Öffentliches Register
Software-GesundheitsberichtSchema 0.27.0 · Metriken 2.5.0 · 2026-07-29 12:52 UTC

crossplane-contrib / provider-sql

An SQL provider for @crossplane

GoApache-2.0★ 154 Sterne⑂ 112 Forksseit Okt. 2020Auf GitHub ansehen ↗

crossplane-contrib/provider-sql erreicht einen Gesundheitsindex von 91 von 100 und liegt damit im Bereich Exzellent. Am stärksten schneidet es bei Vitality (86/100) ab, am schwächsten bei Community & Adoption (56/100). Zuletzt vor 1 Tag aktualisiert. 4 Mitwirkende tragen den Großteil der jüngsten Arbeit.

91
gesamt / 100
Exzellent

Software-Gesundheitsindex

Metriken werden auf einer standardisierten Skala von 1–100 in gewichtete Kategorien gruppiert. Der Gesamtwert beginnt als ihr gewichtetes Mittel, kalibriert auf die Verteilung des öffentlichen Registers, sodass die Stufen Perzentilbedeutung tragen; sobald öffentliche Evidenz die Richtlinie für Hochrisikojurisdiktionen auslöst, wird die Bewertung angepasst und erhält die Obergrenze Gefährdet von 34.

91
Außergewöhnlich93-100Die Spitzengruppe des Registers (≈ obere 5 %); erfüllt im Wesentlichen alle geprüften Kriterien
Exzellent80-92Durchgehend stark; geringfügige Lücken
Gut65-79Gesund; Lücken sind begrenzt und beherrschbar
Mittel50-64Akzeptabel mit deutlichen Lücken; Überprüfung empfohlen
Schwach35-49Wesentliche Schwächen in mehreren Bereichen
Gefährdet20-34Erhebliche Schwächen; eine Übernahme erfordert Vorsicht
Kritisch1-19Schwerwiegende Probleme (aufgegeben, nur ein Maintainer, keine Hygiene)
VitalitätCommunity &VerbreitungNachhaltigkeit &GovernanceEngineering-QualitätSicherheitAI Readiness

Bewertungsprofil

Jede Achse ist eine Kategorie. Die Form zählt mehr als der Durchschnitt — ein gesundes Projekt füllt die gesamte Fläche, während ein Profil aus Spitzen und Kratern bedeutet, dass Stärke in einer Dimension Risiken in einer anderen verdeckt.

Der gewichtete Gesamtwert 77 wird auf der veröffentlichten Indexskala auf 91 kalibriert (Register-Kalibrierung 2026-08-02).

Eigentümerschaft

Crossplane ContribOrganisation
274 Follower140 öffentliche Reposseit Mai 2020

Dieses Repository wird von einer Organisation getragen — geteilte, rechenschaftspflichtige Trägerschaft, die jeden einzelnen Maintainer überdauern kann.

Paket-Ökosysteme

RegistryPaketVersionDownloads / MonatVersionenZuletzt veröffentlicht
Gogithub.com/crossplane-contrib/provider-sqlv0.16.0-25vor 9 Tagen

Metriken nach Kategorie

Vitalität

Lebt das Projekt — wird Code geschrieben und werden Releases ausgeliefert?

86Exzellent · 21 % des Gesamtindex
Wie die Bewertung erfolgt
36/36Push-Aktualität — letzter Push vor 1 Tagen
18/36Commit-Rhythmus — 26/52 Wochen mit Commits
18/18Commit-Volumen — 218 Commits im letzten Jahr
10/10OpenSSF Scorecard: Maintained — 30 commit(s) and 8 issue activity found in the last 90 days -- score normalized to 10
Verwendete Eingangsdaten
commits_last_year218
human_commit_share0,74
days_since_last_push1
active_weeks_last_year26
Wie die Bewertung erfolgt
27/27Liefert Releases aus — 20 Releases veröffentlicht
36/36Release-Aktualität — letztes Release vor 2 Tagen
19.8/27Release-Rhythmus — ein Release etwa alle 65,7 Tage
0/10OpenSSF Scorecard: Signed-Releases — keine Daten
Verwendete Eingangsdaten
releases_count20
latest_release_tagv0.16.0-beta.1
releases_from_tagsnein
days_since_latest_release2
mean_days_between_releases65,7
Von der Bewertung ausgeschlossen (keine Daten oder nicht anwendbar): OpenSSF Scorecard: Signed-Releases. Die verbleibenden Gewichte wurden renormalisiert.

Community & Verbreitung

Hat das Projekt Nutzer, Downloads, Aufmerksamkeit und ein einladendes Umfeld für Beitragende?

56Mittel · 17 % des Gesamtindex
Wie die Bewertung erfolgt
35.4/60Stars — 154 Stars
17/25Forks — 112 Forks
3.3/15Watcher — 5 Watcher
Verwendete Eingangsdaten
forks112
stars154
watchers5
growth_stateunverified
growth_factor_pct100
growth_unverified_reasonno_history
Wie die Bewertung erfolgt
22.5/22.5README
22.5/22.5Lizenz — anerkannte Lizenz (Apache-2.0)
0/18CONTRIBUTING-Leitfaden
0/13.5Verhaltenskodex
0/7.2Issue-Vorlage
6.3/6.3PR-Vorlage
Verwendete Eingangsdaten
has_readmeja
has_licenseja
readme_badges
has_contributingnein
has_issue_templatenein
has_code_of_conductnein
readme_badge_services
has_pull_request_templateja

Nachhaltigkeit & Governance

Überdauert das Projekt die Menschen, die es tragen — Bus-Faktor, Reaktionsfähigkeit, Trägerschaft und Paketpflege?

83Exzellent · 23 % des Gesamtindex
Wie die Bewertung erfolgt
43.2/54Bus-Faktor — 4 Beitragende decken die Hälfte aller Commits ab
17.2/22.5Commit-Verteilung — wichtigste beitragende Person verfasste 24 % der Commits
13.5/13.5Breite der Beitragenden — 46 Beitragende
10/10OpenSSF Scorecard: Contributors — project has 15 contributing companies or organizations
Verwendete Eingangsdaten
bus_factor4
contributors_sampled46
top_contributor_share0,235
Wie die Bewertung erfolgt
30.9/42Issue-Lösungsquote — 74 % der Issues geschlossen
23.5/30PR-Annahme — 206/263 entschiedene PRs gemergt
0/13Newcomer PR acceptance — kein PR eines Erstbeitragenden in 30 Tagen entschieden
15/15OpenSSF Scorecard: Code-Review — all changesets reviewed
Verwendete Eingangsdaten
merged_prs206
open_issues37
closed_issues103
prs_merged_7d
prs_decided_7d
prs_merged_30d
prs_decided_30d
issue_closed_ratio0,736
closed_unmerged_prs57
first_time_authors_30d
first_time_prs_merged_30d
first_time_prs_decided_30d
Von der Bewertung ausgeschlossen (keine Daten oder nicht anwendbar): newcomer_pr_acceptance. Die verbleibenden Gewichte wurden renormalisiert.
Wie die Bewertung erfolgt
30/30Organisatorische Trägerschaft — im Besitz einer Organisation
0/20Verifizierte Domain
17.5/25Reichweite des Inhabers — 274 Follower von crossplane-contrib
25/25Kontohistorie — 140 öffentliche Repos, Kontoalter ca. 6 Jahre
Verwendete Eingangsdaten
followers274
owner_typeOrganization
is_verified
owner_logincrossplane-contrib
public_repos140
account_age_days2.266

Paketpflege

100Außergewöhnlich
Wie die Bewertung erfolgt
25/25Veröffentlicht & auflösbar — 1 Paket(e) auf go
35/35Veröffentlichungsaktualität — letzte Veröffentlichung vor 9 Tagen
20/20Versionshistorie — 25 veröffentlichte Versionen
20/20Nicht veraltet — aktiv, nicht veraltet oder zurückgezogen
Verwendete Eingangsdaten
packagesgithub.com/crossplane-contrib/provider-sql
ecosystemsgo
any_deprecatednein
min_days_since_publish9

Engineering-Qualität

Sind grundlegende Engineering- und Dokumentationspraktiken vorhanden?

80Exzellent · 19 % des Gesamtindex
Wie die Bewertung erfolgt
24/24CI-Workflows — 4 Workflow(s)
24/24Tests vorhanden
16/16Linter-Konfiguration — .golangci.yml
0/9.6Pre-Commit-Hooks
0/6.4.editorconfig
20/20OpenSSF Scorecard: CI-Tests — 13 out of 13 merged PRs checked by a CI test -- score normalized to 10
Verwendete Eingangsdaten
has_cija
has_testsja
has_editorconfignein
has_linter_configja
has_precommit_confignein
Wie die Bewertung erfolgt
30/30README
0/25Dokumentationsverzeichnis
15/15Dokumentations-/Homepage-Site — https://marketplace.upbound.io/providers/crossplane-contrib/provider-sql/
10/10Repository-Beschreibung
10/10Topics — 3 Topics
10/10Wiki
Verwendete Eingangsdaten
topicscrossplane, crossplane-provider, sql
has_wikija
homepagehttps://marketplace.upbound.io/providers/crossplane-contrib/provider-sql/
has_readmeja
has_docs_dirnein
has_descriptionja

Sicherheit

Sind die sichtbaren Sicherheits- und Lieferkettenpraktiken belastbar, ohne ungeklärte Exposition gegenüber Hochrisikojurisdiktionen?

75Gut · 16 % des Gesamtindex
Wie die Bewertung erfolgt
7.5/7.5Binary-Artifacts — no binaries found in the repo
0/7.5Branch-Protection — keine Daten
2.5/2.5CI-Tests — 13 out of 13 merged PRs checked by a CI test -- score normalized to 10
0/2.5CII-Best-Practices — no effort to earn an OpenSSF best practices badge detected
7.5/7.5Code-Review — all changesets reviewed
2.5/2.5Contributors — project has 15 contributing companies or organizations
10/10Dangerous-Workflow — no dangerous workflow patterns detected
7.5/7.5Dependency-Update-Tool — update tool detected
0/5Fuzzing — project is not fuzzed
2.5/2.5Lizenz — license file detected
7.5/7.5Maintained — 30 commit(s) and 8 issue activity found in the last 90 days -- score normalized to 10
0/5Packaging — keine Daten
5/5Pinned-Dependencies — all dependencies are pinned
3.5/5SAST — SAST tool detected but not run on all commits
0/5Security-Policy — security policy file not detected
0/7.5Signed-Releases — keine Daten
0/7.5Token-Permissions — detected GitHub workflow tokens with excessive permissions
3/7.5Vulnerabilities — 6 existing vulnerabilities detected
Verwendete Eingangsdaten
sourceopenssf_scorecard
checks_evaluated15
scorecard_versionv5.5.0
checks_inconclusive3
scorecard_aggregate6,9
Von der Bewertung ausgeschlossen (keine Daten oder nicht anwendbar): branch_protection, packaging, signed_releases. Die verbleibenden Gewichte wurden renormalisiert.

Abhängigkeits-Advisories

100Außergewöhnlich
Wie die Bewertung erfolgt
35/35Direkte Abhängigkeiten ohne bekannte Advisories — keine direkte Abhängigkeit trägt ein bekanntes Advisory
0/25Indirekte Abhängigkeiten ohne bekannte Advisories — transitive Menge in diesem Bereich nicht von Entwicklungs- und Test-Abhängigkeiten trennbar
0/40Keine offenen Advisories — kein Advisory trägt ein Veröffentlichungsdatum
Verwendete Eingangsdaten
sourceosv
advisories7
affected_packages6
assessed_packages115
unassessed_packages0
affected_by_severitycritical 1, unknown 5
direct_affected_packages0
Von der Bewertung ausgeschlossen (keine Daten oder nicht anwendbar): Indirekte Abhängigkeiten ohne bekannte Advisories, Keine offenen Advisories. Die verbleibenden Gewichte wurden renormalisiert. 115 aufgelöste Abhängigkeiten wurden mit OSV abgeglichen. Dieses Repository veröffentlicht kein Paket, das der Index auflöst; bewertet wurde daher der Abhängigkeitsgraph des Repositorys. Dieser Graph vermischt Entwicklungs- und Test-Pins mit ausgelieferten Abhängigkeiten, daher werden nur die deklarierten Laufzeit-Abhängigkeiten bewertet; transitive Befunde werden als Kontext ausgewiesen und fließen nicht in die Bewertung ein. Erreichbarkeit wird nicht analysiert.

AI Readiness

Wie gut ist das Repository dafür ausgestattet, mit KI-Coding-Agenten entwickelt und gepflegt zu werden? Trägt ein bewusst kleines Gewicht (4 %): Agenten-Tooling ist ein echtes Pflegesignal, doch ein Repository ohne jedes Signal kann weiterhin 100/100 erreichen.

69Gut · 4 % des Gesamtindex
Wie die Bewertung erfolgt
0/45Agentenanweisungen — keine CLAUDE.md / AGENTS.md / Editor-Regeln
0/15Maschinenlesbare Doku (llms.txt)
33.9/40Lesbare Commit-Historie — 47 von 74 menschlichen Commits benennen ihre Absicht (strukturierter Betreff oder erläuternder Text)
Verwendete Eingangsdaten
has_llms_txtnein
legible_history_share0,635
agent_instruction_files
agent_instruction_max_bytes
Wie die Bewertung erfolgt
18/18Bootstrap mit einem Befehl — Makefile, cluster/images/provider-sql/Makefile
22/22Automatisierte Tests
11/11Lint-/Format-Konfiguration — .golangci.yml
11/11Statische Typprüfung — Go (statisch typisiert)
10/10Reproduzierbare Umgebung — Dockerfile, lockfile
4/10Belegte Agentenpraxis — 2 der letzten 100 Commits von Agenten verfasst oder ihnen zugeschrieben
8/8Automatisierte Wartung — 26 der letzten 100 Commits sind automatisierte Abhängigkeits-Updates
10/10OpenSSF Scorecard: Pinned-Dependencies — all dependencies are pinned
Verwendete Eingangsdaten
has_nixnein
has_testsja
lockfilesgo.sum
has_dockerfileja
typed_languageja
bootstrap_filesMakefile, cluster/images/provider-sql/Makefile
has_devcontainernein
has_linter_configja
typecheck_configs
agent_commit_share0,02
toolchain_manifestsgo.mod
dependency_bot_commit_share0,26
Wie die Bewertung erfolgt
45/45Typprüfbarer Code — Go (statisch typisiert)
55/55Handhabbare Dateigrößen — 0/172 Quelldateien über 60 KB
Verwendete Eingangsdaten
primary_languageGo
largest_source_bytes46.558
source_files_sampled172
oversized_source_files0
Wie die Bewertung erfolgt
0/40API-Schema (OpenAPI/GraphQL/proto)
0/20MCP-Server
40/40Lauffähige Beispiele — examples
Verwendete Eingangsdaten
example_dirsexamples
has_mcp_signalnein
api_schema_files

Eckdaten

154GitHub-Sterne
46Mitwirkende
218Commits, letzte 12 Monate
1Tage seit letztem Push
20Releases
4Bus-Faktor
37offene Issues
GoPaket-Ökosysteme

Warnungen zur Datenerhebung

  • Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token

Weitere Details

Stern- und Fork-Verlauf 0 ★ / 112 ⇿
0Sterne
112Forks
19Releases

Wann jeder Stern und Fork hinzugefügt wurde, von GitHub erfasst und nach Tagen gruppiert. Das kumulierte Wachstum steht direkt über den täglichen Zugängen, aus denen es besteht, sodass beide gegeneinander lesbar sind: stetiger organischer Zuwachs sieht ganz anders aus als ein abrupter, kurzlebiger Ausschlag. Wo dieser Unterschied messbar ist, wird er als Wachstumsauthentizität ausgewiesen.

02040608010012011142020-112023-092026-07
Major 0Minor 15Patch 2

Jeder Punkt umfasst 6 Tage.

OpenSSF Scorecard 6.9 / 10
6.9Gesamtwert

Unabhängige, werkzeugneutrale Sicherheitsbewertung durch das quelloffene OpenSSF Scorecard. Jede Prüfung honoriert eine Sicherheits-Praxis, nicht das Werkzeug eines bestimmten Anbieters. Prüfungen, die Scorecard nicht ermitteln konnte, sind mit k. A. markiert und vom Sicherheitswert ausgeschlossen (nie als null gezählt).Scorecard v5.5.0 · 2026-07-29 12:52 UTC

10Binary-Artifactsno binaries found in the repo
k. A.Branch-Protectioninternal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md
10CI-Tests13 out of 13 merged PRs checked by a CI test -- score normalized to 10
0CII-Best-Practicesno effort to earn an OpenSSF best practices badge detected
10Code-Reviewall changesets reviewed
10Contributorsproject has 15 contributing companies or organizations
10Dangerous-Workflowno dangerous workflow patterns detected
10Dependency-Update-Toolupdate tool detected
0Fuzzingproject is not fuzzed
10Licenselicense file detected
10Maintained30 commit(s) and 8 issue activity found in the last 90 days -- score normalized to 10
k. A.Packagingpackaging workflow not detected
10Pinned-Dependenciesall dependencies are pinned
7SASTSAST tool detected but not run on all commits
0Security-Policysecurity policy file not detected
k. A.Signed-Releasesno releases found
0Token-Permissionsdetected GitHub workflow tokens with excessive permissions
4Vulnerabilities6 existing vulnerabilities detected
Direkte Abhängigkeiten 15
RegistryPaketVersionsvorgabeManifest
Gogithub.com/DATA-DOG/go-sqlmockv1.5.2go.mod
Gogithub.com/alecthomas/kingpin/v2v2.4.0go.mod
Gogithub.com/crossplane/crossplane-runtime/v2v2.2.1go.mod
Gogithub.com/crossplane/crossplane-toolsv0.0.0-20250731192036-00d407d8b7ecgo.mod
Gogithub.com/crossplane/upjet/v2v2.2.0go.mod
Gogithub.com/go-sql-driver/mysqlv1.10.0go.mod
Gogithub.com/google/go-cmpv0.7.0go.mod
Gogithub.com/lib/pqv1.12.3go.mod
Gogithub.com/microsoft/go-mssqldbv1.10.0go.mod
Gogithub.com/pkg/errorsv0.9.1go.mod
Gok8s.io/apiv0.35.0go.mod
Gok8s.io/apimachineryv0.35.0go.mod
Gok8s.io/utilsv0.0.0-20260108192941-914a6e750570go.mod
Gosigs.k8s.io/controller-runtimev0.23.1go.mod
Gosigs.k8s.io/controller-toolsv0.20.0go.mod
Alle Abhängigkeiten 115

Vollständig aufgelöster Abhängigkeitssatz aus dem GitHub-Abhängigkeitsgraphen: 15 direkte und 100 indirekte (transitive) Pakete. Die transitive Hülle ist vollständig, wenn das Repository eine Lockfile eincheckt.

