Öffentliches Register
Software-GesundheitsberichtSchema 0.27.0 · Metriken 1.13.0 · 2026-07-28 20:05 UTC

aws / bedrock-agentcore-starter-toolkit

Python CLI toolkit for Amazon Bedrock AgentCore (legacy). For new projects, use the AgentCore CLI: https://github.com/aws/agentcore-cli

PythonApache-2.0★ 498 Sterne⑂ 157 Forksseit Juli 2025Auf GitHub ansehen ↗

aws/bedrock-agentcore-starter-toolkit erreicht einen Gesundheitsindex von 82 von 100 und liegt damit im Bereich Gut. Am stärksten schneidet es bei Vitality (92/100) ab, am schwächsten bei AI Readiness (53/100). Zuletzt heute aktualisiert. 6 Mitwirkende tragen den Großteil der jüngsten Arbeit.

82
gesamt / 100
Gut

Software-Gesundheitsindex

Metriken werden auf einer Skala von 1–100 in gewichtete Kategorien gruppiert. Der Gesamtwert beginnt als ihr Mittel; sobald öffentliche Evidenz die Richtlinie für Hochrisikojurisdiktionen auslöst, wird die Bewertung angepasst und erhält die Obergrenze 49 (Gefährdet). AI Readiness liegt außerhalb.

82
Exzellent85-100Vorbildlich; erfüllt im Wesentlichen alle geprüften Kriterien
Gut70-84Gesund; geringfügige Lücken
Mittel50-69Akzeptabel mit deutlichen Lücken; Überprüfung empfohlen
Gefährdet30-49Erhebliche Schwächen; eine Übernahme erfordert Vorsicht
Kritisch1-29Schwerwiegende Probleme (aufgegeben, nur ein Maintainer, keine Hygiene)
VitalitätCommunity &VerbreitungNachhaltigkeit &GovernanceEngineering-QualitätSicherheitAI Readiness

Bewertungsprofil

Jede Achse ist eine Kategorie. Die Form zählt mehr als der Durchschnitt — ein gesundes Projekt füllt die gesamte Fläche, während ein Profil aus Spitzen und Kratern bedeutet, dass Stärke in einer Dimension Risiken in einer anderen verdeckt.

Eigentümerschaft

Amazon Web ServicesOrganisation
16.189 Follower552 öffentliche Reposseit Aug. 2012

Dieses Repository wird von einer Organisation getragen — geteilte, rechenschaftspflichtige Trägerschaft, die jeden einzelnen Maintainer überdauern kann.

Paket-Ökosysteme

RegistryPaketVersionDownloads / MonatVersionenZuletzt veröffentlicht
PyPIbedrock-agentcore-starter-toolkit0.3.11-57vor 0 Tagen

Metriken nach Kategorie

Vitalität

Lebt das Projekt — wird Code geschrieben und werden Releases ausgeliefert?

92Exzellent · 22 % des Gesamtindex

Entwicklungsaktivität

93Exzellent
Wie die Bewertung erfolgt
36/36Push-Aktualität — letzter Push vor 0 Tagen
29.1/36Commit-Rhythmus — 42/52 Wochen mit Commits
18/18Commit-Volumen — 276 Commits im letzten Jahr
10/10OpenSSF Scorecard: Maintained — 24 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10
Verwendete Eingangsdaten
commits_last_year276
human_commit_share0,71
days_since_last_push0
active_weeks_last_year42

Release-Disziplin

90Exzellent
Wie die Bewertung erfolgt
27/27Liefert Releases aus — 56 Releases veröffentlicht
36/36Release-Aktualität — letztes Release vor 0 Tagen
27/27Release-Rhythmus — ein Release etwa alle 16,2 Tage
0/10OpenSSF Scorecard: Signed-Releases — Project has not signed or included provenance with any releases.
Verwendete Eingangsdaten
releases_count56
latest_release_tagv0.3.11
releases_from_tagsnein
days_since_latest_release0
mean_days_between_releases16,2

Community & Verbreitung

Hat das Projekt Nutzer, Downloads, Aufmerksamkeit und ein einladendes Umfeld für Beitragende?

78Gut · 18 % des Gesamtindex

Popularität & Verbreitung

66Mittel
Wie die Bewertung erfolgt
43.7/60Stars — 498 Stars
18.3/25Forks — 157 Forks
4.3/15Watcher — 7 Watcher
Verwendete Eingangsdaten
forks157
stars498
watchers7
growth_stateunverified
growth_factor_pct100
growth_unverified_reasonno_history

Community-Gesundheit

92Exzellent
Wie die Bewertung erfolgt
22.5/22.5README
22.5/22.5Lizenz — anerkannte Lizenz (Apache-2.0)
18/18CONTRIBUTING-Leitfaden
13.5/13.5Verhaltenskodex
0/7.2Issue-Vorlage
6.3/6.3PR-Vorlage
Verwendete Eingangsdaten
has_readmeja
has_licenseja
has_contributingja
has_issue_templatenein
has_code_of_conductja
has_pull_request_templateja

Nachhaltigkeit & Governance

Überdauert das Projekt die Menschen, die es tragen — Bus-Faktor, Reaktionsfähigkeit, Trägerschaft und Paketpflege?

84Gut · 24 % des Gesamtindex

Maintainer-Resilienz (Bus-Faktor)

90Exzellent
Wie die Bewertung erfolgt
48.6/54Bus-Faktor — 6 Beitragende decken die Hälfte aller Commits ab
18.1/22.5Commit-Verteilung — wichtigste beitragende Person verfasste 20 % der Commits
13.5/13.5Breite der Beitragenden — 56 Beitragende
10/10OpenSSF Scorecard: Contributors — project has 3 contributing companies or organizations -- score normalized to 10
Verwendete Eingangsdaten
bus_factor6
contributors_sampled56
top_contributor_share0,196

Reaktionsfähigkeit bei Issues & PRs

68Mittel
Wie die Bewertung erfolgt
21.2/46.8Issue-Lösungsquote — 45 % der Issues geschlossen
32.2/38.3PR-Annahme — 319/379 entschiedene PRs gemergt
15/15OpenSSF Scorecard: Code-Review — all changesets reviewed
Verwendete Eingangsdaten
merged_prs319
open_issues75
closed_issues62
issue_closed_ratio0,453
closed_unmerged_prs60

Eigentümerschaft & Trägerschaft

80Gut
Wie die Bewertung erfolgt
30/30Organisatorische Trägerschaft — im Besitz einer Organisation
0/20Verifizierte Domain
25/25Reichweite des Inhabers — 16.189 Follower von aws
25/25Kontohistorie — 552 öffentliche Repos, Kontoalter ca. 13 Jahre
Verwendete Eingangsdaten
followers16.189
owner_typeOrganization
is_verified—
owner_loginaws
public_repos552
account_age_days5.082

Paketpflege

100Exzellent
Wie die Bewertung erfolgt
25/25Veröffentlicht & auflösbar — 1 Paket(e) auf pypi
35/35Veröffentlichungsaktualität — letzte Veröffentlichung vor 0 Tagen
20/20Versionshistorie — 57 veröffentlichte Versionen
20/20Nicht veraltet — aktiv, nicht veraltet oder zurückgezogen
Verwendete Eingangsdaten
packagesbedrock-agentcore-starter-toolkit
ecosystemspypi
any_deprecatednein
min_days_since_publish0

Engineering-Qualität

Sind grundlegende Engineering- und Dokumentationspraktiken vorhanden?

92Exzellent · 20 % des Gesamtindex

Engineering-Praktiken

94Exzellent
Wie die Bewertung erfolgt
24/24CI-Workflows — 10 Workflow(s)
24/24Tests vorhanden
16/16Linter-Konfiguration
9.6/9.6Pre-Commit-Hooks
0/6.4.editorconfig
20/20OpenSSF Scorecard: CI-Tests — 30 out of 30 merged PRs checked by a CI test -- score normalized to 10
Verwendete Eingangsdaten
has_cija
has_testsja
has_editorconfignein
has_linter_configja
has_precommit_configja

Dokumentation

90Exzellent
Wie die Bewertung erfolgt
30/30README
25/25Dokumentationsverzeichnis
15/15Dokumentations-/Homepage-Site — https://aws.github.io/bedrock-agentcore-starter-toolkit/
10/10Repository-Beschreibung
0/10Topics
10/10Wiki
Verwendete Eingangsdaten
topics—
has_wikija
homepagehttps://aws.github.io/bedrock-agentcore-starter-toolkit/
has_readmeja
has_docs_dirja
has_descriptionja

Sicherheit

Sind die sichtbaren Sicherheits- und Lieferkettenpraktiken belastbar, ohne ungeklärte Exposition gegenüber Hochrisikojurisdiktionen?

57Mittel · 16 % des Gesamtindex

Sicherheitslage

55Mittel
Wie die Bewertung erfolgt
7.5/7.5Binary-Artifacts — no binaries found in the repo
3.8/7.5Branch-Protection — branch protection is not maximal on development and all release branches
2.5/2.5CI-Tests — 30 out of 30 merged PRs checked by a CI test -- score normalized to 10
0/2.5CII-Best-Practices — no effort to earn an OpenSSF best practices badge detected
7.5/7.5Code-Review — all changesets reviewed
2.5/2.5Contributors — project has 3 contributing companies or organizations -- score normalized to 10
0/10Dangerous-Workflow — dangerous workflow patterns detected
7.5/7.5Dependency-Update-Tool — update tool detected
0/5Fuzzing — project is not fuzzed
2.5/2.5Lizenz — license file detected
7.5/7.5Maintained — 24 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10
5/5Packaging — packaging workflow detected
0/5Pinned-Dependencies — keine Daten
4/5SAST — SAST tool is not run on all commits -- score normalized to 8
5/5Security-Policy — security policy file detected
0/7.5Signed-Releases — Project has not signed or included provenance with any releases.
0/7.5Token-Permissions — detected GitHub workflow tokens with excessive permissions
0/7.5Vulnerabilities — 18 existing vulnerabilities detected
Verwendete Eingangsdaten
sourceopenssf_scorecard
checks_evaluated17
scorecard_versionv5.5.0
checks_inconclusive1
scorecard_aggregate5,5
Von der Bewertung ausgeschlossen (keine Daten oder nicht anwendbar): pinned_dependencies. Die verbleibenden Gewichte wurden renormalisiert.

Abhängigkeits-Advisories

64Mittel
Wie die Bewertung erfolgt
12.8/35Direkte Abhängigkeiten ohne bekannte Advisories — 2 betroffen: bedrock-agentcore 1.1.1 (high 7.3), requests 2.32.5 (moderate 5.5)
0/25Indirekte Abhängigkeiten ohne bekannte Advisories — transitive Menge in diesem Bereich nicht von Entwicklungs- und Test-Abhängigkeiten trennbar
35.2/40Keine offenen Advisories — 1 Paket(e) mit Advisory seit über 90 Tagen unbehandelt; ältestes vor 125 Tagen veröffentlicht
Verwendete Eingangsdaten
sourceosv
advisories33
affected_packages12
assessed_packages142
unassessed_packages0
affected_by_severityhigh 3, moderate 8, low 1
direct_affected_packages2
Von der Bewertung ausgeschlossen (keine Daten oder nicht anwendbar): Indirekte Abhängigkeiten ohne bekannte Advisories. Die verbleibenden Gewichte wurden renormalisiert. 142 aufgelöste Abhängigkeiten wurden mit OSV abgeglichen. Dieses Repository veröffentlicht kein Paket, das der Index auflöst; bewertet wurde daher der Abhängigkeitsgraph des Repositorys. Dieser Graph vermischt Entwicklungs- und Test-Pins mit ausgelieferten Abhängigkeiten, daher werden nur die deklarierten Laufzeit-Abhängigkeiten bewertet; transitive Befunde werden als Kontext ausgewiesen und fließen nicht in die Bewertung ein. Erreichbarkeit wird nicht analysiert.

AI Readiness

Wie gut ist das Repository dafür ausgestattet, mit KI-Coding-Agenten entwickelt und gepflegt zu werden? Ein unabhängiges, experimentelles Badge — Gewicht 0,0, es wird eigenständig ausgewiesen und verändert den Gesamt-Gesundheitswert nicht.

53Mittel · 0 % des Gesamtindex

AI-Agentenkontext & Leitlinien

40Gefährdet
Wie die Bewertung erfolgt
0/45Agentenanweisungen — keine CLAUDE.md / AGENTS.md / Editor-Regeln
0/15Maschinenlesbare Doku (llms.txt)
40/40Lesbare Commit-Historie — 71 von 71 menschlichen Commits benennen ihre Absicht (strukturierter Betreff oder erläuternder Text)
Verwendete Eingangsdaten
has_llms_txtnein
legible_history_share1
agent_instruction_files—
agent_instruction_max_bytes—

AI-Verify-Loop (Build / Test / Typprüfung)

59Mittel
Wie die Bewertung erfolgt
0/18Bootstrap mit einem Befehl
22/22Automatisierte Tests
11/11Lint-/Format-Konfiguration
0/11Statische Typprüfung
10/10Reproduzierbare Umgebung — Dockerfile, lockfile
2/10Belegte Agentenpraxis — 1 der letzten 100 Commits von Agenten verfasst oder ihnen zugeschrieben
8/8Automatisierte Wartung — 8 der letzten 100 Commits sind automatisierte Abhängigkeits-Updates
0/10OpenSSF Scorecard: Pinned-Dependencies — keine Daten
Verwendete Eingangsdaten
has_nixnein
has_testsja
lockfilesuv.lock
has_dockerfileja
typed_languagenein
bootstrap_files—
has_devcontainernein
has_linter_configja
typecheck_configs—
agent_commit_share0,01
toolchain_manifests—
dependency_bot_commit_share0,08
Von der Bewertung ausgeschlossen (keine Daten oder nicht anwendbar): OpenSSF Scorecard: Pinned-Dependencies. Die verbleibenden Gewichte wurden renormalisiert.

AI-Code-Lesbarkeit für Modelle

53Mittel
Wie die Bewertung erfolgt
0/45Typprüfbarer Code — Python ohne Typprüfungs-Konfiguration
52.6/55Handhabbare Dateigrößen — 13/303 Quelldateien über 60 KB
Verwendete Eingangsdaten
primary_languagePython
largest_source_bytes203.060
source_files_sampled303
oversized_source_files13

Maschinenlesbare AI-Schnittstellen

60Mittel
Wie die Bewertung erfolgt
0/40API-Schema (OpenAPI/GraphQL/proto)
20/20MCP-Server
40/40Lauffähige Beispiele — notebooks
Verwendete Eingangsdaten
example_dirsnotebooks
has_mcp_signalja
api_schema_files—

Eckdaten

498GitHub-Sterne
56Mitwirkende
276Commits, letzte 12 Monate
0Tage seit letztem Push
56Releases
6Bus-Faktor
75offene Issues
PyPIPaket-Ökosysteme

Warnungen zur Datenerhebung

  • Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token
  • deps.dev does not index pypi:bedrock-agentcore-starter-toolkit@0.3.11; advisories assessed against the repository dependency graph instead

Weitere Details

Stern- und Fork-Verlauf 0 ★ / 157 ⇿
0Sterne
157Forks
55Releases

Wann jeder Stern und Fork hinzugefügt wurde, von GitHub erfasst und nach Tagen gruppiert. Das kumulierte Wachstum steht direkt über den täglichen Zugängen, aus denen es besteht, sodass beide gegeneinander lesbar sind: stetiger organischer Zuwachs sieht ganz anders aus als ein abrupter, kurzlebiger Ausschlag. Wo dieser Unterschied messbar ist, wird er als Wachstumsauthentizität ausgewiesen.

0408012016015542025-072026-012026-07
Major 0Minor 3Patch 52
OpenSSF Scorecard 5.5 / 10
5.5Gesamtwert

Unabhängige, werkzeugneutrale Sicherheitsbewertung durch das quelloffene OpenSSF Scorecard. Jede Prüfung honoriert eine Sicherheits-Praxis, nicht das Werkzeug eines bestimmten Anbieters. Prüfungen, die Scorecard nicht ermitteln konnte, sind mit k. A. markiert und vom Sicherheitswert ausgeschlossen (nie als null gezählt).Scorecard v5.5.0 · 2026-07-28 20:05 UTC

10Binary-Artifactsno binaries found in the repo
5Branch-Protectionbranch protection is not maximal on development and all release branches
10CI-Tests30 out of 30 merged PRs checked by a CI test -- score normalized to 10
0CII-Best-Practicesno effort to earn an OpenSSF best practices badge detected
10Code-Reviewall changesets reviewed
10Contributorsproject has 3 contributing companies or organizations -- score normalized to 10
0Dangerous-Workflowdangerous workflow patterns detected
10Dependency-Update-Toolupdate tool detected
0Fuzzingproject is not fuzzed
10Licenselicense file detected
10Maintained24 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10
10Packagingpackaging workflow detected
k. A.Pinned-Dependenciesinternal error: internal error: invalid Dockerfile: Syntax error - can't find = in "if". Must be of the form: name=value
8SASTSAST tool is not run on all commits -- score normalized to 8
10Security-Policysecurity policy file detected
0Signed-ReleasesProject has not signed or included provenance with any releases.
0Token-Permissionsdetected GitHub workflow tokens with excessive permissions
0Vulnerabilities18 existing vulnerabilities detected
Direkte Abhängigkeiten 23
RegistryPaketVersionsvorgabeManifest
PyPIbedrock-agentcore>=1.1.0pyproject.toml
PyPIdocstring_parser>=0.15,<1.0pyproject.toml
PyPIhttpx>=0.28.1pyproject.toml
PyPIjinja2>=3.1.6pyproject.toml
PyPIprompt-toolkit>=3.0.51pyproject.toml
PyPIpydantic>=2.0.0,<2.41.3pyproject.toml
PyPIurllib3>=1.26.0pyproject.toml
PyPIpyyaml>=6.0.2pyproject.toml
PyPIrequests>=2.25.0pyproject.toml
PyPIrich>=13.0.0pyproject.toml
PyPItoml>=0.10.2pyproject.toml
PyPItyper>=0.19.0pyproject.toml
PyPItyping-extensions>=4.13.2,<5.0.0pyproject.toml
PyPIuvicorn>=0.34.2pyproject.toml
PyPIautopep8>=2.3.2pyproject.toml
PyPIprance>=25.4.8.0pyproject.toml
PyPIruamel-yaml>=0.18.14pyproject.toml
PyPIquestionary>=2.1.0pyproject.toml
PyPIopenapi-spec-validator>=0.7.2pyproject.toml
PyPIpy-openapi-schema-to-json-schema>=0.0.3pyproject.toml
PyPIstarlette>=0.46.2pyproject.toml
PyPIboto3>=1.42.1pyproject.toml
PyPIbotocore>=1.42.1pyproject.toml
Alle Abhängigkeiten 142

Vollständig aufgelöster Abhängigkeitssatz aus dem GitHub-Abhängigkeitsgraphen: 23 direkte und 119 indirekte (transitive) Pakete. Die transitive Hülle ist vollständig, wenn das Repository eine Lockfile eincheckt.

