Öffentliches RegisterMittel
Software-GesundheitsberichtSchema 0.27.0 · Metriken 1.13.0 · 2026-07-27 18:13 UTC
DND-IT / action-releaser
Flexible GitHub Action for versioned releases powered by git-cliff
DND-IT/action-releaser erreicht einen Gesundheitsindex von 58 von 100 und liegt damit im Bereich Mittel. Am stärksten schneidet es bei Engineering Quality (90/100) ab, am schwächsten bei Community & Adoption (12/100). Zuletzt vor 11 Tagen aktualisiert. Ein einzelner Mitwirkender trägt den Großteil der jüngsten Arbeit.
58
gesamt / 100Software-Gesundheitsindex
Metriken werden auf einer Skala von 1–100 in gewichtete Kategorien gruppiert. Der Gesamtwert beginnt als ihr Mittel; sobald öffentliche Evidenz die Richtlinie für Hochrisikojurisdiktionen auslöst, wird die Bewertung angepasst und erhält die Obergrenze 49 (Gefährdet). AI Readiness liegt außerhalb.
58
Exzellent85-100Vorbildlich; erfüllt im Wesentlichen alle geprüften Kriterien
Gut70-84Gesund; geringfügige Lücken
Mittel50-69Akzeptabel mit deutlichen Lücken; Überprüfung empfohlen
Gefährdet30-49Erhebliche Schwächen; eine Übernahme erfordert Vorsicht
Kritisch1-29Schwerwiegende Probleme (aufgegeben, nur ein Maintainer, keine Hygiene)
Bewertungsprofil
Jede Achse ist eine Kategorie. Die Form zählt mehr als der Durchschnitt — ein gesundes Projekt füllt die gesamte Fläche, während ein Profil aus Spitzen und Kratern bedeutet, dass Stärke in einer Dimension Risiken in einer anderen verdeckt.
Eigentümerschaft
Tamedia TechnologyOrganisation
13 Follower33 öffentliche Reposseit Juni 2016
Dieses Repository wird von einer Organisation getragen — geteilte, rechenschaftspflichtige Trägerschaft, die jeden einzelnen Maintainer überdauern kann.
Paket-Ökosysteme
| Registry | Paket | Version | Downloads / Monat | Versionen | Zuletzt veröffentlicht |
|---|---|---|---|---|---|
| Go | github.com/dnd-it/action-releaser | v0.4.0 | - | 21 | vor 11 Tagen |
Metriken nach Kategorie
Vitalität
Lebt das Projekt — wird Code geschrieben und werden Releases ausgeliefert?
76
Entwicklungsaktivität
60Mittel
Wie die Bewertung erfolgt
| 28.8/36 | Push-Aktualität — letzter Push vor 11 Tagen |
| 4.8/36 | Commit-Rhythmus — 7/52 Wochen mit Commits |
| 16.4/18 | Commit-Volumen — 66 Commits im letzten Jahr |
| 10/10 | OpenSSF Scorecard: Maintained — 16 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10 |
Verwendete Eingangsdaten
| commits_last_year | 66 |
| human_commit_share | 0,697 |
| days_since_last_push | 11 |
| active_weeks_last_year | 7 |
Release-Disziplin
100Exzellent
Wie die Bewertung erfolgt
| 27/27 | Liefert Releases aus — 20 Releases veröffentlicht |
| 36/36 | Release-Aktualität — letztes Release vor 11 Tagen |
| 27/27 | Release-Rhythmus — ein Release etwa alle 10,4 Tage |
| 0/10 | OpenSSF Scorecard: Signed-Releases — keine Daten |
Verwendete Eingangsdaten
| releases_count | 20 |
| latest_release_tag | v0.4.0 |
| releases_from_tags | nein |
| days_since_latest_release | 11 |
| mean_days_between_releases | 10,4 |
Von der Bewertung ausgeschlossen (keine Daten oder nicht anwendbar): OpenSSF Scorecard: Signed-Releases. Die verbleibenden Gewichte wurden renormalisiert.
Community & Verbreitung
Hat das Projekt Nutzer, Downloads, Aufmerksamkeit und ein einladendes Umfeld für Beitragende?
12
Popularität & Verbreitung
1Kritisch
Wie die Bewertung erfolgt
| 0/60 | Stars — 0 Stars |
| 0/25 | Forks — 0 Forks |
| 0/15 | Watcher — 0 Watcher |
Verwendete Eingangsdaten
| forks | 0 |
| stars | 0 |
| watchers | 0 |
| growth_state | unverified |
| growth_factor_pct | 100 |
| growth_unverified_reason | no_history |
Community-Gesundheit
25Kritisch
Wie die Bewertung erfolgt
| 22.5/22.5 | README |
| 0/22.5 | Lizenz — keine Lizenzdatei erkannt |
| 0/18 | CONTRIBUTING-Leitfaden |
| 0/13.5 | Verhaltenskodex |
| 0/7.2 | Issue-Vorlage |
| 0/6.3 | PR-Vorlage |
Verwendete Eingangsdaten
| has_readme | ja |
| has_license | nein |
| has_contributing | nein |
| has_issue_template | nein |
| has_code_of_conduct | nein |
| has_pull_request_template | nein |
Nachhaltigkeit & Governance
Überdauert das Projekt die Menschen, die es tragen — Bus-Faktor, Reaktionsfähigkeit, Trägerschaft und Paketpflege?
60
Maintainer-Resilienz (Bus-Faktor)
16Kritisch
Wie die Bewertung erfolgt
| 9/54 | Bus-Faktor — 1 Beitragende decken die Hälfte aller Commits ab |
| 3.9/22.5 | Commit-Verteilung — wichtigste beitragende Person verfasste 83 % der Commits |
| 2.7/13.5 | Breite der Beitragenden — 2 Beitragende |
| 0/10 | OpenSSF Scorecard: Contributors — project has 0 contributing companies or organizations -- score normalized to 0 |
Verwendete Eingangsdaten
| bus_factor | 1 |
| contributors_sampled | 2 |
| top_contributor_share | 0,826 |
Wie die Bewertung erfolgt
| 40.1/46.8 | Issue-Lösungsquote — 86 % der Issues geschlossen |
| 37/38.3 | PR-Annahme — 29/30 entschiedene PRs gemergt |
| 1.5/15 | OpenSSF Scorecard: Code-Review — Found 2/18 approved changesets -- score normalized to 1 |
Verwendete Eingangsdaten
| merged_prs | 29 |
| open_issues | 1 |
| closed_issues | 6 |
| issue_closed_ratio | 0,857 |
| closed_unmerged_prs | 1 |
Eigentümerschaft & Trägerschaft
61Mittel
Wie die Bewertung erfolgt
| 30/30 | Organisatorische Trägerschaft — im Besitz einer Organisation |
| 0/20 | Verifizierte Domain |
| 8.2/25 | Reichweite des Inhabers — 13 Follower von DND-IT |
| 23.2/25 | Kontohistorie — 33 öffentliche Repos, Kontoalter ca. 10 Jahre |
Verwendete Eingangsdaten
| followers | 13 |
| owner_type | Organization |
| is_verified | — |
| owner_login | DND-IT |
| public_repos | 33 |
| account_age_days | 3.696 |
Paketpflege
100Exzellent
Wie die Bewertung erfolgt
| 25/25 | Veröffentlicht & auflösbar — 1 Paket(e) auf go |
| 35/35 | Veröffentlichungsaktualität — letzte Veröffentlichung vor 11 Tagen |
| 20/20 | Versionshistorie — 21 veröffentlichte Versionen |
| 20/20 | Nicht veraltet — aktiv, nicht veraltet oder zurückgezogen |
Verwendete Eingangsdaten
| packages | github.com/dnd-it/action-releaser |
| ecosystems | go |
| any_deprecated | nein |
| min_days_since_publish | 11 |
Engineering-Qualität
Sind grundlegende Engineering- und Dokumentationspraktiken vorhanden?
90
Engineering-Praktiken
94Exzellent
Wie die Bewertung erfolgt
| 24/24 | CI-Workflows — 2 Workflow(s) |
| 24/24 | Tests vorhanden |
| 16/16 | Linter-Konfiguration |
| 9.6/9.6 | Pre-Commit-Hooks |
| 0/6.4 | .editorconfig |
| 20/20 | OpenSSF Scorecard: CI-Tests — 19 out of 19 merged PRs checked by a CI test -- score normalized to 10 |
Verwendete Eingangsdaten
| has_ci | ja |
| has_tests | ja |
| has_editorconfig | nein |
| has_linter_config | ja |
| has_precommit_config | ja |
Dokumentation
85Exzellent
Wie die Bewertung erfolgt
| 30/30 | README |
| 25/25 | Dokumentationsverzeichnis |
| 0/15 | Dokumentations-/Homepage-Site |
| 10/10 | Repository-Beschreibung |
| 10/10 | Topics — 1 Topics |
| 10/10 | Wiki |
Verwendete Eingangsdaten
| topics | backstage |
| has_wiki | ja |
| homepage | — |
| has_readme | ja |
| has_docs_dir | ja |
| has_description | ja |
Sicherheit
Sind die sichtbaren Sicherheits- und Lieferkettenpraktiken belastbar, ohne ungeklärte Exposition gegenüber Hochrisikojurisdiktionen?
