Software-GesundheitsberichtSchema 0.27.0 · Metriken 1.13.0 · 2026-07-27 15:01 UTC

bborbe / task-watcher

GoBSD-2-Clause★ 0 Sterne⑂ 0 Forksseit März 2026Auf GitHub ansehen ↗

bborbe/task-watcher erreicht einen Gesundheitsindex von 58 von 100 und liegt damit im Bereich Mittel. Am stärksten schneidet es bei Vitality (77/100) ab, am schwächsten bei Community & Adoption (24/100). Zuletzt vor 7 Tagen aktualisiert. Ein einzelner Mitwirkender trägt den Großteil der jüngsten Arbeit.

gesamt / 100

Mittel

Software-Gesundheitsindex

Metriken werden auf einer Skala von 1–100 in gewichtete Kategorien gruppiert. Der Gesamtwert beginnt als ihr Mittel; sobald öffentliche Evidenz die Richtlinie für Hochrisikojurisdiktionen auslöst, wird die Bewertung angepasst und erhält die Obergrenze 49 (Gefährdet). AI Readiness liegt außerhalb.

Exzellent85-100Vorbildlich; erfüllt im Wesentlichen alle geprüften Kriterien

Gut70-84Gesund; geringfügige Lücken

Mittel50-69Akzeptabel mit deutlichen Lücken; Überprüfung empfohlen

Gefährdet30-49Erhebliche Schwächen; eine Übernahme erfordert Vorsicht

Kritisch1-29Schwerwiegende Probleme (aufgegeben, nur ein Maintainer, keine Hygiene)

Bewertungsprofil

Jede Achse ist eine Kategorie. Die Form zählt mehr als der Durchschnitt — ein gesundes Projekt füllt die gesamte Fläche, während ein Profil aus Spitzen und Kratern bedeutet, dass Stärke in einer Dimension Risiken in einer anderen verdeckt.

Eigentümerschaft

Benjamin BorbePersönliches Konto

30 Follower206 öffentliche Reposseit Nov. 2011Seibert Group GmbH

Dieses Repository gehört einem persönlichen Konto. Ein Projekt mit nur einem Eigentümer trägt ein höheres Kontinuitätsrisiko als ein organisationsgetragenes.

Paket-Ökosysteme

Registry	Paket	Version	Downloads / Monat	Versionen	Zuletzt veröffentlicht
Go	github.com/bborbe/task-watcher	v0.19.2	-	30	vor 7 Tagen

Metriken nach Kategorie

Vitalität

Lebt das Projekt — wird Code geschrieben und werden Releases ausgeliefert?

77Gut · 22 % des Gesamtindex

Entwicklungsaktivität

70Gut

Wie die Bewertung erfolgt

36/36	Push-Aktualität — letzter Push vor 7 Tagen
6.2/36	Commit-Rhythmus — 9/52 Wochen mit Commits
18/18	Commit-Volumen — 101 Commits im letzten Jahr
10/10	OpenSSF Scorecard: Maintained — 27 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10

Verwendete Eingangsdaten

commits_last_year	101
human_commit_share	1
days_since_last_push	7
active_weeks_last_year	9

Release-Disziplin

88Exzellent

Wie die Bewertung erfolgt

16.2/27	Liefert Releases aus — 30 Versions-Tags (keine GitHub-Releases)
36/36	Release-Aktualität — letztes Release vor 7 Tagen
27/27	Release-Rhythmus — ein Release etwa alle 13,3 Tage
0/10	OpenSSF Scorecard: Signed-Releases — keine Daten

Verwendete Eingangsdaten

releases_count	30
latest_release_tag	v0.19.2
releases_from_tags	ja
days_since_latest_release	7
mean_days_between_releases	13,3

Von der Bewertung ausgeschlossen (keine Daten oder nicht anwendbar): OpenSSF Scorecard: Signed-Releases. Die verbleibenden Gewichte wurden renormalisiert.

Community & Verbreitung

Hat das Projekt Nutzer, Downloads, Aufmerksamkeit und ein einladendes Umfeld für Beitragende?

24Kritisch · 18 % des Gesamtindex

Popularität & Verbreitung

1Kritisch

Wie die Bewertung erfolgt

0/60	Stars — 0 Stars
0/25	Forks — 0 Forks
0/15	Watcher — 0 Watcher

Verwendete Eingangsdaten

forks	0
stars	0
watchers	0
growth_state	unverified
growth_factor_pct	100
growth_unverified_reason	no_history

Community-Gesundheit

50Mittel

Wie die Bewertung erfolgt

22.5/22.5	README
22.5/22.5	Lizenz — anerkannte Lizenz (BSD-2-Clause)
0/18	CONTRIBUTING-Leitfaden
0/13.5	Verhaltenskodex
0/7.2	Issue-Vorlage
0/6.3	PR-Vorlage

Verwendete Eingangsdaten

has_readme	ja
has_license	ja
has_contributing	nein
has_issue_template	nein
has_code_of_conduct	nein
has_pull_request_template	nein

Nachhaltigkeit & Governance

Überdauert das Projekt die Menschen, die es tragen — Bus-Faktor, Reaktionsfähigkeit, Trägerschaft und Paketpflege?

58Mittel · 24 % des Gesamtindex

Maintainer-Resilienz (Bus-Faktor)

16Kritisch

Wie die Bewertung erfolgt

9/54	Bus-Faktor — 1 Beitragende decken die Hälfte aller Commits ab
0/22.5	Commit-Verteilung — wichtigste beitragende Person verfasste 100 % der Commits
1.4/13.5	Breite der Beitragenden — 1 Beitragende
6/10	OpenSSF Scorecard: Contributors — project has 2 contributing companies or organizations -- score normalized to 6

Verwendete Eingangsdaten

bus_factor	1
contributors_sampled	1
top_contributor_share	1

Reaktionsfähigkeit bei Issues & PRs

75Gut

Wie die Bewertung erfolgt

0/46.8	Issue-Lösungsquote — keine Issues oder keine Daten
38.2/38.3	PR-Annahme — 4/4 entschiedene PRs gemergt
1.5/15	OpenSSF Scorecard: Code-Review — Found 3/21 approved changesets -- score normalized to 1

Verwendete Eingangsdaten

merged_prs	4
open_issues	0
closed_issues	0
issue_closed_ratio	—
closed_unmerged_prs	0

Von der Bewertung ausgeschlossen (keine Daten oder nicht anwendbar): Issue-Lösungsquote. Die verbleibenden Gewichte wurden renormalisiert.

Eigentümerschaft & Trägerschaft

57Mittel

Wie die Bewertung erfolgt

10/30	Organisatorische Trägerschaft — persönliches (Nutzer-)Konto
0/20	Verifizierte Domain — für Nutzerkonten nicht anwendbar
10.7/25	Reichweite des Inhabers — 30 Follower von bborbe
25/25	Kontohistorie — 206 öffentliche Repos, Kontoalter ca. 14 Jahre

Verwendete Eingangsdaten

followers	30
owner_type	User
is_verified	—
owner_login	bborbe
public_repos	206
account_age_days	5.369

Von der Bewertung ausgeschlossen (keine Daten oder nicht anwendbar): Verifizierte Domain. Die verbleibenden Gewichte wurden renormalisiert.

Paketpflege

100Exzellent

Wie die Bewertung erfolgt

25/25	Veröffentlicht & auflösbar — 1 Paket(e) auf go
35/35	Veröffentlichungsaktualität — letzte Veröffentlichung vor 7 Tagen
20/20	Versionshistorie — 30 veröffentlichte Versionen
20/20	Nicht veraltet — aktiv, nicht veraltet oder zurückgezogen

Verwendete Eingangsdaten

packages	github.com/bborbe/task-watcher
ecosystems	go
any_deprecated	nein
min_days_since_publish	7

Engineering-Qualität

Sind grundlegende Engineering- und Dokumentationspraktiken vorhanden?

76Gut · 20 % des Gesamtindex

Engineering-Praktiken

84Gut

Wie die Bewertung erfolgt

24/24	CI-Workflows — 3 Workflow(s)
24/24	Tests vorhanden
16/16	Linter-Konfiguration — .golangci.yml
0/9.6	Pre-Commit-Hooks
0/6.4	.editorconfig
20/20	OpenSSF Scorecard: CI-Tests — 4 out of 4 merged PRs checked by a CI test -- score normalized to 10

Verwendete Eingangsdaten

has_ci	ja
has_tests	ja
has_editorconfig	nein
has_linter_config	ja
has_precommit_config	nein

Dokumentation

65Mittel

Wie die Bewertung erfolgt

30/30	README
25/25	Dokumentationsverzeichnis
0/15	Dokumentations-/Homepage-Site
0/10	Repository-Beschreibung
0/10	Topics
10/10	Wiki

Verwendete Eingangsdaten

topics	—
has_wiki	ja
homepage	—
has_readme	ja
has_docs_dir	ja
has_description	nein

Sicherheit

Sind die sichtbaren Sicherheits- und Lieferkettenpraktiken belastbar, ohne ungeklärte Exposition gegenüber Hochrisikojurisdiktionen?

50Mittel · 16 % des Gesamtindex

Sicherheitslage

37Gefährdet

Wie die Bewertung erfolgt

7.5/7.5	Binary-Artifacts — no binaries found in the repo
0/7.5	Branch-Protection — branch protection not enabled on development/release branches
2.5/2.5	CI-Tests — 4 out of 4 merged PRs checked by a CI test -- score normalized to 10
0/2.5	CII-Best-Practices — no effort to earn an OpenSSF best practices badge detected
0.8/7.5	Code-Review — Found 3/21 approved changesets -- score normalized to 1
1.5/2.5	Contributors — project has 2 contributing companies or organizations -- score normalized to 6
10/10	Dangerous-Workflow — no dangerous workflow patterns detected
0/7.5	Dependency-Update-Tool — no update tool detected
0/5	Fuzzing — project is not fuzzed
2.5/2.5	Lizenz — license file detected
7.5/7.5	Maintained — 27 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10
0/5	Packaging — keine Daten
0/5	Pinned-Dependencies — dependency not pinned by hash detected -- score normalized to 0
0/5	SAST — SAST tool is not run on all commits -- score normalized to 0
0/5	Security-Policy — security policy file not detected
0/7.5	Signed-Releases — keine Daten
0/7.5	Token-Permissions — detected GitHub workflow tokens with excessive permissions
1.5/7.5	Vulnerabilities — 8 existing vulnerabilities detected

Verwendete Eingangsdaten

source	openssf_scorecard
checks_evaluated	16
scorecard_version	v5.5.0
checks_inconclusive	2
scorecard_aggregate	3,6

Von der Bewertung ausgeschlossen (keine Daten oder nicht anwendbar): packaging, signed_releases. Die verbleibenden Gewichte wurden renormalisiert.

Abhängigkeits-Advisories

100Exzellent

Wie die Bewertung erfolgt

35/35	Direkte Abhängigkeiten ohne bekannte Advisories — keine direkte Abhängigkeit trägt ein bekanntes Advisory
0/25	Indirekte Abhängigkeiten ohne bekannte Advisories — transitive Menge in diesem Bereich nicht von Entwicklungs- und Test-Abhängigkeiten trennbar
0/40	Keine offenen Advisories — kein Advisory trägt ein Veröffentlichungsdatum

Verwendete Eingangsdaten

source	osv
advisories	13
affected_packages	4
assessed_packages	419
unassessed_packages	0
affected_by_severity	critical 1, high 1, unknown 2
direct_affected_packages	0

Von der Bewertung ausgeschlossen (keine Daten oder nicht anwendbar): Indirekte Abhängigkeiten ohne bekannte Advisories, Keine offenen Advisories. Die verbleibenden Gewichte wurden renormalisiert. 419 aufgelöste Abhängigkeiten wurden mit OSV abgeglichen. Dieses Repository veröffentlicht kein Paket, das der Index auflöst; bewertet wurde daher der Abhängigkeitsgraph des Repositorys. Dieser Graph vermischt Entwicklungs- und Test-Pins mit ausgelieferten Abhängigkeiten, daher werden nur die deklarierten Laufzeit-Abhängigkeiten bewertet; transitive Befunde werden als Kontext ausgewiesen und fließen nicht in die Bewertung ein. Erreichbarkeit wird nicht analysiert.

AI Readiness

Wie gut ist das Repository dafür ausgestattet, mit KI-Coding-Agenten entwickelt und gepflegt zu werden? Ein unabhängiges, experimentelles Badge — Gewicht 0,0, es wird eigenständig ausgewiesen und verändert den Gesamt-Gesundheitswert nicht.

55Mittel · 0 % des Gesamtindex

AI-Agentenkontext & Leitlinien

11Kritisch

Wie die Bewertung erfolgt

0/45	Agentenanweisungen — keine CLAUDE.md / AGENTS.md / Editor-Regeln
0/15	Maschinenlesbare Doku (llms.txt)
11.2/40	Lesbare Commit-Historie — 21 von 100 menschlichen Commits benennen ihre Absicht (strukturierter Betreff oder erläuternder Text)

Verwendete Eingangsdaten

has_llms_txt	nein
legible_history_share	0,21
agent_instruction_files	—
agent_instruction_max_bytes	—

AI-Verify-Loop (Build / Test / Typprüfung)

72Gut

Wie die Bewertung erfolgt

18/18	Bootstrap mit einem Befehl — Makefile
22/22	Automatisierte Tests
11/11	Lint-/Format-Konfiguration — .golangci.yml
11/11	Statische Typprüfung — Go (statisch typisiert)
10/10	Reproduzierbare Umgebung — lockfile
0/10	Belegte Agentenpraxis — keine von Agenten verfassten Commits unter den letzten 100
0/8	Automatisierte Wartung — keine automatisierten Abhängigkeits-Updates beobachtet
0/10	OpenSSF Scorecard: Pinned-Dependencies — dependency not pinned by hash detected -- score normalized to 0

Verwendete Eingangsdaten

has_nix	nein
has_tests	ja
lockfiles	go.sum
has_dockerfile	nein
typed_language	ja
bootstrap_files	Makefile
has_devcontainer	nein
has_linter_config	ja
typecheck_configs	—
agent_commit_share	0
toolchain_manifests	go.mod
dependency_bot_commit_share	0

AI-Code-Lesbarkeit für Modelle

100Exzellent

Wie die Bewertung erfolgt

45/45	Typprüfbarer Code — Go (statisch typisiert)
55/55	Handhabbare Dateigrößen — 0/29 Quelldateien über 60 KB

Verwendete Eingangsdaten

primary_language	Go
largest_source_bytes	14.788
source_files_sampled	29
oversized_source_files	0

Eckdaten

0GitHub-Sterne

1Mitwirkende

101Commits, letzte 12 Monate

7Tage seit letztem Push

30Releases

1Bus-Faktor

0offene Issues

GoPaket-Ökosysteme

Weitere Details

OpenSSF Scorecard 3.6 / 10

3.6Gesamtwert

Unabhängige, werkzeugneutrale Sicherheitsbewertung durch das quelloffene OpenSSF Scorecard. Jede Prüfung honoriert eine Sicherheits-Praxis, nicht das Werkzeug eines bestimmten Anbieters. Prüfungen, die Scorecard nicht ermitteln konnte, sind mit k. A. markiert und vom Sicherheitswert ausgeschlossen (nie als null gezählt).Scorecard v5.5.0 · 2026-07-27 15:01 UTC

10	Binary-Artifacts	no binaries found in the repo
0	Branch-Protection	branch protection not enabled on development/release branches
10	CI-Tests	4 out of 4 merged PRs checked by a CI test -- score normalized to 10
0	CII-Best-Practices	no effort to earn an OpenSSF best practices badge detected
1	Code-Review	Found 3/21 approved changesets -- score normalized to 1
6	Contributors	project has 2 contributing companies or organizations -- score normalized to 6
10	Dangerous-Workflow	no dangerous workflow patterns detected
0	Dependency-Update-Tool	no update tool detected
0	Fuzzing	project is not fuzzed
10	License	license file detected
10	Maintained	27 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10
k. A.	Packaging	packaging workflow not detected
0	Pinned-Dependencies	dependency not pinned by hash detected -- score normalized to 0
0	SAST	SAST tool is not run on all commits -- score normalized to 0
0	Security-Policy	security policy file not detected
k. A.	Signed-Releases	no releases found
0	Token-Permissions	detected GitHub workflow tokens with excessive permissions
2	Vulnerabilities	8 existing vulnerabilities detected

Direkte Abhängigkeiten 16

Registry	Paket	Versionsvorgabe	Manifest
Go	github.com/bborbe/errors	`v1.5.16`	go.mod
Go	github.com/bborbe/vault-cli	`v0.96.6`	go.mod
Go	github.com/golangci/golangci-lint/v2	`v2.12.2`	go.mod
Go	github.com/google/addlicense	`v1.2.0`	go.mod
Go	github.com/google/osv-scanner/v2	`v2.4.0`	go.mod
Go	github.com/incu6us/goimports-reviser/v3	`v3.12.6`	go.mod
Go	github.com/kisielk/errcheck	`v1.20.0`	go.mod
Go	github.com/maxbrunsfeld/counterfeiter/v6	`v6.12.2`	go.mod
Go	github.com/onsi/ginkgo/v2	`v2.32.0`	go.mod
Go	github.com/onsi/gomega	`v1.42.1`	go.mod
Go	github.com/securego/gosec/v2	`v2.27.1`	go.mod
Go	github.com/segmentio/golines	`v0.13.0`	go.mod
Go	github.com/shoenig/go-modtool	`v0.7.1`	go.mod
Go	github.com/spf13/cobra	`v1.10.2`	go.mod
Go	golang.org/x/vuln	`v1.5.0`	go.mod
Go	gopkg.in/yaml.v3	`v3.0.1`	go.mod

Alle Abhängigkeiten 419

Vollständig aufgelöster Abhängigkeitssatz aus dem GitHub-Abhängigkeitsgraphen: 16 direkte und 403 indirekte (transitive) Pakete. Die transitive Hülle ist vollständig, wenn das Repository eine Lockfile eincheckt.