RegistryPaketVersionBeziehung
Gogithub.com/alecthomas/kingpin/v2v2.4.0direkt
Gogithub.com/crossplane/crossplane-runtime/v2v2.2.1direkt
Gogithub.com/crossplane/crossplane-toolsv0.0.0-20250731192036-00d407d8b7ecdirekt
Gogithub.com/crossplane/upjet/v2v2.2.0direkt
Gogithub.com/data-dog/go-sqlmockv1.5.2direkt
Gogithub.com/go-sql-driver/mysqlv1.10.0direkt
Gogithub.com/google/go-cmpv0.7.0direkt
Gogithub.com/lib/pqv1.12.3direkt
Gogithub.com/microsoft/go-mssqldbv1.10.0direkt
Gogithub.com/pkg/errorsv0.9.1direkt
Gok8s.io/apiv0.35.0direkt
Gok8s.io/apimachineryv0.35.0direkt
Gok8s.io/utilsv0.0.0-20260108192941-914a6e750570direkt
Gosigs.k8s.io/controller-runtimev0.23.1direkt
Gosigs.k8s.io/controller-toolsv0.20.0direkt
Godario.cat/mergov1.0.2indirekt
Gofilippo.io/edwards25519v1.2.0indirekt
Gogithub.com/agext/levenshteinv1.2.3indirekt
Gogithub.com/alecthomas/unitsv0.0.0-20240927000941-0f3dac36c52bindirekt
Gogithub.com/antchfx/htmlqueryv1.2.4indirekt
Gogithub.com/antchfx/xpathv1.3.6indirekt
Gogithub.com/apparentlymart/go-textseg/v15v15.0.0indirekt
Gogithub.com/beorn7/perksv1.0.1indirekt
Gogithub.com/blang/semver/v4v4.0.0indirekt
Gogithub.com/cenkalti/backoff/v5v5.0.3indirekt
Gogithub.com/cespare/xxhash/v2v2.3.0indirekt
Gogithub.com/dave/jenniferv1.7.1indirekt
Gogithub.com/davecgh/go-spewv1.1.2-0.20180830191138-d8f796af33ccindirekt
Gogithub.com/emicklei/go-restful/v3v3.13.0indirekt
Gogithub.com/evanphx/json-patchv5.9.11+incompatibleindirekt
Gogithub.com/evanphx/json-patch/v5v5.9.11indirekt
Gogithub.com/fatih/colorv1.18.0indirekt
Gogithub.com/fsnotify/fsnotifyv1.9.0indirekt
Gogithub.com/fxamacker/cbor/v2v2.9.0indirekt
Gogithub.com/go-logr/logrv1.4.3indirekt
Gogithub.com/go-logr/zaprv1.3.0indirekt
Gogithub.com/go-openapi/jsonpointerv0.22.4indirekt
Gogithub.com/go-openapi/jsonreferencev0.21.4indirekt
Gogithub.com/go-openapi/swagv0.25.4indirekt
Gogithub.com/go-openapi/swag/cmdutilsv0.25.4indirekt
Gogithub.com/go-openapi/swag/convv0.25.4indirekt
Gogithub.com/go-openapi/swag/fileutilsv0.25.4indirekt
Gogithub.com/go-openapi/swag/jsonnamev0.25.4indirekt
Gogithub.com/go-openapi/swag/jsonutilsv0.25.4indirekt
Gogithub.com/go-openapi/swag/loadingv0.25.4indirekt
Gogithub.com/go-openapi/swag/manglingv0.25.4indirekt
Gogithub.com/go-openapi/swag/netutilsv0.25.4indirekt
Gogithub.com/go-openapi/swag/stringutilsv0.25.4indirekt
Gogithub.com/go-openapi/swag/typeutilsv0.25.4indirekt
Gogithub.com/go-openapi/swag/yamlutilsv0.25.4indirekt
Gogithub.com/gobuffalo/flectv1.0.3indirekt
Gogithub.com/golang-sql/civilv0.0.0-20220223132316-b832511892a9indirekt
Gogithub.com/golang-sql/sqlexpv0.1.0indirekt
Gogithub.com/golang/groupcachev0.0.0-20210331224755-41bb18bfe9daindirekt
Gogithub.com/google/btreev1.1.3indirekt
Gogithub.com/google/gnostic-modelsv0.7.1indirekt
Gogithub.com/google/uuidv1.6.0indirekt
Gogithub.com/hashicorp/hcl/v2v2.23.0indirekt
Gogithub.com/inconshreveable/mousetrapv1.1.0indirekt
Gogithub.com/json-iterator/gov1.1.12indirekt
Gogithub.com/mattn/go-colorablev0.1.14indirekt
Gogithub.com/mattn/go-isattyv0.0.20indirekt
Gogithub.com/mitchellh/go-wordwrapv1.0.1indirekt
Gogithub.com/modern-go/concurrentv0.0.0-20180306012644-bacd9c7ef1ddindirekt
Gogithub.com/modern-go/reflect2v1.0.3-0.20250322232337-35a7c28c31eeindirekt
Gogithub.com/munnerz/goautonegv0.0.0-20191010083416-a7dc8b61c822indirekt
Gogithub.com/pmezard/go-difflibv1.0.0indirekt
Gogithub.com/prometheus/client_golangv1.23.2indirekt
Gogithub.com/prometheus/client_modelv0.6.2indirekt
Gogithub.com/prometheus/commonv0.67.5indirekt
Gogithub.com/prometheus/procfsv0.19.2indirekt
Gogithub.com/shopspring/decimalv1.4.0indirekt
Gogithub.com/spf13/aferov1.15.0indirekt
Gogithub.com/spf13/cobrav1.10.2indirekt
Gogithub.com/spf13/pflagv1.0.10indirekt
Gogithub.com/tmccombs/hcl2jsonv0.3.3indirekt
Gogithub.com/x448/float16v0.8.4indirekt
Gogithub.com/xhit/go-str2duration/v2v2.1.0indirekt
Gogithub.com/yuin/goldmarkv1.4.13indirekt
Gogithub.com/zclconf/go-ctyv1.16.2indirekt
Gogo.opentelemetry.io/otelv1.41.0indirekt
Gogo.opentelemetry.io/otel/tracev1.41.0indirekt
Gogo.uber.org/multierrv1.11.0indirekt
Gogo.uber.org/zapv1.27.1indirekt
Gogo.yaml.in/yaml/v2v2.4.3indirekt
Gogo.yaml.in/yaml/v3v3.0.4indirekt
Gogolang.org/x/cryptov0.52.0indirekt
Gogolang.org/x/modv0.35.0indirekt
Gogolang.org/x/netv0.55.0indirekt
Gogolang.org/x/oauth2v0.34.0indirekt
Gogolang.org/x/syncv0.20.0indirekt
Gogolang.org/x/sysv0.45.0indirekt
Gogolang.org/x/termv0.43.0indirekt
Gogolang.org/x/textv0.37.0indirekt
Gogolang.org/x/timev0.14.0indirekt
Gogolang.org/x/toolsv0.44.0indirekt
Gogomodules.xyz/jsonpatch/v2v2.5.0indirekt
Gogoogle.golang.org/genproto/googleapis/rpcv0.0.0-20260203192932-546029d2fa20indirekt
Gogoogle.golang.org/grpcv1.79.3indirekt
Gogoogle.golang.org/protobufv1.36.11indirekt
Gogopkg.in/evanphx/json-patch.v4v4.13.0indirekt
Gogopkg.in/inf.v0v0.9.1indirekt
Gogopkg.in/yaml.v2v2.4.0indirekt
Gogopkg.in/yaml.v3v3.0.1indirekt
Gok8s.io/apiextensions-apiserverv0.35.0indirekt
Gok8s.io/client-gov0.35.0indirekt
Gok8s.io/code-generatorv0.35.0indirekt
Gok8s.io/component-basev0.35.0indirekt
Gok8s.io/gengo/v2v2.0.0-20251215205346-5ee0d033ba5bindirekt
Gok8s.io/klog/v2v2.130.1indirekt
Gok8s.io/kube-openapiv0.0.0-20260127142750-a19766b6e2d4indirekt
Gosigs.k8s.io/jsonv0.0.0-20250730193827-2d320260d730indirekt
Gosigs.k8s.io/randfillv1.0.0indirekt
Gosigs.k8s.io/structured-merge-diff/v6v6.3.2-0.20260122202528-d9cc6641c482indirekt
Gosigs.k8s.io/yamlv1.6.0indirekt
Abhängigkeits-Advisories 6

Dieses Repository veröffentlicht kein vom Index auflösbares Paket, daher wurde sein eigener Abhängigkeitsgraph bewertet – 115 Pakete, darunter auch Entwicklungs- und Test-Pins, die nie ausgeliefert werden: 6 tragen bekannte Advisories, davon 0 direkte.

PaketVersionBeziehungSchweregradAdvisoriesBehoben in
google.golang.org/grpcv1.79.3indirektkritisch21.82.1
github.com/yuin/goldmarkv1.4.13indirektunbekannt11.7.17
go.opentelemetry.io/otelv1.41.0indirektunbekannt11.44.0
golang.org/x/cryptov0.52.0indirektunbekannt1
golang.org/x/netv0.55.0indirektunbekannt10.56.0
golang.org/x/textv0.37.0indirektunbekannt10.39.0

Ein Advisory bedeutet, dass die im Abhängigkeitsgraphen erfasste Version in den betroffenen Bereich eines Advisories fällt. Erreichbarkeit wird nicht analysiert, und der Graph enthält Entwicklungs- und Test-Pins — ein Fund kann das Werkzeug betreffen und nicht die ausgelieferte Software.