42
Sicherheitslage
42Gefährdet
Wie die Bewertung erfolgt
| 7.5/7.5 | Binary-Artifacts — no binaries found in the repo |
| 0/7.5 | Branch-Protection — branch protection not enabled on development/release branches |
| 2.5/2.5 | CI-Tests — 19 out of 19 merged PRs checked by a CI test -- score normalized to 10 |
| 0/2.5 | CII-Best-Practices — no effort to earn an OpenSSF best practices badge detected |
| 0.8/7.5 | Code-Review — Found 2/18 approved changesets -- score normalized to 1 |
| 0/2.5 | Contributors — project has 0 contributing companies or organizations -- score normalized to 0 |
| 10/10 | Dangerous-Workflow — no dangerous workflow patterns detected |
| 0/7.5 | Dependency-Update-Tool — no update tool detected |
| 0/5 | Fuzzing — project is not fuzzed |
| 0/2.5 | Lizenz — license file not detected |
| 7.5/7.5 | Maintained — 16 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10 |
| 5/5 | Packaging — packaging workflow detected |
| 0/5 | Pinned-Dependencies — dependency not pinned by hash detected -- score normalized to 0 |
| 0/5 | SAST — SAST tool is not run on all commits -- score normalized to 0 |
| 0/5 | Security-Policy — security policy file not detected |
| 0/7.5 | Signed-Releases — keine Daten |
| 0/7.5 | Token-Permissions — detected GitHub workflow tokens with excessive permissions |
| 7.5/7.5 | Vulnerabilities — 0 existing vulnerabilities detected |
Verwendete Eingangsdaten
| source | openssf_scorecard |
| checks_evaluated | 17 |
| scorecard_version | v5.5.0 |
| checks_inconclusive | 1 |
| scorecard_aggregate | 4,2 |
Von der Bewertung ausgeschlossen (keine Daten oder nicht anwendbar): signed_releases. Die verbleibenden Gewichte wurden renormalisiert.
AI Readiness
Wie gut ist das Repository dafür ausgestattet, mit KI-Coding-Agenten entwickelt und gepflegt zu werden? Ein unabhängiges, experimentelles Badge — Gewicht 0,0, es wird eigenständig ausgewiesen und verändert den Gesamt-Gesundheitswert nicht.
84
AI-Agentenkontext & Leitlinien
85Exzellent
Wie die Bewertung erfolgt
| 45/45 | Agentenanweisungen — CLAUDE.md |
| 0/15 | Maschinenlesbare Doku (llms.txt) |
| 40/40 | Lesbare Commit-Historie — 46 von 46 menschlichen Commits benennen ihre Absicht (strukturierter Betreff oder erläuternder Text) |
Verwendete Eingangsdaten
| has_llms_txt | nein |
| legible_history_share | 1 |
| agent_instruction_files | CLAUDE.md |
| agent_instruction_max_bytes | 888 |
Wie die Bewertung erfolgt
| 12.6/18 | Bootstrap mit einem Befehl — go.mod (Toolchain-Konvention, kein Task-Runner) |
| 22/22 | Automatisierte Tests |
| 11/11 | Lint-/Format-Konfiguration |
| 11/11 | Statische Typprüfung — Go (statisch typisiert) |
| 10/10 | Reproduzierbare Umgebung — Dockerfile, lockfile |
| 10/10 | Belegte Agentenpraxis — 4 der letzten 66 Commits von Agenten verfasst oder ihnen zugeschrieben |
| 0/8 | Automatisierte Wartung — keine automatisierten Abhängigkeits-Updates beobachtet |
| 0/10 | OpenSSF Scorecard: Pinned-Dependencies — dependency not pinned by hash detected -- score normalized to 0 |
Verwendete Eingangsdaten
| has_nix | nein |
| has_tests | ja |
| lockfiles | go.sum |
| has_dockerfile | ja |
| typed_language | ja |
| bootstrap_files | — |
| has_devcontainer | nein |
| has_linter_config | ja |
| typecheck_configs | — |
| agent_commit_share | 0,061 |
| toolchain_manifests | go.mod |
| dependency_bot_commit_share | 0 |
AI-Code-Lesbarkeit für Modelle
100Exzellent
Wie die Bewertung erfolgt
| 45/45 | Typprüfbarer Code — Go (statisch typisiert) |
| 55/55 | Handhabbare Dateigrößen — 0/16 Quelldateien über 60 KB |
Verwendete Eingangsdaten
| primary_language | Go |
| largest_source_bytes | 15.666 |
| source_files_sampled | 16 |
| oversized_source_files | 0 |
Eckdaten
0GitHub-Sterne
2Mitwirkende
66Commits, letzte 12 Monate
11Tage seit letztem Push
20Releases
1Bus-Faktor
1offene Issues
GoPaket-Ökosysteme
Warnungen zur Datenerhebung
- GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository
Weitere Details
OpenSSF Scorecard 4.2 / 10
4.2Gesamtwert
Unabhängige, werkzeugneutrale Sicherheitsbewertung durch das quelloffene OpenSSF Scorecard. Jede Prüfung honoriert eine Sicherheits-Praxis, nicht das Werkzeug eines bestimmten Anbieters. Prüfungen, die Scorecard nicht ermitteln konnte, sind mit k. A. markiert und vom Sicherheitswert ausgeschlossen (nie als null gezählt).
| 10 | Binary-Artifacts | no binaries found in the repo |
| 0 | Branch-Protection | branch protection not enabled on development/release branches |
| 10 | CI-Tests | 19 out of 19 merged PRs checked by a CI test -- score normalized to 10 |
| 0 | CII-Best-Practices | no effort to earn an OpenSSF best practices badge detected |
| 1 | Code-Review | Found 2/18 approved changesets -- score normalized to 1 |
| 0 | Contributors | project has 0 contributing companies or organizations -- score normalized to 0 |
| 10 | Dangerous-Workflow | no dangerous workflow patterns detected |
| 0 | Dependency-Update-Tool | no update tool detected |
| 0 | Fuzzing | project is not fuzzed |
| 0 | License | license file not detected |
| 10 | Maintained | 16 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10 |
| 10 | Packaging | packaging workflow detected |
| 0 | Pinned-Dependencies | dependency not pinned by hash detected -- score normalized to 0 |
| 0 | SAST | SAST tool is not run on all commits -- score normalized to 0 |
| 0 | Security-Policy | security policy file not detected |
| k. A. | Signed-Releases | no releases found |
| 0 | Token-Permissions | detected GitHub workflow tokens with excessive permissions |
| 10 | Vulnerabilities | 0 existing vulnerabilities detected |
Direkte Abhängigkeiten 2
| Registry | Paket | Versionsvorgabe | Manifest |
|---|---|---|---|
| Go | github.com/google/go-github/v68 | v68.0.0 | go.mod |
| Go | gopkg.in/yaml.v3 | v3.0.1 | go.mod |
Alle Abhängigkeiten nicht erhoben
Der aufgelöste Abhängigkeitssatz konnte für diesen Bericht nicht erhoben werden: GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository
JSON-Rohbericht maschinenlesbar
{
"data": {
"repo": {
"topics": [
"backstage"
],
"is_fork": false,
"size_kb": 206,
"has_wiki": true,
"homepage": null,
"languages": {
"Go": 102653,
"Shell": 10994,
"Dockerfile": 893
},
"pushed_at": "2026-07-16T14:48:51Z",
"created_at": "2026-03-26T20:59:18Z",
"owner_type": "Organization",
"updated_at": "2026-07-16T14:48:00Z",
"description": "Flexible GitHub Action for versioned releases powered by git-cliff",
"is_archived": false,
"is_disabled": false,
"license_spdx": null,
"default_branch": "main",
"license_spdx_raw": null,
"primary_language": "Go",
"significant_languages": [
"Go"
]
},
"owner": {
"blog": "https://www.tamedia.ch",
"name": "Tamedia Technology",
"type": "Organization",
"login": "DND-IT",
"company": null,
"location": "Switzerland",
"followers": 13,
"avatar_url": "https://avatars.githubusercontent.com/u/19909911?v=4",
"created_at": "2016-06-13T13:26:53Z",
"is_verified": null,
"public_repos": 33,
"account_age_days": 3696
},
"license": {
"state": "absent",
"spdx_id": null,
"raw_spdx": null,
"file_present": false,
"scorecard_found": false,
"profile_has_license": false
},
"activity": {
"releases": [
{
"tag": "v0.4.0",
"kind": "minor",
"published_at": "2026-07-16T14:47:41Z"
},
{
"tag": "v0.3.4",
"kind": "patch",
"published_at": "2026-05-29T13:27:00Z"
},
{
"tag": "v0.3.3",
"kind": "patch",
"published_at": "2026-05-29T09:10:47Z"
},
{
"tag": "v0.3.2",
"kind": "patch",
"published_at": "2026-05-15T11:30:06Z"
},
{
"tag": "v0.3.1",
"kind": "patch",
"published_at": "2026-05-15T09:24:55Z"
},
{
"tag": "v0.3.0",
"kind": "minor",
"published_at": "2026-05-15T09:17:08Z"
},
{
"tag": "v0.2.3",
"kind": "patch",
"published_at": "2026-04-17T09:25:43Z"
},
{
"tag": "v0.2.2",
"kind": "patch",
"published_at": "2026-04-17T06:43:50Z"
},
{
"tag": "v0.2.1",
"kind": "patch",
"published_at": "2026-04-16T07:39:54Z"
},
{
"tag": "v0.2.0",
"kind": "minor",
"published_at": "2026-04-14T10:35:53Z"
},
{
"tag": "v0.1.10",
"kind": "patch",
"published_at": "2026-04-14T02:51:10Z"
},
{
"tag": "v0.1.9",
"kind": "patch",
"published_at": "2026-04-13T19:30:42Z"
},
{
"tag": "v0.1.8",
"kind": "patch",
"published_at": "2026-04-09T04:45:09Z"
},
{
"tag": "v0.1.7",
"kind": "patch",
"published_at": "2026-04-07T12:42:52Z"
},
{
"tag": "v0.1.6",
"kind": "patch",
"published_at": "2026-04-07T11:48:09Z"
},
{
"tag": "v0.1.5",
"kind": "patch",
"published_at": "2026-03-31T15:22:59Z"
},
{
"tag": "v0.1.4",
"kind": "patch",
"published_at": "2026-03-31T14:33:03Z"
},
{
"tag": "v0.1.3",
"kind": "patch",
"published_at": "2026-03-31T13:55:36Z"
},
{
"tag": "v0.1.2",
"kind": "patch",
"published_at": "2026-03-31T12:58:15Z"
},
{
"tag": "v0.1.1",
"kind": "patch",
"published_at": "2026-03-31T07:23:33Z"
}
],
"recent_commits": [
{
"oid": "66b64d29ed2237d7ab1005c263d16c0dbb963b08",
"body": "Co-authored-by: tamedia-fission[bot] <238147500+tamedia-fission[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "chore(main): release 0.4.0 (#36)",
"author_name": "tamedia-fission[bot]",
"author_login": "tamedia-fission[bot]",
"committed_at": "2026-07-16T14:47:29Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "08b49dbc6a9812007f3317afb599613af7fdeca2",
"body": "* fix(releasepr): keep release branch ahead of base to prevent PR auto-close\n\nIn gated (release-mode: pr) flow, updateReleaseBranch force-reset the release\nbranch to the base SHA and then added the prepare-release commit in a second\nref update. Between the two updates the branch head had 0 commits a\n[…]\nte the multiline changelog output last, after all scalars, and extend the\nheredoc delimiter until it never appears as a line in the value so arbitrary\nchangelog content can't break parsing.\n\nFixes #35",
"is_bot": false,
"headline": "fix: gated-release auto-close and lost release-published output (#37)",
"author_name": "Samuel Wibrow",
"author_login": "swibrow",
"committed_at": "2026-07-16T13:38:45Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "2018aa15b946eb67000e56880100b0b1c538d0b7",
"body": "Change the calver strategy from YYYY.MM.DD[.N] (calendar date plus an\noptional same-day suffix) to YYYY.MM.N, where N is an incrementing\ncounter that starts at 0 and resets each month. This matches the\nstandard CalVer YYYY.MM.MICRO scheme (PyCharm, Ubuntu, pip).\n\n- NextVersion derives the version fr\n[…]\nDOS item 1).\n\nBREAKING CHANGE: calver versions are now YYYY.MM.N instead of\nYYYY.MM.DD[.N]. Repos already on calver will see existing day-based tags\nreinterpreted as counters for the transition month.",
