Software-GesundheitsberichtSchema 0.27.0 · Metriken 1.13.0 · 2026-07-24 13:02 UTC

cybozu-go / mantle

GoApache-2.0★ 3 Sterne⑂ 2 Forksseit Jan. 2024Auf GitHub ansehen ↗

cybozu-go/mantle erreicht einen Gesundheitsindex von 68 von 100 und liegt damit im Bereich Mittel. Am stärksten schneidet es bei Vitality (92/100) ab, am schwächsten bei Community & Adoption (28/100). Zuletzt heute aktualisiert. 2 Mitwirkende tragen den Großteil der jüngsten Arbeit.

gesamt / 100

Mittel

Software-Gesundheitsindex

Metriken werden auf einer Skala von 1–100 in gewichtete Kategorien gruppiert. Der Gesamtwert beginnt als ihr Mittel; sobald öffentliche Evidenz die Richtlinie für Hochrisikojurisdiktionen auslöst, wird die Bewertung angepasst und erhält die Obergrenze 49 (Gefährdet). AI Readiness liegt außerhalb.

Exzellent85-100Vorbildlich; erfüllt im Wesentlichen alle geprüften Kriterien

Gut70-84Gesund; geringfügige Lücken

Mittel50-69Akzeptabel mit deutlichen Lücken; Überprüfung empfohlen

Gefährdet30-49Erhebliche Schwächen; eine Übernahme erfordert Vorsicht

Kritisch1-29Schwerwiegende Probleme (aufgegeben, nur ein Maintainer, keine Hygiene)

Bewertungsprofil

Jede Achse ist eine Kategorie. Die Form zählt mehr als der Durchschnitt — ein gesundes Projekt füllt die gesamte Fläche, während ein Profil aus Spitzen und Kratern bedeutet, dass Stärke in einer Dimension Risiken in einer anderen verdeckt.

Eigentümerschaft

Cybozu GoOrganisation

73 Follower69 öffentliche Reposseit Feb. 2016

Dieses Repository wird von einer Organisation getragen — geteilte, rechenschaftspflichtige Trägerschaft, die jeden einzelnen Maintainer überdauern kann.

Paket-Ökosysteme

Registry	Paket	Version	Downloads / Monat	Versionen	Zuletzt veröffentlicht
Go	github.com/cybozu-go/mantle	v0.13.0	-	38	vor 7 Tagen

Metriken nach Kategorie

Vitalität

Lebt das Projekt — wird Code geschrieben und werden Releases ausgeliefert?

92Exzellent · 22 % des Gesamtindex

Entwicklungsaktivität

94Exzellent

Wie die Bewertung erfolgt

36/36	Push-Aktualität — letzter Push vor 0 Tagen
29.8/36	Commit-Rhythmus — 43/52 Wochen mit Commits
18/18	Commit-Volumen — 302 Commits im letzten Jahr
10/10	OpenSSF Scorecard: Maintained — 30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10

Verwendete Eingangsdaten

commits_last_year	302
human_commit_share	0,98
days_since_last_push	0
active_weeks_last_year	43

Release-Disziplin

90Exzellent

Wie die Bewertung erfolgt

27/27	Liefert Releases aus — 93 Releases veröffentlicht
36/36	Release-Aktualität — letztes Release vor 3 Tagen
27/27	Release-Rhythmus — ein Release etwa alle 2 Tage
0/10	OpenSSF Scorecard: Signed-Releases — Project has not signed or included provenance with any releases.

Verwendete Eingangsdaten

releases_count	93
latest_release_tag	mantle-cluster-wide-chart-v0.3.6
releases_from_tags	nein
days_since_latest_release	3
mean_days_between_releases	2

Community & Verbreitung

Hat das Projekt Nutzer, Downloads, Aufmerksamkeit und ein einladendes Umfeld für Beitragende?