Registry	Paket	Version	Beziehung
Go	github.com/bborbe/errors	`v1.5.16`	direkt
Go	github.com/bborbe/vault-cli	`v0.96.6`	direkt
Go	github.com/golangci/golangci-lint/v2	`v2.12.2`	direkt
Go	github.com/google/addlicense	`v1.2.0`	direkt
Go	github.com/google/osv-scanner/v2	`v2.4.0`	direkt
Go	github.com/incu6us/goimports-reviser/v3	`v3.12.6`	direkt
Go	github.com/kisielk/errcheck	`v1.20.0`	direkt
Go	github.com/maxbrunsfeld/counterfeiter/v6	`v6.12.2`	direkt
Go	github.com/onsi/ginkgo/v2	`v2.32.0`	direkt
Go	github.com/onsi/gomega	`v1.42.1`	direkt
Go	github.com/securego/gosec/v2	`v2.27.1`	direkt
Go	github.com/segmentio/golines	`v0.13.0`	direkt
Go	github.com/shoenig/go-modtool	`v0.7.1`	direkt
Go	github.com/spf13/cobra	`v1.10.2`	direkt
Go	golang.org/x/vuln	`v1.5.0`	direkt
Go	gopkg.in/yaml.v3	`v3.0.1`	direkt
Go	4d63.com/gocheckcompilerdirectives	`v1.3.0`	indirekt
Go	4d63.com/gochecknoglobals	`v0.2.2`	indirekt
Go	bitbucket.org/creachadair/stringset	`v0.0.14`	indirekt
Go	cattlecloud.net/go/babycli	`v0.2.0`	indirekt
Go	cattlecloud.net/go/stacks	`v1.1.0`	indirekt
Go	charm.land/glamour/v2	`v2.0.0`	indirekt
Go	charm.land/lipgloss/v2	`v2.0.3`	indirekt
Go	cloud.google.com/go	`v0.123.0`	indirekt
Go	cloud.google.com/go/auth	`v0.19.0`	indirekt
Go	cloud.google.com/go/compute/metadata	`v0.9.0`	indirekt
Go	codeberg.org/chavacava/garif	`v0.2.0`	indirekt
Go	codeberg.org/polyfloyd/go-errorlint	`v1.9.0`	indirekt
Go	dario.cat/mergo	`v1.0.2`	indirekt
Go	deps.dev/api/v3	`v3.0.0-20260422013440-90c27f84dd6f`	indirekt
Go	deps.dev/api/v3alpha	`v0.0.0-20260422013440-90c27f84dd6f`	indirekt
Go	deps.dev/util/maven	`v0.0.0-20260528042559-b92437de09fd`	indirekt
Go	deps.dev/util/pypi	`v0.0.0-20260422013440-90c27f84dd6f`	indirekt
Go	deps.dev/util/resolve	`v0.0.0-20260422013440-90c27f84dd6f`	indirekt
Go	deps.dev/util/semver	`v0.0.0-20260529052642-cf1e78d92744`	indirekt
Go	dev.gaijin.team/go/exhaustruct/v4	`v4.0.0`	indirekt
Go	dev.gaijin.team/go/golib	`v0.6.0`	indirekt
Go	github.com/4meepo/tagalign	`v1.4.3`	indirekt
Go	github.com/abirdcfly/dupword	`v0.1.7`	indirekt
Go	github.com/adminbenni/iota-mixing	`v1.0.0`	indirekt
Go	github.com/aead/serpent	`v0.0.0-20160714141033-fba169763ea6`	indirekt
Go	github.com/agext/levenshtein	`v1.2.3`	indirekt
Go	github.com/alecthomas/chroma/v2	`v2.24.1`	indirekt
Go	github.com/alecthomas/go-check-sumtype	`v0.3.1`	indirekt
Go	github.com/alecthomas/kingpin/v2	`v2.4.0`	indirekt
Go	github.com/alecthomas/units	`v0.0.0-20240927000941-0f3dac36c52b`	indirekt
Go	github.com/alexkohler/nakedret/v2	`v2.0.6`	indirekt
Go	github.com/alexkohler/prealloc	`v1.1.0`	indirekt
Go	github.com/alfatraining/structtag	`v1.0.0`	indirekt
Go	github.com/alingse/asasalint	`v0.0.11`	indirekt
Go	github.com/alingse/nilnesserr	`v0.2.0`	indirekt
Go	github.com/alwxsin/noinlineerr	`v1.0.5`	indirekt
Go	github.com/anchore/go-lzo	`v0.1.0`	indirekt
Go	github.com/anchore/go-struct-converter	`v0.1.0`	indirekt
Go	github.com/anthropics/anthropic-sdk-go	`v1.46.0`	indirekt
Go	github.com/antonboom/errname	`v1.1.1`	indirekt
Go	github.com/antonboom/nilnil	`v1.1.1`	indirekt
Go	github.com/antonboom/testifylint	`v1.6.4`	indirekt
Go	github.com/ashanbrown/forbidigo/v2	`v2.3.1`	indirekt
Go	github.com/ashanbrown/makezero/v2	`v2.2.1`	indirekt
Go	github.com/atotto/clipboard	`v0.1.4`	indirekt
Go	github.com/aymanbagabas/go-osc52/v2	`v2.0.1`	indirekt
Go	github.com/aymerick/douceur	`v0.2.0`	indirekt
Go	github.com/ayoubfaouzi/pkcs7	`v0.2.3`	indirekt
Go	github.com/bahlo/generic-list-go	`v0.2.0`	indirekt
Go	github.com/bazelbuild/buildtools	`v0.0.0-20260319080235-05d2ebe49b0f`	indirekt
Go	github.com/bborbe/collection	`v1.20.17`	indirekt
Go	github.com/bborbe/math	`v1.3.12`	indirekt
Go	github.com/bborbe/parse	`v1.10.16`	indirekt
Go	github.com/bborbe/run	`v1.9.30`	indirekt
Go	github.com/bborbe/time	`v1.27.5`	indirekt
Go	github.com/bborbe/validation	`v1.4.16`	indirekt
Go	github.com/beorn7/perks	`v1.0.1`	indirekt
Go	github.com/bkielbasa/cyclop	`v1.2.3`	indirekt
Go	github.com/blizzy78/varnamelen	`v0.8.0`	indirekt
Go	github.com/bmatcuk/doublestar/v4	`v4.10.0`	indirekt
Go	github.com/bombsimon/wsl/v4	`v4.7.0`	indirekt
Go	github.com/bombsimon/wsl/v5	`v5.8.0`	indirekt
Go	github.com/breml/bidichk	`v0.3.3`	indirekt
Go	github.com/breml/errchkjson	`v0.4.1`	indirekt
Go	github.com/buger/jsonparser	`v1.2.0`	indirekt
Go	github.com/burntsushi/toml	`v1.6.0`	indirekt
Go	github.com/butuzov/ireturn	`v0.4.1`	indirekt
Go	github.com/butuzov/mirror	`v1.3.0`	indirekt
Go	github.com/canonical/chisel-manifest	`v1.2.0`	indirekt
Go	github.com/catenacyber/perfsprint	`v0.10.1`	indirekt
Go	github.com/ccojocar/zxcvbn-go	`v1.0.4`	indirekt
Go	github.com/cespare/xxhash/v2	`v2.3.0`	indirekt
Go	github.com/charithe/durationcheck	`v0.0.11`	indirekt
Go	github.com/charmbracelet/bubbles	`v0.21.0`	indirekt
Go	github.com/charmbracelet/bubbletea	`v1.3.10`	indirekt
Go	github.com/charmbracelet/colorprofile	`v0.4.3`	indirekt
Go	github.com/charmbracelet/lipgloss	`v1.1.1-0.20250404203927-76690c660834`	indirekt
Go	github.com/charmbracelet/ultraviolet	`v0.0.0-20260205113103-524a6607adb8`	indirekt
Go	github.com/charmbracelet/x/ansi	`v0.11.7`	indirekt
Go	github.com/charmbracelet/x/exp/slice	`v0.0.0-20250711012602-b1f986320f7e`	indirekt
Go	github.com/charmbracelet/x/term	`v0.2.2`	indirekt
Go	github.com/charmbracelet/x/termios	`v0.1.1`	indirekt
Go	github.com/charmbracelet/x/windows	`v0.2.2`	indirekt
Go	github.com/ckaznocha/intrange	`v0.3.1`	indirekt
Go	github.com/clickhouse/clickhouse-go-linter	`v1.2.0`	indirekt
Go	github.com/clipperhouse/displaywidth	`v0.11.0`	indirekt
Go	github.com/clipperhouse/uax29/v2	`v2.7.0`	indirekt
Go	github.com/cloudflare/circl	`v1.6.3`	indirekt
Go	github.com/compose-spec/compose-go/v2	`v2.10.2`	indirekt
Go	github.com/containerd/errdefs	`v1.0.0`	indirekt
Go	github.com/containerd/errdefs/pkg	`v0.3.0`	indirekt
Go	github.com/containerd/stargz-snapshotter/estargz	`v0.18.2`	indirekt
Go	github.com/containerd/typeurl/v2	`v2.2.3`	indirekt
Go	github.com/curioswitch/go-reassign	`v0.3.0`	indirekt
Go	github.com/cyclonedx/cyclonedx-go	`v0.11.0`	indirekt
Go	github.com/cyphar/filepath-securejoin	`v0.6.1`	indirekt
Go	github.com/daixiang0/gci	`v0.13.7`	indirekt
Go	github.com/dave/dst	`v0.27.3`	indirekt
Go	github.com/davecgh/go-spew	`v1.1.2-0.20180830191138-d8f796af33cc`	indirekt
Go	github.com/deitch/magic	`v0.0.0-20240306090643-c67ab88f10cb`	indirekt
Go	github.com/distribution/reference	`v0.6.0`	indirekt
Go	github.com/djarvur/go-err113	`v0.1.1`	indirekt
Go	github.com/djherbis/times	`v1.6.0`	indirekt
Go	github.com/dlclark/regexp2	`v1.12.0`	indirekt
Go	github.com/docker/cli	`v29.4.3+incompatible`	indirekt
Go	github.com/docker/distribution	`v2.8.3+incompatible`	indirekt
Go	github.com/docker/docker	`v28.5.2+incompatible`	indirekt
Go	github.com/docker/docker-credential-helpers	`v0.9.5`	indirekt
Go	github.com/docker/go-connections	`v0.5.0`	indirekt
Go	github.com/docker/go-units	`v0.5.0`	indirekt
Go	github.com/dsoprea/go-exfat	`v0.0.0-20190906070738-5e932fbdb589`	indirekt
Go	github.com/dsoprea/go-logging	`v0.0.0-20200710184922-b02d349568dd`	indirekt
Go	github.com/dustin/go-humanize	`v1.0.1`	indirekt
Go	github.com/edsrzf/mmap-go	`v1.2.0`	indirekt
Go	github.com/elliotwutingfeng/asciiset	`v0.0.0-20260129054604-cfde2086bc57`	indirekt
Go	github.com/emirpasic/gods	`v1.18.1`	indirekt
Go	github.com/erikgeiser/coninput	`v0.0.0-20211004153227-1c3628e74d0f`	indirekt
Go	github.com/erikvarga/go-rpmdb	`v0.0.0-20250523120114-a15a62cd4593`	indirekt
Go	github.com/ettle/strcase	`v0.2.0`	indirekt
Go	github.com/fatih/color	`v1.19.0`	indirekt
Go	github.com/fatih/structtag	`v1.2.0`	indirekt
Go	github.com/felixge/httpsnoop	`v1.0.4`	indirekt
Go	github.com/firefart/nonamedreturns	`v1.0.6`	indirekt
Go	github.com/fsnotify/fsnotify	`v1.10.1`	indirekt
Go	github.com/fzipp/gocyclo	`v0.6.0`	indirekt
Go	github.com/gehirninc/crypt	`v0.0.0-20230320061759-8cc1b52080c5`	indirekt
Go	github.com/getsentry/sentry-go	`v0.47.0`	indirekt
Go	github.com/ghostiam/protogetter	`v0.3.20`	indirekt
Go	github.com/go-critic/go-critic	`v0.14.3`	indirekt
Go	github.com/go-errors/errors	`v1.5.1`	indirekt
Go	github.com/go-git/gcfg	`v1.5.1-0.20230307220236-3a3c6141e376`	indirekt
Go	github.com/go-git/go-billy/v5	`v5.9.0`	indirekt
Go	github.com/go-git/go-git/v5	`v5.19.1`	indirekt
Go	github.com/go-logr/logr	`v1.4.3`	indirekt
Go	github.com/go-logr/stdr	`v1.2.2`	indirekt
Go	github.com/go-ole/go-ole	`v1.3.0`	indirekt
Go	github.com/go-restruct/restruct	`v1.2.0-alpha`	indirekt
Go	github.com/go-task/slim-sprig/v3	`v3.0.0`	indirekt
Go	github.com/go-toolsmith/astcast	`v1.1.0`	indirekt
Go	github.com/go-toolsmith/astcopy	`v1.1.0`	indirekt
Go	github.com/go-toolsmith/astequal	`v1.2.0`	indirekt
Go	github.com/go-toolsmith/astfmt	`v1.1.0`	indirekt
Go	github.com/go-toolsmith/astp	`v1.1.0`	indirekt
Go	github.com/go-toolsmith/strparse	`v1.1.0`	indirekt
Go	github.com/go-toolsmith/typep	`v1.1.0`	indirekt
Go	github.com/go-viper/mapstructure/v2	`v2.5.0`	indirekt
Go	github.com/go-xmlfmt/xmlfmt	`v1.1.3`	indirekt
Go	github.com/gobwas/glob	`v0.2.3`	indirekt
Go	github.com/godoc-lint/godoc-lint	`v0.11.2`	indirekt
Go	github.com/gofrs/flock	`v0.13.0`	indirekt
Go	github.com/gogo/protobuf	`v1.3.2`	indirekt
Go	github.com/golang/glog	`v1.2.5`	indirekt
Go	github.com/golang/groupcache	`v0.0.0-20241129210726-2c02b8208cf8`	indirekt
Go	github.com/golangci/asciicheck	`v0.5.0`	indirekt
Go	github.com/golangci/dupl	`v0.0.0-20260401084720-c99c5cf5c202`	indirekt
Go	github.com/golangci/go-printf-func-name	`v0.1.1`	indirekt
Go	github.com/golangci/gofmt	`v0.0.0-20250106114630-d62b90e6713d`	indirekt
Go	github.com/golangci/golines	`v0.15.0`	indirekt
Go	github.com/golangci/misspell	`v0.8.0`	indirekt
Go	github.com/golangci/plugin-module-register	`v0.1.2`	indirekt
Go	github.com/golangci/revgrep	`v0.8.0`	indirekt
Go	github.com/golangci/rowserrcheck	`v0.0.0-20260419091836-c5f79b8a11ba`	indirekt
Go	github.com/golangci/swaggoswag	`v0.0.0-20250504205917-77f2aca3143e`	indirekt
Go	github.com/golangci/unconvert	`v0.0.0-20250410112200-a129a6e6413e`	indirekt
Go	github.com/google/go-cmp	`v0.7.0`	indirekt
Go	github.com/google/go-containerregistry	`v0.20.7`	indirekt
Go	github.com/google/jsonschema-go	`v0.4.3`	indirekt
Go	github.com/google/osv-scalibr	`v0.4.6-0.20260612031204-164402d9140e`	indirekt
Go	github.com/google/pprof	`v0.0.0-20260507013755-92041b743c96`	indirekt
Go	github.com/google/s2a-go	`v0.1.9`	indirekt
Go	github.com/google/uuid	`v1.6.0`	indirekt
Go	github.com/googleapis/enterprise-certificate-proxy	`v0.3.14`	indirekt
Go	github.com/googleapis/gax-go/v2	`v2.22.0`	indirekt
Go	github.com/gookit/color	`v1.6.1`	indirekt
Go	github.com/gordonklaus/ineffassign	`v0.2.0`	indirekt
Go	github.com/gorilla/css	`v1.0.1`	indirekt
Go	github.com/gorilla/websocket	`v1.5.3`	indirekt
Go	github.com/gostaticanalysis/analysisutil	`v0.7.1`	indirekt
Go	github.com/gostaticanalysis/comment	`v1.5.0`	indirekt
Go	github.com/gostaticanalysis/forcetypeassert	`v0.2.0`	indirekt
Go	github.com/gostaticanalysis/nilerr	`v0.1.2`	indirekt
Go	github.com/hashicorp/go-immutable-radix/v2	`v2.1.0`	indirekt
Go	github.com/hashicorp/go-set/v3	`v3.0.1`	indirekt
Go	github.com/hashicorp/go-version	`v1.9.0`	indirekt
Go	github.com/hashicorp/golang-lru/v2	`v2.0.7`	indirekt
Go	github.com/hashicorp/hcl	`v1.0.0`	indirekt
Go	github.com/hexops/gotextdiff	`v1.0.3`	indirekt
Go	github.com/ianlancetaylor/demangle	`v0.0.0-20260505044615-1ff4bf46051f`	indirekt
Go	github.com/icholy/digest	`v1.1.0`	indirekt
Go	github.com/inconshreveable/mousetrap	`v1.1.0`	indirekt
Go	github.com/invopop/jsonschema	`v0.13.0`	indirekt
Go	github.com/jbenet/go-context	`v0.0.0-20150711004518-d14ea06fba99`	indirekt
Go	github.com/jedib0t/go-pretty/v6	`v6.7.10`	indirekt
Go	github.com/jgautheron/goconst	`v1.10.0`	indirekt
Go	github.com/jjti/go-spancheck	`v0.6.5`	indirekt
Go	github.com/julz/importas	`v0.2.0`	indirekt
Go	github.com/karamaru-alpha/copyloopvar	`v1.2.2`	indirekt
Go	github.com/kevinburke/ssh_config	`v1.6.0`	indirekt
Go	github.com/kkhaike/contextcheck	`v1.1.6`	indirekt
Go	github.com/klauspost/compress	`v1.18.6`	indirekt
Go	github.com/klauspost/cpuid/v2	`v2.3.0`	indirekt
Go	github.com/kulti/thelper	`v0.7.1`	indirekt
Go	github.com/kunwardeep/paralleltest	`v1.0.15`	indirekt
Go	github.com/lasiar/canonicalheader	`v1.1.2`	indirekt
Go	github.com/ldez/exptostd	`v0.4.5`	indirekt
Go	github.com/ldez/gomoddirectives	`v0.8.0`	indirekt
Go	github.com/ldez/grignotin	`v0.10.1`	indirekt
Go	github.com/ldez/structtags	`v0.6.1`	indirekt
Go	github.com/ldez/tagliatelle	`v0.7.2`	indirekt
Go	github.com/ldez/usetesting	`v0.5.0`	indirekt
Go	github.com/leonklingele/grouper	`v1.1.2`	indirekt
Go	github.com/lucasb-eyer/go-colorful	`v1.4.0`	indirekt
Go	github.com/lunixbochs/struc	`v0.0.0-20241101090106-8d528fa2c543`	indirekt
Go	github.com/macabu/inamedparam	`v0.2.0`	indirekt
Go	github.com/magiconair/properties	`v1.8.6`	indirekt
Go	github.com/mailru/easyjson	`v0.9.2`	indirekt
Go	github.com/manuelarte/embeddedstructfieldcheck	`v0.4.0`	indirekt
Go	github.com/manuelarte/funcorder	`v0.6.0`	indirekt
Go	github.com/maratori/testableexamples	`v1.0.1`	indirekt
Go	github.com/maratori/testpackage	`v1.1.2`	indirekt
Go	github.com/masahiro331/go-ext4-filesystem	`v0.0.0-20260423010602-fe51f5b5e52b`	indirekt
Go	github.com/masterminds/semver/v3	`v3.5.0`	indirekt
Go	github.com/matoous/godox	`v1.1.0`	indirekt
Go	github.com/mattn/go-colorable	`v0.1.14`	indirekt
Go	github.com/mattn/go-isatty	`v0.0.22`	indirekt
Go	github.com/mattn/go-localereader	`v0.0.1`	indirekt
Go	github.com/mattn/go-runewidth	`v0.0.23`	indirekt
Go	github.com/mattn/go-shellwords	`v1.0.13`	indirekt
Go	github.com/mgechev/revive	`v1.15.0`	indirekt
Go	github.com/mgutz/ansi	`v0.0.0-20200706080929-d51e80ef957d`	indirekt
Go	github.com/michaelkedar/xml	`v0.0.0-20250626233154-4ec9e090d1cd`	indirekt
Go	github.com/microcosm-cc/bluemonday	`v1.0.27`	indirekt
Go	github.com/micromdm/plist	`v0.2.2`	indirekt
Go	github.com/microsoft/go-winio	`v0.6.2`	indirekt
Go	github.com/mirrexone/unqueryvet	`v1.5.4`	indirekt
Go	github.com/mitchellh/go-homedir	`v1.1.0`	indirekt
Go	github.com/mitchellh/mapstructure	`v1.5.0`	indirekt
Go	github.com/moby/buildkit	`v0.30.0`	indirekt
Go	github.com/moby/docker-image-spec	`v1.3.1`	indirekt
Go	github.com/modelcontextprotocol/go-sdk	`v1.6.1`	indirekt
Go	github.com/moricho/tparallel	`v0.3.2`	indirekt
Go	github.com/muesli/ansi	`v0.0.0-20230316100256-276c6243b2f6`	indirekt
Go	github.com/muesli/cancelreader	`v0.2.2`	indirekt
Go	github.com/muesli/reflow	`v0.3.0`	indirekt
Go	github.com/muesli/termenv	`v0.16.0`	indirekt
Go	github.com/munnerz/goautoneg	`v0.0.0-20191010083416-a7dc8b61c822`	indirekt
Go	github.com/nakabonne/nestif	`v0.3.1`	indirekt
Go	github.com/ncruces/go-strftime	`v1.0.0`	indirekt
Go	github.com/nishanths/exhaustive	`v0.12.0`	indirekt
Go	github.com/nishanths/predeclared	`v0.2.2`	indirekt
Go	github.com/nunnatsa/ginkgolinter	`v0.23.0`	indirekt
Go	github.com/nxadm/tail	`v1.4.11`	indirekt
Go	github.com/openai/openai-go/v3	`v3.37.0`	indirekt
Go	github.com/opencontainers/go-digest	`v1.0.0`	indirekt
Go	github.com/opencontainers/image-spec	`v1.1.1`	indirekt
Go	github.com/openpeedeep/depguard/v2	`v2.2.1`	indirekt
Go	github.com/ossf/osv-schema/bindings/go	`v0.0.0-20260424063704-83285ce2a866`	indirekt
Go	github.com/owenrumney/go-sarif/v3	`v3.3.0`	indirekt
Go	github.com/package-url/packageurl-go	`v0.1.6`	indirekt
Go	github.com/pandatix/go-cvss	`v0.6.2`	indirekt
Go	github.com/pelletier/go-toml	`v1.9.5`	indirekt
Go	github.com/pelletier/go-toml/v2	`v2.3.1`	indirekt
Go	github.com/pierrec/lz4/v4	`v4.1.26`	indirekt
Go	github.com/pjbgf/sha1cd	`v0.6.0`	indirekt
Go	github.com/pkg/errors	`v0.9.1`	indirekt
Go	github.com/pkg/xattr	`v0.4.12`	indirekt
Go	github.com/planetscale/vtprotobuf	`v0.6.1-0.20240319094008-0393e58bdf10`	indirekt
Go	github.com/pmezard/go-difflib	`v1.0.1-0.20181226105442-5d4384ee4fb2`	indirekt
Go	github.com/prometheus/client_golang	`v1.23.2`	indirekt
Go	github.com/prometheus/client_model	`v0.6.2`	indirekt
Go	github.com/prometheus/common	`v0.66.1`	indirekt
Go	github.com/prometheus/procfs	`v0.17.0`	indirekt
Go	github.com/protonmail/go-crypto	`v1.4.1`	indirekt
Go	github.com/quasilyte/go-ruleguard	`v0.4.5`	indirekt
Go	github.com/quasilyte/go-ruleguard/dsl	`v0.3.23`	indirekt
Go	github.com/quasilyte/gogrep	`v0.5.0`	indirekt
Go	github.com/quasilyte/regex/syntax	`v0.0.0-20210819130434-b3f0c404a727`	indirekt
Go	github.com/quasilyte/stdinfo	`v0.0.0-20220114132959-f7386bf02567`	indirekt
Go	github.com/raeperd/recvcheck	`v0.2.0`	indirekt
Go	github.com/remyoudompheng/bigfft	`v0.0.0-20230129092748-24d4a6f8daec`	indirekt
Go	github.com/rivo/uniseg	`v0.4.7`	indirekt
Go	github.com/rogpeppe/go-internal	`v1.14.1`	indirekt
Go	github.com/rust-secure-code/go-rustaudit	`v0.0.0-20250226111315-e20ec32e963c`	indirekt
Go	github.com/ryancurrah/gomodguard	`v1.4.1`	indirekt
Go	github.com/ryancurrah/gomodguard/v2	`v2.1.3`	indirekt
Go	github.com/ryanrolds/sqlclosecheck	`v0.6.0`	indirekt
Go	github.com/saferwall/pe	`v1.6.4`	indirekt
Go	github.com/sahilm/fuzzy	`v0.1.2`	indirekt
Go	github.com/sanposhiho/wastedassign/v2	`v2.1.0`	indirekt
Go	github.com/santhosh-tekuri/jsonschema/v6	`v6.0.2`	indirekt
Go	github.com/sashamelentyev/interfacebloat	`v1.1.0`	indirekt
Go	github.com/sashamelentyev/usestdlibvars	`v1.29.0`	indirekt
Go	github.com/segmentio/asm	`v1.1.3`	indirekt
Go	github.com/segmentio/encoding	`v0.5.4`	indirekt
Go	github.com/sergi/go-diff	`v1.4.0`	indirekt
Go	github.com/shirou/gopsutil	`v3.21.11+incompatible`	indirekt
Go	github.com/shoenig/regexplus	`v0.3.0`	indirekt
Go	github.com/shoenig/semantic	`v1.2.1`	indirekt
Go	github.com/sirupsen/logrus	`v1.9.4`	indirekt
Go	github.com/sivchari/containedctx	`v1.0.3`	indirekt
Go	github.com/skeema/knownhosts	`v1.3.2`	indirekt
Go	github.com/sonatard/noctx	`v0.5.1`	indirekt
Go	github.com/sourcegraph/go-diff	`v0.8.0`	indirekt
Go	github.com/spdx/gordf	`v0.0.0-20250128162952-000978ccd6fb`	indirekt
Go	github.com/spdx/tools-golang	`v0.5.7`	indirekt
Go	github.com/spf13/afero	`v1.15.0`	indirekt
Go	github.com/spf13/cast	`v1.5.0`	indirekt
Go	github.com/spf13/jwalterweatherman	`v1.1.0`	indirekt
Go	github.com/spf13/pflag	`v1.0.10`	indirekt
Go	github.com/spf13/viper	`v1.12.0`	indirekt
Go	github.com/ssgreg/nlreturn/v2	`v2.2.1`	indirekt
Go	github.com/standard-webhooks/standard-webhooks/libraries	`v0.0.1`	indirekt
Go	github.com/stbenjam/no-sprintf-host-port	`v0.3.1`	indirekt
Go	github.com/stretchr/objx	`v0.5.3`	indirekt
Go	github.com/stretchr/testify	`v1.11.1`	indirekt
Go	github.com/subosito/gotenv	`v1.4.1`	indirekt
Go	github.com/tetafro/godot	`v1.5.6`	indirekt
Go	github.com/thoas/go-funk	`v0.9.3`	indirekt
Go	github.com/tidwall/gjson	`v1.19.0`	indirekt
Go	github.com/tidwall/jsonc	`v0.3.3`	indirekt
Go	github.com/tidwall/match	`v1.2.0`	indirekt
Go	github.com/tidwall/pretty	`v1.2.1`	indirekt
Go	github.com/tidwall/sjson	`v1.2.5`	indirekt
Go	github.com/timakin/bodyclose	`v0.0.0-20260129054331-73d1f95b84b4`	indirekt
Go	github.com/timonwong/loggercheck	`v0.11.0`	indirekt
Go	github.com/tink-crypto/tink-go/v2	`v2.6.0`	indirekt
Go	github.com/tklauser/go-sysconf	`v0.3.16`	indirekt
Go	github.com/tklauser/numcpus	`v0.11.0`	indirekt
Go	github.com/tomarrell/wrapcheck/v2	`v2.12.0`	indirekt
Go	github.com/tommy-muehle/go-mnd/v2	`v2.5.1`	indirekt
Go	github.com/tonistiigi/go-csvvalue	`v0.0.0-20240814133006-030d3b2625d0`	indirekt
Go	github.com/ulikunitz/xz	`v0.5.15`	indirekt
Go	github.com/ultraware/funlen	`v0.2.0`	indirekt
Go	github.com/ultraware/whitespace	`v0.2.0`	indirekt
Go	github.com/urfave/cli/v3	`v3.9.0`	indirekt
Go	github.com/uudashr/gocognit	`v1.2.1`	indirekt
Go	github.com/uudashr/iface	`v1.4.2`	indirekt
Go	github.com/vbatts/tar-split	`v0.12.3`	indirekt
Go	github.com/wk8/go-ordered-map/v2	`v2.1.8`	indirekt
Go	github.com/x-cray/logrus-prefixed-formatter	`v0.5.2`	indirekt
Go	github.com/xanzy/ssh-agent	`v0.3.3`	indirekt
Go	github.com/xeipuuv/gojsonpointer	`v0.0.0-20190905194746-02993c407bfb`	indirekt
Go	github.com/xeipuuv/gojsonreference	`v0.0.0-20180127040603-bd5ef7bd5415`	indirekt
Go	github.com/xeipuuv/gojsonschema	`v1.2.0`	indirekt
Go	github.com/xen0n/gosmopolitan	`v1.3.0`	indirekt
Go	github.com/xhit/go-str2duration/v2	`v2.1.0`	indirekt
Go	github.com/xo/terminfo	`v0.0.0-20220910002029-abceb7e1c41e`	indirekt
Go	github.com/yagipy/maintidx	`v1.0.0`	indirekt
Go	github.com/yeya24/promlinter	`v0.3.0`	indirekt
Go	github.com/ykadowak/zerologlint	`v0.1.5`	indirekt
Go	github.com/yosida95/uritemplate/v3	`v3.0.2`	indirekt
Go	github.com/yuin/goldmark	`v1.7.12`	indirekt
Go	github.com/yuin/goldmark-emoji	`v1.0.6`	indirekt
Go	github.com/yusufpapurcu/wmi	`v1.2.4`	indirekt
Go	gitlab.com/bosi/decorder	`v0.4.2`	indirekt
Go	go-simpler.org/musttag	`v0.14.0`	indirekt
Go	go-simpler.org/sloglint	`v0.12.0`	indirekt
Go	go.augendre.info/arangolint	`v0.4.0`	indirekt
Go	go.augendre.info/fatcontext	`v0.9.0`	indirekt
Go	go.etcd.io/bbolt	`v1.4.3`	indirekt
Go	go.opentelemetry.io/auto/sdk	`v1.2.1`	indirekt
Go	go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp	`v0.69.0`	indirekt
Go	go.opentelemetry.io/otel	`v1.44.0`	indirekt
Go	go.opentelemetry.io/otel/metric	`v1.44.0`	indirekt
Go	go.opentelemetry.io/otel/trace	`v1.44.0`	indirekt
Go	go.uber.org/multierr	`v1.11.0`	indirekt
Go	go.uber.org/zap	`v1.28.0`	indirekt
Go	go.yaml.in/yaml/v2	`v2.4.4`	indirekt
Go	go.yaml.in/yaml/v3	`v3.0.4`	indirekt
Go	go.yaml.in/yaml/v4	`v4.0.0-rc.4`	indirekt
Go	golang.org/x/crypto	`v0.53.0`	indirekt
Go	golang.org/x/exp	`v0.0.0-20260508232706-74f9aab9d74a`	indirekt
Go	golang.org/x/exp/typeparams	`v0.0.0-20260209203927-2842357ff358`	indirekt
Go	golang.org/x/mod	`v0.37.0`	indirekt
Go	golang.org/x/net	`v0.56.0`	indirekt
Go	golang.org/x/oauth2	`v0.36.0`	indirekt
Go	golang.org/x/sync	`v0.21.0`	indirekt
Go	golang.org/x/sys	`v0.47.0`	indirekt
Go	golang.org/x/telemetry	`v0.0.0-20260625142307-59b4966ccb57`	indirekt
Go	golang.org/x/term	`v0.45.0`	indirekt
Go	golang.org/x/text	`v0.39.0`	indirekt
Go	golang.org/x/tools	`v0.47.0`	indirekt
Go	golang.org/x/xerrors	`v0.0.0-20240903120638-7835f813f4da`	indirekt
Go	google.golang.org/api	`v0.274.0`	indirekt
Go	google.golang.org/genai	`v1.58.0`	indirekt
Go	google.golang.org/genproto/googleapis/api	`v0.0.0-20260511170946-3700d4141b60`	indirekt
Go	google.golang.org/genproto/googleapis/rpc	`v0.0.0-20260526163538-3dc84a4a5aaa`	indirekt
Go	google.golang.org/grpc	`v1.81.1`	indirekt
Go	google.golang.org/protobuf	`v1.36.11`	indirekt
Go	gopkg.in/ini.v1	`v1.67.2`	indirekt
Go	gopkg.in/warnings.v0	`v0.1.2`	indirekt
Go	gopkg.in/yaml.v2	`v2.4.0`	indirekt
Go	honnef.co/go/tools	`v0.7.0`	indirekt
Go	modernc.org/libc	`v1.72.3`	indirekt
Go	modernc.org/mathutil	`v1.7.1`	indirekt
Go	modernc.org/memory	`v1.11.0`	indirekt
Go	modernc.org/sqlite	`v1.50.1`	indirekt
Go	mvdan.cc/gofumpt	`v0.9.2`	indirekt
Go	mvdan.cc/unparam	`v0.0.0-20251027182757-5beb8c8f8f15`	indirekt
Go	osv.dev/bindings/go	`v0.0.0-20260512064147-daa692bbd4ed`	indirekt
Go	sigs.k8s.io/yaml	`v1.6.0`	indirekt
Go	www.velocidex.com/golang/go-ntfs	`v0.2.0`	indirekt
Go	www.velocidex.com/golang/regparser	`v0.0.0-20250203141505-31e704a67ef7`	indirekt

