Öffentliches Register
Software-GesundheitsberichtSchema 0.27.0 · Metriken 1.13.0 · 2026-08-01 02:38 UTC

actionshub / chef-install

Repository for the actionshub-chef-install Github Action

Apache-2.0★ 7 Sterne⑂ 8 Forksseit Jan. 2020Auf GitHub ansehen ↗

actionshub/chef-install erreicht einen Gesundheitsindex von 49 von 100 und liegt damit im Bereich Gefährdet. Am stärksten schneidet es bei Community & Adoption (54/100) ab, am schwächsten bei AI Readiness (19/100). Zuletzt vor 43 Tagen aktualisiert. Ein einzelner Mitwirkender trägt den Großteil der jüngsten Arbeit.

49
gesamt / 100
Gefährdet

Software-Gesundheitsindex

Metriken werden auf einer Skala von 1–100 in gewichtete Kategorien gruppiert. Der Gesamtwert beginnt als ihr Mittel; sobald öffentliche Evidenz die Richtlinie für Hochrisikojurisdiktionen auslöst, wird die Bewertung angepasst und erhält die Obergrenze 49 (Gefährdet). AI Readiness liegt außerhalb.

49
Exzellent85-100Vorbildlich; erfüllt im Wesentlichen alle geprüften Kriterien
Gut70-84Gesund; geringfügige Lücken
Mittel50-69Akzeptabel mit deutlichen Lücken; Überprüfung empfohlen
Gefährdet30-49Erhebliche Schwächen; eine Übernahme erfordert Vorsicht
Kritisch1-29Schwerwiegende Probleme (aufgegeben, nur ein Maintainer, keine Hygiene)
VitalitätCommunity &VerbreitungNachhaltigkeit &GovernanceEngineering-QualitätSicherheitAI Readiness

Bewertungsprofil

Jede Achse ist eine Kategorie. Die Form zählt mehr als der Durchschnitt — ein gesundes Projekt füllt die gesamte Fläche, während ein Profil aus Spitzen und Kratern bedeutet, dass Stärke in einer Dimension Risiken in einer anderen verdeckt.

Eigentümerschaft

Actions HubOrganisation
33 Follower27 öffentliche Reposseit Jan. 2020

Dieses Repository wird von einer Organisation getragen — geteilte, rechenschaftspflichtige Trägerschaft, die jeden einzelnen Maintainer überdauern kann.

Metriken nach Kategorie

Vitalität

Lebt das Projekt — wird Code geschrieben und werden Releases ausgeliefert?

49Gefährdet · 22 % des Gesamtindex
Wie die Bewertung erfolgt
18/36Push-Aktualität — letzter Push vor 43 Tagen
1.4/36Commit-Rhythmus — 2/52 Wochen mit Commits
7/18Commit-Volumen — 5 Commits im letzten Jahr
0/10OpenSSF Scorecard: Maintained — 1 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0
Verwendete Eingangsdaten
commits_last_year5
human_commit_share0,829
days_since_last_push43
active_weeks_last_year2
Wie die Bewertung erfolgt
27/27Liefert Releases aus — 14 Releases veröffentlicht
36/36Release-Aktualität — letztes Release vor 78 Tagen
12.6/27Release-Rhythmus — ein Release etwa alle 179,1 Tage
0/10OpenSSF Scorecard: Signed-Releases — keine Daten
Verwendete Eingangsdaten
releases_count14
latest_release_tag6.0.0
releases_from_tagsnein
days_since_latest_release78
mean_days_between_releases179,1
Von der Bewertung ausgeschlossen (keine Daten oder nicht anwendbar): OpenSSF Scorecard: Signed-Releases. Die verbleibenden Gewichte wurden renormalisiert.

Community & Verbreitung

Hat das Projekt Nutzer, Downloads, Aufmerksamkeit und ein einladendes Umfeld für Beitragende?

54Mittel · 18 % des Gesamtindex
Wie die Bewertung erfolgt
12.6/60Stars — 7 Stars
7/25Forks — 8 Forks
0/15Watcher — 1 Watcher
Verwendete Eingangsdaten
forks8
stars7
watchers1
growth_stateunverified
growth_factor_pct100
growth_unverified_reasonno_history
Wie die Bewertung erfolgt
22.5/22.5README
22.5/22.5Lizenz — anerkannte Lizenz (Apache-2.0)
18/18CONTRIBUTING-Leitfaden
13.5/13.5Verhaltenskodex
0/7.2Issue-Vorlage
6.3/6.3PR-Vorlage
Verwendete Eingangsdaten
has_readmeja
has_licenseja
has_contributingja
has_issue_templatenein
has_code_of_conductja
has_pull_request_templateja

Nachhaltigkeit & Governance

Überdauert das Projekt die Menschen, die es tragen — Bus-Faktor, Reaktionsfähigkeit, Trägerschaft und Paketpflege?

52Mittel · 24 % des Gesamtindex
Wie die Bewertung erfolgt
9/54Bus-Faktor — 1 Beitragende decken die Hälfte aller Commits ab
10.9/22.5Commit-Verteilung — wichtigste beitragende Person verfasste 52 % der Commits
9.5/13.5Breite der Beitragenden — 7 Beitragende
10/10OpenSSF Scorecard: Contributors — project has 6 contributing companies or organizations
Verwendete Eingangsdaten
bus_factor1
contributors_sampled7
top_contributor_share0,517
Wie die Bewertung erfolgt
31.2/46.8Issue-Lösungsquote — 67 % der Issues geschlossen
21.9/38.3PR-Annahme — 24/42 entschiedene PRs gemergt
3/15OpenSSF Scorecard: Code-Review — Found 6/24 approved changesets -- score normalized to 2
Verwendete Eingangsdaten
merged_prs24
open_issues1
closed_issues2
issue_closed_ratio0,667
closed_unmerged_prs18
Wie die Bewertung erfolgt
30/30Organisatorische Trägerschaft — im Besitz einer Organisation
0/20Verifizierte Domain
11/25Reichweite des Inhabers — 33 Follower von actionshub
22.5/25Kontohistorie — 27 öffentliche Repos, Kontoalter ca. 6 Jahre
Verwendete Eingangsdaten
followers33
owner_typeOrganization
is_verified
owner_loginactionshub
public_repos27
account_age_days2.401

Engineering-Qualität

Sind grundlegende Engineering- und Dokumentationspraktiken vorhanden?

42Gefährdet · 20 % des Gesamtindex
Wie die Bewertung erfolgt
24/24CI-Workflows — 1 Workflow(s)
0/24Tests vorhanden
0/16Linter-Konfiguration
0/9.6Pre-Commit-Hooks
0/6.4.editorconfig
2/20OpenSSF Scorecard: CI-Tests — 3 out of 21 merged PRs checked by a CI test -- score normalized to 1
Verwendete Eingangsdaten
has_cija
has_testsnein
has_editorconfignein
has_linter_confignein
has_precommit_confignein
Wie die Bewertung erfolgt
30/30README
0/25Dokumentationsverzeichnis
15/15Dokumentations-/Homepage-Site — https://github.com/marketplace/actions/actionshub-chef-install
10/10Repository-Beschreibung
10/10Topics — 5 Topics
0/10Wiki
Verwendete Eingangsdaten
topicsaction, github-action, ci, chef-install, terraform-managed
has_wikinein
homepagehttps://github.com/marketplace/actions/actionshub-chef-install
has_readmeja
has_docs_dirnein
has_descriptionja

Sicherheit

Sind die sichtbaren Sicherheits- und Lieferkettenpraktiken belastbar, ohne ungeklärte Exposition gegenüber Hochrisikojurisdiktionen?

