{"id":3408,"url":"https://github.com/lvgl/lvgl","last_synced_at":"2026-07-11T18:20:26.491Z","repository":{"id":37051124,"uuid":"60667730","full_name":"lvgl/lvgl","owner":"lvgl","description":"Embedded graphics library to create beautiful UIs for any MCU, MPU and display type. ","archived":false,"fork":false,"pushed_at":"2025-08-18T07:23:50.000Z","size":470619,"stargazers_count":21105,"open_issues_count":98,"forks_count":3794,"subscribers_count":322,"default_branch":"master","last_synced_at":"2025-08-18T08:41:18.427Z","etag":null,"topics":["c","embedded","graphics","gui","mcu","microcontroller","tft"],"latest_commit_sha":null,"homepage":"https://lvgl.io","language":"C","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/lvgl.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":".github/FUNDING.yml","license":null,"code_of_conduct":"docs/CODE_OF_CONDUCT.md","threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null},"funding":{"github":"lvgl"}},"created_at":"2016-06-08T04:14:34.000Z","updated_at":"2025-08-18T08:40:34.000Z","dependencies_parsed_at":"2023-12-29T03:31:13.748Z","dependency_job_id":"54903389-1c4d-46a2-8dcd-7e04be27ff4c","html_url":"https://github.com/lvgl/lvgl","commit_stats":{"total_commits":8944,"total_committers":523,"mean_commits":"17.101338432122372","dds":0.4121198568872988,"last_synced_commit":"dc9e42360613e8506b13d8bfc3b28b1207da10b1"},"previous_names":["littlevgl/lvgl"],"tags_count":71,"template":false,"template_full_name":null,"purl":"pkg:github/lvgl/lvgl","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/lvgl%2Flvgl","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/lvgl%2Flvgl/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/lvgl%2Flvgl/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/lvgl%2Flvgl/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/lvgl","download_url":"https://codeload.github.com/lvgl/lvgl/tar.gz/refs/heads/master","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/lvgl%2Flvgl/sbom","scorecard":{"id":352654,"data":{"date":"2025-08-11","repo":{"name":"github.com/lvgl/lvgl","commit":"2e3e1ea29406128732c97ece9a92814843a051c1"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":4.5,"checks":[{"name":"Code-Review","score":10,"reason":"all changesets reviewed","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Maintained","score":10,"reason":"30 commit(s) and 22 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Warn: no topLevel permission defined: .github/workflows/arduino.yml:1","Warn: no topLevel permission defined: .github/workflows/build_examples_with_cxx_compiler.yml:1","Warn: no topLevel permission defined: .github/workflows/build_hardware.yml:1","Warn: no topLevel permission defined: .github/workflows/build_micropython.yml:1","Warn: no topLevel permission defined: .github/workflows/ccpp.yml:1","Warn: no topLevel permission defined: .github/workflows/check_bom.yml:1","Warn: no topLevel permission defined: .github/workflows/check_conf.yml:1","Warn: no topLevel permission defined: .github/workflows/check_properties.yml:1","Warn: no topLevel permission defined: .github/workflows/check_style.yml:1","Warn: no topLevel permission defined: .github/workflows/check_templ.yml:1","Warn: no topLevel permission defined: .github/workflows/close_old_issues.yml:1","Warn: no topLevel permission defined: .github/workflows/compile_docs.yml:1","Warn: no topLevel permission defined: .github/workflows/esp_upload_component.yml:1","Warn: no topLevel permission defined: .github/workflows/gen_json.yml:1","Warn: no topLevel permission defined: .github/workflows/main.yml:1","Warn: no topLevel permission defined: .github/workflows/makefiles.yml:1","Warn: no topLevel permission defined: .github/workflows/makefiles_uefi.yml:1","Warn: no topLevel permission defined: .github/workflows/perf_emulation.yml:1","Warn: topLevel 'contents' permission set to 'write': .github/workflows/perf_emulation_handle_results.yml:14","Warn: no topLevel permission defined: .github/workflows/perf_hardware.yml:1","Warn: no topLevel permission defined: .github/workflows/perf_tests.yml:1","Warn: no topLevel permission defined: .github/workflows/platformio_publish.yaml:1","Warn: no topLevel permission defined: .github/workflows/release.yml:1","Warn: no topLevel permission defined: .github/workflows/release_branch_updater.yml:1","Warn: no topLevel permission defined: .github/workflows/verify_font_license.yml:1","Warn: no topLevel permission defined: .github/workflows/verify_kconfig.yml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"CII-Best-Practices","score":2,"reason":"badge detected: InProgress","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENCE.txt:0","Info: FSF or OSI