RegistryPaketVersionBeziehung
PyPIautopep82.3.2direkt
PyPIbedrock-agentcore1.1.1direkt
PyPIboto31.42.1direkt
PyPIbotocore1.42.1direkt
PyPIdocstring-parser0.17.0direkt
PyPIhttpx0.28.1direkt
PyPIjinja23.1.6direkt
PyPIopenapi-spec-validator0.7.2direkt
PyPIprance25.4.8.0direkt
PyPIprompt-toolkit3.0.52direkt
PyPIpy-openapi-schema-to-json-schema0.0.3direkt
PyPIpydantic2.12.3direkt
PyPIpyyaml6.0.3direkt
PyPIquestionary2.1.1direkt
PyPIrequests2.32.5direkt
PyPIrich14.2.0direkt
PyPIruamel-yaml0.18.16direkt
PyPIstarlette1.3.1direkt
PyPItoml0.10.2direkt
PyPItyper0.20.0direkt
PyPItyping-extensions4.15.0direkt
PyPIurllib32.7.0direkt
PyPIuvicorn0.38.0direkt
PyPIannotated-types0.7.0indirekt
PyPIanyio4.11.0indirekt
PyPIattrs25.4.0indirekt
PyPIawscrt0.29.1indirekt
PyPIbabel2.17.0indirekt
PyPIbackports-asyncio-runner1.2.0indirekt
PyPIbackrefs5.9indirekt
PyPIbeautifulsoup44.14.2indirekt
PyPIbedrock-agentcore-starter-toolkit0.3.10indirekt
PyPIbracex2.6indirekt
PyPIcertifi2025.10.5indirekt
PyPIcffi2.0.0indirekt
PyPIcfgv3.4.0indirekt
PyPIchardet5.2.0indirekt
PyPIcharset-normalizer3.4.4indirekt
PyPIclick8.3.0indirekt
PyPIcolorama0.4.6indirekt
PyPIcoverage7.11.0indirekt
PyPIcryptography48.0.1indirekt
PyPIdistlib0.4.0indirekt
PyPIexceptiongroup1.3.0indirekt
PyPIfilelock3.20.0indirekt
PyPIghp-import2.1.0indirekt
PyPIgriffe1.14.0indirekt
PyPIh110.16.0indirekt
PyPIhjson3.1.0indirekt
PyPIhttpcore1.0.9indirekt
PyPIhttpx-sse0.4.3indirekt
PyPIidentify2.6.15indirekt
PyPIidna3.11indirekt
PyPIimportlib-metadata8.7.0indirekt
PyPIimportlib-resources6.5.2indirekt
PyPIiniconfig2.3.0indirekt
PyPIjmespath1.0.1indirekt
PyPIjsonschema4.25.1indirekt
PyPIjsonschema-path0.3.4indirekt
PyPIjsonschema-specifications2025.9.1indirekt
PyPIlazy-object-proxy1.12.0indirekt
PyPImarkdown3.10indirekt
PyPImarkdown-it-py4.0.0indirekt
PyPImarkdownify1.2.0indirekt
PyPImarkupsafe3.0.3indirekt
PyPImcp1.23.0indirekt
PyPImdformat1.0.0indirekt
PyPImdurl0.1.2indirekt
PyPImergedeep1.3.4indirekt
PyPImike2.1.3indirekt
PyPImkdocs1.6.1indirekt
PyPImkdocs-autorefs1.4.3indirekt
PyPImkdocs-get-deps0.2.0indirekt
PyPImkdocs-include-markdown-plugin7.2.0indirekt
PyPImkdocs-llmstxt0.1.0indirekt
PyPImkdocs-macros-plugin1.3.9indirekt
PyPImkdocs-material9.6.23indirekt
PyPImkdocs-material-extensions1.3.1indirekt
PyPImkdocstrings0.30.1indirekt
PyPImkdocstrings-python1.18.2indirekt
PyPImoto5.1.16indirekt
PyPImypy1.18.2indirekt
PyPImypy-extensions1.1.0indirekt
PyPInodeenv1.9.1indirekt
PyPIopenapi-schema-validator0.6.3indirekt
PyPIopentelemetry-api1.38.0indirekt
PyPIopentelemetry-instrumentation0.59b0indirekt
PyPIopentelemetry-instrumentation-threading0.59b0indirekt
PyPIopentelemetry-sdk1.38.0indirekt
PyPIopentelemetry-semantic-conventions0.59b0indirekt
PyPIpackaging25.0indirekt
PyPIpaginate0.5.7indirekt
PyPIpathable0.4.4indirekt
PyPIpathspec0.12.1indirekt
PyPIplatformdirs4.5.0indirekt
PyPIpluggy1.6.0indirekt
PyPIpre-commit4.3.0indirekt
PyPIpycodestyle2.14.0indirekt
PyPIpycparser2.23indirekt
PyPIpydantic-core2.41.4indirekt
PyPIpydantic-settings2.11.0indirekt
PyPIpygments2.19.2indirekt
PyPIpyjwt2.13.0indirekt
PyPIpymdown-extensions10.16.1indirekt
PyPIpyparsing3.2.5indirekt
PyPIpytest8.4.2indirekt
PyPIpytest-asyncio1.2.0indirekt
PyPIpytest-cov7.0.0indirekt
PyPIpython-dateutil2.9.0.post0indirekt
PyPIpython-dotenv1.2.1indirekt
PyPIpython-multipart0.0.31indirekt
PyPIpywin32311indirekt
PyPIpyyaml-env-tag1.1indirekt
PyPIreferencing0.36.2indirekt
PyPIresponses0.25.8indirekt
PyPIrfc3339-validator0.1.4indirekt
PyPIrpds-py0.28.0indirekt
PyPIruamel-yaml-clib0.2.14indirekt
PyPIruff0.14.3indirekt
PyPIs3transfer0.16.0indirekt
PyPIshellingham1.5.4indirekt
PyPIsix1.17.0indirekt
PyPIsniffio1.3.1indirekt
PyPIsoupsieve2.8.4indirekt
PyPIsse-starlette3.0.3indirekt
PyPIstrands-agents1.14.0indirekt
PyPIsuper-collections0.6.2indirekt
PyPIsyrupy5.0.0indirekt
PyPItermcolor3.2.0indirekt
PyPItomli2.3.0indirekt
PyPItyping-inspection0.4.2indirekt
PyPIverspec0.1.0indirekt
PyPIvirtualenv20.35.4indirekt
PyPIwatchdog6.0.0indirekt
PyPIwcmatch10.1indirekt
PyPIwcwidth0.2.14indirekt
PyPIwebsockets15.0.1indirekt
PyPIwerkzeug3.1.3indirekt
PyPIwheel0.46.2indirekt
PyPIwrapt1.17.3indirekt
PyPIxmltodict1.0.2indirekt
PyPIzipp3.23.0indirekt
Abhängigkeits-Advisories 12

Dieses Repository veröffentlicht kein vom Index auflösbares Paket, daher wurde sein eigener Abhängigkeitsgraph bewertet – 142 Pakete, darunter auch Entwicklungs- und Test-Pins, die nie ausgeliefert werden: 12 tragen bekannte Advisories, davon 2 direkte.

PaketVersionBeziehungSchweregradAdvisoriesBehoben in
bedrock-agentcore1.1.1direkthoch11.18.1
click8.3.0indirekthoch18.3.3
mcp1.23.0indirekthoch61.28.1
requests2.32.5direktmittel22.33.0
filelock3.20.0indirektmittel43.20.3
idna3.11indirektmittel23.15
pymdown-extensions10.16.1indirektmittel311.0.0
pytest8.4.2indirektmittel29.0.3
python-dotenv1.2.1indirektmittel21.2.2
virtualenv20.35.4indirektmittel220.36.1
werkzeug3.1.3indirektmittel63.1.6
pygments2.19.2indirektniedrig22.20.0

Ein Advisory bedeutet, dass die im Abhängigkeitsgraphen erfasste Version in den betroffenen Bereich eines Advisories fällt. Erreichbarkeit wird nicht analysiert, und der Graph enthält Entwicklungs- und Test-Pins — ein Fund kann das Werkzeug betreffen und nicht die ausgelieferte Software.

