{"repository": "ONLYOFFICE/CommunityServer", "owner": "ONLYOFFICE", "name": "CommunityServer", "source_url": "https://github.com/ONLYOFFICE/CommunityServer", "description": "Free open source office suite with business productivity tools: document and project management, CRM, mail aggregator.", "homepage": "http://www.onlyoffice.com", "license_id": "Apache-2.0", "license_label": "Apache-2.0 déclarée", "license_status": "ouverte_permissive", "commercial_use": "possible, conditions à vérifier", "stars": 3170, "forks": 673, "open_issues": 206, "language": "C#", "topics": ["collaboration", "crm", "csharp", "dms", "document-management", "file-sharing", "onlyoffice", "project-management", "tsql"], "archived": false, "disabled": false, "updated_at": "2026-10-06T13:14:19Z", "pushed_at": "2026-05-05T09:52:35Z", "default_branch": "master", "release_tag": "v12.8", "release_date": "2026-05-05T09:49:52Z", "release_assets_bytes": null, "packages": [{"system": "GO", "name": "github.com/ONLYOFFICE/CommunityServer", "version": "v10.0.1+incompatible", "purl": "", "published_at": "", "vulnerabilities": []}, {"system": "GO", "name": "github.com/ONLYOFFICE/CommunityServer", "version": "v10.5.1+incompatible", "purl": "", "published_at": "", "vulnerabilities": []}, {"system": "GO", "name": "github.com/ONLYOFFICE/CommunityServer", "version": "v11.0.0+incompatible", "purl": "", "published_at": "", "vulnerabilities": []}, {"system": "GO", "name": "github.com/ONLYOFFICE/CommunityServer", "version": "v11.5.2+incompatible", "purl": "", "published_at": "", "vulnerabilities": []}, {"system": "GO", "name": "github.com/ONLYOFFICE/CommunityServer", "version": "v11.5.3-0.20210712155719-4ac38fa04fc0+incompatible", "purl": "", "published_at": "", "vulnerabilities": []}, {"system": "GO", "name": "github.com/ONLYOFFICE/CommunityServer", "version": "v11.6.0+incompatible", "purl": "", "published_at": "", "vulnerabilities": []}, {"system": "GO", "name": "github.com/ONLYOFFICE/CommunityServer", "version": "v11.6.1-0.20220125121403-18764fac6c85+incompatible", "purl": "", "published_at": "", "vulnerabilities": []}, {"system": "GO", "name": "github.com/ONLYOFFICE/CommunityServer", "version": "v8.9.0+incompatible", "purl": "", "published_at": "", "vulnerabilities": []}], "scorecard_score": null, "scorecard_checks": [{"name": "Code-Review", "documentation": {"shortDescription": "Determines if the project requires human code review before pull requests (aka merge requests) are merged.", "url": "https://github.com/ossf/scorecard/blob/d1fab88f54636ff366076edfc5c239f97b3c8e66/docs/checks.md#code-review"}, "score": 1, "reason": "Found 3/27 approved changesets -- score normalized to 1", "details": []}, {"name": "Packaging", "documentation": {"shortDescription": "Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.", "url": "https://github.com/ossf/scorecard/blob/d1fab88f54636ff366076edfc5c239f97b3c8e66/docs/checks.md#packaging"}, "score": -1, "reason": "packaging workflow not detected", "details": ["Warn: no GitHub/GitLab publishing workflow detected."]