recognized license: MIT License: LICENCE.txt:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Signed-Releases","score":0,"reason":"Project has not signed or included provenance with any releases.","details":["Warn: release artifact emulated-benchmark-latest not signed: https://api.github.com/repos/lvgl/lvgl/releases/227909082","Warn: release artifact emulated-benchmark-latest does not have provenance: https://api.github.com/repos/lvgl/lvgl/releases/227909082"],"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Security-Policy","score":0,"reason":"security policy file not detected","details":["Warn: no security policy file detected","Warn: no security file to analyze","Warn: no security file to analyze","Warn: no security file to analyze"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Binary-Artifacts","score":1,"reason":"binaries present in source code","details":["Warn: binary detected: examples/assets/img_skew_strip_80x20_argb8888.fnt:1","Warn: binary detected: libs/nema_gfx/lib/core/cortex_m33_NemaPVG/gcc/libnemagfx-float-abi-hard-wc16.a:1","Warn: binary detected: libs/nema_gfx/lib/core/cortex_m33_NemaPVG/gcc/libnemagfx-float-abi-hard.a:1","Warn: binary detected: libs/nema_gfx/lib/core/cortex_m33_NemaPVG/gcc/libnemagfx-wc16.a:1","Warn: binary detected: libs/nema_gfx/lib/core/cortex_m33_NemaPVG/gcc/libnemagfx.a:1","Warn: binary detected: libs/nema_gfx/lib/core/cortex_m33_revC/gcc/libnemagfx-float-abi-hard-wc16.a:1","Warn: binary detected: libs/nema_gfx/lib/core/cortex_m33_revC/gcc/libnemagfx-float-abi-hard.a:1","Warn: binary detected: libs/nema_gfx/lib/core/cortex_m33_revC/gcc/libnemagfx-wc16.a:1","Warn: binary detected: libs/nema_gfx/lib/core/cortex_m33_revC/gcc/libnemagfx.a:1"],"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/arduino.yml:19: update your workflow using https://app.stepsecurity.io/secureworkflow/lvgl/lvgl/arduino.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/arduino.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/lvgl/lvgl/arduino.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build_examples_with_cxx_compiler.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/lvgl/lvgl/build_examples_with_cxx_compiler.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/build_hardware.yml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/lvgl/lvgl/build_hardware.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/build_micropython.yml:23: update your workflow using https://app.stepsecurity.io/secureworkflow/lvgl/lvgl/build_micropython.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build_micropython.yml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/lvgl/lvgl/build_micropython.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build_micropython.yml:99: update your workflow using https://app.stepsecurity.io/secureworkflow/lvgl/lvgl/build_micropython.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ccpp.yml:32: update your workflow using https://app.stepsecurity.io/secureworkflow/lvgl/lvgl/ccpp.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ccpp.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/lvgl/lvgl/ccpp.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ccpp.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/lvgl/lvgl/ccpp.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ccpp.yml:63: update your workflow using https://app.stepsecurity.io/secureworkflow/lvgl/lvgl/ccpp.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ccpp.yml:69: update your workflow using https://app.stepsecurity.io/secureworkflow/lvgl/lvgl/ccpp.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ccpp.yml:72: update your workflow using https://app.stepsecurity.io/secureworkflow/lvgl/lvgl/ccpp.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ccpp.yml:77: update your workflow using https://app.stepsecurity.io/secureworkflow/lvgl/lvgl/ccpp.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ccpp.yml:92: update your workflow using https://app.stepsecurity.io/secureworkflow/lvgl/lvgl/ccpp.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ccpp.yml:96: update your workflow using https://app.stepsecurity.io/secureworkflow/lvgl/lvgl/ccpp.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ccpp.yml:116: update your workflow using https://app.stepsecurity.io/secureworkflow/lvgl/lvgl/ccpp.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ccpp.yml:117: update your workflow using https://app.stepsecurity.io/secureworkflow/lvgl/lvgl/ccpp.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ccpp.yml:119: update your workflow using https://app.stepsecurity.io/secureworkflow/lvgl/lvgl/ccpp.