{"id":31913247,"url":"https://github.com/woocommerce/woocommerce-android","last_synced_at":"2026-02-06T20:04:00.960Z","repository":{"id":37271207,"uuid":"105889163","full_name":"woocommerce/woocommerce-android","owner":"woocommerce","description":"WooCommerce Android app","archived":false,"fork":false,"pushed_at":"2025-10-07T15:11:02.000Z","size":405657,"stargazers_count":295,"open_issues_count":564,"forks_count":133,"subscribers_count":113,"default_branch":"trunk","last_synced_at":"2025-10-07T15:27:28.967Z","etag":null,"topics":["android","kotlin","mobile-app","woocommerce"],"latest_commit_sha":null,"homepage":"https://www.woocommerce.com/mobile","language":"Kotlin","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"gpl-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/woocommerce.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE.md","code_of_conduct":"CODE-OF-CONDUCT.md","threat_model":null,"audit":null,"citation":null,"codeowners":"CODEOWNERS","security":null,"support":"docs/supporting-tablets.md","governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null}},"created_at":"2017-10-05T12:48:30.000Z","updated_at":"2025-10-07T14:40:15.000Z","dependencies_parsed_at":"2023-10-04T10:44:49.262Z","dependency_job_id":"2e5a9d7e-1d37-44e2-bb71-bdcbdacbe650","html_url":"https://github.com/woocommerce/woocommerce-android","commit_stats":null,"previous_names":[],"tags_count":665,"template":false,"template_full_name":null,"purl":"pkg:github/woocommerce/woocommerce-android","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/woocommerce%2Fwoocommerce-android","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/woocommerce%2Fwoocommerce-android/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/woocommerce%2Fwoocommerce-android/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/woocommerce%2Fwoocommerce-android/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/woocommerce","download_url":"https://codeload.github.com/woocommerce/woocommerce-android/tar.gz/refs/heads/trunk","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/woocommerce%2Fwoocommerce-android/sbom","scorecard":{"id":444710,"data":{"date":"2025-07-07","repo":{"name":"github.com/woocommerce/woocommerce-android","commit":"c68a743bedcd6b5903d93f9ad898ec199eb0f243"},"scorecard":{"version":"v5.2.1-18-gbb9c347d","commit":"bb9c347dff6349d986baab6578a46d68a5524c62"},"score":5.4,"checks":[{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/bb9c347dff6349d986baab6578a46d68a5524c62/docs/checks.md#dangerous-workflow"}},{"name":"Code-Review","score":10,"reason":"all changesets reviewed","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/bb9c347dff6349d986baab6578a46d68a5524c62/docs/checks.md#code-review"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/bb9c347dff6349d986baab6578a46d68a5524c62/docs/checks.md#packaging"}},{"name":"Maintained","score":10,"reason":"30 commit(s) and 2 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/bb9c347dff6349d986baab6578a46d68a5524c62/docs/checks.md#maintained"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Warn: topLevel 'contents' permission set to 'write': .github/workflows/dependabot.yml:8","Warn: no topLevel permission defined: .github/workflows/gradle-wrapper-validation.yml:1","Warn: no topLevel permission defined: .github/workflows/run-danger.yml:1","Warn: no topLevel permission defined: .github/workflows/validate-issues.yml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/bb9c347dff6349d986baab6578a46d68a5524c62/docs/checks.md#token-permissions"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/bb9c347dff6349d986baab6578a46d68a5524c62/docs/checks.md#cii-best-practices"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE.md:0","Info: FSF or OSI recognized license: GNU General Public License v2.0: LICENSE.md:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/bb9c347dff6349d986baab6578a46d68a5524c62/docs/checks.md#license"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/bb9c347dff6349d986baab6578a46d68a5524c62/docs/checks.md#fuzzing"}},{"name":"Signed-Releases","score":0,"reason":"Project