}, {"name": "Maintained", "documentation": {"shortDescription": "Determines if the project is \"actively maintained\".", "url": "https://github.com/ossf/scorecard/blob/d1fab88f54636ff366076edfc5c239f97b3c8e66/docs/checks.md#maintained"}, "score": 0, "reason": "0 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0", "details": []}, {"name": "Token-Permissions", "documentation": {"shortDescription": "Determines if the project's workflows follow the principle of least privilege.", "url": "https://github.com/ossf/scorecard/blob/d1fab88f54636ff366076edfc5c239f97b3c8e66/docs/checks.md#token-permissions"}, "score": -1, "reason": "No tokens found", "details": []}, {"name": "CII-Best-Practices", "documentation": {"shortDescription": "Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.", "url": "https://github.com/ossf/scorecard/blob/d1fab88f54636ff366076edfc5c239f97b3c8e66/docs/checks.md#cii-best-practices"}, "score": 0, "reason": "no effort to earn an OpenSSF best practices badge detected", "details": []}, {"name": "Dangerous-Workflow", "documentation": {"shortDescription": "Determines if the project's GitHub Action workflows avoid dangerous patterns.", "url": "https://github.com/ossf/scorecard/blob/d1fab88f54636ff366076edfc5c239f97b3c8e66/docs/checks.md#dangerous-workflow"}, "score": -1, "reason": "no workflows found", "details": []}, {"name": "License", "documentation": {"shortDescription": "Determines if the project has defined a license.", "url": "https://github.com/ossf/scorecard/blob/d1fab88f54636ff366076edfc5c239f97b3c8e66/docs/checks.md#license"}, "score": 10, "reason": "license file detected", "details": ["Info: project has a license file: LICENSE:0", "Info: FSF or OSI recognized license: Apache License 2.0: LICENSE:0"]}, {"name": "Signed-Releases", "documentation": {"shortDescription": "Determines if the project cryptographically signs release artifacts.", "url": "https://github.com/ossf/scorecard/blob/d1fab88f54636ff366076edfc5c239f97b3c8e66/docs/checks.md#signed-releases"}, "score": -1, "reason": "no releases found", "details": []}, {"name": "Branch-Protection", "documentation": {"shortDescription": "Determines if the default and release branches are protected with GitHub's branch protection settings.", "url": "https://github.com/ossf/scorecard/blob/d1fab88f54636ff366076edfc5c239f97b3c8e66/docs/checks.md#branch-protection"}, "score": 0, "reason": "branch protection not enabled on development/release branches", "details": ["Warn: branch protection not enabled for branch 'master'"]}, {"name": "Security-Policy", "documentation": {"shortDescription": "Determines if the project has published a security policy.", "url": "https://github.com/ossf/scorecard/blob/d1fab88f54636ff366076edfc5c239f97b3c8e66/docs/checks.md#security-policy"}, "score": 0, "reason": "security policy file not detected", "details": ["Warn: no security policy file detected", "Warn: no security file to analyze", "Warn: no security file to analyze", "Warn: no security file to analyze"]}, {"name": "SAST", "documentation": {"shortDescription": "Determines if the project uses static code analysis.", "url": "https://github.com/ossf/scorecard/blob/d1fab88f54636ff366076edfc5c239f97b3c8e66/docs/checks.md#sast"}, "score": 0, "reason": "SAST tool is not run on all commits -- score normalized to 0", "details": ["Warn: 0 commits out of 7 are checked with a SAST tool"]}, {"name": "Binary-Artifacts", "documentation": {"shortDescription": "Determines if the project has generated executable (binary) artifacts in the source repository.", "url": "https://github.com/ossf/scorecard/blob/d1fab88f54636ff366076edfc5c239f97b3c8e66/docs/checks.md#binary-artifacts"}, "score": 0, "reason": "binaries present in source code", "details": ["Warn: binary detected: .nuget/NuGet.exe:1", "Warn: binary detected: build/WinSW3.0.0.exe:1", "Warn: binary detected: build/msbuild/ASC.Web.Core.BuildTask.dll:1", "Warn: binary detected: build/msbuild/MSBuild.Community.Tasks.dll:1", "Warn: binary detected: build/msbuild/Microsoft.Web.Publishing.Tasks.dll:1", "Warn: binary detected: build/msbuild/Microsoft.Web.XmlTransform.dll:1", "Warn: binary detected: build/msbuild/SlowCheetah.Xdt.dll:1", "Warn: binary detected: build/msbuild/WebApplications/Microsoft.WebApplication.Build.Tasks.Dll:1", "Warn: binary detected: build/msbuild/al.exe:1", "Warn: binary detected: redistributable/SlowCheetah.Xdt/SlowCheetah.Xdt/.nuget/NuGet.exe:1", "Warn: binary detected: redistributable/asc/ASC.TeamlabSite.Core.dll:1", "Warn: binary detected: redistributable/openstack.net/samples/.paket/paket.bootstrapper.exe:1", "Warn: binary detected: redistributable/openstack.net/src/lib/Security.Cryptography/Security.Cryptography.dll:1", "Warn: binary detected: redistributable/rackspace-net-sdk/.paket/paket.bootstrapper.exe:1", "Warn: binary detected: redistributable/rackspace-net-sdk/packages/Newtonsoft.Json.6.0.1/lib/net20/Newtonsoft.Json.dll:1", "Warn: binary detected: redistributable/rackspace-net-sdk/packages/Newtonsoft.Json.6.0.1/lib/net35/Newtonsoft.Json.dll:1", "Warn: binary detected: redistributable/rackspace-net-sdk/packages/Newtonsoft.Json.6.0.1/lib/net40/Newtonsoft.Json.dll:1", "Warn: binary detected: redistributable/rackspace-net-sdk/packages/Newtonsoft.Json.6.0.1/lib/net45/Newtonsoft.Json.dll:1", "Warn: binary detected: redistributable/rackspace-net-sdk/packages/Newtonsoft.Json.6.0.1/lib/netcore45/Newtonsoft.Json.dll:1", "Warn: binary detected: redistributable/rackspace-net-sdk/packages/Newtonsoft.Json.6.0.1/lib/portable-net40+sl5+wp80+win8+monotouch+monoandroid/Newtonsoft.Json.dll:1", "Warn: binary detected: redistributable/rackspace-net-sdk/packages/Newtonsoft.Json.6.0.1/lib/portable-net45+wp80+win8/Newtonsoft.Json.dll:1", "Warn: binary detected: redistributable/rackspace-net-sdk/packages/System.Buffers.4.5.1/lib/net461/System.Buffers.dll:1", "Warn: binary detected: redistributable/rackspace-net-sdk/packages/System.Buffers.4.5.1/lib/netstandard1.1/System.Buffers.dll:1", "Warn: binary detected: redistributable/rackspace-net-sdk/packages/System.Buffers.4.5.1/lib/netstandard2.0/System.Buffers.dll:1", "Warn: binary detected: redistributable/rackspace-net-sdk/packages/System.Buffers.4.5.1/ref/net45/System.Buffers.dll:1", "Warn: binary detected: redistributable/rackspace-net-sdk/packages/System.Buffers.4.5.1/ref/netstandard1.1/System.Buffers.dll:1", "Warn: binary detected: redistributable/rackspace-net-sdk/packages/System.Buffers.4.5.1/ref/netstandard2.0/System.Buffers.dll:1", "Warn: binary detected: redistributable/rackspace-net-sdk/packages/System.Diagnostics.DiagnosticSource.4.7.1/lib/net45/System.Diagnostics.DiagnosticSource.dll:1", "Warn: binary detected: redistributable/rackspace-net-sdk/packages/System.Diagnostics.DiagnosticSource.4.7.1/lib/net46/System.Diagnostics.DiagnosticSource.dll:1", "Warn: binary detected: redistributable/rackspace-net-sdk/packages/System.Diagnostics.DiagnosticSource.4.7.1/lib/netstandard1.1/System.Diagnostics.DiagnosticSource.dll:1", "Warn: binary detected: redistributable/rackspace-net-sdk/packages/System.Diagnostics.DiagnosticSource.4.7.1/lib/netstandard1.3/System.Diagnostics.DiagnosticSource.dll:1", "Warn: binary detected: redistributable/rackspace-net-sdk/packages/System.Diagnostics.DiagnosticSource.4.7.1/lib/portable-net45+win8+wpa81/System.Diagnostics.DiagnosticSource.dll:1", "Warn: binary detected: redistributable/rackspace-net-sdk/packages/System.Memory.4.5.4/lib/net461/System.Memory.dll:1", "Warn: binary detected: redistributable/rackspace-net-sdk/packages/System.Memory.4.5.4/lib/netstandard1.1/System.Memory.dll:1", "Warn: binary detected: redistributable/rackspace-net-sdk/packages/System.Memory.4.5.4/lib/netstandard2.0/System.Memory.dll:1", "Warn: binary detected: redistributable/rackspace-net-sdk/packages/System.Runtime.CompilerServices.Unsafe.4.5.3/lib/net461/System.Runtime.CompilerServices.Unsafe.dll:1", "Warn: binary detected: redistributable/rackspace-net-sdk/packages/System.Runtime.CompilerServices.Unsafe.4.5.3/lib/netcoreapp2.0/System.Runtime.CompilerServices.Unsafe.dll:1", "Warn: binary detected: redistributable/rackspace-net-sdk/packages/System.Runtime.CompilerServices.Unsafe.4.5.3/lib/netstandard1.0/System.Runtime.CompilerServices.Unsafe.dll:1", "Warn: binary detected: redistributable/rackspace-net-sdk/packages/System.Runtime.CompilerServices.Unsafe.4.5.3/lib/netstandard2.0/System.Runtime.CompilerServices.Unsafe.dll:1", "Warn: binary detected: redistributable/rackspace-net-sdk/packages/System.Runtime.CompilerServices.Unsafe.4.5.3/ref/net461/System.Runtime.CompilerServices.Unsafe.dll:1", "Warn: binary detected: redistributable/rackspace-net-sdk/packages/System.Runtime.CompilerServices.Unsafe.4.5.3/ref/netstandard1.0/System.Runtime.CompilerServices.Unsafe.dll:1", "Warn: binary detected: redistributable/rackspace-net-sdk/packages/System.Runtime.CompilerServices.Unsafe.4.5.3/ref/netstandard2.0/System.Runtime.CompilerServices.Unsafe.dll:1", "Warn: binary detected: redistributable/rackspace-net-sdk/packages/System.ValueTuple.4.3.0/lib/netstandard1.0/System.ValueTuple.dll:1", "Warn: binary detected: redistributable/rackspace-net-sdk/packages/System.ValueTuple.4.3.0/lib/portable-net40+sl4+win8+wp8/System.ValueTuple.dll:1", "Warn: binary detected: web/studio/ASC.Web.Studio/Products/Community/Modules/Bookmarking/App_Data/IECapt.exe:1"]}, {"name": "Pinned-Dependencies", "documentation": {"shortDescription": "Determines if the project has declared and pinned the dependencies of its build process.", "url": "https://github.com/ossf/scorecard/blob/d1fab88f54636ff366076edfc5c239f97b3c8e66/docs/checks.md#pinned-dependencies"}, "score": 0, "reason": "dependency not pinned by hash detected -- score normalized to 0", "details": ["Warn: pipCommand not pinned by hash: build/install/deb/debian/postinst:300", "Info:   0 out of   1 pipCommand dependencies pinned"]}, {"name": "Fuzzing", "documentation": {"shortDescription": "Determines if the project uses fuzzing.", "url": "https://github.com/ossf/scorecard/blob/d1fab88f54636ff366076edfc5c239f97b3c8e66/docs/checks.md#fuzzing"}, "score": 0, "reason": "project is not fuzzed", "details": ["Warn: no fuzzer integrations found"]}], "known_vulnerability_count": 0, "provenance": [{"source": "GitHub REST API", "url": "https://github.com/ONLYOFFICE/CommunityServer", "retrieved_at": "2026-10-08T05:56:40.320219+00:00"}, {"source": "deps.dev API", "url": "https://deps.dev/", "retrieved_at": "2026-10-08T05:56:40.320219+00:00"}, {"source": "OSV API", "url": "https://osv.dev/", "retrieved_at": "2026-10-08T05:56:40.320219+00:00"}], "retrieved_at": "2026-10-08T05:56:40.320219+00:00", "rank_score": 0, "rank_reasons": [], "warnings": [], "adaptation": {"state": "unknown", "label": "Compatibilité à vérifier", "summary": "Les métadonnées publiques ne suffisent pas à certifier la compatibilité avec votre équipement.", "factors": ["Une activité récente est visible dans les métadonnées du dépôt.", "RAM, espace installé et débit minimal ne sont pas publiés dans les métadonnées interrogées."], "checks": []}, "exclusion_reason": "", "quality_doubt": "", "description_issue": ""}