JSON-Rohbericht maschinenlesbar
{
  "data": {
    "repo": {
      "topics": [
        "crossplane",
        "crossplane-provider",
        "sql"
      ],
      "is_fork": false,
      "size_kb": 1612,
      "has_wiki": true,
      "homepage": "https://marketplace.upbound.io/providers/crossplane-contrib/provider-sql/",
      "languages": {
        "Go": 1223131,
        "Shell": 40324,
        "Makefile": 8992,
        "Dockerfile": 270
      },
      "pushed_at": "2026-07-28T10:33:37Z",
      "created_at": "2020-10-05T04:45:23Z",
      "owner_type": "Organization",
      "updated_at": "2026-07-28T10:33:53Z",
      "description": "An SQL provider for @crossplane",
      "is_archived": false,
      "is_disabled": false,
      "license_spdx": "Apache-2.0",
      "default_branch": "master",
      "license_spdx_raw": "Apache-2.0",
      "primary_language": "Go",
      "significant_languages": [
        "Go"
      ]
    },
    "owner": {
      "blog": "https://crossplane.io",
      "name": "Crossplane Contrib",
      "type": "Organization",
      "login": "crossplane-contrib",
      "company": null,
      "location": null,
      "followers": 274,
      "avatar_url": "https://avatars.githubusercontent.com/u/65389701?v=4",
      "created_at": "2020-05-15T07:13:38Z",
      "is_verified": null,
      "public_repos": 140,
      "account_age_days": 2266
    },
    "license": {
      "state": "standard",
      "spdx_id": "Apache-2.0",
      "raw_spdx": "Apache-2.0",
      "file_present": true,
      "scorecard_found": true,
      "profile_has_license": true
    },
    "activity": {
      "releases": [
        {
          "tag": "v0.16.0-beta.1",
          "kind": "prerelease",
          "published_at": "2026-07-27T11:16:04Z"
        },
        {
          "tag": "v0.16.0",
          "kind": "minor",
          "published_at": "2026-07-20T10:28:27Z"
        },
        {
          "tag": "v0.16.0-beta.0",
          "kind": "prerelease",
          "published_at": "2026-05-18T10:37:41Z"
        },
        {
          "tag": "v0.15.0",
          "kind": "minor",
          "published_at": "2026-05-14T19:14:00Z"
        },
        {
          "tag": "v0.14.0",
          "kind": "minor",
          "published_at": "2026-02-14T12:14:52Z"
        },
        {
          "tag": "v0.13.0",
          "kind": "minor",
          "published_at": "2025-10-27T19:03:36Z"
        },
        {
          "tag": "v0.13.0-rc.0",
          "kind": "prerelease",
          "published_at": "2025-10-22T18:03:36Z"
        },
        {
          "tag": "v0.12.0",
          "kind": "minor",
          "published_at": "2025-05-27T18:40:24Z"
        },
        {
          "tag": "v0.11.0",
          "kind": "minor",
          "published_at": "2025-01-15T09:44:27Z"
        },
        {
          "tag": "v0.10.0",
          "kind": "minor",
          "published_at": "2024-12-13T14:38:35Z"
        },
        {
          "tag": "v0.9.0",
          "kind": "minor",
          "published_at": "2024-01-24T19:59:02Z"
        },
        {
          "tag": "v0.8.0",
          "kind": "minor",
          "published_at": "2024-01-24T19:57:12Z"
        },
        {
          "tag": "v0.7.0",
          "kind": "minor",
          "published_at": "2023-03-23T09:48:05Z"
        },
        {
          "tag": "v0.6.0",
          "kind": "minor",
          "published_at": "2022-11-22T14:00:51Z"
        },
        {
          "tag": "v0.5.0",
          "kind": "minor",
          "published_at": "2022-05-19T12:13:55Z"
        },
        {
          "tag": "v0.4.1",
          "kind": "patch",
          "published_at": "2022-03-22T07:40:59Z"
        },
        {
          "tag": "v0.4.0",
          "kind": "minor",
          "published_at": "2022-03-21T08:30:31Z"
        },
        {
          "tag": "v0.3.0",
          "kind": "minor",
          "published_at": "2021-11-26T21:23:33Z"
        },
        {
          "tag": "v0.2.1",
          "kind": "patch",
          "published_at": "2021-08-27T10:12:23Z"
        },
        {
          "tag": "v0.2.0",
          "kind": "minor",
          "published_at": "2021-05-12T22:44:17Z"
        }
      ],
      "recent_commits": [
        {
          "oid": "985277d98fb9f0ce663c9ca5766c611032e069b0",
          "body": "The MSSQL `User` controller forced `CREATE LOGIN` on every `Create`, so\na second `User` sharing a server-level login (in a different database)\nfailed with \"server principal already exists\". This change makes login\ncreation idempotent so one login can back USERs across multiple\ndatabases.\n\nFor tradit\n[…]\niled. Delete guards `DROP LOGIN` behind the same existence check,\nso a sibling (or orphaned) login already being gone doesn't hard-fail.\n\nFixes #288\n\nSigned-off-by: Cristian Greco <cristian@regolo.cc>",
          "is_bot": false,
          "headline": "fix: allow multiple users to share the same login (#411)",
          "author_name": "Cristian Greco",
          "author_login": "cristiangreco",
          "committed_at": "2026-07-28T10:33:37Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "b46be88014cdc0c96755a106fe6bd8e64a6a16a0",
          "body": "…s-in-marketplance\n\nchore: add provider extensions",
          "is_bot": false,
          "headline": "Merge pull request #420 from crossplane-contrib/419-missing-extension…",
          "author_name": "J. Fernández",
          "author_login": "fernandezcuesta",
          "committed_at": "2026-07-20T13:51:58Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "936d69d6a3e7228a574e94ba9cf594eb5ae6a42e",
          "body": "Signed-off-by: Jesús Fernández <7312236+fernandezcuesta@users.noreply.github.com>",
          "is_bot": false,
          "headline": "chore: add provider extensions",
          "author_name": "Jesús Fernández",
          "author_login": "fernandezcuesta",
          "committed_at": "2026-07-20T10:57:36Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "29aa23afa2cf981fcc35625ff7221c7c45765e21",
          "body": "…ster/images/provider-sql/distroless/static-f7f8f72\n\nchore: bump distroless/static from `963fa6c` to `f7f8f72` in /cluster/images/provider-sql",
          "is_bot": false,
          "headline": "Merge pull request #413 from crossplane-contrib/dependabot/docker/clu…",
          "author_name": "J. Fernández",
          "author_login": "fernandezcuesta",
          "committed_at": "2026-07-20T10:10:13Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "be0bb83193f1d219496cd6f20be6cad30fe2ceed",
          "body": "…QL-password-for-role-after-restoration\n\nfeat(postgresql): auto-regenerate role password on restore and support rotation trigger",
          "is_bot": false,
          "headline": "Merge pull request #348 from JevgeniF/issue-227-generate-new-postgreS…",
          "author_name": "J. Fernández",
          "author_login": "fernandezcuesta",
          "committed_at": "2026-07-20T08:17:20Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "af3cd075b155d3a6a23bf5544206fe90d4b065ab",
          "body": "…-for-role-after-restoration",
          "is_bot": false,
          "headline": "Merge branch 'master' into issue-227-generate-new-postgreSQL-password…",
          "author_name": "J. Fernández",
          "author_login": "fernandezcuesta",
          "committed_at": "2026-07-20T08:05:16Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "c639f124cbbf4c91caa2bc7e31a96ae7bc62b6aa",
          "body": "feat(mysql/user): support non-default authentication plugins for IAM auth",
          "is_bot": false,
          "headline": "Merge pull request #363 from ronlevy1211/feat/mysql-iam-auth",
          "author_name": "J. Fernández",
          "author_login": "fernandezcuesta",
          "committed_at": "2026-07-20T07:57:12Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "254e67ef23c4cb53b7deb57a7cf4a0901d97c0a1",
          "body": null,
          "is_bot": false,
          "headline": "Merge branch 'master' into feat/mysql-iam-auth",
          "author_name": "ronlevy1211",
          "author_login": "ronlevy1211",
          "committed_at": "2026-07-19T20:03:47Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "d2ba201eab37cda411095e1c7a7ee8a3bc2685a8",
          "body": "…ions/docker/setup-buildx-action-4.2.0\n\nchore: bump docker/setup-buildx-action from 4.1.0 to 4.2.0",
          "is_bot": false,
          "headline": "Merge pull request #414 from crossplane-contrib/dependabot/github_act…",
          "author_name": "J. Fernández",
          "author_login": "fernandezcuesta",
          "committed_at": "2026-07-19T07:51:25Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "219d37518d41bae3c35c8a0c224c5dc1d0d0e54f",
          "body": "…-for-role-after-restoration",
          "is_bot": false,
          "headline": "Merge branch 'master' into issue-227-generate-new-postgreSQL-password…",
          "author_name": "J. Fernández",
          "author_login": "fernandezcuesta",
          "committed_at": "2026-07-19T07:41:43Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "35a113e3290bed5fcb09db2ba36a89813070c377",
          "body": "…ldx-action-4.2.0",
          "is_bot": false,
          "headline": "Merge branch 'master' into dependabot/github_actions/docker/setup-bui…",
          "author_name": "J. Fernández",
          "author_login": "fernandezcuesta",
          "committed_at": "2026-07-19T07:39:30Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "7f7a054aab60a99ecc5030c8aaec18851451eb1f",
          "body": "…ions/actions/setup-go-7.0.0\n\nchore: bump actions/setup-go from 6.5.0 to 7.0.0",
          "is_bot": false,
          "headline": "Merge pull request #418 from crossplane-contrib/dependabot/github_act…",
          "author_name": "J. Fernández",
          "author_login": "fernandezcuesta",
          "committed_at": "2026-07-19T07:39:21Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "e42e245ad86e65e3f0819fff3d35b38833e1f703",
          "body": "…ions/docker/setup-qemu-action-4.2.0\n\nchore: bump docker/setup-qemu-action from 4.1.0 to 4.2.0",
          "is_bot": false,
          "headline": "Merge pull request #416 from crossplane-contrib/dependabot/github_act…",
          "author_name": "J. Fernández",
          "author_login": "fernandezcuesta",
          "committed_at": "2026-07-19T07:39:18Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "91efda77b6dec0904476a5681990803b72341f75",
          "body": "…ldx-action-4.2.0",
          "is_bot": false,
          "headline": "Merge branch 'master' into dependabot/github_actions/docker/setup-bui…",
          "author_name": "J. Fernández",
          "author_login": "fernandezcuesta",
          "committed_at": "2026-07-19T07:39:09Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "37651653e07fbfb9d7c76a4be90511ecfde16217",
          "body": "…ions/actions/cache-6.1.0\n\nchore: bump actions/cache from 5.0.5 to 6.1.0",
          "is_bot": false,
          "headline": "Merge pull request #415 from crossplane-contrib/dependabot/github_act…",
          "author_name": "J. Fernández",
          "author_login": "fernandezcuesta",
          "committed_at": "2026-07-19T07:38:50Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "bf5323b600f2d00087e6e9b7469d5c4b439d7776",
          "body": "…ions/docker/login-action-4.4.0\n\nchore: bump docker/login-action from 4.1.0 to 4.4.0",
          "is_bot": false,
          "headline": "Merge pull request #417 from crossplane-contrib/dependabot/github_act…",
          "author_name": "J. Fernández",
          "author_login": "fernandezcuesta",
          "committed_at": "2026-07-19T07:38:48Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "d43db76858df999f568c292cd7f43830bc3185e3",
          "body": "Bumps [actions/setup-go](https://github.com/actions/setup-go) from 6.5.0 to 7.0.0.\n- [Release notes](https://github.com/actions/setup-go/releases)\n- [Commits](https://github.com/actions/setup-go/compare/924ae3a1cded613372ab5595356fb5720e22ba16...b7ad1dad31e06c5925ef5d2fc7ad053ef454303e)\n\n---\nupdated\n[…]\n- dependency-name: actions/setup-go\n  dependency-version: 7.0.0\n  dependency-type: direct:production\n  update-type: version-update:semver-major\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "chore: bump actions/setup-go from 6.5.0 to 7.0.0",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-07-19T07:27:24Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "8807ceeba91615458dc5f38a735666e682347d17",
          "body": "Bumps [docker/login-action](https://github.com/docker/login-action) from 4.1.0 to 4.4.0.\n- [Release notes](https://github.com/docker/login-action/releases)\n- [Commits](https://github.com/docker/login-action/compare/4907a6ddec9925e35a0a9e82d7399ccc52663121...af1e73f918a031802d376d3c8bbc3fe56130a9b0)\n\n[…]\nependency-name: docker/login-action\n  dependency-version: 4.4.0\n  dependency-type: direct:production\n  update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "chore: bump docker/login-action from 4.1.0 to 4.4.0",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-07-19T07:27:19Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "0b8966bb1648bde58bf1f8d92086462e30f467e7",
          "body": "Bumps [docker/setup-qemu-action](https://github.com/docker/setup-qemu-action) from 4.1.0 to 4.2.0.\n- [Release notes](https://github.com/docker/setup-qemu-action/releases)\n- [Commits](https://github.com/docker/setup-qemu-action/compare/06116385d9baf250c9f4dcb4858b16962ea869c3...96fe6ef7f33517b61c61be\n[…]\nency-name: docker/setup-qemu-action\n  dependency-version: 4.2.0\n  dependency-type: direct:production\n  update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "chore: bump docker/setup-qemu-action from 4.1.0 to 4.2.0",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-07-19T07:27:16Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "e8e1e9f6000acd5108d99d347371709b188578e4",
          "body": "Bumps [actions/cache](https://github.com/actions/cache) from 5.0.5 to 6.1.0.\n- [Release notes](https://github.com/actions/cache/releases)\n- [Changelog](https://github.com/actions/cache/blob/main/RELEASES.md)\n- [Commits](https://github.com/actions/cache/compare/27d5ce7f107fe9357f9df03efb73ab90386fcca\n[…]\ns:\n- dependency-name: actions/cache\n  dependency-version: 6.1.0\n  dependency-type: direct:production\n  update-type: version-update:semver-major\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "chore: bump actions/cache from 5.0.5 to 6.1.0",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-07-19T07:27:11Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "5025f5a2aca5832ecc4381bda62fb13ad1f414da",
          "body": "Bumps [docker/setup-buildx-action](https://github.com/docker/setup-buildx-action) from 4.1.0 to 4.2.0.\n- [Release notes](https://github.com/docker/setup-buildx-action/releases)\n- [Commits](https://github.com/docker/setup-buildx-action/compare/d7f5e7f509e45cec5c76c4d5afdd7de93d0b3df5...bb05f3f5519dd8\n[…]\ncy-name: docker/setup-buildx-action\n  dependency-version: 4.2.0\n  dependency-type: direct:production\n  update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "chore: bump docker/setup-buildx-action from 4.1.0 to 4.2.0",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-07-19T07:27:05Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "d687e4b49045df91058be372d477cafc737dd6db",
          "body": "Bumps distroless/static from `963fa6c` to `f7f8f72`.\n\n---\nupdated-dependencies:\n- dependency-name: distroless/static\n  dependency-version: nonroot\n  dependency-type: direct:production\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "chore: bump distroless/static in /cluster/images/provider-sql",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-07-19T07:26:48Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "699502173964485ab2f5c1f22881103ed10d7b70",
          "body": "chore(build): codeql broken - sync versions to 4.37.1",
          "is_bot": false,
          "headline": "Merge pull request #412 from chlunde/codeql-sync",
          "author_name": "J. Fernández",
          "author_login": "fernandezcuesta",
          "committed_at": "2026-07-19T07:26:11Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "ff12ac0ed7f4cf7f6a169e3ef221cb5c393ef0c1",
          "body": null,
          "is_bot": false,
          "headline": "Merge branch 'master' into codeql-sync",
          "author_name": "J. Fernández",
          "author_login": "fernandezcuesta",
          "committed_at": "2026-07-19T07:14:29Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "7addde329901acd5306946a1e4c1eb2f9d2f7876",
          "body": "…efaultPrivileges (#379)\n\n* fix(postgresql): remove schema from DefaultPrivileges objectType enum\n\nSigned-off-by: AGejr <albert.gejr@gmail.com>\n\n* Revert \"fix(postgresql): remove schema from DefaultPrivileges objectType enum\"\n\nThis reverts commit 1a66e40c879f1e6747e1c286d756eaae6e227aa0.\n\nSigned-off\n[…]\nDefaultPrivileges\n\nSigned-off-by: AGejr <albert.gejr@gmail.com>\n\n---------\n\nSigned-off-by: AGejr <albert.gejr@gmail.com>\nCo-authored-by: J. Fernández <7312236+fernandezcuesta@users.noreply.github.com>",
          "is_bot": false,
          "headline": "fix(postgresql): make schema optional and conditionally required in D…",
          "author_name": "Albert Gejr",
          "author_login": "AGejr",
          "committed_at": "2026-07-18T18:28:06Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "505d2ececafa4c92d40e809a3ef31751c2c4ff19",
          "body": "…pen action PRs\n\nSigned-off-by: Carl Henrik Lunde <chlunde@ifi.uio.no>",
          "is_bot": false,
          "headline": "chore(dependabot): ensure codeql actions are in sync and dont limit o…",
          "author_name": "Carl Henrik Lunde",
          "author_login": "chlunde",
          "committed_at": "2026-07-18T18:05:03Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "2f566df5b7a4f81e2935151806e046975fd71799",
          "body": "Signed-off-by: Carl Henrik Lunde <chlunde@ifi.uio.no>",
          "is_bot": false,
          "headline": "chore(build): codeql broken - sync versions to 4.37.1",
          "author_name": "Carl Henrik Lunde",
          "author_login": "chlunde",
          "committed_at": "2026-07-18T17:56:50Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "a7628125c5fac43066e3d12b413638a38b796ab9",
          "body": "Bumps [golang.org/x/net](https://github.com/golang/net) from 0.54.0 to 0.55.0.\n- [Commits](https://github.com/golang/net/compare/v0.54.0...v0.55.0)\n\n---\nupdated-dependencies:\n- dependency-name: golang.org/x/net\n  dependency-version: 0.55.0\n  dependency-type: indirect\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore: bump golang.org/x/net from 0.54.0 to 0.55.0 (#407)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-07-18T16:24:30Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "75b4745868fbe5d7803a6100dd7817fe2e1bdd08",
          "body": null,
          "is_bot": false,
          "headline": "Merge branch 'master' into feat/mysql-iam-auth",
          "author_name": "J. Fernández",
          "author_login": "fernandezcuesta",
          "committed_at": "2026-07-17T16:17:01Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "e57fb1cd1ce6030595485ec877c7031efc1bd343",
          "body": "…-for-role-after-restoration",
          "is_bot": false,
          "headline": "Merge branch 'master' into issue-227-generate-new-postgreSQL-password…",
          "author_name": "J. Fernández",
          "author_login": "fernandezcuesta",
          "committed_at": "2026-07-17T16:12:22Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "0b9a0d1addbef23481994c1a54c22379ca003321",
          "body": "…ions/golangci/golangci-lint-action-9.3.0\n\nchore: bump golangci/golangci-lint-action from 9.2.1 to 9.3.0",
          "is_bot": false,
          "headline": "Merge pull request #402 from crossplane-contrib/dependabot/github_act…",
          "author_name": "J. Fernández",
          "author_login": "fernandezcuesta",
          "committed_at": "2026-07-17T16:10:22Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "a686fbe39c78c1aced914529a98f5a35adba8dc0",
          "body": "…d infinite reconcile\n\nObserve() unconditionally treated password plugins (caching_sha2_password,\nmysql_native_password, sha256_password) as \"no plugin\", so when the spec\nexplicitly requested one the observed AuthenticationPlugin stayed nil and\nupToDate() could never converge. The User then reconcil\n[…]\nser reconcilers, each with a\nregression test that reproduces the infinite reconcile.\n\nSigned-off-by: ronlevy <rlevy@fireblocks.com>\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix(mysql/user): hydrate observed plugin for password plugins to avoi…",
          "author_name": "ronlevy",
          "author_login": "ronlevy1211",
          "committed_at": "2026-07-14T06:25:11Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "e412ffdbe42f7d2b5942b31fcfc304a2b2d18df2",
          "body": null,
          "is_bot": false,
          "headline": "Merge branch 'master' into feat/mysql-iam-auth",
          "author_name": "ronlevy1211",
          "author_login": "ronlevy1211",
          "committed_at": "2026-07-14T05:51:18Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "9665c434424129d54f2bc265f5921fa3dab29581",
          "body": "Bumps [golang.org/x/crypto](https://github.com/golang/crypto) from 0.50.0 to 0.52.0.\n- [Commits](https://github.com/golang/crypto/compare/v0.50.0...v0.52.0)\n\n---\nupdated-dependencies:\n- dependency-name: golang.org/x/crypto\n  dependency-version: 0.52.0\n  dependency-type: indirect\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore: bump golang.org/x/crypto from 0.50.0 to 0.52.0 (#408)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-07-09T16:04:22Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "d557e3b1df99f17f5a5c0c4d97a7153f7e62a55b",
          "body": "…or-postgres-database-1\n\nfix: add missing ownerRef+ownerSelector field",
          "is_bot": false,
          "headline": "Merge pull request #377 from crossplane-contrib/372-support-roleref-f…",
          "author_name": "J. Fernández",
          "author_login": "fernandezcuesta",
          "committed_at": "2026-07-09T15:17:23Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "32918fc9bfea3cc7777ebe37e68b7ca171382270",
          "body": null,
          "is_bot": false,
          "headline": "Merge branch 'master' into 372-support-roleref-for-postgres-database-1",
          "author_name": "J. Fernández",
          "author_login": "fernandezcuesta",
          "committed_at": "2026-07-09T15:04:37Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "a76bde9446e13719cfee548bc2aefd47230c5550",
          "body": "…tance\n\nfeat(postgresql): support WITH INHERIT FALSE on role membership grants (PostgreSQL 16+)",
          "is_bot": false,
          "headline": "Merge pull request #361 from matthewgreenwaldagility/feat/psql-inheri…",
          "author_name": "J. Fernández",
          "author_login": "fernandezcuesta",
          "committed_at": "2026-07-09T14:54:42Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "a61926829fd27b35b624d97c14f3aa5904c48b00",
          "body": null,
          "is_bot": false,
          "headline": "Merge branch 'master' into 372-support-roleref-for-postgres-database-1",
          "author_name": "J. Fernández",
          "author_login": "fernandezcuesta",
          "committed_at": "2026-07-09T14:44:54Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "185499fe0428d7bfd196795cd625a2f9328c8e00",
          "body": "Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com>\nSigned-off-by: Jesús Fernández <7312236+fernandezcuesta@users.noreply.github.com>",
          "is_bot": false,
          "headline": "Apply suggestions from code review",
          "author_name": "J. Fernández",
          "author_login": "fernandezcuesta",
          "committed_at": "2026-07-09T14:44:32Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "12f39325f889550d0ccfdfcc50d655da205a5270",
          "body": "Signed-off-by: Jesús Fernández <7312236+fernandezcuesta@users.noreply.github.com>",
          "is_bot": false,
          "headline": "fix: do not set selector/ref as immutable",
          "author_name": "Jesús Fernández",
          "author_login": "fernandezcuesta",
          "committed_at": "2026-07-09T14:43:06Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "27bb57ed51c28c7916a79c68d978286beb14f9bd",
          "body": "Signed-off-by: Jevgeni Fenko <jevgeni.fenko@gmail.com>",
          "is_bot": false,
          "headline": "code review suggestions and test fixes",
          "author_name": "Jevgeni Fenko",
          "author_login": "JevgeniF",
          "committed_at": "2026-07-09T08:59:22Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "ab87bea269ed579c2e350c3aeda9a569d4661c49",
          "body": "Co-authored-by: J. Fernández <7312236+fernandezcuesta@users.noreply.github.com>\nSigned-off-by: Jevgeni Fenko <jevgeni.fenko@gmail.com>",
          "is_bot": false,
          "headline": "Update pkg/controller/cluster/postgresql/role/utils.go",
          "author_name": "Jevgeni",
          "author_login": "JevgeniF",
          "committed_at": "2026-07-09T08:59:22Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "0ebda031dc4fe96b58663b87f8f016d81e511893",
          "body": "Co-authored-by: J. Fernández <7312236+fernandezcuesta@users.noreply.github.com>\nSigned-off-by: Jevgeni Fenko <jevgeni.fenko@gmail.com>",