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ccpp.yml:138: update your workflow using https://app.stepsecurity.io/secureworkflow/lvgl/lvgl/ccpp.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ccpp.yml:164: update your workflow using https://app.stepsecurity.io/secureworkflow/lvgl/lvgl/ccpp.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/check_bom.yml:19: update your workflow using https://app.stepsecurity.io/secureworkflow/lvgl/lvgl/check_bom.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/check_conf.yml:18: update your workflow using https://app.stepsecurity.io/secureworkflow/lvgl/lvgl/check_conf.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/check_conf.yml:23: update your workflow using https://app.stepsecurity.io/secureworkflow/lvgl/lvgl/check_conf.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/check_properties.yml:18: update your workflow using https://app.stepsecurity.io/secureworkflow/lvgl/lvgl/check_properties.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/check_style.yml:18: update your workflow using https://app.stepsecurity.io/secureworkflow/lvgl/lvgl/check_style.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/check_style.yml:23: update your workflow using https://app.stepsecurity.io/secureworkflow/lvgl/lvgl/check_style.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/check_templ.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/lvgl/lvgl/check_templ.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/check_templ.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/lvgl/lvgl/check_templ.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/close_old_issues.yml:12: update your workflow using https://app.stepsecurity.io/secureworkflow/lvgl/lvgl/close_old_issues.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/compile_docs.yml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/lvgl/lvgl/compile_docs.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/compile_docs.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/lvgl/lvgl/compile_docs.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/compile_docs.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/lvgl/lvgl/compile_docs.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/compile_docs.yml:54: update your workflow using https://app.stepsecurity.io/secureworkflow/lvgl/lvgl/compile_docs.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/compile_docs.yml:58: update your workflow using https://app.stepsecurity.io/secureworkflow/lvgl/lvgl/compile_docs.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/compile_docs.yml:63: update your workflow using https://app.stepsecurity.io/secureworkflow/lvgl/lvgl/compile_docs.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/compile_docs.yml:84: update your workflow using https://app.stepsecurity.io/secureworkflow/lvgl/lvgl/compile_docs.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/compile_docs.yml:96: update your workflow using https://app.stepsecurity.io/secureworkflow/lvgl/lvgl/compile_docs.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/esp_upload_component.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/lvgl/lvgl/esp_upload_component.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/esp_upload_component.yml:18: update your workflow using https://app.stepsecurity.io/secureworkflow/lvgl/lvgl/esp_upload_component.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/gen_json.yml:18: update your workflow using https://app.stepsecurity.io/secureworkflow/lvgl/lvgl/gen_json.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/gen_json.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/lvgl/lvgl/gen_json.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/main.yml:10: update your workflow using https://app.stepsecurity.io/secureworkflow/lvgl/lvgl/main.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/main.yml:12: update your workflow using https://app.stepsecurity.io/secureworkflow/lvgl/lvgl/main.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/makefiles.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/lvgl/lvgl/makefiles.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/makefiles.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/lvgl/lvgl/makefiles.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/makefiles.yml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/lvgl/lvgl/makefiles.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/makefiles_uefi.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/lvgl/lvgl/makefiles_uefi.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/makefiles_uefi.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/lvgl/lvgl/makefiles_uefi.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/makefiles_uefi.yml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/lvgl/lvgl/makefiles_uefi.