28Kritisch · 18 % des Gesamtindex

Popularität & Verbreitung

8Kritisch

Wie die Bewertung erfolgt

4.9/60	Stars — 3 Stars
0/25	Forks — 2 Forks
3.3/15	Watcher — 5 Watcher

Verwendete Eingangsdaten

forks	2
stars	3
watchers	5
growth_state	unverified
growth_factor_pct	100
growth_unverified_reason	no_history

Community-Gesundheit

50Mittel

Wie die Bewertung erfolgt

22.5/22.5	README
22.5/22.5	Lizenz — anerkannte Lizenz (Apache-2.0)
0/18	CONTRIBUTING-Leitfaden
0/13.5	Verhaltenskodex
0/7.2	Issue-Vorlage
0/6.3	PR-Vorlage

Verwendete Eingangsdaten

has_readme	ja
has_license	ja
has_contributing	nein
has_issue_template	nein
has_code_of_conduct	nein
has_pull_request_template	nein

Nachhaltigkeit & Governance

Überdauert das Projekt die Menschen, die es tragen — Bus-Faktor, Reaktionsfähigkeit, Trägerschaft und Paketpflege?

77Gut · 24 % des Gesamtindex

Maintainer-Resilienz (Bus-Faktor)

61Mittel

Wie die Bewertung erfolgt

25.2/54	Bus-Faktor — 2 Beitragende decken die Hälfte aller Commits ab
12.2/22.5	Commit-Verteilung — wichtigste beitragende Person verfasste 46 % der Commits
13.5/13.5	Breite der Beitragenden — 10 Beitragende
10/10	OpenSSF Scorecard: Contributors — project has 11 contributing companies or organizations

Verwendete Eingangsdaten

bus_factor	2
contributors_sampled	10
top_contributor_share	0,456

Reaktionsfähigkeit bei Issues & PRs

88Exzellent

Wie die Bewertung erfolgt

38.9/46.8	Issue-Lösungsquote — 83 % der Issues geschlossen
34.4/38.3	PR-Annahme — 287/319 entschiedene PRs gemergt
15/15	OpenSSF Scorecard: Code-Review — all changesets reviewed

Verwendete Eingangsdaten

merged_prs	287
open_issues	1
closed_issues	5
issue_closed_ratio	0,833
closed_unmerged_prs	32

Eigentümerschaft & Trägerschaft

68Mittel

Wie die Bewertung erfolgt

30/30	Organisatorische Trägerschaft — im Besitz einer Organisation
0/20	Verifizierte Domain
13.4/25	Reichweite des Inhabers — 73 Follower von cybozu-go
25/25	Kontohistorie — 69 öffentliche Repos, Kontoalter ca. 10 Jahre

Verwendete Eingangsdaten

followers	73
owner_type	Organization
is_verified	—
owner_login	cybozu-go
public_repos	69
account_age_days	3.802

Paketpflege

100Exzellent

Wie die Bewertung erfolgt

25/25	Veröffentlicht & auflösbar — 1 Paket(e) auf go
35/35	Veröffentlichungsaktualität — letzte Veröffentlichung vor 7 Tagen
20/20	Versionshistorie — 38 veröffentlichte Versionen
20/20	Nicht veraltet — aktiv, nicht veraltet oder zurückgezogen

Verwendete Eingangsdaten

packages	github.com/cybozu-go/mantle
ecosystems	go
any_deprecated	nein
min_days_since_publish	7

Engineering-Qualität

Sind grundlegende Engineering- und Dokumentationspraktiken vorhanden?