          "is_bot": false,
          "headline": "Update pkg/controller/cluster/postgresql/role/utils.go",
          "author_name": "Jevgeni",
          "author_login": "JevgeniF",
          "committed_at": "2026-07-09T08:59:22Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "a30e415559243474dffc140658a5df18972fc502",
          "body": null,
          "is_bot": false,
          "headline": "Merge branch 'master' into feat/psql-inheritance",
          "author_name": "J. Fernández",
          "author_login": "fernandezcuesta",
          "committed_at": "2026-07-09T07:27:42Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "b0fd0dad529c6629be01792bdd765d4660d086d0",
          "body": "…ions/github/codeql-action/analyze-4.36.2\n\nchore: bump github/codeql-action/analyze from 4.36.0 to 4.36.2",
          "is_bot": false,
          "headline": "Merge pull request #401 from crossplane-contrib/dependabot/github_act…",
          "author_name": "J. Fernández",
          "author_login": "fernandezcuesta",
          "committed_at": "2026-07-09T06:18:34Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "f55394fda520d87a9772c1f35c8bfdd033216444",
          "body": "…i-lint-action-9.3.0",
          "is_bot": false,
          "headline": "Merge branch 'master' into dependabot/github_actions/golangci/golangc…",
          "author_name": "J. Fernández",
          "author_login": "fernandezcuesta",
          "committed_at": "2026-07-09T06:18:15Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "c6dbd795131384cc813be1af7d1a928b28328980",
          "body": null,
          "is_bot": false,
          "headline": "Merge branch 'master' into feat/psql-inheritance",
          "author_name": "Matthew Greenwald",
          "author_login": "matthewgreenwaldagility",
          "committed_at": "2026-07-08T18:07:12Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "91fbbece63ffebd7e2307857cc449d518366cefb",
          "body": "Signed-off-by: Matthew Greenwald <matthew.greenwald@agilityrobotics.com>",
          "is_bot": false,
          "headline": "test: add PG<16 withInherit error path tests; revert build submodule",
          "author_name": "Matthew Greenwald",
          "author_login": "matthewgreenwaldagility",
          "committed_at": "2026-07-08T18:05:50Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "fa831f83c66f127321a145e972e7056e8489c5fc",
          "body": "…-for-role-after-restoration",
          "is_bot": false,
          "headline": "Merge branch 'master' into issue-227-generate-new-postgreSQL-password…",
          "author_name": "Jevgeni",
          "author_login": "JevgeniF",
          "committed_at": "2026-07-06T08:02:28Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "ce9a59f97eb2bb9032df06b067e7133b769887f3",
          "body": "Signed-off-by: Jevgeni Fenko <jevgeni.fenko@gmail.com>",
          "is_bot": false,
          "headline": "fix: avoid silent ignore of errors in shouldResetPassword",
          "author_name": "Jevgeni Fenko",
          "author_login": "JevgeniF",
          "committed_at": "2026-07-06T07:57:59Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "294f8328cabd46f42f5853c335b76fcdda1c069d",
          "body": null,
          "is_bot": false,
          "headline": "Merge branch 'master' into feat/mysql-iam-auth",
          "author_name": "J. Fernández",
          "author_login": "fernandezcuesta",
          "committed_at": "2026-07-05T19:29:00Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "dbebae568438d7b80d7a5dc327f81004ddce1f39",
          "body": "…ions/codecov/codecov-action-7.0.0\n\nchore: bump codecov/codecov-action from 6.0.1 to 7.0.0",
          "is_bot": false,
          "headline": "Merge pull request #400 from crossplane-contrib/dependabot/github_act…",
          "author_name": "J. Fernández",
          "author_login": "fernandezcuesta",
          "committed_at": "2026-07-05T19:24:19Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "9116f1f27c2cbf99390c316f39134fae6c0abf8e",
          "body": "…ions/actions/checkout-7.0.0\n\nchore: bump actions/checkout from 6.0.2 to 7.0.0",
          "is_bot": false,
          "headline": "Merge pull request #403 from crossplane-contrib/dependabot/github_act…",
          "author_name": "J. Fernández",
          "author_login": "fernandezcuesta",
          "committed_at": "2026-07-05T19:23:42Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "5c39e2ed8434bc501f4e73fb2fe5846984cda878",
          "body": "…ions/actions/setup-go-6.5.0\n\nchore: bump actions/setup-go from 6.4.0 to 6.5.0",
          "is_bot": false,
          "headline": "Merge pull request #404 from crossplane-contrib/dependabot/github_act…",
          "author_name": "J. Fernández",
          "author_login": "fernandezcuesta",
          "committed_at": "2026-07-05T19:23:19Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "2fcc740a5110e90af9feee5b7be1673a5b01ae24",
          "body": "Bumps [actions/setup-go](https://github.com/actions/setup-go) from 6.4.0 to 6.5.0.\n- [Release notes](https://github.com/actions/setup-go/releases)\n- [Commits](https://github.com/actions/setup-go/compare/4a3601121dd01d1626a1e23e37211e3254c1c06c...924ae3a1cded613372ab5595356fb5720e22ba16)\n\n---\nupdated\n[…]\n- dependency-name: actions/setup-go\n  dependency-version: 6.5.0\n  dependency-type: direct:production\n  update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "chore: bump actions/setup-go from 6.4.0 to 6.5.0",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-07-01T03:34:34Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "7a636dbe048bc2e891ce4abaa58f4de7ef20fa73",
          "body": "Bumps [actions/checkout](https://github.com/actions/checkout) from 6.0.2 to 7.0.0.\n- [Release notes](https://github.com/actions/checkout/releases)\n- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)\n- [Commits](https://github.com/actions/checkout/compare/de0fac2e4500dabe0009e67\n[…]\n- dependency-name: actions/checkout\n  dependency-version: 7.0.0\n  dependency-type: direct:production\n  update-type: version-update:semver-major\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "chore: bump actions/checkout from 6.0.2 to 7.0.0",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-07-01T03:34:31Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "ca35d018acb7854bec53f15795ee678527c2948b",
          "body": "Bumps [golangci/golangci-lint-action](https://github.com/golangci/golangci-lint-action) from 9.2.1 to 9.3.0.\n- [Release notes](https://github.com/golangci/golangci-lint-action/releases)\n- [Commits](https://github.com/golangci/golangci-lint-action/compare/82606bf257cbaff209d206a39f5134f0cfbfd2ee...ba\n[…]\nname: golangci/golangci-lint-action\n  dependency-version: 9.3.0\n  dependency-type: direct:production\n  update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "chore: bump golangci/golangci-lint-action from 9.2.1 to 9.3.0",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-07-01T03:34:27Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "98c58bf2d64045ba4c947d80a78d5e3615180571",
          "body": "Bumps [github/codeql-action/analyze](https://github.com/github/codeql-action) from 4.36.0 to 4.36.2.\n- [Release notes](https://github.com/github/codeql-action/releases)\n- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)\n- [Commits](https://github.com/github/codeql-action/c\n[…]\nname: github/codeql-action/analyze\n  dependency-version: 4.36.2\n  dependency-type: direct:production\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "chore: bump github/codeql-action/analyze from 4.36.0 to 4.36.2",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-07-01T03:34:25Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "90ce80664825ba4ca5fca5fc1d65701d55e25741",
          "body": "Bumps [codecov/codecov-action](https://github.com/codecov/codecov-action) from 6.0.1 to 7.0.0.\n- [Release notes](https://github.com/codecov/codecov-action/releases)\n- [Changelog](https://github.com/codecov/codecov-action/blob/main/CHANGELOG.md)\n- [Commits](https://github.com/codecov/codecov-action/c\n[…]\nndency-name: codecov/codecov-action\n  dependency-version: 7.0.0\n  dependency-type: direct:production\n  update-type: version-update:semver-major\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "chore: bump codecov/codecov-action from 6.0.1 to 7.0.0",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-07-01T03:34:17Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "31ce2b305c91ddac79ba4064d85fd22ba6401b4e",
          "body": "…-for-role-after-restoration",
          "is_bot": false,
          "headline": "Merge branch 'master' into issue-227-generate-new-postgreSQL-password…",
          "author_name": "Jevgeni",
          "author_login": "JevgeniF",
          "committed_at": "2026-06-15T13:30:49Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "cbfc64a276560888bc11b8476af3b126292e0bef",
          "body": null,
          "is_bot": false,
          "headline": "Merge branch 'master' into 372-support-roleref-for-postgres-database-1",
          "author_name": "J. Fernández",
          "author_login": "fernandezcuesta",
          "committed_at": "2026-06-08T19:10:22Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "ee979cfdf62ad8375e12ab17f153848059fe2d14",
          "body": null,
          "is_bot": false,
          "headline": "Merge branch 'master' into feat/mysql-iam-auth",
          "author_name": "ronlevy1211",
          "author_login": "ronlevy1211",
          "committed_at": "2026-06-08T07:35:01Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "ba992159ea669bc4559cfe937ac1f05ca6727173",
          "body": null,
          "is_bot": false,
          "headline": "Merge branch 'master' into feat/psql-inheritance",
          "author_name": "Matthew Greenwald",
          "author_login": "matthewgreenwaldagility",
          "committed_at": "2026-06-04T14:27:11Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "f42e34d893b8712518d3399da76d436243271a06",
          "body": "Bumps [github.com/go-sql-driver/mysql](https://github.com/go-sql-driver/mysql) from 1.9.3 to 1.10.0.\n- [Release notes](https://github.com/go-sql-driver/mysql/releases)\n- [Changelog](https://github.com/go-sql-driver/mysql/blob/master/CHANGELOG.md)\n- [Commits](https://github.com/go-sql-driver/mysql/co\n[…]\nirect:production\n  update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore: bump github.com/go-sql-driver/mysql from 1.9.3 to 1.10.0 (#383)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-06-01T07:00:15Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "c94aa27b7a2a9ce9bd166baee4e7feccba2cdf65",
          "body": "Bumps [docker/setup-qemu-action](https://github.com/docker/setup-qemu-action) from 4.0.0 to 4.1.0.\n- [Release notes](https://github.com/docker/setup-qemu-action/releases)\n- [Commits](https://github.com/docker/setup-qemu-action/compare/ce360397dd3f832beb865e1373c09c0e9f86d70a...06116385d9baf250c9f4dc\n[…]\nirect:production\n  update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore: bump docker/setup-qemu-action from 4.0.0 to 4.1.0 (#384)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-06-01T06:59:58Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "3676bf3b80dfd6d8a4db5e375e49ba6908d61cc6",
          "body": "Bumps [codecov/codecov-action](https://github.com/codecov/codecov-action) from 6.0.0 to 6.0.1.\n- [Release notes](https://github.com/codecov/codecov-action/releases)\n- [Changelog](https://github.com/codecov/codecov-action/blob/main/CHANGELOG.md)\n- [Commits](https://github.com/codecov/codecov-action/c\n[…]\nirect:production\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore: bump codecov/codecov-action from 6.0.0 to 6.0.1 (#385)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-06-01T06:49:55Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "7ce0411aed765b48d9c233da9bc52241a9e2445c",
          "body": "Bumps distroless/static from `e3f9456` to `963fa6c`.\n\n---\nupdated-dependencies:\n- dependency-name: distroless/static\n  dependency-version: nonroot\n  dependency-type: direct:production\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore: bump distroless/static in /cluster/images/provider-sql (#389)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-06-01T06:49:02Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "79f930e981581dfdb7ea6df1d882aa3683b7421b",
          "body": "Bumps [golangci/golangci-lint-action](https://github.com/golangci/golangci-lint-action) from 9.2.0 to 9.2.1.\n- [Release notes](https://github.com/golangci/golangci-lint-action/releases)\n- [Commits](https://github.com/golangci/golangci-lint-action/compare/1e7e51e771db61008b38414a730f564565cf7c20...82\n[…]\nirect:production\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore: bump golangci/golangci-lint-action from 9.2.0 to 9.2.1 (#386)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-06-01T06:43:46Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "6b2f021b654205695f0972e5ecc7cdcadc960e35",
          "body": "Bumps [github/codeql-action](https://github.com/github/codeql-action) from 4.35.4 to 4.36.0.\n- [Release notes](https://github.com/github/codeql-action/releases)\n- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)\n- [Commits](https://github.com/github/codeql-action/compare/6\n[…]\nirect:production\n  update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore: bump github/codeql-action from 4.35.4 to 4.36.0 (#387)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-06-01T06:43:31Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "321f8fbcd82f5c7c28eb763a90536f32ba0c596a",
          "body": "Bumps [docker/setup-buildx-action](https://github.com/docker/setup-buildx-action) from 4.0.0 to 4.1.0.\n- [Release notes](https://github.com/docker/setup-buildx-action/releases)\n- [Commits](https://github.com/docker/setup-buildx-action/compare/4d04d5d9486b7bd6fa91e7baf45bbb4f8b9deedd...d7f5e7f509e45c\n[…]\nirect:production\n  update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore: bump docker/setup-buildx-action from 4.0.0 to 4.1.0 (#388)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-06-01T06:42:39Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "c1ea143cd018716cf0083074a0d8bf38374c92be",
          "body": "Signed-off-by: Matthew Greenwald <matthew.greenwald@agilityrobotics.com>",
          "is_bot": false,
          "headline": "addressing comments and rebasing from master",
          "author_name": "Matthew Greenwald",
          "author_login": "matthewgreenwaldagility",
          "committed_at": "2026-05-28T14:36:17Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "fda19470ed9143b9d7f76732a2559a7e9b57c4cb",
          "body": "Signed-off-by: Matthew Greenwald <matthew.greenwald@agilityrobotics.com>",
          "is_bot": false,
          "headline": "docs: updating docs for other contributors",
          "author_name": "Matthew Greenwald",
          "author_login": "matthewgreenwaldagility",
          "committed_at": "2026-05-28T13:22:43Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "b24c089ad9217b29e55d02ba144670d894e95b38",
          "body": "Signed-off-by: Matthew Greenwald <matthew.greenwald@agilityrobotics.com>",
          "is_bot": false,
          "headline": "feat: adding support for psql inherit",
          "author_name": "Matthew Greenwald",
          "author_login": "matthewgreenwaldagility",
          "committed_at": "2026-05-28T13:22:43Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "746612c9b5f7b1fc7dba3edac5d146e799d7bc04",
          "body": "Signed-off-by: Jesús Fernández <7312236+fernandezcuesta@users.noreply.github.com>",
          "is_bot": false,
          "headline": "chore: add tests",
          "author_name": "Jesús Fernández",
          "author_login": "fernandezcuesta",
          "committed_at": "2026-05-18T20:23:24Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "16dd8cf340a70059a4479af6ce14266280459c73",
          "body": "Signed-off-by: Jesús Fernández <7312236+fernandezcuesta@users.noreply.github.com>",
          "is_bot": false,
          "headline": "fix: add missing ownerRef and ownerSelector fields",
          "author_name": "Jesús Fernández",
          "author_login": "fernandezcuesta",
          "committed_at": "2026-05-18T20:15:44Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "a3aedb16f7689a244c1df3d3166b378ee6f64a42",
          "body": "CI on the post-master-merge HEAD failed on two checks:\n\n- lint (gocyclo) — the Update function in both cluster and namespaced\n  reconcilers had cyclomatic complexity 11 (limit 10). Extracted the\n  resource-options drift branch into a small updateResourceOptions\n  helper. Behavior unchanged: same ALT\n[…]\nit was not yet\n  reflected in the generated CRDs. Ran `make generate` so the\n  rendered schema matches the typed Go source.\n\nTests pass on both packages.\n\nSigned-off-by: ronlevy <rlevy@fireblocks.com>",
          "is_bot": false,
          "headline": "fix(mysql/user): keep Update under gocyclo limit + regen CRDs",
          "author_name": "ronlevy",
          "author_login": "ronlevy1211",
          "committed_at": "2026-05-18T05:50:11Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "be673c47fe6a2c49d563db1f97163d24282ef96a",
          "body": null,
          "is_bot": false,
          "headline": "Merge branch 'master' into feat/mysql-iam-auth",
          "author_name": "ronlevy1211",
          "author_login": "ronlevy1211",
          "committed_at": "2026-05-17T06:37:14Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "12cd32253a438c5830cb8857e5d55a44c619a027",
          "body": "Address @chlunde's review on #363: Observe didn't read the user's\nactual `plugin` from mysql.user, and Update silently ignored\nauthenticationPlugin changes. Crossplane managed resources should\nreconcile every field the upstream system supports.\n\nChanges:\n\n  Observe — extend the SELECT to also fetch \n[…]\nerent AS clause)\n  - existing AuthenticationPluginSkipsAlterPassword updated to set\n    observed == desired and now asserts no IDENTIFIED WITH OR BY runs\n\nSigned-off-by: ronlevy <rlevy@fireblocks.com>",
          "is_bot": false,
          "headline": "feat(mysql/user): plugin drift detection and Update support",
          "author_name": "ronlevy",
          "author_login": "ronlevy1211",
          "committed_at": "2026-05-17T06:25:14Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "271b3c90544a4c0b7ad33b5260fb25c4dda3da73",
          "body": "…-format\n\nfeat: add support for alternative connection secret formats",
          "is_bot": false,
          "headline": "Merge pull request #362 from crossplane-contrib/feat/customize-secret…",
          "author_name": "J. Fernández",
          "author_login": "fernandezcuesta",
          "committed_at": "2026-05-15T08:37:16Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "3661f4018c9e3fa500fc6bf7189809195b7c182e",
          "body": "Signed-off-by: Jesús Fernández <7312236+fernandezcuesta@users.noreply.github.com>",
          "is_bot": false,
          "headline": "fix: kube version in make",
          "author_name": "Jesús Fernández",
          "author_login": "fernandezcuesta",
          "committed_at": "2026-05-15T08:25:03Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "7472ea931120f0f9826d3730516ccba55c69ec51",
          "body": "…-for-role-after-restoration",
          "is_bot": false,
          "headline": "Merge branch 'master' into issue-227-generate-new-postgreSQL-password…",
          "author_name": "J. Fernández",
          "author_login": "fernandezcuesta",
          "committed_at": "2026-05-15T08:18:51Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "40e834d8cb2aaaf0bb3a83959c4c039af16f9bd9",
          "body": "Signed-off-by: Jesús Fernández <7312236+fernandezcuesta@users.noreply.github.com>",
          "is_bot": false,
          "headline": "chore(docs)",
          "author_name": "Jesús Fernández",
          "author_login": "fernandezcuesta",
          "committed_at": "2026-05-15T08:16:01Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "693937e55c358ee28a06e1d129e28cf7f344b500",
          "body": "Signed-off-by: Jesús Fernández <7312236+fernandezcuesta@users.noreply.github.com>",
          "is_bot": false,
          "headline": "chore: move secret key mapping example",
          "author_name": "Jesús Fernández",
          "author_login": "fernandezcuesta",
          "committed_at": "2026-05-15T08:14:15Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "8784f434b6349934c1cf59c20a19f7375c8e5010",
          "body": null,
          "is_bot": false,
          "headline": "Merge branch 'master' into feat/customize-secret-format",
          "author_name": "Jesús Fernández",
          "author_login": "fernandezcuesta",
          "committed_at": "2026-05-15T07:57:43Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "a539437c4adbd866ff275bb595b51e316fbe2265",
          "body": "Signed-off-by: Jesús Fernández <7312236+fernandezcuesta@users.noreply.github.com>",
          "is_bot": false,
          "headline": "chore(docs): add examples",
          "author_name": "Jesús Fernández",
          "author_login": "fernandezcuesta",
          "committed_at": "2026-05-15T07:54:47Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "0d38b4d1173e0b907b4260f7a22a91d4cdb4c2c4",
          "body": "The difference between TLS and non-TLS doesn't make it worth running\nboth on e2e. We already try both in cluster vs namespaced mode.\n\nSigned-off-by: Carl Henrik Lunde <chlunde@ifi.uio.no>",
          "is_bot": false,
          "headline": "chore: e2e: remove redundant mariadb e2e tests (#373)",
          "author_name": "Carl Henrik Lunde",
          "author_login": "chlunde",
          "committed_at": "2026-05-15T07:43:46Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "586a8252865edf026aa9d6977b39ccbf71baae82",
          "body": "feat(pgsql): extend Grant kind specification with schema, tables, columns, sequences, routines, foreign data wrappers, foreign servers",
          "is_bot": false,
          "headline": "Merge pull request #345 from crossplane-contrib/follow-up-235",
          "author_name": "J. Fernández",
          "author_login": "fernandezcuesta",
          "committed_at": "2026-05-15T07:43:15Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "5502d7ba48541a7ff3a5bc935972794b06ed76e4",
          "body": "Signed-off-by: Jesús Fernández <7312236+fernandezcuesta@users.noreply.github.com>",
          "is_bot": false,
          "headline": "Merge branch 'master' into feat/customize-secret-format",
          "author_name": "Jesús Fernández",
          "author_login": "fernandezcuesta",
          "committed_at": "2026-05-15T07:38:15Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "d945277d344273090db9756249dcae276c3e1742",
          "body": null,
          "is_bot": false,
          "headline": "Merge branch 'master' into follow-up-235",
          "author_name": "Jesús Fernández",
          "author_login": "fernandezcuesta",
          "committed_at": "2026-05-15T07:28:43Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "95daf7c4d99820d6fc38cf35c59f6fc3e9f5543d",
          "body": "Signed-off-by: Jesús Fernández <7312236+fernandezcuesta@users.noreply.github.com>",
          "is_bot": false,
          "headline": "fix: typo",
          "author_name": "Jesús Fernández",
          "author_login": "fernandezcuesta",
          "committed_at": "2026-05-15T07:24:29Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "e2427cb6f1c7f7607c39eaf183b9ab56f1e85919",
          "body": "Signed-off-by: Jesús Fernández <7312236+fernandezcuesta@users.noreply.github.com>",
          "is_bot": false,
          "headline": "fix: move GetServerVersion call from Observe/Create into Connect",
          "author_name": "Jesús Fernández",
          "author_login": "fernandezcuesta",
          "committed_at": "2026-05-15T07:24:06Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "2c0ee25c751d73347846bf0e6bfa4ef57320b1e7",
          "body": "Co-authored-by: Carl Henrik Lunde <chlunde@gmail.com>",
          "is_bot": false,
          "headline": "Apply suggestions from code review",
          "author_name": "J. Fernández",
          "author_login": "fernandezcuesta",
          "committed_at": "2026-05-15T07:16:43Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "d6134e47157d417a8749fcb6503b4631a8abfeac",
          "body": "…(#330)\n\n* feat(mysql): Allow to Grant permissions on specific columns in table\nmysql: add e2e tests to cover granting permission on table\n\nSigned-off-by: ymaniukevich <yauheni.maniukevich@gmail.com>\nSigned-off-by: Yauheni Maniukevich <yauheni.maniukevich@gmail.com>\n\n* Fix regexp for stricter syntax\n[…]\nd-off-by: Yauheni Maniukevich <yauheni.maniukevich@gmail.com>\n\n---------\n\nSigned-off-by: ymaniukevich <yauheni.maniukevich@gmail.com>\nSigned-off-by: Yauheni Maniukevich <yauheni.maniukevich@gmail.com>",
          "is_bot": false,
          "headline": "feat(mysql): Allow to Grant permissions on specific columns in table …",
          "author_name": "Yauheni",
          "author_login": "ymaniukevich",
          "committed_at": "2026-05-14T22:05:23Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "3aac97c71a4d8b2f4070717c0322065dd3adb8dc",