Abhängigkeits-Advisories 4

Dieses Repository veröffentlicht kein vom Index auflösbares Paket, daher wurde sein eigener Abhängigkeitsgraph bewertet – 419 Pakete, darunter auch Entwicklungs- und Test-Pins, die nie ausgeliefert werden: 4 tragen bekannte Advisories, davon 0 direkte.

Paket	Version	Beziehung	Schweregrad	Advisories	Behoben in
google.golang.org/grpc	`v1.81.1`	indirekt	kritisch	1	`1.82.1`
github.com/docker/docker	`v28.5.2+incompatible`	indirekt	hoch	10	`29.3.1`
github.com/yuin/goldmark	`v1.7.12`	indirekt	unbekannt	1	`1.7.17`
golang.org/x/crypto	`v0.53.0`	indirekt	unbekannt	1	—

Ein Advisory bedeutet, dass die im Abhängigkeitsgraphen erfasste Version in den betroffenen Bereich eines Advisories fällt. Erreichbarkeit wird nicht analysiert, und der Graph enthält Entwicklungs- und Test-Pins — ein Fund kann das Werkzeug betreffen und nicht die ausgelieferte Software.

JSON-Rohbericht maschinenlesbar

{
  "data": {
    "repo": {
      "topics": [],
      "is_fork": false,
      "size_kb": 8062,
      "has_wiki": true,
      "homepage": null,
      "languages": {
        "Go": 77791,
        "Makefile": 4746
      },
      "pushed_at": "2026-07-19T19:17:46Z",
      "created_at": "2026-03-20T15:04:20Z",
      "owner_type": "User",
      "updated_at": "2026-07-19T19:17:49Z",
      "description": null,
      "is_archived": false,
      "is_disabled": false,
      "license_spdx": "BSD-2-Clause",
      "default_branch": "master",
      "license_spdx_raw": "BSD-2-Clause",
      "primary_language": "Go",
      "significant_languages": [
        "Go"
      ]
    },
    "owner": {
      "blog": "http://www.benjamin-borbe.de",
      "name": "Benjamin Borbe",
      "type": "User",
      "login": "bborbe",
      "company": "Seibert Group GmbH",
      "location": "Germany - Wiesbaden ",
      "followers": 30,
      "avatar_url": "https://avatars.githubusercontent.com/u/1193284?v=4",
      "created_at": "2011-11-14T10:16:14Z",
      "is_verified": null,
      "public_repos": 206,
      "account_age_days": 5369
    },
    "license": {
      "state": "standard",
      "spdx_id": "BSD-2-Clause",
      "raw_spdx": "BSD-2-Clause",
      "file_present": true,
      "scorecard_found": true,
      "profile_has_license": true
    },
    "activity": {
      "releases": [
        {
          "tag": "v0.19.2",
          "kind": "patch",
          "published_at": "2026-07-19T19:17:33Z"
        },
        {
          "tag": "v0.19.1",
          "kind": "patch",
          "published_at": "2026-07-11T13:41:38Z"
        },
        {
          "tag": "v0.19.0",
          "kind": "minor",
          "published_at": "2026-03-22T11:56:20Z"
        },
        {
          "tag": "v0.18.2",
          "kind": "patch",
          "published_at": "2026-04-09T19:52:01Z"
        },
        {
          "tag": "v0.18.1",
          "kind": "patch",
          "published_at": "2026-04-01T21:02:22Z"
        },
        {
          "tag": "v0.18.0",
          "kind": "minor",
          "published_at": "2026-03-22T11:45:49Z"
        },
        {
          "tag": "v0.17.0",
          "kind": "minor",
          "published_at": "2026-03-22T11:39:23Z"
        },
        {
          "tag": "v0.16.0",
          "kind": "minor",
          "published_at": "2026-03-22T11:33:38Z"
        },
        {
          "tag": "v0.15.0",
          "kind": "minor",
          "published_at": "2026-03-21T22:20:52Z"
        },
        {
          "tag": "v0.14.2",
          "kind": "patch",
          "published_at": "2026-03-21T20:29:18Z"
        },
        {
          "tag": "v0.14.1",
          "kind": "patch",
          "published_at": "2026-03-21T19:44:43Z"
        },
        {
          "tag": "v0.14.0",
          "kind": "minor",
          "published_at": "2026-03-21T19:32:00Z"
        },
        {
          "tag": "v0.13.0",
          "kind": "minor",
          "published_at": "2026-03-21T19:08:16Z"
        },
        {
          "tag": "v0.12.2",
          "kind": "patch",
          "published_at": "2026-03-21T17:50:48Z"
        },
        {
          "tag": "v0.12.1",
          "kind": "patch",
          "published_at": "2026-03-21T17:22:54Z"
        },
        {
          "tag": "v0.12.0",
          "kind": "minor",
          "published_at": "2026-03-21T15:35:26Z"
        },
        {
          "tag": "v0.11.0",
          "kind": "minor",
          "published_at": "2026-03-21T15:08:39Z"
        },
        {
          "tag": "v0.10.1",
          "kind": "patch",
          "published_at": "2026-03-21T13:22:02Z"
        },
        {
          "tag": "v0.10.0",
          "kind": "minor",
          "published_at": "2026-03-21T12:49:02Z"
        },
        {
          "tag": "v0.9.0",
          "kind": "minor",
          "published_at": "2026-03-21T12:25:27Z"
        },
        {
          "tag": "v0.8.0",
          "kind": "minor",
          "published_at": "2026-03-21T11:58:47Z"
        },
        {
          "tag": "v0.7.0",
          "kind": "minor",
          "published_at": "2026-03-21T11:42:22Z"
        },
        {
          "tag": "v0.6.0",
          "kind": "minor",
          "published_at": "2026-03-21T11:11:51Z"
        },
        {
          "tag": "v0.5.0",
          "kind": "minor",
          "published_at": "2026-03-21T11:08:24Z"
        },
        {
          "tag": "v0.4.1",
          "kind": "patch",
          "published_at": "2026-03-21T11:03:37Z"
        },
        {
          "tag": "v0.4.0",
          "kind": "minor",
          "published_at": "2026-03-20T22:30:18Z"
        },
        {
          "tag": "v0.3.0",
          "kind": "minor",
          "published_at": "2026-03-20T22:12:33Z"
        },
        {
          "tag": "v0.2.0",
          "kind": "minor",
          "published_at": "2026-03-20T22:07:10Z"
        },
        {
          "tag": "v0.1.1",
          "kind": "patch",
          "published_at": "2026-03-20T18:27:01Z"
        },
        {
          "tag": "v0.1.0",
          "kind": "minor",
          "published_at": "2026-03-20T17:28:11Z"
        }
      ],
      "recent_commits": [
        {
          "oid": "ddcc59153a6396f2104b7104620778ae8b52ed88",
          "body": null,
          "is_bot": false,
          "headline": "release v0.19.2",
          "author_name": "Benjamin Borbe",
          "author_login": "bborbe",
          "committed_at": "2026-07-19T19:17:33Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "7b3cbae479ff2ca8f7d696301c55169c677973d5",
          "body": "fix(deps): bump golang.org/x/text to v0.39.0 (CVE-2026-56852)",
          "is_bot": false,
          "headline": "Merge pull request #4 from bborbe/fix/update-go-657ceee",
          "author_name": "Benjamin Borbe",
          "author_login": "bborbe",
          "committed_at": "2026-07-19T19:12:06Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "f30478a36dbc72033f908b65826fd613329bfbbc",
          "body": null,
          "is_bot": false,
          "headline": "fix(deps): bump golang.org/x/text to v0.39.0 (CVE-2026-56852)",
          "author_name": "Benjamin Borbe",
          "author_login": "bborbe",
          "committed_at": "2026-07-19T16:04:57Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "657ceee1308e03970902e03810436f5f52e4d819",
          "body": null,
          "is_bot": false,
          "headline": "release v0.19.1",
          "author_name": "Benjamin Borbe",
          "author_login": "bborbe",
          "committed_at": "2026-07-11T13:41:38Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "89fc8983ae7739d860dd84c5aaad1b77173edb26",
          "body": "fix(help): correct $XDG_CONFIG_HOME wording to real config path",
          "is_bot": false,
          "headline": "Merge pull request #3 from bborbe/feature/help-xdg-config-path",
          "author_name": "Benjamin Borbe",
          "author_login": "bborbe",
          "committed_at": "2026-07-11T13:39:45Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "b8deda19afa20d7ab1f53cc38ba30629693cb0b2",
          "body": null,
          "is_bot": false,
          "headline": "024-help-xdg-config-path",
          "author_name": "Benjamin Borbe",
          "author_login": "bborbe",
          "committed_at": "2026-07-11T13:20:45Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "942a1f8561925837d8cbd210140fa6c99c630d25",
          "body": null,
          "is_bot": false,
          "headline": "feat: XDG config support + dep updates",
          "author_name": "Benjamin Borbe",
          "author_login": "bborbe",
          "committed_at": "2026-07-09T16:58:17Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "8b050836a758a4b3dd922d41bbc78d0eefbf7ad8",
          "body": null,
          "is_bot": false,
          "headline": "exclude no-fix advisory GO-2026-5932 (x/crypto/openpgp unmaintained)",
          "author_name": "Benjamin Borbe",
          "author_login": "bborbe",
          "committed_at": "2026-07-09T16:56:29Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "2cc0bba7d0657dab26bb1037ed875e4d811d8174",
          "body": "os.UserConfigDir() returns ~/Library/Application Support/ on macOS, not ~/.config/.\nMatch dark-factory + vault-cli pattern: filepath.Join(homeDir, .config, toolName).",
          "is_bot": false,
          "headline": "fix: use filepath.Join(home, .config) instead of os.UserConfigDir",
          "author_name": "Benjamin Borbe",
          "author_login": "bborbe",
          "committed_at": "2026-07-02T17:39:24Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "9f3b153b3165ce5e89f7c06114dfb90962aa467b",
          "body": null,
          "is_bot": false,
          "headline": "fix: rename v0.18.2 to Unreleased for auto-release",
          "author_name": "Benjamin Borbe",
          "author_login": "bborbe",
          "committed_at": "2026-07-02T17:15:01Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "0bf5e530c6e9cf16c17e1a71b9995b894d354baf",
          "body": null,
          "is_bot": false,
          "headline": "move prompt to completed",
          "author_name": "Benjamin Borbe",
          "author_login": "bborbe",
          "committed_at": "2026-07-02T16:47:42Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "3f69d8f26d8c98121920a456c4729dc328139922",
          "body": null,
          "is_bot": false,
          "headline": "023-xdg-config-support",
          "author_name": "Benjamin Borbe",
          "author_login": "bborbe",
          "committed_at": "2026-07-02T16:47:42Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "58d1784593faa2508c857ed4752a05b4d1341ddb",
          "body": null,
          "is_bot": false,
          "headline": "fix: adapt watcher to vault-cli v0.96.0 API changes",
          "author_name": "Benjamin Borbe",
          "author_login": "bborbe",
          "committed_at": "2026-07-02T16:36:46Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "0e7cc5d3b45706ac91a1e97ca0d9c679645f2fd6",
          "body": "…vuln entries",
          "is_bot": false,
          "headline": "merge: resolve .osv-scanner.toml conflict, keep both HEAD and remote …",
          "author_name": "Benjamin Borbe",
          "author_login": "bborbe",
          "committed_at": "2026-07-02T16:36:35Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "8e9b99c552e55a4e8bb26794916b241900a6038d",
          "body": "fix: ignore pre-existing osv-scanner vulns (containerd + stdlib)",
          "is_bot": false,
          "headline": "Merge pull request #2 from bborbe/fix/osv-scanner-ignores",
          "author_name": "Benjamin Borbe",
          "author_login": "bborbe",
          "committed_at": "2026-07-02T16:30:16Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "eda7e9d199a0b4e6411a4608fe05fa232108433b",
          "body": null,
          "is_bot": false,
          "headline": "fix",
          "author_name": "Benjamin Borbe",
          "author_login": "bborbe",
          "committed_at": "2026-07-02T16:29:46Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "a0c338440569cba11520da5da20c2d2a0c0e9d7e",
          "body": null,
          "is_bot": false,
          "headline": "fix: ignore pre-existing osv-scanner vulns (containerd + stdlib)",
          "author_name": "Benjamin Borbe",
          "author_login": "bborbe",
          "committed_at": "2026-07-02T16:27:19Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "cf55a5edc35fb359c18af7e251436bc7aebd7262",
          "body": null,
          "is_bot": false,
          "headline": "fix: ignore pre-existing osv-scanner vulns (containerd + stdlib)",
          "author_name": "Benjamin Borbe",
          "author_login": "bborbe",
          "committed_at": "2026-07-02T16:21:05Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "609a0b668368a48d8bfe6d16f30381eac1db202a",
          "body": "fix: modernize Makefile to canonical bborbe pattern",
          "is_bot": false,
          "headline": "Merge pull request #1 from bborbe/fix/modernize-makefile",
          "author_name": "Benjamin Borbe",
          "author_login": "bborbe",
          "committed_at": "2026-06-20T14:40:23Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "f566a3e9b401ab2057901cda0351d4a532553b53",
          "body": "Clears GHSA-jpcc-p29g-p8mq + GHSA-xhf5-7wjv-pqxp.",
          "is_bot": false,
          "headline": "bump containerd to v1.7.33",
          "author_name": "Benjamin Borbe",
          "author_login": "bborbe",
          "committed_at": "2026-06-20T14:35:51Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "73c8e99d12ebf4704ac39f5529da70cdb67d02da",
          "body": "Clears GO-2026-5037/5038/5039 (Go 1.26.3 stdlib vulns).",
          "is_bot": false,
          "headline": "bump go to 1.26.4",
          "author_name": "Benjamin Borbe",
          "author_login": "bborbe",
          "committed_at": "2026-06-20T14:26:44Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "139fd56563f932fcd9154de9a5fb4d8f7e7380c3",
          "body": "Address bot review: extend grep to match typesinternal.ForEachElement\nstack-frame name. Ignore GO-2026-5037/5038/5039 (1.26.3 stdlib vulns).",
          "is_bot": false,
          "headline": "fix(vulncheck): robust panic detection + Go 1.26.3 stdlib ignores",
          "author_name": "Benjamin Borbe",
          "author_login": "bborbe",
          "committed_at": "2026-06-20T14:07:58Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "daa8fa00496cc215fba36f3702dbb95ba4ee4088",
          "body": "…d rm\n\nSync with cron#12 review fix + coding#57.",
          "is_bot": false,
          "headline": "fix(vulncheck): trap on temp file to survive Ctrl-C between mktemp an…",
          "author_name": "Benjamin Borbe",
          "author_login": "bborbe",
          "committed_at": "2026-06-20T12:59:05Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "9ad73ac60ed235d75a45b2dc3364379327b152a1",
          "body": "…n panic\n\nSync vulncheck pattern with the improvement landing in coding#57.",
          "is_bot": false,
          "headline": "address PR review: surface real govulncheck errors, swallow only know…",
          "author_name": "Benjamin Borbe",
          "author_login": "bborbe",
          "committed_at": "2026-06-20T12:52:14Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "fcf0588fb0f3c8e9225dfaeb25238f2bae73327c",
          "body": "Surgical port preserving task-watcher's VERSION/LDFLAGS, run/build/install:\n- include tools.env with pinned tool versions\n- pin every 'go run' tool invocation to @$(VERSION) from tools.env\n- TESTFLAGS_RACE block: default -race=false, opt in via ENABLE_RACE=true\n- VULNCHECK_IGNORE as overridable variable (replaces hardcoded jq filter)\n- panic-safe vulncheck (2>/dev/null | jq)",
          "is_bot": false,
          "headline": "fix: modernize Makefile to canonical bborbe pattern (surgical)",
          "author_name": "Benjamin Borbe",
          "author_login": "bborbe",
          "committed_at": "2026-06-20T09:59:56Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "f4c5d5856c70c00f689a22b356a8a2e8d235c83d",
          "body": "…ctory.yaml autoRelease=false (github-releaser owns release)",
          "is_bot": false,
          "headline": "feat: add .maintainer.yaml (autoRelease + autoApprove); flip .dark-fa…",
          "author_name": "Benjamin Borbe",
          "author_login": "bborbe",
          "committed_at": "2026-05-31T10:01:13Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "132d750ad85118268e893e4bef37d27fb33a7739",
          "body": "…ixless docker CVEs\n\nerrcheck/gosec fatal under Go 1.26 with \"internal error: package X\nwithout types was imported from Y\" — they load packages without\nNeedDeps. golangci-lint embeds both with the correct loader.\n\nBumped x/sys + x/net + x/crypto + go-git + otel + containerd as\napplicable. Added dock\n[…]\nore lists (CVE-2026-41567,\nCVE-2026-41568, CVE-2026-42306, GHSA-rg2x-37c3-w2rh, GHSA-vp62-88p7-qqf5,\nGHSA-x86f-5xw2-fm2r) — all filed against docker/docker indirect dep\nwith no fix available upstream.",
          "is_bot": false,
          "headline": "chore: drop standalone errcheck + gosec; bump deps; ignore upstream-f…",
          "author_name": "Benjamin Borbe",
          "author_login": "bborbe",
          "committed_at": "2026-05-25T20:18:07Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "60d9a9384fcecb652f6c83ced4c0620111e86574",
          "body": null,
          "is_bot": false,
          "headline": "chore: update dependencies",
          "author_name": "Benjamin Borbe",
          "author_login": "bborbe",
          "committed_at": "2026-04-09T19:52:01Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "0d2c5142f10bb5bf1d79ef403c33abb6f6f2e4c4",
          "body": null,
          "is_bot": false,
          "headline": "use HOST_CACHE_DIR for Go cache mounts",
          "author_name": "Benjamin Borbe",
          "author_login": "bborbe",
          "committed_at": "2026-04-09T17:23:19Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "856e3a82d71744839d783e893e54f3205d30e2a6",
          "body": null,
          "is_bot": false,
          "headline": "chore: update deps, fix flaky test",
          "author_name": "Benjamin Borbe",
          "author_login": "bborbe",
          "committed_at": "2026-04-01T21:02:22Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "55caa90412397200b1b90417ff7e71e230733a88",
          "body": null,
          "is_bot": false,
          "headline": "fix flaky test that depends on local config file existence",
          "author_name": "Benjamin Borbe",
          "author_login": "bborbe",
          "committed_at": "2026-04-01T21:00:09Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "af8db507cb85f5a83244230a45b56a0f22373141",
          "body": null,
          "is_bot": false,
          "headline": "allow parallel golangci-lint runners",
          "author_name": "Benjamin Borbe",
          "author_login": "bborbe",
          "committed_at": "2026-03-27T13:33:24Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "54000ee391b8c7b463a824ddc8c4d021bc25be3a",
          "body": null,
          "is_bot": false,
          "headline": "update prompts",
          "author_name": "Benjamin Borbe",
          "author_login": "bborbe",
          "committed_at": "2026-03-23T07:07:07Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "1f9518727ae0e22b515fa282a9d5d178cd2aa386",
          "body": "Test at line 484 assumed default config path would produce file-not-found,\nbut fails when ~/.task-watcher/config.yaml exists with old flat format.",
          "is_bot": false,
          "headline": "fix: config test handles old-format config in local environment",
          "author_name": "Benjamin Borbe",
          "author_login": "bborbe",
          "committed_at": "2026-03-22T11:56:20Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "01e391cacd86ca068cc17d283e5b333b052f6ef2",
          "body": null,
          "is_bot": false,
          "headline": "release v0.18.0",
          "author_name": "Benjamin Borbe",
          "author_login": "bborbe",
          "committed_at": "2026-03-22T11:45:49Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "f1c5e911ff183302e7fa1dff433c1215f88fbe69",
          "body": null,
          "is_bot": false,
          "headline": "move prompt to completed",
          "author_name": "Benjamin Borbe",
          "author_login": "bborbe",
          "committed_at": "2026-03-22T11:45:48Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "de2580594f6d023dd42dfc3f003bfc0b7f39c499",
          "body": null,
          "is_bot": false,
          "headline": "release v0.17.0",
          "author_name": "Benjamin Borbe",
          "author_login": "bborbe",
          "committed_at": "2026-03-22T11:39:23Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "b88f8c494deeedc733962944fef6ddbc28b4c514",
          "body": null,
          "is_bot": false,
          "headline": "move prompt to completed",
          "author_name": "Benjamin Borbe",
          "author_login": "bborbe",
          "committed_at": "2026-03-22T11:39:23Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "5c8d8ab31e8477ef779b899a18c886b80a3b86d9",
          "body": null,
          "is_bot": false,
          "headline": "release v0.16.0",
          "author_name": "Benjamin Borbe",
          "author_login": "bborbe",
          "committed_at": "2026-03-22T11:33:38Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "be745daad0fbec36641611856c8c1b799d6eaaed",
          "body": null,
          "is_bot": false,
          "headline": "move prompt to completed",
          "author_name": "Benjamin Borbe",
          "author_login": "bborbe",
          "committed_at": "2026-03-22T11:33:38Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "6d8d0f8a8be82019a0929a4b721ba727c63a0a05",
          "body": null,
          "is_bot": false,
          "headline": "release v0.15.0",
          "author_name": "Benjamin Borbe",
          "author_login": "bborbe",
          "committed_at": "2026-03-21T22:20:52Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "0b3f2a4066d538a828991bc07f2d368cf7451c31",
          "body": null,
          "is_bot": false,
          "headline": "move prompt to completed",
          "author_name": "Benjamin Borbe",
          "author_login": "bborbe",
          "committed_at": "2026-03-21T22:20:51Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "eddf69c0acfe3ebd508c5459e7cb4effc1b5e9e6",
          "body": null,
          "is_bot": false,
          "headline": "release v0.14.2",
          "author_name": "Benjamin Borbe",
          "author_login": "bborbe",
          "committed_at": "2026-03-21T20:29:18Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "5a1da1240a4232652c84a1b2163240c165c2b0c0",
          "body": null,
          "is_bot": false,
          "headline": "move prompt to completed",
          "author_name": "Benjamin Borbe",
          "author_login": "bborbe",
          "committed_at": "2026-03-21T20:29:18Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "ca98325f96811adc91a8669ffdde7b59b10b7f70",
          "body": null,
          "is_bot": false,
          "headline": "update prompts",
          "author_name": "Benjamin Borbe",
          "author_login": "bborbe",
          "committed_at": "2026-03-21T20:24:34Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "ec89893253519da21decb7c6b95cadf3537b01b6",
          "body": null,
          "is_bot": false,
          "headline": "add prompt to migrate openclaw notifier to /hooks/wake",
          "author_name": "Benjamin Borbe",
          "author_login": "bborbe",
          "committed_at": "2026-03-21T20:24:06Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "671be7ca15338579f4a4a1562393970460e9fc1f",
          "body": null,
          "is_bot": false,
          "headline": "release v0.14.1",
          "author_name": "Benjamin Borbe",
          "author_login": "bborbe",
          "committed_at": "2026-03-21T19:44:43Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "3fc7024f874660f8148d157b07a16941e5e2dbf9",
          "body": null,
          "is_bot": false,
          "headline": "remove excludes",
          "author_name": "Benjamin Borbe",
          "author_login": "bborbe",
          "committed_at": "2026-03-21T19:38:11Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "2a362f748ee182a383e2293a666536251826d8ef",
          "body": null,
          "is_bot": false,
          "headline": "release v0.14.0",
          "author_name": "Benjamin Borbe",
          "author_login": "bborbe",
          "committed_at": "2026-03-21T19:32:00Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "0e930b80df78afb570bd93c4e2f0d729a65e5bfe",
          "body": null,
          "is_bot": false,
          "headline": "move prompt to completed",
          "author_name": "Benjamin Borbe",
          "author_login": "bborbe",
          "committed_at": "2026-03-21T19:32:00Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "96b4b3ee6c76cabdd326325f54ba22d96eef1490",
          "body": null,
          "is_bot": false,
          "headline": "update prompts",
          "author_name": "Benjamin Borbe",
          "author_login": "bborbe",
          "committed_at": "2026-03-21T19:27:46Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "41459d264f0c8b5b9c26c26e7572a3c29efd9f94",
          "body": null,
          "is_bot": false,
          "headline": "add prompt for version logging on start",
          "author_name": "Benjamin Borbe",
          "author_login": "bborbe",
          "committed_at": "2026-03-21T19:27:16Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "b3f378da885fc1848a260a5d880b0426b9c21b39",
          "body": null,
          "is_bot": false,
          "headline": "release v0.13.0",
          "author_name": "Benjamin Borbe",
          "author_login": "bborbe",
          "committed_at": "2026-03-21T19:08:16Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "c0d9dce55c80c9708787133fcd6a1cf17c612b80",
          "body": null,
          "is_bot": false,
          "headline": "move prompt to completed",
          "author_name": "Benjamin Borbe",
          "author_login": "bborbe",
          "committed_at": "2026-03-21T19:08:15Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "47d6058f72cd0f6839f21fc97af6972eb848dc4b",
          "body": null,
          "is_bot": false,
          "headline": "update prompts",
          "author_name": "Benjamin Borbe",
          "author_login": "bborbe",
          "committed_at": "2026-03-21T19:04:47Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "643beac46181ac695830ad55199667daff7b4e01",
          "body": null,
          "is_bot": false,
          "headline": "add prompt for webhook logging",
          "author_name": "Benjamin Borbe",
          "author_login": "bborbe",
          "committed_at": "2026-03-21T19:03:11Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "c05c0a0fa9c34dc6385b510a34485817328d9146",
          "body": null,
          "is_bot": false,
          "headline": "update prompts",
          "author_name": "Benjamin Borbe",
          "author_login": "bborbe",
          "committed_at": "2026-03-21T18:02:58Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "8b19c5702254a4a6db5bebfa54235432a98c580c",
          "body": null,
          "is_bot": false,
          "headline": "update prompts",
          "author_name": "Benjamin Borbe",
          "author_login": "bborbe",