has not signed or included provenance with any releases.","details":["Warn: release artifact 22.8-rc-1 not signed: https://api.github.com/repos/woocommerce/woocommerce-android/releases/231718018","Warn: release artifact 22.6 not signed: https://api.github.com/repos/woocommerce/woocommerce-android/releases/228341369","Warn: release artifact 22.7-rc-1 not signed: https://api.github.com/repos/woocommerce/woocommerce-android/releases/228405895","Warn: release artifact 22.5 not signed: https://api.github.com/repos/woocommerce/woocommerce-android/releases/225134211","Warn: release artifact 22.6-rc-1 not signed: https://api.github.com/repos/woocommerce/woocommerce-android/releases/225158807","Warn: release artifact 22.8-rc-1 does not have provenance: https://api.github.com/repos/woocommerce/woocommerce-android/releases/231718018","Warn: release artifact 22.6 does not have provenance: https://api.github.com/repos/woocommerce/woocommerce-android/releases/228341369","Warn: release artifact 22.7-rc-1 does not have provenance: https://api.github.com/repos/woocommerce/woocommerce-android/releases/228405895","Warn: release artifact 22.5 does not have provenance: https://api.github.com/repos/woocommerce/woocommerce-android/releases/225134211","Warn: release artifact 22.6-rc-1 does not have provenance: https://api.github.com/repos/woocommerce/woocommerce-android/releases/225158807"],"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/bb9c347dff6349d986baab6578a46d68a5524c62/docs/checks.md#signed-releases"}},{"name":"Security-Policy","score":0,"reason":"security policy file not detected","details":["Warn: no security policy file detected","Warn: no security file to analyze","Warn: no security file to analyze","Warn: no security file to analyze"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/bb9c347dff6349d986baab6578a46d68a5524c62/docs/checks.md#security-policy"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/bb9c347dff6349d986baab6578a46d68a5524c62/docs/checks.md#branch-protection"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/dependabot.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/woocommerce/woocommerce-android/dependabot.yml/trunk?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/dependabot.yml:14: update your workflow using https://app.stepsecurity.io/secureworkflow/woocommerce/woocommerce-android/dependabot.yml/trunk?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/dependabot.yml:19: update your workflow using https://app.stepsecurity.io/secureworkflow/woocommerce/woocommerce-android/dependabot.yml/trunk?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/gradle-wrapper-validation.yml:9: update your workflow using https://app.stepsecurity.io/secureworkflow/woocommerce/woocommerce-android/gradle-wrapper-validation.yml/trunk?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/gradle-wrapper-validation.yml:10: update your workflow using https://app.stepsecurity.io/secureworkflow/woocommerce/woocommerce-android/gradle-wrapper-validation.yml/trunk?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/run-danger.yml:10: update your workflow using https://app.stepsecurity.io/secureworkflow/woocommerce/woocommerce-android/run-danger.yml/trunk?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/validate-issues.yml:9: update your workflow using https://app.stepsecurity.io/secureworkflow/woocommerce/woocommerce-android/validate-issues.yml/trunk?enable=pin","Info:   0 out of   3 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of   4 third-party GitHubAction dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/bb9c347dff6349d986baab6578a46d68a5524c62/docs/checks.md#pinned-dependencies"}},{"name":"SAST","score":5,"reason":"SAST tool is not run on all commits -- score normalized to 5","details":["Warn: 15 commits out of 30 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/bb9c347dff6349d986baab6578a46d68a5524c62/docs/checks.md#sast"}},{"name":"Binary-Artifacts","score":9,"reason":"binaries present in source code","details":["Warn: binary detected: libs/libaddressinput_common.jar:1"],"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/bb9c347dff6349d986baab6578a46d68a5524c62/docs/checks.md#binary-artifacts"}},{"name":"Vulnerabilities","score":9,"reason":"1 existing vulnerabilities detected","details":["Warn: Project is vulnerable to: GHSA-frgf-8jr5-j2jv"],"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/bb9c347dff6349d986baab6578a46d68a5524c62/docs/checks.md#vulnerabilities"}}]},"last_synced_at":"2025-08-19T06:24:40.021Z","repository_id":37271207,"created_at":"2025-08-19T06:24:40.022Z","updated_at":"2025-08-19T06:24:40.022Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":279016621,"owners_count":26085853,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","status":"online","status_checked_at":"2025-10-13T02:00:06.723Z","response_time":61,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["android","kotlin","mobile-app","woocommerce"],"created_at":"2025-10-13T18:48:12.935Z","updated_at":"2026-02-06T20:04:00.953Z","avatar_url":"https://github.com/woocommerce.png","language":"Kotlin","funding_links":[],"categories":["Android Apps (Search Results)"],"sub_categories":[],"readme":"\n\n\u003ch1 align=\"center\"\u003e\u003cimg src=\"https://github.com/user-attachments/assets/00bcaf7b-570b-41cd-9faa-187ed15beb40\" width=\"300\"\u003e\u003cbr\u003efor Android\u003c/h1\u003e\n\n\u003cp align=\"center\"\u003eA Jetpack-powered mobile app for WooCommerce.\u003c/p\u003e\n\n\u003cp align=\"center\"\u003e\n    \u003ca href=\"https://buildkite.com/automattic/woocommerce-android\"\u003e\n        \u003cimg src=\"https://badge.buildkite.com/3ac8789ce5bc81e2d078d32ee8e526efbdb7c1ef3b19c70be3.svg?branch=trunk\"\u003e\n    \u003c/a\u003e\n    \u003ca href=\"https://github.com/woocommerce/woocommerce-android/releases\"\u003e\n        \u003cimg alt=\"Release\" src=\"https://img.shields.io/github/v/tag/woocommerce/woocommerce-android?label=release\u0026sort=semver\"\u003e\n    \u003c/a\u003e\n    \u003ca href=\"https://github.com/woocommerce/woocommerce-android/blob/trunk/LICENSE.md\"\u003e\n        \u003cimg alt=\"License\" src=\"https://img.shields.io/github/license/woocommerce/woocommerce-android\"\u003e\n    \u003c/a\u003e\n\u003c/p\u003e\n\n\u003cp align=\"center\"\u003e\n    \u003ca href=\"#setup-instructions\"\u003eSetup Instructions\u003c/a\u003e •\n    \u003ca href=\"#build--test\"\u003eBuild \u0026 Test\u003c/a\u003e •\n    \u003ca href=\"#-documentation\"\u003eDocumentation\u003c/a\u003e •\n    \u003ca href=\"#-contributing\"\u003eContributing\u003c/a\u003e •\n    \u003ca href=\"#-automation\"\u003eAutomation\u003c/a\u003e •\n    \u003ca href=\"#-security\"\u003eSecurity\u003c/a\u003e •\n    \u003ca href=\"#-need-help\"\u003eNeed Help?\u003c/a\u003e •\n    \u003ca href=\"#-resources\"\u003eResources\u003c/a\u003e •\n    \u003ca href=\"#-license\"\u003eLicense\u003c/a\u003e\n\u003c/p\u003e\n\n## 🎉 Setup Instructions\n\n1. Make sure you've installed [Android Studio](https://developer.android.com/studio).\n1. Clone this repository in the folder of your preference, and then enter that folder:\n\n    ```bash\n    $ git clone https://github.com/woocommerce/woocommerce-android.git\n    $ cd woocommerce-android\n    ```\n\n1. Copy `defaults.properties` to the secrets directory: `cp defaults.properties ~/.configure/woocommerce-android/secrets/secrets.properties`. See the [Configuration Files](docs/project-overview.md#configuration-files) section for a breakdown of the properties.\n1. Generate the developer oauth2 tokens. These values get copied into the `~/.configure/woocommerce-android/secrets.properties` file in the next step. See the [OAuth2 Authentication](docs/project-overview.md#oauth2-authentication) section for details.\n1. In Android Studio, open the project from the local repository. This will auto-generate `local.properties` with the SDK location.\n1. Optional: Go to Tools → Device Manager and create an emulated device.