Data

Tools

Indexes

Applications

Experiments

Repos

An open API service providing repository metadata for many open source software ecosystems.

GitHub / LeetCode-OpenSource / django-ckeditor

Django admin CKEditor integration.

JSON API: http://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/LeetCode-OpenSource%2Fdjango-ckeditor
PURL: pkg:github/LeetCode-OpenSource/django-ckeditor

Fork of leetcode/django-ckeditor
Stars: 0
Forks: 1
Open issues: 0

License: other
Language: JavaScript
Size: 10.5 MB
Dependencies parsed at: Pending

Created at: about 7 years ago
Updated at: over 5 years ago
Pushed at: over 2 years ago
Last synced at: 2 months ago

OpenSSF Scorecard report

2.7

Overall Score

10/10 Critical Risk
12/60 High Risk
0/40 Medium Risk
9/20 Low Risk
Generated on August 11, 2025 | Scorecard vv5.2.1-40-gf6ed084d
Security Checks
10/10
Binary-Artifacts
High Risk

no binaries found in the repo

Determines if the project has generated executable (binary) artifacts in the source repository.

10/10
Dangerous-Workflow
Critical Risk

no dangerous workflow patterns detected

Determines if the project's GitHub Action workflows avoid dangerous patterns.

9/10
License
Low Risk

license file detected

Determines if the project has defined a license.

Show details
ℹ️ Info: project has a license file: LICENSE:0
⚠️ Warn: project license file does not contain an FSF or OSI license.
2/10
Code-Review
High Risk

Found 3/12 approved changesets -- score normalized to 2

Determines if the project requires human code review before pull requests (aka merge requests) are merged.

0/10
Branch-Protection
High Risk

branch protection not enabled on development/release branches

Determines if the default and release branches are protected with GitHub's branch protection settings.

Show details
⚠️ Warn: branch protection not enabled for branch 'master'
0/10
CII-Best-Practices
Low Risk

no effort to earn an OpenSSF best practices badge detected

Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.

0/10
Fuzzing
Medium Risk

project is not fuzzed

Determines if the project uses fuzzing.

Show details
⚠️ Warn: no fuzzer integrations found
0/10
Maintained
High Risk

0 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0

Determines if the project is "actively maintained".

0/10
Pinned-Dependencies
Medium Risk

dependency not pinned by hash detected -- score normalized to 0

Determines if the project has declared and pinned the dependencies of its build process.

Show details
⚠️ Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pythonpublish.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/LeetCode-OpenSource/django-ckeditor/pythonpublish.yml/master?enable=pin
⚠️ Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pythonpublish.yml:19: update your workflow using https://app.stepsecurity.io/secureworkflow/LeetCode-OpenSource/django-ckeditor/pythonpublish.yml/master?enable=pin
⚠️ Warn: pipCommand not pinned by hash: .github/workflows/pythonpublish.yml:24
⚠️ Warn: pipCommand not pinned by hash: .github/workflows/pythonpublish.yml:25
ℹ️ Info: 0 out of 2 GitHub-owned GitHubAction dependencies pinned
ℹ️ Info: 0 out of 2 pipCommand dependencies pinned
0/10
SAST
Medium Risk

SAST tool is not run on all commits -- score normalized to 0

Determines if the project uses static code analysis.

Show details
⚠️ Warn: 0 commits out of 21 are checked with a SAST tool
0/10
Security-Policy
Medium Risk

security policy file not detected

Determines if the project has published a security policy.

Show details
⚠️ Warn: no security policy file detected
⚠️ Warn: no security file to analyze
⚠️ Warn: no security file to analyze
⚠️ Warn: no security file to analyze
0/10
Token-Permissions
High Risk

detected GitHub workflow tokens with excessive permissions

Determines if the project's workflows follow the principle of least privilege.

Show details
⚠️ Warn: no topLevel permission defined: .github/workflows/pythonpublish.yml:1
ℹ️ Info: no jobLevel write permissions found
0/10
Vulnerabilities
High Risk

96 existing vulnerabilities detected

Determines if the project has open, known unfixed vulnerabilities.