"is_bot": false,
"headline": "feat(calver)!: use YYYY.MM.N format with monthly counter (#33)",
"author_name": "Samuel Wibrow",
"author_login": "swibrow",
"committed_at": "2026-07-15T08:54:38Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "92d123c49ddda92f7fe83c0b6834017b66832a27",
"body": "Co-authored-by: tamedia-fission[bot] <238147500+tamedia-fission[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "chore(main): release 0.3.4 (#32)",
"author_name": "tamedia-fission[bot]",
"author_login": "tamedia-fission[bot]",
"committed_at": "2026-05-29T13:26:46Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "be63490eb21244fac7d7e591a91617e36bf8d05d",
"body": "…… (#31)\n\n* fix(semver): handle empty tag-prefix correctly by removing hardcoded template pattern\n\nThe built-in cliff-templates/semver.toml was hardcoding tag_pattern = \"v[0-9]*\",\nwhich prevented git-cliff from detecting unprefixed tags (e.g. 0.1.0) when\ntag-prefix was empty (the default). Fixed by \n[…]\nake effect.\n\nIncludes regression test TestSemverEmptyPrefix to ensure unprefixed tags are\ndetected when tag-prefix is empty.\n\n* docs: clarify cliff-config default behavior\n\n* fix: add integration test",
"is_bot": false,
"headline": "fix(semver): handle empty tag-prefix correctly by removing hardcoded …",
"author_name": "Davide Cammarata",
"author_login": "DCamma",
"committed_at": "2026-05-29T13:26:04Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "6c24f8ba95c00921135b4eb4492a079298c115de",
"body": "Co-authored-by: tamedia-fission[bot] <238147500+tamedia-fission[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "chore(main): release 0.3.3 (#30)",
"author_name": "tamedia-fission[bot]",
"author_login": "tamedia-fission[bot]",
"committed_at": "2026-05-29T09:10:35Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4fd02a7a20bfdf57f8439c794719a545633ab2eb",
"body": "The \"v\" default added in ca8d2b4 broke existing users who rely on the\nempty default: their past tags (e.g. 1.0.0 without a prefix) are no\nlonger matched, causing version detection to restart from scratch.\n\nRevert to the pre-ca8d2b4 behaviour — tag-prefix always defaults to \"\".\nUsers who want the con\n[…]\nstSemverDefaultsToVPrefix\nwhich tested the now-reverted behaviour. Update TestLoad_NoFile and\ndocs to reflect the empty default.\n\nCo-authored-by: Claude Sonnet 4.6 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix: revert semver tag-prefix default to empty string (#29)",
"author_name": "Davide Cammarata",
"author_login": "DCamma",
"committed_at": "2026-05-29T09:09:25Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "628875117a7ffe93e51f1bd3719ac9bdae50e6b8",
"body": "Co-authored-by: tamedia-fission[bot] <238147500+tamedia-fission[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "chore(main): release 0.3.2 (#28)",
"author_name": "tamedia-fission[bot]",
"author_login": "tamedia-fission[bot]",
"committed_at": "2026-05-15T11:29:56Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1537629db705d06a25d51c1ad7d76544d9406d22",
"body": "changelog.Generate previously used --latest in direct mode, but the new\ntag is created *after* this function runs, so --latest resolved to the\nprevious tag and emitted that release's commit range — release notes\nwere one release behind. Always use --unreleased in both modes.\n\nCommit b0f0afb fixed th\n[…]\negration regression\ntest. Drop TestGenerate_rangeFlag, which re-implemented the conditional\ninline and so couldn't catch this bug.\n\nCo-authored-by: Claude Opus 4.7 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix: use --unreleased for changelog generation in direct mode (#27)",
"author_name": "Davide Cammarata",
"author_login": "DCamma",
"committed_at": "2026-05-15T11:25:59Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "09d885326456b761987232e42a07e44e75b49e9b",
"body": null,
"is_bot": false,
"headline": "docs: update todo file",
"author_name": "DCamma",
"author_login": "DCamma",
"committed_at": "2026-05-15T11:14:04Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a61c8baf2436b6be43b4b2af339ee6a4fa76840c",
"body": "Co-authored-by: tamedia-fission[bot] <238147500+tamedia-fission[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "chore(main): release 0.3.1 (#26)",
"author_name": "tamedia-fission[bot]",
"author_login": "tamedia-fission[bot]",
"committed_at": "2026-05-15T09:24:46Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3532899fc399f5dfbd8a8fd62a25a71e7852b307",
"body": null,
"is_bot": false,
"headline": "fix: issue with last release (#25)",
"author_name": "Davide Cammarata",
"author_login": "DCamma",
"committed_at": "2026-05-15T09:23:55Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4cac5783bb19323b650b8d5af4b7805f8f0eb4a1",
"body": "* chore(main): release 0.3.0\n\n* chore: fix version\n\n* chore: fix version\n\n* chore: fix version\n\n---------\n\nCo-authored-by: tamedia-fission[bot] <238147500+tamedia-fission[bot]@users.noreply.github.com>\nCo-authored-by: Davide Cammarata <cammarata.davide.ti@gmail.com>",
"is_bot": true,
"headline": "chore(main): release 0.3.0 (#20)",
"author_name": "tamedia-fission[bot]",
"author_login": "tamedia-fission[bot]",
"committed_at": "2026-05-15T09:16:58Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "17de363140e22ae1949664220034c3360cf101ff",
"body": "The action.yaml default for tag-prefix is \"\" and GitHub Actions can't\ndistinguish \"unset\" from \"explicitly empty,\" so users writing the\nminimal workflow\n\n - uses: dnd-it/action-releaser@v0\n with:\n version-strategy: semver\n\nend up with bare-number tags (e.g. 0.1.0) and main.go skips\n--\n[…]\nan pin the previous\nbehavior with an explicit empty prefix once we add an escape hatch, or\nset a different prefix in .release.yml.\n\nCo-authored-by: Claude Opus 4.7 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "feat: default tag-prefix to \"v\" under semver (#23)",
"author_name": "Davide Cammarata",
"author_login": "DCamma",
"committed_at": "2026-05-15T09:10:20Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "4a930354a8dde0ba0f9d3e55d8c6a3e9dad230f9",
"body": "fix: use bundled cliff template for changelog rendering",
"is_bot": false,
"headline": "Merge pull request #22 from DND-IT/fix-default-cliff-config",
"author_name": "Davide Cammarata",
"author_login": "DCamma",
"committed_at": "2026-05-15T09:06:49Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d163602bfbc10ff3f777f9fe21c3fe791ab70e47",
"body": "changelog.Generate only passed --config to git-cliff when the user\nexplicitly set cliff-config, so direct mode fell back to git-cliff's\nembedded keepachangelog default (emoji headings, \"## [unreleased]\"\nsection). The bundled cliff-templates/<strategy>.toml was wired in for\nversion bumping but never \n[…]\ndled template's plain headings — the\nold test only checked the changelog was non-empty, which passed even\nwith the wrong template.\n\nCo-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix: use bundled cliff template for changelog rendering",
"author_name": "DCamma",
"author_login": "DCamma",
"committed_at": "2026-05-15T08:17:31Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "0e59d3ccb432d1ec5551432a9caa2d4af9c57c43",
"body": "The dry-run path was emitting the would-be tag in the action's `tag`\noutput, while leaving `release-url` empty. That mismatch tricks\ndownstream steps into believing a tag was created when nothing was\npushed. Match the (already-correct) `release-url` behavior and leave\n`tag` empty too. The would-be tag is still logged for visibility.\n\nFixes the TestDryRun integration assertion that the tag output is\nempty in dry-run mode.",
"is_bot": false,
"headline": "fix: leave tag output empty in dry-run mode",
"author_name": "swibrow",
"author_login": "swibrow",
"committed_at": "2026-04-18T06:00:04Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9bafc174bf8ddaf889133b16fb69f0e46cb0dbb9",
"body": "The integration job was failing with \"gzip: stdin: not in gzip format\"\nbecause curl piped non-gzip content into tar. Two root causes:\n\n1. Unauthenticated curl to api.github.com gets rate-limited on busy\n runners; the script then resolves an empty LATEST and downloads a\n 404 HTML page.\n2. curl -s\n[…]\n and tar --strip-components=1 directly into /usr/local/bin\ninstead of relying on `find` to locate the binary.\n\nNow integration tests exercise the same git-cliff version that ships\nin the Docker image.",
"is_bot": false,
"headline": "ci: pin git-cliff install in integration job to match Dockerfile",
"author_name": "swibrow",
"author_login": "swibrow",
"committed_at": "2026-04-18T04:52:10Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "0d86ae0896fa818f84fb058692c364b388e9632c",
"body": "Co-authored-by: tamedia-fission[bot] <238147500+tamedia-fission[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "chore(main): release 0.2.3 (#19)",
"author_name": "tamedia-fission[bot]",
"author_login": "tamedia-fission[bot]",
"committed_at": "2026-04-17T09:25:32Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "441c23c6fb9c888e783da5a99afbfa92b0695162",
"body": "GitHub's \"List pull requests\" endpoint does not populate the boolean\n`merged` field — that field is only returned by the single-PR GET\nendpoint. Iterating list results with `pr.GetMerged()` therefore always\nreturned false, so DetectMerge silently treated every closed PR as\nunmerged and never matched\n[…]\n returns.\n\nUpdate the test fixture to mirror the real LIST response (sets\nmerged_at, omits the boolean merged) so this regression cannot recur\nwithout a test failure.\n\nFixes DND-IT/action-releaser#17.",
"is_bot": false,
"headline": "fix: detect merged PRs via merged_at, not the boolean merged field",
"author_name": "swibrow",
"author_login": "swibrow",
"committed_at": "2026-04-17T09:24:16Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "d0233022febe3015bc5e451044a58596f0a564d8",
"body": "Co-authored-by: tamedia-fission[bot] <238147500+tamedia-fission[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "chore(main): release 0.2.2 (#18)",
"author_name": "tamedia-fission[bot]",
"author_login": "tamedia-fission[bot]",
"committed_at": "2026-04-17T06:43:38Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "bc3b8e6e64ded01bd57917a7185f7ec98369e0ee",
