{"id":310,"url":"https://github.com/wp-graphql/wp-graphql-woocommerce","last_synced_at":"2026-08-18T12:21:05.792Z","repository":{"id":38360111,"uuid":"175459051","full_name":"wp-graphql/wp-graphql-woocommerce","owner":"wp-graphql","description":"Add WooCommerce support and functionality to your WPGraphQL server","archived":false,"fork":false,"pushed_at":"2026-06-30T14:50:01.000Z","size":6598,"stargazers_count":703,"open_issues_count":17,"forks_count":147,"subscribers_count":17,"default_branch":"develop","last_synced_at":"2026-08-03T12:20:11.643Z","etag":null,"topics":["api","graphql","graphql-server","hacktoberfest","mutations","woocommerce","wordpress-plugin","wp-graphql","wp-graphql-woocommerce","wp-plugin"],"latest_commit_sha":null,"homepage":"https://woographql.com","language":"PHP","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"gpl-3.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/wp-graphql.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":".github/CONTRIBUTING.md","funding":".github/FUNDING.yml","license":"LICENSE","code_of_conduct":".github/CODE_OF_CONDUCT.md","threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":"SECURITY.md","support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null},"funding":{"github":["kidunot89"]}},"created_at":"2019-03-13T16:29:50.000Z","updated_at":"2026-07-08T16:51:40.000Z","dependencies_parsed_at":"2023-12-30T03:06:34.815Z","dependency_job_id":"77ce8e84-819f-415d-95a8-183640abb03e","html_url":"https://github.com/wp-graphql/wp-graphql-woocommerce","commit_stats":{"total_commits":962,"total_committers":46,"mean_commits":20.91304347826087,"dds":"0.11226611226611227","last_synced_commit":"74099a099e045395120d7e02592c04d00e1296c5"},"previous_names":[],"tags_count":64,"template":false,"template_full_name":null,"purl":"pkg:github/wp-graphql/wp-graphql-woocommerce","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/wp-graphql%2Fwp-graphql-woocommerce","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/wp-graphql%2Fwp-graphql-woocommerce/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/wp-graphql%2Fwp-graphql-woocommerce/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/wp-graphql%2Fwp-graphql-woocommerce/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/wp-graphql","download_url":"https://codeload.github.com/wp-graphql/wp-graphql-woocommerce/tar.gz/refs/heads/develop","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/wp-graphql%2Fwp-graphql-woocommerce/sbom","scorecard":{"id":1239774,"data":{"date":"2025-11-10","repo":{"name":"github.com/wp-graphql/wp-graphql-woocommerce","commit":"f61b55f8df7432dae3235eee6dd21b681e34faa2"},"scorecard":{"version":"v5.3.1-0.20251106164954-c65a663bf4a9","commit":"c65a663bf4a93c0f6eca32e6d34713d3e3440e11"},"score":4.4,"checks":[{"name":"Code-Review","score":3,"reason":"Found 9/30 approved changesets -- score normalized to 3","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/c65a663bf4a93c0f6eca32e6d34713d3e3440e11/docs/checks.md#code-review"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/c65a663bf4a93c0f6eca32e6d34713d3e3440e11/docs/checks.md#packaging"}},{"name":"Maintained","score":1,"reason":"1 commit(s) and 1 issue activity found in the last 90 days -- score normalized to 1","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/c65a663bf4a93c0f6eca32e6d34713d3e3440e11/docs/checks.md#maintained"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: SECURITY.md:1","Info: Found linked content: SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: SECURITY.md:1","Info: Found text in security policy: SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/c65a663bf4a93c0f6eca32e6d34713d3e3440e11/docs/checks.md#security-policy"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/c65a663bf4a93c0f6eca32e6d34713d3e3440e11/docs/checks.md#dangerous-workflow"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/c65a663bf4a93c0f6eca32e6d34713d3e3440e11/docs/checks.md#cii-best-practices"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/c65a663bf4a93c0f6eca32e6d34713d3e3440e11/docs/checks.md#binary-artifacts"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Warn: no topLevel permission defined: .github/workflows/code-quality.yml:1","Warn: no topLevel permission defined: .github/workflows/continous-integration.yml:1","Warn: no topLevel permission defined: .github/workflows/lint-code.yml:1","Warn: no topLevel permission defined: .github/workflows/package-for-release.yml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/c65a663bf4a93c0f6eca32e6d34713d3e3440e11/docs/checks.md#token-permissions"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Warn: third-party GitHubAction not pinned by hash: .github/workflows/code-quality.yml:23: update your workflow using https://app.stepsecurity.io/secureworkflow/wp-graphql/wp-graphql-woocommerce/code-quality.yml/develop?