JSON-Rohbericht maschinenlesbar
{
  "data": {
    "repo": {
      "topics": [],
      "is_fork": false,
      "size_kb": 21177,
      "has_wiki": true,
      "homepage": "https://aws.github.io/bedrock-agentcore-starter-toolkit/",
      "languages": {
        "Jinja": 128812,
        "Shell": 2735,
        "Python": 4346276,
        "JavaScript": 1290,
        "Jupyter Notebook": 162228
      },
      "pushed_at": "2026-07-28T20:04:13Z",
      "created_at": "2025-07-12T06:50:22Z",
      "owner_type": "Organization",
      "updated_at": "2026-07-27T17:56:41Z",
      "description": "Python CLI toolkit for Amazon Bedrock AgentCore (legacy). For new projects, use the AgentCore CLI: https://github.com/aws/agentcore-cli",
      "is_archived": false,
      "is_disabled": false,
      "license_spdx": "Apache-2.0",
      "default_branch": "main",
      "license_spdx_raw": "Apache-2.0",
      "primary_language": "Python",
      "significant_languages": [
        "Python"
      ]
    },
    "owner": {
      "blog": "https://amazon.com/aws",
      "name": "Amazon Web Services",
      "type": "Organization",
      "login": "aws",
      "company": null,
      "location": "United States of America",
      "followers": 16189,
      "avatar_url": "https://avatars.githubusercontent.com/u/2232217?v=4",
      "created_at": "2012-08-28T05:37:55Z",
      "is_verified": null,
      "public_repos": 552,
      "account_age_days": 5082
    },
    "license": {
      "state": "standard",
      "spdx_id": "Apache-2.0",
      "raw_spdx": "Apache-2.0",
      "file_present": true,
      "scorecard_found": true,
      "profile_has_license": true
    },
    "activity": {
      "releases": [
        {
          "tag": "v0.3.11",
          "kind": "patch",
          "published_at": "2026-07-28T20:04:20Z"
        },
        {
          "tag": "v0.3.10",
          "kind": "patch",
          "published_at": "2026-06-30T21:33:26Z"
        },
        {
          "tag": "v0.3.9",
          "kind": "patch",
          "published_at": "2026-05-12T21:55:35Z"
        },
        {
          "tag": "v0.3.8",
          "kind": "patch",
          "published_at": "2026-05-12T19:23:45Z"
        },
        {
          "tag": "v0.3.7",
          "kind": "patch",
          "published_at": "2026-05-05T20:57:45Z"
        },
        {
          "tag": "v0.3.6",
          "kind": "patch",
          "published_at": "2026-04-22T18:44:38Z"
        },
        {
          "tag": "v0.3.5",
          "kind": "patch",
          "published_at": "2026-04-10T21:23:44Z"
        },
        {
          "tag": "v0.3.4",
          "kind": "patch",
          "published_at": "2026-03-30T21:33:50Z"
        },
        {
          "tag": "v0.3.3",
          "kind": "patch",
          "published_at": "2026-03-11T18:09:54Z"
        },
        {
          "tag": "v0.3.2",
          "kind": "patch",
          "published_at": "2026-03-04T22:35:52Z"
        },
        {
          "tag": "v0.3.1",
          "kind": "patch",
          "published_at": "2026-03-03T18:47:57Z"
        },
        {
          "tag": "v0.3.0",
          "kind": "minor",
          "published_at": "2026-02-17T21:20:50Z"
        },
        {
          "tag": "v0.2.10",
          "kind": "patch",
          "published_at": "2026-02-03T22:20:12Z"
        },
        {
          "tag": "v0.2.9",
          "kind": "patch",
          "published_at": "2026-02-02T03:59:35Z"
        },
        {
          "tag": "v0.2.8",
          "kind": "patch",
          "published_at": "2026-01-23T14:10:38Z"
        },
        {
          "tag": "v0.2.7",
          "kind": "patch",
          "published_at": "2026-01-20T21:46:22Z"
        },
        {
          "tag": "v0.2.6",
          "kind": "patch",
          "published_at": "2026-01-13T21:58:06Z"
        },
        {
          "tag": "v0.2.5",
          "kind": "patch",
          "published_at": "2025-12-13T05:24:59Z"
        },
        {
          "tag": "v0.2.4",
          "kind": "patch",
          "published_at": "2025-12-10T15:00:07Z"
        },
        {
          "tag": "v0.2.3",
          "kind": "patch",
          "published_at": "2025-12-09T19:46:20Z"
        },
        {
          "tag": "v0.2.2",
          "kind": "patch",
          "published_at": "2025-12-04T04:58:41Z"
        },
        {
          "tag": "v0.2.1",
          "kind": "patch",
          "published_at": "2025-12-02T20:14:18Z"
        },
        {
          "tag": "v0.2.0",
          "kind": "minor",
          "published_at": "2025-11-27T00:05:24Z"
        },
        {
          "tag": "v0.1.34",
          "kind": "patch",
          "published_at": "2025-11-19T13:31:13Z"
        },
        {
          "tag": "v0.1.33",
          "kind": "patch",
          "published_at": "2025-11-15T04:56:49Z"
        },
        {
          "tag": "v0.1.32",
          "kind": "patch",
          "published_at": "2025-11-06T00:23:41Z"
        },
        {
          "tag": "v0.1.31",
          "kind": "patch",
          "published_at": "2025-11-04T17:24:42Z"
        },
        {
          "tag": "v0.1.28",
          "kind": "patch",
          "published_at": "2025-10-31T22:06:28Z"
        },
        {
          "tag": "v0.1.27",
          "kind": "patch",
          "published_at": "2025-10-29T03:07:53Z"
        },
        {
          "tag": "v0.1.26",
          "kind": "patch",
          "published_at": "2025-10-17T16:59:09Z"
        },
        {
          "tag": "v0.1.25",
          "kind": "patch",
          "published_at": "2025-10-13T19:29:11Z"
        },
        {
          "tag": "v0.1.24",
          "kind": "patch",
          "published_at": "2025-10-13T13:36:07Z"
        },
        {
          "tag": "v0.1.23",
          "kind": "patch",
          "published_at": "2025-10-11T23:27:38Z"
        },
        {
          "tag": "v0.1.22",
          "kind": "patch",
          "published_at": "2025-10-09T18:27:00Z"
        },
        {
          "tag": "v0.1.21",
          "kind": "patch",
          "published_at": "2025-10-08T20:44:53Z"
        },
        {
          "tag": "v0.1.20",
          "kind": "patch",
          "published_at": "2025-10-08T15:33:16Z"
        },
        {
          "tag": "v0.1.19",
          "kind": "patch",
          "published_at": "2025-10-03T00:08:31Z"
        },
        {
          "tag": "v0.1.18",
          "kind": "patch",
          "published_at": "2025-10-02T03:41:16Z"
        },
        {
          "tag": "v0.1.17",
          "kind": "patch",
          "published_at": "2025-10-01T21:14:52Z"
        },
        {
          "tag": "v0.1.16",
          "kind": "patch",
          "published_at": "2025-10-01T15:13:09Z"
        },
        {
          "tag": "v0.1.15",
          "kind": "patch",
          "published_at": "2025-10-01T02:59:42Z"
        },
        {
          "tag": "v0.1.14",
          "kind": "patch",
          "published_at": "2025-09-25T18:50:47Z"
        },
        {
          "tag": "v0.1.13",
          "kind": "patch",
          "published_at": "2025-09-24T06:52:50Z"
        },
        {
          "tag": "v0.1.12",
          "kind": "patch",
          "published_at": "2025-09-18T17:28:17Z"
        },
        {
          "tag": "v0.1.11",
          "kind": "patch",
          "published_at": "2025-09-17T20:21:53Z"
        },
        {
          "tag": "v0.1.10",
          "kind": "patch",
          "published_at": "2025-09-08T22:11:17Z"
        },
        {
          "tag": "v0.1.9",
          "kind": "patch",
          "published_at": "2025-09-07T00:22:58Z"
        },
        {
          "tag": "v0.1.8",
          "kind": "patch",
          "published_at": "2025-09-02T16:51:15Z"
        },
        {
          "tag": "v0.1.7",
          "kind": "patch",
          "published_at": "2025-08-28T19:48:04Z"
        },
        {
          "tag": "v0.1.6",
          "kind": "patch",
          "published_at": "2025-08-11T21:49:17Z"
        },
        {
          "tag": "v0.1.5",
          "kind": "patch",
          "published_at": "2025-08-08T18:43:12Z"
        },
        {
          "tag": "v0.1.4",
          "kind": "patch",
          "published_at": "2025-08-06T17:59:59Z"
        },
        {
          "tag": "v0.1.3",
          "kind": "patch",
          "published_at": "2025-08-01T08:58:45Z"
        },
        {
          "tag": "v0.1.2",
          "kind": "patch",
          "published_at": "2025-07-23T23:49:12Z"
        },
        {
          "tag": "v0.1.1",
          "kind": "patch",
          "published_at": "2025-07-22T20:51:57Z"
        },
        {
          "tag": "v0.1.0",
          "kind": "minor",
          "published_at": "2025-07-16T18:51:05Z"
        }
      ],
      "recent_commits": [
        {
          "oid": "98bf2f870744e70b2c5829d09bb004525b113349",
          "body": "…ion (#554)\n\nUpdate the IAM execution role policies generated by the toolkit so that\nresource ARNs are specified explicitly for runtime, gateway, and evaluation\nroles.\n\nRuntime execution role (execution_role_policy.json.j2):\n- Grant logs:PutResourcePolicy on the agent's runtime log group.\n- Set Bedr\n[…]\non role (operations/evaluation):\n- Set Bedrock model invocation resources to foundation-model and the\n  account's Bedrock resources.\n\nAdd and update unit tests covering the generated policy documents.",
          "is_bot": false,
          "headline": "fix: update execution role policies for runtime, gateway, and evaluat…",
          "author_name": "tynobleamazon",
          "author_login": "tynobleamazon",
          "committed_at": "2026-07-27T17:55:57Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "4f90432b402da9fcb1870a7acdf431588e659459",
          "body": "…g (#551)\n\nThe deploy-docs workflow has been failing since #550 merged, so GitHub\nPages was never republished and the old site is still live. Root cause:\nthe examples/ pages use include-markdown to fetch sample content from the\nsamples repo at build time, and one path (dynatrace) now 404s because th\n[…]\nurce\ncleanup forward for examples/, which is what was breaking the deploy.\n\nVerified: fresh venv with only the 4 workflow packages, `mkdocs build`\nexits 0 and emits all 82 meta-refresh redirect pages.",
          "is_bot": false,
          "headline": "docs: make deprecated docs build redirect-only so deploy stops failin…",
          "author_name": "Gitika",
          "author_login": "notgitika",
          "committed_at": "2026-07-15T20:13:45Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "cb3e17fcc298a6536c317c875bc091dd3b44d06c",
          "body": "* docs: deprecate GitHub Pages site via mkdocs-redirects\n\nThe starter toolkit is heading to EOL in favor of the new AgentCore CLI,\nso this GitHub Pages site is being deprecated. Rather than 404 every URL,\nadd the mkdocs-redirects plugin and map all 82 pages to their new homes so\nexisting deep links \n[…]\n getting-started.md /\n    import.md yet). Re-point once those pages exist.\n\nKeeps every deep link landing somewhere real and canonical; each is a\none-line re-point when the specific destination lands.",
          "is_bot": false,
          "headline": "docs: deprecate GitHub Pages site via mkdocs-redirects (#550)",
          "author_name": "Gitika",
          "author_login": "notgitika",
          "committed_at": "2026-07-15T17:21:46Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "9b1f1c2318a850136238fb31a464b8afd41d243b",
          "body": "Bumps [wheel](https://github.com/pypa/wheel) from 0.45.1 to 0.46.2.\n- [Release notes](https://github.com/pypa/wheel/releases)\n- [Changelog](https://github.com/pypa/wheel/blob/main/docs/news.rst)\n- [Commits](https://github.com/pypa/wheel/compare/0.45.1...0.46.2)\n\n---\nupdated-dependencies:\n- dependenc\n[…]\ndency-version: 0.46.2\n  dependency-type: direct:development\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore(deps-dev): bump wheel from 0.45.1 to 0.46.2 (#538)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-07-13T12:53:55Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "bde62f058f3bca5e5edf8d329f81565f43efd763",
          "body": "Bumps [soupsieve](https://github.com/facelessuser/soupsieve) from 2.8 to 2.8.4.\n- [Release notes](https://github.com/facelessuser/soupsieve/releases)\n- [Commits](https://github.com/facelessuser/soupsieve/compare/2.8...2.8.4)\n\n---\nupdated-dependencies:\n- dependency-name: soupsieve\n  dependency-version: 2.8.4\n  dependency-type: indirect\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore(deps): bump soupsieve from 2.8 to 2.8.4 (#539)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-07-13T12:53:12Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "0437e150f759a1a249574deee61b4a9c501fd92a",
          "body": "Bumps [mcp](https://github.com/modelcontextprotocol/python-sdk) from 1.20.0 to 1.23.0.\n- [Release notes](https://github.com/modelcontextprotocol/python-sdk/releases)\n- [Changelog](https://github.com/modelcontextprotocol/python-sdk/blob/main/RELEASE.md)\n- [Commits](https://github.com/modelcontextprot\n[…]\ncp\n  dependency-version: 1.23.0\n  dependency-type: indirect\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore(deps): bump mcp from 1.20.0 to 1.23.0 (#537)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-07-13T12:51:48Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "8e36797a951c5751c838c21b067f97f32d8b75cc",
          "body": "Bumps [pyjwt](https://github.com/jpadilla/pyjwt) from 2.10.1 to 2.13.0.\n- [Release notes](https://github.com/jpadilla/pyjwt/releases)\n- [Changelog](https://github.com/jpadilla/pyjwt/blob/master/CHANGELOG.rst)\n- [Commits](https://github.com/jpadilla/pyjwt/compare/2.10.1...2.13.0)\n\n---\nupdated-depende\n[…]\nwt\n  dependency-version: 2.13.0\n  dependency-type: indirect\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore(deps): bump pyjwt from 2.10.1 to 2.13.0 (#527)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-07-13T12:51:02Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "7b1f8ced84e7dde4a677c715144c6b21c16eb3a3",
          "body": "Bumps [starlette](https://github.com/Kludex/starlette) from 0.50.0 to 1.3.1.\n- [Release notes](https://github.com/Kludex/starlette/releases)\n- [Changelog](https://github.com/Kludex/starlette/blob/main/docs/release-notes.md)\n- [Commits](https://github.com/Kludex/starlette/compare/0.50.0...1.3.1)\n\n---\n[…]\nendency-version: 1.3.1\n  dependency-type: direct:production\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore(deps): bump starlette from 0.50.0 to 1.3.1 (#529)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-07-13T12:50:53Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "70294b527cfd6c5c646cd6d4c655d4ad0cae65c9",
          "body": "Bumps [cryptography](https://github.com/pyca/cryptography) from 46.0.3 to 48.0.1.\n- [Changelog](https://github.com/pyca/cryptography/blob/main/CHANGELOG.rst)\n- [Commits](https://github.com/pyca/cryptography/compare/46.0.3...48.0.1)\n\n---\nupdated-dependencies:\n- dependency-name: cryptography\n  dependency-version: 48.0.1\n  dependency-type: indirect\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore(deps): bump cryptography from 46.0.3 to 48.0.1 (#528)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-07-13T12:50:40Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "f5342f665c2afa335a76e04cd9f7b4f12108de2b",
          "body": "Bumps [python-multipart](https://github.com/Kludex/python-multipart) from 0.0.20 to 0.0.31.\n- [Release notes](https://github.com/Kludex/python-multipart/releases)\n- [Changelog](https://github.com/Kludex/python-multipart/blob/main/CHANGELOG.md)\n- [Commits](https://github.com/Kludex/python-multipart/c\n[…]\nrt\n  dependency-version: 0.0.31\n  dependency-type: indirect\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore(deps): bump python-multipart from 0.0.20 to 0.0.31 (#530)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-07-13T12:50:32Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "197887da6a8a71a93e18882da8fcb7daf84304a8",
          "body": "Bumps [urllib3](https://github.com/urllib3/urllib3) from 2.5.0 to 2.7.0.\n- [Release notes](https://github.com/urllib3/urllib3/releases)\n- [Changelog](https://github.com/urllib3/urllib3/blob/main/CHANGES.rst)\n- [Commits](https://github.com/urllib3/urllib3/compare/2.5.0...2.7.0)\n\n---\nupdated-dependenc\n[…]\nendency-version: 2.7.0\n  dependency-type: direct:production\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore(deps): bump urllib3 from 2.5.0 to 2.7.0 (#536)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-07-13T12:50:23Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "e08dc917776d996f1f7526ca617cdef14791d002",
          "body": "Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore: bump version to 0.3.10 (#531)",
          "author_name": "agentcore-devx-automation[bot]",
          "author_login": "agentcore-devx-automation[bot]",
          "committed_at": "2026-06-30T21:37:46Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "e9de14e701aafd836da4bdcc3e8b830fd9505d0a",
          "body": "Bind GitHub context values (github.event.inputs.*, github.actor, step\nand job outputs) to env vars and reference them as shell variables\ninstead of interpolating ${{ }} directly into run: bodies.\n\nIn release.yml the version-bump step built a command string from\nworkflow inputs and ran it through 'ev\n[…]\nrray and invokes it directly (no eval), passing each input as\na single argument. test-pypi-release.yml gets the same env-var\ntreatment for its version input.\n\nFiles: release.yml, test-pypi-release.yml",
          "is_bot": false,
          "headline": "fix(ci): prevent script injection in GitHub Actions workflows (#525)",
          "author_name": "Aidan Daly",
          "author_login": "aidandaly24",
          "committed_at": "2026-06-30T17:12:02Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "881004a33db6d5ce7c6a9fb35980a85110cc15a6",
          "body": "…ds + add uninstall command (#520)\n\n* fix(cli): surface CLI recommendation after create and add uninstall command\n\nThe deprecation recommendation is emitted by a top-level Typer callback, so\nit technically fires for every command. But `create` floods the screen after\nthe banner (welcome box, interac\n[…]\nce after ⚠️ so \"Recommendation:\" aligns with the indented\n  lines below (the emoji renders ~2 cols wide, so two spaces over-indented it).\n- Reorder the action commands to uninstall → install → import.",
          "is_bot": false,
          "headline": "fix(cli): re-emit deprecation recommendation after high-output comman…",
          "author_name": "Aidan Daly",
          "author_login": "aidandaly24",
          "committed_at": "2026-06-29T14:18:22Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "d238a77c04f521a845e6369038071042c4f0a30f",
          "body": null,
          "is_bot": false,
          "headline": "Revise CLI recommendation in README (#519)",
          "author_name": "Ryan Fox-Tyler",
          "author_login": "ryanfoxtyler",
          "committed_at": "2026-06-24T14:47:02Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "0e1cad215f31b9591e1fbf95ff13f400a2941ab2",
          "body": "* feat(workflows): add closed-PR comment redirect for COE AI-7\n\nAdd closed-pr-comment.yml: detects comments on closed PRs by\nnon-maintainers, posts a redirect to the issue tracker, and pages\noncall via the existing SLACK_WEBHOOK_URL.\n\nUpdate slack-issue-notification.yml: switch to injection-safe\nenv\n[…]\nw.\n- Remove internal incident references from the public workflow.\n\nNo behavior change: both jobs emit the same 20-key payload the Slack\nworkflow already consumes, gated and deduped exactly as before.",
          "is_bot": false,
          "headline": "feat(workflows): add closed-PR comment redirect (#517)",
          "author_name": "Aidan Daly",
          "author_login": "aidandaly24",
          "committed_at": "2026-06-02T18:03:41Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "5fae65196e185943b8d7028feda768a42edc696c",
          "body": "…513)",
          "is_bot": false,
          "headline": "chore: replace all github.token/GITHUB_TOKEN with GitHub App token (#…",
          "author_name": "Aidan Daly",
          "author_login": "aidandaly24",
          "committed_at": "2026-05-13T14:14:05Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "77cf62e7934176f1fdd10fc3dc67b6cdb079bada",
          "body": "Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore: bump version to 0.3.9 (#516)",
          "author_name": "github-actions[bot]",
          "author_login": "github-actions[bot]",
          "committed_at": "2026-05-12T21:57:31Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "3216fc8ba240143945d3aff2701e0e3f90f1f321",
          "body": "…ring apiSchema (#515)\n\n* fix(import-agent): create gateway Lambda before targets and handle string apiSchema\n\nGateway control plane validates that the Lambda ARN exists when creating\ntargets. The previous code called create_gateway_lambda_target inside the\naction group loop before create_lambda was\n[…]\n loop\n\nThe sleep was there to throttle Gateway API calls, but after\nrestructuring, this loop only collects data locally. The sleep\nremains in the deferred targets loop where API calls actually happen.",
          "is_bot": false,
          "headline": "fix(import-agent): create gateway Lambda before targets and handle st…",
          "author_name": "Jesse Turner",
          "author_login": "jesseturner21",
          "committed_at": "2026-05-12T21:48:46Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "550bddfd12840afe55a2e2d2f4020f56c43f65ad",
          "body": "Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore: bump version to 0.3.8 (#514)",
          "author_name": "github-actions[bot]",
          "author_login": "github-actions[bot]",
          "committed_at": "2026-05-12T19:20:01Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "abeeb3e0ac7f29aff38865814afe4830ac90dd82",
          "body": "The bedrockagentcore-preview Discord vanity URL was abandoned and\nclaimed by an external party (V2208165288). Replace with the active\nstrands community link.",
          "is_bot": false,
          "headline": "fix: update Discord invite link to strands community (#512)",
          "author_name": "Jesse Turner",
          "author_login": "jesseturner21",
          "committed_at": "2026-05-11T21:32:57Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "2d3cb0d99addd05fc81181c2c6152e33dfa16867",
          "body": "* chore: bump version to 0.3.7\n\nCo-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>\n\n* Fix duplicate entry in CHANGELOG for deprecation banner\n\nRemoved duplicate entry for the deprecation banner in CHANGELOG.\n\nSigned-off-by: Aidan Daly <99039782+aidandaly24@users.norep\n[…]\n9782+aidandaly24@users.noreply.github.com>\nCo-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>\nCo-authored-by: Aidan Daly <99039782+aidandaly24@users.noreply.github.com>",
          "is_bot": true,
          "headline": "Release v0.3.7 (#511)",
          "author_name": "github-actions[bot]",
          "author_login": "github-actions[bot]",
          "committed_at": "2026-05-05T21:03:02Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "d0b36cebfd0110d2487369ccaa917a67a3246f9a",
          "body": "The AgentCore CLI import command is `agentcore import`, not\n`agentcore create import`.",
          "is_bot": false,
          "headline": "fix: correct import command in deprecation banner (#510)",
          "author_name": "Aidan Daly",
          "author_login": "aidandaly24",
          "committed_at": "2026-04-30T16:02:42Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "c17e3c96384140dc37cc37c48c56749f5910c07c",
          "body": "* fix: soften deprecation banner language and fix env var check\n\nUpdate the deprecation banner to use a more measured tone — recommend\nthe AgentCore CLI rather than stating the toolkit is no longer developed.\nAlso adds a hint about `agentcore create import` for migrating existing\nagents, and fixes t\n[…]\n minimal — just the recommendation and install command.\n\n* feat: add import/migrate hint to deprecation banner\n\n* fix: rename env var to AGENTCORE_SUPPRESS_RECOMMENDATION\n\n* style: fix ruff formatting",
          "is_bot": false,
          "headline": "fix: soften deprecation banner and fix env var check (#508)",
          "author_name": "Aidan Daly",
          "author_login": "aidandaly24",
          "committed_at": "2026-04-29T21:18:58Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "c7c836de3a42125c04680c7d8a4223d3cd2e5f74",
          "body": "Show a warning on every command invocation directing users to the\nAgentCore CLI (@aws/agentcore) as the actively developed replacement.\nThe banner prints to stderr so it doesn't interfere with piped output.\nSet AGENTCORE_SUPPRESS_DEPRECATION=1 to silence the warning.",
          "is_bot": false,
          "headline": "feat: add deprecation banner recommending AgentCore CLI (#507)",
          "author_name": "Aidan Daly",
          "author_login": "aidandaly24",
          "committed_at": "2026-04-29T18:59:33Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "419c267d208cf3dc761c27c2060c4e04d74f6b9d",
          "body": "…ery in direct-code-deploy (#506)\n\nTwo fixes for observability setup during agentcore deploy:\n\n1. _configure_trace_segment_destination() returned silently while the\n   destination was still PENDING (~10-15 min). Now logs a warning so\n   users know OTEL exports may fail until it becomes ACTIVE.\n\n2. T\n[…]\ned enable_transaction_search_if_needed()\n   but not enable_traces_delivery_for_runtime(), unlike the container path.\n   Runtime traces delivery was never configured for direct-code-deploy.\n\nFixes #457",
          "is_bot": false,
          "headline": "fix: log Transaction Search PENDING status + add missing traces deliv…",
          "author_name": "Hweinstock",
          "author_login": "Hweinstock",
          "committed_at": "2026-04-24T14:38:17Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "8231e3facf88119c01d4a1acd905cb06dfb35655",
          "body": null,
          "is_bot": false,
          "headline": "fix: update download instructions to include correct npm package (#505)",
          "author_name": "Hweinstock",
          "author_login": "Hweinstock",
          "committed_at": "2026-04-24T00:10:19Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "0f350f25e9a3232e00735b8d26266c2d59f10ebd",
          "body": "Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore: bump version to 0.3.6 (#504)",
          "author_name": "github-actions[bot]",
          "author_login": "github-actions[bot]",
          "committed_at": "2026-04-22T18:45:14Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "af69275f84c33f51e67324fe336e0abdb4cfceb4",
          "body": "… (#503)",
          "is_bot": false,
          "headline": "fix: modify execution role naming and disallow codebuild for govcloud…",
          "author_name": "Andrew",
          "author_login": "mahlera",
          "committed_at": "2026-04-22T18:30:27Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "f4d318b384eeea500ee5380d71c4fe7f23cf2038",
          "body": "Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore: bump version to 0.3.5 (#501)",
          "author_name": "github-actions[bot]",
          "author_login": "github-actions[bot]",
          "committed_at": "2026-04-10T21:23:36Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "9b5bd36d52adc34041aa2e155c2e30d4ad8bb3a9",
          "body": null,
          "is_bot": false,
          "headline": "fix: update IAM trust policies (#500)",
          "author_name": "padmak30",
          "author_login": "padmak30",
          "committed_at": "2026-04-10T21:17:19Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "4b9387f0d48cb6639633437b669fc6cc09ef07be",
          "body": "Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore: bump version to 0.3.4 (#495)",
          "author_name": "github-actions[bot]",
          "author_login": "github-actions[bot]",
          "committed_at": "2026-03-30T21:36:11Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "2d5dbffeeab2bcb72b17f4587a646648bd25a11e",
          "body": "… (#485)\n\n- Add partition helper\n\t- Pass partition information to templates for resource arns",
          "is_bot": false,
          "headline": "chore: modify execution role templates to support multiple partitions…",
          "author_name": "Andrew",
          "author_login": "mahlera",
          "committed_at": "2026-03-30T21:25:53Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "87aeae679f322e4109ff9ce00873ac12258d8301",