46Gefährdet · 16 % des Gesamtindex

Sicherheitslage

46Gefährdet
Wie die Bewertung erfolgt
7.5/7.5Binary-Artifacts — no binaries found in the repo
0/7.5Branch-Protection — keine Daten
0.2/2.5CI-Tests — 3 out of 21 merged PRs checked by a CI test -- score normalized to 1
0/2.5CII-Best-Practices — no effort to earn an OpenSSF best practices badge detected
1.5/7.5Code-Review — Found 6/24 approved changesets -- score normalized to 2
2.5/2.5Contributors — project has 6 contributing companies or organizations
10/10Dangerous-Workflow — no dangerous workflow patterns detected
7.5/7.5Dependency-Update-Tool — update tool detected
0/5Fuzzing — project is not fuzzed
2.5/2.5Lizenz — license file detected
0/7.5Maintained — 1 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0
0/5Packaging — keine Daten
0/5Pinned-Dependencies — dependency not pinned by hash detected -- score normalized to 0
0/5SAST — SAST tool is not run on all commits -- score normalized to 0
0/5Security-Policy — security policy file not detected
0/7.5Signed-Releases — keine Daten
0/7.5Token-Permissions — detected GitHub workflow tokens with excessive permissions
7.5/7.5Vulnerabilities — 0 existing vulnerabilities detected
Verwendete Eingangsdaten
sourceopenssf_scorecard
checks_evaluated15
scorecard_versionv5.5.0
checks_inconclusive3
scorecard_aggregate4,6
Von der Bewertung ausgeschlossen (keine Daten oder nicht anwendbar): branch_protection, packaging, signed_releases. Die verbleibenden Gewichte wurden renormalisiert.

AI Readiness

Wie gut ist das Repository dafür ausgestattet, mit KI-Coding-Agenten entwickelt und gepflegt zu werden? Ein unabhängiges, experimentelles Badge — Gewicht 0,0, es wird eigenständig ausgewiesen und verändert den Gesamt-Gesundheitswert nicht.

19Kritisch · 0 % des Gesamtindex
Wie die Bewertung erfolgt
0/45Agentenanweisungen — keine CLAUDE.md / AGENTS.md / Editor-Regeln
0/15Maschinenlesbare Doku (llms.txt)
33.1/40Lesbare Commit-Historie — 18 von 29 menschlichen Commits benennen ihre Absicht (strukturierter Betreff oder erläuternder Text)
Verwendete Eingangsdaten
has_llms_txtnein
legible_history_share0,621
agent_instruction_files
agent_instruction_max_bytes
Wie die Bewertung erfolgt
0/18Bootstrap mit einem Befehl
0/22Automatisierte Tests
0/11Lint-/Format-Konfiguration
0/11Statische Typprüfung
0/10Reproduzierbare Umgebung
0/10Belegte Agentenpraxis — keine von Agenten verfassten Commits unter den letzten 35
8/8Automatisierte Wartung — 6 der letzten 35 Commits sind automatisierte Abhängigkeits-Updates
0/10OpenSSF Scorecard: Pinned-Dependencies — dependency not pinned by hash detected -- score normalized to 0
Verwendete Eingangsdaten
has_nixnein
has_testsnein
lockfiles
has_dockerfilenein
typed_languagenein
bootstrap_files
has_devcontainernein
has_linter_confignein
typecheck_configs
agent_commit_share0
toolchain_manifests
dependency_bot_commit_share0,171

Eckdaten

7GitHub-Sterne
7Mitwirkende
5Commits, letzte 12 Monate
43Tage seit letztem Push
14Releases
1Bus-Faktor
1offene Issues
Paket-Ökosysteme

Warnungen zur Datenerhebung

  • Language breakdown unavailable
  • Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token

Weitere Details

Stern- und Fork-Verlauf 0 ★ / 8 ⇿
0Sterne
8Forks
11Releases

Wann jeder Stern und Fork hinzugefügt wurde, von GitHub erfasst und nach Tagen gruppiert. Das kumulierte Wachstum steht direkt über den täglichen Zugängen, aus denen es besteht, sodass beide gegeneinander lesbar sind: stetiger organischer Zuwachs sieht ganz anders aus als ein abrupter, kurzlebiger Ausschlag. Wo dieser Unterschied messbar ist, wird er als Wachstumsauthentizität ausgewiesen.

2345678822020-052023-042026-04
Major 4Minor 0Patch 7

Jeder Punkt umfasst 6 Tage.

OpenSSF Scorecard 4.6 / 10
4.6Gesamtwert

Unabhängige, werkzeugneutrale Sicherheitsbewertung durch das quelloffene OpenSSF Scorecard. Jede Prüfung honoriert eine Sicherheits-Praxis, nicht das Werkzeug eines bestimmten Anbieters. Prüfungen, die Scorecard nicht ermitteln konnte, sind mit k. A. markiert und vom Sicherheitswert ausgeschlossen (nie als null gezählt).Scorecard v5.5.0 · 2026-08-01 02:38 UTC

10Binary-Artifactsno binaries found in the repo
k. A.Branch-Protectioninternal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md
1CI-Tests3 out of 21 merged PRs checked by a CI test -- score normalized to 1
0CII-Best-Practicesno effort to earn an OpenSSF best practices badge detected
2Code-ReviewFound 6/24 approved changesets -- score normalized to 2
10Contributorsproject has 6 contributing companies or organizations
10Dangerous-Workflowno dangerous workflow patterns detected
10Dependency-Update-Toolupdate tool detected
0Fuzzingproject is not fuzzed
10Licenselicense file detected
0Maintained1 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0
k. A.Packagingpackaging workflow not detected
0Pinned-Dependenciesdependency not pinned by hash detected -- score normalized to 0
0SASTSAST tool is not run on all commits -- score normalized to 0
0Security-Policysecurity policy file not detected
k. A.Signed-Releasesno releases found
0Token-Permissionsdetected GitHub workflow tokens with excessive permissions
10Vulnerabilities0 existing vulnerabilities detected
Alle Abhängigkeiten 0

Vollständig aufgelöster Abhängigkeitssatz aus dem GitHub-Abhängigkeitsgraphen: 0 direkte und 0 indirekte (transitive) Pakete. Die transitive Hülle ist vollständig, wenn das Repository eine Lockfile eincheckt.

RegistryPaketVersionBeziehung
Abhängigkeits-Advisories nicht bewertet

Der Advisory-Abgleich konnte für diesen Bericht nicht ausgeführt werden: No resolved dependencies to assess

