{"id":13452394,"url":"https://github.com/wasmerio/wasmer","last_synced_at":"2026-02-02T19:06:01.311Z","repository":{"id":37270224,"uuid":"152572186","full_name":"wasmerio/wasmer","owner":"wasmerio","description":"🚀 Fast, secure, lightweight containers based on WebAssembly","archived":false,"fork":false,"pushed_at":"2025-09-09T05:23:46.000Z","size":1260580,"stargazers_count":20010,"open_issues_count":237,"forks_count":909,"subscribers_count":201,"default_branch":"main","last_synced_at":"2025-09-09T08:24:35.319Z","etag":null,"topics":["emscripten","linux","macos","rust","wasi","wasix","wasm","wasmer","webassembly","windows"],"latest_commit_sha":null,"homepage":"https://wasmer.io","language":"Rust","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/wasmerio.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":"docs/CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":".github/CODEOWNERS","security":"docs/SECURITY.md","support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null}},"created_at":"2018-10-11T10:15:53.000Z","updated_at":"2025-09-09T06:44:00.000Z","dependencies_parsed_at":"2023-09-27T07:10:45.079Z","dependency_job_id":"ab70371e-9bc6-4ab4-83a5-58a322c58323","html_url":"https://github.com/wasmerio/wasmer","commit_stats":{"total_commits":14689,"total_committers":203,"mean_commits":72.35960591133005,"dds":0.8163251412621689,"last_synced_commit":"1d03406174b204ac403f61e2deb0a41601c8e41b"},"previous_names":[],"tags_count":124,"template":false,"template_full_name":null,"purl":"pkg:github/wasmerio/wasmer","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/wasmerio%2Fwasmer","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/wasmerio%2Fwasmer/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/wasmerio%2Fwasmer/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/wasmerio%2Fwasmer/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/wasmerio","download_url":"https://codeload.github.com/wasmerio/wasmer/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/wasmerio%2Fwasmer/sbom","scorecard":{"id":381702,"data":{"date":"2025-07-21","repo":{"name":"github.com/wasmerio/wasmer","commit":"641030b8d9414ac0ddd31500631d3cd863c1608f"},"scorecard":{"version":"v5.2.1-24-gc29a04d4","commit":"c29a04d46d1570393e94662bc34e9906398e1bfa"},"score":5.1,"checks":[{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: docs/SECURITY.md:1","Info: Found linked content: docs/SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: docs/SECURITY.md:1","Info: Found text in security policy: docs/SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/c29a04d46d1570393e94662bc34e9906398e1bfa/docs/checks.md#security-policy"}},{"name":"Maintained","score":10,"reason":"30 commit(s) and 9 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/c29a04d46d1570393e94662bc34e9906398e1bfa/docs/checks.md#maintained"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/c29a04d46d1570393e94662bc34e9906398e1bfa/docs/checks.md#cii-best-practices"}},{"name":"Code-Review","score":10,"reason":"all changesets reviewed","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/c29a04d46d1570393e94662bc34e9906398e1bfa/docs/checks.md#code-review"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: MIT License: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/c29a04d46d1570393e94662bc34e9906398e1bfa/docs/checks.md#license"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/c29a04d46d1570393e94662bc34e9906398e1bfa/docs/checks.md#dangerous-workflow"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/c29a04d46d1570393e94662bc34e9906398e1bfa/docs/checks.md#packaging"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Warn: no topLevel permission defined: .github/workflows/benchmark.yaml:1","Warn: no topLevel permission defined: .github/workflows/build.yml:1","Warn: no topLevel permission defined: .github/workflows/cache-bucket-cleanup.yaml:1","Warn: no topLevel permission defined: .github/workflows/check-public-api.yaml:1","Warn: no topLevel permission defined: .github/workflows/cloudcompiler.yaml:1","Warn: no topLevel permission defined: .github/workflows/documentation.yaml:1","Warn: no topLevel permission defined: .github/workflows/test.yaml:1","Warn: no topLevel permission defined: .github/workflows/wasmer-config.yaml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/c29a04d46d1570393e94662bc34e9906398e1bfa/docs/checks.md#token-permissions"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/c29a04d46d1570393e94662bc34e9906398e1bfa/docs/checks.md#branch-protection"}},{"name":"Binary-Artifacts","score":0,"reason":"binaries present in source code","details":["Warn: binary detected: benches/mods/argon2.wasm:1","Warn: binary detected: benches/mods/bulk_ops.wasm:1","Warn: binary detected: benches/mods/counter.wasm:1","Warn: binary detected: benches/mods/fib_iter.wasm:1","Warn: binary detected: benches/mods/fib_rec.wasm:1","Warn: binary detected: benches/mods/matmul.wasm:1","Warn: binary detected: benches/mods/primes.wasm:1","Warn: binary detected: lib/api/tests/simple-name-section.wasm:1","Warn: binary detected: lib/c-api/examples/assets/call_trap.wasm:1","Warn: binary