76Gut · 20 % des Gesamtindex

Engineering-Praktiken

84Gut

Wie die Bewertung erfolgt

24/24	CI-Workflows — 9 Workflow(s)
24/24	Tests vorhanden
16/16	Linter-Konfiguration — .golangci.yml
0/9.6	Pre-Commit-Hooks
0/6.4	.editorconfig
20/20	OpenSSF Scorecard: CI-Tests — 14 out of 14 merged PRs checked by a CI test -- score normalized to 10

Verwendete Eingangsdaten

has_ci	ja
has_tests	ja
has_editorconfig	nein
has_linter_config	ja
has_precommit_config	nein

Dokumentation

65Mittel

Wie die Bewertung erfolgt

30/30	README
25/25	Dokumentationsverzeichnis
0/15	Dokumentations-/Homepage-Site
0/10	Repository-Beschreibung
0/10	Topics
10/10	Wiki

Verwendete Eingangsdaten

topics	—
has_wiki	ja
homepage	—
has_readme	ja
has_docs_dir	ja
has_description	nein

Sicherheit

Sind die sichtbaren Sicherheits- und Lieferkettenpraktiken belastbar, ohne ungeklärte Exposition gegenüber Hochrisikojurisdiktionen?

59Mittel · 16 % des Gesamtindex

Sicherheitslage

58Mittel

Wie die Bewertung erfolgt

7.5/7.5	Binary-Artifacts — no binaries found in the repo
6/7.5	Branch-Protection — branch protection is not maximal on development and all release branches
2.5/2.5	CI-Tests — 14 out of 14 merged PRs checked by a CI test -- score normalized to 10
0/2.5	CII-Best-Practices — no effort to earn an OpenSSF best practices badge detected
7.5/7.5	Code-Review — all changesets reviewed
2.5/2.5	Contributors — project has 11 contributing companies or organizations
10/10	Dangerous-Workflow — no dangerous workflow patterns detected
7.5/7.5	Dependency-Update-Tool — update tool detected
0/5	Fuzzing — project is not fuzzed
2.5/2.5	Lizenz — license file detected
7.5/7.5	Maintained — 30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10
5/5	Packaging — packaging workflow detected
2.5/5	Pinned-Dependencies — dependency not pinned by hash detected -- score normalized to 5
0/5	SAST — SAST tool is not run on all commits -- score normalized to 0
0/5	Security-Policy — security policy file not detected
0/7.5	Signed-Releases — Project has not signed or included provenance with any releases.
0/7.5	Token-Permissions — detected GitHub workflow tokens with excessive permissions
0/7.5	Vulnerabilities — 26 existing vulnerabilities detected

Verwendete Eingangsdaten

source	openssf_scorecard
checks_evaluated	18
scorecard_version	v5.5.0
checks_inconclusive	0
scorecard_aggregate	5,8

Abhängigkeits-Advisories

61Mittel

Wie die Bewertung erfolgt

8.9/35	Direkte Abhängigkeiten ohne bekannte Advisories — 2 betroffen: google.golang.org/grpc v1.81.0 (critical 9.1), k8s.io/kubernetes v1.35.4 (unknown)
0/25	Indirekte Abhängigkeiten ohne bekannte Advisories — transitive Menge in diesem Bereich nicht von Entwicklungs- und Test-Abhängigkeiten trennbar
37.2/40	Keine offenen Advisories — 1 Paket(e) mit Advisory seit über 90 Tagen unbehandelt; ältestes vor 485 Tagen veröffentlicht

Verwendete Eingangsdaten

source	osv
advisories	40
affected_packages	6
assessed_packages	119
unassessed_packages	0
affected_by_severity	critical 2, moderate 1, unknown 3
direct_affected_packages	2

Von der Bewertung ausgeschlossen (keine Daten oder nicht anwendbar): Indirekte Abhängigkeiten ohne bekannte Advisories. Die verbleibenden Gewichte wurden renormalisiert. 119 aufgelöste Abhängigkeiten wurden mit OSV abgeglichen. Dieses Repository veröffentlicht kein Paket, das der Index auflöst; bewertet wurde daher der Abhängigkeitsgraph des Repositorys. Dieser Graph vermischt Entwicklungs- und Test-Pins mit ausgelieferten Abhängigkeiten, daher werden nur die deklarierten Laufzeit-Abhängigkeiten bewertet; transitive Befunde werden als Kontext ausgewiesen und fließen nicht in die Bewertung ein. Erreichbarkeit wird nicht analysiert.