JSON-Rohbericht maschinenlesbar
{
  "data": {
    "repo": {
      "topics": [
        "action",
        "github-action",
        "ci",
        "chef-install",
        "terraform-managed"
      ],
      "is_fork": false,
      "size_kb": 45927,
      "has_wiki": false,
      "homepage": "https://github.com/marketplace/actions/actionshub-chef-install",
      "languages": {},
      "pushed_at": "2026-06-18T20:40:10Z",
      "created_at": "2020-01-04T14:22:38Z",
      "owner_type": "Organization",
      "updated_at": "2026-05-13T23:04:55Z",
      "description": "Repository for the actionshub-chef-install Github Action",
      "is_archived": false,
      "is_disabled": false,
      "license_spdx": "Apache-2.0",
      "default_branch": "main",
      "license_spdx_raw": "Apache-2.0",
      "primary_language": null,
      "significant_languages": []
    },
    "owner": {
      "blog": null,
      "name": "Actions Hub",
      "type": "Organization",
      "login": "actionshub",
      "company": null,
      "location": null,
      "followers": 33,
      "avatar_url": "https://avatars.githubusercontent.com/u/59490345?v=4",
      "created_at": "2020-01-03T22:59:56Z",
      "is_verified": null,
      "public_repos": 27,
      "account_age_days": 2401
    },
    "license": {
      "state": "standard",
      "spdx_id": "Apache-2.0",
      "raw_spdx": "Apache-2.0",
      "file_present": true,
      "scorecard_found": true,
      "profile_has_license": true
    },
    "activity": {
      "releases": [
        {
          "tag": "6.0.0",
          "kind": "major",
          "published_at": "2026-05-14T14:09:23Z"
        },
        {
          "tag": "5.0.2",
          "kind": "patch",
          "published_at": "2026-02-20T20:42:48Z"
        },
        {
          "tag": "5.0.1",
          "kind": "patch",
          "published_at": "2026-02-20T20:10:47Z"
        },
        {
          "tag": "5.0.0",
          "kind": "major",
          "published_at": "2026-02-18T22:44:32Z"
        },
        {
          "tag": "4.0.0",
          "kind": "major",
          "published_at": "2026-02-18T22:40:28Z"
        },
        {
          "tag": "3.0.1",
          "kind": "patch",
          "published_at": "2024-12-04T13:45:18Z"
        },
        {
          "tag": "3.0.0",
          "kind": "major",
          "published_at": "2024-01-31T23:02:21Z"
        },
        {
          "tag": "2.0.4",
          "kind": "patch",
          "published_at": "2022-10-19T13:25:22Z"
        },
        {
          "tag": "2.0.3",
          "kind": "patch",
          "published_at": "2021-12-14T10:21:04Z"
        },
        {
          "tag": "2.0.2",
          "kind": "patch",
          "published_at": "2021-12-14T10:10:55Z"
        },
        {
          "tag": "2.0.1",
          "kind": "patch",
          "published_at": "2020-12-11T20:56:46Z"
        },
        {
          "tag": "2.0.0",
          "kind": "major",
          "published_at": "2020-11-28T19:57:18Z"
        },
        {
          "tag": "1.1.0",
          "kind": "minor",
          "published_at": "2020-04-19T09:58:57Z"
        },
        {
          "tag": "v1.0.0",
          "kind": "major",
          "published_at": "2020-01-05T10:23:34Z"
        }
      ],
      "recent_commits": [
        {
          "oid": "f3b35943a257c25f3ca69e3b773fa4e0e99b58d6",
          "body": "* fix: Fix params on Windows\n\nSigned-off-by: Dan Webb <dan.webb@damacus.io>\n\n* feat: support Chef community and Cinc installs\n\n* feat: default omnitruck to Cinc\n\n* fix: fail fast on invalid installer responses\n\n---------\n\nSigned-off-by: Dan Webb <dan.webb@damacus.io>",
          "is_bot": false,
          "headline": "feat: support Chef community and Cinc installs (#43)",
          "author_name": "Dan Webb",
          "author_login": "damacus",
          "committed_at": "2026-05-13T23:04:50Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "db5643e686bab4d7e39b3461f6b65809a27d8139",
          "body": "Signed-off-by: Dan Webb <dan.webb@damacus.io>",
          "is_bot": false,
          "headline": "Default version to latest",
          "author_name": "Dan Webb",
          "author_login": "damacus",
          "committed_at": "2026-02-20T20:08:59Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "715f6ec56df078a1c7f23df9d1038136c9797b1b",
          "body": "Replace the node20 action with a composite action using bash/pwsh steps\ndirectly. The JS wrapper was only reading inputs and shelling out to\ncurl/PowerShell, so no Node.js runtime or npm packages are needed.\n\n- Convert action.yml to `using: composite` with bash and pwsh steps\n- Use env vars for inpu\n[…]\n.json\n- Remove vendored node_modules (200+ files: @actions/core, @actions/exec, undici, etc.)\n- Add .gitignore to prevent node_modules being committed again\n\nCall interface is unchanged for consumers.",
          "is_bot": false,
          "headline": "Reimplement as composite action, removing Node.js dependencies (#42)",
          "author_name": "Dan Webb",
          "author_login": "damacus",
          "committed_at": "2026-02-18T22:43:28Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "d6a80840653a3d71d31d5842a7d22d1ce9025d85",
          "body": "Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore(deps): update actions/checkout action to v6 (#37)",
          "author_name": "renovate[bot]",
          "author_login": "renovate[bot]",
          "committed_at": "2026-02-18T22:35:24Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "30217a7e2e884805ff93d9b9d3a3dcf9e652d6ed",
          "body": "…tall\n\n- Default chef-workstation installs to 21.6.497 (last version with\n  test-kitchen 2.x); later versions bundle test-kitchen 3.x which has\n  breaking changes. Users can pass version: latest to opt in to newest.\n- Replace 4 sequential exec calls (curl/chmod/run/rm) with a single\n  piped call, el\n[…]\n@actions/exec to v3.0.0; fixes two moderate\n  undici CVEs in the transitive @actions/http-client dependency\n- Remove unnecessary 'os' npm package (Node.js built-in)\n- Fix var declarations to const/let",
          "is_bot": false,
          "headline": "Pin chef-workstation to 21.6.497, update deps, and speed up Linux ins…",
          "author_name": "Dan Webb",
          "author_login": "damacus",
          "committed_at": "2026-02-18T22:33:40Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "7bb3b3d73e3495589eac4880759c8eacc8f488e3",
          "body": "Bumps [undici](https://github.com/nodejs/undici) from 5.28.4 to 5.28.5.\n- [Release notes](https://github.com/nodejs/undici/releases)\n- [Commits](https://github.com/nodejs/undici/compare/v5.28.4...v5.28.5)\n\n---\nupdated-dependencies:\n- dependency-name: undici\n  dependency-type: indirect\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "Bump undici from 5.28.4 to 5.28.5 (#32)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2025-04-23T03:26:09Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "776a917c09d87c381d1d5342f83cd554223fa49c",
          "body": "Signed-off-by: Dan Webb <dan.webb@damacus.io>",
          "is_bot": false,
          "headline": "Update deps (#31)",
          "author_name": "Dan Webb",
          "author_login": "damacus",
          "committed_at": "2024-12-04T13:43:36Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "d41f8dde8642d5cd05abefa333fbf2784cff830c",
          "body": "Signed-off-by: Dan Webb <dan.webb@damacus.io>",
          "is_bot": false,
          "headline": "Update to Node20 and update vendor directory (#27)",
          "author_name": "Dan Webb",
          "author_login": "damacus",
          "committed_at": "2024-01-31T23:01:37Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "5ba295bce865e3f97a18f934b07bfecb308627e9",
          "body": "Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "fix(deps): update dependency @actions/exec to v1.1.1 (#24)",
          "author_name": "renovate[bot]",
          "author_login": "renovate[bot]",
          "committed_at": "2023-09-29T14:31:33Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "7994870ea50d8b6cf4fb68a3563557d72b4258ac",
          "body": "Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "fix(deps): update dependency @actions/core to v1.10.1 (#26)",
          "author_name": "renovate[bot]",
          "author_login": "renovate[bot]",
          "committed_at": "2023-09-29T14:31:13Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "2d6044ea069f2b91dd7110e269259662c21740bc",
          "body": "Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore(deps): update actions/checkout action to v4 (#25)",
          "author_name": "renovate[bot]",
          "author_login": "renovate[bot]",
          "committed_at": "2023-09-08T01:23:00Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "7b7cfabd035c2f3fb8e7c66282aac1124ee74fb1",
          "body": "Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>\r\nCo-authored-by: Dan Webb <dan.webb@damacus.io>",
          "is_bot": true,
          "headline": "chore(deps): add renovate.json (#21)",
          "author_name": "renovate[bot]",
          "author_login": "renovate[bot]",
          "committed_at": "2023-02-08T16:13:03Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "dcd22c7bb33800d5bc866604696955b597a99c62",
          "body": "Signed-off-by: Jason Field <jason@avon-lea.co.uk>",
          "is_bot": false,
          "headline": "chore(dependabot): configure with vendoring",
          "author_name": "Jason Field",
          "author_login": "xorima",
          "committed_at": "2022-11-12T04:17:30Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "b485c56cf3d982ea10a69b1f3dfdfb3cf7c985e3",
          "body": "* fix(action): use Node 16 rather than 12\r\n\r\n* fix(deprecations): update npm for vulnerable packages",
          "is_bot": false,
          "headline": "Switch to Node.js 16, update dependencies (#20)",
          "author_name": "Chris Minton",
          "author_login": "chrisminton",
          "committed_at": "2022-10-19T13:21:55Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "1598b2292d6a1811a05b0c8cfe71f0716000db96",
          "body": "* Update node_modules fixing security vulnerabilities\r\n* Require 1.2.6 of actions/core\r\n\r\nSigned-off-by: Dan Webb <dan.webb@damacus.io>",
          "is_bot": false,
          "headline": "Update node_modules fixing security vulnerabilities (#16)",