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/code-quality.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/wp-graphql/wp-graphql-woocommerce/code-quality.yml/develop?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/code-quality.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/wp-graphql/wp-graphql-woocommerce/code-quality.yml/develop?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/continous-integration.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/wp-graphql/wp-graphql-woocommerce/continous-integration.yml/develop?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/continous-integration.yml:46: update your workflow using https://app.stepsecurity.io/secureworkflow/wp-graphql/wp-graphql-woocommerce/continous-integration.yml/develop?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/continous-integration.yml:76: update your workflow using https://app.stepsecurity.io/secureworkflow/wp-graphql/wp-graphql-woocommerce/continous-integration.yml/develop?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/lint-code.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/wp-graphql/wp-graphql-woocommerce/lint-code.yml/develop?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/lint-code.yml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/wp-graphql/wp-graphql-woocommerce/lint-code.yml/develop?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/lint-code.yml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/wp-graphql/wp-graphql-woocommerce/lint-code.yml/develop?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/package-for-release.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/wp-graphql/wp-graphql-woocommerce/package-for-release.yml/develop?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/package-for-release.yml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/wp-graphql/wp-graphql-woocommerce/package-for-release.yml/develop?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/package-for-release.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/wp-graphql/wp-graphql-woocommerce/package-for-release.yml/develop?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/package-for-release.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/wp-graphql/wp-graphql-woocommerce/package-for-release.yml/develop?enable=pin","Warn: containerImage not pinned by hash: Dockerfile:2","Warn: downloadThenRun not pinned by hash: Dockerfile:30-32","Info:   0 out of   6 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of   7 third-party GitHubAction dependencies pinned","Info:   0 out of   1 containerImage dependencies pinned","Info:   0 out of   1 downloadThenRun dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/c65a663bf4a93c0f6eca32e6d34713d3e3440e11/docs/checks.md#pinned-dependencies"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/c65a663bf4a93c0f6eca32e6d34713d3e3440e11/docs/checks.md#fuzzing"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: GNU General Public License v3.0: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/c65a663bf4a93c0f6eca32e6d34713d3e3440e11/docs/checks.md#license"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/c65a663bf4a93c0f6eca32e6d34713d3e3440e11/docs/checks.md#vulnerabilities"}},{"name":"Signed-Releases","score":0,"reason":"Project has not signed or included provenance with any releases.","details":["Warn: release artifact v0.21.2 not signed: https://api.github.com/repos/wp-graphql/wp-graphql-woocommerce/releases/203130587","Warn: release artifact v0.21.1 not signed: https://api.github.com/repos/wp-graphql/wp-graphql-woocommerce/releases/184956282","Warn: release artifact v0.21.0 not signed: https://api.github.com/repos/wp-graphql/wp-graphql-woocommerce/releases/169160446","Warn: release artifact v0.20.0 not signed: https://api.github.com/repos/wp-graphql/wp-graphql-woocommerce/releases/156620083","Warn: release artifact v0.19.0 not signed: https://api.github.com/repos/wp-graphql/wp-graphql-woocommerce/releases/135205025","Warn: release artifact v0.21.2 does not have provenance: https://api.github.com/repos/wp-graphql/wp-graphql-woocommerce/releases/203130587","Warn: release artifact v0.21.1 does not have provenance: https://api.github.com/repos/wp-graphql/wp-graphql-woocommerce/releases/184956282","Warn: release artifact v0.21.0 does not have provenance: https://api.github.com/repos/wp-graphql/wp-graphql-woocommerce/releases/169160446","Warn: release artifact v0.20.0 does not have provenance: https://api.github.com/repos/wp-graphql/wp-graphql-woocommerce/releases/156620083","Warn: release artifact v0.19.0 does not have provenance: https://api.github.com/repos/wp-graphql/wp-graphql-woocommerce/releases/135205025"],"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/c65a663bf4a93c0f6eca32e6d34713d3e3440e11/docs/checks.md#signed-releases"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/c65a663bf4a93c0f6eca32e6d34713d3e3440e11/docs/checks.md#branch-protection"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 30 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/c65a663bf4a93c0f6eca32e6d34713d3e3440e11/docs/checks.md#sast"}}]},"last_synced_at":"2025-11-16T02:19:01.674Z","repository_id":38360111,"created_at":"2025-11-16T02:19:01.674Z","updated_at":"2025-11-16T02:19:01.674Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":36767744,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-08-06T04:43:03.162Z","status":"online","status_checked_at":"2026-08-18T02:00:06.197Z","response_time":52,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["api","graphql","graphql-server","hacktoberfest","mutations","woocommerce","wordpress-plugin","wp-graphql","wp-graphql-woocommerce","wp-plugin"],"created_at":"2024-01-11T15:52:56.385Z","updated_at":"2026-08-18T12:21:05.559Z","avatar_url":"https://github.com/wp-graphql.png","language":"PHP","project_url":"https://opencollective.ecosyste.ms/api/v1/projects/310","html_url":"https://opencollective.ecosyste.ms/projects/310","collective":{"id":2036,"uuid":"8a47byg9-nxozdp8g-nr9qmjlv-03rek5w8","slug":"woographql","name":"WPGraphQL WooCommerce (WooGraphQL)","description":"Add WooCommerce support and functionality to your WPGraphQL server","website":"https://woographql.com","github":"wp-graphql/wp-graphql-woocommerce","twitter":"woographql","repository_url":null,"social_links":[{"type":"WEBSITE","url":"https://woographql.com"},{"type":"TWITTER","url":"https://twitter.com/woographql"},{"type":"GITHUB","url":"https://github.com/wp-graphql/wp-graphql-woocommerce"}],"currency":"USD","projects_count":1,"last_synced_at":"2026-08-30T12:15:13.828Z","created_at":"2024-01-10T13:17:51.797Z","updated_at":"2026-08-30T12:15:14.200Z","transactions_count":4,"balance":0.56,"account_type":"COLLECTIVE","owner":{"login":"wp-graphql","name":"WPGraphQL","uuid":"24994409","kind":"organization","description":"An Open Source WordPress plugin that enables a GraphQL API for WordPress sites","email":null,"website":"https://www.wpgraphql.com","location":"Denver, CO","twitter":"wpgraphql","company":null,"icon_url":"https://avatars.githubusercontent.com/u/24994409?v=4","repositories_count":42,"last_synced_at":"2024-10-29T21:13:44.862Z","metadata":{"has_sponsors_listing":false},"html_url":"https://github.com/wp-graphql","funding_links":[],"total_stars":6289,"followers":86,"following":0,"created_at":"2022-11-09T06:06:23.071Z","updated_at":"2024-10-29T21:13:44.863Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/wp-graphql","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/wp-graphql/repositories"},"last_project_activity_at":"2026-06-30T14:50:01.000Z","archived":false,"no_funding":false,"no_license":false,"host":"opensource","collective_created_at":"2020-02-19T17:20:14.062Z","collective_updated_at":"2022-09-27T23:10:38.970Z","html_url":"https://opencollective.com/woographql","icon_url":"https://images.opencollective.com/woographql/logo/40.png","total_donations":86.56,"total_expenses":-86.0,"current_balance":0.56,"api_url":"https://opencollective.ecosyste.ms/api/v1/collectives/woographql","url":"https://opencollective.ecosyste.ms/collectives/woographql","projects_url":"https://opencollective.ecosyste.ms/api/v1/collectives/woographql/projects"}}