AI Readiness

Wie gut ist das Repository dafür ausgestattet, mit KI-Coding-Agenten entwickelt und gepflegt zu werden? Ein unabhängiges, experimentelles Badge — Gewicht 0,0, es wird eigenständig ausgewiesen und verändert den Gesamt-Gesundheitswert nicht.

76Gut · 0 % des Gesamtindex

AI-Agentenkontext & Leitlinien

40Gefährdet

Wie die Bewertung erfolgt

0/45	Agentenanweisungen — keine CLAUDE.md / AGENTS.md / Editor-Regeln
0/15	Maschinenlesbare Doku (llms.txt)
39.7/40	Lesbare Commit-Historie — 73 von 98 menschlichen Commits benennen ihre Absicht (strukturierter Betreff oder erläuternder Text)

Verwendete Eingangsdaten

has_llms_txt	nein
legible_history_share	0,745
agent_instruction_files	—
agent_instruction_max_bytes	—

AI-Verify-Loop (Build / Test / Typprüfung)

93Exzellent

Wie die Bewertung erfolgt

18/18	Bootstrap mit einem Befehl — Makefile, ceph/Makefile, test/e2e/Makefile
22/22	Automatisierte Tests
11/11	Lint-/Format-Konfiguration — .golangci.yml
11/11	Statische Typprüfung — Go (statisch typisiert)
10/10	Reproduzierbare Umgebung — Dockerfile, lockfile
8/10	Belegte Agentenpraxis — 4 der letzten 100 Commits von Agenten verfasst oder ihnen zugeschrieben
8/8	Automatisierte Wartung — 2 der letzten 100 Commits sind automatisierte Abhängigkeits-Updates
5/10	OpenSSF Scorecard: Pinned-Dependencies — dependency not pinned by hash detected -- score normalized to 5

Verwendete Eingangsdaten

has_nix	nein
has_tests	ja
lockfiles	go.sum
has_dockerfile	ja
typed_language	ja
bootstrap_files	Makefile, ceph/Makefile, test/e2e/Makefile
has_devcontainer	nein
has_linter_config	ja
typecheck_configs	—
agent_commit_share	0,04
toolchain_manifests	go.mod
dependency_bot_commit_share	0,02

AI-Code-Lesbarkeit für Modelle

99Exzellent

Wie die Bewertung erfolgt

45/45	Typprüfbarer Code — Go (statisch typisiert)
53.8/55	Handhabbare Dateigrößen — 2/90 Quelldateien über 60 KB

Verwendete Eingangsdaten

primary_language	Go
largest_source_bytes	132.183
source_files_sampled	90
oversized_source_files	2

Maschinenlesbare AI-Schnittstellen

80Gut

Wie die Bewertung erfolgt

40/40	API-Schema (OpenAPI/GraphQL/proto) — pkg/controller/proto/controller.proto
0/20	MCP-Server
40/40	Lauffähige Beispiele — samples

Verwendete Eingangsdaten

example_dirs	samples
has_mcp_signal	nein
api_schema_files	pkg/controller/proto/controller.proto

Eckdaten

3GitHub-Sterne

10Mitwirkende

302Commits, letzte 12 Monate

0Tage seit letztem Push

93Releases

2Bus-Faktor

1offene Issues

GoPaket-Ökosysteme

Warnungen zur Datenerhebung

Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token

Weitere Details

Stern- und Fork-Verlauf 0 ★ / 2 ⇿

0Sterne

2Forks

61Releases

Wann jeder Stern und Fork hinzugefügt wurde, von GitHub erfasst und nach Tagen gruppiert. Das kumulierte Wachstum steht direkt über den täglichen Zugängen, aus denen es besteht, sodass beide gegeneinander lesbar sind: stetiger organischer Zuwachs sieht ganz anders aus als ein abrupter, kurzlebiger Ausschlag. Wo dieser Unterschied messbar ist, wird er als Wachstumsauthentizität ausgewiesen.