          "author_name": "Dan Webb",
          "author_login": "damacus",
          "committed_at": "2021-12-14T10:09:13Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "2925c8f7acc2828e47aa2e2d17f1e8d5f34063d8",
          "body": "This should make CI happier\r\n\r\nSigned-off-by: Dan Webb <dan.webb@damacus.io>",
          "is_bot": false,
          "headline": "Use standard .mdlrc taken from Sous-Chefs (#17)",
          "author_name": "Dan Webb",
          "author_login": "damacus",
          "committed_at": "2021-12-14T10:06:25Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "4ddf3eb3a860209039eb0f73f5c7bb1f76113862",
          "body": "Github has deprecated manually modifying the PATH with `::add-path::`:\r\n(https://github.blog/changelog/2020-10-01-github-actions-deprecating-set-env-and-add-path-commands/)\r\n\r\nThis bumps the version and commits the new vendored package.\r\n\r\nSigned-off-by: Robert Detjens <detjensrobert@osuosl.org>",
          "is_bot": false,
          "headline": "Update @actions/core to v1.2.6 to fix path deprecations (#15)",
          "author_name": "Robert Detjens",
          "author_login": "detjensrobert",
          "committed_at": "2021-08-06T09:12:23Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "dbdedef45af74835d5cd030564bcf4f039bcd2ce",
          "body": null,
          "is_bot": false,
          "headline": "Update README.md (#14)",
          "author_name": "Marcin Żelasko",
          "author_login": "zelaskov",
          "committed_at": "2021-08-04T09:24:34Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "892e71ced97655ac933e24700a8257f143cbb270",
          "body": null,
          "is_bot": false,
          "headline": "change actions to main",
          "author_name": "Jason Field",
          "author_login": "xorima",
          "committed_at": "2021-07-29T09:14:25Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "777193262134c27803e5567f816863c924196c57",
          "body": null,
          "is_bot": false,
          "headline": "Update generic-linters.yml",
          "author_name": "Jason Field",
          "author_login": "xorima",
          "committed_at": "2021-07-29T09:14:06Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "d49d29b1c6e694204374ba79ce23e5e66db208a1",
          "body": "Small typo in link to chef-workstation",
          "is_bot": false,
          "headline": "typo: workstation (#12)",
          "author_name": "Dayne Broderson",
          "author_login": "dayne",
          "committed_at": "2021-06-04T08:52:21Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "f4988c2b735c9af0ee838a7e3c2c8411dfcba811",
          "body": "Co-authored-by: Jason Field <4923914+Xorima@users.noreply.github.com>",
          "is_bot": false,
          "headline": "Add examples for installing InSpec (#7)",
          "author_name": "Dan Webb",
          "author_login": "damacus",
          "committed_at": "2020-07-10T15:56:06Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "e2b9617b091ee7d905078f288aeb657031085d5e",
          "body": null,
          "is_bot": false,
          "headline": "Update README.md",
          "author_name": "Jason Field",
          "author_login": "xorima",
          "committed_at": "2020-07-10T14:08:02Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "26c6c7135e23dafc0937bd1e3c4659f9fd105fe7",
          "body": null,
          "is_bot": false,
          "headline": "Update README.md",
          "author_name": "Jason Field",
          "author_login": "xorima",
          "committed_at": "2020-07-10T13:52:40Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "b9b7da68d8d2958d24d284991166f6855b8c06b7",
          "body": null,
          "is_bot": false,
          "headline": "Generic Linters build badge",
          "author_name": "Jason Field",
          "author_login": "xorima",
          "committed_at": "2020-05-22T12:54:46Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "22b8188b88783ed9e823f084a18358a7e1dcddc7",
          "body": "- Adds Markdownlint\r\n- Adds yamllint",
          "is_bot": false,
          "headline": "Add generic linters (#5)",
          "author_name": "Jason Field",
          "author_login": "xorima",
          "committed_at": "2020-05-22T12:48:07Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "7734c1bcc9c37bf4f36bce6cca0608b004160633",
          "body": "* Add windows path\r\n\r\n* add all paths\r\n\r\n* Update index.js\r\n\r\nCo-authored-by: Jeff Brimager <jbrimager@gmail.com>\r\n\r\nCo-authored-by: Jeff Brimager <jbrimager@gmail.com>",
          "is_bot": false,
          "headline": "Add windows path (#4)",
          "author_name": "Jason Field",
          "author_login": "xorima",
          "committed_at": "2020-05-10T09:38:02Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "b9f9432c1cea579945f8653fe900f2d1f1b16822",
          "body": null,
          "is_bot": false,
          "headline": "Set download icon",
          "author_name": "Jason Field",
          "author_login": "xorima",
          "committed_at": "2020-04-19T09:58:09Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "cd4176795718cf441e43c333a0f559abf4d81ec0",
          "body": null,
          "is_bot": false,
          "headline": "Windows support (#3)",
          "author_name": "Jason Field",
          "author_login": "xorima",
          "committed_at": "2020-04-19T09:56:22Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "8fd738c919e0693db339b68a10ccafcaf0284c8b",
          "body": "Typo in uses statement for chef-install",
          "is_bot": false,
          "headline": "Merge pull request #2 from ocoster-is/patch-1",
          "author_name": "Jason Field",
          "author_login": "xorima",
          "committed_at": "2020-03-25T18:59:53Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "ef62c28ba63d6b71046c832d3b5012b6ff741de5",
          "body": null,
          "is_bot": false,
          "headline": "Typo in uses statement for chef-install",
          "author_name": "ocoster-is",
          "author_login": "ocoster-is",
          "committed_at": "2020-03-25T14:48:44Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "0638058bd37cc5465b5dcd38355eee8a24900789",
          "body": null,
          "is_bot": false,
          "headline": "Cleanup",
          "author_name": "Jason Field",
          "author_login": "xorima",
          "committed_at": "2020-01-04T22:30:59Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "d06409e85d138d9796e9551f61ec7c06ca6d4a78",
          "body": null,
          "is_bot": false,
          "headline": "Cleanup",
          "author_name": "Jason Field",
          "author_login": "xorima",
          "committed_at": "2020-01-04T22:28:15Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "477c8fef2671603d89ded80b0f06ea73599cf50d",
          "body": null,
          "is_bot": false,
          "headline": "Initial Creation (#1)",
          "author_name": "Xorima",
          "author_login": "xorima",
          "committed_at": "2020-01-04T22:16:38Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "bea5c640aeb2834688f7983fd4b3b4e3fdcd86ce",
          "body": null,
          "is_bot": false,
          "headline": "Initial commit",
          "author_name": "Xorima",
          "author_login": "xorima",
          "committed_at": "2020-01-04T14:22:39Z",
          "body_truncated": false,
          "is_coding_agent": false
        }
      ],
      "releases_count": 14,
      "commits_last_year": 5,
      "latest_release_at": "2026-05-14T14:09:23Z",
      "latest_release_tag": "6.0.0",
      "releases_from_tags": false,
      "days_since_last_push": 43,
      "active_weeks_last_year": 2,
      "days_since_latest_release": 78,
      "mean_days_between_releases": 179.1
    },
    "community": {
      "has_readme": true,
      "has_license": true,
      "has_description": true,
      "has_contributing": true,
      "health_percentage": 75,
      "has_issue_template": false,
      "has_code_of_conduct": true,
      "has_pull_request_template": true
    },
    "ecosystem": {
      "packages": []
    },
    "popularity": {
      "forks": 8,
      "stars": 7,
      "watchers": 1,
      "fork_history": {
        "days": [
          {
            "date": "2020-05-05",
            "count": 1
          },
          {
            "date": "2020-05-07",
            "count": 1
          },
          {
            "date": "2020-07-10",
            "count": 1
          },
          {
            "date": "2021-06-03",
            "count": 1
          },
          {
            "date": "2022-10-18",
            "count": 1
          },
          {
            "date": "2024-10-15",
            "count": 1
          },
          {
            "date": "2025-05-29",
            "count": 1
          },
          {
            "date": "2026-04-23",
            "count": 1
          }
        ],
        "complete": true,
        "collected": 8,
        "total_forks": 8
      },
      "star_history": null,
      "open_issues_and_prs": 2
    },
    "ai_readiness": {
      "has_nix": false,
      "example_dirs": [],
      "has_llms_txt": false,
      "has_dockerfile": false,
      "has_mcp_signal": false,
      "bootstrap_files": [],
      "api_schema_files": [],
      "has_devcontainer": false,
      "typecheck_configs": [],
      "toolchain_manifests": [],
      "largest_source_bytes": null,
      "source_files_sampled": 0,
      "oversized_source_files": 0,
      "agent_instruction_files": [],
      "agent_instruction_max_bytes": null
    },
    "dependencies": {
      "manifests": [],
      "advisories": {
        "error": "No resolved dependencies to assess",
        "scope": "repository_graph",
        "source": null,
        "findings": [],
        "collected": false,
        "malicious": [],
        "truncated": false,
        "by_severity": {},
        "advisory_count": 0,
        "affected_count": 0,
        "assessed_count": 0,
        "malicious_count": 0,
        "assessed_package": null,
        "unassessed_count": 0,
        "direct_affected_count": 0
      },
      "ecosystems": [],
      "dependencies": [],
      "all_dependencies": {
        "error": null,
        "source": "github-sbom",
        "packages": [],
        "collected": true,
        "truncated": false,
        "total_count": 0,
        "direct_count": 0,
        "indirect_count": 0
      }
    },
