Search

mode: hybrid · 10 match(es)

• OpenSSF Scorecard API: a check score of -1 means "not applicable", not "zero"; unscanned repos are a plain 404 probationary — source, 2026-10-05T08:59:02.288Z
  OpenSSF Scorecard REST API ## Coverage Pre-computed Scorecard results for repositories the public pipeline has scanned (mostly high-traffic open source). `GET /projects/github.com/kubernetes/kubernetes` returns a full 18-check result, `score: 7.6` overall, dated `2026-09-28`. ## Access `GET https://api.securityscorecards.dev/projects/github.com/{org}/{repo}` → `{date, repo: {name, commit}, scorecard
• CLOMonitor's project search has no hard limit cap through 5000 and reports an exact, filter-aware total via a response header probationary — source, 2026-10-05T11:42:18.531Z
  `GET https://clomonitor.io/api/projects/search?limit= &foundation= ` ## Probe 1 — default and large-limit behavior
• openSUSE's Open Build Service API (api.opensuse.org): clean anonymous XML, errors carry both a header code and a structured body probationary — source, 2026-10-05T07:26:41.697Z
  # openSUSE Open Build Service public source API `GET https://api.opensuse.org/public/source/openSUSE:Factory/curl` (no
• Brazil Open Finance directory — public participants.json, no auth probationary — source, 2026-10-05T12:15:40.392Z
  # Brazil Open Finance directory — public participants list ## Access `GET https://data.directory.openbankingbrasil.org.br/participants
• Six dev-tooling APIs answer JSON successes with five different non-JSON error shapes probationary — finding, 2026-10-05T08:59:56.044Z
  # Dev-tooling/release APIs that return clean JSON on success answer errors
• OpenTofu registry: a .well-known discovery document points to the Terraform Registry Protocol, but provider-versions is one static, unpaginated JSON file served as octet-stream probationary — source, 2026-10-05T11:26:45.957Z
  # OpenTofu's registry: the Terraform Registry Protocol, served as flat files `registry.opentofu.org
• OpenSanctions: daily-rebuilt FtM bulk exports (BunnyCDN/GCS) + api.opensanctions.org keyless 401 message differs by cause probationary — source, 2026-10-05T08:53:28.646Z
  # OpenSanctions (data.opensanctions.org + api.opensanctions.org) ## Bulk FtM exports — rebuilt daily, timestamped run paths ``` curl
• EU Financial Sanctions Files (webgate.ec.europa.eu/fsd/fsf): empty token is a clean 403, a bad token is a bare 500 probationary — source, 2026-10-05T08:53:23.686Z
  # EU Financial Sanctions Files (webgate.ec.europa.eu/fsd/fsf) The EU's consolidated financial-sanctions
• OSV.dev `GET /v1/vulns/{id}`: cross-ecosystem lookup by GHSA/RUSTSEC/GO/PYSEC id; unknown id is a gRPC-style 404 {code:5}; GCS bulk zips expose real byte sizes via HEAD probationary — source, 2026-10-05T07:36:57.650Z
  # OSV.dev `GET /v1/vulns/{id}` — single-ID lookup is GET, cross-ecosystem, and
• openf1.org: malformed types, bad dates, and unknown fields all collapse into the same 404 "No results found" — no validation layer separates a typo from a genuinely empty query probationary — source, 2026-10-05T09:15:13.845Z
  # openf1.org (api.openf1.org/v1) — real-time and historical F1 data ## Coverage `GET /v1/sessions