          "body": "…#343)\n\n* feat(postgres): Add support for setting STRATEGY during db creation\n\nAdd PostgreSQL Database strategy support for template-based database creation and make its lifecycle explicit in the API. The new strategy field is treated as create-time-only, and validated so updates do not silently dri\n[…]\nrodoulis <aldor94@gmail.com>\n\n* fix: correct kubebuilder validation rules\n\nSigned-off-by: Alexandros Dorodoulis <aldor94@gmail.com>\n\n---------\n\nSigned-off-by: Alexandros Dorodoulis <aldor94@gmail.com>",
          "is_bot": false,
          "headline": "feat(postgres): Add support for setting STRATEGY during db creation (…",
          "author_name": "Alexandros Dorodoulis",
          "author_login": "alexdor",
          "committed_at": "2026-05-14T20:47:08Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "ce2184fb9caf2dc8e2b85cb3fc84c68f19216e35",
          "body": "… 2.2.1 (#366)\n\n* chore: bump github.com/crossplane/crossplane-runtime/v2\n\nBumps [github.com/crossplane/crossplane-runtime/v2](https://github.com/crossplane/crossplane-runtime) from 2.1.0 to 2.2.1.\n- [Release notes](https://github.com/crossplane/crossplane-runtime/releases)\n- [Changelog](https://git\n[…]\nub.com>\nSigned-off-by: Carl Henrik Lunde <chlunde@ifi.uio.no>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>\nCo-authored-by: Carl Henrik Lunde <chlunde@ifi.uio.no>",
          "is_bot": true,
          "headline": "chore: bump github.com/crossplane/crossplane-runtime/v2 from 2.1.0 to…",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-05-14T20:21:52Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "e5cd72d18253447b1da949528b56fbe4467b52ce",
          "body": "* chore: bump github.com/lib/pq from 1.11.2 to 1.12.3\n\nBumps [github.com/lib/pq](https://github.com/lib/pq) from 1.11.2 to 1.12.3.\n- [Release notes](https://github.com/lib/pq/releases)\n- [Changelog](https://github.com/lib/pq/blob/master/CHANGELOG.md)\n- [Commits](https://github.com/lib/pq/compare/v1.\n[…]\nub.com>\nSigned-off-by: Carl Henrik Lunde <chlunde@ifi.uio.no>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>\nCo-authored-by: Carl Henrik Lunde <chlunde@ifi.uio.no>",
          "is_bot": true,
          "headline": "chore: bump github.com/lib/pq from 1.11.2 to 1.12.3 (#365)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-05-14T19:53:22Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "4eb5d8aa7dbbf2f5892beb4292887f53a2fbca7b",
          "body": "Bumps [go.opentelemetry.io/otel](https://github.com/open-telemetry/opentelemetry-go) from 1.39.0 to 1.41.0.\n- [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases)\n- [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md)\n- [Commits](https://gith\n[…]\nel\n  dependency-version: 1.41.0\n  dependency-type: indirect\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore: bump go.opentelemetry.io/otel from 1.39.0 to 1.41.0 (#360)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-05-14T19:43:29Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "a42cef5ea6aa405be4a2138664185423ae9e2902",
          "body": "Bumps distroless/static from `f512d81` to `e3f9456`.\n\n---\nupdated-dependencies:\n- dependency-name: distroless/static\n  dependency-version: nonroot\n  dependency-type: direct:production\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore: bump distroless/static in /cluster/images/provider-sql (#356)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-05-14T19:28:55Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "7f5b05b08d573e7cad9a815cf6c5be510e81d475",
          "body": "Bumps [github/codeql-action](https://github.com/github/codeql-action) from 4.35.1 to 4.35.4.\n- [Release notes](https://github.com/github/codeql-action/releases)\n- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)\n- [Commits](https://github.com/github/codeql-action/compare/c\n[…]\nirect:production\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore: bump github/codeql-action from 4.35.1 to 4.35.4 (#369)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-05-14T19:28:18Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "78d298968d7e522e5e7c5d12bd39af2a8bd22dd2",
          "body": "Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact) from 7.0.0 to 7.0.1.\n- [Release notes](https://github.com/actions/upload-artifact/releases)\n- [Commits](https://github.com/actions/upload-artifact/compare/bbbca2ddaa5d8feaa63e36b76fdaad77386f024f...043fb46d1a93c77aae656e7c1c\n[…]\nirect:production\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore: bump actions/upload-artifact from 7.0.0 to 7.0.1 (#368)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-05-14T19:25:36Z",
          "body_truncated": true,
          "is_coding_agent": false
        }
      ],
      "releases_count": 20,
      "commits_last_year": 218,
      "latest_release_at": "2026-07-27T11:16:04Z",
      "latest_release_tag": "v0.16.0-beta.1",
      "releases_from_tags": false,
      "days_since_last_push": 1,
      "active_weeks_last_year": 26,
      "days_since_latest_release": 2,
      "mean_days_between_releases": 65.7
    },
    "community": {
      "has_readme": true,
      "has_license": true,
      "has_description": true,
      "has_contributing": false,
      "health_percentage": 50,
      "has_issue_template": false,
      "has_code_of_conduct": false,
      "has_pull_request_template": true
    },
    "ecosystem": {
      "packages": [
        {
          "name": "github.com/crossplane-contrib/provider-sql",
          "exists": true,
          "license": null,
          "keywords": [],
          "ecosystem": "go",
          "matches_repo": true,
          "registry_url": "https://pkg.go.dev/github.com/crossplane-contrib/provider-sql",
          "is_deprecated": false,
          "latest_version": "v0.16.0",
          "repository_url": "https://github.com/crossplane-contrib/provider-sql",
          "versions_count": 25,
          "total_downloads": null,
          "dependents_count": null,
          "deprecation_note": null,
          "maintainers_count": null,
          "monthly_downloads": null,
          "first_published_at": null,
          "latest_published_at": "2026-07-20T10:10:13Z",
          "latest_version_yanked": null,
          "days_since_latest_publish": 9
        }
      ]
    },
    "popularity": {
      "forks": 112,
      "stars": 154,
      "watchers": 5,
      "fork_history": {
        "days": [
          {
            "date": "2020-11-18",
            "count": 1
          },
          {
            "date": "2020-12-12",
            "count": 1
          },
          {
            "date": "2020-12-18",
            "count": 1
          },
          {
            "date": "2021-03-08",
            "count": 1
          },
          {
            "date": "2021-03-31",
            "count": 1
          },
          {
            "date": "2021-04-12",
            "count": 1
          },
          {
            "date": "2021-04-16",
            "count": 1
          },
          {
            "date": "2021-04-22",
            "count": 1
          },
          {
            "date": "2021-05-10",
            "count": 1
          },
          {
            "date": "2021-05-14",
            "count": 1
          },
          {
            "date": "2022-01-22",
            "count": 1
          },
          {
            "date": "2022-02-04",
            "count": 1
          },
          {
            "date": "2022-02-28",
            "count": 1
          },
          {
            "date": "2022-03-22",
            "count": 1
          },
          {
            "date": "2022-03-24",
            "count": 1
          },
          {
            "date": "2022-04-07",
            "count": 1
          },
          {
            "date": "2022-04-08",
            "count": 2
          },
          {
            "date": "2022-04-11",
            "count": 1
          },
          {
            "date": "2022-05-12",
            "count": 1
          },
          {
            "date": "2022-07-16",
            "count": 1
          },
          {
            "date": "2022-10-25",
            "count": 1
          },
          {
            "date": "2022-10-30",
            "count": 1
          },
          {
            "date": "2022-11-10",
            "count": 1
          },
          {
            "date": "2022-11-14",
            "count": 1
          },
          {
            "date": "2022-11-23",
            "count": 1
          },
          {
            "date": "2022-12-01",
            "count": 1
          },
          {
            "date": "2022-12-11",
            "count": 1
          },
          {
            "date": "2022-12-20",
            "count": 1
          },
          {
            "date": "2023-02-02",
            "count": 1
          },
          {
            "date": "2023-03-29",
            "count": 1
          },
          {
            "date": "2023-04-17",
            "count": 1
          },
          {
            "date": "2023-05-17",
            "count": 1
          },
          {
            "date": "2023-07-26",
            "count": 1
          },
          {
            "date": "2023-07-27",
            "count": 1
          },
          {
            "date": "2023-08-09",
            "count": 1
          },
          {
            "date": "2023-08-24",
            "count": 1
          },
          {
            "date": "2023-08-31",
            "count": 1
          },
          {
            "date": "2023-09-14",
            "count": 1
          },
          {
            "date": "2023-11-10",
            "count": 1
          },
          {
            "date": "2023-11-26",
            "count": 1
          },
          {
            "date": "2023-12-04",
            "count": 1
          },
          {
            "date": "2023-12-20",
            "count": 1
          },
          {
            "date": "2024-01-04",
            "count": 1
          },
          {
            "date": "2024-02-08",
            "count": 1
          },
          {
            "date": "2024-02-13",
            "count": 1
          },
          {
            "date": "2024-04-05",
            "count": 1
          },
          {
            "date": "2024-04-10",
            "count": 1
          },
          {
            "date": "2024-04-26",
            "count": 1
          },
          {
            "date": "2024-05-28",
            "count": 1
          },
          {
            "date": "2024-06-17",
            "count": 1
          },
          {
            "date": "2024-06-22",
            "count": 1
          },
          {
            "date": "2024-06-29",
            "count": 1
          },
          {
            "date": "2024-07-01",
            "count": 1
          },
          {
            "date": "2024-07-04",
            "count": 1
          },
          {
            "date": "2024-09-19",
            "count": 1
          },
          {
            "date": "2024-09-24",
            "count": 1
          },
          {
            "date": "2024-10-11",
            "count": 1
          },
          {
            "date": "2024-10-12",
            "count": 1
          },
          {
            "date": "2024-10-15",
            "count": 1
          },
          {
            "date": "2024-10-18",
            "count": 1
          },
          {
            "date": "2024-10-25",
            "count": 1
          },
          {
            "date": "2024-10-26",
            "count": 1
          },
          {
            "date": "2024-12-28",
            "count": 1
          },
          {
            "date": "2025-02-16",
            "count": 1
          },
          {
            "date": "2025-04-17",
            "count": 1
          },
          {
            "date": "2025-05-07",
            "count": 1
          },
          {
            "date": "2025-05-27",
            "count": 1
          },
          {
            "date": "2025-06-03",
            "count": 1
          },
          {
            "date": "2025-06-20",
            "count": 1
          },
          {
            "date": "2025-07-18",
            "count": 1
          },
          {
            "date": "2025-07-22",
            "count": 1
          },
          {
            "date": "2025-08-12",
            "count": 1
          },
          {
            "date": "2025-08-19",
            "count": 2
          },
          {
            "date": "2025-08-22",
            "count": 1
          },
          {
            "date": "2025-10-06",
            "count": 2
          },
          {
            "date": "2025-10-09",
            "count": 1
          },
          {
            "date": "2025-10-10",
            "count": 1
          },
          {
            "date": "2025-10-15",
            "count": 1
          },
          {
            "date": "2025-11-28",
            "count": 1
          },
          {
            "date": "2025-12-04",
            "count": 1
          },
          {
            "date": "2025-12-05",
            "count": 1
          },
          {
            "date": "2025-12-12",
            "count": 1
          },
          {
            "date": "2025-12-29",
            "count": 1
          },
          {
            "date": "2026-01-28",
            "count": 1
          },
          {
            "date": "2026-02-02",
            "count": 1
          },
          {
            "date": "2026-02-10",
            "count": 1
          },
          {
            "date": "2026-02-17",
            "count": 1
          },
          {
            "date": "2026-02-23",
            "count": 1
          },
          {
            "date": "2026-02-26",
            "count": 1
          },
          {
            "date": "2026-03-12",
            "count": 1
          },
          {
            "date": "2026-03-18",
            "count": 1
          },
          {
            "date": "2026-03-19",
            "count": 1
          },
          {
            "date": "2026-03-20",
            "count": 1
          },
          {
            "date": "2026-03-21",
            "count": 1
          },
          {
            "date": "2026-04-01",
            "count": 1
          },
          {
            "date": "2026-04-09",
            "count": 1
          },
          {
            "date": "2026-04-24",
            "count": 1
          },
          {
            "date": "2026-04-30",
            "count": 1
          },
          {
            "date": "2026-05-19",
            "count": 1
          },
          {
            "date": "2026-05-22",
            "count": 1
          },
          {
            "date": "2026-05-28",
            "count": 1
          },
          {
            "date": "2026-06-03",
            "count": 1
          },
          {
            "date": "2026-06-04",
            "count": 1
          },
          {
            "date": "2026-06-12",
            "count": 1
          },
          {
            "date": "2026-06-18",
            "count": 1
          },
          {
            "date": "2026-07-01",
            "count": 1
          },
          {
            "date": "2026-07-16",
            "count": 1
          },
          {
            "date": "2026-07-27",
            "count": 1
          }
        ],
        "complete": true,
        "collected": 111,
        "total_forks": 112
      },
      "star_history": null,
      "open_issues_and_prs": 57
    },
    "ai_readiness": {
      "has_nix": false,
      "example_dirs": [
        "examples"
      ],
      "has_llms_txt": false,
      "has_dockerfile": true,
      "has_mcp_signal": false,
      "bootstrap_files": [
        "Makefile",
        "cluster/images/provider-sql/Makefile"
      ],
      "api_schema_files": [],
      "has_devcontainer": false,
      "typecheck_configs": [],
      "toolchain_manifests": [
        "go.mod"
      ],
      "largest_source_bytes": 46558,
      "source_files_sampled": 172,
      "oversized_source_files": 0,
      "agent_instruction_files": [],
      "agent_instruction_max_bytes": null
    },
    "dependencies": {
      "manifests": [
        "go.mod"
      ],
      "advisories": {
        "error": null,
        "scope": "repository_graph",
        "source": "osv",
        "findings": [
          {
            "name": "google.golang.org/grpc",
            "direct": false,
            "version": "v1.79.3",
            "severity": "critical",
            "ecosystem": "go",
            "cvss_score": 9.1,
            "advisory_ids": [
              "GHSA-hrxh-6v49-42gf",
              "GO-2026-6061"
            ],
            "fixed_version": "1.82.1",
            "advisory_count": 2,
            "oldest_advisory_days": 7
          },
          {
            "name": "github.com/yuin/goldmark",
            "direct": false,
            "version": "v1.4.13",
            "severity": "unknown",
            "ecosystem": "go",
            "cvss_score": null,
            "advisory_ids": [
              "GO-2026-5320"
            ],
            "fixed_version": "1.7.17",
            "advisory_count": 1,
            "oldest_advisory_days": 21
          },
          {
            "name": "go.opentelemetry.io/otel",
            "direct": false,
            "version": "v1.41.0",
            "severity": "unknown",
            "ecosystem": "go",
            "cvss_score": null,
            "advisory_ids": [
              "GO-2026-5158"
            ],
            "fixed_version": "1.44.0",
            "advisory_count": 1,
            "oldest_advisory_days": 4
          },
          {
            "name": "golang.org/x/crypto",
            "direct": false,
            "version": "v0.52.0",
            "severity": "unknown",
            "ecosystem": "go",
            "cvss_score": null,
            "advisory_ids": [
              "GO-2026-5932"
            ],
            "fixed_version": null,
            "advisory_count": 1,
            "oldest_advisory_days": 21
          },
          {
            "name": "golang.org/x/net",
            "direct": false,
            "version": "v0.55.0",
            "severity": "unknown",
            "ecosystem": "go",
            "cvss_score": null,
            "advisory_ids": [
              "GO-2026-5942"
            ],
            "fixed_version": "0.56.0",
            "advisory_count": 1,
            "oldest_advisory_days": 14
          },
          {
            "name": "golang.org/x/text",
            "direct": false,
            "version": "v0.37.0",
            "severity": "unknown",
            "ecosystem": "go",
            "cvss_score": null,
            "advisory_ids": [
              "GO-2026-5970"
            ],
            "fixed_version": "0.39.0",
            "advisory_count": 1,
            "oldest_advisory_days": 14
          }
        ],
        "collected": true,
        "malicious": [],
        "truncated": false,
        "by_severity": {
          "unknown": 5,
          "critical": 1
        },
        "advisory_count": 7,
        "affected_count": 6,
        "assessed_count": 115,
        "malicious_count": 0,
        "assessed_package": null,
        "unassessed_count": 0,
        "direct_affected_count": 0
      },
      "ecosystems": [
        "go"
      ],
      "dependencies": [
        {
          "name": "github.com/DATA-DOG/go-sqlmock",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.5.2"
        },
        {
          "name": "github.com/alecthomas/kingpin/v2",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v2.4.0"
        },
        {
          "name": "github.com/crossplane/crossplane-runtime/v2",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v2.2.1"
        },
        {
          "name": "github.com/crossplane/crossplane-tools",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.0.0-20250731192036-00d407d8b7ec"
        },
        {
          "name": "github.com/crossplane/upjet/v2",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v2.2.0"
        },
        {
          "name": "github.com/go-sql-driver/mysql",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.10.0"
        },
        {
          "name": "github.com/google/go-cmp",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.7.0"
        },
        {
          "name": "github.com/lib/pq",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.12.3"
        },
        {
          "name": "github.com/microsoft/go-mssqldb",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.10.0"
        },
        {
          "name": "github.com/pkg/errors",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.9.1"
        },
        {
          "name": "k8s.io/api",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.35.0"
        },
        {
          "name": "k8s.io/apimachinery",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.35.0"
        },
        {
          "name": "k8s.io/utils",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.0.0-20260108192941-914a6e750570"
        },
        {
          "name": "sigs.k8s.io/controller-runtime",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.23.1"
        },
        {
          "name": "sigs.k8s.io/controller-tools",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.20.0"
        }
      ],
      "all_dependencies": {
        "error": null,
        "source": "github-sbom",
        "packages": [
          {
            "name": "github.com/alecthomas/kingpin/v2",
            "direct": true,
            "version": "v2.4.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/crossplane/crossplane-runtime/v2",
            "direct": true,
            "version": "v2.2.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/crossplane/crossplane-tools",
            "direct": true,
            "version": "v0.0.0-20250731192036-00d407d8b7ec",
            "ecosystem": "go"
          },
          {
            "name": "github.com/crossplane/upjet/v2",
            "direct": true,
            "version": "v2.2.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/data-dog/go-sqlmock",
            "direct": true,
            "version": "v1.5.2",
            "ecosystem": "go"
          },
          {
            "name": "github.com/go-sql-driver/mysql",
            "direct": true,
            "version": "v1.10.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/google/go-cmp",
            "direct": true,
            "version": "v0.7.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/lib/pq",
            "direct": true,
            "version": "v1.12.3",
            "ecosystem": "go"
          },
          {
            "name": "github.com/microsoft/go-mssqldb",
            "direct": true,
            "version": "v1.10.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/pkg/errors",
            "direct": true,
            "version": "v0.9.1",
            "ecosystem": "go"
          },
          {
            "name": "k8s.io/api",
            "direct": true,
            "version": "v0.35.0",
            "ecosystem": "go"
          },
          {
            "name": "k8s.io/apimachinery",
            "direct": true,
            "version": "v0.35.0",
            "ecosystem": "go"
          },
          {
            "name": "k8s.io/utils",
            "direct": true,
            "version": "v0.0.0-20260108192941-914a6e750570",
            "ecosystem": "go"
          },
          {
            "name": "sigs.k8s.io/controller-runtime",
            "direct": true,
            "version": "v0.23.1",
            "ecosystem": "go"
          },
          {
            "name": "sigs.k8s.io/controller-tools",
            "direct": true,
            "version": "v0.20.0",
            "ecosystem": "go"
          },
          {
            "name": "dario.cat/mergo",
            "direct": false,
            "version": "v1.0.2",
            "ecosystem": "go"
          },
          {
            "name": "filippo.io/edwards25519",
            "direct": false,
            "version": "v1.2.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/agext/levenshtein",
            "direct": false,
            "version": "v1.2.3",
            "ecosystem": "go"
          },
          {
            "name": "github.com/alecthomas/units",
            "direct": false,
            "version": "v0.0.0-20240927000941-0f3dac36c52b",
            "ecosystem": "go"
          },
          {
            "name": "github.com/antchfx/htmlquery",
            "direct": false,
            "version": "v1.2.4",
            "ecosystem": "go"
          },
          {
            "name": "github.com/antchfx/xpath",
            "direct": false,
            "version": "v1.3.6",
            "ecosystem": "go"
          },
          {
            "name": "github.com/apparentlymart/go-textseg/v15",
            "direct": false,
            "version": "v15.0.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/beorn7/perks",
            "direct": false,
            "version": "v1.0.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/blang/semver/v4",
            "direct": false,
            "version": "v4.0.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/cenkalti/backoff/v5",
            "direct": false,
            "version": "v5.0.3",
            "ecosystem": "go"
          },
          {
            "name": "github.com/cespare/xxhash/v2",
            "direct": false,
            "version": "v2.3.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/dave/jennifer",
            "direct": false,
            "version": "v1.7.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/davecgh/go-spew",