detected: lib/c-api/examples/assets/qjs.wasm:1","Warn: binary detected: lib/c-api/tests/wasm-c-api/example/callback.wasm:1","Warn: binary detected: lib/c-api/tests/wasm-c-api/example/finalize.wasm:1","Warn: binary detected: lib/c-api/tests/wasm-c-api/example/global.wasm:1","Warn: binary detected: lib/c-api/tests/wasm-c-api/example/hello.wasm:1","Warn: binary detected: lib/c-api/tests/wasm-c-api/example/hostref.wasm:1","Warn: binary detected: lib/c-api/tests/wasm-c-api/example/memory.wasm:1","Warn: binary detected: lib/c-api/tests/wasm-c-api/example/multi.wasm:1","Warn: binary detected: lib/c-api/tests/wasm-c-api/example/reflect.wasm:1","Warn: binary detected: lib/c-api/tests/wasm-c-api/example/serialize.wasm:1","Warn: binary detected: lib/c-api/tests/wasm-c-api/example/start.wasm:1","Warn: binary detected: lib/c-api/tests/wasm-c-api/example/table.wasm:1","Warn: binary detected: lib/c-api/tests/wasm-c-api/example/threads.wasm:1","Warn: binary detected: lib/c-api/tests/wasm-c-api/example/trap.wasm:1","Warn: binary detected: lib/wasix/tests/envvar.wasm:1","Warn: binary detected: lib/wasix/tests/example-condvar.wasm:1","Warn: binary detected: lib/wasix/tests/example-epoll.wasm:1","Warn: binary detected: lib/wasix/tests/example-execve.wasm:1","Warn: binary detected: lib/wasix/tests/example-fork-longjmp.wasm:1","Warn: binary detected: lib/wasix/tests/example-fork.wasm:1","Warn: binary detected: lib/wasix/tests/example-longjmp.wasm:1","Warn: binary detected: lib/wasix/tests/example-pipe.wasm:1","Warn: binary detected: lib/wasix/tests/example-signal.wasm:1","Warn: binary detected: lib/wasix/tests/example-sleep.wasm:1","Warn: binary detected: lib/wasix/tests/example-spawn.wasm:1","Warn: binary detected: lib/wasix/tests/example-stack.wasm:1","Warn: binary detected: lib/wasix/tests/example-tcp-client.wasm:1","Warn: binary detected: lib/wasix/tests/example-tcp-listener.wasm:1","Warn: binary detected: lib/wasix/tests/example-thread-local.wasm:1","Warn: binary detected: lib/wasix/tests/example-vfork.wasm:1","Warn: binary detected: lib/wasix/tests/stack.wasm:1","Warn: binary detected: lib/wasix/tests/stdin-hello.wasm:1","Warn: binary detected: lib/wasix/tests/web-server.wasm:1","Warn: binary detected: tests/compilers/data/4519_singlepass_panic.wasm:1","Warn: binary detected: tests/integration/cli/tests/packages/list-cwd/main.wasm:1","Warn: binary detected: tests/integration/cli/tests/packages/nested-mounted-paths/main.o:1","Warn: binary detected: tests/integration/cli/tests/wasm/bash.wasm:1","Warn: binary detected: tests/integration/cli/tests/wasm/catsay.wasm:1","Warn: binary detected: tests/integration/cli/tests/wasm/coreutils.wasm:1","Warn: binary detected: tests/integration/cli/tests/wasm/cowsay.wasm:1","Warn: binary detected: tests/integration/cli/tests/wasm/dash.wasm:1","Warn: binary detected: tests/integration/cli/tests/wasm/dlopen.wasm:1","Warn: binary detected: tests/integration/cli/tests/wasm/dylink-needed.wasm:1","Warn: binary detected: tests/integration/cli/tests/wasm/example-condvar.wasm:1","Warn: binary detected: tests/integration/cli/tests/wasm/example-epoll.wasm:1","Warn: binary detected: tests/integration/cli/tests/wasm/example-execve.wasm:1","Warn: binary detected: tests/integration/cli/tests/wasm/example-file-copy.wasm:1","Warn: binary detected: tests/integration/cli/tests/wasm/example-fork-longjmp.wasm:1","Warn: binary detected: tests/integration/cli/tests/wasm/example-fork.wasm:1","Warn: binary detected: tests/integration/cli/tests/wasm/example-http-ok.wasm:1","Warn: binary detected: tests/integration/cli/tests/wasm/example-longjmp.wasm:1","Warn: binary detected: tests/integration/cli/tests/wasm/example-multi-threading.wasm:1","Warn: binary detected: tests/integration/cli/tests/wasm/example-pipe.wasm:1","Warn: binary detected: tests/integration/cli/tests/wasm/example-readdir_tree.wasm:1","Warn: binary detected: tests/integration/cli/tests/wasm/example-signal.wasm:1","Warn: binary detected: tests/integration/cli/tests/wasm/example-sleep.wasm:1","Warn: binary detected: tests/integration/cli/tests/wasm/example-spawn.wasm:1","Warn: binary detected: tests/integration/cli/tests/wasm/example-stack.wasm:1","Warn: binary detected: tests/integration/cli/tests/wasm/example-tcp-client.wasm:1","Warn: binary detected: tests/integration/cli/tests/wasm/example-tcp-listener.wasm:1","Warn: binary detected: tests/integration/cli/tests/wasm/example-thread-local.wasm:1","Warn: binary detected: tests/integration/cli/tests/wasm/example-tokio.wasm:1","Warn: binary detected: tests/integration/cli/tests/wasm/example-unix-pipe.wasm:1","Warn: binary detected: tests/integration/cli/tests/wasm/example-vfork.wasm:1","Warn: binary detected: tests/integration/cli/tests/wasm/exit-0-from-main.wasm:1","Warn: binary detected: tests/integration/cli/tests/wasm/exit-0-from-worker.wasm:1","Warn: binary detected: tests/integration/cli/tests/wasm/exit-1-from-main.wasm:1","Warn: binary detected: tests/integration/cli/tests/wasm/exit-1-from-worker.wasm:1","Warn: binary detected: tests/integration/cli/tests/wasm/fs-rename.wasm:1","Warn: binary detected: tests/integration/cli/tests/wasm/kibi.wasm:1","Warn: binary detected: tests/integration/cli/tests/wasm/libside1.so:1","Warn: binary detected: tests/integration/cli/tests/wasm/libside2.so:1","Warn: binary detected: tests/integration/cli/tests/wasm/minimodem.wasm:1","Warn: binary detected: tests/integration/cli/tests/wasm/mkdir-rename.wasm:1","Warn: binary detected: tests/integration/cli/tests/wasm/mother.wasm:1","Warn: binary detected: tests/integration/cli/tests/wasm/multi-threading.wasm:1","Warn: binary detected: tests/integration/cli/tests/wasm/php.wasm:1","Warn: binary detected: tests/integration/cli/tests/wasm/python-3.11.3.wasm:1","Warn: binary detected: tests/integration/cli/tests/wasm/qjs.wasm:1","Warn: binary detected: tests/integration/cli/tests/wasm/stdin-hello.wasm:1","Warn: binary detected: tests/integration/cli/tests/wasm/threaded-memory.wasm:1","Warn: binary detected: tests/integration/cli/tests/wasm/wasi-threads.wasm:1","Warn: binary detected: tests/integration/cli/tests/wasm/web-server-epoll.wasm:1","Warn: binary detected: tests/integration/cli/tests/wasm/web-server-poll.wasm:1","Warn: binary detected: tests/integration/cli/tests/wasm/worker-panicking.wasm:1","Warn: binary detected: tests/integration/cli/tests/wasm/worker-terminating-normally.wasm:1","Warn: binary detected: tests/wasi-wast/wasi/nightly_2022_10_18/close_preopen_fd.wasm:1","Warn: binary detected: tests/wasi-wast/wasi/nightly_2022_10_18/create_dir.wasm:1","Warn: binary detected: tests/wasi-wast/wasi/nightly_2022_10_18/envvar.wasm:1","Warn: binary detected: tests/wasi-wast/wasi/nightly_2022_10_18/fd_append.wasm:1","Warn: binary detected: tests/wasi-wast/wasi/nightly_2022_10_18/fd_rename_path.wasm:1","Warn: binary detected: tests/wasi-wast/wasi/nightly_2022_10_18/fd_rights.wasm:1","Warn: binary detected: tests/wasi-wast/wasi/nightly_2022_10_18/fd_sync.wasm:1","Warn: binary detected: tests/wasi-wast/wasi/nightly_2022_10_18/file_metadata.wasm:1","Warn: binary detected: tests/wasi-wast/wasi/nightly_2022_10_18/fs_sandbox_test.wasm:1","Warn: binary detected: tests/wasi-wast/wasi/nightly_2022_10_18/fseek.wasm:1","Warn: binary detected: tests/wasi-wast/wasi/nightly_2022_10_18/hello.wasm:1","Warn: binary detected: tests/wasi-wast/wasi/nightly_2022_10_18/isatty.wasm:1","Warn: binary detected: tests/wasi-wast/wasi/nightly_2022_10_18/mapdir.wasm:1","Warn: binary detected: tests/wasi-wast/wasi/nightly_2022_10_18/mapdir_with_leading_slash.wasm:1","Warn: binary detected: tests/wasi-wast/wasi/nightly_2022_10_18/path_link.wasm:1","Warn: binary detected: tests/wasi-wast/wasi/nightly_2022_10_18/path_rename.wasm:1","Warn: binary detected: tests/wasi-wast/wasi/nightly_2022_10_18/path_symlink.wasm:1","Warn: binary detected: tests/wasi-wast/wasi/nightly_2022_10_18/pipe_reverse.wasm:1","Warn: binary detected: tests/wasi-wast/wasi/nightly_2022_10_18/quine.wasm:1","Warn: binary detected: tests/wasi-wast/wasi/nightly_2022_10_18/readlink.wasm:1","Warn: binary detected: tests/wasi-wast/wasi/nightly_2022_10_18/unix_open_special_files.wasm:1","Warn: binary detected: tests/wasi-wast/wasi/nightly_2022_10_18/wasi_sees_virtual_root.wasm:1","Warn: binary detected: tests/wasi-wast/wasi/nightly_2022_10_18/writing.wasm:1","Warn: binary detected: tests/wasi-wast/wasi/snapshot1/close_preopen_fd.wasm:1","Warn: binary detected: tests/wasi-wast/wasi/snapshot1/create_dir.wasm:1","Warn: binary detected: tests/wasi-wast/wasi/snapshot1/envvar.wasm:1","Warn: binary detected: tests/wasi-wast/wasi/snapshot1/fd_allocate.wasm:1","Warn: binary detected: tests/wasi-wast/wasi/snapshot1/fd_append.wasm:1","Warn: binary detected: tests/wasi-wast/wasi/snapshot1/fd_close.wasm:1","Warn: binary detected: tests/wasi-wast/wasi/snapshot1/fd_pread.wasm:1","Warn: binary detected: tests/wasi-wast/wasi/snapshot1/fd_read.wasm:1","Warn: binary detected: tests/wasi-wast/wasi/snapshot1/fd_rename_path.wasm:1","Warn: binary detected: tests/wasi-wast/wasi/snapshot1/fd_sync.wasm:1","Warn: binary detected: tests/wasi-wast/wasi/snapshot1/file_metadata.wasm:1","Warn: binary detected: tests/wasi-wast/wasi/snapshot1/fs_sandbox_test.wasm:1","Warn: binary detected: tests/wasi-wast/wasi/snapshot1/fseek.wasm:1","Warn: binary detected: tests/wasi-wast/wasi/snapshot1/hello.wasm:1","Warn: binary detected: tests/wasi-wast/wasi/snapshot1/inode.wasm:1","Warn: binary detected: tests/wasi-wast/wasi/snapshot1/isatty.wasm:1","Warn: binary detected: tests/wasi-wast/wasi/snapshot1/mapdir.wasm:1","Warn: binary detected: tests/wasi-wast/wasi/snapshot1/mapdir_with_leading_slash.wasm:1","Warn: binary detected: tests/wasi-wast/wasi/snapshot1/path_link.wasm:1","Warn: binary detected: tests/wasi-wast/wasi/snapshot1/path_rename.wasm:1","Warn: binary detected: tests/wasi-wast/wasi/snapshot1/path_symlink.wasm:1","Warn: binary detected: tests/wasi-wast/wasi/snapshot1/pipe_reverse.wasm:1","Warn: binary detected: tests/wasi-wast/wasi/snapshot1/poll_oneoff.wasm:1","Warn: binary detected: tests/wasi-wast/wasi/snapshot1/quine.wasm:1","Warn: binary detected: tests/wasi-wast/wasi/snapshot1/readlink.wasm:1","Warn: binary detected: tests/wasi-wast/wasi/snapshot1/unix_open_special_files.wasm:1","Warn: binary detected: tests/wasi-wast/wasi/snapshot1/wasi_sees_virtual_root.wasm:1","Warn: binary detected: tests/wasi-wast/wasi/snapshot1/writing.wasm:1","Warn: binary detected: tests/wasi-wast/wasi/unstable/close_preopen_fd.wasm:1","Warn: binary detected: tests/wasi-wast/wasi/unstable/create_dir.wasm:1","Warn: binary detected: tests/wasi-wast/wasi/unstable/envvar.wasm:1","Warn: binary detected: tests/wasi-wast/wasi/unstable/fd_allocate.wasm:1","Warn: binary detected: tests/wasi-wast/wasi/unstable/fd_append.wasm:1","Warn: binary detected: tests/wasi-wast/wasi/unstable/fd_close.wasm:1","Warn: binary detected: tests/wasi-wast/wasi/unstable/fd_pread.wasm:1","Warn: binary detected: tests/wasi-wast/wasi/unstable/fd_read.wasm:1","Warn: binary detected: tests/wasi-wast/wasi/unstable/fd_sync.wasm:1","Warn: binary detected: tests/wasi-wast/wasi/unstable/file_metadata.wasm:1","Warn: binary detected: tests/wasi-wast/wasi/unstable/fs_sandbox_test.wasm:1","Warn: binary detected: tests/wasi-wast/wasi/unstable/fseek.wasm:1","Warn: binary detected: tests/wasi-wast/wasi/unstable/hello.wasm:1","Warn: binary detected: tests/wasi-wast/wasi/unstable/isatty.wasm:1","Warn: binary detected: tests/wasi-wast/wasi/unstable/mapdir.wasm:1","Warn: binary detected: tests/wasi-wast/wasi/unstable/mapdir_with_leading_slash.wasm:1","Warn: binary detected: tests/wasi-wast/wasi/unstable/path_link.wasm:1","Warn: binary detected: tests/wasi-wast/wasi/unstable/path_rename.wasm:1","Warn: binary detected: tests/wasi-wast/wasi/unstable/path_symlink.wasm:1","Warn: binary detected: tests/wasi-wast/wasi/unstable/pipe_reverse.wasm:1","Warn: binary detected: tests/wasi-wast/wasi/unstable/poll_oneoff.wasm:1","Warn: binary detected: tests/wasi-wast/wasi/unstable/quine.wasm:1","Warn: binary detected: tests/wasi-wast/wasi/unstable/readlink.wasm:1","Warn: binary detected: tests/wasi-wast/wasi/unstable/unix_open_special_files.wasm:1","Warn: binary detected: tests/wasi-wast/wasi/unstable/wasi_sees_virtual_root.wasm:1","Warn: binary detected: tests/wasi-wast/wasi/unstable/writing.wasm:1"],"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/c29a04d46d1570393e94662bc34e9906398e1bfa/docs/checks.md#binary-artifacts"}},{"name":"Fuzzing","score":10,"reason":"project is fuzzed","details":["Info: OSSFuzz integration found","Info: RustCargoFuzzer integration found: fuzz/fuzz_targets/deterministic.rs:3","Info: RustCargoFuzzer integration found: fuzz/fuzz_targets/equivalence_universal.rs:5","Info: RustCargoFuzzer integration found: fuzz/fuzz_targets/metering.rs:3","Info: RustCargoFuzzer integration found: fuzz/fuzz_targets/universal_cranelift.rs:3","Info: RustCargoFuzzer integration found: fuzz/fuzz_targets/universal_llvm.rs:3","Info: RustCargoFuzzer integration found: fuzz/fuzz_targets/universal_singlepass.rs:3"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/c29a04d46d1570393e94662bc34e9906398e1bfa/docs/checks.md#fuzzing"}},{"name":"Signed-Releases","score":0,"reason":"Project has not signed or included provenance with any releases.","details":["Warn: release artifact v6.1.0-rc.2 not signed: https://api.github.com/repos/wasmerio/wasmer/releases/232931149","Warn: release artifact v6.0.1 not signed: https://api.github.com/repos/wasmerio/wasmer/releases/217629918","Warn: release artifact v5.0.6 not signed: https://api.github.com/repos/wasmerio/wasmer/releases/216201675","Warn: release artifact v6.0.0 not signed: https://api.github.com/repos/wasmerio/wasmer/releases/214626918","Warn: release artifact v6.0.0-beta.1 not signed: https://api.github.com/repos/wasmerio/wasmer/releases/204340191","Warn: release artifact v6.1.0-rc.2 does not have provenance: https://api.github.com/repos/wasmerio/wasmer/releases/232931149","Warn: release artifact v6.0.1 does not have provenance: https://api.github.com/repos/wasmerio/wasmer/releases/217629918","Warn: release artifact v5.0.6 does not have provenance: https://api.github.com/repos/wasmerio/wasmer/releases/216201675","Warn: release artifact v6.0.0 does not have provenance: https://api.github.com/repos/wasmerio/wasmer/releases/214626918","Warn: release artifact v6.0.0-beta.1 does not have provenance: https://api.github.com/repos/wasmerio/wasmer/releases/204340191"],"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/c29a04d46d1570393e94662bc34e9906398e1bfa/docs/checks.md#signed-releases"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 30 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/c29a04d46d1570393e94662bc34e9906398e1bfa/docs/checks.md#sast"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/benchmark.yaml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/wasmerio/wasmer/benchmark.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/benchmark.yaml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/wasmerio/wasmer/benchmark.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/benchmark.yaml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/wasmerio/wasmer/benchmark.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/benchmark.yaml:62: update your workflow using https://app.stepsecurity.io/secureworkflow/wasmerio/wasmer/benchmark.