    "maintainership": {
      "issues": {
        "open_prs": 1,
        "merged_prs": 24,
        "open_issues": 1,
        "closed_ratio": 0.667,
        "closed_issues": 2,
        "closed_unmerged_prs": 18
      },
      "bus_factor": 1,
      "bot_contributors": 2,
      "top_contributors": [
        {
          "type": "User",
          "login": "xorima",
          "commits": 15,
          "avatar_url": "https://avatars.githubusercontent.com/u/4923914?v=4"
        },
        {
          "type": "User",
          "login": "damacus",
          "commits": 9,
          "avatar_url": "https://avatars.githubusercontent.com/u/40786?v=4"
        },
        {
          "type": "User",
          "login": "chrisminton",
          "commits": 1,
          "avatar_url": "https://avatars.githubusercontent.com/u/16387219?v=4"
        },
        {
          "type": "User",
          "login": "dayne",
          "commits": 1,
          "avatar_url": "https://avatars.githubusercontent.com/u/3921?v=4"
        },
        {
          "type": "User",
          "login": "zelaskov",
          "commits": 1,
          "avatar_url": "https://avatars.githubusercontent.com/u/46314449?v=4"
        },
        {
          "type": "User",
          "login": "detjensrobert",
          "commits": 1,
          "avatar_url": "https://avatars.githubusercontent.com/u/12376078?v=4"
        },
        {
          "type": "User",
          "login": "ocoster-is",
          "commits": 1,
          "avatar_url": "https://avatars.githubusercontent.com/u/59826626?v=4"
        }
      ],
      "contributors_sampled": 7,
      "top_contributor_share": 0.517
    },
    "quality_signals": {
      "has_ci": true,
      "has_tests": false,
      "ci_workflows": [
        "generic-linters.yml"
      ],
      "has_docs_dir": false,
      "linter_configs": [],
      "has_editorconfig": false,
      "has_linter_config": false,
      "has_precommit_config": false
    },
    "security_signals": {
      "lockfiles": [],
      "scorecard": {
        "checks": [
          {
            "name": "Binary-Artifacts",
            "score": 10,
            "reason": "no binaries found in the repo",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#binary-artifacts"
          },
          {
            "name": "Branch-Protection",
            "score": null,
            "reason": "internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#branch-protection"
          },
          {
            "name": "CI-Tests",
            "score": 1,
            "reason": "3 out of 21 merged PRs checked by a CI test -- score normalized to 1",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#ci-tests"
          },
          {
            "name": "CII-Best-Practices",
            "score": 0,
            "reason": "no effort to earn an OpenSSF best practices badge detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#cii-best-practices"
          },
          {
            "name": "Code-Review",
            "score": 2,
            "reason": "Found 6/24 approved changesets -- score normalized to 2",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#code-review"
          },
          {
            "name": "Contributors",
            "score": 10,
            "reason": "project has 6 contributing companies or organizations",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#contributors"
          },
          {
            "name": "Dangerous-Workflow",
            "score": 10,
            "reason": "no dangerous workflow patterns detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dangerous-workflow"
          },
          {
            "name": "Dependency-Update-Tool",
            "score": 10,
            "reason": "update tool detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dependency-update-tool"
          },
          {
            "name": "Fuzzing",
            "score": 0,
            "reason": "project is not fuzzed",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#fuzzing"
          },
          {
            "name": "License",
            "score": 10,
            "reason": "license file detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#license"
          },
          {
            "name": "Maintained",
            "score": 0,
            "reason": "1 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#maintained"
          },
          {
            "name": "Packaging",
            "score": null,
            "reason": "packaging workflow not detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#packaging"
          },
          {
            "name": "Pinned-Dependencies",
            "score": 0,
            "reason": "dependency not pinned by hash detected -- score normalized to 0",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#pinned-dependencies"
          },
          {
            "name": "SAST",
            "score": 0,
            "reason": "SAST tool is not run on all commits -- score normalized to 0",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#sast"
          },
          {
            "name": "Security-Policy",
            "score": 0,
            "reason": "security policy file not detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#security-policy"
          },
          {
            "name": "Signed-Releases",
            "score": null,
            "reason": "no releases found",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#signed-releases"
          },
          {
            "name": "Token-Permissions",
            "score": 0,
            "reason": "detected GitHub workflow tokens with excessive permissions",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#token-permissions"
          },
          {
            "name": "Vulnerabilities",
            "score": 10,
            "reason": "0 existing vulnerabilities detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#vulnerabilities"
          }
        ],
        "commit": "f3b35943a257c25f3ca69e3b773fa4e0e99b58d6",
        "ran_at": "2026-08-01T02:38:42Z",
        "aggregate_score": 4.6,
        "scorecard_version": "v5.5.0"
      },
      "has_codeql_workflow": false,
      "has_security_policy": false,
      "has_dependabot_config": false
    },
    "contribution_flow": {
      "collected": true,
      "ci_last_run_at": "2026-05-13T23:05:06Z",
      "oldest_open_prs": [
        {
          "number": 45,
          "created_at": "2026-06-18T20:40:08Z",
          "last_comment_at": null,
          "last_comment_author": null
        }
      ],
      "last_merged_pr_at": "2026-05-13T23:04:50Z",
      "ci_last_conclusion": "SUCCESS",
      "oldest_open_issues": [
        {
          "number": 46,
          "created_at": "2026-07-30T23:21:35Z",
          "last_comment_at": null,
          "last_comment_author": null
        }
      ]
    }
  },
  "config": {
    "disabled_metrics": [],
    "disabled_categories": [],
    "disabled_components": {}
  },
  "source": {
    "url": "https://github.com/actionshub/chef-install",
    "host": "github.com",
    "name": "chef-install",
    "owner": "actionshub"
  },
  "metrics": {
    "overall": {
      "key": "overall",
      "band": "at_risk",
      "name": "Overall health",
      "note": null,
      "notes": [],
      "value": 49,
      "inputs": {
        "security": 46,
        "vitality": 49,
        "community": 54,
        "governance": 52,
        "engineering": 42
      },
      "components": []
    },
    "categories": [
      {
        "key": "vitality",
        "band": "at_risk",
        "name": "Vitality",
        "value": 49,
        "weight": 0.22,
        "metrics": [
          {
            "key": "development_activity",
            "band": "critical",
            "name": "Development activity",
            "note": null,
            "notes": [],
            "value": 26,
            "inputs": {
              "commits_last_year": 5,
              "human_commit_share": 0.829,
              "days_since_last_push": 43,
              "active_weeks_last_year": 2
            },
            "components": [
              {
                "key": "push_recency",
                "name": "Push recency",
                "detail": "last push 43 days ago",
                "points": 18,
                "status": "partial",
                "details": [
                  {
                    "code": "push_recency",
                    "params": {
                      "days": 43
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "commit_cadence",
                "name": "Commit cadence",
                "detail": "2/52 weeks with commits",
                "points": 1.4,
                "status": "partial",
                "details": [
                  {
                    "code": "commit_cadence_weeks",
                    "params": {
                      "weeks": 2
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "commit_volume",
                "name": "Commit volume",
                "detail": "5 commits in the last year",
                "points": 7,
                "status": "partial",
                "details": [
                  {
                    "code": "commits_last_year",
                    "params": {
                      "count": 5
                    }
                  }
                ],
                "max_points": 18
              },
              {
                "key": "openssf_scorecard_maintained",
                "name": "OpenSSF Scorecard: Maintained",
                "detail": "1 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "release_discipline",
            "band": "good",
            "name": "Release discipline",
            "note": "Excluded from scoring (no data or not applicable): OpenSSF Scorecard: Signed-Releases. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "openssf_scorecard_signed_releases"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 84,
            "inputs": {
              "releases_count": 14,
              "latest_release_tag": "6.0.0",
              "releases_from_tags": false,
              "days_since_latest_release": 78,
              "mean_days_between_releases": 179.1
            },
            "components": [
              {
                "key": "ships_releases",
                "name": "Ships releases",
                "detail": "14 releases published",
                "points": 27,