"body": "Mirrors CI: go fmt, go vet, go mod tidy, golangci-lint, and\ngo test -race ./..., plus standard whitespace/yaml/large-file hooks.\nCatches lint and test failures before they hit CI.\n\nRunning the hooks once also picked up:\n- gofmt drift across 5 pre-existing files (no behavior change),\n- a missing trailing newline in cmd/action-releaser/main.go,\n- an unchecked fmt.Fprint return in the new DetectMerge tests.\n\nInstall locally with: pre-commit install",
"is_bot": false,
"headline": "chore: add pre-commit config and run hooks",
"author_name": "swibrow",
"author_login": "swibrow",
"committed_at": "2026-04-17T06:08:19Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0328f3cc99d640e4c96a543685cd65000f9737d9",
"body": "Replace event-file based DetectMerge with an API-based lookup so release\ndetection works on any trigger (push, pull_request, workflow_dispatch),\nmatching how release-please operates. Also commit CHANGELOG.md to the\nrelease branch under the service path, so merging the release PR fires\npath-filtered \n[…]\nthe deleted event-parsing tests with httptest-based coverage\n of DetectMerge filtering (empty list, non-merged, non-release branch,\n missing pending label, valid match, first-match-wins, 500 error).",
"is_bot": false,
"headline": "feat: detect release PR merges via GitHub API",
"author_name": "swibrow",
"author_login": "swibrow",
"committed_at": "2026-04-17T03:54:24Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "414b89376e75a14c0df07589cd0abc8e1af6f7fa",
"body": "Co-authored-by: tamedia-fission[bot] <238147500+tamedia-fission[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "chore(main): release 0.2.1 (#16)",
"author_name": "tamedia-fission[bot]",
"author_login": "tamedia-fission[bot]",
"committed_at": "2026-04-16T07:39:45Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "bed71f99d6c497f0177e553177a456aa9f64f94f",
"body": "…an original",
"is_bot": false,
"headline": "fix(test): use 2x input size so truncated+suffix is always shorter th…",
"author_name": "swibrow",
"author_login": "swibrow",
"committed_at": "2026-04-14T10:37:54Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a0d840fb62a85f425f4bab39def613cb6a55f183",
"body": "Co-authored-by: tamedia-fission[bot] <238147500+tamedia-fission[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "chore(main): release 0.2.0 (#15)",
"author_name": "tamedia-fission[bot]",
"author_login": "tamedia-fission[bot]",
"committed_at": "2026-04-14T10:35:43Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7ad990825b7cef130b6d386a15362d4b0807c718",
"body": "… not byte constant",
"is_bot": false,
"headline": "fix(test): correct truncate assertion to compare against input length…",
"author_name": "swibrow",
"author_login": "swibrow",
"committed_at": "2026-04-14T09:06:20Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4a316f8eaae2c82002704210f7581532e0e8e547",
"body": "…-rolling\n\nBREAKING CHANGE: version-strategy no longer accepts \"date-rolling\" or\n\"numeric-rolling\". Use \"calver\" (calendar versioning, YYYY.MM.DD[.N])\ninstead of \"date-rolling\". Numeric-rolling has no replacement.\n\n- Rename DateRolling → CalVer, strategy name \"date-rolling\" → \"calver\"\n- Delete Numer\n[…]\ne cliff-templates/numeric-rolling.toml\n- Update config validation, factory, IsValidVersion, TagPatternRegex\n- Update all tests and integration tests accordingly\n- Update action.yaml, README, CLAUDE.md",
"is_bot": false,
"headline": "feat!: replace date-rolling/numeric-rolling with calver, drop numeric…",
"author_name": "swibrow",
"author_login": "swibrow",
"committed_at": "2026-04-14T08:57:07Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "6db969baec605fd3a35732528e3e99f998611a28",
"body": "- Add release-mode input (direct vs pr) with full gated workflow example\n- Add include-path input to inputs table\n- Document all new outputs: release-published, release-pr-url,\n release-pr-number, pr-created, release-mode, and clarify tag/release-url\n semantics\n- Add release-mode to .release.yml per-repo config example\n- Expand \"How It Works\" to cover both direct and PR mode flows",
"is_bot": false,
"headline": "docs: update README for release-mode pr, new outputs, and include-path",
"author_name": "swibrow",
"author_login": "swibrow",
"committed_at": "2026-04-14T03:18:01Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b71f451d52d9cd2b567b11b82fec58cbbb192164",
"body": "Co-authored-by: tamedia-fission[bot] <238147500+tamedia-fission[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "chore(main): release 0.1.10 (#14)",
"author_name": "tamedia-fission[bot]",
"author_login": "tamedia-fission[bot]",
"committed_at": "2026-04-14T02:50:59Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "17cd822f2c8b37bf1cf9bfca5e5be23556985e7b",
"body": "- release-mode: echoes the active mode (\"direct\"/\"pr\") so downstream\n jobs can branch without re-reading inputs\n- pr-created: true when a new release PR was opened vs updated;\n useful for one-time notifications (avoids duplicate alerts on\n every push after the first)\n- tag: now populated in pr mode with the proposed tag so consumers\n can reference the upcoming release before merge",
"is_bot": false,
"headline": "feat: add release-mode, pr-created, and tag-in-pr-mode outputs",
"author_name": "swibrow",
"author_login": "swibrow",
"committed_at": "2026-04-13T19:52:11Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "343569559642d251a10856e01409db86b106b093",
"body": "release-url now only contains the published GitHub Release URL.\nIn pr mode (before merge) it is empty; consumers should use\nrelease-pr-url or release-pr-number instead.\n\nCloses #13.",
"is_bot": false,
"headline": "feat: split release-url semantics and add structured PR outputs",
"author_name": "swibrow",
"author_login": "swibrow",
"committed_at": "2026-04-13T19:49:33Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "74a2b4ba1ba707e9f8fb78d6233f26fd83970f35",
"body": "Replace delete+recreate with UpdateRef(force=true) in updateReleaseBranch\nso GitHub never sees a deletion on the release branch head — which would\nauto-close any open PR on that branch.\n\nAlso add release-published, release-pr-url, and release-pr-number outputs\nto give downstream workflows unambiguous signals about what actually\nhappened without fragile URL-shape matching.\n\nCloses #12.",
"is_bot": false,
"headline": "fix(releasepr): force-push branch on update to avoid closing open PR",
"author_name": "swibrow",
"author_login": "swibrow",
"committed_at": "2026-04-13T19:49:32Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "daf30a621ec3ee42d277b4fc085a4625f514d6b9",
"body": "Co-authored-by: tamedia-fission[bot] <238147500+tamedia-fission[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "chore(main): release 0.1.9 (#11)",
"author_name": "tamedia-fission[bot]",
"author_login": "tamedia-fission[bot]",
"committed_at": "2026-04-13T19:30:30Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b0f0afbe0d8182f0a350f1237b489511e62ed875",
"body": "In release-mode: pr no tag is created before git-cliff runs, so\n--latest resolves to the previous release's range. Switch to\n--unreleased to capture all commits since the last tag.\nFixes #10.",
"is_bot": false,
"headline": "fix: use --unreleased flag for git-cliff in PR release mode",
"author_name": "swibrow",
"author_login": "swibrow",
"committed_at": "2026-04-13T19:29:07Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "65c283f49390caa1eb760a6309fbfb939f4c1b30",
"body": "Co-authored-by: tamedia-fission[bot] <238147500+tamedia-fission[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "chore(main): release 0.1.8 (#9)",
"author_name": "tamedia-fission[bot]",
"author_login": "tamedia-fission[bot]",
"committed_at": "2026-04-09T04:44:58Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0df573f8907ba150270cf9c768bd31dc286d4207",
"body": "* chore: pin action.yaml image to versioned GHCR tag\n\n* ci: use go-version-file to match go.mod version\n\n* ci: install golangci-lint from source to match Go version\n\n* fix: resolve errcheck lint errors\n\n* fix: resolve errcheck lint errors in releasepr_test\n\n* fix: override env vars correctly in integration tests\n\n* ci: install git-cliff binary directly instead of via action\n\n* ci: fix git-cliff binary extraction path",
"is_bot": false,
"headline": "feat: pin action.yaml image to versioned GHCR tag (#8)",
"author_name": "Samuel Wibrow",
"author_login": "swibrow",
"committed_at": "2026-04-09T04:43:16Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e2ab186a900512227bd50f4f44ea84a44e4e797d",
"body": "…ponents--action-releaser\n\nchore(main): release 0.1.7",
"is_bot": false,
"headline": "Merge pull request #7 from DND-IT/release-please--branches--main--com…",
"author_name": "Samuel Wibrow",
"author_login": "swibrow",
"committed_at": "2026-04-07T12:42:38Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ab486c578a03c2209616592ffff76cc019db0c61",
"body": null,
"is_bot": true,
"headline": "chore(main): release 0.1.7",
"author_name": "tamedia-fission[bot]",
"author_login": "tamedia-fission[bot]",
"committed_at": "2026-04-07T12:32:18Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "fdf084b887f671f69c7a11209ba3074e2b2e24dc",
"body": "Tries .release.yml first, falls back to .release.yaml.",
"is_bot": false,
"headline": "feat: support .release.yaml in addition to .release.yml",
"author_name": "swibrow",
"author_login": "swibrow",
"committed_at": "2026-04-07T12:31:57Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2d601ea9fb943cf392ad92c41f10a0c7de899973",
"body": "The action.yaml default of \"v\" was always passed as INPUT_TAG_PREFIX,\nwhich clobbered any tag-prefix set in .release.yml. With an empty\ndefault, .release.yml values are respected as intended.",
"is_bot": false,
"headline": "fix: change action.yaml tag-prefix default to empty string",
"author_name": "swibrow",
"author_login": "swibrow",
"committed_at": "2026-04-07T12:23:43Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e2d5b9e4b5a155261deeb2c9e6cd103b1910333d",
"body": "…ponents--action-releaser\n\nchore(main): release 0.1.6",
"is_bot": false,
"headline": "Merge pull request #6 from DND-IT/release-please--branches--main--com…",
"author_name": "Samuel Wibrow",
"author_login": "swibrow",