Major 0Minor 8Patch 18

Jeder Punkt umfasst 2 Tage.

OpenSSF Scorecard 5.8 / 10

5.8Gesamtwert

Unabhängige, werkzeugneutrale Sicherheitsbewertung durch das quelloffene OpenSSF Scorecard. Jede Prüfung honoriert eine Sicherheits-Praxis, nicht das Werkzeug eines bestimmten Anbieters. Prüfungen, die Scorecard nicht ermitteln konnte, sind mit k. A. markiert und vom Sicherheitswert ausgeschlossen (nie als null gezählt).Scorecard v5.5.0 · 2026-07-24 13:02 UTC

10	Binary-Artifacts	no binaries found in the repo
8	Branch-Protection	branch protection is not maximal on development and all release branches
10	CI-Tests	14 out of 14 merged PRs checked by a CI test -- score normalized to 10
0	CII-Best-Practices	no effort to earn an OpenSSF best practices badge detected
10	Code-Review	all changesets reviewed
10	Contributors	project has 11 contributing companies or organizations
10	Dangerous-Workflow	no dangerous workflow patterns detected
10	Dependency-Update-Tool	update tool detected
0	Fuzzing	project is not fuzzed
10	License	license file detected
10	Maintained	30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10
10	Packaging	packaging workflow detected
5	Pinned-Dependencies	dependency not pinned by hash detected -- score normalized to 5
0	SAST	SAST tool is not run on all commits -- score normalized to 0
0	Security-Policy	security policy file not detected
0	Signed-Releases	Project has not signed or included provenance with any releases.
0	Token-Permissions	detected GitHub workflow tokens with excessive permissions
0	Vulnerabilities	26 existing vulnerabilities detected

Direkte Abhängigkeiten 23

Registry	Paket	Versionsvorgabe	Manifest
Go	github.com/aws/aws-sdk-go-v2	`v1.41.7`	go.mod
Go	github.com/aws/aws-sdk-go-v2/config	`v1.32.17`	go.mod
Go	github.com/aws/aws-sdk-go-v2/service/s3	`v1.101.0`	go.mod
Go	github.com/grpc-ecosystem/go-grpc-middleware/v2	`v2.3.3`	go.mod
Go	github.com/onsi/ginkgo/v2	`v2.28.3`	go.mod
Go	github.com/onsi/gomega	`v1.40.0`	go.mod
Go	github.com/prometheus/client_golang	`v1.23.2`	go.mod
Go	github.com/pseudomuto/protoc-gen-doc	`v1.5.1`	go.mod
Go	github.com/spf13/cobra	`v1.10.2`	go.mod
Go	github.com/stretchr/testify	`v1.11.1`	go.mod
Go	go.uber.org/mock	`v0.6.0`	go.mod
Go	golang.org/x/time	`v0.15.0`	go.mod
Go	google.golang.org/grpc	`v1.81.0`	go.mod
Go	google.golang.org/grpc/cmd/protoc-gen-go-grpc	`v1.6.2`	go.mod
Go	google.golang.org/protobuf	`v1.36.11`	go.mod
Go	k8s.io/api	`v0.35.4`	go.mod
Go	k8s.io/apimachinery	`v0.35.4`	go.mod
Go	k8s.io/client-go	`v0.35.4`	go.mod
Go	k8s.io/kube-openapi	`v0.0.0-20260511211612-da4e56fe5676`	go.mod
Go	k8s.io/kubernetes	`v1.35.4`	go.mod
Go	k8s.io/utils	`v0.0.0-20260507154919-ff6756f316d2`	go.mod
Go	sigs.k8s.io/controller-runtime	`v0.23.3`	go.mod
Go	sigs.k8s.io/yaml	`v1.6.0`	go.mod

Alle Abhängigkeiten 119

Vollständig aufgelöster Abhängigkeitssatz aus dem GitHub-Abhängigkeitsgraphen: 23 direkte und 96 indirekte (transitive) Pakete. Die transitive Hülle ist vollständig, wenn das Repository eine Lockfile eincheckt.