            "direct": false,
            "version": "v1.1.2-0.20180830191138-d8f796af33cc",
            "ecosystem": "go"
          },
          {
            "name": "github.com/emicklei/go-restful/v3",
            "direct": false,
            "version": "v3.13.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/evanphx/json-patch",
            "direct": false,
            "version": "v5.9.11+incompatible",
            "ecosystem": "go"
          },
          {
            "name": "github.com/evanphx/json-patch/v5",
            "direct": false,
            "version": "v5.9.11",
            "ecosystem": "go"
          },
          {
            "name": "github.com/fatih/color",
            "direct": false,
            "version": "v1.18.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/fsnotify/fsnotify",
            "direct": false,
            "version": "v1.9.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/fxamacker/cbor/v2",
            "direct": false,
            "version": "v2.9.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/go-logr/logr",
            "direct": false,
            "version": "v1.4.3",
            "ecosystem": "go"
          },
          {
            "name": "github.com/go-logr/zapr",
            "direct": false,
            "version": "v1.3.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/go-openapi/jsonpointer",
            "direct": false,
            "version": "v0.22.4",
            "ecosystem": "go"
          },
          {
            "name": "github.com/go-openapi/jsonreference",
            "direct": false,
            "version": "v0.21.4",
            "ecosystem": "go"
          },
          {
            "name": "github.com/go-openapi/swag",
            "direct": false,
            "version": "v0.25.4",
            "ecosystem": "go"
          },
          {
            "name": "github.com/go-openapi/swag/cmdutils",
            "direct": false,
            "version": "v0.25.4",
            "ecosystem": "go"
          },
          {
            "name": "github.com/go-openapi/swag/conv",
            "direct": false,
            "version": "v0.25.4",
            "ecosystem": "go"
          },
          {
            "name": "github.com/go-openapi/swag/fileutils",
            "direct": false,
            "version": "v0.25.4",
            "ecosystem": "go"
          },
          {
            "name": "github.com/go-openapi/swag/jsonname",
            "direct": false,
            "version": "v0.25.4",
            "ecosystem": "go"
          },
          {
            "name": "github.com/go-openapi/swag/jsonutils",
            "direct": false,
            "version": "v0.25.4",
            "ecosystem": "go"
          },
          {
            "name": "github.com/go-openapi/swag/loading",
            "direct": false,
            "version": "v0.25.4",
            "ecosystem": "go"
          },
          {
            "name": "github.com/go-openapi/swag/mangling",
            "direct": false,
            "version": "v0.25.4",
            "ecosystem": "go"
          },
          {
            "name": "github.com/go-openapi/swag/netutils",
            "direct": false,
            "version": "v0.25.4",
            "ecosystem": "go"
          },
          {
            "name": "github.com/go-openapi/swag/stringutils",
            "direct": false,
            "version": "v0.25.4",
            "ecosystem": "go"
          },
          {
            "name": "github.com/go-openapi/swag/typeutils",
            "direct": false,
            "version": "v0.25.4",
            "ecosystem": "go"
          },
          {
            "name": "github.com/go-openapi/swag/yamlutils",
            "direct": false,
            "version": "v0.25.4",
            "ecosystem": "go"
          },
          {
            "name": "github.com/gobuffalo/flect",
            "direct": false,
            "version": "v1.0.3",
            "ecosystem": "go"
          },
          {
            "name": "github.com/golang-sql/civil",
            "direct": false,
            "version": "v0.0.0-20220223132316-b832511892a9",
            "ecosystem": "go"
          },
          {
            "name": "github.com/golang-sql/sqlexp",
            "direct": false,
            "version": "v0.1.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/golang/groupcache",
            "direct": false,
            "version": "v0.0.0-20210331224755-41bb18bfe9da",
            "ecosystem": "go"
          },
          {
            "name": "github.com/google/btree",
            "direct": false,
            "version": "v1.1.3",
            "ecosystem": "go"
          },
          {
            "name": "github.com/google/gnostic-models",
            "direct": false,
            "version": "v0.7.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/google/uuid",
            "direct": false,
            "version": "v1.6.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/hashicorp/hcl/v2",
            "direct": false,
            "version": "v2.23.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/inconshreveable/mousetrap",
            "direct": false,
            "version": "v1.1.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/json-iterator/go",
            "direct": false,
            "version": "v1.1.12",
            "ecosystem": "go"
          },
          {
            "name": "github.com/mattn/go-colorable",
            "direct": false,
            "version": "v0.1.14",
            "ecosystem": "go"
          },
          {
            "name": "github.com/mattn/go-isatty",
            "direct": false,
            "version": "v0.0.20",
            "ecosystem": "go"
          },
          {
            "name": "github.com/mitchellh/go-wordwrap",
            "direct": false,
            "version": "v1.0.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/modern-go/concurrent",
            "direct": false,
            "version": "v0.0.0-20180306012644-bacd9c7ef1dd",
            "ecosystem": "go"
          },
          {
            "name": "github.com/modern-go/reflect2",
            "direct": false,
            "version": "v1.0.3-0.20250322232337-35a7c28c31ee",
            "ecosystem": "go"
          },
          {
            "name": "github.com/munnerz/goautoneg",
            "direct": false,
            "version": "v0.0.0-20191010083416-a7dc8b61c822",
            "ecosystem": "go"
          },
          {
            "name": "github.com/pmezard/go-difflib",
            "direct": false,
            "version": "v1.0.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/prometheus/client_golang",
            "direct": false,
            "version": "v1.23.2",
            "ecosystem": "go"
          },
          {
            "name": "github.com/prometheus/client_model",
            "direct": false,
            "version": "v0.6.2",
            "ecosystem": "go"
          },
          {
            "name": "github.com/prometheus/common",
            "direct": false,
            "version": "v0.67.5",
            "ecosystem": "go"
          },
          {
            "name": "github.com/prometheus/procfs",
            "direct": false,
            "version": "v0.19.2",
            "ecosystem": "go"
          },
          {
            "name": "github.com/shopspring/decimal",
            "direct": false,
            "version": "v1.4.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/spf13/afero",
            "direct": false,
            "version": "v1.15.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/spf13/cobra",
            "direct": false,
            "version": "v1.10.2",
            "ecosystem": "go"
          },
          {
            "name": "github.com/spf13/pflag",
            "direct": false,
            "version": "v1.0.10",
            "ecosystem": "go"
          },
          {
            "name": "github.com/tmccombs/hcl2json",
            "direct": false,
            "version": "v0.3.3",
            "ecosystem": "go"
          },
          {
            "name": "github.com/x448/float16",
            "direct": false,
            "version": "v0.8.4",
            "ecosystem": "go"
          },
          {
            "name": "github.com/xhit/go-str2duration/v2",
            "direct": false,
            "version": "v2.1.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/yuin/goldmark",
            "direct": false,
            "version": "v1.4.13",
            "ecosystem": "go"
          },
          {
            "name": "github.com/zclconf/go-cty",
            "direct": false,
            "version": "v1.16.2",
            "ecosystem": "go"
          },
          {
            "name": "go.opentelemetry.io/otel",
            "direct": false,
            "version": "v1.41.0",
            "ecosystem": "go"
          },
          {
            "name": "go.opentelemetry.io/otel/trace",
            "direct": false,
            "version": "v1.41.0",
            "ecosystem": "go"
          },
          {
            "name": "go.uber.org/multierr",
            "direct": false,
            "version": "v1.11.0",
            "ecosystem": "go"
          },
          {
            "name": "go.uber.org/zap",
            "direct": false,
            "version": "v1.27.1",
            "ecosystem": "go"
          },
          {
            "name": "go.yaml.in/yaml/v2",
            "direct": false,
            "version": "v2.4.3",
            "ecosystem": "go"
          },
          {
            "name": "go.yaml.in/yaml/v3",
            "direct": false,
            "version": "v3.0.4",
            "ecosystem": "go"
          },
          {
            "name": "golang.org/x/crypto",
            "direct": false,
            "version": "v0.52.0",
            "ecosystem": "go"
          },
          {
            "name": "golang.org/x/mod",
            "direct": false,
            "version": "v0.35.0",
            "ecosystem": "go"
          },
          {
            "name": "golang.org/x/net",
            "direct": false,
            "version": "v0.55.0",
            "ecosystem": "go"
          },
          {
            "name": "golang.org/x/oauth2",
            "direct": false,
            "version": "v0.34.0",
            "ecosystem": "go"
          },
          {
            "name": "golang.org/x/sync",
            "direct": false,
            "version": "v0.20.0",
            "ecosystem": "go"
          },
          {
            "name": "golang.org/x/sys",
            "direct": false,
            "version": "v0.45.0",
            "ecosystem": "go"
          },
          {
            "name": "golang.org/x/term",
            "direct": false,
            "version": "v0.43.0",
            "ecosystem": "go"
          },
          {
            "name": "golang.org/x/text",
            "direct": false,
            "version": "v0.37.0",
            "ecosystem": "go"
          },
          {
            "name": "golang.org/x/time",
            "direct": false,
            "version": "v0.14.0",
            "ecosystem": "go"
          },
          {
            "name": "golang.org/x/tools",
            "direct": false,
            "version": "v0.44.0",
            "ecosystem": "go"
          },
          {
            "name": "gomodules.xyz/jsonpatch/v2",
            "direct": false,
            "version": "v2.5.0",
            "ecosystem": "go"
          },
          {
            "name": "google.golang.org/genproto/googleapis/rpc",
            "direct": false,
            "version": "v0.0.0-20260203192932-546029d2fa20",
            "ecosystem": "go"
          },
          {
            "name": "google.golang.org/grpc",
            "direct": false,
            "version": "v1.79.3",
            "ecosystem": "go"
          },
          {
            "name": "google.golang.org/protobuf",
            "direct": false,
            "version": "v1.36.11",
            "ecosystem": "go"
          },
          {
            "name": "gopkg.in/evanphx/json-patch.v4",
            "direct": false,
            "version": "v4.13.0",
            "ecosystem": "go"
          },
          {
            "name": "gopkg.in/inf.v0",
            "direct": false,
            "version": "v0.9.1",
            "ecosystem": "go"
          },
          {
            "name": "gopkg.in/yaml.v2",
            "direct": false,
            "version": "v2.4.0",
            "ecosystem": "go"
          },
          {
            "name": "gopkg.in/yaml.v3",
            "direct": false,
            "version": "v3.0.1",
            "ecosystem": "go"
          },
          {
            "name": "k8s.io/apiextensions-apiserver",
            "direct": false,
            "version": "v0.35.0",
            "ecosystem": "go"
          },
          {
            "name": "k8s.io/client-go",
            "direct": false,
            "version": "v0.35.0",
            "ecosystem": "go"
          },
          {
            "name": "k8s.io/code-generator",
            "direct": false,
            "version": "v0.35.0",
            "ecosystem": "go"
          },
          {
            "name": "k8s.io/component-base",
            "direct": false,
            "version": "v0.35.0",
            "ecosystem": "go"
          },
          {
            "name": "k8s.io/gengo/v2",
            "direct": false,
            "version": "v2.0.0-20251215205346-5ee0d033ba5b",
            "ecosystem": "go"
          },
          {
            "name": "k8s.io/klog/v2",
            "direct": false,
            "version": "v2.130.1",
            "ecosystem": "go"
          },
          {
            "name": "k8s.io/kube-openapi",
            "direct": false,
            "version": "v0.0.0-20260127142750-a19766b6e2d4",
            "ecosystem": "go"
          },
          {
            "name": "sigs.k8s.io/json",
            "direct": false,
            "version": "v0.0.0-20250730193827-2d320260d730",
            "ecosystem": "go"
          },
          {
            "name": "sigs.k8s.io/randfill",
            "direct": false,
            "version": "v1.0.0",
            "ecosystem": "go"
          },
          {
            "name": "sigs.k8s.io/structured-merge-diff/v6",
            "direct": false,
            "version": "v6.3.2-0.20260122202528-d9cc6641c482",
            "ecosystem": "go"
          },
          {
            "name": "sigs.k8s.io/yaml",
            "direct": false,
            "version": "v1.6.0",
            "ecosystem": "go"
          }
        ],
        "collected": true,
        "truncated": false,
        "total_count": 115,
        "direct_count": 15,
        "indirect_count": 100
      }
    },
    "maintainership": {
      "issues": {
        "open_prs": 20,
        "merged_prs": 206,
        "open_issues": 37,
        "closed_ratio": 0.736,
        "closed_issues": 103,
        "closed_unmerged_prs": 57
      },
      "bus_factor": 4,
      "bot_contributors": 1,
      "top_contributors": [
        {
          "type": "User",
          "login": "fernandezcuesta",
          "commits": 85,
          "avatar_url": "https://avatars.githubusercontent.com/u/7312236?v=4"
        },
        {
          "type": "User",
          "login": "Duologic",
          "commits": 40,
          "avatar_url": "https://avatars.githubusercontent.com/u/3349855?v=4"
        },
        {
          "type": "User",
          "login": "negz",
          "commits": 31,
          "avatar_url": "https://avatars.githubusercontent.com/u/1049349?v=4"
        },
        {
          "type": "User",
          "login": "chlunde",
          "commits": 30,
          "avatar_url": "https://avatars.githubusercontent.com/u/131994?v=4"
        },
        {
          "type": "User",
          "login": "srueg",
          "commits": 29,
          "avatar_url": "https://avatars.githubusercontent.com/u/1105286?v=4"
        },
        {
          "type": "User",
          "login": "turkenh",
          "commits": 21,
          "avatar_url": "https://avatars.githubusercontent.com/u/9900707?v=4"
        },
        {
          "type": "User",
          "login": "JevgeniF",
          "commits": 14,
          "avatar_url": "https://avatars.githubusercontent.com/u/92082732?v=4"
        },
        {
          "type": "User",
          "login": "petteja",
          "commits": 12,
          "avatar_url": "https://avatars.githubusercontent.com/u/3305362?v=4"
        },
        {
          "type": "User",
          "login": "jdotw",
          "commits": 12,
          "avatar_url": "https://avatars.githubusercontent.com/u/222656?v=4"
        },
        {
          "type": "User",
          "login": "Sabotaz",
          "commits": 11,
          "avatar_url": "https://avatars.githubusercontent.com/u/187283?v=4"
        }
      ],
      "contributors_sampled": 46,
      "top_contributor_share": 0.235
    },
    "quality_signals": {
      "has_ci": true,
      "has_tests": true,
      "ci_workflows": [
        "ci.yml",
        "codeql.yml",
        "publish-provider-package.yml",
        "tag.yml"
      ],
      "has_docs_dir": false,
      "linter_configs": [
        ".golangci.yml"
      ],
      "has_editorconfig": false,
      "has_linter_config": true,
      "has_precommit_config": false
    },
    "security_signals": {
      "lockfiles": [
        "go.sum"
      ],
      "scorecard": {
        "checks": [
          {
            "name": "Binary-Artifacts",
            "score": 10,
            "reason": "no binaries found in the repo",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#binary-artifacts"
          },
          {
            "name": "Branch-Protection",
            "score": null,
            "reason": "internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#branch-protection"
          },
          {
            "name": "CI-Tests",
            "score": 10,
            "reason": "13 out of 13 merged PRs checked by a CI test -- score normalized to 10",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#ci-tests"
          },
          {
            "name": "CII-Best-Practices",
            "score": 0,
            "reason": "no effort to earn an OpenSSF best practices badge detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#cii-best-practices"
          },
          {
            "name": "Code-Review",
            "score": 10,
            "reason": "all changesets reviewed",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#code-review"
          },
          {
            "name": "Contributors",
            "score": 10,
            "reason": "project has 15 contributing companies or organizations",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#contributors"
          },
          {
            "name": "Dangerous-Workflow",
            "score": 10,
            "reason": "no dangerous workflow patterns detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dangerous-workflow"
          },
          {
            "name": "Dependency-Update-Tool",
            "score": 10,
            "reason": "update tool detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dependency-update-tool"
          },
          {
            "name": "Fuzzing",
            "score": 0,
            "reason": "project is not fuzzed",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#fuzzing"
          },
          {
            "name": "License",
            "score": 10,
            "reason": "license file detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#license"
          },
          {
            "name": "Maintained",
            "score": 10,
            "reason": "30 commit(s) and 8 issue activity found in the last 90 days -- score normalized to 10",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#maintained"
          },
          {
            "name": "Packaging",
            "score": null,
            "reason": "packaging workflow not detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#packaging"
          },
          {
            "name": "Pinned-Dependencies",
            "score": 10,
            "reason": "all dependencies are pinned",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#pinned-dependencies"
          },
          {
            "name": "SAST",
            "score": 7,
            "reason": "SAST tool detected but not run on all commits",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#sast"
          },
          {
            "name": "Security-Policy",
            "score": 0,
            "reason": "security policy file not detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#security-policy"
          },
          {
            "name": "Signed-Releases",
            "score": null,
            "reason": "no releases found",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#signed-releases"
          },
          {
            "name": "Token-Permissions",
            "score": 0,
            "reason": "detected GitHub workflow tokens with excessive permissions",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#token-permissions"
          },
          {
            "name": "Vulnerabilities",
            "score": 4,
            "reason": "6 existing vulnerabilities detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#vulnerabilities"
          }
        ],
        "commit": "985277d98fb9f0ce663c9ca5766c611032e069b0",
        "ran_at": "2026-07-29T12:52:18Z",
        "aggregate_score": 6.9,
        "scorecard_version": "v5.5.0"
      },
      "has_codeql_workflow": true,
      "has_security_policy": false,
      "has_dependabot_config": true
    },
    "contribution_flow": {
      "collected": true,
      "ci_last_run_at": "2026-07-28T10:46:08Z",
      "oldest_open_prs": [
        {
          "number": 133,
          "created_at": "2023-03-06T18:21:32Z",
          "last_comment_at": "2025-11-06T14:55:53Z",
          "last_comment_author": "mlubanski"
        },
        {
          "number": 166,
          "created_at": "2023-12-04T16:38:23Z",
          "last_comment_at": "2025-03-11T13:23:34Z",
          "last_comment_author": "bak-fts"
        },
        {
          "number": 237,
          "created_at": "2025-05-23T16:30:22Z",
          "last_comment_at": "2025-05-27T18:48:31Z",
          "last_comment_author": "chlunde"
        },
        {
          "number": 238,
          "created_at": "2025-05-27T09:03:14Z",
          "last_comment_at": "2025-06-03T14:44:38Z",
          "last_comment_author": "zregvart"
        },
        {
          "number": 239,
          "created_at": "2025-05-30T13:41:07Z",
          "last_comment_at": "2025-05-30T14:02:54Z",
          "last_comment_author": "chlunde"
        },
        {
          "number": 287,
          "created_at": "2025-11-27T07:32:07Z",
          "last_comment_at": "2026-05-28T23:48:09Z",
          "last_comment_author": "terwey"
        },
        {
          "number": 357,
          "created_at": "2026-04-09T20:37:03Z",
          "last_comment_at": "2026-05-15T08:50:21Z",
          "last_comment_author": "fernandezcuesta"
        },
        {
          "number": 376,
          "created_at": "2026-05-18T20:07:11Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 381,
          "created_at": "2026-05-27T22:41:54Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 382,
          "created_at": "2026-06-01T06:28:30Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 391,
          "created_at": "2026-06-02T15:58:47Z",
          "last_comment_at": "2026-06-02T22:36:02Z",
          "last_comment_author": "fernandezcuesta"
        },
        {
          "number": 394,
          "created_at": "2026-06-04T07:55:53Z",
          "last_comment_at": "2026-06-04T09:07:21Z",
          "last_comment_author": "fernandezcuesta"
        },
        {
          "number": 396,
          "created_at": "2026-06-20T04:19:59Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 399,
          "created_at": "2026-07-01T03:34:17Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 405,
          "created_at": "2026-07-01T13:30:04Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 421,
          "created_at": "2026-07-20T12:46:27Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 423,
          "created_at": "2026-07-22T08:04:17Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 424,
          "created_at": "2026-07-22T19:00:17Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 425,
          "created_at": "2026-07-23T07:40:01Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 426,
          "created_at": "2026-07-25T02:53:40Z",
          "last_comment_at": null,
          "last_comment_author": null
        }
      ],
      "last_merged_pr_at": "2026-07-28T10:33:37Z",
      "ci_last_conclusion": "SUCCESS",
      "oldest_open_issues": [
        {
          "number": 51,
          "created_at": "2021-08-30T17:36:29Z",
          "last_comment_at": "2025-02-18T08:25:17Z",
          "last_comment_author": "chlunde"
        },
        {
          "number": 72,
          "created_at": "2022-03-18T11:08:23Z",
          "last_comment_at": "2025-02-20T17:00:39Z",
          "last_comment_author": "Bastichou"
        },
        {
          "number": 76,
          "created_at": "2022-03-22T17:02:51Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 77,
          "created_at": "2022-03-23T07:52:55Z",
          "last_comment_at": "2022-11-10T08:51:43Z",
          "last_comment_author": "mateusz-lubanski-sinch"
        },