          "committed_at": "2026-03-21T18:02:43Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "0cadde9aec068a8287ff33bc7e85865ff170aada",
          "body": null,
          "is_bot": false,
          "headline": "fix tests hanging when default config exists, update DoD",
          "author_name": "Benjamin Borbe",
          "author_login": "bborbe",
          "committed_at": "2026-03-21T17:50:48Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "a39a2b3d05965c6c311877d3fcbb8456d9b22c27",
          "body": null,
          "is_bot": false,
          "headline": "release v0.12.1",
          "author_name": "Benjamin Borbe",
          "author_login": "bborbe",
          "committed_at": "2026-03-21T17:22:54Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "b392b56d48cdc92686d136a52ab4bc67a9d1aec4",
          "body": null,
          "is_bot": false,
          "headline": "update docs",
          "author_name": "Benjamin Borbe",
          "author_login": "bborbe",
          "committed_at": "2026-03-21T15:50:54Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "b36820b1f962a9008f236b8b2677ddf92d32e563",
          "body": null,
          "is_bot": false,
          "headline": "release v0.12.0",
          "author_name": "Benjamin Borbe",
          "author_login": "bborbe",
          "committed_at": "2026-03-21T15:35:26Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "b23ac837ea76cafde1b0c3ce006ac0324cb8a92c",
          "body": null,
          "is_bot": false,
          "headline": "move prompt to completed",
          "author_name": "Benjamin Borbe",
          "author_login": "bborbe",
          "committed_at": "2026-03-21T15:35:26Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "85d6229b413d87696715d9c83a675a06ef135c47",
          "body": null,
          "is_bot": false,
          "headline": "update prompts",
          "author_name": "Benjamin Borbe",
          "author_login": "bborbe",
          "committed_at": "2026-03-21T15:29:24Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "9853dc31150aeac7d7d42978ac21e034f3e82b78",
          "body": null,
          "is_bot": false,
          "headline": "Add prompt: multi-vault support",
          "author_name": "Benjamin Borbe",
          "author_login": "bborbe",
          "committed_at": "2026-03-21T15:28:01Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "a57c160428c037406d3b80a29d905c2c9884c496",
          "body": null,
          "is_bot": false,
          "headline": "release v0.11.0",
          "author_name": "Benjamin Borbe",
          "author_login": "bborbe",
          "committed_at": "2026-03-21T15:08:39Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "7c33bb486e5ffbf0ade856f087b4d239fc8a7594",
          "body": null,
          "is_bot": false,
          "headline": "move prompt to completed",
          "author_name": "Benjamin Borbe",
          "author_login": "bborbe",
          "committed_at": "2026-03-21T15:08:39Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "a9a39ce71e5a399d74f2682e045d2c355de131c9",
          "body": null,
          "is_bot": false,
          "headline": "Add prompt: OpenClaw webhook format support",
          "author_name": "Benjamin Borbe",
          "author_login": "bborbe",
          "committed_at": "2026-03-21T15:01:11Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "a4f87688c94c305cffadc86d13fdd5cd48f71e23",
          "body": null,
          "is_bot": false,
          "headline": "release v0.10.1",
          "author_name": "Benjamin Borbe",
          "author_login": "bborbe",
          "committed_at": "2026-03-21T13:22:02Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "05c05fb603d058a5173a824be607b8992a0ea715",
          "body": null,
          "is_bot": false,
          "headline": "move prompt to completed",
          "author_name": "Benjamin Borbe",
          "author_login": "bborbe",
          "committed_at": "2026-03-21T13:22:01Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "75bd521fadc69953c5e0184e0b356d5ceb6c3963",
          "body": null,
          "is_bot": false,
          "headline": "Add prompt: dry-run show full HTTP request details",
          "author_name": "Benjamin Borbe",
          "author_login": "bborbe",
          "committed_at": "2026-03-21T13:14:50Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "d27d308b7154a5d865f984c29d91e60ca155420e",
          "body": null,
          "is_bot": false,
          "headline": "release v0.10.0",
          "author_name": "Benjamin Borbe",
          "author_login": "bborbe",
          "committed_at": "2026-03-21T12:49:02Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "7a8db7eb767781275a0c354a9faac720bb78effe",
          "body": null,
          "is_bot": false,
          "headline": "move prompt to completed",
          "author_name": "Benjamin Borbe",
          "author_login": "bborbe",
          "committed_at": "2026-03-21T12:49:02Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "951501dfffa50f8396ac63e8abfe480468f1ced7",
          "body": null,
          "is_bot": false,
          "headline": "release v0.9.0",
          "author_name": "Benjamin Borbe",
          "author_login": "bborbe",
          "committed_at": "2026-03-21T12:25:27Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "00250dae9e66a971f75b2b0feeb7a57b65aba7b3",
          "body": null,
          "is_bot": false,
          "headline": "move prompt to completed",
          "author_name": "Benjamin Borbe",
          "author_login": "bborbe",
          "committed_at": "2026-03-21T12:25:27Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "2e43a2d8cc011f8998e79530deff4fd621a5ef2a",
          "body": null,
          "is_bot": false,
          "headline": "release v0.8.0",
          "author_name": "Benjamin Borbe",
          "author_login": "bborbe",
          "committed_at": "2026-03-21T11:58:47Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "7e58e5f65f1b56f51ae8a3c93881e4b0ffa7939a",
          "body": null,
          "is_bot": false,
          "headline": "move prompt to completed",
          "author_name": "Benjamin Borbe",
          "author_login": "bborbe",
          "committed_at": "2026-03-21T11:58:47Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "3a281763c9ef3579d432245ff809dcc7bbb41fc3",
          "body": null,
          "is_bot": false,
          "headline": "release v0.7.0",
          "author_name": "Benjamin Borbe",
          "author_login": "bborbe",
          "committed_at": "2026-03-21T11:42:22Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "0bd79816ada5a3ae9fc205c59927f9cf649f3ed4",
          "body": null,
          "is_bot": false,
          "headline": "move prompt to completed",
          "author_name": "Benjamin Borbe",
          "author_login": "bborbe",
          "committed_at": "2026-03-21T11:42:22Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "ae1abd303a1725edbc7eb1c8ee8904368a6b331e",
          "body": null,
          "is_bot": false,
          "headline": "release v0.6.0",
          "author_name": "Benjamin Borbe",
          "author_login": "bborbe",
          "committed_at": "2026-03-21T11:28:30Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "eda440727a4d18493fff0b48d912fa7d2cb6120d",
          "body": null,
          "is_bot": false,
          "headline": "move prompt to completed",
          "author_name": "Benjamin Borbe",
          "author_login": "bborbe",
          "committed_at": "2026-03-21T11:11:51Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "30707565567eb230b36126dc74a4e0464daf1b31",
          "body": null,
          "is_bot": false,
          "headline": "release v0.5.0",
          "author_name": "Benjamin Borbe",
          "author_login": "bborbe",
          "committed_at": "2026-03-21T11:08:24Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "aee296dab951cec8e84034e8b2f7c966802eae02",
          "body": null,
          "is_bot": false,
          "headline": "move prompt to completed",
          "author_name": "Benjamin Borbe",
          "author_login": "bborbe",
          "committed_at": "2026-03-21T11:08:24Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "266cfc2bed07c53d392826dc8c08b0b4c4936d71",
          "body": null,
          "is_bot": false,
          "headline": "release v0.4.1",
          "author_name": "Benjamin Borbe",
          "author_login": "bborbe",
          "committed_at": "2026-03-21T11:03:37Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "e4bf049fd1444f71dbcbbde96e86a0f88de9c42e",
          "body": null,
          "is_bot": false,
          "headline": "move prompt to completed",
          "author_name": "Benjamin Borbe",
          "author_login": "bborbe",
          "committed_at": "2026-03-21T11:03:37Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "3b507c94000aa46ee67435e27fca010659935e7b",
          "body": "…ete spec 001",
          "is_bot": false,
          "headline": "fix counterfeiter generate, add main_test, use slices.Contains, compl…",
          "author_name": "Benjamin Borbe",
          "author_login": "bborbe",
          "committed_at": "2026-03-21T08:45:41Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "c4da2efb76accce69e5cef74068316dca7404c91",
          "body": null,
          "is_bot": false,
          "headline": "release v0.4.0",
          "author_name": "Benjamin Borbe",
          "author_login": "bborbe",
          "committed_at": "2026-03-20T22:30:18Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "fea91da523edc93c7e4e09241368bf9173e772e7",
          "body": null,
          "is_bot": false,
          "headline": "move prompt to completed",
          "author_name": "Benjamin Borbe",
          "author_login": "bborbe",
          "committed_at": "2026-03-20T22:30:18Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "2141d185f45e69c82d1405fab472b7725c605575",
          "body": null,
          "is_bot": false,
          "headline": "release v0.3.0",
          "author_name": "Benjamin Borbe",
          "author_login": "bborbe",
          "committed_at": "2026-03-20T22:12:33Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "242da39c41eb41bfed418a0b82a314f32af3cdf0",
          "body": null,
          "is_bot": false,
          "headline": "move prompt to completed",
          "author_name": "Benjamin Borbe",
          "author_login": "bborbe",
          "committed_at": "2026-03-20T22:12:33Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "13fb451d8a87517a8ae0ea1227e87dc1da819f00",
          "body": null,
          "is_bot": false,
          "headline": "release v0.2.0",
          "author_name": "Benjamin Borbe",
          "author_login": "bborbe",
          "committed_at": "2026-03-20T22:07:10Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "bbf9e563bf6fee393d8384a966b08a4c15517274",
          "body": null,
          "is_bot": false,
          "headline": "move prompt to completed",
          "author_name": "Benjamin Borbe",
          "author_login": "bborbe",
          "committed_at": "2026-03-20T22:07:10Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "eb8646eb08573a471d555b8e5bb5162723c5fc7d",
          "body": null,
          "is_bot": false,
          "headline": "release v0.1.1",
          "author_name": "Benjamin Borbe",
          "author_login": "bborbe",
          "committed_at": "2026-03-20T18:27:01Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "d578ea3d3b93ba7e9d2fad989fd69b0bdce7b5c0",
          "body": null,
          "is_bot": false,
          "headline": "move prompt to completed",
          "author_name": "Benjamin Borbe",
          "author_login": "bborbe",
          "committed_at": "2026-03-20T18:27:01Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "4f766d622f44944ae4eff1bd535ed5162b578713",
          "body": null,
          "is_bot": false,
          "headline": "release v0.1.0",
          "author_name": "Benjamin Borbe",
          "author_login": "bborbe",
          "committed_at": "2026-03-20T17:28:11Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "aeb5f0dd97d69241274c3a2dde5f85c85d30b19b",
          "body": null,
          "is_bot": false,
          "headline": "move prompt to completed",
          "author_name": "Benjamin Borbe",
          "author_login": "bborbe",
          "committed_at": "2026-03-20T17:28:11Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "7a7da6adbb13674d4d191bc65bafd1a67feb9b30",
          "body": null,
          "is_bot": false,
          "headline": "fix: exclude golangci-lint v1, update kafka to v1.22.8",
          "author_name": "Benjamin Borbe",
          "author_login": "bborbe",
          "committed_at": "2026-03-20T17:10:26Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "34f9cf4ede58d0c61c4be3ee9139349386cd7ca9",
          "body": null,
          "is_bot": false,
          "headline": "remove stale inbox copy of approved prompt",
          "author_name": "Benjamin Borbe",
          "author_login": "bborbe",
          "committed_at": "2026-03-20T16:05:56Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "6a4d94b4ba07851dc390fa0ef326702de9e34bf5",
          "body": null,
          "is_bot": false,
          "headline": "consolidate Makefiles, remove CLAUDE.md from git",
          "author_name": "Benjamin Borbe",
          "author_login": "bborbe",
          "committed_at": "2026-03-20T16:02:51Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "3ba008a92cd499f86534f986e98c9e8db9ee37e6",
          "body": null,
          "is_bot": false,
          "headline": "setup dark-factory config and directories",
          "author_name": "Benjamin Borbe",
          "author_login": "bborbe",
          "committed_at": "2026-03-20T15:57:51Z",
          "body_truncated": false,
          "is_coding_agent": false
        }
      ],
      "releases_count": 30,
      "commits_last_year": 101,
      "latest_release_at": "2026-07-19T19:17:33Z",
      "latest_release_tag": "v0.19.2",
      "releases_from_tags": true,
      "days_since_last_push": 7,
      "active_weeks_last_year": 9,
      "days_since_latest_release": 7,
      "mean_days_between_releases": 13.3
    },
    "community": {
      "has_readme": true,
      "has_license": true,
      "has_description": false,
      "has_contributing": false,
      "health_percentage": 28,
      "has_issue_template": false,
      "has_code_of_conduct": false,
      "has_pull_request_template": false
    },
    "ecosystem": {
      "packages": [
        {
          "name": "github.com/bborbe/task-watcher",
          "exists": true,
          "license": null,
          "keywords": [],
          "ecosystem": "go",
          "matches_repo": true,
          "registry_url": "https://pkg.go.dev/github.com/bborbe/task-watcher",
          "is_deprecated": false,
          "latest_version": "v0.19.2",
          "repository_url": "https://github.com/bborbe/task-watcher",
          "versions_count": 30,
          "total_downloads": null,
          "dependents_count": null,
          "deprecation_note": null,
          "maintainers_count": null,
          "monthly_downloads": null,
          "first_published_at": null,
          "latest_published_at": "2026-07-19T19:17:33Z",
          "latest_version_yanked": null,
          "days_since_latest_publish": 7
        }
      ]
    },
    "popularity": {
      "forks": 0,
      "stars": 0,
      "watchers": 0,
      "fork_history": {
        "days": [],
        "complete": true,
        "collected": 0,
        "total_forks": 0
      },
      "star_history": {
        "days": [],
        "complete": true,
        "collected": 0,
        "total_stars": 0,
        "collected_at": null
      },
      "open_issues_and_prs": 0
    },
    "ai_readiness": {
      "has_nix": false,
      "example_dirs": [],
      "has_llms_txt": false,
      "has_dockerfile": false,
      "has_mcp_signal": false,
      "bootstrap_files": [
        "Makefile"
      ],
      "api_schema_files": [],
      "has_devcontainer": false,
      "typecheck_configs": [],
      "toolchain_manifests": [
        "go.mod"
      ],
      "largest_source_bytes": 14788,
      "source_files_sampled": 29,
      "oversized_source_files": 0,
      "agent_instruction_files": [],
      "agent_instruction_max_bytes": null
    },
    "dependencies": {
      "manifests": [
        "go.mod"
      ],
      "advisories": {
        "error": null,
        "scope": "repository_graph",
        "source": "osv",
        "findings": [
          {
            "name": "google.golang.org/grpc",
            "direct": false,
            "version": "v1.81.1",
            "severity": "critical",
            "ecosystem": "go",
            "cvss_score": 9.1,
            "advisory_ids": [
              "GHSA-hrxh-6v49-42gf"
            ],
            "fixed_version": "1.82.1",
            "advisory_count": 1,
            "oldest_advisory_days": 5
          },
          {
            "name": "github.com/docker/docker",
            "direct": false,
            "version": "v28.5.2+incompatible",
            "severity": "high",
            "ecosystem": "go",
            "cvss_score": 8.8,
            "advisory_ids": [
              "GHSA-pxq6-2prw-chj9",
              "GHSA-rg2x-37c3-w2rh",
              "GHSA-vp62-88p7-qqf5",
              "GHSA-x744-4wpc-v9h2",
              "GHSA-x86f-5xw2-fm2r",
              "GO-2026-4883",
              "GO-2026-4887",
              "GO-2026-5617",
              "GO-2026-5668",
              "GO-2026-5746"
            ],
            "fixed_version": "29.3.1",
            "advisory_count": 10,
            "oldest_advisory_days": 121
          },
          {
            "name": "github.com/yuin/goldmark",
            "direct": false,
            "version": "v1.7.12",
            "severity": "unknown",
            "ecosystem": "go",
            "cvss_score": null,
            "advisory_ids": [
              "GO-2026-5320"
            ],
            "fixed_version": "1.7.17",
            "advisory_count": 1,
            "oldest_advisory_days": 19
          },
          {
            "name": "golang.org/x/crypto",
            "direct": false,
            "version": "v0.53.0",
            "severity": "unknown",
            "ecosystem": "go",
            "cvss_score": null,
            "advisory_ids": [
              "GO-2026-5932"
            ],
            "fixed_version": null,
            "advisory_count": 1,
            "oldest_advisory_days": 19
          }
        ],
        "collected": true,
        "malicious": [],
        "truncated": false,
        "by_severity": {
          "high": 1,
          "unknown": 2,
          "critical": 1
        },
        "advisory_count": 13,
        "affected_count": 4,
        "assessed_count": 419,
        "malicious_count": 0,
        "assessed_package": null,
        "unassessed_count": 0,
        "direct_affected_count": 0
      },
      "ecosystems": [
        "go"
      ],
      "dependencies": [
        {
          "name": "github.com/bborbe/errors",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.5.16"
        },
        {
          "name": "github.com/bborbe/vault-cli",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.96.6"
        },
        {
          "name": "github.com/golangci/golangci-lint/v2",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v2.12.2"
        },
        {
          "name": "github.com/google/addlicense",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.2.0"
        },
        {
          "name": "github.com/google/osv-scanner/v2",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v2.4.0"
        },
        {
          "name": "github.com/incu6us/goimports-reviser/v3",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v3.12.6"
        },
        {
          "name": "github.com/kisielk/errcheck",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.20.0"
        },
        {
          "name": "github.com/maxbrunsfeld/counterfeiter/v6",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v6.12.2"
        },
        {
          "name": "github.com/onsi/ginkgo/v2",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v2.32.0"
        },
        {
          "name": "github.com/onsi/gomega",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.42.1"
        },
        {
          "name": "github.com/securego/gosec/v2",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v2.27.1"
        },
        {
          "name": "github.com/segmentio/golines",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.13.0"
        },
        {
          "name": "github.com/shoenig/go-modtool",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.7.1"
        },
        {
          "name": "github.com/spf13/cobra",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.10.2"
        },
        {
          "name": "golang.org/x/vuln",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.5.0"
        },
        {
          "name": "gopkg.in/yaml.v3",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v3.0.1"
        }
      ],
      "all_dependencies": {
        "error": null,
        "source": "github-sbom",
        "packages": [
          {
            "name": "github.com/bborbe/errors",
            "direct": true,
            "version": "v1.5.16",
            "ecosystem": "go"
          },
          {
            "name": "github.com/bborbe/vault-cli",
            "direct": true,
            "version": "v0.96.6",
            "ecosystem": "go"
          },
          {
            "name": "github.com/golangci/golangci-lint/v2",
            "direct": true,
            "version": "v2.12.2",
            "ecosystem": "go"
          },
          {
            "name": "github.com/google/addlicense",
            "direct": true,
            "version": "v1.2.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/google/osv-scanner/v2",
            "direct": true,
            "version": "v2.4.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/incu6us/goimports-reviser/v3",
            "direct": true,
            "version": "v3.12.6",
            "ecosystem": "go"
          },
          {
            "name": "github.com/kisielk/errcheck",
            "direct": true,
            "version": "v1.20.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/maxbrunsfeld/counterfeiter/v6",
            "direct": true,
            "version": "v6.12.2",
            "ecosystem": "go"
          },
          {
            "name": "github.com/onsi/ginkgo/v2",
            "direct": true,
            "version": "v2.32.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/onsi/gomega",
            "direct": true,
            "version": "v1.42.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/securego/gosec/v2",
            "direct": true,
            "version": "v2.27.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/segmentio/golines",
            "direct": true,
            "version": "v0.13.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/shoenig/go-modtool",
            "direct": true,
            "version": "v0.7.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/spf13/cobra",
            "direct": true,
            "version": "v1.10.2",
            "ecosystem": "go"
          },
          {
            "name": "golang.org/x/vuln",
            "direct": true,
            "version": "v1.5.0",
            "ecosystem": "go"
          },
          {
            "name": "gopkg.in/yaml.v3",
            "direct": true,
            "version": "v3.0.1",
            "ecosystem": "go"
          },
          {
            "name": "4d63.com/gocheckcompilerdirectives",
            "direct": false,
            "version": "v1.3.0",
            "ecosystem": "go"
          },
          {
            "name": "4d63.com/gochecknoglobals",
            "direct": false,
            "version": "v0.2.2",
            "ecosystem": "go"
          },
          {
            "name": "bitbucket.org/creachadair/stringset",
            "direct": false,
            "version": "v0.0.14",
            "ecosystem": "go"
          },
          {
            "name": "cattlecloud.net/go/babycli",
            "direct": false,
            "version": "v0.2.0",
            "ecosystem": "go"
          },
          {
            "name": "cattlecloud.net/go/stacks",
            "direct": false,
            "version": "v1.1.0",
            "ecosystem": "go"
          },
          {
            "name": "charm.land/glamour/v2",
            "direct": false,
            "version": "v2.0.0",
            "ecosystem": "go"
          },
          {
            "name": "charm.land/lipgloss/v2",
            "direct": false,
            "version": "v2.0.3",
            "ecosystem": "go"
          },
          {
            "name": "cloud.google.com/go",
            "direct": false,
            "version": "v0.123.0",
            "ecosystem": "go"
          },
          {
            "name": "cloud.google.com/go/auth",
            "direct": false,
            "version": "v0.19.0",
            "ecosystem": "go"
          },
          {
            "name": "cloud.google.com/go/compute/metadata",
            "direct": false,
            "version": "v0.9.0",
            "ecosystem": "go"
          },
          {
            "name": "codeberg.org/chavacava/garif",
            "direct": false,
            "version": "v0.2.0",
            "ecosystem": "go"
          },
          {
            "name": "codeberg.org/polyfloyd/go-errorlint",
            "direct": false,
            "version": "v1.9.0",
            "ecosystem": "go"
          },
          {
            "name": "dario.cat/mergo",
            "direct": false,
            "version": "v1.0.2",
            "ecosystem": "go"
          },
          {
            "name": "deps.dev/api/v3",
            "direct": false,
            "version": "v3.0.0-20260422013440-90c27f84dd6f",
            "ecosystem": "go"
          },
          {
            "name": "deps.dev/api/v3alpha",
            "direct": false,
            "version": "v0.0.0-20260422013440-90c27f84dd6f",
            "ecosystem": "go"
          },
          {
            "name": "deps.dev/util/maven",
            "direct": false,
            "version": "v0.0.0-20260528042559-b92437de09fd",
            "ecosystem": "go"
          },
          {
            "name": "deps.dev/util/pypi",
            "direct": false,
            "version": "v0.0.0-20260422013440-90c27f84dd6f",
            "ecosystem": "go"
          },
          {
            "name": "deps.dev/util/resolve",
            "direct": false,
            "version": "v0.0.0-20260422013440-90c27f84dd6f",
            "ecosystem": "go"
          },
          {
            "name": "deps.dev/util/semver",
            "direct": false,
            "version": "v0.0.0-20260529052642-cf1e78d92744",
            "ecosystem": "go"
          },
          {
            "name": "dev.gaijin.team/go/exhaustruct/v4",
            "direct": false,
            "version": "v4.0.0",
            "ecosystem": "go"
          },
          {
            "name": "dev.gaijin.team/go/golib",
            "direct": false,
            "version": "v0.6.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/4meepo/tagalign",
            "direct": false,
            "version": "v1.4.3",
            "ecosystem": "go"
          },
          {