Show details
⚠️ Warn: Project is vulnerable to: PYSEC-2014-5 / GHSA-296w-6qhq-gf92
⚠️ Warn: Project is vulnerable to: PYSEC-2011-2 / GHSA-3jqw-crqj-w8qw
⚠️ Warn: Project is vulnerable to: PYSEC-2012-3 / GHSA-59w8-4wm2-4xw8
⚠️ Warn: Project is vulnerable to: PYSEC-2012-4 / GHSA-5h2q-4hrp-v9rr
⚠️ Warn: Project is vulnerable to: PYSEC-2014-6 / GHSA-625g-gx8c-xcmg
⚠️ Warn: Project is vulnerable to: PYSEC-2015-8 / GHSA-6565-fg86-6jcx
⚠️ Warn: Project is vulnerable to: PYSEC-2021-98 / GHSA-68w8-qjq3-2gfm
⚠️ Warn: Project is vulnerable to: PYSEC-2012-2 / GHSA-78vx-ggch-wghm
⚠️ Warn: Project is vulnerable to: PYSEC-2015-9 / GHSA-7fq8-4pv5-5w5c
⚠️ Warn: Project is vulnerable to: PYSEC-2015-4 / GHSA-7qfw-j7hp-v45g
⚠️ Warn: Project is vulnerable to: PYSEC-2011-9 / GHSA-7wph-fc4w-wqp2
⚠️ Warn: Project is vulnerable to: GHSA-7xr5-9hcq-chf9
⚠️ Warn: Project is vulnerable to: PYSEC-2014-2 / GHSA-89hj-xfx5-7q66
⚠️ Warn: Project is vulnerable to: GHSA-8x94-hmjh-97hq
⚠️ Warn: Project is vulnerable to: PYSEC-2016-2 / GHSA-c8c8-9472-w52h
⚠️ Warn: Project is vulnerable to: PYSEC-2016-3 / GHSA-crhm-qpjc-cm64
⚠️ Warn: Project is vulnerable to: PYSEC-2014-4 / GHSA-f7cm-ccfp-3q4r
⚠️ Warn: Project is vulnerable to: PYSEC-2016-16 / GHSA-fp6p-5xvw-m74f
⚠️ Warn: Project is vulnerable to: PYSEC-2011-8 / GHSA-fwr5-q9rx-294f
⚠️ Warn: Project is vulnerable to: PYSEC-2015-5 / GHSA-gv98-g628-m9x5
⚠️ Warn: Project is vulnerable to: PYSEC-2015-20 / GHSA-h582-2pch-3xv3
⚠️ Warn: Project is vulnerable to: PYSEC-2011-5 / GHSA-h95j-h2rv-qrg4
⚠️ Warn: Project is vulnerable to: GHSA-hmr4-m2h5-33qx
⚠️ Warn: Project is vulnerable to: PYSEC-2015-6 / GHSA-jhjg-w2cp-5j44
⚠️ Warn: Project is vulnerable to: PYSEC-2016-15 / GHSA-pw27-w7w4-9qc7
⚠️ Warn: Project is vulnerable to: PYSEC-2015-10 / GHSA-q5qw-4364-5hhm
⚠️ Warn: Project is vulnerable to: PYSEC-2011-4 / GHSA-rm2j-x595-q9cj
⚠️ Warn: Project is vulnerable to: GHSA-rrqc-c2jx-6jgv
⚠️ Warn: Project is vulnerable to: PYSEC-2014-1 / GHSA-rvq6-mrpv-m6rm
⚠️ Warn: Project is vulnerable to: PYSEC-2014-7 / GHSA-rw75-m7gp-92m3
⚠️ Warn: Project is vulnerable to: PYSEC-2019-16 / GHSA-vfq6-hq5r-27r6
⚠️ Warn: Project is vulnerable to: PYSEC-2014-3 / GHSA-wqjj-hx84-v449
⚠️ Warn: Project is vulnerable to: PYSEC-2011-3 / GHSA-wxg3-mfph-qg9w
⚠️ Warn: Project is vulnerable to: PYSEC-2011-1 / GHSA-x88j-93vc-wpmp
⚠️ Warn: Project is vulnerable to: PYSEC-2007-1
⚠️ Warn: Project is vulnerable to: PYSEC-2008-1
⚠️ Warn: Project is vulnerable to: PYSEC-2008-2
⚠️ Warn: Project is vulnerable to: PYSEC-2009-3
⚠️ Warn: Project is vulnerable to: PYSEC-2015-11
⚠️ Warn: Project is vulnerable to: PYSEC-2015-7
⚠️ Warn: Project is vulnerable to: PYSEC-2016-18
⚠️ Warn: Project is vulnerable to: GHSA-3c5c-7235-994j
⚠️ Warn: Project is vulnerable to: GHSA-3f63-hfp8-52jq
⚠️ Warn: Project is vulnerable to: PYSEC-2021-41 / GHSA-3wvg-mj6g-m9cv
⚠️ Warn: Project is vulnerable to: PYSEC-2020-77 / GHSA-3xv8-3j54-hgrp
⚠️ Warn: Project is vulnerable to: PYSEC-2020-80 / GHSA-43fq-w8qq-v88h
⚠️ Warn: Project is vulnerable to: GHSA-44wm-f244-xhp3
⚠️ Warn: Project is vulnerable to: GHSA-4fx9-vc88-q2xc
⚠️ Warn: Project is vulnerable to: PYSEC-2021-35 / GHSA-57h3-9rgr-c24m
⚠️ Warn: Project is vulnerable to: PYSEC-2020-172 / GHSA-5gm3-px64-rw72
⚠️ Warn: Project is vulnerable to: PYSEC-2021-331 / GHSA-7534-mm45-c74v