        {
          "number": 89,
          "created_at": "2022-05-09T06:43:36Z",
          "last_comment_at": "2025-06-03T07:05:05Z",
          "last_comment_author": "chlunde"
        },
        {
          "number": 90,
          "created_at": "2022-05-11T08:42:31Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 110,
          "created_at": "2022-10-27T20:52:01Z",
          "last_comment_at": "2025-04-23T11:29:55Z",
          "last_comment_author": "chlunde"
        },
        {
          "number": 125,
          "created_at": "2023-01-27T14:29:11Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 162,
          "created_at": "2023-11-22T11:44:10Z",
          "last_comment_at": "2023-11-22T18:17:02Z",
          "last_comment_author": "luis-alen"
        },
        {
          "number": 165,
          "created_at": "2023-12-04T16:32:11Z",
          "last_comment_at": "2024-04-08T13:58:48Z",
          "last_comment_author": "markphillips100"
        },
        {
          "number": 176,
          "created_at": "2024-05-16T14:37:55Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 194,
          "created_at": "2024-09-25T20:15:16Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 195,
          "created_at": "2024-09-25T20:39:53Z",
          "last_comment_at": "2025-05-27T19:51:21Z",
          "last_comment_author": "chlunde"
        },
        {
          "number": 196,
          "created_at": "2024-10-10T13:37:03Z",
          "last_comment_at": "2025-06-16T19:44:28Z",
          "last_comment_author": "chlunde"
        },
        {
          "number": 211,
          "created_at": "2025-02-04T13:05:17Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 213,
          "created_at": "2025-02-11T20:33:37Z",
          "last_comment_at": "2025-05-08T20:27:49Z",
          "last_comment_author": "chlunde"
        },
        {
          "number": 217,
          "created_at": "2025-02-20T16:59:40Z",
          "last_comment_at": "2025-08-05T15:07:37Z",
          "last_comment_author": "tomitesh"
        },
        {
          "number": 220,
          "created_at": "2025-03-04T10:09:53Z",
          "last_comment_at": "2025-05-27T20:22:07Z",
          "last_comment_author": "chlunde"
        },
        {
          "number": 240,
          "created_at": "2025-05-30T18:31:53Z",
          "last_comment_at": "2026-06-05T07:33:55Z",
          "last_comment_author": "niralmehtasb1"
        },
        {
          "number": 242,
          "created_at": "2025-06-04T07:06:48Z",
          "last_comment_at": "2025-06-15T19:35:09Z",
          "last_comment_author": "chlunde"
        }
      ]
    }
  },
  "config": {
    "disabled_metrics": [],
    "disabled_categories": [],
    "disabled_components": {}
  },
  "source": {
    "url": "https://github.com/crossplane-contrib/provider-sql",
    "host": "github.com",
    "name": "provider-sql",
    "owner": "crossplane-contrib"
  },
  "metrics": {
    "overall": {
      "key": "overall",
      "band": "excellent",
      "name": "Overall health",
      "note": "The weighted overall 77 is calibrated to 91 on the published index scale (record calibration 2026-08-02).",
      "notes": [
        {
          "code": "overall_calibration",
          "params": {
            "raw": 77,
            "calibrated": 91,
            "calibration": "2026-08-02"
          }
        }
      ],
      "value": 91,
      "inputs": {
        "security": 75,
        "vitality": 86,
        "community": 56,
        "governance": 83,
        "calibration": "2026-08-02",
        "engineering": 80,
        "ai_readiness": 69,
        "weighted_overall_raw": 77
      },
      "components": []
    },
    "categories": [
      {
        "key": "vitality",
        "band": "excellent",
        "name": "Vitality",
        "value": 86,
        "weight": 0.21,
        "metrics": [
          {
            "key": "development_activity",
            "band": "excellent",
            "name": "Development activity",
            "note": null,
            "notes": [],
            "value": 82,
            "inputs": {
              "commits_last_year": 218,
              "human_commit_share": 0.74,
              "days_since_last_push": 1,
              "active_weeks_last_year": 26
            },
            "components": [
              {
                "key": "push_recency",
                "name": "Push recency",
                "detail": "last push 1 days ago",
                "points": 36,
                "status": "met",
                "details": [
                  {
                    "code": "push_recency",
                    "params": {
                      "days": 1
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "commit_cadence",
                "name": "Commit cadence",
                "detail": "26/52 weeks with commits",
                "points": 18,
                "status": "partial",
                "details": [
                  {
                    "code": "commit_cadence_weeks",
                    "params": {
                      "weeks": 26
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "commit_volume",
                "name": "Commit volume",
                "detail": "218 commits in the last year",
                "points": 18,
                "status": "met",
                "details": [
                  {
                    "code": "commits_last_year",
                    "params": {
                      "count": 218
                    }
                  }
                ],
                "max_points": 18
              },
              {
                "key": "openssf_scorecard_maintained",
                "name": "OpenSSF Scorecard: Maintained",
                "detail": "30 commit(s) and 8 issue activity found in the last 90 days -- score normalized to 10",
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "release_discipline",
            "band": "excellent",
            "name": "Release discipline",
            "note": "Excluded from scoring (no data or not applicable): OpenSSF Scorecard: Signed-Releases. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "openssf_scorecard_signed_releases"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 92,
            "inputs": {
              "releases_count": 20,
              "latest_release_tag": "v0.16.0-beta.1",
              "releases_from_tags": false,
              "days_since_latest_release": 2,
              "mean_days_between_releases": 65.7
            },
            "components": [
              {
                "key": "ships_releases",
                "name": "Ships releases",
                "detail": "20 releases published",
                "points": 27,
                "status": "met",
                "details": [
                  {
                    "code": "releases_published",
                    "params": {
                      "count": 20
                    }
                  }
                ],
                "max_points": 27
              },
              {
                "key": "release_recency",
                "name": "Release recency",
                "detail": "latest release 2 days ago",
                "points": 36,
                "status": "met",
                "details": [
                  {
                    "code": "release_recency",
                    "params": {
                      "days": 2
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "release_cadence",
                "name": "Release cadence",
                "detail": "a release every ~65.7 days",
                "points": 19.8,
                "status": "partial",
                "details": [
                  {
                    "code": "release_cadence",
                    "params": {
                      "gap": 65.7
                    }
                  }
                ],
                "max_points": 27
              },
              {
                "key": "openssf_scorecard_signed_releases",
                "name": "OpenSSF Scorecard: Signed-Releases",
                "detail": "no releases found",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 10
              }
            ]
          },
          {
            "key": "abandonment",
            "band": "exceptional",
            "name": "Abandonment",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "cap": null,
              "state": "maintained",
              "guards": [],
              "signals": [],
              "red_flag": false,
              "multiplier_pct": 100,
              "declared_reason": null,
              "unverified_reason": null,
              "unanswered_open_prs": null,
              "unanswered_open_issues": null,
              "days_since_last_merged_pr": null,
              "days_since_last_human_commit": 7,
              "days_since_last_human_commit_is_floor": false
            },
            "components": [
              {
                "key": "project_is_still_maintained",
                "name": "Project is still maintained",
                "detail": "last human commit 7 days ago",
                "points": 100,
                "status": "met",
                "details": [
                  {
                    "code": "abandonment_maintained",
                    "params": {
                      "days": 7
                    }
                  }
                ],
                "max_points": 100
              }
            ]
          }
        ],
        "description": "Is the project alive — is code being written and are releases shipping?"
      },
      {
        "key": "community",
        "band": "moderate",
        "name": "Community & Adoption",
        "value": 56,
        "weight": 0.17,
        "metrics": [
          {
            "key": "popularity",
            "band": "moderate",
            "name": "Popularity & adoption",
            "note": null,
            "notes": [],
            "value": 56,
            "inputs": {
              "forks": 112,
              "stars": 154,
              "watchers": 5,
              "growth_state": "unverified",
              "growth_factor_pct": 100,
              "growth_unverified_reason": "no_history"
            },
            "components": [
              {
                "key": "stars",
                "name": "Stars",
                "detail": "154 stars",
                "points": 35.4,
                "status": "partial",
                "details": [
                  {
                    "code": "stars",
                    "params": {
                      "count": 154
                    }
                  }
                ],
                "max_points": 60
              },
              {
                "key": "forks",
                "name": "Forks",
                "detail": "112 forks",
                "points": 17,
                "status": "partial",
                "details": [
                  {
                    "code": "forks",
                    "params": {
                      "count": 112
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "watchers",
                "name": "Watchers",
                "detail": "5 watchers",
                "points": 3.3,
                "status": "partial",
                "details": [
                  {
                    "code": "watchers",
                    "params": {
                      "count": 5
                    }
                  }
                ],
                "max_points": 15
              }
            ]
          },
          {
            "key": "community_health",
            "band": "moderate",
            "name": "Community health",
            "note": null,
            "notes": [],
            "value": 57,
            "inputs": {
              "has_readme": true,
              "has_license": true,
              "readme_badges": null,
              "has_contributing": false,
              "has_issue_template": false,
              "has_code_of_conduct": false,
              "readme_badge_services": [],
              "has_pull_request_template": true
            },
            "components": [
              {
                "key": "readme",
                "name": "README",
                "detail": null,
                "points": 22.5,
                "status": "met",
                "details": [],
                "max_points": 22.5
              },
              {
                "key": "license",
                "name": "License",
                "detail": "recognized license (Apache-2.0)",
                "points": 22.5,
                "status": "met",
                "details": [
                  {
                    "code": "license_standard",
                    "params": {}
                  },
                  {
                    "code": "license_spdx",
                    "params": {
                      "spdx": "Apache-2.0"
                    }
                  }
                ],
                "max_points": 22.5
              },
              {
                "key": "contributing_guide",
                "name": "CONTRIBUTING guide",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 18
              },
              {
                "key": "code_of_conduct",
                "name": "Code of conduct",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 13.5
              },
              {
                "key": "issue_template",
                "name": "Issue template",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.2
              },
              {
                "key": "pr_template",
                "name": "PR template",
                "detail": null,
                "points": 6.3,
                "status": "met",
                "details": [],
                "max_points": 6.3
              }
            ]
          }
        ],
        "description": "Does the project have users, downloads, attention, and a welcoming setup for contributors?"
      },
      {
        "key": "governance",
        "band": "excellent",
        "name": "Sustainability & Governance",
        "value": 83,
        "weight": 0.23,
        "metrics": [
          {
            "key": "maintainer_resilience",
            "band": "excellent",
            "name": "Maintainer resilience (bus factor)",
            "note": null,
            "notes": [],
            "value": 84,
            "inputs": {
              "bus_factor": 4,
              "contributors_sampled": 46,
              "top_contributor_share": 0.235
            },
            "components": [
              {
                "key": "bus_factor",
                "name": "Bus factor",
                "detail": "4 contributor(s) cover half of all commits",
                "points": 43.2,
                "status": "partial",
                "details": [
                  {
                    "code": "bus_factor",
                    "params": {
                      "count": 4
                    }
                  }
                ],
                "max_points": 54
              },
              {
                "key": "commit_distribution",
                "name": "Commit distribution",
                "detail": "top contributor authored 24% of commits",
                "points": 17.2,
                "status": "partial",
                "details": [
                  {
                    "code": "top_contributor_share",
                    "params": {
                      "share": 24
                    }
                  }
                ],
                "max_points": 22.5
              },
              {
                "key": "contributor_breadth",
                "name": "Contributor breadth",
                "detail": "46 contributors",
                "points": 13.5,
                "status": "met",
                "details": [
                  {
                    "code": "contributors_sampled",
                    "params": {
                      "count": 46
                    }
                  }
                ],
                "max_points": 13.5
              },
              {
                "key": "openssf_scorecard_contributors",
                "name": "OpenSSF Scorecard: Contributors",
                "detail": "project has 15 contributing companies or organizations",
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "responsiveness",
            "band": "excellent",
            "name": "Issue & PR responsiveness",
            "note": "Excluded from scoring (no data or not applicable): Newcomer PR acceptance. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "newcomer_pr_acceptance"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 80,
            "inputs": {
              "merged_prs": 206,
              "open_issues": 37,
              "closed_issues": 103,
              "prs_merged_7d": null,
              "prs_decided_7d": null,
              "prs_merged_30d": null,
              "prs_decided_30d": null,
              "issue_closed_ratio": 0.736,
              "closed_unmerged_prs": 57,
              "first_time_authors_30d": null,
              "first_time_prs_merged_30d": null,
              "first_time_prs_decided_30d": null
            },
            "components": [
              {
                "key": "issue_resolution",
                "name": "Issue resolution",
                "detail": "74% of issues closed",
                "points": 30.9,
                "status": "partial",
                "details": [
                  {
                    "code": "issues_closed_share",
                    "params": {
                      "share": 74
                    }
                  }
                ],
                "max_points": 42
              },
              {
                "key": "pr_acceptance",
                "name": "PR acceptance",
                "detail": "206/263 decided PRs merged",
                "points": 23.5,
                "status": "partial",
                "details": [
                  {
                    "code": "decided_prs_merged",
                    "params": {
                      "merged": 206,
                      "decided": 263
                    }
                  }
                ],
                "max_points": 30
              },
              {
                "key": "newcomer_pr_acceptance",
                "name": "Newcomer PR acceptance",
                "detail": "no first-time contributor's PR decided in 30d",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_newcomer_prs",
                    "params": {
                      "days": 30
                    }
                  }
                ],
                "max_points": 13
              },
              {
                "key": "openssf_scorecard_code_review",
                "name": "OpenSSF Scorecard: Code-Review",
                "detail": "all changesets reviewed",
                "points": 15,
                "status": "met",
                "details": [],
                "max_points": 15
              }
            ]
          },
          {
            "key": "stewardship",
            "band": "good",
            "name": "Ownership & stewardship",
            "note": null,
            "notes": [],
            "value": 72,
            "inputs": {
              "followers": 274,
              "owner_type": "Organization",
              "is_verified": null,
              "owner_login": "crossplane-contrib",
              "public_repos": 140,
              "account_age_days": 2266
            },
            "components": [
              {
                "key": "ownership_backing",
                "name": "Ownership backing",
                "detail": "organization-owned",
                "points": 30,
                "status": "met",
                "details": [
                  {
                    "code": "owner_organization",
                    "params": {}
                  }
                ],
                "max_points": 30
              },
              {
                "key": "verified_domain",
                "name": "Verified domain",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 20
              },
              {
                "key": "owner_reach",
                "name": "Owner reach",
                "detail": "274 followers of crossplane-contrib",
                "points": 17.5,
                "status": "partial",
                "details": [
                  {
                    "code": "owner_followers",
                    "params": {
                      "count": 274,
                      "login": "crossplane-contrib"
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "track_record",
                "name": "Track record",
                "detail": "140 public repos, account ~6 yr old",
                "points": 25,
                "status": "met",
                "details": [
                  {
                    "code": "public_repos",
                    "params": {
                      "count": 140
                    }
                  },
                  {
                    "code": "account_age_years",
                    "params": {
                      "years": 6
                    }
                  }
                ],
                "max_points": 25
              }
            ]
          },
          {
            "key": "package_maintenance",
            "band": "exceptional",
            "name": "Package maintenance",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "packages": [
                "github.com/crossplane-contrib/provider-sql"
              ],
              "ecosystems": "go",
              "any_deprecated": false,
              "min_days_since_publish": 9
            },
            "components": [
              {
                "key": "published_resolvable",
                "name": "Published & resolvable",
                "detail": "1 package(s) on go",
                "points": 25,
                "status": "met",
                "details": [
                  {
                    "code": "packages_published",
                    "params": {
                      "count": 1,
                      "ecosystems": "go"
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "publish_recency",
                "name": "Publish recency",
                "detail": "latest publish 9 days ago",
                "points": 35,
                "status": "met",
                "details": [
                  {
                    "code": "publish_recency",
                    "params": {
                      "days": 9
                    }
                  }
                ],
                "max_points": 35
              },
              {
                "key": "version_history",
                "name": "Version history",
                "detail": "25 published versions",
                "points": 20,
                "status": "met",
                "details": [
                  {
                    "code": "published_versions",
                    "params": {
                      "count": 25
                    }
                  }
                ],
                "max_points": 20
              },
              {
                "key": "not_deprecated",
                "name": "Not deprecated",
                "detail": "active, not deprecated or yanked",
                "points": 20,
                "status": "met",
                "details": [
                  {
                    "code": "package_not_deprecated",
                    "params": {}
                  }
                ],
                "max_points": 20
              }
            ]
          }
        ],
        "description": "Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?"
      },
      {
        "key": "engineering",
        "band": "excellent",
        "name": "Engineering Quality",
        "value": 80,
        "weight": 0.19,
        "metrics": [
          {
            "key": "engineering_practices",
            "band": "excellent",
            "name": "Engineering practices",
            "note": null,
            "notes": [],
            "value": 84,
            "inputs": {
              "has_ci": true,
              "has_tests": true,
              "has_editorconfig": false,
              "has_linter_config": true,
              "has_precommit_config": false
            },
            "components": [
              {
                "key": "ci_workflows",
                "name": "CI workflows",
                "detail": "4 workflow(s)",
                "points": 24,
                "status": "met",
                "details": [
                  {
                    "code": "ci_workflows",
                    "params": {
                      "count": 4
                    }
                  }
                ],
                "max_points": 24
              },
              {
                "key": "tests_present",
                "name": "Tests present",
                "detail": null,
                "points": 24,
                "status": "met",
                "details": [],
                "max_points": 24
              },
              {
                "key": "linter_config",
                "name": "Linter config",
                "detail": ".golangci.yml",
                "points": 16,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": ".golangci.yml"
                    }
                  }
                ],
                "max_points": 16