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yml:120: update your workflow using https://app.stepsecurity.io/secureworkflow/wasmerio/wasmer/build.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/build.yml:155: update your workflow using https://app.stepsecurity.io/secureworkflow/wasmerio/wasmer/build.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/build.yml:158: update your workflow using https://app.stepsecurity.io/secureworkflow/wasmerio/wasmer/build.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/build.yml:162: update your workflow using https://app.stepsecurity.io/secureworkflow/wasmerio/wasmer/build.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yml:199: update your workflow using https://app.stepsecurity.io/secureworkflow/wasmerio/wasmer/build.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yml:205: update your workflow using https://app.stepsecurity.io/secureworkflow/wasmerio/wasmer/build.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/build.yml:304: update your workflow using https://app.stepsecurity.io/secureworkflow/wasmerio/wasmer/build.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yml:328: update your workflow using https://app.stepsecurity.io/secureworkflow/wasmerio/wasmer/build.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yml:339: update your workflow using https://app.stepsecurity.io/secureworkflow/wasmerio/wasmer/build.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/build.yml:344: update your workflow using https://app.stepsecurity.io/secureworkflow/wasmerio/wasmer/build.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yml:395: update your workflow using https://app.stepsecurity.io/secureworkflow/wasmerio/wasmer/build.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yml:406: update your workflow using https://app.stepsecurity.io/secureworkflow/wasmerio/wasmer/build.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/build.yml:407: update your workflow using https://app.stepsecurity.io/secureworkflow/wasmerio/wasmer/build.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yml:428: update your workflow using https://app.stepsecurity.io/secureworkflow/wasmerio/wasmer/build.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yml:439: update your workflow using https://app.stepsecurity.io/secureworkflow/wasmerio/wasmer/build.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/build.yml:440: update your workflow using https://app.stepsecurity.io/secureworkflow/wasmerio/wasmer/build.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yml:457: update your workflow using https://app.stepsecurity.io/secureworkflow/wasmerio/wasmer/build.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yml:468: update your workflow using https://app.stepsecurity.io/secureworkflow/wasmerio/wasmer/build.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/build.yml:469: update your workflow using https://app.stepsecurity.io/secureworkflow/wasmerio/wasmer/build.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yml:522: update your workflow using https://app.stepsecurity.io/secureworkflow/wasmerio/wasmer/build.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yml:535: update your workflow using https://app.stepsecurity.io/secureworkflow/wasmerio/wasmer/build.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yml:540: update your workflow using https://app.stepsecurity.io/secureworkflow/wasmerio/wasmer/build.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yml:549: update your workflow using https://app.stepsecurity.io/secureworkflow/wasmerio/wasmer/build.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yml:558: update your workflow using https://app.stepsecurity.io/secureworkflow/wasmerio/wasmer/build.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yml:567: update your workflow using https://app.stepsecurity.io/secureworkflow/wasmerio/wasmer/build.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yml:576: update your workflow using https://app.stepsecurity.io/secureworkflow/wasmerio/wasmer/build.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yml:585: update your workflow using https://app.stepsecurity.io/secureworkflow/wasmerio/wasmer/build.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yml:594: update your workflow using https://app.stepsecurity.io/secureworkflow/wasmerio/wasmer/build.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yml:613: update your workflow using https://app.stepsecurity.io/secureworkflow/wasmerio/wasmer/build.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yml:622: update your workflow using https://app.stepsecurity.io/secureworkflow/wasmerio/wasmer/build.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cache-bucket-cleanup.yaml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/wasmerio/wasmer/cache-bucket-cleanup.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/check-public-api.yaml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/wasmerio/wasmer/check-public-api.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/check-public-api.yaml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/wasmerio/wasmer/check-public-api.