Registry	Paket	Version	Beziehung
Go	github.com/aws/aws-sdk-go-v2	`v1.41.7`	direkt
Go	github.com/aws/aws-sdk-go-v2/config	`v1.32.17`	direkt
Go	github.com/aws/aws-sdk-go-v2/service/s3	`v1.101.0`	direkt
Go	github.com/grpc-ecosystem/go-grpc-middleware/v2	`v2.3.3`	direkt
Go	github.com/onsi/ginkgo/v2	`v2.28.3`	direkt
Go	github.com/onsi/gomega	`v1.40.0`	direkt
Go	github.com/prometheus/client_golang	`v1.23.2`	direkt
Go	github.com/pseudomuto/protoc-gen-doc	`v1.5.1`	direkt
Go	github.com/spf13/cobra	`v1.10.2`	direkt
Go	github.com/stretchr/testify	`v1.11.1`	direkt
Go	go.uber.org/mock	`v0.6.0`	direkt
Go	golang.org/x/time	`v0.15.0`	direkt
Go	google.golang.org/grpc	`v1.81.0`	direkt
Go	google.golang.org/grpc/cmd/protoc-gen-go-grpc	`v1.6.2`	direkt
Go	google.golang.org/protobuf	`v1.36.11`	direkt
Go	k8s.io/api	`v0.35.4`	direkt
Go	k8s.io/apimachinery	`v0.35.4`	direkt
Go	k8s.io/client-go	`v0.35.4`	direkt
Go	k8s.io/kube-openapi	`v0.0.0-20260511211612-da4e56fe5676`	direkt
Go	k8s.io/kubernetes	`v1.35.4`	direkt
Go	k8s.io/utils	`v0.0.0-20260507154919-ff6756f316d2`	direkt
Go	sigs.k8s.io/controller-runtime	`v0.23.3`	direkt
Go	sigs.k8s.io/yaml	`v1.6.0`	direkt
Go	github.com/aokoli/goutils	`v1.0.1`	indirekt
Go	github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream	`v1.7.10`	indirekt
Go	github.com/aws/aws-sdk-go-v2/credentials	`v1.19.16`	indirekt
Go	github.com/aws/aws-sdk-go-v2/feature/ec2/imds	`v1.18.23`	indirekt
Go	github.com/aws/aws-sdk-go-v2/internal/configsources	`v1.4.23`	indirekt
Go	github.com/aws/aws-sdk-go-v2/internal/endpoints/v2	`v2.7.23`	indirekt
Go	github.com/aws/aws-sdk-go-v2/internal/v4a	`v1.4.24`	indirekt
Go	github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding	`v1.13.9`	indirekt
Go	github.com/aws/aws-sdk-go-v2/service/internal/checksum	`v1.9.15`	indirekt
Go	github.com/aws/aws-sdk-go-v2/service/internal/presigned-url	`v1.13.23`	indirekt
Go	github.com/aws/aws-sdk-go-v2/service/internal/s3shared	`v1.19.23`	indirekt
Go	github.com/aws/aws-sdk-go-v2/service/signin	`v1.0.11`	indirekt
Go	github.com/aws/aws-sdk-go-v2/service/sso	`v1.30.17`	indirekt
Go	github.com/aws/aws-sdk-go-v2/service/ssooidc	`v1.35.21`	indirekt
Go	github.com/aws/aws-sdk-go-v2/service/sts	`v1.42.1`	indirekt
Go	github.com/aws/smithy-go	`v1.25.1`	indirekt
Go	github.com/beorn7/perks	`v1.0.1`	indirekt
Go	github.com/blang/semver/v4	`v4.0.0`	indirekt
Go	github.com/cespare/xxhash/v2	`v2.3.0`	indirekt