"committed_at": "2026-04-07T11:47:57Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3f79d62f0b1b283259476d51a5ce4075ed33b2af",
"body": null,
"is_bot": true,
"headline": "chore(main): release 0.1.6",
"author_name": "tamedia-fission[bot]",
"author_login": "tamedia-fission[bot]",
"committed_at": "2026-04-07T11:47:02Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "340d4fa550511a46bb04e7065df5ba17aec3a951",
"body": "Most repos don't want a tag prefix; those that do can set it\nexplicitly via .release.yml or action inputs.",
"is_bot": false,
"headline": "fix: change default TagPrefix from \"v\" to empty string",
"author_name": "swibrow",
"author_login": "swibrow",
"committed_at": "2026-04-07T11:46:39Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b73a080088fa33c4d3f7c259e7b7f03de639b21d",
"body": "…ponents--action-releaser\n\nchore(main): release 0.1.5",
"is_bot": false,
"headline": "Merge pull request #5 from DND-IT/release-please--branches--main--com…",
"author_name": "Samuel Wibrow",
"author_login": "swibrow",
"committed_at": "2026-03-31T15:22:45Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c762399b85ac9af22c0bf3c2a7d2475e31f41e45",
"body": null,
"is_bot": true,
"headline": "chore(main): release 0.1.5",
"author_name": "tamedia-fission[bot]",
"author_login": "tamedia-fission[bot]",
"committed_at": "2026-03-31T15:19:56Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "fd4bed6bdc151b629710f264db97da82271a8207",
"body": "git-cliff --bumped-version with --include-path fails to see unreleased\ncommits after the latest matching tag, returning the current version\ninstead of the bumped one. This caused action-releaser to skip releases\nwith \"no release needed\". The --tag-pattern flag alone correctly scopes\nversion boundary detection; --include-path is only needed for changelog\ngeneration.",
"is_bot": false,
"headline": "fix: remove --include-path from git-cliff --bumped-version",
"author_name": "swibrow",
"author_login": "swibrow",
"committed_at": "2026-03-31T15:19:39Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f2b6671b8792a8fc4ca4f7eb2b88f94fc57f4626",
"body": "…ponents--action-releaser\n\nchore(main): release 0.1.4",
"is_bot": false,
"headline": "Merge pull request #4 from DND-IT/release-please--branches--main--com…",
"author_name": "Samuel Wibrow",
"author_login": "swibrow",
"committed_at": "2026-03-31T14:32:49Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "10ff2a5a0df56b8ed887e3c0af5725c98a78e672",
"body": null,
"is_bot": true,
"headline": "chore(main): release 0.1.4",
"author_name": "tamedia-fission[bot]",
"author_login": "tamedia-fission[bot]",
"committed_at": "2026-03-31T14:31:04Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f1d3f46d5adf15928461c4e2d6149f175ae2d76b",
"body": "Release branches are now named per-service (e.g. release/go-service)\ninstead of per-version (e.g. release/go-service-v1.14.0). Since the\nbranch is force-updated to baseBranch HEAD + manifest on each run,\nthe PR diff is always just the manifest commit — no accumulated\ncommits from other services polluting the PR.\n\nAlso fixes findPendingPR for monorepos: filters by branch name so\neach service finds its own pending PR, not the first one with the label.",
"is_bot": false,
"headline": "fix: use stable release branch names to prevent noisy PR diffs",
"author_name": "swibrow",
"author_login": "swibrow",
"committed_at": "2026-03-31T14:30:41Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ad16f30fef181c40a095a243c1882160d9eafa97",
"body": "…ponents--action-releaser\n\nchore(main): release 0.1.3",
"is_bot": false,
"headline": "Merge pull request #3 from DND-IT/release-please--branches--main--com…",
"author_name": "Samuel Wibrow",
"author_login": "swibrow",
"committed_at": "2026-03-31T13:55:24Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6f779880af9195750140a10bc989098f8d646d04",
"body": null,
"is_bot": true,
"headline": "chore(main): release 0.1.3",
"author_name": "tamedia-fission[bot]",
"author_login": "tamedia-fission[bot]",
"committed_at": "2026-03-31T13:45:56Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e568c4b04c441b7d0faa0ec7a5a9950cfe601ac5",
"body": "Adds an include-path action input that passes --include-path to git-cliff,\nscoping commit scanning to a specific directory. This ensures version\ncalculation and changelog generation only consider commits touching the\nservice being released, preventing incorrect bumps from unrelated commits\nin monorepos using per-invocation pipelines (without the packages config).",
"is_bot": false,
"headline": "feat: add include-path input for monorepo commit scoping",
"author_name": "swibrow",
"author_login": "swibrow",
"committed_at": "2026-03-31T13:45:35Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "878b0e485c9b970063d51be8c13be19856504b1f",
"body": "…ponents--action-releaser\n\nchore(main): release 0.1.2",
"is_bot": false,
"headline": "Merge pull request #2 from DND-IT/release-please--branches--main--com…",
"author_name": "Samuel Wibrow",
"author_login": "swibrow",
"committed_at": "2026-03-31T12:58:05Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4acf8ede664c3bd2668f1ce85f8a20fc5b1c90e6",
"body": null,
"is_bot": true,
"headline": "chore(main): release 0.1.2",
"author_name": "tamedia-fission[bot]",
"author_login": "tamedia-fission[bot]",
"committed_at": "2026-03-31T12:56:59Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "dd7da3313fbfcfc9987ae106551cd6ffdc892a2e",
"body": "Tags are now validated after prefix stripping: the remainder must match\nthe expected version format for the strategy (semver, date-rolling, or\nnumeric-rolling). Additionally, git-cliff always receives --tag-pattern\nto scope its version boundary detection to the current service's tags,\npreventing it from using unrelated tags like go-service-v1.13.0 when\nreleasing python-api.",
"is_bot": false,
"headline": "fix: strict tag-prefix matching to prevent monorepo cross-contamination",
"author_name": "swibrow",
"author_login": "swibrow",
"committed_at": "2026-03-31T12:56:36Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "18c6f7aa0eedb04142dcedebc57f310ee5ea93bb",
"body": "…ponents--action-releaser\n\nchore(main): release 0.1.1",
"is_bot": false,
"headline": "Merge pull request #1 from DND-IT/release-please--branches--main--com…",
"author_name": "Samuel Wibrow",
"author_login": "swibrow",
"committed_at": "2026-03-31T07:23:20Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "fffd3f58127e123bfb407b496eb514592b538912",
"body": null,
"is_bot": true,
"headline": "chore(main): release 0.1.1",
"author_name": "tamedia-fission[bot]",
"author_login": "tamedia-fission[bot]",
"committed_at": "2026-03-27T08:33:23Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4c189e23892a1b76f9898f8edf38faaa0a130187",
"body": null,
"is_bot": false,
"headline": "fix: use token-embedded remote URL for git push auth",
"author_name": "swibrow",
"author_login": "swibrow",
"committed_at": "2026-03-27T08:33:06Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ccad4d6b4d34b64efe47ad351d42dc7c2af4763c",
"body": null,
"is_bot": false,
"headline": "fix: configure git auth for tag push in Docker containers",
"author_name": "swibrow",
"author_login": "swibrow",
"committed_at": "2026-03-27T07:22:40Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7d6ada270cbf9e4e69c3e980e3a62d516cde4125",
"body": null,
"is_bot": false,
"headline": "fix: add safe.directory for Docker container workspace trust",
"author_name": "swibrow",
"author_login": "swibrow",
"committed_at": "2026-03-27T07:12:07Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c651d57629147ae71204bc47ba57274ca72c5c2e",
"body": "…DRY_RUN)\n\nDocker actions receive env vars with hyphens preserved, unlike JS actions\nwhich convert hyphens to underscores. Check both forms for compatibility.",
"is_bot": false,
"headline": "fix: read Docker action inputs with hyphens (INPUT_DRY-RUN not INPUT_…",
"author_name": "swibrow",
"author_login": "swibrow",
"committed_at": "2026-03-27T07:08:19Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c4e9eed774e9a725b0ca51d675558f47ad11dfc3",
"body": null,
"is_bot": false,
"headline": "fix: use Dockerfile for action image until first GHCR publish",
"author_name": "swibrow",
"author_login": "swibrow",
"committed_at": "2026-03-27T07:05:33Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "bff03a0f14ae88bedd835f748f8e0721aca0c71e",
"body": "New release-mode input: \"direct\" (default, existing behavior) or \"pr\"\n(create/update a release PR, release on merge).\n\nIn PR mode, commits accumulate on main and the action creates a release\nPR with the changelog preview in the body. Merging the PR triggers the\nactual release. Labels (autorelease: pending/tagged) track PR state.",
"is_bot": false,
"headline": "feat: add release PR mode for gated releases",
"author_name": "swibrow",
"author_login": "swibrow",
"committed_at": "2026-03-27T06:57:39Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c34635ff3446b47164aef21889ec156316d9e4be",
"body": null,
"is_bot": false,
"headline": "docs: add README with usage examples and configuration reference",
"author_name": "swibrow",
"author_login": "swibrow",
"committed_at": "2026-03-27T05:12:51Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6009e9f7ba6b0442ba5b9ac5b00bacbe63706386",
"body": "Go binary baked into Docker image with git-cliff for changelog generation.\nSupports three versioning strategies (semver, date-rolling, numeric-rolling),\ndry-run mode, per-repo .release.yml config, and monorepo support.\n\nRelease pipeline follows org standard (release-please, GHCR, floating tags).",
"is_bot": false,
"headline": "feat: initial implementation of action-releaser",
"author_name": "swibrow",
"author_login": "swibrow",
"committed_at": "2026-03-26T16:35:18Z",
"body_truncated": false,
"is_coding_agent": false
}
],
"releases_count": 20,
"commits_last_year": 66,
"latest_release_at": "2026-07-16T14:47:41Z",
"latest_release_tag": "v0.4.0",
"releases_from_tags": false,
"days_since_last_push": 11,
"active_weeks_last_year": 7,
"days_since_latest_release": 11,
"mean_days_between_releases": 10.4
},
"community": {
"has_readme": true,
"has_license": false,
"has_description": true,
"has_contributing": false,
"health_percentage": 37,
"has_issue_template": false,
"has_code_of_conduct": false,
"has_pull_request_template": false
},