          "body": "Remove minor and major options from the release workflow dropdown,\nadd a guard step to reject API-triggered minor/major releases, and\nrestrict the bump-version script to patch and pre only.",
          "is_bot": false,
          "headline": "fix: block minor and major releases, allow only patch (#494)",
          "author_name": "Trirmadura J Ariyawansa",
          "author_login": "jariy17",
          "committed_at": "2026-03-30T21:22:02Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "d879b8740e68237a2d543e8052604f9e4f903ad3",
          "body": null,
          "is_bot": false,
          "headline": "feat: added GT support to Evaluations (#493)",
          "author_name": "Trirmadura J Ariyawansa",
          "author_login": "jariy17",
          "committed_at": "2026-03-30T20:05:07Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "00a8fef43fff6fb05ec7f25dc4c3e0d59d72a80f",
          "body": null,
          "is_bot": false,
          "headline": "docs: change banner color to warning yellow/amber (#491)",
          "author_name": "Gitika",
          "author_login": "notgitika",
          "committed_at": "2026-03-28T00:09:46Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "8a2c4d6a0bf4adbad20ea7460d025530de8479a4",
          "body": "* fix: remove broken CDK basic-runtime doc pages\n\nThe upstream samples repo (awslabs/amazon-bedrock-agentcore-samples)\nno longer has the 04-infrastructure-as-code/cdk/basic-runtime/ directory,\ncausing include-markdown to fail with HTTP 404 during docs build.\nRemove the referencing doc pages to unblo\n[…]\nw.\n\n* docs: rename AgentCore CLI to Starter Toolkit CLI in nav\n\nAvoids confusion with the new @aws/agentcore-cli package since this\nsection documents the starter toolkit's Python CLI, not the new one.",
          "is_bot": false,
          "headline": "fix: remove broken CDK basic-runtime doc includes (#490)",
          "author_name": "Gitika",
          "author_login": "notgitika",
          "committed_at": "2026-03-27T23:20:56Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "0fbfa959a5537e769d5e013918eef95feb3802bb",
          "body": "* docs: recommend AgentCore CLI for new projects\n\nAdd prominent notices to README and documentation index page directing\nusers to the AgentCore CLI (@aws/agentcore-cli) as the recommended tool\nfor creating, developing, and deploying agents on Amazon Bedrock\nAgentCore. Includes links to CLI docs for \n[…]\nvia the\nMkDocs Material theme override (main.html content block). This renders\non every documentation page automatically. Removes the duplicate\nadmonition from index.md since the banner now covers it.",
          "is_bot": false,
          "headline": "docs: recommend AgentCore CLI for new projects (#489)",
          "author_name": "Gitika",
          "author_login": "notgitika",
          "committed_at": "2026-03-27T23:01:35Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "56af283a6dbe937dc7768dcc8ac54fcb80b09b5c",
          "body": "The memory configuration (STM_ONLY, STM_AND_LTM, NO_MEMORY) was previously\nonly available through the interactive prompt. This adds a --memory/-m CLI\nflag so users can specify memory configuration in non-interactive mode.\n\nThe flag:\n- Works with non-interactive mode for CI/CD and scripting use cases\n[…]\n agent framework\n- Also works in interactive mode to skip the memory prompt\n- Auto-triggers non-interactive mode when provided with other flags\n\nCo-authored-by: Claude Opus 4.6 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(create): add --memory flag for non-interactive mode (#484)",
          "author_name": "Jesse Turner",
          "author_login": "jesseturner21",
          "committed_at": "2026-03-23T13:42:30Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "c7e38e29dd59cdce79b4a5c309dd36b3cfad7e58",
          "body": "Enable the AWS Common Runtime (CRT) for botocore to improve\ntransfer performance and enable CRT-based features.\n\nCo-authored-by: Abhimanyu Siwach <siwabhi@amazon.com>",
          "is_bot": false,
          "headline": "Add CRT extra to botocore dependency (#465)",
          "author_name": "Abhimanyu Siwach",
          "author_login": "siwachabhi",
          "committed_at": "2026-03-18T01:23:55Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "1d53aad673ee1cd04fa93c5413ea63f3edf552bb",
          "body": "Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore: bump version to 0.3.3 (#481)",
          "author_name": "github-actions[bot]",
          "author_login": "github-actions[bot]",
          "committed_at": "2026-03-11T18:11:24Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "d40c0cf8eda79f4e333878020b375aa3a26afadd",
          "body": "Add AGUI as a supported server protocol alongside HTTP, MCP, and A2A.\nAGUI uses port 8080 and /invocations path (same as HTTP) for SSE\nstreaming, with /ws for WebSocket bidirectional communication.\n\nChanges:\nAdd AGUI to RuntimeProtocol constants and CreateRuntimeProtocol type\nAdd AGUI to ProtocolConfiguration schema validator\nUpdate CLI, notebook API, and IaC protocol validation checks\nUpdate help text and docstrings\n\nCo-authored-by: Sundar Raghavan <sdraghav@amazon.com>",
          "is_bot": false,
          "headline": "feat: add AG-UI protocol support to starter toolkit (#480)",
          "author_name": "Sundar Raghavan",
          "author_login": "sundargthb",
          "committed_at": "2026-03-11T11:41:04Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "88f83177abf413d10c31a1ebf40de3bd7b4fb60b",
          "body": "* Fix memoryStrategyId field name in modifyMemoryStrategies payload (#452)\n\nThe update_memory_strategies method was sending strategyId instead of\nmemoryStrategyId in the modifyMemoryStrategies payload, causing a\nValidationException from the API. Changed to use the correct field name\nthat matches the API contract.\n\n* Apply ruff format to test file",
          "is_bot": false,
          "headline": "Fix memoryStrategyId field name in modifyMemoryStrategies payload (#479)",
          "author_name": "Tejas Kashinath",
          "author_login": "tejaskash",
          "committed_at": "2026-03-10T20:57:38Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "fcad8de712583c7634f574a12951bb34ed618d7a",
          "body": "… (#478)\n\n* Add boto3 and botocore to generated project deps for Bedrock provider (#460)\n\nWhen agentcore create scaffolds a project with Bedrock as the model provider,\nboto3 and botocore are now automatically included in the generated\ndependencies. These are required at runtime by SDKs like strands-agents\nand langchain_aws to call the Bedrock API.\n\n* Fix ruff B023 lint error: bind loop variable in lambda",
          "is_bot": false,
          "headline": "Add boto3 and botocore to generated project deps for Bedrock provider…",
          "author_name": "Tejas Kashinath",
          "author_login": "tejaskash",
          "committed_at": "2026-03-10T20:57:35Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "07b31071e93f1c9d7bff52cf7d55620238cb8c6e",
          "body": "* Fix --ecr with repository name only causing empty repositoryName (#463)\n\nWhen using --ecr with just a repository name (no full URI), the deploy\ncommand failed because repo_name extraction assumed a '/' was present.\nAdd _resolve_ecr_repo_name_to_uri() to look up bare repo names via\necr.describe_repositories and persist the resolved full URI back to config.\n\n* Apply ruff format to test file",
          "is_bot": false,
          "headline": "Fix --ecr with repository name only causing empty repositoryName (#477)",
          "author_name": "Tejas Kashinath",
          "author_login": "tejaskash",
          "committed_at": "2026-03-10T20:57:32Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "75515fcd195d7990b492e19d15dbe47de8700bd4",
          "body": "* Fix duplicate ECR Repository text in configuration success pane (#472)\n\nRemove hardcoded ECR Repository line that was always displayed regardless\nof deployment type. The conditional config_info variable already correctly\nhandles showing ECR Repository for container deploys and S3 Bucket for\ndirect_code_deploy.\n\n* Apply ruff format to test file",
          "is_bot": false,
          "headline": "Fix duplicate ECR Repository text in configuration success pane (#476)",
          "author_name": "Tejas Kashinath",
          "author_login": "tejaskash",
          "committed_at": "2026-03-10T20:57:15Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "f7f1cd9b09f94d524d27164f67a7cd8149b0f478",
          "body": "* Fix hardcoded shebang paths in packaged dependency scripts (#474)\n\nAdd _fix_shebangs_in_bin_dir() to CodeZipPackager that replaces hardcoded\nlocal Python paths (e.g. /Users/.../venv/bin/python3) with portable\n#!/usr/bin/env python3 shebangs. This runs automatically during dependency\npackaging to prevent runtime failures on AgentCore.\n\n* Apply ruff format to test file",
          "is_bot": false,
          "headline": "Fix hardcoded shebang paths in packaged dependency scripts (#475)",
          "author_name": "Tejas Kashinath",
          "author_login": "tejaskash",
          "committed_at": "2026-03-10T20:57:12Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "a9062d3a64f31dfbca02fd360f44d6bf8a129ff2",
          "body": null,
          "is_bot": false,
          "headline": "Add daily Slack notification for open PRs (#473)",
          "author_name": "Trirmadura J Ariyawansa",
          "author_login": "jariy17",
          "committed_at": "2026-03-10T18:33:15Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "703006f9774c376df54223a7b30c28a6c06ef3c2",
          "body": "Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore: bump version to 0.3.2 (#470)",
          "author_name": "github-actions[bot]",
          "author_login": "github-actions[bot]",
          "committed_at": "2026-03-04T22:33:45Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "976255152e3a0f8adea06976eb0151421a60836f",
          "body": "* Improve error messages for auth failures during agent invocation\n\n- Catch 401/403 HTTP errors in _handle_http_response and raise ValueError\n  with actionable message instead of raw traceback\n- Catch AccessDeniedException from boto3 in invoke_endpoint and surface\n  friendly re-login guidance\n- Fix \n[…]\n treated as a dict (missing isinstance check)\n\n* Fix ruff line length violation in error handler\n\n* Apply ruff format to error handler\n\n---------\n\nCo-authored-by: Abhimanyu Siwach <siwabhi@amazon.com>",
          "is_bot": false,
          "headline": "Improve error messages for auth failures during invoke (#469)",
          "author_name": "Abhimanyu Siwach",
          "author_login": "siwachabhi",
          "committed_at": "2026-03-04T22:32:20Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "dccdb42dab1ef34c3f9711b72898b84bf1ad5799",
          "body": "Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore: bump version to 0.3.1 (#467)",
          "author_name": "github-actions[bot]",
          "author_login": "github-actions[bot]",
          "committed_at": "2026-03-03T18:47:18Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "0aecfb642d986c9c60a80b5b022704014b7327a5",
          "body": "* Add GA features for AgentCore Policy\n\n* Add GA features for AgentCore Policy\n\n* Add GA features for AgentCore Policy\n\n* Add GA features for AgentCore Policy",
          "is_bot": false,
          "headline": "Policy in AgentCore GA (#466)",
          "author_name": "Sidharth Gulati",
          "author_login": "gulsid",
          "committed_at": "2026-03-03T18:36:41Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "9cfc3b22ca6966169d9d6d31987471e3e9dca3a9",
          "body": "Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore: bump version to 0.3.0 (#459)",
          "author_name": "github-actions[bot]",
          "author_login": "github-actions[bot]",
          "committed_at": "2026-02-17T22:19:42Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "260d94f78ba3c1449c748d3abbdcd1b41c5d7243",
          "body": "Signed-off-by: SkyWalker-CMD <42524311+SkyWalker-CMD@users.noreply.github.com>",
          "is_bot": false,
          "headline": "Add missing comma in @requires_access_token parameters (#458)",
          "author_name": "SkyWalker-CMD",
          "author_login": "SkyWalker-CMD",
          "committed_at": "2026-02-17T21:08:49Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "10bb7278304f0693c04934b544f33c497f14034b",
          "body": "…t (#451)\n\nAdd a new 'agentcore memory browse' command that provides an interactive\nterminal UI for exploring AgentCore Memory content.\n\nFeatures:\n- Navigate through actors, sessions, events (STM) and namespaces, records (LTM)\n- Keyboard navigation: ↑↓ navigate, Enter select, b back, h home, v verbo\n[…]\nservation when navigating back\n\nAlso includes:\n- Pagination support for list_actors and list_sessions APIs\n- Tests to maintain 88% coverage threshold\n\nCo-authored-by: Roger Konlog <rkonlog@amazon.com>",
          "is_bot": false,
          "headline": "feat(memory): add interactive TUI browser for exploring memory conten…",
          "author_name": "Roger Ian Konlog",
          "author_login": "IanKonlog",
          "committed_at": "2026-02-13T16:29:28Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "a71ab6f33f992d94894577f977f332d9b86537aa",
          "body": "* fix: format long line in test_commands.py\n\n* fix: use cp_client for delete_workload_identity to support older library versions",
          "is_bot": false,
          "headline": "fix: format long line and fix broken integ test (#455)",
          "author_name": "Aidan Daly",
          "author_login": "aidandaly24",
          "committed_at": "2026-02-13T15:18:22Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "074456ab7bd590e2f131e2367202decb9325bc4d",
          "body": "Removed the subtitle about deploying AI agents and added a note about the experimental nature of the toolkit.\n\nSigned-off-by: Ryan Fox-Tyler <60440289+ryanfoxtyler@users.noreply.github.com>",
          "is_bot": false,
          "headline": "Update README to remove subtitle and add note (#454)",
          "author_name": "Ryan Fox-Tyler",
          "author_login": "ryanfoxtyler",
          "committed_at": "2026-02-12T15:25:21Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "f3eedb836d8b8bff1119aad829c3e0cef06d7edd",
          "body": null,
          "is_bot": false,
          "headline": "updated quick start instructions (#306)",
          "author_name": "Greg Herlein",
          "author_login": "gherlein",
          "committed_at": "2026-02-10T21:27:46Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "2fe9d84ded4c5ce9f0d97b75b692d592db989efc",
          "body": "Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore: bump version to 0.2.10 (#450)",
          "author_name": "github-actions[bot]",
          "author_login": "github-actions[bot]",
          "committed_at": "2026-02-03T22:29:11Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "819193aa07d8c3b5b5878556502110babe72edf0",
          "body": "Add Memory to the package's main __init__.py exports, making it\nconsistent with other notebook classes (Runtime, Observability,\nEvaluation).\n\nBefore: `from bedrock_agentcore_starter_toolkit import Memory` raised ImportError\nAfter: Import works correctly\n\nFixes #442",
          "is_bot": false,
          "headline": "fix: export Memory class from package root (#449)",
          "author_name": "Trirmadura J Ariyawansa",
          "author_login": "jariy17",
          "committed_at": "2026-02-02T19:51:01Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "01808f83057e43fee7e345155d6d1977373b6a58",
          "body": "When using `agentcore invoke --dev --session-id \"my-session\"`, the\nsession_id was not being forwarded to the development server. Instead,\na new UUID was generated for each request, breaking conversation memory\nfunctionality during local development.\n\nChanges:\n- Pass session_id parameter from invoke() to _invoke_dev_server()\n- Update _invoke_dev_server() to accept and use the session_id parameter\n- Generate session_id only when not provided by the user\n\nFixes #447",
          "is_bot": false,
          "headline": "fix: pass session_id to dev server in invoke --dev mode (#448)",
          "author_name": "Trirmadura J Ariyawansa",
          "author_login": "jariy17",
          "committed_at": "2026-02-02T18:04:43Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "3b4eafb5869f0be09efcdae5cc7d31a328b239f5",
          "body": null,
          "is_bot": false,
          "headline": "Add trailing slash to namespace strings (#440)",
          "author_name": "xinaizha",
          "author_login": "xinaizha",
          "committed_at": "2026-02-02T15:57:29Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "6cff769327506c3b4f31a5562a4f92494fa14fbc",
          "body": "typer 0.16.0-0.18.0 does not support typing.Literal, causing\nRuntimeError when running CLI commands.\nLiteral support was added in typer 0.19.0.",
          "is_bot": false,
          "headline": "fix: bump minimum typer version to 0.19.0 (#421)",
          "author_name": "Minoru Onda（みのるん）",
          "author_login": "minorun365",
          "committed_at": "2026-02-02T15:54:29Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "563bfa3b457cbc8e1092071db06d69e41dd97b89",
          "body": "…lity (#443)\n\nOn Windows, Python's `write_text()` uses the system default encoding (cp1252),\nwhich cannot handle Unicode characters like emojis. This causes `agentcore create`\nto fail with `UnicodeEncodeError` when rendering templates containing emojis\n(e.g., 📊 in the Strands SDK template).\n\nThis fix explicitly specifies UTF-8 encoding to ensure cross-platform compatibility.\n\nFixes #427",
          "is_bot": false,
          "headline": "fix: add UTF-8 encoding to template file writes for Windows compatibi…",
          "author_name": "Trirmadura J Ariyawansa",
          "author_login": "jariy17",
          "committed_at": "2026-02-02T15:42:10Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "4fec9b735024eaccbb8eeee3bed9b030eabefeca",
          "body": "* fix: Retrieval Config in Strands Templates\n\n* fix: update snapshot tests",
          "is_bot": false,
          "headline": "fix: Retrieval Config in Strands Templates (#446)",
          "author_name": "Tejas Kashinath",
          "author_login": "tejaskash",
          "committed_at": "2026-02-02T14:30:30Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "195109a7b8e4a6b66eb7e44e52557bf5dbc69dfa",
          "body": "Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore: bump version to 0.2.9 (#445)",
          "author_name": "github-actions[bot]",
          "author_login": "github-actions[bot]",
          "committed_at": "2026-02-02T04:08:10Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "ca6b95cea4f74a6b3a7e7b58e0e6e496ea948507",
          "body": "* fix(create): fix memory integration for generated agents\n\nGenerated agents from `agentcore create` were failing to use memory due to\nseveral misconfigurations between the CDK infrastructure and agent code.\n\n## Root Causes Fixed\n\n1. **Environment variable mismatch**: CDK template set `MEMORY_ID` bu\n[…]\n wildcard since policy engine is created separately\n- gateway: scoped to specific gateway ARN via this.agentCoreGateway.attrGatewayArn\n\n---------\n\nCo-authored-by: Abhimanyu Siwach <siwabhi@amazon.com>",
          "is_bot": false,
          "headline": "Fix/cdk template memory and permissions (#444)",
          "author_name": "Abhimanyu Siwach",
          "author_login": "siwachabhi",
          "committed_at": "2026-02-02T03:54:21Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "782b7d293602d359973acef2871aca5178f1fec2",
          "body": "Use toJSON() function to properly escape special characters in issue\nbody content. This prevents YAML parsing errors when issue descriptions\ncontain quotation marks or other special characters.",
          "is_bot": false,
          "headline": "fix: escape special characters in Slack notification payload (#441)",
          "author_name": "Trirmadura J Ariyawansa",
          "author_login": "jariy17",
          "committed_at": "2026-01-30T15:53:03Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "057a17e997f2bc73762379f21a8b1fce2e05ea12",
          "body": "…… (#439)\n\n* fix(configure): infer language from entrypoint extension before package.json\n\nPreviously, `agentcore configure` detected TypeScript whenever package.json\nexisted in the project root, even for Python agents. This caused incorrect\ndetection for projects with package.json for tooling (docs\n[…]\n -> typescript)\n3. package.json existence (fallback)\n\nFixes issue where Python agent with package.json was detected as TypeScript.\n\n* fix(memory): log exceptions instead of silent pass for bandit B110",
          "is_bot": false,
          "headline": "fix(configure): infer language from entrypoint extension before packa…",
          "author_name": "Aidan Daly",
          "author_login": "aidandaly24",
          "committed_at": "2026-01-29T22:59:14Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "1be8f1266458589d1611e9b4d8e2ba26944aca7a",
          "body": "* feat: add Slack notification workflow for new issues\n\nThis workflow automatically sends issue details to Slack via webhook when new issues are created. The notification includes the issue title, number, URL, author, body, repository name, and timestamp.\n\n* fix: add permissions block and update Sla\n[…]\n action parameters\n\n- Add empty permissions block to limit GITHUB_TOKEN access\n- Update Slack action to use webhook and webhook-type parameters\n- Change payload format to match original implementation",
          "is_bot": false,
          "headline": "feat: add Slack notification workflow for new issues (#437)",
          "author_name": "Trirmadura J Ariyawansa",
          "author_login": "jariy17",
          "committed_at": "2026-01-27T23:27:33Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "f727b3dc3d7f972ffde033a625eecd7b36636572",
          "body": "Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore: bump version to 0.2.8 (#435)",
          "author_name": "github-actions[bot]",
          "author_login": "github-actions[bot]",
          "committed_at": "2026-01-23T14:13:13Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "7c23ffd8f466f9c1481c6d4812a545f04623dcae",
          "body": "Add static visualization commands for memory events (STM) and records (LTM):\n\nCLI Commands:\n- agentcore memory show: Memory details with strategies tree\n- agentcore memory show events: STM events with --all, --last N, --list-actors, --list-sessions, --verbose\n- agentcore memory show records: LTM rec\n[…]\ntion, status icons\n\nTests:\n- 20 CLI unit tests\n- 10 notebook interface tests\n- 13 integration tests in notebook\n- Data plane method tests for manager\n\nCo-authored-by: Roger Konlog <rkonlog@amazon.com>",
          "is_bot": false,
          "headline": "feat(memory): add memory visualization CLI commands (#434)",
          "author_name": "Roger Ian Konlog",
          "author_login": "IanKonlog",
          "committed_at": "2026-01-22T22:00:27Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "777e61e113c02d41d5f1a3e3cc80492493527993",
          "body": "…kerfile (#433)\n\nWhen deploying TypeScript agents, node_modules was being uploaded to S3\nand extracted in CodeBuild, breaking symlinks in .bin/ (e.g., tsc).\nThis forced users to use workarounds like:\n  \"build\": \"./node_modules/typescript/bin/tsc\"\n\nChanges:\n- Add node_modules/ to dockerignore.templat\n[…]\nude from uploads\n- Simplify Dockerfile.node.j2 to use single COPY . . before npm ci\n  (layer caching comment was incorrect - CodeBuild doesn't cache layers)\n\nUsers can now use standard: \"build\": \"tsc\"",
          "is_bot": false,
          "headline": "fix(typescript): exclude node_modules from S3 upload and simplify Doc…",
          "author_name": "Aidan Daly",
          "author_login": "aidandaly24",
          "committed_at": "2026-01-21T15:25:03Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "ed5a87093ba21ad85346c7a1682b7273e02f3ec9",
          "body": "Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore: bump version to 0.2.7 (#432)",
          "author_name": "github-actions[bot]",
          "author_login": "github-actions[bot]",
          "committed_at": "2026-01-20T22:18:46Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "4260dc5d21c276fc37fe46c9c8244478ce9a7e97",
          "body": "…r Runtime (#429)\n\n* feat(runtime): Add TypeScript/Node.js support for AgentCore Runtime\n\nAdd comprehensive TypeScript support to enable deploying Node.js agents\nto Bedrock AgentCore Runtime with container deployment.\n\nCore Features:\n- Language detection (Python/TypeScript) based on package.json pre\n[…]\nn streaming\nresponses, while maintaining compatibility with non-streaming agents\nby accepting both formats.\n\nTested with both streaming and non-streaming dev servers.\n\n🤖 Assisted by Amazon Q Developer",
          "is_bot": false,
          "headline": "feat(runtime): Add TypeScript/Node.js container deployment support fo…",
          "author_name": "Aidan Daly",
          "author_login": "aidandaly24",
          "committed_at": "2026-01-20T21:35:01Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "b65a330b39dee6d696b10217e8256553aa031200",
          "body": "…ssages (#424)",
          "is_bot": false,
          "headline": "fix: update 'agentcore launch' to 'agentcore deploy' in Next Steps me…",
          "author_name": "みのるん",
          "author_login": "minorun365",
          "committed_at": "2026-01-14T19:01:46Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "11855b7a252d52d0d2ca9c716db04837c8f1a885",
          "body": "Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore: bump version to 0.2.6 (#425)",
          "author_name": "github-actions[bot]",
          "author_login": "github-actions[bot]",
          "committed_at": "2026-01-13T21:58:50Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "efda1bc5b44a9ed23da0197d28f5676e7da3ff8b",
          "body": "…st (#422)\n\n* fix: agent version isolation - use unique image tags instead of :latest\n\nFixes version isolation issue where all agent versions were pulling the\nsame :latest image. Each deployment now gets a unique immutable image tag.\n\nChanges:\n- Add generate_image_tag() to create timestamp-based tag\n[…]\n tests to expect versioned tags in local mode\n- Maintain backward compatibility - no breaking changes for existing workflows\n\nFixes reviewer concerns about tag consistency and variable naming clarity.",
          "is_bot": false,
          "headline": "fix: agent version isolation - use unique image tags instead of :late…",
          "author_name": "Aidan Daly",
          "author_login": "aidandaly24",
          "committed_at": "2026-01-13T05:07:45Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "ab10f8461ce61c505608d2d1f48f085b070c09f9",
          "body": "…riptions (#419)\n\n* docs: enhance llms.txt policy headings with comprehensive descriptions\n\n---------\n\nCo-authored-by: Sainath Reddy Bobbala <bsnr@amazon.com>",
          "is_bot": false,
          "headline": "Policy docs: enhance llms.txt policy headings with comprehensive desc…",
          "author_name": "sainathreddyb",
          "author_login": "sainathreddyb",
          "committed_at": "2026-01-06T21:13:11Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "679b83fcff9760a224c7d98cca932a6f77a826ec",
          "body": "* add evaluation quickstart to mkdocs yaml\n\n* add terraform links in examples\n\n---------\n\nCo-authored-by: Jesse Turner <ajesstur@amazon.com>",
          "is_bot": false,
          "headline": "MCP Server docs add terraform and evaluation quickstart to mcp (#418)",
          "author_name": "Jesse Turner",
          "author_login": "jesseturner21",
          "committed_at": "2026-01-06T16:34:18Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "165496eeb877ff7bb514891e2779b5fd94140df9",
          "body": "Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore: bump version to 0.2.5 (#408)",
          "author_name": "github-actions[bot]",
          "author_login": "github-actions[bot]",
          "committed_at": "2025-12-13T05:23:50Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "1ede0f4684d47f1d601f16cf20c8be4aac726414",
          "body": "- Fix zipfile.writestr() stripping file permissions during merge\n- Preserve original ZipInfo objects with external_attr for both dependencies and code layers\n- Resolves permission errors when executing entrypoint files in runtime\n\nFixes issue where files had 600 permissions instead of 644 after zip merge,\ncausing 'Permission denied' errors during module imports and execution.\n\nCo-authored-by: adi-avadhanam <aravadha@amazon.com>",