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/check-public-api.yaml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/wasmerio/wasmer/check-public-api.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cloudcompiler.yaml:19: update your workflow using https://app.stepsecurity.io/secureworkflow/wasmerio/wasmer/cloudcompiler.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/cloudcompiler.yaml:23: update your workflow using https://app.stepsecurity.io/secureworkflow/wasmerio/wasmer/cloudcompiler.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/cloudcompiler.yaml:32: update your workflow using https://app.stepsecurity.io/secureworkflow/wasmerio/wasmer/cloudcompiler.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/cloudcompiler.yaml:73: update your workflow using https://app.stepsecurity.io/secureworkflow/wasmerio/wasmer/cloudcompiler.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/documentation.yaml:18: update your workflow using https://app.stepsecurity.io/secureworkflow/wasmerio/wasmer/documentation.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/documentation.yaml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/wasmerio/wasmer/documentation.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/documentation.yaml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/wasmerio/wasmer/documentation.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yaml:221: update your workflow using https://app.stepsecurity.io/secureworkflow/wasmerio/wasmer/test.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yaml:445: update your workflow using https://app.stepsecurity.io/secureworkflow/wasmerio/wasmer/test.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yaml:477: update your workflow using https://app.stepsecurity.io/secureworkflow/wasmerio/wasmer/test.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yaml:828: update your workflow using https://app.stepsecurity.io/secureworkflow/wasmerio/wasmer/test.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test.yaml:843: update your workflow using https://app.stepsecurity.io/secureworkflow/wasmerio/wasmer/test.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test.yaml:858: update your workflow using https://app.stepsecurity.io/secureworkflow/wasmerio/wasmer/test.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test.yaml:863: update your workflow using https://app.stepsecurity.io/secureworkflow/wasmerio/wasmer/test.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test.yaml:899: update your workflow using https://app.stepsecurity.io/secureworkflow/wasmerio/wasmer/test.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test.yaml:1125: update your workflow using https://app.stepsecurity.io/secureworkflow/wasmerio/wasmer/test.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yaml:100: update your workflow using https://app.stepsecurity.io/secureworkflow/wasmerio/wasmer/test.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test.yaml:101: update your workflow using https://app.stepsecurity.io/secureworkflow/wasmerio/wasmer/test.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yaml:163: update your workflow using https://app.stepsecurity.io/secureworkflow/wasmerio/wasmer/test.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test.yaml:165: update your workflow using https://app.stepsecurity.io/secureworkflow/wasmerio/wasmer/test.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test.yaml:178: update your workflow using https://app.stepsecurity.io/secureworkflow/wasmerio/wasmer/test.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yaml:571: update your workflow using https://app.stepsecurity.io/secureworkflow/wasmerio/wasmer/test.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test.yaml:593: update your workflow using https://app.stepsecurity.io/secureworkflow/wasmerio/wasmer/test.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test.yaml:598: update your workflow using https://app.stepsecurity.io/secureworkflow/wasmerio/wasmer/test.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test.yaml:600: update your workflow using https://app.stepsecurity.io/secureworkflow/wasmerio/wasmer/test.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test.yaml:681: update your workflow using https://app.stepsecurity.io/secureworkflow/wasmerio/wasmer/test.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yaml:737: update your workflow using https://app.stepsecurity.io/secureworkflow/wasmerio/wasmer/test.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yaml:744: update your workflow using https://app.stepsecurity.io/secureworkflow/wasmerio/wasmer/test.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yaml:954: update your workflow using https://app.stepsecurity.io/secureworkflow/wasmerio/wasmer/test.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test.yaml:955: update your workflow using https://app.stepsecurity.io/secureworkflow/wasmerio/wasmer/test.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yaml:965: update your workflow using https://app.stepsecurity.io/secureworkflow/wasmerio/wasmer/test.