Go	github.com/davecgh/go-spew	`v1.1.2-0.20180830191138-d8f796af33cc`	indirekt
Go	github.com/emicklei/go-restful/v3	`v3.13.0`	indirekt
Go	github.com/envoyproxy/protoc-gen-validate	`v1.3.3`	indirekt
Go	github.com/evanphx/json-patch/v5	`v5.9.11`	indirekt
Go	github.com/fsnotify/fsnotify	`v1.9.0`	indirekt
Go	github.com/fxamacker/cbor/v2	`v2.9.0`	indirekt
Go	github.com/go-logr/logr	`v1.4.3`	indirekt
Go	github.com/go-logr/zapr	`v1.3.0`	indirekt
Go	github.com/go-openapi/jsonpointer	`v0.21.0`	indirekt
Go	github.com/go-openapi/jsonreference	`v0.20.2`	indirekt
Go	github.com/go-openapi/swag	`v0.25.4`	indirekt
Go	github.com/go-openapi/swag/cmdutils	`v0.25.4`	indirekt
Go	github.com/go-openapi/swag/conv	`v0.25.4`	indirekt
Go	github.com/go-openapi/swag/fileutils	`v0.25.4`	indirekt
Go	github.com/go-openapi/swag/jsonname	`v0.25.4`	indirekt
Go	github.com/go-openapi/swag/jsonutils	`v0.25.4`	indirekt
Go	github.com/go-openapi/swag/loading	`v0.25.4`	indirekt
Go	github.com/go-openapi/swag/mangling	`v0.25.4`	indirekt
Go	github.com/go-openapi/swag/netutils	`v0.25.4`	indirekt
Go	github.com/go-openapi/swag/stringutils	`v0.25.4`	indirekt
Go	github.com/go-openapi/swag/typeutils	`v0.25.4`	indirekt
Go	github.com/go-openapi/swag/yamlutils	`v0.25.4`	indirekt
Go	github.com/go-task/slim-sprig/v3	`v3.0.0`	indirekt
Go	github.com/gogo/protobuf	`v1.3.2`	indirekt
Go	github.com/golang/protobuf	`v1.5.4`	indirekt
Go	github.com/google/btree	`v1.1.3`	indirekt
Go	github.com/google/gnostic-models	`v0.7.0`	indirekt
Go	github.com/google/go-cmp	`v0.7.0`	indirekt
Go	github.com/google/pprof	`v0.0.0-20260402051712-545e8a4df936`	indirekt
Go	github.com/google/uuid	`v1.6.0`	indirekt
Go	github.com/huandu/xstrings	`v1.0.0`	indirekt
Go	github.com/imdario/mergo	`v0.3.4`	indirekt
Go	github.com/inconshreveable/mousetrap	`v1.1.0`	indirekt
Go	github.com/json-iterator/go	`v1.1.12`	indirekt
Go	github.com/masterminds/semver	`v1.4.2`	indirekt
Go	github.com/masterminds/semver/v3	`v3.4.0`	indirekt
Go	github.com/masterminds/sprig	`v2.15.0+incompatible`	indirekt
Go	github.com/modern-go/concurrent	`v0.0.0-20180306012644-bacd9c7ef1dd`	indirekt
Go	github.com/modern-go/reflect2	`v1.0.3-0.20250322232337-35a7c28c31ee`	indirekt
Go	github.com/munnerz/goautoneg	`v0.0.0-20191010083416-a7dc8b61c822`	indirekt
Go	github.com/mwitkow/go-proto-validators	`v0.0.0-20180403085117-0950a7990007`	indirekt
Go	github.com/pmezard/go-difflib	`v1.0.0`	indirekt
Go	github.com/prometheus/client_model	`v0.6.2`	indirekt