          "is_bot": false,
          "headline": "fix: preserve file permissions in deployment zip (#407)",
          "author_name": "Adi Avadhanam",
          "author_login": "Adi0987",
          "committed_at": "2025-12-13T05:22:15Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "cf174b7e72ef386987144e67f74b6eaf5f935150",
          "body": "Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore: bump version to 0.2.4 (#405)",
          "author_name": "github-actions[bot]",
          "author_login": "github-actions[bot]",
          "committed_at": "2025-12-10T14:59:52Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "d2eb189a3351ff3595472ee40076ed5b18d624e8",
          "body": "…ocument (#403) (#404)",
          "is_bot": false,
          "headline": "fix: resolve double-encoded execution policy causing MalformedPolicyD…",
          "author_name": "Marcin Belczewski",
          "author_login": "marcinbelczewski",
          "committed_at": "2025-12-10T14:51:23Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "d64b5719ab646d7224a154f7d0ab9d7f4723ccff",
          "body": "Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore: bump version to 0.2.3 (#401)",
          "author_name": "github-actions[bot]",
          "author_login": "github-actions[bot]",
          "committed_at": "2025-12-09T19:49:50Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "1defa9bd1b5ca145f12d9c17adac146117af0348",
          "body": "…mmands (#400)",
          "is_bot": false,
          "headline": "feat: Printing localhost and local network addresses for local dev co…",
          "author_name": "Tejas Kashinath",
          "author_login": "tejaskash",
          "committed_at": "2025-12-09T19:07:59Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "0f13f6ef37392826f8f497953bb33d771424c503",
          "body": "…rectory (#399)",
          "is_bot": false,
          "headline": "fix: container building doesn't work when dependencies are in a subdi…",
          "author_name": "Tejas Kashinath",
          "author_login": "tejaskash",
          "committed_at": "2025-12-09T19:04:56Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "e548fc7ce6db35603319200bc1d2288a3cb2aaec",
          "body": "* feat: Scoping down policy statements\n\n* Removing redundant validate\n\n* Removing redundant memory_enabled parameter",
          "is_bot": false,
          "headline": "fix: Scoping down policy statements (#394)",
          "author_name": "Tejas Kashinath",
          "author_login": "tejaskash",
          "committed_at": "2025-12-09T17:36:03Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "4280c4144bbc7b0e8ebe21122c1ca9954af63377",
          "body": "Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore: bump version to 0.2.2 (#393)",
          "author_name": "github-actions[bot]",
          "author_login": "github-actions[bot]",
          "committed_at": "2025-12-04T05:00:32Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "2b492c6d928b5c211d44af23338eb7d7415d1935",
          "body": "* feat(identity): Add AWS JWT federation support for secretless M2M authentication\n\n- Add setup-aws-jwt command to enable IAM Outbound Web Identity Federation\n- Add list-aws-jwt command to view AWS JWT configuration\n- Add AwsJwtConfig schema for storing federation settings\n- Add ensure_aws_jwt_permi\n[…]\nx: Move aws_jwt to top-level agent config and add quickstart\n\n* fix: resolve unit test issues\n\n* fix: clean up comments and docstrings\n\n---------\n\nCo-authored-by: Sundar Raghavan <sdraghav@amazon.com>",
          "is_bot": false,
          "headline": "feat(identity): Add AWS JWT federation support for  M2M auth (#382)",
          "author_name": "Sundar Raghavan",
          "author_login": "sundargthb",
          "committed_at": "2025-12-03T23:59:15Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "b8fa78c628f76351df9374ce5e2fb45db6cfff1a",
          "body": "* docs: add WebSocket bi-directional streaming to runtime overview\n\n* fix: lint error\n\n* fix: update import in code blocks\n\n---------\n\nCo-authored-by: Sundar Raghavan <sdraghav@amazon.com>",
          "is_bot": false,
          "headline": "docs: add WebSocket bi-directional streaming to runtime overview (#392)",
          "author_name": "Sundar Raghavan",
          "author_login": "sundargthb",
          "committed_at": "2025-12-03T22:16:22Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "cd3758bc8f9d7e95faf7c99466f5e7e668cfe664",
          "body": "Co-authored-by: Sainath Reddy Bobbala <bsnr@amazon.com>",
          "is_bot": false,
          "headline": "Add require aws creds decorator to policy cli commands (#391)",
          "author_name": "sainathreddyb",
          "author_login": "sainathreddyb",
          "committed_at": "2025-12-03T17:40:14Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "52cf2ed85a24b76607eb9355b603c90380798c86",
          "body": "… Observability, Memory (#389)\n\nCo-authored-by: Jesse Turner <ajesstur@amazon.com>",
          "is_bot": false,
          "headline": "add aws docs link in quickstart guides for Runtime, Identity, Policy,…",
          "author_name": "jesseturner21",
          "author_login": "jesseturner21",
          "committed_at": "2025-12-02T23:41:28Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "c4d573ed6c6e696eacd5bb859d15602b98cc64cb",
          "body": "Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore: bump version to 0.2.1 (#390)",
          "author_name": "github-actions[bot]",
          "author_login": "github-actions[bot]",
          "committed_at": "2025-12-02T20:17:05Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "9826b08aeee68e060974ca34b2b3df3356ac68f9",
          "body": "…in utils (#388)",
          "is_bot": false,
          "headline": "fix: catch the expired creds exception and throw it using the method …",
          "author_name": "Gitika",
          "author_login": "notgitika",
          "committed_at": "2025-12-02T19:55:51Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "70e3078964dcff384addd7ebf4da59a0720bb856",
          "body": "…ntity Custom Claims (#387)\n\n* Add support of inbound authorizer configurations for allowed scopes and custom claims\n\n* Add support of inbound authorizer configurations for allowed scopes and custom claims\n\n* Add support of inbound authorizer configurations for allowed scopes and custom claims\n\n* Ad\n[…]\nthub.com>\nCo-authored-by: Gitika <53349492+notgitika@users.noreply.github.com>\nCo-authored-by: Tejas Kashinath <42380254+tejaskash@users.noreply.github.com\nCo-authored-by: notgitika <gitijh@gmail.com>",
          "is_bot": false,
          "headline": "re:Invent 2025 Feature Launch: AgentCore Policy Engine, Evals and Ide…",
          "author_name": "Tejas Kashinath",
          "author_login": "tejaskash",
          "committed_at": "2025-12-02T17:50:09Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "916f81d5a3dd4e9bb0fc46ee6eb2501d09047026",
          "body": "* fix: agent_config.name bug when running configure after create with production template mode\n\n* Early fail if deployment package exceeds 250MB\n\n---------\n\nCo-authored-by: Tejas Kashinath <tkashina@amazon.com>",
          "is_bot": false,
          "headline": "fix: Fail early if deployment package size exceeds 250MB (#386)",
          "author_name": "Tejas Kashinath",
          "author_login": "tejaskash",
          "committed_at": "2025-12-01T22:21:55Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "824316c71768edf56f5ff6c79d3379c9cb2f17ee",
          "body": "…roduction template mode (#384)\n\nCo-authored-by: Tejas Kashinath <tejashkashinath@gmail.com>\n\nFixing a bug where running configure in the agentcore create flow throws an exception when its unable to find agent_config.name. This happens because load_config returns an instance of BedrockAgentCoreConfigSchema but the code is expecting an instance of BedrockAgentCoreAgentSchema\n\nAdding additional unit tests for more coverage",
          "is_bot": false,
          "headline": "fix: agent_config.name bug when running configure after create with p…",
          "author_name": "Tejas Kashinath",
          "author_login": "tejaskash",
          "committed_at": "2025-12-01T18:36:11Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "48968f446fbaa3f5d246cc71fd8cb76f92daf501",
          "body": "Co-authored-by: Sundar Raghavan <sdraghav@amazon.com>",
          "is_bot": false,
          "headline": "docs: update middleware integration in Runtime Overview (#381)",
          "author_name": "Sundar Raghavan",
          "author_login": "sundargthb",
          "committed_at": "2025-11-30T22:36:13Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "63970daa6b3c2d448813366d3dc13a88499b961e",
          "body": "…ment in IAC path (#377)",
          "is_bot": false,
          "headline": "fix: add missing basic template README. Also fix erroneous print stat…",
          "author_name": "notowen333",
          "author_login": "notowen333",
          "committed_at": "2025-11-29T00:18:23Z",
          "body_truncated": false,
          "is_coding_agent": false
        }
      ],
      "releases_count": 56,
      "commits_last_year": 276,
      "latest_release_at": "2026-07-28T20:04:20Z",
      "latest_release_tag": "v0.3.11",
      "releases_from_tags": false,
      "days_since_last_push": 0,
      "active_weeks_last_year": 42,
      "days_since_latest_release": 0,
      "mean_days_between_releases": 16.2
    },
    "community": {
      "has_readme": true,
      "has_license": true,
      "has_description": true,
      "has_contributing": true,
      "health_percentage": 87,
      "has_issue_template": false,
      "has_code_of_conduct": true,
      "has_pull_request_template": true
    },
    "ecosystem": {
      "packages": [
        {
          "name": "bedrock-agentcore-starter-toolkit",
          "exists": true,
          "license": "Apache-2.0",
          "keywords": [
            "Development Status :: 3 - Alpha",
            "Intended Audience :: Developers",
            "License :: OSI Approved :: Apache Software License",
            "Operating System :: OS Independent",
            "Programming Language :: Python :: 3",
            "Programming Language :: Python :: 3.10",
            "Programming Language :: Python :: 3.11",
            "Programming Language :: Python :: 3.12",
            "Programming Language :: Python :: 3.13",
            "Topic :: Scientific/Engineering :: Artificial Intelligence",
            "Topic :: Software Development :: Libraries :: Python Modules"
          ],
          "ecosystem": "pypi",
          "matches_repo": true,
          "registry_url": "https://pypi.org/project/bedrock-agentcore-starter-toolkit/",
          "is_deprecated": false,
          "latest_version": "0.3.11",
          "repository_url": "https://github.com/aws/bedrock-agentcore-starter-toolkit",
          "versions_count": 57,
          "total_downloads": null,
          "dependents_count": null,
          "deprecation_note": null,
          "maintainers_count": null,
          "monthly_downloads": null,
          "first_published_at": "2025-07-15T01:53:43.736706Z",
          "latest_published_at": "2026-07-28T20:03:37.204264Z",
          "latest_version_yanked": null,
          "days_since_latest_publish": 0
        }
      ]
    },
    "popularity": {
      "forks": 157,
      "stars": 498,
      "watchers": 7,
      "fork_history": {
        "days": [
          {
            "date": "2025-07-16",
            "count": 1
          },
          {
            "date": "2025-07-19",
            "count": 1
          },
          {
            "date": "2025-07-20",
            "count": 1
          },
          {
            "date": "2025-07-22",
            "count": 1
          },
          {
            "date": "2025-07-23",
            "count": 1
          },
          {
            "date": "2025-07-25",
            "count": 1
          },
          {
            "date": "2025-07-27",
            "count": 1
          },
          {
            "date": "2025-07-28",
            "count": 1
          },
          {
            "date": "2025-07-31",
            "count": 2
          },
          {
            "date": "2025-08-02",
            "count": 1
          },
          {
            "date": "2025-08-05",
            "count": 2
          },
          {
            "date": "2025-08-06",
            "count": 1
          },
          {
            "date": "2025-08-08",
            "count": 1
          },
          {
            "date": "2025-08-09",
            "count": 1
          },
          {
            "date": "2025-08-11",
            "count": 1
          },
          {
            "date": "2025-08-15",
            "count": 2
          },
          {
            "date": "2025-08-17",
            "count": 1
          },
          {
            "date": "2025-08-18",
            "count": 4
          },
          {
            "date": "2025-08-19",
            "count": 1
          },
          {
            "date": "2025-08-20",
            "count": 3
          },
          {
            "date": "2025-08-21",
            "count": 1
          },
          {
            "date": "2025-08-23",
            "count": 1
          },
          {
            "date": "2025-08-27",
            "count": 1
          },
          {
            "date": "2025-08-29",
            "count": 3
          },
          {
            "date": "2025-08-30",
            "count": 1
          },
          {
            "date": "2025-09-01",
            "count": 2
          },
          {
            "date": "2025-09-03",
            "count": 1
          },
          {
            "date": "2025-09-05",
            "count": 1
          },
          {
            "date": "2025-09-09",
            "count": 2
          },
          {
            "date": "2025-09-10",
            "count": 1
          },
          {
            "date": "2025-09-12",
            "count": 2
          },
          {
            "date": "2025-09-15",
            "count": 1
          },
          {
            "date": "2025-09-16",
            "count": 1
          },
          {
            "date": "2025-09-18",
            "count": 2
          },
          {
            "date": "2025-09-19",
            "count": 2
          },
          {
            "date": "2025-09-20",
            "count": 1
          },
          {
            "date": "2025-09-21",
            "count": 1
          },
          {
            "date": "2025-09-22",
            "count": 1
          },
          {
            "date": "2025-09-23",
            "count": 3
          },
          {
            "date": "2025-09-25",
            "count": 2
          },
          {
            "date": "2025-09-27",
            "count": 1
          },
          {
            "date": "2025-09-29",
            "count": 1
          },
          {
            "date": "2025-10-01",
            "count": 1
          },
          {
            "date": "2025-10-03",
            "count": 1
          },
          {
            "date": "2025-10-04",
            "count": 1
          },
          {
            "date": "2025-10-05",
            "count": 1
          },
          {
            "date": "2025-10-06",
            "count": 1
          },
          {
            "date": "2025-10-09",
            "count": 1
          },
          {
            "date": "2025-10-10",
            "count": 2
          },
          {
            "date": "2025-10-11",
            "count": 1
          },
          {
            "date": "2025-10-14",
            "count": 1
          },
          {
            "date": "2025-10-20",
            "count": 1
          },
          {
            "date": "2025-10-21",
            "count": 1
          },
          {
            "date": "2025-10-22",
            "count": 1
          },
          {
            "date": "2025-10-23",
            "count": 1
          },
          {
            "date": "2025-10-24",
            "count": 3
          },
          {
            "date": "2025-10-25",
            "count": 1
          },
          {
            "date": "2025-10-26",
            "count": 1
          },
          {
            "date": "2025-10-27",
            "count": 1
          },
          {
            "date": "2025-10-28",
            "count": 2
          },
          {
            "date": "2025-10-29",
            "count": 1
          },
          {
            "date": "2025-11-03",
            "count": 1
          },
          {
            "date": "2025-11-05",
            "count": 2
          },
          {
            "date": "2025-11-08",
            "count": 1
          },
          {
            "date": "2025-11-14",
            "count": 2
          },
          {
            "date": "2025-11-15",
            "count": 1
          },
          {
            "date": "2025-11-18",
            "count": 2
          },
          {
            "date": "2025-11-19",
            "count": 1
          },
          {
            "date": "2025-11-20",
            "count": 1
          },
          {
            "date": "2025-11-24",
            "count": 2
          },
          {
            "date": "2025-11-25",
            "count": 1
          },
          {
            "date": "2025-11-26",
            "count": 2
          },
          {
            "date": "2025-12-01",
            "count": 2
          },
          {
            "date": "2025-12-09",
            "count": 1
          },
          {
            "date": "2025-12-10",
            "count": 2
          },
          {
            "date": "2025-12-16",
            "count": 1
          },
          {
            "date": "2025-12-23",
            "count": 1
          },
          {
            "date": "2025-12-24",
            "count": 1
          },
          {
            "date": "2026-01-01",
            "count": 1
          },
          {
            "date": "2026-01-06",
            "count": 1
          },
          {
            "date": "2026-01-07",
            "count": 1
          },
          {
            "date": "2026-01-08",
            "count": 2
          },
          {
            "date": "2026-01-09",
            "count": 1
          },
          {
            "date": "2026-01-22",
            "count": 1
          },
          {
            "date": "2026-01-24",
            "count": 1
          },
          {
            "date": "2026-01-30",
            "count": 1
          },
          {
            "date": "2026-02-02",
            "count": 1
          },
          {
            "date": "2026-02-16",
            "count": 1
          },
          {
            "date": "2026-02-18",
            "count": 1
          },
          {
            "date": "2026-02-19",
            "count": 1
          },
          {
            "date": "2026-02-27",
            "count": 1
          },
          {
            "date": "2026-03-03",
            "count": 1
          },
          {
            "date": "2026-03-07",
            "count": 1
          },
          {
            "date": "2026-03-12",
            "count": 1
          },
          {
            "date": "2026-03-14",
            "count": 1
          },
          {
            "date": "2026-03-15",
            "count": 2
          },
          {
            "date": "2026-03-19",
            "count": 1
          },
          {
            "date": "2026-03-20",
            "count": 1
          },
          {
            "date": "2026-03-23",
            "count": 1
          },
          {
            "date": "2026-03-27",
            "count": 1
          },
          {
            "date": "2026-03-30",
            "count": 1
          },
          {
            "date": "2026-04-01",
            "count": 1
          },
          {
            "date": "2026-04-02",
            "count": 2
          },
          {
            "date": "2026-04-07",
            "count": 1
          },
          {
            "date": "2026-04-15",
            "count": 1
          },
          {
            "date": "2026-04-16",
            "count": 1
          },
          {
            "date": "2026-04-23",
            "count": 1
          },
          {
            "date": "2026-05-22",
            "count": 1
          },
          {
            "date": "2026-05-31",
            "count": 1
          },
          {
            "date": "2026-06-08",
            "count": 1
          },
          {
            "date": "2026-06-11",
            "count": 1
          },
          {
            "date": "2026-06-17",
            "count": 2
          },
          {
            "date": "2026-06-22",
            "count": 1
          },
          {
            "date": "2026-06-27",
            "count": 1
          },
          {
            "date": "2026-06-30",
            "count": 1
          },
          {
            "date": "2026-07-02",
            "count": 1
          },
          {
            "date": "2026-07-10",
            "count": 1
          },
          {
            "date": "2026-07-12",
            "count": 1
          },
          {
            "date": "2026-07-24",
            "count": 2
          },
          {
            "date": "2026-07-26",
            "count": 1
          },
          {
            "date": "2026-07-27",
            "count": 1
          }
        ],
        "complete": true,
        "collected": 155,
        "total_forks": 157
      },
      "star_history": null,
      "open_issues_and_prs": 113
    },
    "ai_readiness": {
      "has_nix": false,
      "example_dirs": [
        "notebooks"
      ],
      "has_llms_txt": false,
      "has_dockerfile": true,
      "has_mcp_signal": true,
      "bootstrap_files": [],
      "api_schema_files": [],
      "has_devcontainer": false,
      "typecheck_configs": [],
      "toolchain_manifests": [],
      "largest_source_bytes": 203060,
      "source_files_sampled": 303,
      "oversized_source_files": 13,
      "agent_instruction_files": [],
      "agent_instruction_max_bytes": null
    },
    "dependencies": {
      "manifests": [
        "pyproject.toml"
      ],
      "advisories": {
        "error": null,
        "scope": "repository_graph",
        "source": "osv",
        "findings": [
          {
            "name": "bedrock-agentcore",
            "direct": true,
            "version": "1.1.1",
            "severity": "high",
            "ecosystem": "pypi",
            "cvss_score": 7.3,
            "advisory_ids": [
              "GHSA-j6g5-3hh3-pgw8"
            ],
            "fixed_version": "1.18.1",
            "advisory_count": 1,
            "oldest_advisory_days": 3
          },
          {
            "name": "click",
            "direct": false,
            "version": "8.3.0",
            "severity": "high",
            "ecosystem": "pypi",
            "cvss_score": 7.2,
            "advisory_ids": [
              "PYSEC-2026-2132"
            ],
            "fixed_version": "8.3.3",
            "advisory_count": 1,
            "oldest_advisory_days": 89
          },
          {
            "name": "mcp",
            "direct": false,
            "version": "1.23.0",
            "severity": "high",
            "ecosystem": "pypi",
            "cvss_score": 7.6,
            "advisory_ids": [
              "GHSA-hvrp-rf83-w775",
              "GHSA-jpw9-pfvf-9f58",
              "GHSA-vj7q-gjh5-988w",
              "PYSEC-2026-3481",
              "PYSEC-2026-3482",
              "PYSEC-2026-3483"
            ],
            "fixed_version": "1.28.1",
            "advisory_count": 6,
            "oldest_advisory_days": 12
          },
          {
            "name": "requests",
            "direct": true,
            "version": "2.32.5",
            "severity": "moderate",
            "ecosystem": "pypi",
            "cvss_score": 5.5,
            "advisory_ids": [
              "GHSA-gc5v-m9x4-r6x2",
              "PYSEC-2026-2275"
            ],
            "fixed_version": "2.33.0",
            "advisory_count": 2,
            "oldest_advisory_days": 125
          },
          {
            "name": "filelock",
            "direct": false,
            "version": "3.20.0",
            "severity": "moderate",
            "ecosystem": "pypi",
            "cvss_score": 6.3,
            "advisory_ids": [
              "GHSA-qmgc-5h2g-mvrw",
              "GHSA-w853-jp5j-5j7f",
              "PYSEC-2026-1374",
              "PYSEC-2026-1375"
            ],
            "fixed_version": "3.20.3",
            "advisory_count": 4,
            "oldest_advisory_days": 223
          },
          {
            "name": "idna",
            "direct": false,
            "version": "3.11",
            "severity": "moderate",
            "ecosystem": "pypi",
            "cvss_score": 5.3,
            "advisory_ids": [
              "GHSA-65pc-fj4g-8rjx",
              "PYSEC-2026-215"
            ],
            "fixed_version": "3.15",
            "advisory_count": 2,
            "oldest_advisory_days": 70
          },
          {
            "name": "pymdown-extensions",
            "direct": false,
            "version": "10.16.1",
            "severity": "moderate",
            "ecosystem": "pypi",
            "cvss_score": 5.3,
            "advisory_ids": [
              "GHSA-62q4-447f-wv8h",
              "GHSA-9xwg-3r6f-jcx2",
              "PYSEC-2026-2999"
            ],
            "fixed_version": "11.0.0",
            "advisory_count": 3,
            "oldest_advisory_days": 70
          },
          {
            "name": "pytest",
            "direct": false,
            "version": "8.4.2",
            "severity": "moderate",
            "ecosystem": "pypi",
            "cvss_score": 6.8,
            "advisory_ids": [
              "GHSA-6w46-j5rx-g56g",
              "PYSEC-2026-1845"
            ],
            "fixed_version": "9.0.3",
            "advisory_count": 2,
            "oldest_advisory_days": 187
          },
          {
            "name": "python-dotenv",
            "direct": false,
            "version": "1.2.1",
            "severity": "moderate",
            "ecosystem": "pypi",
            "cvss_score": 6.6,
            "advisory_ids": [
              "GHSA-mf9w-mj56-hr94",
              "PYSEC-2026-2270"
            ],
            "fixed_version": "1.2.2",
            "advisory_count": 2,
            "oldest_advisory_days": 99
          },
          {
            "name": "virtualenv",
            "direct": false,
            "version": "20.35.4",
            "severity": "moderate",
            "ecosystem": "pypi",
            "cvss_score": 4.5,
            "advisory_ids": [
              "GHSA-597g-3phw-6986",
              "PYSEC-2026-2009"
            ],
            "fixed_version": "20.36.1",
            "advisory_count": 2,
            "oldest_advisory_days": 196
          },
          {
            "name": "werkzeug",
            "direct": false,
            "version": "3.1.3",
            "severity": "moderate",
            "ecosystem": "pypi",
            "cvss_score": 5.3,
            "advisory_ids": [
              "GHSA-29vq-49wr-vm6x",
              "GHSA-87hc-h4r5-73f7",
              "GHSA-hgf8-39gv-g3f2",
              "PYSEC-2026-2044",
              "PYSEC-2026-2046",
              "PYSEC-2026-2320"
            ],
            "fixed_version": "3.1.6",
            "advisory_count": 6,
            "oldest_advisory_days": 238
          },
          {
            "name": "pygments",
            "direct": false,
            "version": "2.19.2",
            "severity": "low",
            "ecosystem": "pypi",
            "cvss_score": 3.3,
            "advisory_ids": [
              "GHSA-5239-wwwm-4pmq",
              "PYSEC-2026-2987"
            ],
            "fixed_version": "2.20.0",
            "advisory_count": 2,
            "oldest_advisory_days": 128
          }
        ],
        "collected": true,
        "malicious": [],
        "truncated": false,
        "by_severity": {
          "low": 1,
          "high": 3,
          "moderate": 8
        },
        "advisory_count": 33,
        "affected_count": 12,
        "assessed_count": 142,
        "malicious_count": 0,
        "assessed_package": null,
        "unassessed_count": 0,
        "direct_affected_count": 2
      },
      "ecosystems": [
        "pypi"
      ],
      "dependencies": [
        {
          "name": "bedrock-agentcore",
          "manifest": "pyproject.toml",
          "ecosystem": "pypi",
          "version_constraint": ">=1.1.0"
