more packages](https://wasmer.io/explore),\n[package your own software](https://docs.wasmer.io/registry/get-started/), or\n[deploy an application to Wasmer Edge](https://docs.wasmer.io/edge/get-started/).\n\n## Develop and contribute\n\nThis repository contains the Wasmer runtime and CLI that power the sandbox\nexperience. The sandbox SDKs live in\n[`wasmerio/wasmer-sdk`](https://github.com/wasmerio/wasmer-sdk).\nFor lower-level WebAssembly embedding, see the [Rust API](https://docs.rs/wasmer/)\nand [C API](./lib/c-api).\n\n- [Build Wasmer from source](./docs/BUILD.md)\n- [Test your changes](./docs/TEST.md)\n- [Report a security issue](./docs/SECURITY.md)\n- [Open an issue](https://github.com/wasmerio/wasmer/issues)\n\nContributions are welcome. For guidance on getting started, read\n[Contributing to Complex Projects](https://mitchellh.com/writing/contributing-to-complex-projects).\nWasmer is [MIT licensed](./LICENSE).\n\n## Community\n\nGet help, share what you're building, and meet other Wasmer users:\n\n[Discord](https://discord.gg/rWkMNStrEW) ·\n[X](https://x.com/wasmerio) ·\n[LinkedIn](https://www.linkedin.com/company/wasmerio) ·\n[Blog](https://wasmer.io/posts)\n\n\u003cdetails\u003e\n\u003csummary\u003eCommunity translations (may describe an earlier version)\u003c/summary\u003e\n\n[中文](./docs/cn/README.md) ·\n[Deutsch](./docs/de/README.md) ·\n[Español](./docs/es/README.md) ·\n[Français](./docs/fr/README.md) ·\n[日本語](./docs/ja/README.md) ·\n[한국어](./docs/ko/README.md)\n\n\u003c/details\u003e\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fwasmerio%2Fwasmer","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fwasmerio%2Fwasmer","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fwasmerio%2Fwasmer/lists"}