                "status": "met",
                "details": [
                  {
                    "code": "releases_published",
                    "params": {
                      "count": 14
                    }
                  }
                ],
                "max_points": 27
              },
              {
                "key": "release_recency",
                "name": "Release recency",
                "detail": "latest release 78 days ago",
                "points": 36,
                "status": "met",
                "details": [
                  {
                    "code": "release_recency",
                    "params": {
                      "days": 78
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "release_cadence",
                "name": "Release cadence",
                "detail": "a release every ~179.1 days",
                "points": 12.6,
                "status": "partial",
                "details": [
                  {
                    "code": "release_cadence",
                    "params": {
                      "gap": 179.1
                    }
                  }
                ],
                "max_points": 27
              },
              {
                "key": "openssf_scorecard_signed_releases",
                "name": "OpenSSF Scorecard: Signed-Releases",
                "detail": "no releases found",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 10
              }
            ]
          },
          {
            "key": "abandonment",
            "band": "excellent",
            "name": "Abandonment",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "cap": null,
              "state": "maintained",
              "guards": [],
              "signals": [],
              "red_flag": false,
              "multiplier_pct": 100,
              "declared_reason": null,
              "unverified_reason": null,
              "unanswered_open_prs": null,
              "unanswered_open_issues": null,
              "days_since_last_merged_pr": null,
              "days_since_last_human_commit": 79,
              "days_since_last_human_commit_is_floor": false
            },
            "components": [
              {
                "key": "project_is_still_maintained",
                "name": "Project is still maintained",
                "detail": "last human commit 79 days ago",
                "points": 100,
                "status": "met",
                "details": [
                  {
                    "code": "abandonment_maintained",
                    "params": {
                      "days": 79
                    }
                  }
                ],
                "max_points": 100
              }
            ]
          }
        ],
        "description": "Is the project alive — is code being written and are releases shipping?"
      },
      {
        "key": "community",
        "band": "moderate",
        "name": "Community & Adoption",
        "value": 54,
        "weight": 0.18,
        "metrics": [
          {
            "key": "popularity",
            "band": "critical",
            "name": "Popularity & adoption",
            "note": null,
            "notes": [],
            "value": 20,
            "inputs": {
              "forks": 8,
              "stars": 7,
              "watchers": 1,
              "growth_state": "unverified",
              "growth_factor_pct": 100,
              "growth_unverified_reason": "no_history"
            },
            "components": [
              {
                "key": "stars",
                "name": "Stars",
                "detail": "7 stars",
                "points": 12.6,
                "status": "partial",
                "details": [
                  {
                    "code": "stars",
                    "params": {
                      "count": 7
                    }
                  }
                ],
                "max_points": 60
              },
              {
                "key": "forks",
                "name": "Forks",
                "detail": "8 forks",
                "points": 7,
                "status": "partial",
                "details": [
                  {
                    "code": "forks",
                    "params": {
                      "count": 8
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "watchers",
                "name": "Watchers",
                "detail": "1 watchers",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "watchers",
                    "params": {
                      "count": 1
                    }
                  }
                ],
                "max_points": 15
              }
            ]
          },
          {
            "key": "community_health",
            "band": "excellent",
            "name": "Community health",
            "note": null,
            "notes": [],
            "value": 92,
            "inputs": {
              "has_readme": true,
              "has_license": true,
              "has_contributing": true,
              "has_issue_template": false,
              "has_code_of_conduct": true,
              "has_pull_request_template": true
            },
            "components": [
              {
                "key": "readme",
                "name": "README",
                "detail": null,
                "points": 22.5,
                "status": "met",
                "details": [],
                "max_points": 22.5
              },
              {
                "key": "license",
                "name": "License",
                "detail": "recognized license (Apache-2.0)",
                "points": 22.5,
                "status": "met",
                "details": [
                  {
                    "code": "license_standard",
                    "params": {}
                  },
                  {
                    "code": "license_spdx",
                    "params": {
                      "spdx": "Apache-2.0"
                    }
                  }
                ],
                "max_points": 22.5
              },
              {
                "key": "contributing_guide",
                "name": "CONTRIBUTING guide",
                "detail": null,
                "points": 18,
                "status": "met",
                "details": [],
                "max_points": 18
              },
              {
                "key": "code_of_conduct",
                "name": "Code of conduct",
                "detail": null,
                "points": 13.5,
                "status": "met",
                "details": [],
                "max_points": 13.5
              },
              {
                "key": "issue_template",
                "name": "Issue template",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.2
              },
              {
                "key": "pr_template",
                "name": "PR template",
                "detail": null,
                "points": 6.3,
                "status": "met",
                "details": [],
                "max_points": 6.3
              }
            ]
          }
        ],
        "description": "Does the project have users, downloads, attention, and a welcoming setup for contributors?"
      },
      {
        "key": "governance",
        "band": "moderate",
        "name": "Sustainability & Governance",
        "value": 52,
        "weight": 0.24,
        "metrics": [
          {
            "key": "maintainer_resilience",
            "band": "at_risk",
            "name": "Maintainer resilience (bus factor)",
            "note": null,
            "notes": [],
            "value": 39,
            "inputs": {
              "bus_factor": 1,
              "contributors_sampled": 7,
              "top_contributor_share": 0.517
            },
            "components": [
              {
                "key": "bus_factor",
                "name": "Bus factor",
                "detail": "1 contributor(s) cover half of all commits",
                "points": 9,
                "status": "partial",
                "details": [
                  {
                    "code": "bus_factor",
                    "params": {
                      "count": 1
                    }
                  }
                ],
                "max_points": 54
              },
              {
                "key": "commit_distribution",
                "name": "Commit distribution",
                "detail": "top contributor authored 52% of commits",
                "points": 10.9,
                "status": "partial",
                "details": [
                  {
                    "code": "top_contributor_share",
                    "params": {
                      "share": 52
                    }
                  }
                ],
                "max_points": 22.5
              },
              {
                "key": "contributor_breadth",
                "name": "Contributor breadth",
                "detail": "7 contributors",
                "points": 9.5,
                "status": "partial",
                "details": [
                  {
                    "code": "contributors_sampled",
                    "params": {
                      "count": 7
                    }
                  }
                ],
                "max_points": 13.5
              },
              {
                "key": "openssf_scorecard_contributors",
                "name": "OpenSSF Scorecard: Contributors",
                "detail": "project has 6 contributing companies or organizations",
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "responsiveness",
            "band": "moderate",
            "name": "Issue & PR responsiveness",
            "note": null,
            "notes": [],
            "value": 56,
            "inputs": {
              "merged_prs": 24,
              "open_issues": 1,
              "closed_issues": 2,
              "issue_closed_ratio": 0.667,
              "closed_unmerged_prs": 18
            },
            "components": [
              {
                "key": "issue_resolution",
                "name": "Issue resolution",
                "detail": "67% of issues closed",
                "points": 31.2,
                "status": "partial",
                "details": [
                  {
                    "code": "issues_closed_share",