        },
        {
          "name": "docstring_parser",
          "manifest": "pyproject.toml",
          "ecosystem": "pypi",
          "version_constraint": ">=0.15,<1.0"
        },
        {
          "name": "httpx",
          "manifest": "pyproject.toml",
          "ecosystem": "pypi",
          "version_constraint": ">=0.28.1"
        },
        {
          "name": "jinja2",
          "manifest": "pyproject.toml",
          "ecosystem": "pypi",
          "version_constraint": ">=3.1.6"
        },
        {
          "name": "prompt-toolkit",
          "manifest": "pyproject.toml",
          "ecosystem": "pypi",
          "version_constraint": ">=3.0.51"
        },
        {
          "name": "pydantic",
          "manifest": "pyproject.toml",
          "ecosystem": "pypi",
          "version_constraint": ">=2.0.0,<2.41.3"
        },
        {
          "name": "urllib3",
          "manifest": "pyproject.toml",
          "ecosystem": "pypi",
          "version_constraint": ">=1.26.0"
        },
        {
          "name": "pyyaml",
          "manifest": "pyproject.toml",
          "ecosystem": "pypi",
          "version_constraint": ">=6.0.2"
        },
        {
          "name": "requests",
          "manifest": "pyproject.toml",
          "ecosystem": "pypi",
          "version_constraint": ">=2.25.0"
        },
        {
          "name": "rich",
          "manifest": "pyproject.toml",
          "ecosystem": "pypi",
          "version_constraint": ">=13.0.0"
        },
        {
          "name": "toml",
          "manifest": "pyproject.toml",
          "ecosystem": "pypi",
          "version_constraint": ">=0.10.2"
        },
        {
          "name": "typer",
          "manifest": "pyproject.toml",
          "ecosystem": "pypi",
          "version_constraint": ">=0.19.0"
        },
        {
          "name": "typing-extensions",
          "manifest": "pyproject.toml",
          "ecosystem": "pypi",
          "version_constraint": ">=4.13.2,<5.0.0"
        },
        {
          "name": "uvicorn",
          "manifest": "pyproject.toml",
          "ecosystem": "pypi",
          "version_constraint": ">=0.34.2"
        },
        {
          "name": "autopep8",
          "manifest": "pyproject.toml",
          "ecosystem": "pypi",
          "version_constraint": ">=2.3.2"
        },
        {
          "name": "prance",
          "manifest": "pyproject.toml",
          "ecosystem": "pypi",
          "version_constraint": ">=25.4.8.0"
        },
        {
          "name": "ruamel-yaml",
          "manifest": "pyproject.toml",
          "ecosystem": "pypi",
          "version_constraint": ">=0.18.14"
        },
        {
          "name": "questionary",
          "manifest": "pyproject.toml",
          "ecosystem": "pypi",
          "version_constraint": ">=2.1.0"
        },
        {
          "name": "openapi-spec-validator",
          "manifest": "pyproject.toml",
          "ecosystem": "pypi",
          "version_constraint": ">=0.7.2"
        },
        {
          "name": "py-openapi-schema-to-json-schema",
          "manifest": "pyproject.toml",
          "ecosystem": "pypi",
          "version_constraint": ">=0.0.3"
        },
        {
          "name": "starlette",
          "manifest": "pyproject.toml",
          "ecosystem": "pypi",
          "version_constraint": ">=0.46.2"
        },
        {
          "name": "boto3",
          "manifest": "pyproject.toml",
          "ecosystem": "pypi",
          "version_constraint": ">=1.42.1"
        },
        {
          "name": "botocore",
          "manifest": "pyproject.toml",
          "ecosystem": "pypi",
          "version_constraint": ">=1.42.1"
        }
      ],
      "all_dependencies": {
        "error": null,
        "source": "github-sbom",
        "packages": [
          {
            "name": "autopep8",
            "direct": true,
            "version": "2.3.2",
            "ecosystem": "pypi"
          },
          {
            "name": "bedrock-agentcore",
            "direct": true,
            "version": "1.1.1",
            "ecosystem": "pypi"
          },
          {
            "name": "boto3",
            "direct": true,
            "version": "1.42.1",
            "ecosystem": "pypi"
          },
          {
            "name": "botocore",
            "direct": true,
            "version": "1.42.1",
            "ecosystem": "pypi"
          },
          {
            "name": "docstring-parser",
            "direct": true,
            "version": "0.17.0",
            "ecosystem": "pypi"
          },
          {
            "name": "httpx",
            "direct": true,
            "version": "0.28.1",
            "ecosystem": "pypi"
          },
          {
            "name": "jinja2",
            "direct": true,
            "version": "3.1.6",
            "ecosystem": "pypi"
          },
          {
            "name": "openapi-spec-validator",
            "direct": true,
            "version": "0.7.2",
            "ecosystem": "pypi"
          },
          {
            "name": "prance",
            "direct": true,
            "version": "25.4.8.0",
            "ecosystem": "pypi"
          },
          {
            "name": "prompt-toolkit",
            "direct": true,
            "version": "3.0.52",
            "ecosystem": "pypi"
          },
          {
            "name": "py-openapi-schema-to-json-schema",
            "direct": true,
            "version": "0.0.3",
            "ecosystem": "pypi"
          },
          {
            "name": "pydantic",
            "direct": true,
            "version": "2.12.3",
            "ecosystem": "pypi"
          },
          {
            "name": "pyyaml",
            "direct": true,
            "version": "6.0.3",
            "ecosystem": "pypi"
          },
          {
            "name": "questionary",
            "direct": true,
            "version": "2.1.1",
            "ecosystem": "pypi"
          },
          {
            "name": "requests",
            "direct": true,
            "version": "2.32.5",
            "ecosystem": "pypi"
          },
          {
            "name": "rich",
            "direct": true,
            "version": "14.2.0",
            "ecosystem": "pypi"
          },
          {
            "name": "ruamel-yaml",
            "direct": true,
            "version": "0.18.16",
            "ecosystem": "pypi"
          },
          {
            "name": "starlette",
            "direct": true,
            "version": "1.3.1",
            "ecosystem": "pypi"
          },
          {
            "name": "toml",
            "direct": true,
            "version": "0.10.2",
            "ecosystem": "pypi"
          },
          {
            "name": "typer",
            "direct": true,
            "version": "0.20.0",
            "ecosystem": "pypi"
          },
          {
            "name": "typing-extensions",
            "direct": true,
            "version": "4.15.0",
            "ecosystem": "pypi"
          },
          {
            "name": "urllib3",
            "direct": true,
            "version": "2.7.0",
            "ecosystem": "pypi"
          },
          {
            "name": "uvicorn",
            "direct": true,
            "version": "0.38.0",
            "ecosystem": "pypi"
          },
          {
            "name": "annotated-types",
            "direct": false,
            "version": "0.7.0",
            "ecosystem": "pypi"
          },
          {
            "name": "anyio",
            "direct": false,
            "version": "4.11.0",
            "ecosystem": "pypi"
          },
          {
            "name": "attrs",
            "direct": false,
            "version": "25.4.0",
            "ecosystem": "pypi"
          },
          {
            "name": "awscrt",
            "direct": false,
            "version": "0.29.1",
            "ecosystem": "pypi"
          },
          {
            "name": "babel",
            "direct": false,
            "version": "2.17.0",
            "ecosystem": "pypi"
          },
          {
            "name": "backports-asyncio-runner",
            "direct": false,
            "version": "1.2.0",
            "ecosystem": "pypi"
          },
          {
            "name": "backrefs",
            "direct": false,
            "version": "5.9",
            "ecosystem": "pypi"
          },
          {
            "name": "beautifulsoup4",
            "direct": false,
            "version": "4.14.2",
            "ecosystem": "pypi"
          },
          {
            "name": "bedrock-agentcore-starter-toolkit",
            "direct": false,
            "version": "0.3.10",
            "ecosystem": "pypi"
          },
          {
            "name": "bracex",
            "direct": false,
            "version": "2.6",
            "ecosystem": "pypi"
          },
          {
            "name": "certifi",
            "direct": false,
            "version": "2025.10.5",
            "ecosystem": "pypi"
          },
          {
            "name": "cffi",
            "direct": false,
            "version": "2.0.0",
            "ecosystem": "pypi"
          },
          {
            "name": "cfgv",
            "direct": false,
            "version": "3.4.0",
            "ecosystem": "pypi"
          },
          {
            "name": "chardet",
            "direct": false,
            "version": "5.2.0",
            "ecosystem": "pypi"
          },
          {
            "name": "charset-normalizer",
            "direct": false,
            "version": "3.4.4",
            "ecosystem": "pypi"
          },
          {
            "name": "click",
            "direct": false,
            "version": "8.3.0",
            "ecosystem": "pypi"
          },
          {
            "name": "colorama",
            "direct": false,
            "version": "0.4.6",
            "ecosystem": "pypi"
          },
          {
            "name": "coverage",
            "direct": false,
            "version": "7.11.0",
            "ecosystem": "pypi"
          },
          {
            "name": "cryptography",
            "direct": false,
            "version": "48.0.1",
            "ecosystem": "pypi"
          },
          {
            "name": "distlib",
            "direct": false,
            "version": "0.4.0",
            "ecosystem": "pypi"
          },
          {
            "name": "exceptiongroup",
            "direct": false,
            "version": "1.3.0",
            "ecosystem": "pypi"
          },
          {
            "name": "filelock",
            "direct": false,
            "version": "3.20.0",
            "ecosystem": "pypi"
          },
          {
            "name": "ghp-import",
            "direct": false,
            "version": "2.1.0",
            "ecosystem": "pypi"
          },
          {
            "name": "griffe",
            "direct": false,
            "version": "1.14.0",
            "ecosystem": "pypi"
          },
          {
            "name": "h11",
            "direct": false,
            "version": "0.16.0",
            "ecosystem": "pypi"
          },
          {
            "name": "hjson",
            "direct": false,
            "version": "3.1.0",
            "ecosystem": "pypi"
          },
          {
            "name": "httpcore",
            "direct": false,
            "version": "1.0.9",
            "ecosystem": "pypi"
          },
          {
            "name": "httpx-sse",
            "direct": false,
            "version": "0.4.3",
            "ecosystem": "pypi"
          },
          {
            "name": "identify",
            "direct": false,
            "version": "2.6.15",
            "ecosystem": "pypi"
          },
          {
            "name": "idna",
            "direct": false,
            "version": "3.11",
            "ecosystem": "pypi"
          },
          {
            "name": "importlib-metadata",
            "direct": false,
            "version": "8.7.0",
            "ecosystem": "pypi"
          },
          {
            "name": "importlib-resources",
            "direct": false,
            "version": "6.5.2",
            "ecosystem": "pypi"
          },
          {
            "name": "iniconfig",
            "direct": false,
            "version": "2.3.0",
            "ecosystem": "pypi"
          },
          {
            "name": "jmespath",
            "direct": false,
            "version": "1.0.1",
            "ecosystem": "pypi"
          },
          {
            "name": "jsonschema",
            "direct": false,
            "version": "4.25.1",
            "ecosystem": "pypi"
          },
          {
            "name": "jsonschema-path",
            "direct": false,
            "version": "0.3.4",
            "ecosystem": "pypi"
          },
          {
            "name": "jsonschema-specifications",
            "direct": false,
            "version": "2025.9.1",
            "ecosystem": "pypi"
          },
          {
            "name": "lazy-object-proxy",
            "direct": false,
            "version": "1.12.0",
            "ecosystem": "pypi"
          },
          {
            "name": "markdown",
            "direct": false,
            "version": "3.10",
            "ecosystem": "pypi"
          },
          {
            "name": "markdown-it-py",
            "direct": false,
            "version": "4.0.0",
            "ecosystem": "pypi"
          },
          {
            "name": "markdownify",
            "direct": false,
            "version": "1.2.0",
            "ecosystem": "pypi"
          },
          {
            "name": "markupsafe",
            "direct": false,
            "version": "3.0.3",
            "ecosystem": "pypi"
          },
          {
            "name": "mcp",
            "direct": false,
            "version": "1.23.0",
            "ecosystem": "pypi"
          },
          {
            "name": "mdformat",
            "direct": false,
            "version": "1.0.0",
            "ecosystem": "pypi"
          },
          {
            "name": "mdurl",
            "direct": false,
            "version": "0.1.2",
            "ecosystem": "pypi"
          },
          {
            "name": "mergedeep",
            "direct": false,
            "version": "1.3.4",
            "ecosystem": "pypi"
          },
          {
            "name": "mike",
            "direct": false,
            "version": "2.1.3",
            "ecosystem": "pypi"
          },
          {
            "name": "mkdocs",
            "direct": false,
            "version": "1.6.1",
            "ecosystem": "pypi"
          },
          {
            "name": "mkdocs-autorefs",
            "direct": false,
            "version": "1.4.3",
            "ecosystem": "pypi"
          },
          {
            "name": "mkdocs-get-deps",
            "direct": false,
            "version": "0.2.0",
            "ecosystem": "pypi"
          },
          {
            "name": "mkdocs-include-markdown-plugin",
            "direct": false,
            "version": "7.2.0",
            "ecosystem": "pypi"
          },
          {
            "name": "mkdocs-llmstxt",
            "direct": false,
            "version": "0.1.0",
            "ecosystem": "pypi"
          },
          {
            "name": "mkdocs-macros-plugin",
            "direct": false,
            "version": "1.3.9",
            "ecosystem": "pypi"
          },
          {
            "name": "mkdocs-material",
            "direct": false,
            "version": "9.6.23",
            "ecosystem": "pypi"
          },
          {
            "name": "mkdocs-material-extensions",
            "direct": false,
            "version": "1.3.1",
            "ecosystem": "pypi"
          },
          {
            "name": "mkdocstrings",
            "direct": false,
            "version": "0.30.1",
            "ecosystem": "pypi"
          },
          {
            "name": "mkdocstrings-python",
            "direct": false,
            "version": "1.18.2",
            "ecosystem": "pypi"
          },
          {
            "name": "moto",
            "direct": false,
            "version": "5.1.16",
            "ecosystem": "pypi"
          },
          {
            "name": "mypy",
            "direct": false,
            "version": "1.18.2",
            "ecosystem": "pypi"
          },
          {
            "name": "mypy-extensions",
            "direct": false,
            "version": "1.1.0",
            "ecosystem": "pypi"
          },
          {
            "name": "nodeenv",
            "direct": false,
            "version": "1.9.1",
            "ecosystem": "pypi"
          },
          {
            "name": "openapi-schema-validator",
            "direct": false,
            "version": "0.6.3",
            "ecosystem": "pypi"
          },
          {
            "name": "opentelemetry-api",
            "direct": false,
            "version": "1.38.0",
            "ecosystem": "pypi"
          },
          {
            "name": "opentelemetry-instrumentation",
            "direct": false,
            "version": "0.59b0",
            "ecosystem": "pypi"
          },
          {
            "name": "opentelemetry-instrumentation-threading",
            "direct": false,
            "version": "0.59b0",
            "ecosystem": "pypi"
          },
          {
            "name": "opentelemetry-sdk",
            "direct": false,
            "version": "1.38.0",
            "ecosystem": "pypi"
          },
          {
            "name": "opentelemetry-semantic-conventions",
            "direct": false,
            "version": "0.59b0",
            "ecosystem": "pypi"
          },
          {
            "name": "packaging",
            "direct": false,
            "version": "25.0",
            "ecosystem": "pypi"
          },
          {
            "name": "paginate",
            "direct": false,
            "version": "0.5.7",
            "ecosystem": "pypi"
          },
          {
            "name": "pathable",
            "direct": false,
            "version": "0.4.4",
            "ecosystem": "pypi"
          },
          {
            "name": "pathspec",
            "direct": false,
            "version": "0.12.1",
            "ecosystem": "pypi"
          },
          {
            "name": "platformdirs",
            "direct": false,
            "version": "4.5.0",
            "ecosystem": "pypi"
          },
          {
            "name": "pluggy",
            "direct": false,
            "version": "1.6.0",
            "ecosystem": "pypi"
          },
          {
            "name": "pre-commit",
            "direct": false,
            "version": "4.3.0",
            "ecosystem": "pypi"
          },
          {
            "name": "pycodestyle",
            "direct": false,
            "version": "2.14.0",
            "ecosystem": "pypi"
          },
          {
            "name": "pycparser",
            "direct": false,
            "version": "2.23",
            "ecosystem": "pypi"
          },
          {
            "name": "pydantic-core",
            "direct": false,
            "version": "2.41.4",
            "ecosystem": "pypi"
          },
          {
            "name": "pydantic-settings",
            "direct": false,
            "version": "2.11.0",
            "ecosystem": "pypi"
          },
          {
            "name": "pygments",
            "direct": false,
            "version": "2.19.2",
            "ecosystem": "pypi"
          },
          {
            "name": "pyjwt",
            "direct": false,
            "version": "2.13.0",
            "ecosystem": "pypi"
          },
          {
            "name": "pymdown-extensions",
            "direct": false,
            "version": "10.16.1",
            "ecosystem": "pypi"
          },
          {
            "name": "pyparsing",
            "direct": false,
            "version": "3.2.5",
            "ecosystem": "pypi"
          },
          {
            "name": "pytest",
            "direct": false,
            "version": "8.4.2",
            "ecosystem": "pypi"
          },
          {
            "name": "pytest-asyncio",
            "direct": false,
            "version": "1.2.0",
            "ecosystem": "pypi"
          },
          {
            "name": "pytest-cov",
            "direct": false,
            "version": "7.0.0",
            "ecosystem": "pypi"
          },
          {
            "name": "python-dateutil",
            "direct": false,
            "version": "2.9.0.post0",
            "ecosystem": "pypi"
          },
          {
            "name": "python-dotenv",
            "direct": false,
            "version": "1.2.1",
            "ecosystem": "pypi"
          },
          {
            "name": "python-multipart",
            "direct": false,
            "version": "0.0.31",
            "ecosystem": "pypi"
          },
          {
            "name": "pywin32",
            "direct": false,
            "version": "311",
            "ecosystem": "pypi"
          },
          {
            "name": "pyyaml-env-tag",
            "direct": false,
            "version": "1.1",
            "ecosystem": "pypi"
          },
          {
            "name": "referencing",
            "direct": false,
            "version": "0.36.2",
            "ecosystem": "pypi"
          },
          {
            "name": "responses",
            "direct": false,
            "version": "0.25.8",
            "ecosystem": "pypi"
          },
          {
            "name": "rfc3339-validator",
            "direct": false,
            "version": "0.1.4",
            "ecosystem": "pypi"
          },
          {
            "name": "rpds-py",
            "direct": false,
            "version": "0.28.0",
            "ecosystem": "pypi"
          },
          {
            "name": "ruamel-yaml-clib",
            "direct": false,
            "version": "0.2.14",
            "ecosystem": "pypi"
          },
          {
            "name": "ruff",
            "direct": false,
            "version": "0.14.3",
            "ecosystem": "pypi"
          },
          {
            "name": "s3transfer",
            "direct": false,
            "version": "0.16.0",
            "ecosystem": "pypi"
          },
          {
            "name": "shellingham",
            "direct": false,
            "version": "1.5.4",
            "ecosystem": "pypi"
          },
          {
            "name": "six",
            "direct": false,
            "version": "1.17.0",
            "ecosystem": "pypi"
          },
          {
            "name": "sniffio",
            "direct": false,
            "version": "1.3.1",
            "ecosystem": "pypi"
          },
          {
            "name": "soupsieve",
            "direct": false,
            "version": "2.8.4",
            "ecosystem": "pypi"
          },
          {
            "name": "sse-starlette",
            "direct": false,
            "version": "3.0.3",
            "ecosystem": "pypi"
          },
          {
            "name": "strands-agents",
            "direct": false,
            "version": "1.14.0",
            "ecosystem": "pypi"
          },
          {
            "name": "super-collections",
            "direct": false,
            "version": "0.6.2",
            "ecosystem": "pypi"
          },
          {
            "name": "syrupy",
            "direct": false,
            "version": "5.0.0",
            "ecosystem": "pypi"
          },
          {
            "name": "termcolor",
            "direct": false,
            "version": "3.2.0",
            "ecosystem": "pypi"
          },
          {
            "name": "tomli",
            "direct": false,
            "version": "2.3.0",
            "ecosystem": "pypi"
          },
          {
            "name": "typing-inspection",
            "direct": false,
            "version": "0.4.2",
            "ecosystem": "pypi"
          },
          {
            "name": "verspec",
            "direct": false,
            "version": "0.1.0",
            "ecosystem": "pypi"
          },
          {
            "name": "virtualenv",
            "direct": false,
            "version": "20.35.4",
            "ecosystem": "pypi"
          },
          {
            "name": "watchdog",
            "direct": false,
            "version": "6.0.0",
            "ecosystem": "pypi"
          },
          {
            "name": "wcmatch",
            "direct": false,
            "version": "10.1",
            "ecosystem": "pypi"
          },
          {
            "name": "wcwidth",
            "direct": false,
            "version": "0.2.14",
            "ecosystem": "pypi"
          },
          {
            "name": "websockets",
            "direct": false,
            "version": "15.0.1",
            "ecosystem": "pypi"
          },
          {
            "name": "werkzeug",
            "direct": false,
            "version": "3.1.3",
            "ecosystem": "pypi"
          },
          {
            "name": "wheel",
            "direct": false,
            "version": "0.46.2",
            "ecosystem": "pypi"
          },
          {
            "name": "wrapt",
            "direct": false,
            "version": "1.17.3",
            "ecosystem": "pypi"
          },
          {
            "name": "xmltodict",
            "direct": false,
            "version": "1.0.2",
            "ecosystem": "pypi"
          },
          {
            "name": "zipp",
            "direct": false,
            "version": "3.23.0",
            "ecosystem": "pypi"
          }
        ],
        "collected": true,
        "truncated": false,
        "total_count": 142,
        "direct_count": 23,
        "indirect_count": 119
      }
    },
    "maintainership": {
      "issues": {
        "open_prs": 38,
        "merged_prs": 319,
        "open_issues": 75,
        "closed_ratio": 0.453,
        "closed_issues": 62,
        "closed_unmerged_prs": 60
      },
      "bus_factor": 6,
      "bot_contributors": 3,
      "top_contributors": [
        {
          "type": "User",
          "login": "sundargthb",
          "commits": 51,
          "avatar_url": "https://avatars.githubusercontent.com/u/101336114?v=4"
        },
        {
          "type": "User",
          "login": "siwachabhi",
          "commits": 32,
          "avatar_url": "https://avatars.githubusercontent.com/u/128322948?v=4"
        },
        {
          "type": "User",
          "login": "guoken1",
          "commits": 19,
          "avatar_url": "https://avatars.githubusercontent.com/u/209279546?v=4"
        },
        {
          "type": "User",
          "login": "Vivekbhadauria1",
          "commits": 14,
          "avatar_url": "https://avatars.githubusercontent.com/u/183654946?v=4"
        },
        {
          "type": "User",
          "login": "aidandaly24",
          "commits": 12,
          "avatar_url": "https://avatars.githubusercontent.com/u/99039782?v=4"
        },
        {
          "type": "User",
          "login": "tejaskash",
          "commits": 12,
          "avatar_url": "https://avatars.githubusercontent.com/u/42380254?v=4"
        },
        {
          "type": "User",
          "login": "notgitika",
          "commits": 9,
          "avatar_url": "https://avatars.githubusercontent.com/u/53349492?v=4"
        },
        {
          "type": "User",
          "login": "jona62",
          "commits": 8,
          "avatar_url": "https://avatars.githubusercontent.com/u/25422400?v=4"
        },
        {
          "type": "User",
          "login": "jariy17",
          "commits": 8,
          "avatar_url": "https://avatars.githubusercontent.com/u/107276415?v=4"
        },
        {
          "type": "User",
          "login": "theumbrella1",
          "commits": 8,
          "avatar_url": "https://avatars.githubusercontent.com/u/150083568?v=4"
        }
      ],
      "contributors_sampled": 56,
      "top_contributor_share": 0.196
    },
    "quality_signals": {
      "has_ci": true,
      "has_tests": true,
      "ci_workflows": [
        "deploy-docs.yml",
        "github-slack-notifications.yml",
        "integration_testing.yml",
        "pr-automerge.yml",
        "release.yml",
        "security-scanning.yml",
        "security.yml",
        "slack-open-prs-notification.yml",
        "test-pypi-release.yml",
        "test.yml"
      ],
      "has_docs_dir": true,
      "linter_configs": [],
      "has_editorconfig": false,
      "has_linter_config": true,
      "has_precommit_config": true
    },
    "security_signals": {
      "lockfiles": [
        "uv.lock"
      ],
      "scorecard": {
        "checks": [
          {
            "name": "Binary-Artifacts",
            "score": 10,