            "name": "github.com/abirdcfly/dupword",
            "direct": false,
            "version": "v0.1.7",
            "ecosystem": "go"
          },
          {
            "name": "github.com/adminbenni/iota-mixing",
            "direct": false,
            "version": "v1.0.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/aead/serpent",
            "direct": false,
            "version": "v0.0.0-20160714141033-fba169763ea6",
            "ecosystem": "go"
          },
          {
            "name": "github.com/agext/levenshtein",
            "direct": false,
            "version": "v1.2.3",
            "ecosystem": "go"
          },
          {
            "name": "github.com/alecthomas/chroma/v2",
            "direct": false,
            "version": "v2.24.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/alecthomas/go-check-sumtype",
            "direct": false,
            "version": "v0.3.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/alecthomas/kingpin/v2",
            "direct": false,
            "version": "v2.4.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/alecthomas/units",
            "direct": false,
            "version": "v0.0.0-20240927000941-0f3dac36c52b",
            "ecosystem": "go"
          },
          {
            "name": "github.com/alexkohler/nakedret/v2",
            "direct": false,
            "version": "v2.0.6",
            "ecosystem": "go"
          },
          {
            "name": "github.com/alexkohler/prealloc",
            "direct": false,
            "version": "v1.1.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/alfatraining/structtag",
            "direct": false,
            "version": "v1.0.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/alingse/asasalint",
            "direct": false,
            "version": "v0.0.11",
            "ecosystem": "go"
          },
          {
            "name": "github.com/alingse/nilnesserr",
            "direct": false,
            "version": "v0.2.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/alwxsin/noinlineerr",
            "direct": false,
            "version": "v1.0.5",
            "ecosystem": "go"
          },
          {
            "name": "github.com/anchore/go-lzo",
            "direct": false,
            "version": "v0.1.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/anchore/go-struct-converter",
            "direct": false,
            "version": "v0.1.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/anthropics/anthropic-sdk-go",
            "direct": false,
            "version": "v1.46.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/antonboom/errname",
            "direct": false,
            "version": "v1.1.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/antonboom/nilnil",
            "direct": false,
            "version": "v1.1.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/antonboom/testifylint",
            "direct": false,
            "version": "v1.6.4",
            "ecosystem": "go"
          },
          {
            "name": "github.com/ashanbrown/forbidigo/v2",
            "direct": false,
            "version": "v2.3.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/ashanbrown/makezero/v2",
            "direct": false,
            "version": "v2.2.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/atotto/clipboard",
            "direct": false,
            "version": "v0.1.4",
            "ecosystem": "go"
          },
          {
            "name": "github.com/aymanbagabas/go-osc52/v2",
            "direct": false,
            "version": "v2.0.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/aymerick/douceur",
            "direct": false,
            "version": "v0.2.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/ayoubfaouzi/pkcs7",
            "direct": false,
            "version": "v0.2.3",
            "ecosystem": "go"
          },
          {
            "name": "github.com/bahlo/generic-list-go",
            "direct": false,
            "version": "v0.2.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/bazelbuild/buildtools",
            "direct": false,
            "version": "v0.0.0-20260319080235-05d2ebe49b0f",
            "ecosystem": "go"
          },
          {
            "name": "github.com/bborbe/collection",
            "direct": false,
            "version": "v1.20.17",
            "ecosystem": "go"
          },
          {
            "name": "github.com/bborbe/math",
            "direct": false,
            "version": "v1.3.12",
            "ecosystem": "go"
          },
          {
            "name": "github.com/bborbe/parse",
            "direct": false,
            "version": "v1.10.16",
            "ecosystem": "go"
          },
          {
            "name": "github.com/bborbe/run",
            "direct": false,
            "version": "v1.9.30",
            "ecosystem": "go"
          },
          {
            "name": "github.com/bborbe/time",
            "direct": false,
            "version": "v1.27.5",
            "ecosystem": "go"
          },
          {
            "name": "github.com/bborbe/validation",
            "direct": false,
            "version": "v1.4.16",
            "ecosystem": "go"
          },
          {
            "name": "github.com/beorn7/perks",
            "direct": false,
            "version": "v1.0.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/bkielbasa/cyclop",
            "direct": false,
            "version": "v1.2.3",
            "ecosystem": "go"
          },
          {
            "name": "github.com/blizzy78/varnamelen",
            "direct": false,
            "version": "v0.8.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/bmatcuk/doublestar/v4",
            "direct": false,
            "version": "v4.10.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/bombsimon/wsl/v4",
            "direct": false,
            "version": "v4.7.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/bombsimon/wsl/v5",
            "direct": false,
            "version": "v5.8.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/breml/bidichk",
            "direct": false,
            "version": "v0.3.3",
            "ecosystem": "go"
          },
          {
            "name": "github.com/breml/errchkjson",
            "direct": false,
            "version": "v0.4.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/buger/jsonparser",
            "direct": false,
            "version": "v1.2.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/burntsushi/toml",
            "direct": false,
            "version": "v1.6.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/butuzov/ireturn",
            "direct": false,
            "version": "v0.4.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/butuzov/mirror",
            "direct": false,
            "version": "v1.3.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/canonical/chisel-manifest",
            "direct": false,
            "version": "v1.2.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/catenacyber/perfsprint",
            "direct": false,
            "version": "v0.10.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/ccojocar/zxcvbn-go",
            "direct": false,
            "version": "v1.0.4",
            "ecosystem": "go"
          },
          {
            "name": "github.com/cespare/xxhash/v2",
            "direct": false,
            "version": "v2.3.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/charithe/durationcheck",
            "direct": false,
            "version": "v0.0.11",
            "ecosystem": "go"
          },
          {
            "name": "github.com/charmbracelet/bubbles",
            "direct": false,
            "version": "v0.21.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/charmbracelet/bubbletea",
            "direct": false,
            "version": "v1.3.10",
            "ecosystem": "go"
          },
          {
            "name": "github.com/charmbracelet/colorprofile",
            "direct": false,
            "version": "v0.4.3",
            "ecosystem": "go"
          },
          {
            "name": "github.com/charmbracelet/lipgloss",
            "direct": false,
            "version": "v1.1.1-0.20250404203927-76690c660834",
            "ecosystem": "go"
          },
          {
            "name": "github.com/charmbracelet/ultraviolet",
            "direct": false,
            "version": "v0.0.0-20260205113103-524a6607adb8",
            "ecosystem": "go"
          },
          {
            "name": "github.com/charmbracelet/x/ansi",
            "direct": false,
            "version": "v0.11.7",
            "ecosystem": "go"
          },
          {
            "name": "github.com/charmbracelet/x/exp/slice",
            "direct": false,
            "version": "v0.0.0-20250711012602-b1f986320f7e",
            "ecosystem": "go"
          },
          {
            "name": "github.com/charmbracelet/x/term",
            "direct": false,
            "version": "v0.2.2",
            "ecosystem": "go"
          },
          {
            "name": "github.com/charmbracelet/x/termios",
            "direct": false,
            "version": "v0.1.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/charmbracelet/x/windows",
            "direct": false,
            "version": "v0.2.2",
            "ecosystem": "go"
          },
          {
            "name": "github.com/ckaznocha/intrange",
            "direct": false,
            "version": "v0.3.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/clickhouse/clickhouse-go-linter",
            "direct": false,
            "version": "v1.2.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/clipperhouse/displaywidth",
            "direct": false,
            "version": "v0.11.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/clipperhouse/uax29/v2",
            "direct": false,
            "version": "v2.7.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/cloudflare/circl",
            "direct": false,
            "version": "v1.6.3",
            "ecosystem": "go"
          },
          {
            "name": "github.com/compose-spec/compose-go/v2",
            "direct": false,
            "version": "v2.10.2",
            "ecosystem": "go"
          },
          {
            "name": "github.com/containerd/errdefs",
            "direct": false,
            "version": "v1.0.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/containerd/errdefs/pkg",
            "direct": false,
            "version": "v0.3.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/containerd/stargz-snapshotter/estargz",
            "direct": false,
            "version": "v0.18.2",
            "ecosystem": "go"
          },
          {
            "name": "github.com/containerd/typeurl/v2",
            "direct": false,
            "version": "v2.2.3",
            "ecosystem": "go"
          },
          {
            "name": "github.com/curioswitch/go-reassign",
            "direct": false,
            "version": "v0.3.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/cyclonedx/cyclonedx-go",
            "direct": false,
            "version": "v0.11.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/cyphar/filepath-securejoin",
            "direct": false,
            "version": "v0.6.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/daixiang0/gci",
            "direct": false,
            "version": "v0.13.7",
            "ecosystem": "go"
          },
          {
            "name": "github.com/dave/dst",
            "direct": false,
            "version": "v0.27.3",
            "ecosystem": "go"
          },
          {
            "name": "github.com/davecgh/go-spew",
            "direct": false,
            "version": "v1.1.2-0.20180830191138-d8f796af33cc",
            "ecosystem": "go"
          },
          {
            "name": "github.com/deitch/magic",
            "direct": false,
            "version": "v0.0.0-20240306090643-c67ab88f10cb",
            "ecosystem": "go"
          },
          {
            "name": "github.com/distribution/reference",
            "direct": false,
            "version": "v0.6.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/djarvur/go-err113",
            "direct": false,
            "version": "v0.1.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/djherbis/times",
            "direct": false,
            "version": "v1.6.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/dlclark/regexp2",
            "direct": false,
            "version": "v1.12.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/docker/cli",
            "direct": false,
            "version": "v29.4.3+incompatible",
            "ecosystem": "go"
          },
          {
            "name": "github.com/docker/distribution",
            "direct": false,
            "version": "v2.8.3+incompatible",
            "ecosystem": "go"
          },
          {
            "name": "github.com/docker/docker",
            "direct": false,
            "version": "v28.5.2+incompatible",
            "ecosystem": "go"
          },
          {
            "name": "github.com/docker/docker-credential-helpers",
            "direct": false,
            "version": "v0.9.5",
            "ecosystem": "go"
          },
          {
            "name": "github.com/docker/go-connections",
            "direct": false,
            "version": "v0.5.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/docker/go-units",
            "direct": false,
            "version": "v0.5.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/dsoprea/go-exfat",
            "direct": false,
            "version": "v0.0.0-20190906070738-5e932fbdb589",
            "ecosystem": "go"
          },
          {
            "name": "github.com/dsoprea/go-logging",
            "direct": false,
            "version": "v0.0.0-20200710184922-b02d349568dd",
            "ecosystem": "go"
          },
          {
            "name": "github.com/dustin/go-humanize",
            "direct": false,
            "version": "v1.0.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/edsrzf/mmap-go",
            "direct": false,
            "version": "v1.2.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/elliotwutingfeng/asciiset",
            "direct": false,
            "version": "v0.0.0-20260129054604-cfde2086bc57",
            "ecosystem": "go"
          },
          {
            "name": "github.com/emirpasic/gods",
            "direct": false,
            "version": "v1.18.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/erikgeiser/coninput",
            "direct": false,
            "version": "v0.0.0-20211004153227-1c3628e74d0f",
            "ecosystem": "go"
          },
          {
            "name": "github.com/erikvarga/go-rpmdb",
            "direct": false,
            "version": "v0.0.0-20250523120114-a15a62cd4593",
            "ecosystem": "go"
          },
          {
            "name": "github.com/ettle/strcase",
            "direct": false,
            "version": "v0.2.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/fatih/color",
            "direct": false,
            "version": "v1.19.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/fatih/structtag",
            "direct": false,
            "version": "v1.2.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/felixge/httpsnoop",
            "direct": false,
            "version": "v1.0.4",
            "ecosystem": "go"
          },
          {
            "name": "github.com/firefart/nonamedreturns",
            "direct": false,
            "version": "v1.0.6",
            "ecosystem": "go"
          },
          {
            "name": "github.com/fsnotify/fsnotify",
            "direct": false,
            "version": "v1.10.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/fzipp/gocyclo",
            "direct": false,
            "version": "v0.6.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/gehirninc/crypt",
            "direct": false,
            "version": "v0.0.0-20230320061759-8cc1b52080c5",
            "ecosystem": "go"
          },
          {
            "name": "github.com/getsentry/sentry-go",
            "direct": false,
            "version": "v0.47.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/ghostiam/protogetter",
            "direct": false,
            "version": "v0.3.20",
            "ecosystem": "go"
          },
          {
            "name": "github.com/go-critic/go-critic",
            "direct": false,
            "version": "v0.14.3",
            "ecosystem": "go"
          },
          {
            "name": "github.com/go-errors/errors",
            "direct": false,
            "version": "v1.5.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/go-git/gcfg",
            "direct": false,
            "version": "v1.5.1-0.20230307220236-3a3c6141e376",
            "ecosystem": "go"
          },
          {
            "name": "github.com/go-git/go-billy/v5",
            "direct": false,
            "version": "v5.9.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/go-git/go-git/v5",
            "direct": false,
            "version": "v5.19.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/go-logr/logr",
            "direct": false,
            "version": "v1.4.3",
            "ecosystem": "go"
          },
          {
            "name": "github.com/go-logr/stdr",
            "direct": false,
            "version": "v1.2.2",
            "ecosystem": "go"
          },
          {
            "name": "github.com/go-ole/go-ole",
            "direct": false,
            "version": "v1.3.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/go-restruct/restruct",
            "direct": false,
            "version": "v1.2.0-alpha",
            "ecosystem": "go"
          },
          {
            "name": "github.com/go-task/slim-sprig/v3",
            "direct": false,
            "version": "v3.0.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/go-toolsmith/astcast",
            "direct": false,
            "version": "v1.1.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/go-toolsmith/astcopy",
            "direct": false,
            "version": "v1.1.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/go-toolsmith/astequal",
            "direct": false,
            "version": "v1.2.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/go-toolsmith/astfmt",
            "direct": false,
            "version": "v1.1.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/go-toolsmith/astp",
            "direct": false,
            "version": "v1.1.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/go-toolsmith/strparse",
            "direct": false,
            "version": "v1.1.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/go-toolsmith/typep",
            "direct": false,
            "version": "v1.1.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/go-viper/mapstructure/v2",
            "direct": false,
            "version": "v2.5.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/go-xmlfmt/xmlfmt",
            "direct": false,
            "version": "v1.1.3",
            "ecosystem": "go"
          },
          {
            "name": "github.com/gobwas/glob",
            "direct": false,
            "version": "v0.2.3",
            "ecosystem": "go"
          },
          {
            "name": "github.com/godoc-lint/godoc-lint",
            "direct": false,
            "version": "v0.11.2",
            "ecosystem": "go"
          },
          {
            "name": "github.com/gofrs/flock",
            "direct": false,
            "version": "v0.13.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/gogo/protobuf",
            "direct": false,
            "version": "v1.3.2",
            "ecosystem": "go"
          },
          {
            "name": "github.com/golang/glog",
            "direct": false,
            "version": "v1.2.5",
            "ecosystem": "go"
          },
          {
            "name": "github.com/golang/groupcache",
            "direct": false,
            "version": "v0.0.0-20241129210726-2c02b8208cf8",
            "ecosystem": "go"
          },
          {
            "name": "github.com/golangci/asciicheck",
            "direct": false,
            "version": "v0.5.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/golangci/dupl",
            "direct": false,
            "version": "v0.0.0-20260401084720-c99c5cf5c202",
            "ecosystem": "go"
          },
          {
            "name": "github.com/golangci/go-printf-func-name",
            "direct": false,
            "version": "v0.1.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/golangci/gofmt",
            "direct": false,
            "version": "v0.0.0-20250106114630-d62b90e6713d",
            "ecosystem": "go"
          },
          {
            "name": "github.com/golangci/golines",
            "direct": false,
            "version": "v0.15.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/golangci/misspell",
            "direct": false,
            "version": "v0.8.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/golangci/plugin-module-register",
            "direct": false,
            "version": "v0.1.2",
            "ecosystem": "go"
          },
          {
            "name": "github.com/golangci/revgrep",
            "direct": false,
            "version": "v0.8.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/golangci/rowserrcheck",
            "direct": false,
            "version": "v0.0.0-20260419091836-c5f79b8a11ba",
            "ecosystem": "go"
          },
          {
            "name": "github.com/golangci/swaggoswag",
            "direct": false,
            "version": "v0.0.0-20250504205917-77f2aca3143e",
            "ecosystem": "go"
          },
          {
            "name": "github.com/golangci/unconvert",
            "direct": false,
            "version": "v0.0.0-20250410112200-a129a6e6413e",
            "ecosystem": "go"
          },
          {
            "name": "github.com/google/go-cmp",
            "direct": false,
            "version": "v0.7.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/google/go-containerregistry",
            "direct": false,
            "version": "v0.20.7",
            "ecosystem": "go"
          },
          {
            "name": "github.com/google/jsonschema-go",
            "direct": false,
            "version": "v0.4.3",
            "ecosystem": "go"
          },
          {
            "name": "github.com/google/osv-scalibr",
            "direct": false,
            "version": "v0.4.6-0.20260612031204-164402d9140e",
            "ecosystem": "go"
          },
          {
            "name": "github.com/google/pprof",
            "direct": false,
            "version": "v0.0.0-20260507013755-92041b743c96",
            "ecosystem": "go"
          },
          {
            "name": "github.com/google/s2a-go",
            "direct": false,
            "version": "v0.1.9",
            "ecosystem": "go"
          },
          {
            "name": "github.com/google/uuid",
            "direct": false,
            "version": "v1.6.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/googleapis/enterprise-certificate-proxy",
            "direct": false,
            "version": "v0.3.14",
            "ecosystem": "go"
          },
          {
            "name": "github.com/googleapis/gax-go/v2",
            "direct": false,
            "version": "v2.22.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/gookit/color",
            "direct": false,
            "version": "v1.6.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/gordonklaus/ineffassign",
            "direct": false,
            "version": "v0.2.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/gorilla/css",
            "direct": false,
            "version": "v1.0.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/gorilla/websocket",
            "direct": false,
            "version": "v1.5.3",
            "ecosystem": "go"
          },
          {
            "name": "github.com/gostaticanalysis/analysisutil",
            "direct": false,
            "version": "v0.7.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/gostaticanalysis/comment",
            "direct": false,
            "version": "v1.5.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/gostaticanalysis/forcetypeassert",
            "direct": false,
            "version": "v0.2.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/gostaticanalysis/nilerr",
            "direct": false,
            "version": "v0.1.2",
            "ecosystem": "go"
          },
          {
            "name": "github.com/hashicorp/go-immutable-radix/v2",
            "direct": false,
            "version": "v2.1.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/hashicorp/go-set/v3",
            "direct": false,
            "version": "v3.0.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/hashicorp/go-version",
            "direct": false,
            "version": "v1.9.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/hashicorp/golang-lru/v2",
            "direct": false,
            "version": "v2.0.7",
            "ecosystem": "go"
          },
          {
            "name": "github.com/hashicorp/hcl",
            "direct": false,
            "version": "v1.0.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/hexops/gotextdiff",
            "direct": false,
            "version": "v1.0.3",
            "ecosystem": "go"
          },
          {
            "name": "github.com/ianlancetaylor/demangle",
            "direct": false,
            "version": "v0.0.0-20260505044615-1ff4bf46051f",
            "ecosystem": "go"
          },
          {
            "name": "github.com/icholy/digest",
            "direct": false,
            "version": "v1.1.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/inconshreveable/mousetrap",
            "direct": false,
            "version": "v1.1.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/invopop/jsonschema",
            "direct": false,
            "version": "v0.13.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/jbenet/go-context",
            "direct": false,
            "version": "v0.0.0-20150711004518-d14ea06fba99",
            "ecosystem": "go"
          },
          {
            "name": "github.com/jedib0t/go-pretty/v6",
            "direct": false,
            "version": "v6.7.10",
            "ecosystem": "go"
          },
          {
            "name": "github.com/jgautheron/goconst",
            "direct": false,
            "version": "v1.10.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/jjti/go-spancheck",
            "direct": false,
            "version": "v0.6.5",
            "ecosystem": "go"
          },
          {
            "name": "github.com/julz/importas",
            "direct": false,
            "version": "v0.2.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/karamaru-alpha/copyloopvar",
            "direct": false,
            "version": "v1.2.2",
            "ecosystem": "go"
          },
          {
            "name": "github.com/kevinburke/ssh_config",
