Package Health Score

75 / 100

security
No known security issues
popularity
Limited
maintenance
Sustainable
community
Sustainable

Explore Similar Packages

Popularity

Limited

Imported By: 4
GitHub Stars: 8
Forks: 2
Contributors: 30

Usage Popularity

Based on project statistics from the GitHub repository for the Golang package scep, we found that it has been 8 times.

The popularity score for Golang modules is calculated based on the number of stars that the project has on GitHub as well as the number of imports by other modules.

Security

No known security issues

Security risks

Direct Vulnerabilities: 0
C
0
H
0
M
0
L

Indirect Vulnerabilities: Check with Snyk

Release Date

Sep 26, 2024

License

MIT

Security Policy

We found a way for you to contribute to the project! Looks like scep is missing a security policy.

You can connect your project's repository to Snyk to stay up to date on security alerts and receive automatic fix pull requests.

Keep your project free of vulnerabilities with Snyk

Maintenance

Sustainable

Commit Frequency

Open Issues: 0
Open PR: 1
Last Release: 2 months ago
Last Commit: 9 months ago

Further analysis of the maintenance status of github.com/smallstep/scep based on released golang versions cadence, the repository activity, and other data points determined that its maintenance is Sustainable.

We found that github.com/smallstep/scep demonstrates a positive version release cadence with at least one new version released in the past 3 months.

In the past month we didn't find any pull request activity or change in issues status has been detected for the GitHub repository.

Community

Sustainable

Readme.md: Yes
Contributing.md: No
Code of Conduct: No
Contributors: 30
Funding: No

With more than 10 contributors for the github.com/smallstep/scep repository, this is possibly a sign for a growing and inviting community.

We found a way for you to contribute to the project! Looks like github.com/smallstep/scep is missing a Code of Conduct.

Embed Package Health Score Badge

Keep your project healthy

Check your go.mod

Ensure all the packages you're using are healthy and well-maintained

Readme

scep

scep is a Golang implementation of the Simple Certificate Enrollment Protocol (SCEP).

This package started its life as part of micromdm/scep. The core SCEP protocol was extracted from it and is now being maintained by smallstep.

Usage

go get github.com/smallstep/scep

The package can be used for both client and server operations.

For detailed usage, see the Go Reference.

Example server:

// read a request body containing SCEP message
body, err := ioutil.ReadAll(r.Body)
if err != nil {
    // handle err
}

// parse the SCEP message
msg, err := scep.ParsePKIMessage(body)
if err != nil {
    // handle err
}

// do something with msg
fmt.Println(msg.MessageType)

// extract encrypted pkiEnvelope
err := msg.DecryptPKIEnvelope(CAcert, CAkey)
if err != nil {
    // handle err
}

// use the CSR from decrypted PKCS request and sign
// MyCSRSigner returns an *x509.Certificate here
crt, err := MyCSRSigner(msg.CSRReqMessage.CSR)
if err != nil {
    // handle err
}

// create a CertRep message from the original
certRep, err := msg.Success(CAcert, CAkey, crt)
if err != nil {
    // handle err
}

// send response back
// w is a http.ResponseWriter
w.Write(certRep.Raw)

FAQs

What is scep?

Go SCEP server. Visit Snyk Advisor to see a full health score report for scep, including popularity, security, maintenance & community analysis.

Is scep popular?

The golang package scep receives a total of ? weekly downloads. As such, scep popularity was classified as limited. Visit the popularity section on Snyk Advisor to see the full health analysis.

Is scep well maintained?

We found indications that scep maintenance is sustainable demonstrating some project activity. We saw a total of 30 open source contributors collaborating on the project. See the full package health analysis to learn more about the package maintenance status.

Is scep safe to use?

The golang package scep was scanned for known vulnerabilities and missing license, and no issues were found. Thus the package was deemed as safe to use. See the full health analysis review.

Last updated on 23 November-2024, at 06:02 (UTC).

Build a secure application checklist

Select a recommended open source package

Minimize your risk by selecting secure & well maintained open source packages

DONE

Scan your app for vulnerabilities

Scan your application to find vulnerabilities in your: source code, open source dependencies, containers and configuration files

SCAN NOW

Fix identified vulnerabilities

Easily fix your code by leveraging automatically generated PRs

AUTO FIX

Monitor for new issues

New vulnerabilities are discovered every day. Get notified if your application is affected

MONITOR APP

scep

Go SCEP server For more information about how to use this package see README

Ensure you're using the healthiest golang packages

Package Health Score

Explore Similar Packages

Popularity

Usage Popularity

Security

Security risks

Maintenance

Commit Frequency

Community

Embed Package Health Score Badge

Keep your project healthy

Check your go.mod

Readme

scep

Usage

FAQs

What is scep?

Is scep popular?

Is scep well maintained?

Is scep safe to use?

Build a secure application checklist

Select a recommended open source package

Scan your app for vulnerabilities

Fix identified vulnerabilities

Monitor for new issues

Package Health Score

Explore Similar Packages

Usage Popularity

Security risks

Commit Frequency

Embed Package Health Score Badge

Keep your project healthy

Check your go.mod

Readme

scep

Usage

FAQs

What is scep?

Is scep popular?

Is scep well maintained?

Is scep safe to use?

Build a secure application checklist

Select a recommended open source package

Scan your app for vulnerabilities

Source Code

Open Source

Container

Config

Fix identified vulnerabilities

Monitor for new issues