            "reason": "no binaries found in the repo",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#binary-artifacts"
          },
          {
            "name": "Branch-Protection",
            "score": 5,
            "reason": "branch protection is not maximal on development and all release branches",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#branch-protection"
          },
          {
            "name": "CI-Tests",
            "score": 10,
            "reason": "30 out of 30 merged PRs checked by a CI test -- score normalized to 10",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#ci-tests"
          },
          {
            "name": "CII-Best-Practices",
            "score": 0,
            "reason": "no effort to earn an OpenSSF best practices badge detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#cii-best-practices"
          },
          {
            "name": "Code-Review",
            "score": 10,
            "reason": "all changesets reviewed",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#code-review"
          },
          {
            "name": "Contributors",
            "score": 10,
            "reason": "project has 3 contributing companies or organizations -- score normalized to 10",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#contributors"
          },
          {
            "name": "Dangerous-Workflow",
            "score": 0,
            "reason": "dangerous workflow patterns detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dangerous-workflow"
          },
          {
            "name": "Dependency-Update-Tool",
            "score": 10,
            "reason": "update tool detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dependency-update-tool"
          },
          {
            "name": "Fuzzing",
            "score": 0,
            "reason": "project is not fuzzed",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#fuzzing"
          },
          {
            "name": "License",
            "score": 10,
            "reason": "license file detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#license"
          },
          {
            "name": "Maintained",
            "score": 10,
            "reason": "24 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#maintained"
          },
          {
            "name": "Packaging",
            "score": 10,
            "reason": "packaging workflow detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#packaging"
          },
          {
            "name": "Pinned-Dependencies",
            "score": null,
            "reason": "internal error: internal error: invalid Dockerfile: Syntax error - can't find = in \"if\". Must be of the form: name=value",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#pinned-dependencies"
          },
          {
            "name": "SAST",
            "score": 8,
            "reason": "SAST tool is not run on all commits -- score normalized to 8",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#sast"
          },
          {
            "name": "Security-Policy",
            "score": 10,
            "reason": "security policy file detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#security-policy"
          },
          {
            "name": "Signed-Releases",
            "score": 0,
            "reason": "Project has not signed or included provenance with any releases.",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#signed-releases"
          },
          {
            "name": "Token-Permissions",
            "score": 0,
            "reason": "detected GitHub workflow tokens with excessive permissions",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#token-permissions"
          },
          {
            "name": "Vulnerabilities",
            "score": 0,
            "reason": "18 existing vulnerabilities detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#vulnerabilities"
          }
        ],
        "commit": "98bf2f870744e70b2c5829d09bb004525b113349",
        "ran_at": "2026-07-28T20:05:03Z",
        "aggregate_score": 5.5,
        "scorecard_version": "v5.5.0"
      },
      "has_codeql_workflow": false,
      "has_security_policy": true,
      "has_dependabot_config": true
    },
    "contribution_flow": {
      "collected": true,
      "ci_last_run_at": "2026-07-28T20:04:29Z",
      "oldest_open_prs": [
        {
          "number": 57,
          "created_at": "2025-07-22T09:55:21Z",
          "last_comment_at": "2025-07-26T21:09:34Z",
          "last_comment_author": "icoxfog417"
        },
        {
          "number": 117,
          "created_at": "2025-08-09T16:43:53Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 129,
          "created_at": "2025-08-17T23:19:57Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 145,
          "created_at": "2025-08-30T02:00:57Z",
          "last_comment_at": "2025-09-09T06:41:11Z",
          "last_comment_author": "siwachabhi"
        },
        {
          "number": 174,
          "created_at": "2025-09-15T17:54:42Z",
          "last_comment_at": "2025-09-15T17:54:43Z",
          "last_comment_author": "dependabot"
        },
        {
          "number": 177,
          "created_at": "2025-09-17T02:33:43Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 189,
          "created_at": "2025-09-21T09:53:48Z",
          "last_comment_at": "2025-09-22T21:02:33Z",
          "last_comment_author": "siwachabhi"
        },
        {
          "number": 226,
          "created_at": "2025-09-30T05:39:46Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 250,
          "created_at": "2025-10-03T21:40:00Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 252,
          "created_at": "2025-10-05T17:00:09Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 264,
          "created_at": "2025-10-10T07:04:29Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 348,
          "created_at": "2025-11-15T12:16:41Z",
          "last_comment_at": "2025-11-21T19:40:26Z",
          "last_comment_author": "massi-ang"
        },
        {
          "number": 350,
          "created_at": "2025-11-17T17:32:57Z",
          "last_comment_at": "2025-11-17T17:32:58Z",
          "last_comment_author": "dependabot"
        },
        {
          "number": 351,
          "created_at": "2025-11-17T17:33:04Z",
          "last_comment_at": "2025-11-17T17:33:04Z",
          "last_comment_author": "dependabot"
        },
        {
          "number": 365,
          "created_at": "2025-11-24T18:26:26Z",
          "last_comment_at": "2025-11-24T18:26:27Z",
          "last_comment_author": "dependabot"
        },
        {
          "number": 385,
          "created_at": "2025-12-01T19:48:05Z",
          "last_comment_at": "2025-12-01T19:48:06Z",
          "last_comment_author": "dependabot"
        },
        {
          "number": 416,
          "created_at": "2026-01-01T05:13:40Z",
          "last_comment_at": "2026-02-02T17:03:10Z",
          "last_comment_author": "jariy17"
        },
        {
          "number": 431,
          "created_at": "2026-01-18T17:50:49Z",
          "last_comment_at": "2026-02-10T00:16:30Z",
          "last_comment_author": "jariy17"
        },
        {
          "number": 461,
          "created_at": "2026-02-19T09:23:16Z",
          "last_comment_at": "2026-03-18T01:42:54Z",
          "last_comment_author": "codecov-commenter"
        },
        {
          "number": 464,
          "created_at": "2026-02-27T11:45:25Z",
          "last_comment_at": null,
          "last_comment_author": null
        }
      ],
      "last_merged_pr_at": "2026-07-27T17:55:57Z",
      "ci_last_conclusion": "SUCCESS",
      "oldest_open_issues": [
        {
          "number": 21,
          "created_at": "2025-07-16T10:04:11Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 56,
          "created_at": "2025-07-22T09:51:45Z",
          "last_comment_at": "2025-07-29T10:10:06Z",
          "last_comment_author": "dgallitelli"
        },
        {
          "number": 61,
          "created_at": "2025-07-22T16:54:54Z",
          "last_comment_at": "2025-10-31T03:14:46Z",
          "last_comment_author": "fhuthmacher"
        },
        {
          "number": 79,
          "created_at": "2025-07-28T17:42:26Z",
          "last_comment_at": "2025-08-08T14:07:09Z",
          "last_comment_author": "siwachabhi"
        },
        {
          "number": 85,
          "created_at": "2025-07-29T10:01:53Z",
          "last_comment_at": "2025-07-29T10:03:17Z",
          "last_comment_author": "dgallitelli"
        },
        {
          "number": 95,
          "created_at": "2025-08-01T18:23:42Z",
          "last_comment_at": "2025-09-10T09:30:28Z",
          "last_comment_author": "nbaju1"
        },
        {
          "number": 98,
          "created_at": "2025-08-04T15:45:31Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 102,
          "created_at": "2025-08-05T16:47:25Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 116,
          "created_at": "2025-08-09T16:24:16Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 119,
          "created_at": "2025-08-11T13:14:10Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 127,
          "created_at": "2025-08-14T23:43:33Z",
          "last_comment_at": "2025-08-15T15:11:23Z",
          "last_comment_author": "liwadman"
        },
        {
          "number": 128,
          "created_at": "2025-08-15T20:38:50Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 136,
          "created_at": "2025-08-25T12:06:25Z",
          "last_comment_at": "2026-03-08T01:56:08Z",
          "last_comment_author": "willdufault"
        },
        {
          "number": 137,
          "created_at": "2025-08-25T19:58:01Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 144,
          "created_at": "2025-08-30T00:26:18Z",
          "last_comment_at": "2025-09-09T06:40:58Z",
          "last_comment_author": "siwachabhi"
        },
        {
          "number": 148,
          "created_at": "2025-09-02T14:37:16Z",
          "last_comment_at": "2025-09-09T06:39:59Z",
          "last_comment_author": "siwachabhi"
        },
        {
          "number": 154,
          "created_at": "2025-09-08T13:04:45Z",
          "last_comment_at": "2025-09-09T06:54:25Z",
          "last_comment_author": "nbaju1"
        },
        {
          "number": 156,
          "created_at": "2025-09-08T19:18:24Z",
          "last_comment_at": "2025-10-24T04:22:27Z",
          "last_comment_author": "madkind"
        },
        {
          "number": 167,
          "created_at": "2025-09-12T03:12:14Z",
          "last_comment_at": "2025-09-12T03:13:43Z",
          "last_comment_author": "anandxmj"
        },
        {
          "number": 171,
          "created_at": "2025-09-14T06:22:45Z",
          "last_comment_at": "2025-10-03T01:43:17Z",
          "last_comment_author": "MarcusRosen"
        }
      ]
    }
  },
  "config": {
    "disabled_metrics": [],
    "disabled_categories": [],
    "disabled_components": {}
  },
  "source": {
    "url": "https://github.com/aws/bedrock-agentcore-starter-toolkit",
    "host": "github.com",
    "name": "bedrock-agentcore-starter-toolkit",
    "owner": "aws"
  },
  "metrics": {
    "overall": {
      "key": "overall",
      "band": "good",
      "name": "Overall health",
      "note": null,
      "notes": [],
      "value": 82,
      "inputs": {
        "security": 57,
        "vitality": 92,
        "community": 78,
        "governance": 84,
        "engineering": 92
      },
      "components": []
    },
    "categories": [
      {
        "key": "vitality",
        "band": "excellent",
        "name": "Vitality",
        "value": 92,
        "weight": 0.22,
        "metrics": [
          {
            "key": "development_activity",
            "band": "excellent",
            "name": "Development activity",
            "note": null,
            "notes": [],
            "value": 93,
            "inputs": {
              "commits_last_year": 276,
              "human_commit_share": 0.71,
              "days_since_last_push": 0,
              "active_weeks_last_year": 42
            },
            "components": [
              {
                "key": "push_recency",
                "name": "Push recency",
                "detail": "last push 0 days ago",
                "points": 36,
                "status": "met",
                "details": [
                  {
                    "code": "push_recency",
                    "params": {
                      "days": 0
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "commit_cadence",
                "name": "Commit cadence",
                "detail": "42/52 weeks with commits",
                "points": 29.1,
                "status": "partial",
                "details": [
                  {
                    "code": "commit_cadence_weeks",
                    "params": {
                      "weeks": 42
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "commit_volume",
                "name": "Commit volume",
                "detail": "276 commits in the last year",
                "points": 18,
                "status": "met",
                "details": [
                  {
                    "code": "commits_last_year",
                    "params": {
                      "count": 276
                    }
                  }
                ],
                "max_points": 18
              },
              {
                "key": "openssf_scorecard_maintained",
                "name": "OpenSSF Scorecard: Maintained",
                "detail": "24 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10",
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "release_discipline",
            "band": "excellent",
            "name": "Release discipline",
            "note": null,
            "notes": [],
            "value": 90,
            "inputs": {
              "releases_count": 56,
              "latest_release_tag": "v0.3.11",
              "releases_from_tags": false,
              "days_since_latest_release": 0,
              "mean_days_between_releases": 16.2
            },
            "components": [
              {
                "key": "ships_releases",
                "name": "Ships releases",
                "detail": "56 releases published",
                "points": 27,
                "status": "met",
                "details": [
                  {
                    "code": "releases_published",
                    "params": {
                      "count": 56
                    }
                  }
                ],
                "max_points": 27
              },
              {
                "key": "release_recency",
                "name": "Release recency",
                "detail": "latest release 0 days ago",
                "points": 36,
                "status": "met",
                "details": [
                  {
                    "code": "release_recency",
                    "params": {
                      "days": 0
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "release_cadence",
                "name": "Release cadence",
                "detail": "a release every ~16.2 days",
                "points": 27,
                "status": "met",
                "details": [
                  {
                    "code": "release_cadence",
                    "params": {
                      "gap": 16.2
                    }
                  }
                ],
                "max_points": 27
              },
              {
                "key": "openssf_scorecard_signed_releases",
                "name": "OpenSSF Scorecard: Signed-Releases",
                "detail": "Project has not signed or included provenance with any releases.",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "abandonment",
            "band": "excellent",
            "name": "Abandonment",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "cap": null,
              "state": "maintained",
              "guards": [],
              "signals": [],
              "red_flag": false,
              "multiplier_pct": 100,
              "declared_reason": null,
              "unverified_reason": null,
              "unanswered_open_prs": null,
              "unanswered_open_issues": null,
              "days_since_last_merged_pr": null,
              "days_since_last_human_commit": 1,
              "days_since_last_human_commit_is_floor": false
            },
            "components": [
              {
                "key": "project_is_still_maintained",
                "name": "Project is still maintained",
                "detail": "last human commit 1 days ago",
                "points": 100,
                "status": "met",
                "details": [
                  {
                    "code": "abandonment_maintained",
                    "params": {
                      "days": 1
                    }
                  }
                ],
                "max_points": 100
              }
            ]
          }
        ],
        "description": "Is the project alive — is code being written and are releases shipping?"
      },
      {
        "key": "community",
        "band": "good",
        "name": "Community & Adoption",
        "value": 78,
        "weight": 0.18,
        "metrics": [
          {
            "key": "popularity",
            "band": "moderate",
            "name": "Popularity & adoption",
            "note": null,
            "notes": [],
            "value": 66,
            "inputs": {
              "forks": 157,
              "stars": 498,
              "watchers": 7,
              "growth_state": "unverified",
              "growth_factor_pct": 100,
              "growth_unverified_reason": "no_history"
            },
            "components": [
              {
                "key": "stars",
                "name": "Stars",
                "detail": "498 stars",
                "points": 43.7,
                "status": "partial",
                "details": [
                  {
                    "code": "stars",
                    "params": {
                      "count": 498
                    }
                  }
                ],
                "max_points": 60
              },
              {
                "key": "forks",
                "name": "Forks",
                "detail": "157 forks",
                "points": 18.3,
                "status": "partial",
                "details": [
                  {
                    "code": "forks",
                    "params": {
                      "count": 157
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "watchers",
                "name": "Watchers",
                "detail": "7 watchers",
                "points": 4.3,
                "status": "partial",
                "details": [
                  {
                    "code": "watchers",
                    "params": {
                      "count": 7
                    }
                  }
                ],
                "max_points": 15
              }
            ]
          },
          {
            "key": "community_health",
            "band": "excellent",
            "name": "Community health",
            "note": null,
            "notes": [],
            "value": 92,
            "inputs": {
              "has_readme": true,
              "has_license": true,
              "has_contributing": true,
              "has_issue_template": false,
              "has_code_of_conduct": true,
              "has_pull_request_template": true
            },
            "components": [
              {
                "key": "readme",
                "name": "README",
                "detail": null,
                "points": 22.5,
                "status": "met",
                "details": [],
                "max_points": 22.5
              },
              {
                "key": "license",
                "name": "License",
                "detail": "recognized license (Apache-2.0)",
                "points": 22.5,
                "status": "met",
                "details": [
                  {
                    "code": "license_standard",
                    "params": {}
                  },
                  {
                    "code": "license_spdx",
                    "params": {
                      "spdx": "Apache-2.0"
                    }
                  }
                ],
                "max_points": 22.5
              },
              {
                "key": "contributing_guide",
                "name": "CONTRIBUTING guide",
                "detail": null,
                "points": 18,
                "status": "met",
                "details": [],
                "max_points": 18
              },
              {
                "key": "code_of_conduct",
                "name": "Code of conduct",
                "detail": null,
                "points": 13.5,
                "status": "met",
                "details": [],
                "max_points": 13.5
              },
              {
                "key": "issue_template",
                "name": "Issue template",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.2
              },
              {
                "key": "pr_template",
                "name": "PR template",
                "detail": null,
                "points": 6.3,
                "status": "met",
                "details": [],
                "max_points": 6.3
              }
            ]
          }
        ],
        "description": "Does the project have users, downloads, attention, and a welcoming setup for contributors?"
      },
      {
        "key": "governance",
        "band": "good",
        "name": "Sustainability & Governance",
        "value": 84,
        "weight": 0.24,
        "metrics": [
          {
            "key": "maintainer_resilience",
            "band": "excellent",
            "name": "Maintainer resilience (bus factor)",
            "note": null,
            "notes": [],
            "value": 90,
            "inputs": {
              "bus_factor": 6,
              "contributors_sampled": 56,
              "top_contributor_share": 0.196
            },
            "components": [
              {
                "key": "bus_factor",
                "name": "Bus factor",
                "detail": "6 contributor(s) cover half of all commits",
                "points": 48.6,
                "status": "partial",
                "details": [
                  {
                    "code": "bus_factor",
                    "params": {
                      "count": 6
                    }
                  }
                ],
                "max_points": 54
              },
              {
                "key": "commit_distribution",
                "name": "Commit distribution",
                "detail": "top contributor authored 20% of commits",
                "points": 18.1,
                "status": "partial",
                "details": [
                  {
                    "code": "top_contributor_share",
                    "params": {
                      "share": 20
                    }
                  }
                ],
                "max_points": 22.5
              },
              {
                "key": "contributor_breadth",
                "name": "Contributor breadth",
                "detail": "56 contributors",
                "points": 13.5,
                "status": "met",
                "details": [
                  {
                    "code": "contributors_sampled",
                    "params": {
                      "count": 56
                    }
                  }
                ],
                "max_points": 13.5
              },
              {
                "key": "openssf_scorecard_contributors",
                "name": "OpenSSF Scorecard: Contributors",
                "detail": "project has 3 contributing companies or organizations -- score normalized to 10",
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "responsiveness",
            "band": "moderate",
            "name": "Issue & PR responsiveness",
            "note": null,
            "notes": [],
            "value": 68,
            "inputs": {
              "merged_prs": 319,
              "open_issues": 75,
              "closed_issues": 62,
              "issue_closed_ratio": 0.453,
              "closed_unmerged_prs": 60
            },
            "components": [
              {
                "key": "issue_resolution",
                "name": "Issue resolution",
                "detail": "45% of issues closed",
                "points": 21.2,
                "status": "partial",
                "details": [
                  {
                    "code": "issues_closed_share",
                    "params": {
                      "share": 45
                    }
                  }
                ],
                "max_points": 46.75
              },
              {
                "key": "pr_acceptance",
                "name": "PR acceptance",
                "detail": "319/379 decided PRs merged",
                "points": 32.2,
                "status": "partial",
                "details": [
                  {
                    "code": "decided_prs_merged",
                    "params": {
                      "merged": 319,
                      "decided": 379
                    }
                  }
                ],
                "max_points": 38.25
              },
              {
                "key": "openssf_scorecard_code_review",
                "name": "OpenSSF Scorecard: Code-Review",
                "detail": "all changesets reviewed",
                "points": 15,
                "status": "met",
                "details": [],
                "max_points": 15
              }
            ]
          },
          {
            "key": "stewardship",
            "band": "good",
            "name": "Ownership & stewardship",
            "note": null,
            "notes": [],
            "value": 80,
            "inputs": {
              "followers": 16189,
              "owner_type": "Organization",
              "is_verified": null,
              "owner_login": "aws",
              "public_repos": 552,
              "account_age_days": 5082
            },
            "components": [
              {
                "key": "ownership_backing",
                "name": "Ownership backing",
                "detail": "organization-owned",
                "points": 30,
                "status": "met",
                "details": [
                  {
                    "code": "owner_organization",
                    "params": {}
                  }
                ],
                "max_points": 30
              },
              {
                "key": "verified_domain",
                "name": "Verified domain",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 20
              },
              {
                "key": "owner_reach",
                "name": "Owner reach",
                "detail": "16,189 followers of aws",
                "points": 25,
                "status": "met",
                "details": [
                  {
                    "code": "owner_followers",
                    "params": {
                      "count": 16189,
                      "login": "aws"
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "track_record",
                "name": "Track record",
                "detail": "552 public repos, account ~13 yr old",
                "points": 25,
                "status": "met",
                "details": [
                  {
                    "code": "public_repos",
                    "params": {
                      "count": 552
                    }
                  },
                  {
                    "code": "account_age_years",
                    "params": {
                      "years": 13
                    }
                  }
                ],
                "max_points": 25
              }
            ]
          },
          {
            "key": "package_maintenance",
            "band": "excellent",
            "name": "Package maintenance",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "packages": [
                "bedrock-agentcore-starter-toolkit"
              ],
              "ecosystems": "pypi",
              "any_deprecated": false,
              "min_days_since_publish": 0
            },
            "components": [
              {
                "key": "published_resolvable",
                "name": "Published & resolvable",
                "detail": "1 package(s) on pypi",