⚠️ Warn: Project is vulnerable to: PYSEC-2021-92 / GHSA-7r7m-5h27-29hp
⚠️ Warn: Project is vulnerable to: PYSEC-2020-78 / GHSA-8843-m7mw-mxqm
⚠️ Warn: Project is vulnerable to: PYSEC-2023-227 / GHSA-8ghj-p4vj-mr35
⚠️ Warn: Project is vulnerable to: PYSEC-2014-87 / GHSA-8m9x-pxwq-j236
⚠️ Warn: Project is vulnerable to: PYSEC-2022-10 / GHSA-8vj2-vxx3-667w
⚠️ Warn: Project is vulnerable to: PYSEC-2021-36 / GHSA-8xjq-8fcg-g5hw
⚠️ Warn: Project is vulnerable to: PYSEC-2016-6 / GHSA-8xjv-v9xq-m5h9
⚠️ Warn: Project is vulnerable to: PYSEC-2021-42 / GHSA-95q3-8gr9-gm8w
⚠️ Warn: Project is vulnerable to: PYSEC-2022-168 / GHSA-9j59-75qj-795w
⚠️ Warn: Project is vulnerable to: PYSEC-2014-10 / GHSA-cfmr-38g9-f2h7
⚠️ Warn: Project is vulnerable to: PYSEC-2020-76 / GHSA-cqhg-xjhh-p8hf
⚠️ Warn: Project is vulnerable to: PYSEC-2021-40 / GHSA-f4w8-cv6p-x6r5
⚠️ Warn: Project is vulnerable to: PYSEC-2021-69 / GHSA-f5g8-5qq7-938w
⚠️ Warn: Project is vulnerable to: PYSEC-2021-139 / GHSA-g6rj-rv7j-xwp4
⚠️ Warn: Project is vulnerable to: PYSEC-2015-16 / GHSA-h5rf-vgqx-wjv2
⚠️ Warn: Project is vulnerable to: PYSEC-2016-5 / GHSA-hggx-3h72-49ww
⚠️ Warn: Project is vulnerable to: PYSEC-2020-84 / GHSA-hj69-c76v-86wr
⚠️ Warn: Project is vulnerable to: PYSEC-2016-7 / GHSA-hvr8-466p-75rh
⚠️ Warn: Project is vulnerable to: PYSEC-2015-15 / GHSA-j6f7-g425-4gmx
⚠️ Warn: Project is vulnerable to: GHSA-j7hp-h8jx-5ppr
⚠️ Warn: Project is vulnerable to: PYSEC-2019-110 / GHSA-j7mj-748x-7p78
⚠️ Warn: Project is vulnerable to: GHSA-jgpv-4h4c-xhw3
⚠️ Warn: Project is vulnerable to: PYSEC-2022-42979 / GHSA-m2vv-5vj5-2hm7
⚠️ Warn: Project is vulnerable to: PYSEC-2021-37 / GHSA-mvg9-xffr-p774
⚠️ Warn: Project is vulnerable to: PYSEC-2020-83 / GHSA-p49h-hjvm-jg3h
⚠️ Warn: Project is vulnerable to: PYSEC-2022-8 / GHSA-pw3c-h7wp-cvhx
⚠️ Warn: Project is vulnerable to: PYSEC-2021-93 / GHSA-q5hq-fp76-qmrc
⚠️ Warn: Project is vulnerable to: PYSEC-2020-82 / GHSA-r7rm-8j6h-r933
⚠️ Warn: Project is vulnerable to: PYSEC-2014-23 / GHSA-r854-96gq-rfg3
⚠️ Warn: Project is vulnerable to: PYSEC-2016-8 / GHSA-rwr3-c2q8-gm56
⚠️ Warn: Project is vulnerable to: PYSEC-2020-81 / GHSA-vcqg-3p29-xw73
⚠️ Warn: Project is vulnerable to: PYSEC-2020-79 / GHSA-vj42-xq3r-hr3r
⚠️ Warn: Project is vulnerable to: PYSEC-2021-70 / GHSA-vqcj-wrf2-7v73
⚠️ Warn: Project is vulnerable to: PYSEC-2016-9 / GHSA-w4vg-rf63-f3j3
⚠️ Warn: Project is vulnerable to: PYSEC-2014-22 / GHSA-x895-2wrm-hvp7
⚠️ Warn: Project is vulnerable to: PYSEC-2022-9 / GHSA-xrcv-f9gm-v42c
⚠️ Warn: Project is vulnerable to: PYSEC-2021-137
⚠️ Warn: Project is vulnerable to: PYSEC-2021-138
⚠️ Warn: Project is vulnerable to: PYSEC-2021-317
⚠️ Warn: Project is vulnerable to: PYSEC-2021-38
⚠️ Warn: Project is vulnerable to: PYSEC-2021-39
⚠️ Warn: Project is vulnerable to: PYSEC-2021-94
⚠️ Warn: Project is vulnerable to: PYSEC-2023-175
⚠️ Warn: Project is vulnerable to: PYSEC-2022-43167
⚠️ Warn: Project is vulnerable to: PYSEC-2023-206
N/A
Packaging
Not Applicable

packaging workflow not detected

Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.

Show details
⚠️ Warn: no GitHub/GitLab publishing workflow detected.
N/A
Signed-Releases
Not Applicable

no releases found

Determines if the project cryptographically signs release artifacts.