                    "params": {
                      "share": 67
                    }
                  }
                ],
                "max_points": 46.75
              },
              {
                "key": "pr_acceptance",
                "name": "PR acceptance",
                "detail": "24/42 decided PRs merged",
                "points": 21.9,
                "status": "partial",
                "details": [
                  {
                    "code": "decided_prs_merged",
                    "params": {
                      "merged": 24,
                      "decided": 42
                    }
                  }
                ],
                "max_points": 38.25
              },
              {
                "key": "openssf_scorecard_code_review",
                "name": "OpenSSF Scorecard: Code-Review",
                "detail": "Found 6/24 approved changesets -- score normalized to 2",
                "points": 3,
                "status": "partial",
                "details": [],
                "max_points": 15
              }
            ]
          },
          {
            "key": "stewardship",
            "band": "moderate",
            "name": "Ownership & stewardship",
            "note": null,
            "notes": [],
            "value": 64,
            "inputs": {
              "followers": 33,
              "owner_type": "Organization",
              "is_verified": null,
              "owner_login": "actionshub",
              "public_repos": 27,
              "account_age_days": 2401
            },
            "components": [
              {
                "key": "ownership_backing",
                "name": "Ownership backing",
                "detail": "organization-owned",
                "points": 30,
                "status": "met",
                "details": [
                  {
                    "code": "owner_organization",
                    "params": {}
                  }
                ],
                "max_points": 30
              },
              {
                "key": "verified_domain",
                "name": "Verified domain",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 20
              },
              {
                "key": "owner_reach",
                "name": "Owner reach",
                "detail": "33 followers of actionshub",
                "points": 11,
                "status": "partial",
                "details": [
                  {
                    "code": "owner_followers",
                    "params": {
                      "count": 33,
                      "login": "actionshub"
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "track_record",
                "name": "Track record",
                "detail": "27 public repos, account ~6 yr old",
                "points": 22.5,
                "status": "partial",
                "details": [
                  {
                    "code": "public_repos",
                    "params": {
                      "count": 27
                    }
                  },
                  {
                    "code": "account_age_years",
                    "params": {
                      "years": 6
                    }
                  }
                ],
                "max_points": 25
              }
            ]
          }
        ],
        "description": "Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?"
      },
      {
        "key": "engineering",
        "band": "at_risk",
        "name": "Engineering Quality",
        "value": 42,
        "weight": 0.2,
        "metrics": [
          {
            "key": "engineering_practices",
            "band": "critical",
            "name": "Engineering practices",
            "note": null,
            "notes": [],
            "value": 26,
            "inputs": {
              "has_ci": true,
              "has_tests": false,
              "has_editorconfig": false,
              "has_linter_config": false,
              "has_precommit_config": false
            },
            "components": [
              {
                "key": "ci_workflows",
                "name": "CI workflows",
                "detail": "1 workflow(s)",
                "points": 24,
                "status": "met",
                "details": [
                  {
                    "code": "ci_workflows",
                    "params": {
                      "count": 1
                    }
                  }
                ],
                "max_points": 24
              },
              {
                "key": "tests_present",
                "name": "Tests present",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 24
              },
              {
                "key": "linter_config",
                "name": "Linter config",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 16
              },
              {
                "key": "pre_commit_hooks",
                "name": "Pre-commit hooks",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 9.6
              },
              {
                "key": "editorconfig",
                "name": ".editorconfig",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 6.4
              },
              {
                "key": "openssf_scorecard_ci_tests",
                "name": "OpenSSF Scorecard: CI-Tests",
                "detail": "3 out of 21 merged PRs checked by a CI test -- score normalized to 1",
                "points": 2,
                "status": "partial",
                "details": [],
                "max_points": 20
              }
            ]
          },
          {
            "key": "documentation",
            "band": "moderate",
            "name": "Documentation",
            "note": null,
            "notes": [],
            "value": 65,
            "inputs": {
              "topics": [
                "action",
                "github-action",
                "ci",
                "chef-install",
                "terraform-managed"
              ],
              "has_wiki": false,
              "homepage": "https://github.com/marketplace/actions/actionshub-chef-install",
              "has_readme": true,
              "has_docs_dir": false,
              "has_description": true
            },
            "components": [
              {
                "key": "readme",
                "name": "README",
                "detail": null,
                "points": 30,
                "status": "met",
                "details": [],
                "max_points": 30
              },
              {
                "key": "documentation_directory",
                "name": "Documentation directory",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 25
              },
              {
                "key": "documentation_homepage_site",
                "name": "Documentation / homepage site",
                "detail": "https://github.com/marketplace/actions/actionshub-chef-install",
                "points": 15,
                "status": "met",
                "details": [],
                "max_points": 15
              },
              {
                "key": "repository_description",
                "name": "Repository description",
                "detail": null,
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              },
              {
                "key": "topics",
                "name": "Topics",
                "detail": "5 topics",
                "points": 10,
                "status": "met",
                "details": [
                  {
                    "code": "topics_count",
                    "params": {
                      "count": 5
                    }
                  }
                ],
                "max_points": 10
              },
              {
                "key": "wiki",
                "name": "Wiki",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              }
            ]
          }
        ],
        "description": "Are baseline engineering and documentation practices in place?"
      },
      {
        "key": "security",
        "band": "at_risk",
        "name": "Security",
        "value": 46,
        "weight": 0.16,
        "metrics": [
          {
            "key": "security_posture",
            "band": "at_risk",
            "name": "Security posture",
            "note": "Excluded from scoring (no data or not applicable): Branch-Protection, Packaging, Signed-Releases. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "branch_protection",
                    "packaging",
                    "signed_releases"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 46,
            "inputs": {
              "source": "openssf_scorecard",
              "checks_evaluated": 15,
              "scorecard_version": "v5.5.0",
              "checks_inconclusive": 3,
              "scorecard_aggregate": 4.6
            },
            "components": [
              {
                "key": "binary_artifacts",
                "name": "Binary-Artifacts",
                "detail": "no binaries found in the repo",
                "points": 7.5,
                "status": "met",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "branch_protection",
                "name": "Branch-Protection",
                "detail": "internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 7.5
              },
              {
                "key": "ci_tests",
                "name": "CI-Tests",
                "detail": "3 out of 21 merged PRs checked by a CI test -- score normalized to 1",
                "points": 0.2,
                "status": "partial",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "cii_best_practices",
                "name": "CII-Best-Practices",
                "detail": "no effort to earn an OpenSSF best practices badge detected",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "code_review",
                "name": "Code-Review",
                "detail": "Found 6/24 approved changesets -- score normalized to 2",
                "points": 1.5,
                "status": "partial",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "contributors",
                "name": "Contributors",
                "detail": "project has 6 contributing companies or organizations",
                "points": 2.5,