            "direct": false,
            "version": "v1.6.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/kkhaike/contextcheck",
            "direct": false,
            "version": "v1.1.6",
            "ecosystem": "go"
          },
          {
            "name": "github.com/klauspost/compress",
            "direct": false,
            "version": "v1.18.6",
            "ecosystem": "go"
          },
          {
            "name": "github.com/klauspost/cpuid/v2",
            "direct": false,
            "version": "v2.3.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/kulti/thelper",
            "direct": false,
            "version": "v0.7.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/kunwardeep/paralleltest",
            "direct": false,
            "version": "v1.0.15",
            "ecosystem": "go"
          },
          {
            "name": "github.com/lasiar/canonicalheader",
            "direct": false,
            "version": "v1.1.2",
            "ecosystem": "go"
          },
          {
            "name": "github.com/ldez/exptostd",
            "direct": false,
            "version": "v0.4.5",
            "ecosystem": "go"
          },
          {
            "name": "github.com/ldez/gomoddirectives",
            "direct": false,
            "version": "v0.8.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/ldez/grignotin",
            "direct": false,
            "version": "v0.10.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/ldez/structtags",
            "direct": false,
            "version": "v0.6.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/ldez/tagliatelle",
            "direct": false,
            "version": "v0.7.2",
            "ecosystem": "go"
          },
          {
            "name": "github.com/ldez/usetesting",
            "direct": false,
            "version": "v0.5.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/leonklingele/grouper",
            "direct": false,
            "version": "v1.1.2",
            "ecosystem": "go"
          },
          {
            "name": "github.com/lucasb-eyer/go-colorful",
            "direct": false,
            "version": "v1.4.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/lunixbochs/struc",
            "direct": false,
            "version": "v0.0.0-20241101090106-8d528fa2c543",
            "ecosystem": "go"
          },
          {
            "name": "github.com/macabu/inamedparam",
            "direct": false,
            "version": "v0.2.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/magiconair/properties",
            "direct": false,
            "version": "v1.8.6",
            "ecosystem": "go"
          },
          {
            "name": "github.com/mailru/easyjson",
            "direct": false,
            "version": "v0.9.2",
            "ecosystem": "go"
          },
          {
            "name": "github.com/manuelarte/embeddedstructfieldcheck",
            "direct": false,
            "version": "v0.4.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/manuelarte/funcorder",
            "direct": false,
            "version": "v0.6.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/maratori/testableexamples",
            "direct": false,
            "version": "v1.0.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/maratori/testpackage",
            "direct": false,
            "version": "v1.1.2",
            "ecosystem": "go"
          },
          {
            "name": "github.com/masahiro331/go-ext4-filesystem",
            "direct": false,
            "version": "v0.0.0-20260423010602-fe51f5b5e52b",
            "ecosystem": "go"
          },
          {
            "name": "github.com/masterminds/semver/v3",
            "direct": false,
            "version": "v3.5.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/matoous/godox",
            "direct": false,
            "version": "v1.1.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/mattn/go-colorable",
            "direct": false,
            "version": "v0.1.14",
            "ecosystem": "go"
          },
          {
            "name": "github.com/mattn/go-isatty",
            "direct": false,
            "version": "v0.0.22",
            "ecosystem": "go"
          },
          {
            "name": "github.com/mattn/go-localereader",
            "direct": false,
            "version": "v0.0.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/mattn/go-runewidth",
            "direct": false,
            "version": "v0.0.23",
            "ecosystem": "go"
          },
          {
            "name": "github.com/mattn/go-shellwords",
            "direct": false,
            "version": "v1.0.13",
            "ecosystem": "go"
          },
          {
            "name": "github.com/mgechev/revive",
            "direct": false,
            "version": "v1.15.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/mgutz/ansi",
            "direct": false,
            "version": "v0.0.0-20200706080929-d51e80ef957d",
            "ecosystem": "go"
          },
          {
            "name": "github.com/michaelkedar/xml",
            "direct": false,
            "version": "v0.0.0-20250626233154-4ec9e090d1cd",
            "ecosystem": "go"
          },
          {
            "name": "github.com/microcosm-cc/bluemonday",
            "direct": false,
            "version": "v1.0.27",
            "ecosystem": "go"
          },
          {
            "name": "github.com/micromdm/plist",
            "direct": false,
            "version": "v0.2.2",
            "ecosystem": "go"
          },
          {
            "name": "github.com/microsoft/go-winio",
            "direct": false,
            "version": "v0.6.2",
            "ecosystem": "go"
          },
          {
            "name": "github.com/mirrexone/unqueryvet",
            "direct": false,
            "version": "v1.5.4",
            "ecosystem": "go"
          },
          {
            "name": "github.com/mitchellh/go-homedir",
            "direct": false,
            "version": "v1.1.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/mitchellh/mapstructure",
            "direct": false,
            "version": "v1.5.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/moby/buildkit",
            "direct": false,
            "version": "v0.30.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/moby/docker-image-spec",
            "direct": false,
            "version": "v1.3.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/modelcontextprotocol/go-sdk",
            "direct": false,
            "version": "v1.6.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/moricho/tparallel",
            "direct": false,
            "version": "v0.3.2",
            "ecosystem": "go"
          },
          {
            "name": "github.com/muesli/ansi",
            "direct": false,
            "version": "v0.0.0-20230316100256-276c6243b2f6",
            "ecosystem": "go"
          },
          {
            "name": "github.com/muesli/cancelreader",
            "direct": false,
            "version": "v0.2.2",
            "ecosystem": "go"
          },
          {
            "name": "github.com/muesli/reflow",
            "direct": false,
            "version": "v0.3.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/muesli/termenv",
            "direct": false,
            "version": "v0.16.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/munnerz/goautoneg",
            "direct": false,
            "version": "v0.0.0-20191010083416-a7dc8b61c822",
            "ecosystem": "go"
          },
          {
            "name": "github.com/nakabonne/nestif",
            "direct": false,
            "version": "v0.3.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/ncruces/go-strftime",
            "direct": false,
            "version": "v1.0.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/nishanths/exhaustive",
            "direct": false,
            "version": "v0.12.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/nishanths/predeclared",
            "direct": false,
            "version": "v0.2.2",
            "ecosystem": "go"
          },
          {
            "name": "github.com/nunnatsa/ginkgolinter",
            "direct": false,
            "version": "v0.23.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/nxadm/tail",
            "direct": false,
            "version": "v1.4.11",
            "ecosystem": "go"
          },
          {
            "name": "github.com/openai/openai-go/v3",
            "direct": false,
            "version": "v3.37.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/opencontainers/go-digest",
            "direct": false,
            "version": "v1.0.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/opencontainers/image-spec",
            "direct": false,
            "version": "v1.1.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/openpeedeep/depguard/v2",
            "direct": false,
            "version": "v2.2.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/ossf/osv-schema/bindings/go",
            "direct": false,
            "version": "v0.0.0-20260424063704-83285ce2a866",
            "ecosystem": "go"
          },
          {
            "name": "github.com/owenrumney/go-sarif/v3",
            "direct": false,
            "version": "v3.3.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/package-url/packageurl-go",
            "direct": false,
            "version": "v0.1.6",
            "ecosystem": "go"
          },
          {
            "name": "github.com/pandatix/go-cvss",
            "direct": false,
            "version": "v0.6.2",
            "ecosystem": "go"
          },
          {
            "name": "github.com/pelletier/go-toml",
            "direct": false,
            "version": "v1.9.5",
            "ecosystem": "go"
          },
          {
            "name": "github.com/pelletier/go-toml/v2",
            "direct": false,
            "version": "v2.3.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/pierrec/lz4/v4",
            "direct": false,
            "version": "v4.1.26",
            "ecosystem": "go"
          },
          {
            "name": "github.com/pjbgf/sha1cd",
            "direct": false,
            "version": "v0.6.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/pkg/errors",
            "direct": false,
            "version": "v0.9.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/pkg/xattr",
            "direct": false,
            "version": "v0.4.12",
            "ecosystem": "go"
          },
          {
            "name": "github.com/planetscale/vtprotobuf",
            "direct": false,
            "version": "v0.6.1-0.20240319094008-0393e58bdf10",
            "ecosystem": "go"
          },
          {
            "name": "github.com/pmezard/go-difflib",
            "direct": false,
            "version": "v1.0.1-0.20181226105442-5d4384ee4fb2",
            "ecosystem": "go"
          },
          {
            "name": "github.com/prometheus/client_golang",
            "direct": false,
            "version": "v1.23.2",
            "ecosystem": "go"
          },
          {
            "name": "github.com/prometheus/client_model",
            "direct": false,
            "version": "v0.6.2",
            "ecosystem": "go"
          },
          {
            "name": "github.com/prometheus/common",
            "direct": false,
            "version": "v0.66.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/prometheus/procfs",
            "direct": false,
            "version": "v0.17.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/protonmail/go-crypto",
            "direct": false,
            "version": "v1.4.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/quasilyte/go-ruleguard",
            "direct": false,
            "version": "v0.4.5",
            "ecosystem": "go"
          },
          {
            "name": "github.com/quasilyte/go-ruleguard/dsl",
            "direct": false,
            "version": "v0.3.23",
            "ecosystem": "go"
          },
          {
            "name": "github.com/quasilyte/gogrep",
            "direct": false,
            "version": "v0.5.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/quasilyte/regex/syntax",
            "direct": false,
            "version": "v0.0.0-20210819130434-b3f0c404a727",
            "ecosystem": "go"
          },
          {
            "name": "github.com/quasilyte/stdinfo",
            "direct": false,
            "version": "v0.0.0-20220114132959-f7386bf02567",
            "ecosystem": "go"
          },
          {
            "name": "github.com/raeperd/recvcheck",
            "direct": false,
            "version": "v0.2.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/remyoudompheng/bigfft",
            "direct": false,
            "version": "v0.0.0-20230129092748-24d4a6f8daec",
            "ecosystem": "go"
          },
          {
            "name": "github.com/rivo/uniseg",
            "direct": false,
            "version": "v0.4.7",
            "ecosystem": "go"
          },
          {
            "name": "github.com/rogpeppe/go-internal",
            "direct": false,
            "version": "v1.14.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/rust-secure-code/go-rustaudit",
            "direct": false,
            "version": "v0.0.0-20250226111315-e20ec32e963c",
            "ecosystem": "go"
          },
          {
            "name": "github.com/ryancurrah/gomodguard",
            "direct": false,
            "version": "v1.4.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/ryancurrah/gomodguard/v2",
            "direct": false,
            "version": "v2.1.3",
            "ecosystem": "go"
          },
          {
            "name": "github.com/ryanrolds/sqlclosecheck",
            "direct": false,
            "version": "v0.6.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/saferwall/pe",
            "direct": false,
            "version": "v1.6.4",
            "ecosystem": "go"
          },
          {
            "name": "github.com/sahilm/fuzzy",
            "direct": false,
            "version": "v0.1.2",
            "ecosystem": "go"
          },
          {
            "name": "github.com/sanposhiho/wastedassign/v2",
            "direct": false,
            "version": "v2.1.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/santhosh-tekuri/jsonschema/v6",
            "direct": false,
            "version": "v6.0.2",
            "ecosystem": "go"
          },
          {
            "name": "github.com/sashamelentyev/interfacebloat",
            "direct": false,
            "version": "v1.1.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/sashamelentyev/usestdlibvars",
            "direct": false,
            "version": "v1.29.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/segmentio/asm",
            "direct": false,
            "version": "v1.1.3",
            "ecosystem": "go"
          },
          {
            "name": "github.com/segmentio/encoding",
            "direct": false,
            "version": "v0.5.4",
            "ecosystem": "go"
          },
          {
            "name": "github.com/sergi/go-diff",
            "direct": false,
            "version": "v1.4.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/shirou/gopsutil",
            "direct": false,
            "version": "v3.21.11+incompatible",
            "ecosystem": "go"
          },
          {
            "name": "github.com/shoenig/regexplus",
            "direct": false,
            "version": "v0.3.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/shoenig/semantic",
            "direct": false,
            "version": "v1.2.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/sirupsen/logrus",
            "direct": false,
            "version": "v1.9.4",
            "ecosystem": "go"
          },
          {
            "name": "github.com/sivchari/containedctx",
            "direct": false,
            "version": "v1.0.3",
            "ecosystem": "go"
          },
          {
            "name": "github.com/skeema/knownhosts",
            "direct": false,
            "version": "v1.3.2",
            "ecosystem": "go"
          },
          {
            "name": "github.com/sonatard/noctx",
            "direct": false,
            "version": "v0.5.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/sourcegraph/go-diff",
            "direct": false,
            "version": "v0.8.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/spdx/gordf",
            "direct": false,
            "version": "v0.0.0-20250128162952-000978ccd6fb",
            "ecosystem": "go"
          },
          {
            "name": "github.com/spdx/tools-golang",
            "direct": false,
            "version": "v0.5.7",
            "ecosystem": "go"
          },
          {
            "name": "github.com/spf13/afero",
            "direct": false,
            "version": "v1.15.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/spf13/cast",
            "direct": false,
            "version": "v1.5.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/spf13/jwalterweatherman",
            "direct": false,
            "version": "v1.1.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/spf13/pflag",
            "direct": false,
            "version": "v1.0.10",
            "ecosystem": "go"
          },
          {
            "name": "github.com/spf13/viper",
            "direct": false,
            "version": "v1.12.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/ssgreg/nlreturn/v2",
            "direct": false,
            "version": "v2.2.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/standard-webhooks/standard-webhooks/libraries",
            "direct": false,
            "version": "v0.0.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/stbenjam/no-sprintf-host-port",
            "direct": false,
            "version": "v0.3.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/stretchr/objx",
            "direct": false,
            "version": "v0.5.3",
            "ecosystem": "go"
          },
          {
            "name": "github.com/stretchr/testify",
            "direct": false,
            "version": "v1.11.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/subosito/gotenv",
            "direct": false,
            "version": "v1.4.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/tetafro/godot",
            "direct": false,
            "version": "v1.5.6",
            "ecosystem": "go"
          },
          {
            "name": "github.com/thoas/go-funk",
            "direct": false,
            "version": "v0.9.3",
            "ecosystem": "go"
          },
          {
            "name": "github.com/tidwall/gjson",
            "direct": false,
            "version": "v1.19.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/tidwall/jsonc",
            "direct": false,
            "version": "v0.3.3",
            "ecosystem": "go"
          },
          {
            "name": "github.com/tidwall/match",
            "direct": false,
            "version": "v1.2.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/tidwall/pretty",
            "direct": false,
            "version": "v1.2.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/tidwall/sjson",
            "direct": false,
            "version": "v1.2.5",
            "ecosystem": "go"
          },
          {
            "name": "github.com/timakin/bodyclose",
            "direct": false,
            "version": "v0.0.0-20260129054331-73d1f95b84b4",
            "ecosystem": "go"
          },
          {
            "name": "github.com/timonwong/loggercheck",
            "direct": false,
            "version": "v0.11.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/tink-crypto/tink-go/v2",
            "direct": false,
            "version": "v2.6.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/tklauser/go-sysconf",
            "direct": false,
            "version": "v0.3.16",
            "ecosystem": "go"
          },
          {
            "name": "github.com/tklauser/numcpus",
            "direct": false,
            "version": "v0.11.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/tomarrell/wrapcheck/v2",
            "direct": false,
            "version": "v2.12.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/tommy-muehle/go-mnd/v2",
            "direct": false,
            "version": "v2.5.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/tonistiigi/go-csvvalue",
            "direct": false,
            "version": "v0.0.0-20240814133006-030d3b2625d0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/ulikunitz/xz",
            "direct": false,
            "version": "v0.5.15",
            "ecosystem": "go"
          },
          {
            "name": "github.com/ultraware/funlen",
            "direct": false,
            "version": "v0.2.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/ultraware/whitespace",
            "direct": false,
            "version": "v0.2.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/urfave/cli/v3",
            "direct": false,
            "version": "v3.9.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/uudashr/gocognit",
            "direct": false,
            "version": "v1.2.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/uudashr/iface",
            "direct": false,
            "version": "v1.4.2",
            "ecosystem": "go"
          },
          {
            "name": "github.com/vbatts/tar-split",
            "direct": false,
            "version": "v0.12.3",
            "ecosystem": "go"
          },
          {
            "name": "github.com/wk8/go-ordered-map/v2",
            "direct": false,
            "version": "v2.1.8",
            "ecosystem": "go"
          },
          {
            "name": "github.com/x-cray/logrus-prefixed-formatter",
            "direct": false,
            "version": "v0.5.2",
            "ecosystem": "go"
          },
          {
            "name": "github.com/xanzy/ssh-agent",
            "direct": false,
            "version": "v0.3.3",
            "ecosystem": "go"
          },
          {
            "name": "github.com/xeipuuv/gojsonpointer",
            "direct": false,
            "version": "v0.0.0-20190905194746-02993c407bfb",
            "ecosystem": "go"
          },
          {
            "name": "github.com/xeipuuv/gojsonreference",
            "direct": false,
            "version": "v0.0.0-20180127040603-bd5ef7bd5415",
            "ecosystem": "go"
          },
          {
            "name": "github.com/xeipuuv/gojsonschema",
            "direct": false,
            "version": "v1.2.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/xen0n/gosmopolitan",
            "direct": false,
            "version": "v1.3.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/xhit/go-str2duration/v2",
            "direct": false,
            "version": "v2.1.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/xo/terminfo",
            "direct": false,
            "version": "v0.0.0-20220910002029-abceb7e1c41e",
            "ecosystem": "go"
          },
          {
            "name": "github.com/yagipy/maintidx",
            "direct": false,
            "version": "v1.0.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/yeya24/promlinter",
            "direct": false,
            "version": "v0.3.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/ykadowak/zerologlint",
            "direct": false,
            "version": "v0.1.5",
            "ecosystem": "go"
          },
          {
            "name": "github.com/yosida95/uritemplate/v3",
            "direct": false,
            "version": "v3.0.2",
            "ecosystem": "go"
          },
          {
            "name": "github.com/yuin/goldmark",
            "direct": false,
            "version": "v1.7.12",
            "ecosystem": "go"
          },
          {
            "name": "github.com/yuin/goldmark-emoji",
            "direct": false,
            "version": "v1.0.6",
            "ecosystem": "go"
          },
          {
            "name": "github.com/yusufpapurcu/wmi",
            "direct": false,
            "version": "v1.2.4",
            "ecosystem": "go"
          },
          {
            "name": "gitlab.com/bosi/decorder",
            "direct": false,
            "version": "v0.4.2",
            "ecosystem": "go"
          },
          {
            "name": "go-simpler.org/musttag",
            "direct": false,
            "version": "v0.14.0",
            "ecosystem": "go"
          },
          {
            "name": "go-simpler.org/sloglint",
            "direct": false,
            "version": "v0.12.0",
            "ecosystem": "go"
          },
          {
            "name": "go.augendre.info/arangolint",
            "direct": false,
            "version": "v0.4.0",
            "ecosystem": "go"
          },
          {
            "name": "go.augendre.info/fatcontext",
            "direct": false,
            "version": "v0.9.0",
            "ecosystem": "go"
          },
          {
            "name": "go.etcd.io/bbolt",
            "direct": false,
            "version": "v1.4.3",
            "ecosystem": "go"
          },
          {
            "name": "go.opentelemetry.io/auto/sdk",
            "direct": false,
            "version": "v1.2.1",
            "ecosystem": "go"
          },
          {
            "name": "go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp",
            "direct": false,
            "version": "v0.69.0",
            "ecosystem": "go"
          },
          {
            "name": "go.opentelemetry.io/otel",
            "direct": false,
            "version": "v1.44.0",
            "ecosystem": "go"
          },
          {
            "name": "go.opentelemetry.io/otel/metric",
            "direct": false,
            "version": "v1.44.0",
            "ecosystem": "go"
          },
          {
            "name": "go.opentelemetry.io/otel/trace",
            "direct": false,
            "version": "v1.44.0",
            "ecosystem": "go"
          },
          {
            "name": "go.uber.org/multierr",
            "direct": false,
            "version": "v1.11.0",
            "ecosystem": "go"
          },
          {
            "name": "go.uber.org/zap",
            "direct": false,
            "version": "v1.28.0",
            "ecosystem": "go"
          },
          {
            "name": "go.yaml.in/yaml/v2",
            "direct": false,
            "version": "v2.4.4",
            "ecosystem": "go"
          },
          {
            "name": "go.yaml.in/yaml/v3",
            "direct": false,
            "version": "v3.0.4",
            "ecosystem": "go"
          },
          {
            "name": "go.yaml.in/yaml/v4",
            "direct": false,
            "version": "v4.0.0-rc.4",
            "ecosystem": "go"
          },
          {
            "name": "golang.org/x/crypto",
            "direct": false,
            "version": "v0.53.0",
            "ecosystem": "go"
          },
          {
            "name": "golang.org/x/exp",