"ecosystem": {
"packages": [
{
"name": "github.com/dnd-it/action-releaser",
"exists": true,
"license": null,
"keywords": [],
"ecosystem": "go",
"matches_repo": true,
"registry_url": "https://pkg.go.dev/github.com/dnd-it/action-releaser",
"is_deprecated": false,
"latest_version": "v0.4.0",
"repository_url": "https://github.com/dnd-it/action-releaser",
"versions_count": 21,
"total_downloads": null,
"dependents_count": null,
"deprecation_note": null,
"maintainers_count": null,
"monthly_downloads": null,
"first_published_at": null,
"latest_published_at": "2026-07-16T14:47:29Z",
"latest_version_yanked": null,
"days_since_latest_publish": 11
}
]
},
"popularity": {
"forks": 0,
"stars": 0,
"watchers": 0,
"fork_history": {
"days": [],
"complete": true,
"collected": 0,
"total_forks": 0
},
"star_history": {
"days": [],
"complete": true,
"collected": 0,
"total_stars": 0,
"collected_at": null
},
"open_issues_and_prs": 1
},
"ai_readiness": {
"has_nix": false,
"example_dirs": [],
"has_llms_txt": false,
"has_dockerfile": true,
"has_mcp_signal": false,
"bootstrap_files": [],
"api_schema_files": [],
"has_devcontainer": false,
"typecheck_configs": [],
"toolchain_manifests": [
"go.mod"
],
"largest_source_bytes": 15666,
"source_files_sampled": 16,
"oversized_source_files": 0,
"agent_instruction_files": [
"CLAUDE.md"
],
"agent_instruction_max_bytes": 888
},
"dependencies": {
"manifests": [
"go.mod"
],
"advisories": {
"error": null,
"scope": null,
"source": null,
"findings": [],
"collected": false,
"malicious": [],
"truncated": false,
"by_severity": {},
"advisory_count": 0,
"affected_count": 0,
"assessed_count": 0,
"malicious_count": 0,
"assessed_package": null,
"unassessed_count": 0,
"direct_affected_count": 0
},
"ecosystems": [
"go"
],
"dependencies": [
{
"name": "github.com/google/go-github/v68",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v68.0.0"
},
{
"name": "gopkg.in/yaml.v3",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v3.0.1"
}
],
"all_dependencies": {
"error": "GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository",
"source": null,
"packages": [],
"collected": false,
"truncated": false,
"total_count": null,
"direct_count": null,
"indirect_count": null
}
},
"maintainership": {
"issues": {
"open_prs": 0,
"merged_prs": 29,
"open_issues": 1,
"closed_ratio": 0.857,
"closed_issues": 6,
"closed_unmerged_prs": 1
},
"bus_factor": 1,
"bot_contributors": 1,
"top_contributors": [
{
"type": "User",
"login": "swibrow",
"commits": 38,
"avatar_url": "https://avatars.githubusercontent.com/u/15628653?v=4"
},
{
"type": "User",
"login": "DCamma",
"commits": 8,
"avatar_url": "https://avatars.githubusercontent.com/u/8792770?v=4"
}
],
"contributors_sampled": 2,
"top_contributor_share": 0.826
},
"quality_signals": {
"has_ci": true,
"has_tests": true,
"ci_workflows": [
"release.yaml",
"test.yaml"
],
"has_docs_dir": true,
"linter_configs": [],
"has_editorconfig": false,
"has_linter_config": true,
"has_precommit_config": true
},
"security_signals": {
"lockfiles": [
"go.sum"
],
"scorecard": {
"checks": [
{
"name": "Binary-Artifacts",
"score": 10,
"reason": "no binaries found in the repo",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#binary-artifacts"
},
{
"name": "Branch-Protection",
"score": 0,
"reason": "branch protection not enabled on development/release branches",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#branch-protection"
},
{
"name": "CI-Tests",
"score": 10,
"reason": "19 out of 19 merged PRs checked by a CI test -- score normalized to 10",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#ci-tests"
},
{
"name": "CII-Best-Practices",
"score": 0,
"reason": "no effort to earn an OpenSSF best practices badge detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#cii-best-practices"
},
{
"name": "Code-Review",
"score": 1,
"reason": "Found 2/18 approved changesets -- score normalized to 1",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#code-review"
},
{
"name": "Contributors",
"score": 0,
"reason": "project has 0 contributing companies or organizations -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#contributors"
},
{
"name": "Dangerous-Workflow",
"score": 10,
"reason": "no dangerous workflow patterns detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dangerous-workflow"
},
{
"name": "Dependency-Update-Tool",
"score": 0,
"reason": "no update tool detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dependency-update-tool"
},
{
"name": "Fuzzing",
"score": 0,
"reason": "project is not fuzzed",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#fuzzing"
},
{
"name": "License",
"score": 0,
"reason": "license file not detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#license"
},
{
"name": "Maintained",
"score": 10,
"reason": "16 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#maintained"
},
{
"name": "Packaging",
"score": 10,
"reason": "packaging workflow detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#packaging"
},
{
"name": "Pinned-Dependencies",
"score": 0,
"reason": "dependency not pinned by hash detected -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#pinned-dependencies"
},
{
"name": "SAST",
"score": 0,
"reason": "SAST tool is not run on all commits -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#sast"
},
{
"name": "Security-Policy",
"score": 0,
"reason": "security policy file not detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#security-policy"
},
{
"name": "Signed-Releases",
"score": null,
"reason": "no releases found",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#signed-releases"
},
{
"name": "Token-Permissions",
"score": 0,
"reason": "detected GitHub workflow tokens with excessive permissions",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#token-permissions"
},
{
"name": "Vulnerabilities",
"score": 10,
"reason": "0 existing vulnerabilities detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#vulnerabilities"
}
],
"commit": "66b64d29ed2237d7ab1005c263d16c0dbb963b08",
"ran_at": "2026-07-27T18:13:15Z",
"aggregate_score": 4.2,
"scorecard_version": "v5.5.0"
},
"has_codeql_workflow": false,
"has_security_policy": false,
"has_dependabot_config": false
},
"contribution_flow": {
"collected": true,
"ci_last_run_at": "2026-07-16T14:49:15Z",
"oldest_open_prs": [],
"last_merged_pr_at": "2026-07-16T14:47:30Z",
"ci_last_conclusion": "SUCCESS",
"oldest_open_issues": [
{
"number": 21,
"created_at": "2026-04-21T09:18:35Z",
"last_comment_at": null,
"last_comment_author": null
}
]
}
},
"config": {
"disabled_metrics": [],
"disabled_categories": [],
"disabled_components": {}
},
"source": {
"url": "https://github.com/DND-IT/action-releaser",
"host": "github.com",
"name": "action-releaser",
"owner": "DND-IT"
},
"metrics": {
"overall": {
"key": "overall",
"band": "moderate",
"name": "Overall health",
"note": null,
"notes": [],
"value": 58,
"inputs": {
"security": 42,
"vitality": 76,
"community": 12,
"governance": 60,
"engineering": 90
},
"components": []
},
"categories": [
{
"key": "vitality",
"band": "good",
"name": "Vitality",
"value": 76,
"weight": 0.22,
"metrics": [
{
"key": "development_activity",
"band": "moderate",
"name": "Development activity",
"note": null,
"notes": [],
"value": 60,
"inputs": {
"commits_last_year": 66,
"human_commit_share": 0.697,
"days_since_last_push": 11,
"active_weeks_last_year": 7
},
"components": [
{
"key": "push_recency",
"name": "Push recency",
"detail": "last push 11 days ago",
"points": 28.8,
"status": "partial",
"details": [
{
"code": "push_recency",
"params": {
"days": 11
}
}
],
"max_points": 36
},
{
"key": "commit_cadence",
"name": "Commit cadence",
"detail": "7/52 weeks with commits",
"points": 4.8,
"status": "partial",
"details": [
{
"code": "commit_cadence_weeks",
"params": {
"weeks": 7
}
}
],
"max_points": 36
},
{
"key": "commit_volume",
"name": "Commit volume",
"detail": "66 commits in the last year",
"points": 16.4,
"status": "partial",
"details": [
{
"code": "commits_last_year",
"params": {
"count": 66
}
}
],
"max_points": 18
},
{
"key": "openssf_scorecard_maintained",
"name": "OpenSSF Scorecard: Maintained",
"detail": "16 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
}
]
},
{
"key": "release_discipline",
"band": "excellent",
"name": "Release discipline",
"note": "Excluded from scoring (no data or not applicable): OpenSSF Scorecard: Signed-Releases. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"openssf_scorecard_signed_releases"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 100,
"inputs": {
"releases_count": 20,
"latest_release_tag": "v0.4.0",
"releases_from_tags": false,
"days_since_latest_release": 11,
"mean_days_between_releases": 10.4
},
"components": [
{
"key": "ships_releases",
"name": "Ships releases",
"detail": "20 releases published",
"points": 27,
"status": "met",
"details": [
{
"code": "releases_published",
"params": {
"count": 20
}
}
],
"max_points": 27
},
{
"key": "release_recency",
"name": "Release recency",
"detail": "latest release 11 days ago",
"points": 36,
"status": "met",
"details": [
{
"code": "release_recency",
"params": {
"days": 11
}
}
],
"max_points": 36
},
{
"key": "release_cadence",
"name": "Release cadence",
"detail": "a release every ~10.4 days",
"points": 27,
"status": "met",
"details": [
{
"code": "release_cadence",
"params": {
"gap": 10.4
}
}
],
"max_points": 27
},
{
"key": "openssf_scorecard_signed_releases",
"name": "OpenSSF Scorecard: Signed-Releases",
"detail": "no releases found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 10
}
]
},
{
"key": "abandonment",
"band": "excellent",
"name": "Abandonment",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"cap": null,
"state": "unverified",
"guards": [],
"signals": [],
"red_flag": false,
"multiplier_pct": 100,
"declared_reason": null,
"unverified_reason": "repository_too_young",
"unanswered_open_prs": null,
"unanswered_open_issues": null,
"days_since_last_merged_pr": null,
"days_since_last_human_commit": null,
"days_since_last_human_commit_is_floor": false
},
"components": [
{
"key": "project_is_still_maintained",
"name": "Project is still maintained",
"detail": "maintenance record not established from the collected data",
"points": 100,
"status": "met",
"details": [
{
"code": "abandonment_unverified",
"params": {}
}
],
"max_points": 100
}
]
}
],
"description": "Is the project alive — is code being written and are releases shipping?"