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/perf_emulation.yml:56: update your workflow using https://app.stepsecurity.io/secureworkflow/lvgl/lvgl/perf_emulation.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/perf_emulation.yml:83: update your workflow using https://app.stepsecurity.io/secureworkflow/lvgl/lvgl/perf_emulation.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/perf_emulation.yml:100: update your workflow using https://app.stepsecurity.io/secureworkflow/lvgl/lvgl/perf_emulation.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/perf_emulation.yml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/lvgl/lvgl/perf_emulation.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/perf_emulation_handle_results.yml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/lvgl/lvgl/perf_emulation_handle_results.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/perf_emulation_handle_results.yml:45: update your workflow using https://app.stepsecurity.io/secureworkflow/lvgl/lvgl/perf_emulation_handle_results.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/perf_emulation_handle_results.yml:51: update your workflow using https://app.stepsecurity.io/secureworkflow/lvgl/lvgl/perf_emulation_handle_results.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/perf_emulation_handle_results.yml:60: update your workflow using https://app.stepsecurity.io/secureworkflow/lvgl/lvgl/perf_emulation_handle_results.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/perf_emulation_handle_results.yml:73: update your workflow using https://app.stepsecurity.io/secureworkflow/lvgl/lvgl/perf_emulation_handle_results.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/perf_emulation_handle_results.yml:102: update your workflow using https://app.stepsecurity.io/secureworkflow/lvgl/lvgl/perf_emulation_handle_results.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/perf_emulation_handle_results.yml:163: update your workflow using https://app.stepsecurity.io/secureworkflow/lvgl/lvgl/perf_emulation_handle_results.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/perf_hardware.yml:19: update your workflow using https://app.stepsecurity.io/secureworkflow/lvgl/lvgl/perf_hardware.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/perf_hardware.yml:48: update your workflow using https://app.stepsecurity.io/secureworkflow/lvgl/lvgl/perf_hardware.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/perf_hardware.yml:68: update your workflow using https://app.stepsecurity.io/secureworkflow/lvgl/lvgl/perf_hardware.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/perf_hardware_comment_pr.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/lvgl/lvgl/perf_hardware_comment_pr.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/perf_hardware_comment_pr.yml:57: update your workflow using https://app.stepsecurity.io/secureworkflow/lvgl/lvgl/perf_hardware_comment_pr.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/perf_tests.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/lvgl/lvgl/perf_tests.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/perf_tests.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/lvgl/lvgl/perf_tests.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/perf_tests.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/lvgl/lvgl/perf_tests.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/platformio_publish.yaml:12: update your workflow using https://app.stepsecurity.io/secureworkflow/lvgl/lvgl/platformio_publish.yaml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/platformio_publish.yaml:14: update your workflow using https://app.stepsecurity.io/secureworkflow/lvgl/lvgl/platformio_publish.yaml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/lvgl/lvgl/release.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:18: update your workflow using https://app.stepsecurity.io/secureworkflow/lvgl/lvgl/release.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release_branch_updater.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/lvgl/lvgl/release_branch_updater.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/verify_font_license.yml:18: update your workflow using https://app.stepsecurity.io/secureworkflow/lvgl/lvgl/verify_font_license.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/verify_font_license.yml:23: update your workflow using https://app.stepsecurity.io/secureworkflow/lvgl/lvgl/verify_font_license.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/verify_kconfig.yml:18: update your workflow using https://app.stepsecurity.io/secureworkflow/lvgl/lvgl/verify_kconfig.