            "direct": false,
            "version": "v0.0.0-20260508232706-74f9aab9d74a",
            "ecosystem": "go"
          },
          {
            "name": "golang.org/x/exp/typeparams",
            "direct": false,
            "version": "v0.0.0-20260209203927-2842357ff358",
            "ecosystem": "go"
          },
          {
            "name": "golang.org/x/mod",
            "direct": false,
            "version": "v0.37.0",
            "ecosystem": "go"
          },
          {
            "name": "golang.org/x/net",
            "direct": false,
            "version": "v0.56.0",
            "ecosystem": "go"
          },
          {
            "name": "golang.org/x/oauth2",
            "direct": false,
            "version": "v0.36.0",
            "ecosystem": "go"
          },
          {
            "name": "golang.org/x/sync",
            "direct": false,
            "version": "v0.21.0",
            "ecosystem": "go"
          },
          {
            "name": "golang.org/x/sys",
            "direct": false,
            "version": "v0.47.0",
            "ecosystem": "go"
          },
          {
            "name": "golang.org/x/telemetry",
            "direct": false,
            "version": "v0.0.0-20260625142307-59b4966ccb57",
            "ecosystem": "go"
          },
          {
            "name": "golang.org/x/term",
            "direct": false,
            "version": "v0.45.0",
            "ecosystem": "go"
          },
          {
            "name": "golang.org/x/text",
            "direct": false,
            "version": "v0.39.0",
            "ecosystem": "go"
          },
          {
            "name": "golang.org/x/tools",
            "direct": false,
            "version": "v0.47.0",
            "ecosystem": "go"
          },
          {
            "name": "golang.org/x/xerrors",
            "direct": false,
            "version": "v0.0.0-20240903120638-7835f813f4da",
            "ecosystem": "go"
          },
          {
            "name": "google.golang.org/api",
            "direct": false,
            "version": "v0.274.0",
            "ecosystem": "go"
          },
          {
            "name": "google.golang.org/genai",
            "direct": false,
            "version": "v1.58.0",
            "ecosystem": "go"
          },
          {
            "name": "google.golang.org/genproto/googleapis/api",
            "direct": false,
            "version": "v0.0.0-20260511170946-3700d4141b60",
            "ecosystem": "go"
          },
          {
            "name": "google.golang.org/genproto/googleapis/rpc",
            "direct": false,
            "version": "v0.0.0-20260526163538-3dc84a4a5aaa",
            "ecosystem": "go"
          },
          {
            "name": "google.golang.org/grpc",
            "direct": false,
            "version": "v1.81.1",
            "ecosystem": "go"
          },
          {
            "name": "google.golang.org/protobuf",
            "direct": false,
            "version": "v1.36.11",
            "ecosystem": "go"
          },
          {
            "name": "gopkg.in/ini.v1",
            "direct": false,
            "version": "v1.67.2",
            "ecosystem": "go"
          },
          {
            "name": "gopkg.in/warnings.v0",
            "direct": false,
            "version": "v0.1.2",
            "ecosystem": "go"
          },
          {
            "name": "gopkg.in/yaml.v2",
            "direct": false,
            "version": "v2.4.0",
            "ecosystem": "go"
          },
          {
            "name": "honnef.co/go/tools",
            "direct": false,
            "version": "v0.7.0",
            "ecosystem": "go"
          },
          {
            "name": "modernc.org/libc",
            "direct": false,
            "version": "v1.72.3",
            "ecosystem": "go"
          },
          {
            "name": "modernc.org/mathutil",
            "direct": false,
            "version": "v1.7.1",
            "ecosystem": "go"
          },
          {
            "name": "modernc.org/memory",
            "direct": false,
            "version": "v1.11.0",
            "ecosystem": "go"
          },
          {
            "name": "modernc.org/sqlite",
            "direct": false,
            "version": "v1.50.1",
            "ecosystem": "go"
          },
          {
            "name": "mvdan.cc/gofumpt",
            "direct": false,
            "version": "v0.9.2",
            "ecosystem": "go"
          },
          {
            "name": "mvdan.cc/unparam",
            "direct": false,
            "version": "v0.0.0-20251027182757-5beb8c8f8f15",
            "ecosystem": "go"
          },
          {
            "name": "osv.dev/bindings/go",
            "direct": false,
            "version": "v0.0.0-20260512064147-daa692bbd4ed",
            "ecosystem": "go"
          },
          {
            "name": "sigs.k8s.io/yaml",
            "direct": false,
            "version": "v1.6.0",
            "ecosystem": "go"
          },
          {
            "name": "www.velocidex.com/golang/go-ntfs",
            "direct": false,
            "version": "v0.2.0",
            "ecosystem": "go"
          },
          {
            "name": "www.velocidex.com/golang/regparser",
            "direct": false,
            "version": "v0.0.0-20250203141505-31e704a67ef7",
            "ecosystem": "go"
          }
        ],
        "collected": true,
        "truncated": false,
        "total_count": 419,
        "direct_count": 16,
        "indirect_count": 403
      }
    },
    "maintainership": {
      "issues": {
        "open_prs": 0,
        "merged_prs": 4,
        "open_issues": 0,
        "closed_ratio": null,
        "closed_issues": 0,
        "closed_unmerged_prs": 0
      },
      "bus_factor": 1,
      "bot_contributors": 0,
      "top_contributors": [
        {
          "type": "User",
          "login": "bborbe",
          "commits": 101,
          "avatar_url": "https://avatars.githubusercontent.com/u/1193284?v=4"
        }
      ],
      "contributors_sampled": 1,
      "top_contributor_share": 1
    },
    "quality_signals": {
      "has_ci": true,
      "has_tests": true,
      "ci_workflows": [
        "ci.yml",
        "claude-code-review.yml",
        "claude.yml"
      ],
      "has_docs_dir": true,
      "linter_configs": [
        ".golangci.yml"
      ],
      "has_editorconfig": false,
      "has_linter_config": true,
      "has_precommit_config": false
    },
    "security_signals": {
      "lockfiles": [
        "go.sum"
      ],
      "scorecard": {
        "checks": [
          {
            "name": "Binary-Artifacts",
            "score": 10,
            "reason": "no binaries found in the repo",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#binary-artifacts"
          },
          {
            "name": "Branch-Protection",
            "score": 0,
            "reason": "branch protection not enabled on development/release branches",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#branch-protection"
          },
          {
            "name": "CI-Tests",
            "score": 10,
            "reason": "4 out of 4 merged PRs checked by a CI test -- score normalized to 10",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#ci-tests"
          },
          {
            "name": "CII-Best-Practices",
            "score": 0,
            "reason": "no effort to earn an OpenSSF best practices badge detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#cii-best-practices"
          },
          {
            "name": "Code-Review",
            "score": 1,
            "reason": "Found 3/21 approved changesets -- score normalized to 1",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#code-review"
          },
          {
            "name": "Contributors",
            "score": 6,
            "reason": "project has 2 contributing companies or organizations -- score normalized to 6",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#contributors"
          },
          {
            "name": "Dangerous-Workflow",
            "score": 10,
            "reason": "no dangerous workflow patterns detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dangerous-workflow"
          },
          {
            "name": "Dependency-Update-Tool",
            "score": 0,
            "reason": "no update tool detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dependency-update-tool"
          },
          {
            "name": "Fuzzing",
            "score": 0,
            "reason": "project is not fuzzed",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#fuzzing"
          },
          {
            "name": "License",
            "score": 10,
            "reason": "license file detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#license"
          },
          {
            "name": "Maintained",
            "score": 10,
            "reason": "27 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#maintained"
          },
          {
            "name": "Packaging",
            "score": null,
            "reason": "packaging workflow not detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#packaging"
          },
          {
            "name": "Pinned-Dependencies",
            "score": 0,
            "reason": "dependency not pinned by hash detected -- score normalized to 0",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#pinned-dependencies"
          },
          {
            "name": "SAST",
            "score": 0,
            "reason": "SAST tool is not run on all commits -- score normalized to 0",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#sast"
          },
          {
            "name": "Security-Policy",
            "score": 0,
            "reason": "security policy file not detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#security-policy"
          },
          {
            "name": "Signed-Releases",
            "score": null,
            "reason": "no releases found",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#signed-releases"
          },
          {
            "name": "Token-Permissions",
            "score": 0,
            "reason": "detected GitHub workflow tokens with excessive permissions",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#token-permissions"
          },
          {
            "name": "Vulnerabilities",
            "score": 2,
            "reason": "8 existing vulnerabilities detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#vulnerabilities"
          }
        ],
        "commit": "ddcc59153a6396f2104b7104620778ae8b52ed88",
        "ran_at": "2026-07-27T15:01:33Z",
        "aggregate_score": 3.6,
        "scorecard_version": "v5.5.0"
      },
      "has_codeql_workflow": false,
      "has_security_policy": false,
      "has_dependabot_config": false
    },
    "contribution_flow": {
      "collected": true,
      "ci_last_run_at": "2026-07-19T19:30:35Z",
      "oldest_open_prs": [],
      "last_merged_pr_at": "2026-07-19T19:12:06Z",
      "ci_last_conclusion": "SUCCESS",
      "oldest_open_issues": []
    }
  },
  "config": {
    "disabled_metrics": [],
    "disabled_categories": [],
    "disabled_components": {}
  },
  "source": {
    "url": "https://github.com/bborbe/task-watcher",
    "host": "github.com",
    "name": "task-watcher",
    "owner": "bborbe"
  },
  "metrics": {
    "overall": {
      "key": "overall",
      "band": "moderate",
      "name": "Overall health",
      "note": null,
      "notes": [],
      "value": 58,
      "inputs": {
        "security": 50,
        "vitality": 77,
        "community": 24,
        "governance": 58,
        "engineering": 76
      },
      "components": []
    },
    "categories": [
      {
        "key": "vitality",
        "band": "good",
        "name": "Vitality",
        "value": 77,
        "weight": 0.22,
        "metrics": [
          {
            "key": "development_activity",
            "band": "good",
            "name": "Development activity",
            "note": null,
            "notes": [],
            "value": 70,
            "inputs": {
              "commits_last_year": 101,
              "human_commit_share": 1,
              "days_since_last_push": 7,
              "active_weeks_last_year": 9
            },
            "components": [
              {
                "key": "push_recency",
                "name": "Push recency",
                "detail": "last push 7 days ago",
                "points": 36,
                "status": "met",
                "details": [
                  {
                    "code": "push_recency",
                    "params": {
                      "days": 7
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "commit_cadence",
                "name": "Commit cadence",
                "detail": "9/52 weeks with commits",
                "points": 6.2,
                "status": "partial",
                "details": [
                  {
                    "code": "commit_cadence_weeks",
                    "params": {
                      "weeks": 9
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "commit_volume",
                "name": "Commit volume",
                "detail": "101 commits in the last year",
                "points": 18,
                "status": "met",
                "details": [
                  {
                    "code": "commits_last_year",
                    "params": {
                      "count": 101
                    }
                  }
                ],
                "max_points": 18
              },
              {
                "key": "openssf_scorecard_maintained",
                "name": "OpenSSF Scorecard: Maintained",
                "detail": "27 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10",
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "release_discipline",
            "band": "excellent",
            "name": "Release discipline",
            "note": "Excluded from scoring (no data or not applicable): OpenSSF Scorecard: Signed-Releases. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "openssf_scorecard_signed_releases"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 88,
            "inputs": {
              "releases_count": 30,
              "latest_release_tag": "v0.19.2",
              "releases_from_tags": true,
              "days_since_latest_release": 7,
              "mean_days_between_releases": 13.3
            },
            "components": [
              {
                "key": "ships_releases",
                "name": "Ships releases",
                "detail": "30 version tags (no GitHub releases)",
                "points": 16.2,
                "status": "partial",
                "details": [
                  {
                    "code": "version_tags_no_releases",
                    "params": {
                      "count": 30
                    }
                  }
                ],
                "max_points": 27
              },
              {
                "key": "release_recency",
                "name": "Release recency",
                "detail": "latest release 7 days ago",
                "points": 36,
                "status": "met",
                "details": [
                  {
                    "code": "release_recency",
                    "params": {
                      "days": 7
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "release_cadence",
                "name": "Release cadence",
                "detail": "a release every ~13.3 days",
                "points": 27,
                "status": "met",
                "details": [
                  {
                    "code": "release_cadence",
                    "params": {
                      "gap": 13.3
                    }
                  }
                ],
                "max_points": 27
              },
              {
                "key": "openssf_scorecard_signed_releases",
                "name": "OpenSSF Scorecard: Signed-Releases",
                "detail": "no releases found",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 10
              }
            ]
          },
          {
            "key": "abandonment",
            "band": "excellent",
            "name": "Abandonment",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "cap": null,
              "state": "unverified",
              "guards": [],
              "signals": [],
              "red_flag": false,
              "multiplier_pct": 100,
              "declared_reason": null,
              "unverified_reason": "repository_too_young",
              "unanswered_open_prs": null,
              "unanswered_open_issues": null,
              "days_since_last_merged_pr": null,
              "days_since_last_human_commit": null,
              "days_since_last_human_commit_is_floor": false
            },
            "components": [
              {
                "key": "project_is_still_maintained",
                "name": "Project is still maintained",
                "detail": "maintenance record not established from the collected data",
                "points": 100,
                "status": "met",
                "details": [
                  {
                    "code": "abandonment_unverified",
                    "params": {}
                  }
                ],
                "max_points": 100
              }
            ]
          }
        ],
        "description": "Is the project alive — is code being written and are releases shipping?"
      },
      {
        "key": "community",
        "band": "critical",
        "name": "Community & Adoption",
        "value": 24,
        "weight": 0.18,
        "metrics": [
          {
            "key": "popularity",
            "band": "critical",
            "name": "Popularity & adoption",
            "note": null,
            "notes": [],
            "value": 1,
            "inputs": {
              "forks": 0,
              "stars": 0,
              "watchers": 0,
              "growth_state": "unverified",
              "growth_factor_pct": 100,
              "growth_unverified_reason": "no_history"
            },
            "components": [
              {
                "key": "stars",
                "name": "Stars",
                "detail": "0 stars",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "stars",
                    "params": {
                      "count": 0
                    }
                  }
                ],
                "max_points": 60
              },
              {
                "key": "forks",
                "name": "Forks",
                "detail": "0 forks",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "forks",
                    "params": {
                      "count": 0
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "watchers",
                "name": "Watchers",
                "detail": "0 watchers",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "watchers",
                    "params": {
                      "count": 0
                    }
                  }
                ],
                "max_points": 15
              }
            ]
          },
          {
            "key": "community_health",
            "band": "moderate",
            "name": "Community health",
            "note": null,
            "notes": [],
            "value": 50,
            "inputs": {
              "has_readme": true,
              "has_license": true,
              "has_contributing": false,
              "has_issue_template": false,
              "has_code_of_conduct": false,
              "has_pull_request_template": false
            },
            "components": [
              {
                "key": "readme",
                "name": "README",
                "detail": null,
                "points": 22.5,
                "status": "met",
                "details": [],
                "max_points": 22.5
              },
              {
                "key": "license",
                "name": "License",
                "detail": "recognized license (BSD-2-Clause)",
                "points": 22.5,
                "status": "met",
                "details": [
                  {
                    "code": "license_standard",
                    "params": {}
                  },
                  {
                    "code": "license_spdx",
                    "params": {
                      "spdx": "BSD-2-Clause"
                    }
                  }
                ],
                "max_points": 22.5
              },
              {
                "key": "contributing_guide",
                "name": "CONTRIBUTING guide",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 18
              },
              {
                "key": "code_of_conduct",
                "name": "Code of conduct",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 13.5
              },
              {
                "key": "issue_template",
                "name": "Issue template",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.2
              },
              {
                "key": "pr_template",
                "name": "PR template",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 6.3
              }
            ]
          }
        ],
        "description": "Does the project have users, downloads, attention, and a welcoming setup for contributors?"
      },
      {
        "key": "governance",
        "band": "moderate",
        "name": "Sustainability & Governance",
        "value": 58,
        "weight": 0.24,
        "metrics": [
          {
            "key": "maintainer_resilience",
            "band": "critical",
            "name": "Maintainer resilience (bus factor)",
            "note": null,
            "notes": [],
            "value": 16,
            "inputs": {
              "bus_factor": 1,
              "contributors_sampled": 1,
              "top_contributor_share": 1
            },
            "components": [
              {
                "key": "bus_factor",
                "name": "Bus factor",
                "detail": "1 contributor(s) cover half of all commits",
                "points": 9,
                "status": "partial",
                "details": [
                  {
                    "code": "bus_factor",
                    "params": {
                      "count": 1
                    }
                  }
                ],
                "max_points": 54
              },
              {
                "key": "commit_distribution",
                "name": "Commit distribution",
                "detail": "top contributor authored 100% of commits",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "top_contributor_share",
                    "params": {
                      "share": 100
                    }
                  }
                ],
                "max_points": 22.5
              },
              {
                "key": "contributor_breadth",
                "name": "Contributor breadth",
                "detail": "1 contributors",
                "points": 1.4,
                "status": "partial",
                "details": [
                  {
                    "code": "contributors_sampled",
                    "params": {
                      "count": 1
                    }
                  }
                ],
                "max_points": 13.5
              },
              {
                "key": "openssf_scorecard_contributors",
                "name": "OpenSSF Scorecard: Contributors",
                "detail": "project has 2 contributing companies or organizations -- score normalized to 6",
                "points": 6,
                "status": "partial",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "responsiveness",
            "band": "good",
            "name": "Issue & PR responsiveness",
            "note": "Excluded from scoring (no data or not applicable): Issue resolution. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "issue_resolution"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 75,
            "inputs": {
              "merged_prs": 4,
              "open_issues": 0,
              "closed_issues": 0,
              "issue_closed_ratio": null,
              "closed_unmerged_prs": 0
            },
            "components": [
              {
                "key": "issue_resolution",
                "name": "Issue resolution",
                "detail": "no issues or no data",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_issues_or_data",
                    "params": {}
                  }
                ],
                "max_points": 46.75
              },
              {
                "key": "pr_acceptance",
                "name": "PR acceptance",
                "detail": "4/4 decided PRs merged",
                "points": 38.2,
                "status": "met",
                "details": [
                  {
                    "code": "decided_prs_merged",
                    "params": {
                      "merged": 4,
                      "decided": 4
                    }
                  }
                ],
                "max_points": 38.25
              },
              {
                "key": "openssf_scorecard_code_review",
                "name": "OpenSSF Scorecard: Code-Review",
                "detail": "Found 3/21 approved changesets -- score normalized to 1",
                "points": 1.5,
                "status": "partial",
                "details": [],
                "max_points": 15
              }
            ]
          },
          {
            "key": "stewardship",
            "band": "moderate",
            "name": "Ownership & stewardship",
            "note": "Excluded from scoring (no data or not applicable): Verified domain. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "verified_domain"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 57,
            "inputs": {
              "followers": 30,
              "owner_type": "User",
              "is_verified": null,
              "owner_login": "bborbe",
              "public_repos": 206,
              "account_age_days": 5369
            },
            "components": [
              {
                "key": "ownership_backing",
                "name": "Ownership backing",
                "detail": "personal (user) account",
                "points": 10,
                "status": "partial",
                "details": [
                  {
                    "code": "owner_personal",
                    "params": {}
                  }
                ],
                "max_points": 30
              },
              {
                "key": "verified_domain",
                "name": "Verified domain",
                "detail": "not applicable to user accounts",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "not_applicable_to_user_accounts",
                    "params": {}
                  }
                ],
                "max_points": 20
              },
              {
                "key": "owner_reach",
                "name": "Owner reach",
                "detail": "30 followers of bborbe",