},
{
"key": "community",
"band": "critical",
"name": "Community & Adoption",
"value": 12,
"weight": 0.18,
"metrics": [
{
"key": "popularity",
"band": "critical",
"name": "Popularity & adoption",
"note": null,
"notes": [],
"value": 1,
"inputs": {
"forks": 0,
"stars": 0,
"watchers": 0,
"growth_state": "unverified",
"growth_factor_pct": 100,
"growth_unverified_reason": "no_history"
},
"components": [
{
"key": "stars",
"name": "Stars",
"detail": "0 stars",
"points": 0,
"status": "missed",
"details": [
{
"code": "stars",
"params": {
"count": 0
}
}
],
"max_points": 60
},
{
"key": "forks",
"name": "Forks",
"detail": "0 forks",
"points": 0,
"status": "missed",
"details": [
{
"code": "forks",
"params": {
"count": 0
}
}
],
"max_points": 25
},
{
"key": "watchers",
"name": "Watchers",
"detail": "0 watchers",
"points": 0,
"status": "missed",
"details": [
{
"code": "watchers",
"params": {
"count": 0
}
}
],
"max_points": 15
}
]
},
{
"key": "community_health",
"band": "critical",
"name": "Community health",
"note": null,
"notes": [],
"value": 25,
"inputs": {
"has_readme": true,
"has_license": false,
"has_contributing": false,
"has_issue_template": false,
"has_code_of_conduct": false,
"has_pull_request_template": false
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 22.5,
"status": "met",
"details": [],
"max_points": 22.5
},
{
"key": "license",
"name": "License",
"detail": "no license file detected",
"points": 0,
"status": "missed",
"details": [
{
"code": "license_absent",
"params": {}
}
],
"max_points": 22.5
},
{
"key": "contributing_guide",
"name": "CONTRIBUTING guide",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 18
},
{
"key": "code_of_conduct",
"name": "Code of conduct",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 13.5
},
{
"key": "issue_template",
"name": "Issue template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.2
},
{
"key": "pr_template",
"name": "PR template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 6.3
}
]
}
],
"description": "Does the project have users, downloads, attention, and a welcoming setup for contributors?"
},
{
"key": "governance",
"band": "moderate",
"name": "Sustainability & Governance",
"value": 60,
"weight": 0.24,
"metrics": [
{
"key": "maintainer_resilience",
"band": "critical",
"name": "Maintainer resilience (bus factor)",
"note": null,
"notes": [],
"value": 16,
"inputs": {
"bus_factor": 1,
"contributors_sampled": 2,
"top_contributor_share": 0.826
},
"components": [
{
"key": "bus_factor",
"name": "Bus factor",
"detail": "1 contributor(s) cover half of all commits",
"points": 9,
"status": "partial",
"details": [
{
"code": "bus_factor",
"params": {
"count": 1
}
}
],
"max_points": 54
},
{
"key": "commit_distribution",
"name": "Commit distribution",
"detail": "top contributor authored 83% of commits",
"points": 3.9,
"status": "partial",
"details": [
{
"code": "top_contributor_share",
"params": {
"share": 83
}
}
],
"max_points": 22.5
},
{
"key": "contributor_breadth",
"name": "Contributor breadth",
"detail": "2 contributors",
"points": 2.7,
"status": "partial",
"details": [
{
"code": "contributors_sampled",
"params": {
"count": 2
}
}
],
"max_points": 13.5
},
{
"key": "openssf_scorecard_contributors",
"name": "OpenSSF Scorecard: Contributors",
"detail": "project has 0 contributing companies or organizations -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
},
{
"key": "responsiveness",
"band": "good",
"name": "Issue & PR responsiveness",
"note": null,
"notes": [],
"value": 79,
"inputs": {
"merged_prs": 29,
"open_issues": 1,
"closed_issues": 6,
"issue_closed_ratio": 0.857,
"closed_unmerged_prs": 1
},
"components": [
{
"key": "issue_resolution",
"name": "Issue resolution",
"detail": "86% of issues closed",
"points": 40.1,
"status": "partial",
"details": [
{
"code": "issues_closed_share",
"params": {
"share": 86
}
}
],
"max_points": 46.75
},
{
"key": "pr_acceptance",
"name": "PR acceptance",
"detail": "29/30 decided PRs merged",
"points": 37,
"status": "partial",
"details": [
{
"code": "decided_prs_merged",
"params": {
"merged": 29,
"decided": 30
}
}
],
"max_points": 38.25
},
{
"key": "openssf_scorecard_code_review",
"name": "OpenSSF Scorecard: Code-Review",
"detail": "Found 2/18 approved changesets -- score normalized to 1",
"points": 1.5,
"status": "partial",
"details": [],
"max_points": 15
}
]
},
{
"key": "stewardship",
"band": "moderate",
"name": "Ownership & stewardship",
"note": null,
"notes": [],
"value": 61,
"inputs": {
"followers": 13,
"owner_type": "Organization",
"is_verified": null,
"owner_login": "DND-IT",
"public_repos": 33,
"account_age_days": 3696
},
"components": [
{
"key": "ownership_backing",
"name": "Ownership backing",
"detail": "organization-owned",
"points": 30,
"status": "met",
"details": [
{
"code": "owner_organization",
"params": {}
}
],
"max_points": 30
},
{
"key": "verified_domain",
"name": "Verified domain",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 20
},
{
"key": "owner_reach",
"name": "Owner reach",
"detail": "13 followers of DND-IT",
"points": 8.2,
"status": "partial",
"details": [
{
"code": "owner_followers",
"params": {
"count": 13,
"login": "DND-IT"
}
}
],
"max_points": 25
},
{
"key": "track_record",
"name": "Track record",
"detail": "33 public repos, account ~10 yr old",
"points": 23.2,
"status": "partial",
"details": [
{
"code": "public_repos",
"params": {
"count": 33
}
},
{
"code": "account_age_years",
"params": {
"years": 10
}
}
],
"max_points": 25
}
]
},
{
"key": "package_maintenance",
"band": "excellent",
"name": "Package maintenance",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"packages": [
"github.com/dnd-it/action-releaser"
],
"ecosystems": "go",
"any_deprecated": false,
"min_days_since_publish": 11
},
"components": [
{
"key": "published_resolvable",
"name": "Published & resolvable",
"detail": "1 package(s) on go",
"points": 25,
"status": "met",
"details": [
{
"code": "packages_published",
"params": {
"count": 1,
"ecosystems": "go"
}
}
],
"max_points": 25
},
{
"key": "publish_recency",
"name": "Publish recency",
"detail": "latest publish 11 days ago",
"points": 35,
"status": "met",
"details": [
{
"code": "publish_recency",
"params": {
"days": 11
}
}
],
"max_points": 35
},
{
"key": "version_history",
"name": "Version history",
"detail": "21 published versions",
"points": 20,
"status": "met",
"details": [
{
"code": "published_versions",
"params": {
"count": 21
}
}
],
"max_points": 20
},
{
"key": "not_deprecated",
"name": "Not deprecated",
"detail": "active, not deprecated or yanked",
"points": 20,
"status": "met",
"details": [
{
"code": "package_not_deprecated",
"params": {}
}
],
"max_points": 20
}
]
}
],
"description": "Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?"
},
{
"key": "engineering",
"band": "excellent",
"name": "Engineering Quality",
"value": 90,
"weight": 0.2,
"metrics": [
{
"key": "engineering_practices",
"band": "excellent",
"name": "Engineering practices",
"note": null,
"notes": [],
"value": 94,
"inputs": {
"has_ci": true,
"has_tests": true,
"has_editorconfig": false,
"has_linter_config": true,
"has_precommit_config": true
},
"components": [
{
"key": "ci_workflows",
"name": "CI workflows",
"detail": "2 workflow(s)",
"points": 24,
"status": "met",
"details": [
{
"code": "ci_workflows",
"params": {
"count": 2
}
}
],
"max_points": 24
},
{
"key": "tests_present",
"name": "Tests present",
"detail": null,
"points": 24,
"status": "met",
"details": [],
"max_points": 24
},
{
"key": "linter_config",
"name": "Linter config",
"detail": null,
"points": 16,
"status": "met",
"details": [],
"max_points": 16
},
{
"key": "pre_commit_hooks",
"name": "Pre-commit hooks",
"detail": null,
"points": 9.6,
"status": "met",
"details": [],
"max_points": 9.6
},
{
"key": "editorconfig",
"name": ".editorconfig",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 6.4
},
{
"key": "openssf_scorecard_ci_tests",
"name": "OpenSSF Scorecard: CI-Tests",
"detail": "19 out of 19 merged PRs checked by a CI test -- score normalized to 10",
"points": 20,
"status": "met",
"details": [],
"max_points": 20
}
]
},
{
"key": "documentation",
"band": "excellent",
"name": "Documentation",
"note": null,
"notes": [],
"value": 85,
"inputs": {
"topics": [
"backstage"
],
"has_wiki": true,
"homepage": null,
"has_readme": true,
"has_docs_dir": true,
"has_description": true
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 30,
"status": "met",
"details": [],
"max_points": 30
},
{
"key": "documentation_directory",
"name": "Documentation directory",
"detail": null,
"points": 25,
"status": "met",
"details": [],
"max_points": 25
},
{
"key": "documentation_homepage_site",
"name": "Documentation / homepage site",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
},
{
"key": "repository_description",
"name": "Repository description",
"detail": null,
"points": 10,
"status": "met",
"details": [],
"max_points": 10
},
{
"key": "topics",
"name": "Topics",
"detail": "1 topics",
"points": 10,
"status": "met",
"details": [
{
"code": "topics_count",
"params": {
"count": 1
}
}
],
"max_points": 10
},
{
"key": "wiki",
"name": "Wiki",
"detail": null,
"points": 10,
"status": "met",
"details": [],
"max_points": 10
}
]
}
],
"description": "Are baseline engineering and documentation practices in place?"