\n1. Run. (Creates a default virtual device if you skipped the previous step)\n\n## Build \u0026 Test\n\nTo build, install, and test the project from the command line:\n\n```bash\n$ ./gradlew assembleVanillaDebug                          # assemble the debug .apk\n$ ./gradlew installVanillaDebug                           # install the debug apk if you have an\n                                                          # emulator or a device connected\n$ ./gradlew :WooCommerce:testVanillaDebugUnitTest         # assemble, install and run unit tests\n$ ./gradlew :WooCommerce:connectedVanillaDebugAndroidTest # assemble, install and run Android tests\n```\n\n## 📚 Documentation\n\n- Project Overview\n    - [OAuth2 Authentication](docs/project-overview.md#oauth2-authentication)\n    - [Configuration Files](docs/project-overview.md#configuration-files)\n    - [Using Detekt](docs/project-overview.md#using-detekt)\n    - [Google Configuration](docs/project-overview.md#google-configuration)\n- Development Practices\n    - [Coding Style Practices](docs/coding-style.md)\n    - [Pull Request Guidelines](docs/pull-request-guidelines.md)\n    - [Material Theme Designs](docs/material-theme-designs.md)\n    - [Using Android Resources](docs/using-android-resources.md)\n    - [Localization](docs/localization.md)\n    - [Themes \u0026 Styling Practices](docs/theming-styling-best-practices.md)\n    - [Optimising screens for tablets](docs/supporting-tablets.md)\n    - [Generating Play Store Screenshots](docs/generating-screenshots.md)\n- Data\n    - [Tracking Events](docs/tracking-events.md)\n- Accessibility\n    - [Accessibility Guidelines](docs/accessibility-guidelines.md)\n    - [Right to Left Layout Guidelines](docs/right-to-left-layout-guidelines.md)\n- Quality \u0026 Testing\n    - [Beta Testing](https://woocommercehalo.wordpress.com/setup/join-android-beta/)\n- Features\n    - [Feature Flags](docs/feature-flags.md)\n\n## 👏 Contributing\n\nRead our [Contributing Guide](CONTRIBUTING.md) to learn about reporting issues, contributing code, and more ways to contribute.\n\n## 🔐 Security\n\nIf you happen to find a security vulnerability, we would appreciate you letting us know at https://hackerone.com/automattic and allowing us to respond before disclosing the issue publicly.\n\n## 🦮 Need Help?\n\nYou can find the WooCommerce usage docs\nhere: [woocommerce.com/documentation/woocommerce/](https://woocommerce.com/documentation/woocommerce/)\n\nGeneral usage and development questions:\n\n* [WooCommerce Slack Community](https://woocommerce.com/community-slack/)\n* [WordPress.org Forums](https://wordpress.org/support/plugin/woocommerce)\n* [The WooCommerce Help and Share Facebook group](https://www.facebook.com/groups/woohelp/)\n\n## 🔗 Resources\n\n- [Mobile blog](https://mobile.blog)\n- [WooCommerce API Documentation (currently v3)](https://woocommerce.github.io/woocommerce-rest-api-docs/#introduction)\n- [FluxC](https://github.com/wordpress-mobile/WordPress-FluxC-Android) Although the FluxC repository is now archived and its functionality has been merged into this project, it still contains valuable documentation on how to work with the underlying architecture and patterns.\n\n## 📜 License\n\nWooCommerce for Android is an Open Source project covered by the [GNU General Public License version 2](https://github.com/woocommerce/woocommerce-android/blob/trunk/LICENSE.md).\n\n## 📚 Proprietary Libraries\n\nIn order to offer a great experience to our users, we use some proprietary libraries that are not open source. These libraries are:\n\n- [ML Kit](https://developers.google.com/ml-kit) for barcode scanning and text recognition. You can find its Terms of Service [here](https://developers.google.com/ml-kit/terms).\n\n\u003cp align=\"center\"\u003e\n    \u003cbr/\u003e\u003cbr/\u003e\n    Made with 💜 by \u003ca href=\"https://woocommerce.com/\"\u003eWooCommerce\u003c/a\u003e.\u003cbr/\u003e\n    \u003ca href=\"https://woocommerce.com/careers/\"\u003eWe're hiring\u003c/a\u003e! Come work with us!\n\u003c/p\u003e\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fwoocommerce%2Fwoocommerce-android","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fwoocommerce%2Fwoocommerce-android","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fwoocommerce%2Fwoocommerce-android/lists"}