                "points": 25,
                "status": "met",
                "details": [
                  {
                    "code": "packages_published",
                    "params": {
                      "count": 1,
                      "ecosystems": "pypi"
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "publish_recency",
                "name": "Publish recency",
                "detail": "latest publish 0 days ago",
                "points": 35,
                "status": "met",
                "details": [
                  {
                    "code": "publish_recency",
                    "params": {
                      "days": 0
                    }
                  }
                ],
                "max_points": 35
              },
              {
                "key": "version_history",
                "name": "Version history",
                "detail": "57 published versions",
                "points": 20,
                "status": "met",
                "details": [
                  {
                    "code": "published_versions",
                    "params": {
                      "count": 57
                    }
                  }
                ],
                "max_points": 20
              },
              {
                "key": "not_deprecated",
                "name": "Not deprecated",
                "detail": "active, not deprecated or yanked",
                "points": 20,
                "status": "met",
                "details": [
                  {
                    "code": "package_not_deprecated",
                    "params": {}
                  }
                ],
                "max_points": 20
              }
            ]
          }
        ],
        "description": "Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?"
      },
      {
        "key": "engineering",
        "band": "excellent",
        "name": "Engineering Quality",
        "value": 92,
        "weight": 0.2,
        "metrics": [
          {
            "key": "engineering_practices",
            "band": "excellent",
            "name": "Engineering practices",
            "note": null,
            "notes": [],
            "value": 94,
            "inputs": {
              "has_ci": true,
              "has_tests": true,
              "has_editorconfig": false,
              "has_linter_config": true,
              "has_precommit_config": true
            },
            "components": [
              {
                "key": "ci_workflows",
                "name": "CI workflows",
                "detail": "10 workflow(s)",
                "points": 24,
                "status": "met",
                "details": [
                  {
                    "code": "ci_workflows",
                    "params": {
                      "count": 10
                    }
                  }
                ],
                "max_points": 24
              },
              {
                "key": "tests_present",
                "name": "Tests present",
                "detail": null,
                "points": 24,
                "status": "met",
                "details": [],
                "max_points": 24
              },
              {
                "key": "linter_config",
                "name": "Linter config",
                "detail": null,
                "points": 16,
                "status": "met",
                "details": [],
                "max_points": 16
              },
              {
                "key": "pre_commit_hooks",
                "name": "Pre-commit hooks",
                "detail": null,
                "points": 9.6,
                "status": "met",
                "details": [],
                "max_points": 9.6
              },
              {
                "key": "editorconfig",
                "name": ".editorconfig",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 6.4
              },
              {
                "key": "openssf_scorecard_ci_tests",
                "name": "OpenSSF Scorecard: CI-Tests",
                "detail": "30 out of 30 merged PRs checked by a CI test -- score normalized to 10",
                "points": 20,
                "status": "met",
                "details": [],
                "max_points": 20
              }
            ]
          },
          {
            "key": "documentation",
            "band": "excellent",
            "name": "Documentation",
            "note": null,
            "notes": [],
            "value": 90,
            "inputs": {
              "topics": [],
              "has_wiki": true,
              "homepage": "https://aws.github.io/bedrock-agentcore-starter-toolkit/",
              "has_readme": true,
              "has_docs_dir": true,
              "has_description": true
            },
            "components": [
              {
                "key": "readme",
                "name": "README",
                "detail": null,
                "points": 30,
                "status": "met",
                "details": [],
                "max_points": 30
              },
              {
                "key": "documentation_directory",
                "name": "Documentation directory",
                "detail": null,
                "points": 25,
                "status": "met",
                "details": [],
                "max_points": 25
              },
              {
                "key": "documentation_homepage_site",
                "name": "Documentation / homepage site",
                "detail": "https://aws.github.io/bedrock-agentcore-starter-toolkit/",
                "points": 15,
                "status": "met",
                "details": [],
                "max_points": 15
              },
              {
                "key": "repository_description",
                "name": "Repository description",
                "detail": null,
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              },
              {
                "key": "topics",
                "name": "Topics",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              },
              {
                "key": "wiki",
                "name": "Wiki",
                "detail": null,
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              }
            ]
          }
        ],
        "description": "Are baseline engineering and documentation practices in place?"
      },
      {
        "key": "security",
        "band": "moderate",
        "name": "Security",
        "value": 57,
        "weight": 0.16,
        "metrics": [
          {
            "key": "security_posture",
            "band": "moderate",
            "name": "Security posture",
            "note": "Excluded from scoring (no data or not applicable): Pinned-Dependencies. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "pinned_dependencies"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 55,
            "inputs": {
              "source": "openssf_scorecard",
              "checks_evaluated": 17,
              "scorecard_version": "v5.5.0",
              "checks_inconclusive": 1,
              "scorecard_aggregate": 5.5
            },
            "components": [
              {
                "key": "binary_artifacts",
                "name": "Binary-Artifacts",
                "detail": "no binaries found in the repo",
                "points": 7.5,
                "status": "met",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "branch_protection",
                "name": "Branch-Protection",
                "detail": "branch protection is not maximal on development and all release branches",
                "points": 3.8,
                "status": "partial",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "ci_tests",
                "name": "CI-Tests",
                "detail": "30 out of 30 merged PRs checked by a CI test -- score normalized to 10",
                "points": 2.5,
                "status": "met",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "cii_best_practices",
                "name": "CII-Best-Practices",
                "detail": "no effort to earn an OpenSSF best practices badge detected",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "code_review",
                "name": "Code-Review",
                "detail": "all changesets reviewed",
                "points": 7.5,
                "status": "met",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "contributors",
                "name": "Contributors",
                "detail": "project has 3 contributing companies or organizations -- score normalized to 10",
                "points": 2.5,
                "status": "met",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "dangerous_workflow",
                "name": "Dangerous-Workflow",
                "detail": "dangerous workflow patterns detected",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              },
              {
                "key": "dependency_update_tool",
                "name": "Dependency-Update-Tool",
                "detail": "update tool detected",
                "points": 7.5,
                "status": "met",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "fuzzing",
                "name": "Fuzzing",
                "detail": "project is not fuzzed",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 5
              },
              {
                "key": "license",
                "name": "License",
                "detail": "license file detected",
                "points": 2.5,
                "status": "met",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "maintained",
                "name": "Maintained",
                "detail": "24 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10",
                "points": 7.5,
                "status": "met",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "packaging",
                "name": "Packaging",
                "detail": "packaging workflow detected",
                "points": 5,
                "status": "met",
                "details": [],
                "max_points": 5
              },
              {
                "key": "pinned_dependencies",
                "name": "Pinned-Dependencies",
                "detail": "internal error: internal error: invalid Dockerfile: Syntax error - can't find = in \"if\". Must be of the form: name=value",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 5
              },
              {
                "key": "sast",
                "name": "SAST",
                "detail": "SAST tool is not run on all commits -- score normalized to 8",
                "points": 4,
                "status": "partial",
                "details": [],
                "max_points": 5
              },
              {
                "key": "security_policy",
                "name": "Security-Policy",
                "detail": "security policy file detected",
                "points": 5,
                "status": "met",
                "details": [],
                "max_points": 5
              },
              {
                "key": "signed_releases",
                "name": "Signed-Releases",
                "detail": "Project has not signed or included provenance with any releases.",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "token_permissions",
                "name": "Token-Permissions",
                "detail": "detected GitHub workflow tokens with excessive permissions",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "vulnerabilities",
                "name": "Vulnerabilities",
                "detail": "18 existing vulnerabilities detected",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              }
            ]
          },
          {
            "key": "dependency_advisories",
            "band": "moderate",
            "name": "Dependency advisories",
            "note": "Excluded from scoring (no data or not applicable): Indirect dependencies free of known advisories. Remaining weights renormalized. Matched 142 resolved dependencies against OSV. This repository publishes no package the index resolves, so the repository dependency graph was assessed instead. That graph mixes development and test pins with shipped dependencies, so only the declared runtime dependencies are scored; transitive findings are reported as context and excluded from the score. Reachability is not analyzed.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "indirect_dependencies_free_of_known_advisories"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              },
              {
                "code": "advisories_scope_repository",
                "params": {
                  "assessed": 142
                }
              },
              {
                "code": "advisories_repo_graph_caveat",
                "params": {}
              },
              {
                "code": "advisories_reachability",
                "params": {}
              }
            ],
            "value": 64,
            "inputs": {
              "source": "osv",
              "advisories": 33,
              "affected_packages": 12,
              "assessed_packages": 142,
              "unassessed_packages": 0,
              "affected_by_severity": "high 3, moderate 8, low 1",
              "direct_affected_packages": 2
            },
            "components": [
              {
                "key": "direct_dependencies_free_of_known_advisories",
                "name": "Direct dependencies free of known advisories",
                "detail": "2 affected: bedrock-agentcore 1.1.1 (high 7.3), requests 2.32.5 (moderate 5.5)",
                "points": 12.8,
                "status": "partial",
                "details": [
                  {
                    "code": "advisories_affected",
                    "params": {
                      "count": 2,
                      "packages": "bedrock-agentcore 1.1.1 (high 7.3), requests 2.32.5 (moderate 5.5)"
                    }
                  }
                ],
                "max_points": 35
              },
              {
                "key": "indirect_dependencies_free_of_known_advisories",
                "name": "Indirect dependencies free of known advisories",
                "detail": "transitive set not separable from development and test dependencies in this scope",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "advisories_scope_not_separable",
                    "params": {}
                  }
                ],
                "max_points": 25
              },
              {
                "key": "no_advisories_left_outstanding",
                "name": "No advisories left outstanding",
                "detail": "1 advisory-carrying package(s) unaddressed past 90 days; oldest published 125 days ago",
                "points": 35.2,
                "status": "partial",
                "details": [
                  {
                    "code": "advisories_stale",
                    "params": {
                      "days": 90,
                      "count": 1,
                      "oldest": 125
                    }
                  }
                ],
                "max_points": 40
              }
            ]
          },
          {
            "key": "malicious_dependencies",
            "band": "excellent",
            "name": "Malicious dependencies",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "source": "osv",
              "meaning": "reported as a malicious package by the OpenSSF corpus; the remedy is removal or moving off the compromised name, never an upgrade of the same artifact. Versions the registry has since pulled are listed but not scored",
              "packages": [],
              "red_flag": false,
              "assessed_packages": 142,
              "malicious_packages": 0,
              "direct_malicious_packages": 0,
              "withdrawn_malicious_packages": 0,
              "installable_malicious_packages": 0
            },
            "components": [
              {
                "key": "no_dependency_reported_as_a_malicious_package",
                "name": "No dependency reported as a malicious package",
                "detail": "no dependency is reported as a malicious package",
                "points": 100,
                "status": "met",
                "details": [
                  {
                    "code": "no_malicious_dependencies",
                    "params": {}
                  }
                ],
                "max_points": 100
              }
            ]
          },
          {
            "key": "high_risk_jurisdiction_exposure",
            "band": "excellent",
            "name": "High-Risk Jurisdiction Exposure",
            "note": "Only high-confidence self-published location evidence affects this multiplier. Ambiguous matches are review-only; country evidence is not proof of nationality, citizenship, legal registration, malicious intent, or sanctions status.",
            "notes": [
              {
                "code": "jurisdiction_evidence_limits",
                "params": {}
              }
            ],
            "value": 100,
            "inputs": {
              "meaning": "self-published location evidence; not nationality or citizenship",
              "red_flag": false,
              "exposures": [],
              "policy_countries": [
                "Russia",
                "Iran",
                "North Korea"
              ],
              "review_only_matches": 0,
              "assessed_self_published_locations": 8
            },
            "components": [
              {
                "key": "policy_exposure_multiplier",
                "name": "Policy exposure multiplier",
                "detail": "no confirmed policy-scope location match",
                "points": 100,
                "status": "met",
                "details": [
                  {
                    "code": "jurisdiction_no_match",
                    "params": {}
                  }
                ],
                "max_points": 100
              }
            ]
          }
        ],
        "description": "Are visible security and supply-chain practices strong, with no malicious dependency and no unresolved high-risk jurisdiction exposure?"
      },
      {
        "key": "ai_readiness",
        "band": "moderate",
        "name": "AI Readiness",
        "value": 53,
        "weight": 0,
        "metrics": [
          {
            "key": "ai_agent_context",
            "band": "at_risk",
            "name": "Agent context & guidance",
            "note": null,
            "notes": [],
            "value": 40,
            "inputs": {
              "has_llms_txt": false,
              "legible_history_share": 1,
              "agent_instruction_files": [],
              "agent_instruction_max_bytes": null
            },
            "components": [
              {
                "key": "agent_instructions",
                "name": "Agent instructions",
                "detail": "no CLAUDE.md / AGENTS.md / editor rules",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "no_agent_instructions",
                    "params": {}
                  }
                ],
                "max_points": 45
              },
              {
                "key": "machine_readable_docs_llms_txt",
                "name": "Machine-readable docs (llms.txt)",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 15
              },
              {
                "key": "legible_commit_history",
                "name": "Legible commit history",
                "detail": "71 of 71 human commits state their intent (structured subject or explanatory body)",
                "points": 40,
                "status": "met",
                "details": [
                  {
                    "code": "legible_history",
                    "params": {
                      "legible": 71,
                      "sampled": 71
                    }
                  }
                ],
                "max_points": 40
              }
            ]
          },
          {
            "key": "ai_verify_loop",
            "band": "moderate",
            "name": "Verify loop (build / test / typecheck)",
            "note": "Excluded from scoring (no data or not applicable): OpenSSF Scorecard: Pinned-Dependencies. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "openssf_scorecard_pinned_dependencies"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 59,
            "inputs": {
              "has_nix": false,
              "has_tests": true,
              "lockfiles": [
                "uv.lock"
              ],
              "has_dockerfile": true,
              "typed_language": false,
              "bootstrap_files": [],
              "has_devcontainer": false,
              "has_linter_config": true,
              "typecheck_configs": [],
              "agent_commit_share": 0.01,
              "toolchain_manifests": [],
              "dependency_bot_commit_share": 0.08
            },
            "components": [
              {
                "key": "one_command_bootstrap",
                "name": "One-command bootstrap",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 18
              },
              {
                "key": "automated_tests",
                "name": "Automated tests",
                "detail": null,
                "points": 22,
                "status": "met",
                "details": [],
                "max_points": 22
              },
              {
                "key": "lint_format_config",
                "name": "Lint / format config",
                "detail": null,
                "points": 11,
                "status": "met",
                "details": [],
                "max_points": 11
              },
              {
                "key": "static_type_checking",
                "name": "Static type checking",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 11
              },
              {
                "key": "reproducible_environment",
                "name": "Reproducible environment",
                "detail": "Dockerfile, lockfile",
                "points": 10,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "Dockerfile, lockfile"
                    }
                  }
                ],
                "max_points": 10
              },
              {
                "key": "demonstrated_agent_practice",
                "name": "Demonstrated agent practice",
                "detail": "1 of the last 100 commits agent-authored or agent-credited",
                "points": 2,
                "status": "partial",
                "details": [
                  {
                    "code": "agent_authored_commits",
                    "params": {
                      "count": 1,
                      "sampled": 100
                    }
                  }
                ],
                "max_points": 10
              },
              {
                "key": "automated_maintenance",
                "name": "Automated maintenance",
                "detail": "8 of the last 100 commits are automated dependency updates",
                "points": 8,
                "status": "met",
                "details": [
                  {
                    "code": "dependency_bot_commits",
                    "params": {
                      "count": 8,
                      "sampled": 100
                    }
                  }
                ],
                "max_points": 8
              },
              {
                "key": "openssf_scorecard_pinned_dependencies",
                "name": "OpenSSF Scorecard: Pinned-Dependencies",
                "detail": "internal error: internal error: invalid Dockerfile: Syntax error - can't find = in \"if\". Must be of the form: name=value",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 10
              }
            ]
          },
          {
            "key": "ai_code_legibility",
            "band": "moderate",
            "name": "Code legibility for models",
            "note": null,
            "notes": [],
            "value": 53,
            "inputs": {
              "primary_language": "Python",
              "largest_source_bytes": 203060,
              "source_files_sampled": 303,
              "oversized_source_files": 13
            },
            "components": [
              {
                "key": "type_checkable_code",
                "name": "Type-checkable code",
                "detail": "Python without a type-check config",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "no_typecheck_config_language",
                    "params": {
                      "language": "Python"
                    }
                  }
                ],
                "max_points": 45
              },
              {
                "key": "manageable_file_sizes",
                "name": "Manageable file sizes",
                "detail": "13/303 source files over 60KB",
                "points": 52.6,
                "status": "partial",
                "details": [
                  {
                    "code": "oversized_source_files",
                    "params": {
                      "kb": 60,
                      "sampled": 303,
                      "oversized": 13
                    }
                  }
                ],
                "max_points": 55
              }
            ]
          },
          {
            "key": "ai_interfaces",
            "band": "moderate",
            "name": "Machine-readable interfaces",
            "note": null,
            "notes": [],
            "value": 60,
            "inputs": {
              "example_dirs": [
                "notebooks"
              ],
              "has_mcp_signal": true,
              "api_schema_files": []
            },
            "components": [
              {
                "key": "api_schema_openapi_graphql_proto",
                "name": "API schema (OpenAPI/GraphQL/proto)",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 40
              },
              {
                "key": "mcp_server",
                "name": "MCP server",
                "detail": null,
                "points": 20,
                "status": "met",
                "details": [],
                "max_points": 20
              },
              {
                "key": "runnable_examples",
                "name": "Runnable examples",
                "detail": "notebooks",
                "points": 40,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "notebooks"
                    }
                  }
                ],
                "max_points": 40
              }
            ]
          }
        ],
        "description": "How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score."
      }
    ],
    "metrics_version": "1.13.0"
  },
  "warnings": [
    "Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token",
    "deps.dev does not index pypi:bedrock-agentcore-starter-toolkit@0.3.11; advisories assessed against the repository dependency graph instead"
  ],
  "report_type": "repository",
  "generated_at": "2026-07-28T20:05:36.682353Z",
  "schema_version": "0.27.0",
  "badge_url": "https://raw.githubusercontent.com/inspect-software/badges/main/v1/a/aws/bedrock-agentcore-starter-toolkit.svg",
  "full_name": "aws/bedrock-agentcore-starter-toolkit",
  "license_state": "standard",
  "license_spdx": "Apache-2.0"
}

Verwandte Einträge

Geprüfte Repositories, die Katalog-Tags oder Ökosysteme mit aws/bedrock-agentcore-starter-toolkit teilen. Nebeneinander lesen →

97apache/supersetApache Superset is a Data Visualization and Data Exploration PlatformExzellent95scikit-learn/scikit-learnscikit-learn: machine learning in PythonExzellent95onnx/onnxOpen standard for machine learning interoperabilityExzellent94run-llama/llama_indexLlamaIndex is the leading document agent and OCR platformExzellent94wandb/wandbThe AI developer platform. Use Weights & Biases to train and fine-tune models, and manage models from experimentation to production.Exzellent93optuna/optunaA hyperparameter optimization frameworkExzellent

Bewertungen sind Signale, keine Garantien. Sie spiegeln öffentlich sichtbare Praxis auf GitHub wider — kein Code-Audit und keine Sicherheitsgarantie.

Fehlende Daten werden ausgeschlossen und die Gewichte neu normiert, nie als null bewertet. Die Methodik ist versioniert und offen: Metriken v1.13.0, Schema v0.27.0 — vollständige Methodik · Metriken-Wiki.

Wie ein einzelnes Ergebnis im Gesamtregister steht: aggregierte Statistiken — PyPI.