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yaml:969: update your workflow using https://app.stepsecurity.io/secureworkflow/wasmerio/wasmer/test.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test.yaml:975: update your workflow using https://app.stepsecurity.io/secureworkflow/wasmerio/wasmer/test.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test.yaml:980: update your workflow using https://app.stepsecurity.io/secureworkflow/wasmerio/wasmer/test.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test.yaml:982: update your workflow using https://app.stepsecurity.io/secureworkflow/wasmerio/wasmer/test.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yaml:1000: update your workflow using https://app.stepsecurity.io/secureworkflow/wasmerio/wasmer/test.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yaml:1004: update your workflow using https://app.stepsecurity.io/secureworkflow/wasmerio/wasmer/test.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yaml:1008: update your workflow using https://app.stepsecurity.io/secureworkflow/wasmerio/wasmer/test.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yaml:1012: update your workflow using https://app.stepsecurity.io/secureworkflow/wasmerio/wasmer/test.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yaml:1016: update your workflow using https://app.stepsecurity.io/secureworkflow/wasmerio/wasmer/test.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yaml:1020: update your workflow using https://app.stepsecurity.io/secureworkflow/wasmerio/wasmer/test.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yaml:1038: update your workflow using https://app.stepsecurity.io/secureworkflow/wasmerio/wasmer/test.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yaml:1043: update your workflow using https://app.stepsecurity.io/secureworkflow/wasmerio/wasmer/test.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yaml:1048: update your workflow using https://app.stepsecurity.io/secureworkflow/wasmerio/wasmer/test.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yaml:1053: update your workflow using https://app.stepsecurity.io/secureworkflow/wasmerio/wasmer/test.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yaml:1058: update your workflow using https://app.stepsecurity.io/secureworkflow/wasmerio/wasmer/test.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yaml:279: update your workflow using https://app.stepsecurity.io/secureworkflow/wasmerio/wasmer/test.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test.yaml:282: update your workflow using https://app.stepsecurity.io/secureworkflow/wasmerio/wasmer/test.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test.yaml:285: update your workflow using https://app.stepsecurity.io/secureworkflow/wasmerio/wasmer/test.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test.yaml:290: update your workflow using https://app.stepsecurity.io/secureworkflow/wasmerio/wasmer/test.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yaml:337: update your workflow using https://app.stepsecurity.io/secureworkflow/wasmerio/wasmer/test.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test.yaml:338: update your workflow using https://app.stepsecurity.io/secureworkflow/wasmerio/wasmer/test.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yaml:384: update your workflow using https://app.stepsecurity.io/secureworkflow/wasmerio/wasmer/test.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test.yaml:385: update your workflow using https://app.stepsecurity.io/secureworkflow/wasmerio/wasmer/test.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yaml:418: update your workflow using https://app.stepsecurity.io/secureworkflow/wasmerio/wasmer/test.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yaml:55: update your workflow using https://app.stepsecurity.io/secureworkflow/wasmerio/wasmer/test.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test.yaml:57: update your workflow using https://app.stepsecurity.io/secureworkflow/wasmerio/wasmer/test.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test.yaml:73: update your workflow using https://app.stepsecurity.io/secureworkflow/wasmerio/wasmer/test.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yaml:129: update your workflow using https://app.stepsecurity.io/secureworkflow/wasmerio/wasmer/test.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test.yaml:131: update your workflow using https://app.stepsecurity.io/secureworkflow/wasmerio/wasmer/test.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yaml:231: update your workflow using https://app.stepsecurity.io/secureworkflow/wasmerio/wasmer/test.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test.yaml:232: update your workflow using https://app.stepsecurity.io/secureworkflow/wasmerio/wasmer/test.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yaml:237: update your workflow using https://app.stepsecurity.io/secureworkflow/wasmerio/wasmer/test.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yaml:109: update your workflow using https://app.stepsecurity.io/secureworkflow/wasmerio/wasmer/test.