                "status": "met",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "dangerous_workflow",
                "name": "Dangerous-Workflow",
                "detail": "no dangerous workflow patterns detected",
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              },
              {
                "key": "dependency_update_tool",
                "name": "Dependency-Update-Tool",
                "detail": "update tool detected",
                "points": 7.5,
                "status": "met",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "fuzzing",
                "name": "Fuzzing",
                "detail": "project is not fuzzed",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 5
              },
              {
                "key": "license",
                "name": "License",
                "detail": "license file detected",
                "points": 2.5,
                "status": "met",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "maintained",
                "name": "Maintained",
                "detail": "1 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "packaging",
                "name": "Packaging",
                "detail": "packaging workflow not detected",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 5
              },
              {
                "key": "pinned_dependencies",
                "name": "Pinned-Dependencies",
                "detail": "dependency not pinned by hash detected -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 5
              },
              {
                "key": "sast",
                "name": "SAST",
                "detail": "SAST tool is not run on all commits -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 5
              },
              {
                "key": "security_policy",
                "name": "Security-Policy",
                "detail": "security policy file not detected",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 5
              },
              {
                "key": "signed_releases",
                "name": "Signed-Releases",
                "detail": "no releases found",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 7.5
              },
              {
                "key": "token_permissions",
                "name": "Token-Permissions",
                "detail": "detected GitHub workflow tokens with excessive permissions",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "vulnerabilities",
                "name": "Vulnerabilities",
                "detail": "0 existing vulnerabilities detected",
                "points": 7.5,
                "status": "met",
                "details": [],
                "max_points": 7.5
              }
            ]
          },
          {
            "key": "high_risk_jurisdiction_exposure",
            "band": "excellent",
            "name": "High-Risk Jurisdiction Exposure",
            "note": "Only high-confidence self-published location evidence affects this multiplier. Ambiguous matches are review-only; country evidence is not proof of nationality, citizenship, legal registration, malicious intent, or sanctions status.",
            "notes": [
              {
                "code": "jurisdiction_evidence_limits",
                "params": {}
              }
            ],
            "value": 100,
            "inputs": {
              "meaning": "self-published location evidence; not nationality or citizenship",
              "red_flag": false,
              "exposures": [],
              "policy_countries": [
                "Russia",
                "Iran",
                "North Korea"
              ],
              "review_only_matches": 0,
              "assessed_self_published_locations": 14
            },
            "components": [
              {
                "key": "policy_exposure_multiplier",
                "name": "Policy exposure multiplier",
                "detail": "no confirmed policy-scope location match",
                "points": 100,
                "status": "met",
                "details": [
                  {
                    "code": "jurisdiction_no_match",
                    "params": {}
                  }
                ],
                "max_points": 100
              }
            ]
          }
        ],
        "description": "Are visible security and supply-chain practices strong, with no malicious dependency and no unresolved high-risk jurisdiction exposure?"
      },
      {
        "key": "ai_readiness",
        "band": "critical",
        "name": "AI Readiness",
        "value": 19,
        "weight": 0,
        "metrics": [
          {
            "key": "ai_agent_context",
            "band": "at_risk",
            "name": "Agent context & guidance",
            "note": null,
            "notes": [],
            "value": 33,
            "inputs": {
              "has_llms_txt": false,
              "legible_history_share": 0.621,
              "agent_instruction_files": [],
              "agent_instruction_max_bytes": null
            },
            "components": [
              {
                "key": "agent_instructions",
                "name": "Agent instructions",
                "detail": "no CLAUDE.md / AGENTS.md / editor rules",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "no_agent_instructions",
                    "params": {}
                  }
                ],
                "max_points": 45
              },
              {
                "key": "machine_readable_docs_llms_txt",
                "name": "Machine-readable docs (llms.txt)",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 15
              },
              {
                "key": "legible_commit_history",
                "name": "Legible commit history",
                "detail": "18 of 29 human commits state their intent (structured subject or explanatory body)",
                "points": 33.1,
                "status": "partial",
                "details": [
                  {
                    "code": "legible_history",
                    "params": {
                      "legible": 18,
                      "sampled": 29
                    }
                  }
                ],
                "max_points": 40
              }
            ]
          },
          {
            "key": "ai_verify_loop",
            "band": "critical",
            "name": "Verify loop (build / test / typecheck)",
            "note": null,
            "notes": [],
            "value": 8,
            "inputs": {
              "has_nix": false,
              "has_tests": false,
              "lockfiles": [],
              "has_dockerfile": false,
              "typed_language": false,
              "bootstrap_files": [],
              "has_devcontainer": false,
              "has_linter_config": false,
              "typecheck_configs": [],
              "agent_commit_share": 0,
              "toolchain_manifests": [],
              "dependency_bot_commit_share": 0.171
            },
            "components": [
              {
                "key": "one_command_bootstrap",
                "name": "One-command bootstrap",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 18
              },
              {
                "key": "automated_tests",
                "name": "Automated tests",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 22
              },
              {
                "key": "lint_format_config",
                "name": "Lint / format config",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 11
              },
              {
                "key": "static_type_checking",
                "name": "Static type checking",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 11
              },
              {
                "key": "reproducible_environment",
                "name": "Reproducible environment",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              },
              {
                "key": "demonstrated_agent_practice",
                "name": "Demonstrated agent practice",
                "detail": "no agent-authored commits among the last 35",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "no_agent_authored_commits",
                    "params": {
                      "sampled": 35
                    }
                  }
                ],
                "max_points": 10
              },
              {
                "key": "automated_maintenance",
                "name": "Automated maintenance",
                "detail": "6 of the last 35 commits are automated dependency updates",
                "points": 8,
                "status": "met",
                "details": [
                  {
                    "code": "dependency_bot_commits",
                    "params": {
                      "count": 6,
                      "sampled": 35
                    }
                  }
                ],
                "max_points": 8
              },
              {
                "key": "openssf_scorecard_pinned_dependencies",
                "name": "OpenSSF Scorecard: Pinned-Dependencies",
                "detail": "dependency not pinned by hash detected -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              }
            ]
          }
        ],
        "description": "How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score."
      }
    ],
    "metrics_version": "1.13.0"
  },
  "warnings": [
    "Language breakdown unavailable",
    "Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token"
  ],
  "report_type": "repository",
  "generated_at": "2026-08-01T02:38:57.658765Z",
  "schema_version": "0.27.0",
  "badge_url": "https://raw.githubusercontent.com/inspect-software/badges/main/v1/a/actionshub/chef-install.svg",
  "full_name": "actionshub/chef-install",
  "license_state": "standard",
  "license_spdx": "Apache-2.0"
}

Bewertungen sind Signale, keine Garantien. Sie spiegeln öffentlich sichtbare Praxis auf GitHub wider — kein Code-Audit und keine Sicherheitsgarantie.

Fehlende Daten werden ausgeschlossen und die Gewichte neu normiert, nie als null bewertet. Die Methodik ist versioniert und offen: Metriken v1.13.0, Schema v0.27.0 — vollständige Methodik · Metriken-Wiki.

Wie ein einzelnes Ergebnis im Gesamtregister steht: aggregierte Statistiken.