},
{
"key": "security",
"band": "at_risk",
"name": "Security",
"value": 42,
"weight": 0.16,
"metrics": [
{
"key": "security_posture",
"band": "at_risk",
"name": "Security posture",
"note": "Excluded from scoring (no data or not applicable): Signed-Releases. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"signed_releases"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 42,
"inputs": {
"source": "openssf_scorecard",
"checks_evaluated": 17,
"scorecard_version": "v5.5.0",
"checks_inconclusive": 1,
"scorecard_aggregate": 4.2
},
"components": [
{
"key": "binary_artifacts",
"name": "Binary-Artifacts",
"detail": "no binaries found in the repo",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "branch_protection",
"name": "Branch-Protection",
"detail": "branch protection not enabled on development/release branches",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "ci_tests",
"name": "CI-Tests",
"detail": "19 out of 19 merged PRs checked by a CI test -- score normalized to 10",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "cii_best_practices",
"name": "CII-Best-Practices",
"detail": "no effort to earn an OpenSSF best practices badge detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 2.5
},
{
"key": "code_review",
"name": "Code-Review",
"detail": "Found 2/18 approved changesets -- score normalized to 1",
"points": 0.8,
"status": "partial",
"details": [],
"max_points": 7.5
},
{
"key": "contributors",
"name": "Contributors",
"detail": "project has 0 contributing companies or organizations -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 2.5
},
{
"key": "dangerous_workflow",
"name": "Dangerous-Workflow",
"detail": "no dangerous workflow patterns detected",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
},
{
"key": "dependency_update_tool",
"name": "Dependency-Update-Tool",
"detail": "no update tool detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "fuzzing",
"name": "Fuzzing",
"detail": "project is not fuzzed",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "license",
"name": "License",
"detail": "license file not detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 2.5
},
{
"key": "maintained",
"name": "Maintained",
"detail": "16 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "packaging",
"name": "Packaging",
"detail": "packaging workflow detected",
"points": 5,
"status": "met",
"details": [],
"max_points": 5
},
{
"key": "pinned_dependencies",
"name": "Pinned-Dependencies",
"detail": "dependency not pinned by hash detected -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "sast",
"name": "SAST",
"detail": "SAST tool is not run on all commits -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "security_policy",
"name": "Security-Policy",
"detail": "security policy file not detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "signed_releases",
"name": "Signed-Releases",
"detail": "no releases found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 7.5
},
{
"key": "token_permissions",
"name": "Token-Permissions",
"detail": "detected GitHub workflow tokens with excessive permissions",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "vulnerabilities",
"name": "Vulnerabilities",
"detail": "0 existing vulnerabilities detected",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
}
]
},
{
"key": "high_risk_jurisdiction_exposure",
"band": "excellent",
"name": "High-Risk Jurisdiction Exposure",
"note": "Only high-confidence self-published location evidence affects this multiplier. Ambiguous matches are review-only; country evidence is not proof of nationality, citizenship, legal registration, malicious intent, or sanctions status.",
"notes": [
{
"code": "jurisdiction_evidence_limits",
"params": {}
}
],
"value": 100,
"inputs": {
"meaning": "self-published location evidence; not nationality or citizenship",
"red_flag": false,
"exposures": [],
"policy_countries": [
"Russia",
"Iran",
"North Korea"
],
"review_only_matches": 0,
"assessed_self_published_locations": 3
},
"components": [
{
"key": "policy_exposure_multiplier",
"name": "Policy exposure multiplier",
"detail": "no confirmed policy-scope location match",
"points": 100,
"status": "met",
"details": [
{
"code": "jurisdiction_no_match",
"params": {}
}
],
"max_points": 100
}
]
}
],
"description": "Are visible security and supply-chain practices strong, with no malicious dependency and no unresolved high-risk jurisdiction exposure?"
},
{
"key": "ai_readiness",
"band": "good",
"name": "AI Readiness",
"value": 84,
"weight": 0,
"metrics": [
{
"key": "ai_agent_context",
"band": "excellent",
"name": "Agent context & guidance",
"note": null,
"notes": [],
"value": 85,
"inputs": {
"has_llms_txt": false,
"legible_history_share": 1,
"agent_instruction_files": [
"CLAUDE.md"
],
"agent_instruction_max_bytes": 888
},
"components": [
{
"key": "agent_instructions",
"name": "Agent instructions",
"detail": "CLAUDE.md",
"points": 45,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "CLAUDE.md"
}
}
],
"max_points": 45
},
{
"key": "machine_readable_docs_llms_txt",
"name": "Machine-readable docs (llms.txt)",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
},
{
"key": "legible_commit_history",
"name": "Legible commit history",
"detail": "46 of 46 human commits state their intent (structured subject or explanatory body)",
"points": 40,
"status": "met",
"details": [
{
"code": "legible_history",
"params": {
"legible": 46,
"sampled": 46
}
}
],
"max_points": 40
}
]
},
{
"key": "ai_verify_loop",
"band": "good",
"name": "Verify loop (build / test / typecheck)",
"note": null,
"notes": [],
"value": 77,
"inputs": {
"has_nix": false,
"has_tests": true,
"lockfiles": [
"go.sum"
],
"has_dockerfile": true,
"typed_language": true,
"bootstrap_files": [],
"has_devcontainer": false,
"has_linter_config": true,
"typecheck_configs": [],
"agent_commit_share": 0.061,
"toolchain_manifests": [
"go.mod"
],
"dependency_bot_commit_share": 0
},
"components": [
{
"key": "one_command_bootstrap",
"name": "One-command bootstrap",
"detail": "go.mod (toolchain convention, no task runner)",
"points": 12.6,
"status": "partial",
"details": [
{
"code": "toolchain_convention",
"params": {
"files": "go.mod"
}
}
],
"max_points": 18
},
{
"key": "automated_tests",
"name": "Automated tests",
"detail": null,
"points": 22,
"status": "met",
"details": [],
"max_points": 22
},
{
"key": "lint_format_config",
"name": "Lint / format config",
"detail": null,
"points": 11,
"status": "met",
"details": [],
"max_points": 11
},
{
"key": "static_type_checking",
"name": "Static type checking",
"detail": "Go (statically typed)",
"points": 11,
"status": "met",
"details": [
{
"code": "statically_typed_language",
"params": {
"language": "Go"
}
}
],
"max_points": 11
},
{
"key": "reproducible_environment",
"name": "Reproducible environment",
"detail": "Dockerfile, lockfile",
"points": 10,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "Dockerfile, lockfile"
}
}
],
"max_points": 10
},
{
"key": "demonstrated_agent_practice",
"name": "Demonstrated agent practice",
"detail": "4 of the last 66 commits agent-authored or agent-credited",
"points": 10,
"status": "met",
"details": [
{
"code": "agent_authored_commits",
"params": {
"count": 4,
"sampled": 66
}
}
],
"max_points": 10
},
{
"key": "automated_maintenance",
"name": "Automated maintenance",
"detail": "no automated dependency updates observed",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_dependency_automation",
"params": {}
}
],
"max_points": 8
},
{
"key": "openssf_scorecard_pinned_dependencies",
"name": "OpenSSF Scorecard: Pinned-Dependencies",
"detail": "dependency not pinned by hash detected -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
},
{
"key": "ai_code_legibility",
"band": "excellent",
"name": "Code legibility for models",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"primary_language": "Go",
"largest_source_bytes": 15666,
"source_files_sampled": 16,
"oversized_source_files": 0
},
"components": [
{
"key": "type_checkable_code",
"name": "Type-checkable code",
"detail": "Go (statically typed)",
"points": 45,
"status": "met",
"details": [
{
"code": "statically_typed_language",
"params": {
"language": "Go"
}
}
],
"max_points": 45
},
{
"key": "manageable_file_sizes",
"name": "Manageable file sizes",
"detail": "0/16 source files over 60KB",
"points": 55,
"status": "met",
"details": [
{
"code": "oversized_source_files",
"params": {
"kb": 60,
"sampled": 16,
"oversized": 0
}
}
],
"max_points": 55
}
]
}
],
"description": "How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score."
}
],
"metrics_version": "1.13.0"
},
"warnings": [
"GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository"
],
"report_type": "repository",
"generated_at": "2026-07-27T18:13:31.665584Z",
"schema_version": "0.27.0",
"badge_url": "https://raw.githubusercontent.com/inspect-software/badges/main/v1/d/DND-IT/action-releaser.svg",
"full_name": "DND-IT/action-releaser",
"license_state": "absent",
"license_spdx": null
}Bewertungen sind Signale, keine Garantien. Sie spiegeln öffentlich sichtbare Praxis auf GitHub wider — kein Code-Audit und keine Sicherheitsgarantie.
Fehlende Daten werden ausgeschlossen und die Gewichte neu normiert, nie als null bewertet. Die Methodik ist versioniert und offen: Metriken v1.13.0, Schema v0.27.0 — vollständige Methodik · Metriken-Wiki.
Wie ein einzelnes Ergebnis im Gesamtregister steht: aggregierte Statistiken — Go.