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test.yaml:111: update your workflow using https://app.stepsecurity.io/secureworkflow/wasmerio/wasmer/test.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yaml:115: update your workflow using https://app.stepsecurity.io/secureworkflow/wasmerio/wasmer/test.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/wasmer-config.yaml:23: update your workflow using https://app.stepsecurity.io/secureworkflow/wasmerio/wasmer/wasmer-config.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/wasmer-config.yaml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/wasmerio/wasmer/wasmer-config.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/wasmer-config.yaml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/wasmerio/wasmer/wasmer-config.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/wasmer-config.yaml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/wasmerio/wasmer/wasmer-config.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/wasmer-config.yaml:44: update your workflow using https://app.stepsecurity.io/secureworkflow/wasmerio/wasmer/wasmer-config.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/wasmer-config.yaml:46: update your workflow using https://app.stepsecurity.io/secureworkflow/wasmerio/wasmer/wasmer-config.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/wasmer-config.yaml:48: update your workflow using https://app.stepsecurity.io/secureworkflow/wasmerio/wasmer/wasmer-config.yaml/main?enable=pin","Warn: containerImage not pinned by hash: .github/cross-linux-aarch64/Dockerfile:1: pin your Docker image by updating rust:1 to rust:1@sha256:af306cfa71d987911a781c37b59d7d67d934f49684058f96cf72079c3626bfe0","Warn: containerImage not pinned by hash: .github/cross-linux-riscv64/Dockerfile:1","Warn: containerImage not pinned by hash: lib/c-api/tests/wasm-c-api/Dockerfile:1: pin your Docker image by updating ubuntu:bionic to ubuntu:bionic@sha256:152dc042452c496007f07ca9127571cb9c29697f42acbfad72324b2bb2e43c98","Warn: downloadThenRun not pinned by hash: .github/cross-linux-aarch64/Dockerfile:8-11","Warn: downloadThenRun not pinned by hash: .github/cross-linux-riscv64/Dockerfile:29","Warn: pipCommand not pinned by hash: .github/workflows/benchmark.yaml:67","Warn: pipCommand not pinned by hash: .github/workflows/benchmark.yaml:68","Warn: chocoCommand not pinned by hash: .github/workflows/build.yml:143","Warn: pipCommand not pinned by hash: .github/workflows/cache-bucket-cleanup.yaml:20","Warn: downloadThenRun not pinned by hash: .github/workflows/test.yaml:120","Warn: chocoCommand not pinned by hash: .github/workflows/test.yaml:310","Warn: downloadThenRun not pinned by hash: .github/workflows/test.yaml:137","Warn: downloadThenRun not pinned by hash: .github/workflows/test.yaml:175","Info:   0 out of  65 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of  46 third-party GitHubAction dependencies pinned","Info:   0 out of   2 chocoCommand dependencies pinned","Info:   0 out of   3 containerImage dependencies pinned","Info:   0 out of   5 downloadThenRun dependencies pinned","Info:   0 out of   3 pipCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/c29a04d46d1570393e94662bc34e9906398e1bfa/docs/checks.md#pinned-dependencies"}},{"name":"Vulnerabilities","score":4,"reason":"6 existing vulnerabilities detected","details":["Warn: Project is vulnerable to: RUSTSEC-2024-0436","Warn: Project is vulnerable to: RUSTSEC-2021-0127","Warn: Project is vulnerable to: RUSTSEC-2020-0071 / GHSA-wcg3-cvx6-7396","Warn: Project is vulnerable to: GHSA-c827-hfw6-qwvm","Warn: Project is vulnerable to: RUSTSEC-2023-0075 / GHSA-r24f-hg58-vfrw","Warn: Project is vulnerable to: RUSTSEC-2023-0018 / GHSA-mc8h-8q98-g5hr"],"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/c29a04d46d1570393e94662bc34e9906398e1bfa/docs/checks.md#vulnerabilities"}}]},"last_synced_at":"2025-08-18T15:36:01.365Z","repository_id":37270224,"created_at":"2025-08-18T15:36:01.365Z","updated_at":"2025-08-18T15:36:01.365Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":274357396,"owners_count":25270674,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","status":"online","status_checked_at":"2025-09-09T02:00:10.223Z","response_time":80,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["emscripten","linux","macos","rust","wasi","wasix","wasm","wasmer","webassembly","windows"],"created_at":"2024-07-31T07:01:22.906Z","updated_at":"2026-01-23T17:08:39.028Z","avatar_url":"https://github.com/wasmerio.png","language":"Rust","funding_links":[],"categories":["Rust","Applications","应用程序 Applications","Non-Web Embeddings","Libraries","Web Development","网络服务","WebAssembly","windows","Virtual Machines","linux","库","WASI-compatible Runtimes","Runtime","Runtimes","应用程序"],"sub_categories":["Interpreting and Compiling WebAssembly","C++/C Toolkit","网络服务_其他","CNCF WASM Working Group","**Rust**"],"readme":null,"project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fwasmerio%2Fwasmer","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fwasmerio%2Fwasmer","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fwasmerio%2Fwasmer/lists"}