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/verify_kconfig.yml:23: update your workflow using https://app.stepsecurity.io/secureworkflow/lvgl/lvgl/verify_kconfig.yml/master?enable=pin","Warn: containerImage not pinned by hash: tests/Dockerfile:1: pin your Docker image by updating ubuntu:24.04 to ubuntu:24.04@sha256:7c06e91f61fa88c08cc74f7e1b7c69ae24910d745357e0dfe1d2c0322aaf20f9","Warn: pipCommand not pinned by hash: tests/Dockerfile:13","Warn: pipCommand not pinned by hash: scripts/install-prerequisites.sh:15","Warn: pipCommand not pinned by hash: .github/workflows/build_micropython.yml:33","Warn: pipCommand not pinned by hash: .github/workflows/build_micropython.yml:88","Warn: pipCommand not pinned by hash: .github/workflows/compile_docs.yml:51","Warn: pipCommand not pinned by hash: .github/workflows/gen_json.yml:32","Warn: pipCommand not pinned by hash: .github/workflows/perf_emulation.yml:35","Warn: pipCommand not pinned by hash: .github/workflows/perf_emulation_handle_results.yml:35","Warn: pipCommand not pinned by hash: .github/workflows/perf_emulation_handle_results.yml:88","Warn: pipCommand not pinned by hash: .github/workflows/perf_emulation_handle_results.yml:156","Warn: pipCommand not pinned by hash: .github/workflows/platformio_publish.yaml:19","Warn: pipCommand not pinned by hash: .github/workflows/verify_font_license.yml:28","Warn: pipCommand not pinned by hash: .github/workflows/verify_font_license.yml:28","Warn: pipCommand not pinned by hash: .github/workflows/verify_kconfig.yml:35","Info:   0 out of  55 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of  23 third-party GitHubAction dependencies pinned","Info:   0 out of   1 containerImage dependencies pinned","Info:   0 out of  14 pipCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 30 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}}]},"last_synced_at":"2025-08-18T08:43:08.561Z","repository_id":37051124,"created_at":"2025-08-18T08:43:08.561Z","updated_at":"2025-08-18T08:43:08.561Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":270968524,"owners_count":24677133,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","status":"online","status_checked_at":"2025-08-18T02:00:08.743Z","response_time":89,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["c","embedded","graphics","gui","mcu","microcontroller","tft"],"created_at":"2024-01-11T16:46:09.736Z","updated_at":"2025-08-20T00:23:39.525Z","avatar_url":"https://github.com/lvgl.png","language":"C","project_url":"https://opencollective.ecosyste.ms/api/v1/projects/3408","html_url":"https://opencollective.ecosyste.ms/projects/3408","collective":{"id":1386,"uuid":"rvedj9wr-oz3a56de-40aq7blg-8x4m0ykn","slug":"lvgl","name":"LVGL","description":"Embedded graphics library to create beautiful UIs for any MCU, MPU and display type","website":"https://lvgl.io","github":"lvgl/lvgl","twitter":null,"repository_url":null,"social_links":[{"type":"WEBSITE","url":"https://lvgl.io"},{"type":"GITHUB","url":"https://github.com/lvgl/lvgl"}],"currency":"USD","projects_count":1,"last_synced_at":"2026-07-27T06:15:13.371Z","created_at":"2024-01-10T13:17:50.129Z","updated_at":"2026-07-27T06:15:13.619Z","transactions_count":289,"balance":659.559999999999,"account_type":"COLLECTIVE","owner":{"login":"lvgl","name":"LVGL","uuid":"19811762","kind":"organization","description":"Light and Versatile Embedded Graphics Library","email":"lvgl@lvgl.io","website":"https://lvgl.io","location":null,"twitter":null,"company":null,"icon_url":"https://avatars.githubusercontent.com/u/19811762?v=4","repositories_count":99,"last_synced_at":"2025-10-04T15:02:28.327Z","metadata":{"has_sponsors_listing":true},"html_url":"https://github.com/lvgl","funding_links":["https://github.com/sponsors/lvgl"],"total_stars":30574,"followers":1703,"following":0,"created_at":"2022-11-14T06:49:13.749Z","updated_at":"2025-10-04T15:02:28.327Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/lvgl","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/lvgl/repositories"},"last_project_activity_at":"2025-08-18T07:23:50.000Z","archived":false,"no_funding":false,"no_license":false,"host":"opensource","collective_created_at":"2021-02-03T10:30:59.453Z","collective_updated_at":"2024-08-26T11:35:00.385Z","html_url":"https://opencollective.com/lvgl","icon_url":"https://images.opencollective.com/lvgl/logo/40.png","total_donations":4248.160000000009,"total_expenses":-4181.180000000004,"current_balance":659.559999999999,"api_url":"https://opencollective.ecosyste.ms/api/v1/collectives/lvgl","url":"https://opencollective.ecosyste.ms/collectives/lvgl","projects_url":"https://opencollective.ecosyste.ms/api/v1/collectives/lvgl/projects"}}