              },
              {
                "key": "pre_commit_hooks",
                "name": "Pre-commit hooks",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 9.6
              },
              {
                "key": "editorconfig",
                "name": ".editorconfig",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 6.4
              },
              {
                "key": "openssf_scorecard_ci_tests",
                "name": "OpenSSF Scorecard: CI-Tests",
                "detail": "13 out of 13 merged PRs checked by a CI test -- score normalized to 10",
                "points": 20,
                "status": "met",
                "details": [],
                "max_points": 20
              }
            ]
          },
          {
            "key": "documentation",
            "band": "good",
            "name": "Documentation",
            "note": null,
            "notes": [],
            "value": 75,
            "inputs": {
              "topics": [
                "crossplane",
                "crossplane-provider",
                "sql"
              ],
              "has_wiki": true,
              "homepage": "https://marketplace.upbound.io/providers/crossplane-contrib/provider-sql/",
              "has_readme": true,
              "has_docs_dir": false,
              "has_description": true
            },
            "components": [
              {
                "key": "readme",
                "name": "README",
                "detail": null,
                "points": 30,
                "status": "met",
                "details": [],
                "max_points": 30
              },
              {
                "key": "documentation_directory",
                "name": "Documentation directory",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 25
              },
              {
                "key": "documentation_homepage_site",
                "name": "Documentation / homepage site",
                "detail": "https://marketplace.upbound.io/providers/crossplane-contrib/provider-sql/",
                "points": 15,
                "status": "met",
                "details": [],
                "max_points": 15
              },
              {
                "key": "repository_description",
                "name": "Repository description",
                "detail": null,
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              },
              {
                "key": "topics",
                "name": "Topics",
                "detail": "3 topics",
                "points": 10,
                "status": "met",
                "details": [
                  {
                    "code": "topics_count",
                    "params": {
                      "count": 3
                    }
                  }
                ],
                "max_points": 10
              },
              {
                "key": "wiki",
                "name": "Wiki",
                "detail": null,
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              }
            ]
          }
        ],
        "description": "Are baseline engineering and documentation practices in place?"
      },
      {
        "key": "security",
        "band": "good",
        "name": "Security",
        "value": 75,
        "weight": 0.16,
        "metrics": [
          {
            "key": "security_posture",
            "band": "good",
            "name": "Security posture",
            "note": "Excluded from scoring (no data or not applicable): Branch-Protection, Packaging, Signed-Releases. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "branch_protection",
                    "packaging",
                    "signed_releases"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 69,
            "inputs": {
              "source": "openssf_scorecard",
              "checks_evaluated": 15,
              "scorecard_version": "v5.5.0",
              "checks_inconclusive": 3,
              "scorecard_aggregate": 6.9
            },
            "components": [
              {
                "key": "binary_artifacts",
                "name": "Binary-Artifacts",
                "detail": "no binaries found in the repo",
                "points": 7.5,
                "status": "met",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "branch_protection",
                "name": "Branch-Protection",
                "detail": "internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 7.5
              },
              {
                "key": "ci_tests",
                "name": "CI-Tests",
                "detail": "13 out of 13 merged PRs checked by a CI test -- score normalized to 10",
                "points": 2.5,
                "status": "met",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "cii_best_practices",
                "name": "CII-Best-Practices",
                "detail": "no effort to earn an OpenSSF best practices badge detected",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "code_review",
                "name": "Code-Review",
                "detail": "all changesets reviewed",
                "points": 7.5,
                "status": "met",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "contributors",
                "name": "Contributors",
                "detail": "project has 15 contributing companies or organizations",
                "points": 2.5,
                "status": "met",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "dangerous_workflow",
                "name": "Dangerous-Workflow",
                "detail": "no dangerous workflow patterns detected",
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              },
              {
                "key": "dependency_update_tool",
                "name": "Dependency-Update-Tool",
                "detail": "update tool detected",
                "points": 7.5,
                "status": "met",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "fuzzing",
                "name": "Fuzzing",
                "detail": "project is not fuzzed",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 5
              },
              {
                "key": "license",
                "name": "License",
                "detail": "license file detected",
                "points": 2.5,
                "status": "met",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "maintained",
                "name": "Maintained",
                "detail": "30 commit(s) and 8 issue activity found in the last 90 days -- score normalized to 10",
                "points": 7.5,
                "status": "met",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "packaging",
                "name": "Packaging",
                "detail": "packaging workflow not detected",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 5
              },
              {
                "key": "pinned_dependencies",
                "name": "Pinned-Dependencies",
                "detail": "all dependencies are pinned",
                "points": 5,
                "status": "met",
                "details": [],
                "max_points": 5
              },
              {
                "key": "sast",
                "name": "SAST",
                "detail": "SAST tool detected but not run on all commits",
                "points": 3.5,
                "status": "partial",
                "details": [],
                "max_points": 5
              },
              {
                "key": "security_policy",
                "name": "Security-Policy",
                "detail": "security policy file not detected",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 5
              },
              {
                "key": "signed_releases",
                "name": "Signed-Releases",
                "detail": "no releases found",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 7.5
              },
              {
                "key": "token_permissions",
                "name": "Token-Permissions",
                "detail": "detected GitHub workflow tokens with excessive permissions",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "vulnerabilities",
                "name": "Vulnerabilities",
                "detail": "6 existing vulnerabilities detected",
                "points": 3,
                "status": "partial",
                "details": [],
                "max_points": 7.5
              }
            ]
          },
          {
            "key": "dependency_advisories",
            "band": "exceptional",
            "name": "Dependency advisories",
            "note": "Excluded from scoring (no data or not applicable): Indirect dependencies free of known advisories, No advisories left outstanding. Remaining weights renormalized. Matched 115 resolved dependencies against OSV. This repository publishes no package the index resolves, so the repository dependency graph was assessed instead. That graph mixes development and test pins with shipped dependencies, so only the declared runtime dependencies are scored; transitive findings are reported as context and excluded from the score. Reachability is not analyzed.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "indirect_dependencies_free_of_known_advisories",
                    "no_advisories_left_outstanding"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              },
              {
                "code": "advisories_scope_repository",
                "params": {
                  "assessed": 115
                }
              },
              {
                "code": "advisories_repo_graph_caveat",
                "params": {}
              },
              {
                "code": "advisories_reachability",
                "params": {}
              }
            ],
            "value": 100,
            "inputs": {
              "source": "osv",
              "advisories": 7,
              "affected_packages": 6,
              "assessed_packages": 115,
              "unassessed_packages": 0,
              "affected_by_severity": "critical 1, unknown 5",
              "direct_affected_packages": 0
            },
            "components": [
              {
                "key": "direct_dependencies_free_of_known_advisories",
                "name": "Direct dependencies free of known advisories",
                "detail": "no direct dependency carries a known advisory",
                "points": 35,
                "status": "met",
                "details": [
                  {
                    "code": "no_direct_advisories",
                    "params": {}
                  }
                ],
                "max_points": 35
              },
              {
                "key": "indirect_dependencies_free_of_known_advisories",
                "name": "Indirect dependencies free of known advisories",
                "detail": "transitive set not separable from development and test dependencies in this scope",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "advisories_scope_not_separable",
                    "params": {}
                  }
                ],
                "max_points": 25
              },
              {
                "key": "no_advisories_left_outstanding",
                "name": "No advisories left outstanding",
                "detail": "no advisory carries a publication date",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "advisories_no_publication_date",
                    "params": {}
                  }
                ],
                "max_points": 40
              }
            ]
          },
          {
            "key": "malicious_dependencies",
            "band": "exceptional",
            "name": "Malicious dependencies",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "source": "osv",
              "meaning": "reported as a malicious package by the OpenSSF corpus; the remedy is removal or moving off the compromised name, never an upgrade of the same artifact. Versions the registry has since pulled are listed but not scored",
              "packages": [],
              "red_flag": false,
              "assessed_packages": 115,
              "malicious_packages": 0,
              "direct_malicious_packages": 0,
              "withdrawn_malicious_packages": 0,
              "installable_malicious_packages": 0
            },
            "components": [
              {
                "key": "no_dependency_reported_as_a_malicious_package",
                "name": "No dependency reported as a malicious package",
                "detail": "no dependency is reported as a malicious package",
                "points": 100,
                "status": "met",
                "details": [
                  {
                    "code": "no_malicious_dependencies",
                    "params": {}
                  }
                ],
                "max_points": 100
              }
            ]
          },
          {
            "key": "high_risk_jurisdiction_exposure",
            "band": "exceptional",
            "name": "High-Risk Jurisdiction Exposure",
            "note": "Only high-confidence self-published location evidence affects this multiplier. Ambiguous matches are review-only; country evidence is not proof of nationality, citizenship, legal registration, malicious intent, or sanctions status.",
            "notes": [
              {
                "code": "jurisdiction_evidence_limits",
                "params": {}
              }
            ],
            "value": 100,
            "inputs": {
              "meaning": "self-published location evidence; not nationality or citizenship",
              "red_flag": false,
              "exposures": [],
              "policy_countries": [
                "Russia",
                "Iran",
                "North Korea"
              ],
              "commit_weight_rule": {
                "min_commits": 50,
                "min_commit_share": 0.1
              },
              "review_only_matches": 0,
              "below_threshold_exposures": [],
              "assessed_self_published_locations": 9
            },
            "components": [
              {
                "key": "policy_exposure_multiplier",
                "name": "Policy exposure multiplier",
                "detail": "no confirmed policy-scope location match",
                "points": 100,
                "status": "met",
                "details": [
                  {
                    "code": "jurisdiction_no_match",
                    "params": {}
                  }
                ],
                "max_points": 100
              }
            ]
          }
        ],
        "description": "Are visible security and supply-chain practices strong, with no malicious dependency and no unresolved high-risk jurisdiction exposure?"
      },
      {
        "key": "ai_readiness",
        "band": "good",
        "name": "AI Readiness",
        "value": 69,
        "weight": 0.04,
        "metrics": [
          {
            "key": "ai_agent_context",
            "band": "at_risk",
            "name": "Agent context & guidance",
            "note": null,
            "notes": [],
            "value": 34,
            "inputs": {
              "has_llms_txt": false,
              "legible_history_share": 0.635,
              "agent_instruction_files": [],
              "agent_instruction_max_bytes": null
            },
            "components": [
              {
                "key": "agent_instructions",
                "name": "Agent instructions",
                "detail": "no CLAUDE.md / AGENTS.md / editor rules",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "no_agent_instructions",
                    "params": {}
                  }
                ],
                "max_points": 45
              },
              {
                "key": "machine_readable_docs_llms_txt",
                "name": "Machine-readable docs (llms.txt)",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 15
              },
              {
                "key": "legible_commit_history",
                "name": "Legible commit history",
                "detail": "47 of 74 human commits state their intent (structured subject or explanatory body)",
                "points": 33.9,
                "status": "partial",
                "details": [
                  {
                    "code": "legible_history",
                    "params": {
                      "legible": 47,
                      "sampled": 74
                    }
                  }
                ],
                "max_points": 40
              }
            ]
          },
          {
            "key": "ai_verify_loop",
            "band": "exceptional",
            "name": "Verify loop (build / test / typecheck)",
            "note": null,
            "notes": [],
            "value": 94,
            "inputs": {
              "has_nix": false,
              "has_tests": true,
              "lockfiles": [
                "go.sum"
              ],
              "has_dockerfile": true,
              "typed_language": true,
              "bootstrap_files": [
                "Makefile",
                "cluster/images/provider-sql/Makefile"
              ],
              "has_devcontainer": false,
              "has_linter_config": true,
              "typecheck_configs": [],
              "agent_commit_share": 0.02,
              "toolchain_manifests": [
                "go.mod"
              ],
              "dependency_bot_commit_share": 0.26
            },
            "components": [
              {
                "key": "one_command_bootstrap",
                "name": "One-command bootstrap",
                "detail": "Makefile, cluster/images/provider-sql/Makefile",
                "points": 18,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "Makefile, cluster/images/provider-sql/Makefile"
                    }
                  }
                ],
                "max_points": 18
              },
              {
                "key": "automated_tests",
                "name": "Automated tests",
                "detail": null,
                "points": 22,
                "status": "met",
                "details": [],
                "max_points": 22
              },
              {
                "key": "lint_format_config",
                "name": "Lint / format config",
                "detail": ".golangci.yml",
                "points": 11,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": ".golangci.yml"
                    }
                  }
                ],
                "max_points": 11
              },
              {
                "key": "static_type_checking",
                "name": "Static type checking",
                "detail": "Go (statically typed)",
                "points": 11,
                "status": "met",
                "details": [
                  {
                    "code": "statically_typed_language",
                    "params": {
                      "language": "Go"
                    }
                  }
                ],
                "max_points": 11
              },
              {
                "key": "reproducible_environment",
                "name": "Reproducible environment",
                "detail": "Dockerfile, lockfile",
                "points": 10,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "Dockerfile, lockfile"
                    }
                  }
                ],
                "max_points": 10
              },
              {
                "key": "demonstrated_agent_practice",
                "name": "Demonstrated agent practice",
                "detail": "2 of the last 100 commits agent-authored or agent-credited",
                "points": 4,
                "status": "partial",
                "details": [
                  {
                    "code": "agent_authored_commits",
                    "params": {
                      "count": 2,
                      "sampled": 100
                    }
                  }
                ],
                "max_points": 10
              },
              {
                "key": "automated_maintenance",
                "name": "Automated maintenance",
                "detail": "26 of the last 100 commits are automated dependency updates",
                "points": 8,
                "status": "met",
                "details": [
                  {
                    "code": "dependency_bot_commits",
                    "params": {
                      "count": 26,
                      "sampled": 100
                    }
                  }
                ],
                "max_points": 8
              },
              {
                "key": "openssf_scorecard_pinned_dependencies",
                "name": "OpenSSF Scorecard: Pinned-Dependencies",
                "detail": "all dependencies are pinned",
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "ai_code_legibility",
            "band": "exceptional",
            "name": "Code legibility for models",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "primary_language": "Go",
              "largest_source_bytes": 46558,
              "source_files_sampled": 172,
              "oversized_source_files": 0
            },
            "components": [
              {
                "key": "type_checkable_code",
                "name": "Type-checkable code",
                "detail": "Go (statically typed)",
                "points": 45,
                "status": "met",
                "details": [
                  {
                    "code": "statically_typed_language",
                    "params": {
                      "language": "Go"
                    }
                  }
                ],
                "max_points": 45
              },
              {
                "key": "manageable_file_sizes",
                "name": "Manageable file sizes",
                "detail": "0/172 source files over 60KB",
                "points": 55,
                "status": "met",
                "details": [
                  {
                    "code": "oversized_source_files",
                    "params": {
                      "kb": 60,
                      "sampled": 172,
                      "oversized": 0
                    }
                  }
                ],
                "max_points": 55
              }
            ]
          },
          {
            "key": "ai_interfaces",
            "band": "weak",
            "name": "Machine-readable interfaces",
            "note": null,
            "notes": [],
            "value": 40,
            "inputs": {
              "example_dirs": [
                "examples"
              ],
              "has_mcp_signal": false,
              "api_schema_files": []
            },
            "components": [
              {
                "key": "api_schema_openapi_graphql_proto",
                "name": "API schema (OpenAPI/GraphQL/proto)",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 40
              },
              {
                "key": "mcp_server",
                "name": "MCP server",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 20
              },
              {
                "key": "runnable_examples",
                "name": "Runnable examples",
                "detail": "examples",
                "points": 40,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "examples"
                    }
                  }
                ],
                "max_points": 40
              }
            ]
          }
        ],
        "description": "How well is the repo equipped to be developed and maintained with AI coding agents? Carries a deliberately small weight: agent tooling is a real maintenance signal, but its absence must never gate the top of the scale (calibration saturates at raw 91, so 100/100 remains reachable with AI Readiness at zero)."
      }
    ],
    "classification": {
      "top": [],
      "labels": [],
      "scores": {
        "library": 3
      },
      "primary": null,
      "evidence": [
        {
          "tier": "distribution",
          "label": "library",
          "source": "registry:go",
          "weight": 3
        }
      ],
      "artifacts": [],
      "confidence": "none",
      "host_extension": false,
      "runs_as_process": false,
      "consumed_by_code": false
    },
    "metrics_version": "2.5.0"
  },
  "warnings": [
    "Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token"
  ],
  "report_type": "repository",
  "generated_at": "2026-07-29T12:52:46.360178Z",
  "schema_version": "0.27.0",
  "badge_url": "https://raw.githubusercontent.com/inspect-software/badges/main/v1/c/crossplane-contrib/provider-sql.svg",
  "full_name": "crossplane-contrib/provider-sql",
  "license_state": "standard",
  "license_spdx": "Apache-2.0"
}

Bewertungen sind Signale, keine Garantien. Sie spiegeln öffentlich sichtbare Praxis auf GitHub wider — kein Code-Audit und keine Sicherheitsgarantie.

Fehlende Daten werden ausgeschlossen und die Gewichte neu normiert, nie als null bewertet. Die Methodik ist versioniert und offen: Metriken v2.5.0, Schema v0.27.0 — vollständige Methodik · Metriken-Wiki.

Wie ein einzelnes Ergebnis im Gesamtregister steht: aggregierte StatistikenGo.