GitHub

cross-language-cpp/djinni-generator

21 forks

102 stars

Description

Command-line tool that generates gluecode from a djinni-IDL file

Homepage

https://github.com/cross-language-cpp/djinni-generator

Project metadata as of June 27, 2025.

OpenSSF scorecard

The Open Source Security Foundation is a cross-industry collaboration to improve the security of open source software (OSS). The Scorecard provides security health metrics for open source projects.

View information about checks and how to fix failures.

Score

4.3/10

Scorecard as of July 7, 2025.

Maintained

0/10

Determines if the project is "actively maintained".

Reasoning

0 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0

CII-Best-Practices

0/10

Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.

Reasoning

no effort to earn an OpenSSF best practices badge detected

Code-Review

9/10

Determines if the project requires human code review before pull requests (aka merge requests) are merged.

Reasoning

Found 28/30 approved changesets -- score normalized to 9

Dangerous-Workflow

10/10

Determines if the project's GitHub Action workflows avoid dangerous patterns.

Reasoning

no dangerous workflow patterns detected

Security-Policy

0/10

Determines if the project has published a security policy.

Reasoning

security policy file not detected

Binary-Artifacts

10/10

Determines if the project has generated executable (binary) artifacts in the source repository.

Reasoning

no binaries found in the repo

Token-Permissions

0/10

Determines if the project's workflows follow the principle of least privilege.

Reasoning

detected GitHub workflow tokens with excessive permissions

License

10/10

Determines if the project has defined a license.

Reasoning

license file detected

Fuzzing

0/10

Determines if the project uses fuzzing.

Reasoning

project is not fuzzed

Pinned-Dependencies

0/10

Determines if the project has declared and pinned the dependencies of its build process.

Reasoning

dependency not pinned by hash detected -- score normalized to 0

Signed-Releases

0/10

Determines if the project cryptographically signs release artifacts.

Reasoning

Project has not signed or included provenance with any releases.

SAST

0/10

Determines if the project uses static code analysis.

Reasoning

SAST tool is not run on all commits -- score normalized to 0

This site uses cookies from Google to deliver its services and to analyze traffic.

Pinned-Dependencies

Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/main.yaml:71: update your workflow using https://app.stepsecurity.io/secureworkflow/cross-language-cpp/djinni-generator/main.yaml/main?enable=pin

Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/main.yaml:73: update your workflow using https://app.stepsecurity.io/secureworkflow/cross-language-cpp/djinni-generator/main.yaml/main?enable=pin

Warn: third-party GitHubAction not pinned by hash: .github/workflows/main.yaml:78: update your workflow using https://app.stepsecurity.io/secureworkflow/cross-language-cpp/djinni-generator/main.yaml/main?enable=pin

Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/main.yaml:83: update your workflow using https://app.stepsecurity.io/secureworkflow/cross-language-cpp/djinni-generator/main.yaml/main?enable=pin

Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/main.yaml:94: update your workflow using https://app.stepsecurity.io/secureworkflow/cross-language-cpp/djinni-generator/main.yaml/main?enable=pin

Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/main.yaml:104: update your workflow using https://app.stepsecurity.io/secureworkflow/cross-language-cpp/djinni-generator/main.yaml/main?enable=pin

Warn: third-party GitHubAction not pinned by hash: .github/workflows/main.yaml:112: update your workflow using https://app.stepsecurity.io/secureworkflow/cross-language-cpp/djinni-generator/main.yaml/main?enable=pin

Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/main.yaml:16: update your workflow using https://app.stepsecurity.io/secureworkflow/cross-language-cpp/djinni-generator/main.yaml/main?enable=pin

Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/main.yaml:18: update your workflow using https://app.stepsecurity.io/secureworkflow/cross-language-cpp/djinni-generator/main.yaml/main?enable=pin

Warn: third-party GitHubAction not pinned by hash: .github/workflows/main.yaml:23: update your workflow using https://app.stepsecurity.io/secureworkflow/cross-language-cpp/djinni-generator/main.yaml/main?enable=pin

Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/main.yaml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/cross-language-cpp/djinni-generator/main.yaml/main?enable=pin

Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/main.yaml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/cross-language-cpp/djinni-generator/main.yaml/main?enable=pin

Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/main.yaml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/cross-language-cpp/djinni-generator/main.yaml/main?enable=pin

Warn: third-party GitHubAction not pinned by hash: .github/workflows/main.yaml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/cross-language-cpp/djinni-generator/main.yaml/main?enable=pin

Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/main.yaml:49: update your workflow using https://app.stepsecurity.io/secureworkflow/cross-language-cpp/djinni-generator/main.yaml/main?enable=pin

Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/main.yaml:51: update your workflow using https://app.stepsecurity.io/secureworkflow/cross-language-cpp/djinni-generator/main.yaml/main?enable=pin

Warn: third-party GitHubAction not pinned by hash: .github/workflows/main.yaml:56: update your workflow using https://app.stepsecurity.io/secureworkflow/cross-language-cpp/djinni-generator/main.yaml/main?enable=pin

Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/main.yaml:57: update your workflow using https://app.stepsecurity.io/secureworkflow/cross-language-cpp/djinni-generator/main.yaml/main?enable=pin

Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yaml:14: update your workflow using https://app.stepsecurity.io/secureworkflow/cross-language-cpp/djinni-generator/release.yaml/main?enable=pin

Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yaml:16: update your workflow using https://app.stepsecurity.io/secureworkflow/cross-language-cpp/djinni-generator/release.yaml/main?enable=pin

Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yaml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/cross-language-cpp/djinni-generator/release.yaml/main?enable=pin

Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yaml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/cross-language-cpp/djinni-generator/release.yaml/main?enable=pin

Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yaml:32: update your workflow using https://app.stepsecurity.io/secureworkflow/cross-language-cpp/djinni-generator/release.yaml/main?enable=pin

Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yaml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/cross-language-cpp/djinni-generator/release.yaml/main?enable=pin

Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yaml:42: update your workflow using https://app.stepsecurity.io/secureworkflow/cross-language-cpp/djinni-generator/release.yaml/main?enable=pin

Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yaml:51: update your workflow using https://app.stepsecurity.io/secureworkflow/cross-language-cpp/djinni-generator/release.yaml/main?enable=pin

Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yaml:61: update your workflow using https://app.stepsecurity.io/secureworkflow/cross-language-cpp/djinni-generator/release.yaml/main?enable=pin

Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yaml:70: update your workflow using https://app.stepsecurity.io/secureworkflow/cross-language-cpp/djinni-generator/release.yaml/main?enable=pin

Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/stale-bot.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/cross-language-cpp/djinni-generator/stale-bot.yml/main?enable=pin

Info: 0 out of 22 GitHub-owned GitHubAction dependencies pinned

Info: 0 out of 7 third-party GitHubAction dependencies pinned