                "points": 10.7,
                "status": "partial",
                "details": [
                  {
                    "code": "owner_followers",
                    "params": {
                      "count": 30,
                      "login": "bborbe"
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "track_record",
                "name": "Track record",
                "detail": "206 public repos, account ~14 yr old",
                "points": 25,
                "status": "met",
                "details": [
                  {
                    "code": "public_repos",
                    "params": {
                      "count": 206
                    }
                  },
                  {
                    "code": "account_age_years",
                    "params": {
                      "years": 14
                    }
                  }
                ],
                "max_points": 25
              }
            ]
          },
          {
            "key": "package_maintenance",
            "band": "excellent",
            "name": "Package maintenance",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "packages": [
                "github.com/bborbe/task-watcher"
              ],
              "ecosystems": "go",
              "any_deprecated": false,
              "min_days_since_publish": 7
            },
            "components": [
              {
                "key": "published_resolvable",
                "name": "Published & resolvable",
                "detail": "1 package(s) on go",
                "points": 25,
                "status": "met",
                "details": [
                  {
                    "code": "packages_published",
                    "params": {
                      "count": 1,
                      "ecosystems": "go"
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "publish_recency",
                "name": "Publish recency",
                "detail": "latest publish 7 days ago",
                "points": 35,
                "status": "met",
                "details": [
                  {
                    "code": "publish_recency",
                    "params": {
                      "days": 7
                    }
                  }
                ],
                "max_points": 35
              },
              {
                "key": "version_history",
                "name": "Version history",
                "detail": "30 published versions",
                "points": 20,
                "status": "met",
                "details": [
                  {
                    "code": "published_versions",
                    "params": {
                      "count": 30
                    }
                  }
                ],
                "max_points": 20
              },
              {
                "key": "not_deprecated",
                "name": "Not deprecated",
                "detail": "active, not deprecated or yanked",
                "points": 20,
                "status": "met",
                "details": [
                  {
                    "code": "package_not_deprecated",
                    "params": {}
                  }
                ],
                "max_points": 20
              }
            ]
          }
        ],
        "description": "Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?"
      },
      {
        "key": "engineering",
        "band": "good",
        "name": "Engineering Quality",
        "value": 76,
        "weight": 0.2,
        "metrics": [
          {
            "key": "engineering_practices",
            "band": "good",
            "name": "Engineering practices",
            "note": null,
            "notes": [],
            "value": 84,
            "inputs": {
              "has_ci": true,
              "has_tests": true,
              "has_editorconfig": false,
              "has_linter_config": true,
              "has_precommit_config": false
            },
            "components": [
              {
                "key": "ci_workflows",
                "name": "CI workflows",
                "detail": "3 workflow(s)",
                "points": 24,
                "status": "met",
                "details": [
                  {
                    "code": "ci_workflows",
                    "params": {
                      "count": 3
                    }
                  }
                ],
                "max_points": 24
              },
              {
                "key": "tests_present",
                "name": "Tests present",
                "detail": null,
                "points": 24,
                "status": "met",
                "details": [],
                "max_points": 24
              },
              {
                "key": "linter_config",
                "name": "Linter config",
                "detail": ".golangci.yml",
                "points": 16,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": ".golangci.yml"
                    }
                  }
                ],
                "max_points": 16
              },
              {
                "key": "pre_commit_hooks",
                "name": "Pre-commit hooks",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 9.6
              },
              {
                "key": "editorconfig",
                "name": ".editorconfig",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 6.4
              },
              {
                "key": "openssf_scorecard_ci_tests",
                "name": "OpenSSF Scorecard: CI-Tests",
                "detail": "4 out of 4 merged PRs checked by a CI test -- score normalized to 10",
                "points": 20,
                "status": "met",
                "details": [],
                "max_points": 20
              }
            ]
          },
          {
            "key": "documentation",
            "band": "moderate",
            "name": "Documentation",
            "note": null,
            "notes": [],
            "value": 65,
            "inputs": {
              "topics": [],
              "has_wiki": true,
              "homepage": null,
              "has_readme": true,
              "has_docs_dir": true,
              "has_description": false
            },
            "components": [
              {
                "key": "readme",
                "name": "README",
                "detail": null,
                "points": 30,
                "status": "met",
                "details": [],
                "max_points": 30
              },
              {
                "key": "documentation_directory",
                "name": "Documentation directory",
                "detail": null,
                "points": 25,
                "status": "met",
                "details": [],
                "max_points": 25
              },
              {
                "key": "documentation_homepage_site",
                "name": "Documentation / homepage site",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 15
              },
              {
                "key": "repository_description",
                "name": "Repository description",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              },
              {
                "key": "topics",
                "name": "Topics",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              },
              {
                "key": "wiki",
                "name": "Wiki",
                "detail": null,
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              }
            ]
          }
        ],
        "description": "Are baseline engineering and documentation practices in place?"
      },
      {
        "key": "security",
        "band": "moderate",
        "name": "Security",
        "value": 50,
        "weight": 0.16,
        "metrics": [
          {
            "key": "security_posture",
            "band": "at_risk",
            "name": "Security posture",
            "note": "Excluded from scoring (no data or not applicable): Packaging, Signed-Releases. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "packaging",
                    "signed_releases"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 37,
            "inputs": {
              "source": "openssf_scorecard",
              "checks_evaluated": 16,
              "scorecard_version": "v5.5.0",
              "checks_inconclusive": 2,
              "scorecard_aggregate": 3.6
            },
            "components": [
              {
                "key": "binary_artifacts",
                "name": "Binary-Artifacts",
                "detail": "no binaries found in the repo",
                "points": 7.5,
                "status": "met",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "branch_protection",
                "name": "Branch-Protection",
                "detail": "branch protection not enabled on development/release branches",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "ci_tests",
                "name": "CI-Tests",
                "detail": "4 out of 4 merged PRs checked by a CI test -- score normalized to 10",
                "points": 2.5,
                "status": "met",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "cii_best_practices",
                "name": "CII-Best-Practices",
                "detail": "no effort to earn an OpenSSF best practices badge detected",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "code_review",
                "name": "Code-Review",
                "detail": "Found 3/21 approved changesets -- score normalized to 1",
                "points": 0.8,
                "status": "partial",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "contributors",
                "name": "Contributors",
                "detail": "project has 2 contributing companies or organizations -- score normalized to 6",
                "points": 1.5,
                "status": "partial",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "dangerous_workflow",
                "name": "Dangerous-Workflow",
                "detail": "no dangerous workflow patterns detected",
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              },
              {
                "key": "dependency_update_tool",
                "name": "Dependency-Update-Tool",
                "detail": "no update tool detected",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "fuzzing",
                "name": "Fuzzing",
                "detail": "project is not fuzzed",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 5
              },
              {
                "key": "license",
                "name": "License",
                "detail": "license file detected",
                "points": 2.5,
                "status": "met",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "maintained",
                "name": "Maintained",
                "detail": "27 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10",
                "points": 7.5,
                "status": "met",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "packaging",
                "name": "Packaging",
                "detail": "packaging workflow not detected",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 5
              },
              {
                "key": "pinned_dependencies",
                "name": "Pinned-Dependencies",
                "detail": "dependency not pinned by hash detected -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 5
              },
              {
                "key": "sast",
                "name": "SAST",
                "detail": "SAST tool is not run on all commits -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 5
              },
              {
                "key": "security_policy",
                "name": "Security-Policy",
                "detail": "security policy file not detected",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 5
              },
              {
                "key": "signed_releases",
                "name": "Signed-Releases",
                "detail": "no releases found",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 7.5
              },
              {
                "key": "token_permissions",
                "name": "Token-Permissions",
                "detail": "detected GitHub workflow tokens with excessive permissions",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "vulnerabilities",
                "name": "Vulnerabilities",
                "detail": "8 existing vulnerabilities detected",
                "points": 1.5,
                "status": "partial",
                "details": [],
                "max_points": 7.5
              }
            ]
          },
          {
            "key": "dependency_advisories",
            "band": "excellent",
            "name": "Dependency advisories",
            "note": "Excluded from scoring (no data or not applicable): Indirect dependencies free of known advisories, No advisories left outstanding. Remaining weights renormalized. Matched 419 resolved dependencies against OSV. This repository publishes no package the index resolves, so the repository dependency graph was assessed instead. That graph mixes development and test pins with shipped dependencies, so only the declared runtime dependencies are scored; transitive findings are reported as context and excluded from the score. Reachability is not analyzed.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "indirect_dependencies_free_of_known_advisories",
                    "no_advisories_left_outstanding"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              },
              {
                "code": "advisories_scope_repository",
                "params": {
                  "assessed": 419
                }
              },
              {
                "code": "advisories_repo_graph_caveat",
                "params": {}
              },
              {
                "code": "advisories_reachability",
                "params": {}
              }
            ],
            "value": 100,
            "inputs": {
              "source": "osv",
              "advisories": 13,
              "affected_packages": 4,
              "assessed_packages": 419,
              "unassessed_packages": 0,
              "affected_by_severity": "critical 1, high 1, unknown 2",
              "direct_affected_packages": 0
            },
            "components": [
              {
                "key": "direct_dependencies_free_of_known_advisories",
                "name": "Direct dependencies free of known advisories",
                "detail": "no direct dependency carries a known advisory",
                "points": 35,
                "status": "met",
                "details": [
                  {
                    "code": "no_direct_advisories",
                    "params": {}
                  }
                ],
                "max_points": 35
              },
              {
                "key": "indirect_dependencies_free_of_known_advisories",
                "name": "Indirect dependencies free of known advisories",
                "detail": "transitive set not separable from development and test dependencies in this scope",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "advisories_scope_not_separable",
                    "params": {}
                  }
                ],
                "max_points": 25
              },
              {
                "key": "no_advisories_left_outstanding",
                "name": "No advisories left outstanding",
                "detail": "no advisory carries a publication date",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "advisories_no_publication_date",
                    "params": {}
                  }
                ],
                "max_points": 40
              }
            ]
          },
          {
            "key": "malicious_dependencies",
            "band": "excellent",
            "name": "Malicious dependencies",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "source": "osv",
              "meaning": "reported as a malicious package by the OpenSSF corpus; the remedy is removal or moving off the compromised name, never an upgrade of the same artifact. Versions the registry has since pulled are listed but not scored",
              "packages": [],
              "red_flag": false,
              "assessed_packages": 419,
              "malicious_packages": 0,
              "direct_malicious_packages": 0,
              "withdrawn_malicious_packages": 0,
              "installable_malicious_packages": 0
            },
            "components": [
              {
                "key": "no_dependency_reported_as_a_malicious_package",
                "name": "No dependency reported as a malicious package",
                "detail": "no dependency is reported as a malicious package",
                "points": 100,
                "status": "met",
                "details": [
                  {
                    "code": "no_malicious_dependencies",
                    "params": {}
                  }
                ],
                "max_points": 100
              }
            ]
          },
          {
            "key": "high_risk_jurisdiction_exposure",
            "band": "excellent",
            "name": "High-Risk Jurisdiction Exposure",
            "note": "Only high-confidence self-published location evidence affects this multiplier. Ambiguous matches are review-only; country evidence is not proof of nationality, citizenship, legal registration, malicious intent, or sanctions status.",
            "notes": [
              {
                "code": "jurisdiction_evidence_limits",
                "params": {}
              }
            ],
            "value": 100,
            "inputs": {
              "meaning": "self-published location evidence; not nationality or citizenship",
              "red_flag": false,
              "exposures": [],
              "policy_countries": [
                "Russia",
                "Iran",
                "North Korea"
              ],
              "review_only_matches": 0,
              "assessed_self_published_locations": 3
            },
            "components": [
              {
                "key": "policy_exposure_multiplier",
                "name": "Policy exposure multiplier",
                "detail": "no confirmed policy-scope location match",
                "points": 100,
                "status": "met",
                "details": [
                  {
                    "code": "jurisdiction_no_match",
                    "params": {}
                  }
                ],
                "max_points": 100
              }
            ]
          }
        ],
        "description": "Are visible security and supply-chain practices strong, with no malicious dependency and no unresolved high-risk jurisdiction exposure?"
      },
      {
        "key": "ai_readiness",
        "band": "moderate",
        "name": "AI Readiness",
        "value": 55,
        "weight": 0,
        "metrics": [
          {
            "key": "ai_agent_context",
            "band": "critical",
            "name": "Agent context & guidance",
            "note": null,
            "notes": [],
            "value": 11,
            "inputs": {
              "has_llms_txt": false,
              "legible_history_share": 0.21,
              "agent_instruction_files": [],
              "agent_instruction_max_bytes": null
            },
            "components": [
              {
                "key": "agent_instructions",
                "name": "Agent instructions",
                "detail": "no CLAUDE.md / AGENTS.md / editor rules",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "no_agent_instructions",
                    "params": {}
                  }
                ],
                "max_points": 45
              },
              {
                "key": "machine_readable_docs_llms_txt",
                "name": "Machine-readable docs (llms.txt)",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 15
              },
              {
                "key": "legible_commit_history",
                "name": "Legible commit history",
                "detail": "21 of 100 human commits state their intent (structured subject or explanatory body)",
                "points": 11.2,
                "status": "partial",
                "details": [
                  {
                    "code": "legible_history",
                    "params": {
                      "legible": 21,
                      "sampled": 100
                    }
                  }
                ],
                "max_points": 40
              }
            ]
          },
          {
            "key": "ai_verify_loop",
            "band": "good",
            "name": "Verify loop (build / test / typecheck)",
            "note": null,
            "notes": [],
            "value": 72,
            "inputs": {
              "has_nix": false,
              "has_tests": true,
              "lockfiles": [
                "go.sum"
              ],
              "has_dockerfile": false,
              "typed_language": true,
              "bootstrap_files": [
                "Makefile"
              ],
              "has_devcontainer": false,
              "has_linter_config": true,
              "typecheck_configs": [],
              "agent_commit_share": 0,
              "toolchain_manifests": [
                "go.mod"
              ],
              "dependency_bot_commit_share": 0
            },
            "components": [
              {
                "key": "one_command_bootstrap",
                "name": "One-command bootstrap",
                "detail": "Makefile",
                "points": 18,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "Makefile"
                    }
                  }
                ],
                "max_points": 18
              },
              {
                "key": "automated_tests",
                "name": "Automated tests",
                "detail": null,
                "points": 22,
                "status": "met",
                "details": [],
                "max_points": 22
              },
              {
                "key": "lint_format_config",
                "name": "Lint / format config",
                "detail": ".golangci.yml",
                "points": 11,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": ".golangci.yml"
                    }
                  }
                ],
                "max_points": 11
              },
              {
                "key": "static_type_checking",
                "name": "Static type checking",
                "detail": "Go (statically typed)",
                "points": 11,
                "status": "met",
                "details": [
                  {
                    "code": "statically_typed_language",
                    "params": {
                      "language": "Go"
                    }
                  }
                ],
                "max_points": 11
              },
              {
                "key": "reproducible_environment",
                "name": "Reproducible environment",
                "detail": "lockfile",
                "points": 10,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "lockfile"
                    }
                  }
                ],
                "max_points": 10
              },
              {
                "key": "demonstrated_agent_practice",
                "name": "Demonstrated agent practice",
                "detail": "no agent-authored commits among the last 100",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "no_agent_authored_commits",
                    "params": {
                      "sampled": 100
                    }
                  }
                ],
                "max_points": 10
              },
              {
                "key": "automated_maintenance",
                "name": "Automated maintenance",
                "detail": "no automated dependency updates observed",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "no_dependency_automation",
                    "params": {}
                  }
                ],
                "max_points": 8
              },
              {
                "key": "openssf_scorecard_pinned_dependencies",
                "name": "OpenSSF Scorecard: Pinned-Dependencies",
                "detail": "dependency not pinned by hash detected -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "ai_code_legibility",
            "band": "excellent",
            "name": "Code legibility for models",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "primary_language": "Go",
              "largest_source_bytes": 14788,
              "source_files_sampled": 29,
              "oversized_source_files": 0
            },
            "components": [
              {
                "key": "type_checkable_code",
                "name": "Type-checkable code",
                "detail": "Go (statically typed)",
                "points": 45,
                "status": "met",
                "details": [
                  {
                    "code": "statically_typed_language",
                    "params": {
                      "language": "Go"
                    }
                  }
                ],
                "max_points": 45
              },
              {
                "key": "manageable_file_sizes",
                "name": "Manageable file sizes",
                "detail": "0/29 source files over 60KB",
                "points": 55,
                "status": "met",
                "details": [
                  {
                    "code": "oversized_source_files",
                    "params": {
                      "kb": 60,
                      "sampled": 29,
                      "oversized": 0
                    }
                  }
                ],
                "max_points": 55
              }
            ]
          }
        ],
        "description": "How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score."
      }
    ],
    "metrics_version": "1.13.0"
  },
  "warnings": [],
  "report_type": "repository",
  "generated_at": "2026-07-27T15:01:43.137193Z",
  "schema_version": "0.27.0",
  "badge_url": "https://raw.githubusercontent.com/inspect-software/badges/main/v1/b/bborbe/task-watcher.svg",
  "full_name": "bborbe/task-watcher",
  "license_state": "standard",
  "license_spdx": "BSD-2-Clause"
}

Bewertungen sind Signale, keine Garantien. Sie spiegeln öffentlich sichtbare Praxis auf GitHub wider — kein Code-Audit und keine Sicherheitsgarantie.

Fehlende Daten werden ausgeschlossen und die Gewichte neu normiert, nie als null bewertet. Die Methodik ist versioniert und offen: Metriken v1.13.0, Schema v0.27.0 — vollständige Methodik · Metriken-Wiki.

Wie ein einzelnes Ergebnis im Gesamtregister steht: aggregierte Statistiken — Go.

Software-Gesundheitsindex

Bewertungsprofil

Eigentümerschaft

Paket-Ökosysteme

Metriken nach Kategorie

Eckdaten

Weitere Details

Verwandte Einträge