Go	github.com/prometheus/common	`v0.66.1`	indirekt
Go	github.com/prometheus/procfs	`v0.16.1`	indirekt
Go	github.com/pseudomuto/protokit	`v0.2.0`	indirekt
Go	github.com/spf13/pflag	`v1.0.10`	indirekt
Go	github.com/x448/float16	`v0.8.4`	indirekt
Go	go.opentelemetry.io/otel	`v1.43.0`	indirekt
Go	go.opentelemetry.io/otel/trace	`v1.43.0`	indirekt
Go	go.uber.org/multierr	`v1.11.0`	indirekt
Go	go.uber.org/zap	`v1.27.0`	indirekt
Go	go.yaml.in/yaml/v2	`v2.4.3`	indirekt
Go	go.yaml.in/yaml/v3	`v3.0.4`	indirekt
Go	golang.org/x/crypto	`v0.50.0`	indirekt
Go	golang.org/x/mod	`v0.35.0`	indirekt
Go	golang.org/x/net	`v0.53.0`	indirekt
Go	golang.org/x/oauth2	`v0.36.0`	indirekt
Go	golang.org/x/sync	`v0.20.0`	indirekt
Go	golang.org/x/sys	`v0.43.0`	indirekt
Go	golang.org/x/term	`v0.42.0`	indirekt
Go	golang.org/x/text	`v0.36.0`	indirekt
Go	golang.org/x/tools	`v0.44.0`	indirekt
Go	gomodules.xyz/jsonpatch/v2	`v2.4.0`	indirekt
Go	google.golang.org/genproto/googleapis/api	`v0.0.0-20260226221140-a57be14db171`	indirekt
Go	google.golang.org/genproto/googleapis/rpc	`v0.0.0-20260226221140-a57be14db171`	indirekt
Go	gopkg.in/evanphx/json-patch.v4	`v4.13.0`	indirekt
Go	gopkg.in/inf.v0	`v0.9.1`	indirekt
Go	gopkg.in/yaml.v3	`v3.0.1`	indirekt
Go	k8s.io/apiextensions-apiserver	`v0.35.0`	indirekt
Go	k8s.io/apiserver	`v0.35.4`	indirekt
Go	k8s.io/component-base	`v0.35.4`	indirekt
Go	k8s.io/controller-manager	`v0.35.4`	indirekt
Go	k8s.io/klog/v2	`v2.140.0`	indirekt
Go	sigs.k8s.io/json	`v0.0.0-20250730193827-2d320260d730`	indirekt
Go	sigs.k8s.io/randfill	`v1.0.0`	indirekt
Go	sigs.k8s.io/structured-merge-diff/v6	`v6.3.2`	indirekt

Abhängigkeits-Advisories 6

Dieses Repository veröffentlicht kein vom Index auflösbares Paket, daher wurde sein eigener Abhängigkeitsgraph bewertet – 119 Pakete, darunter auch Entwicklungs- und Test-Pins, die nie ausgeliefert werden: 6 tragen bekannte Advisories, davon 2 direkte.

Paket	Version	Beziehung	Schweregrad	Advisories	Behoben in
google.golang.org/grpc	`v1.81.0`	direkt	kritisch	1	`1.82.1`
golang.org/x/crypto	`v0.50.0`	indirekt	kritisch	27	`0.52.0`
golang.org/x/net	`v0.53.0`	indirekt	mittel	8	`0.56.0`
k8s.io/kubernetes	`v1.35.4`	direkt	unbekannt	2	—
golang.org/x/sys	`v0.43.0`	indirekt	unbekannt	1	`0.44.0`
golang.org/x/text	`v0.36.0`	indirekt	unbekannt	1	`0.39.0`

Ein Advisory bedeutet, dass die im Abhängigkeitsgraphen erfasste Version in den betroffenen Bereich eines Advisories fällt. Erreichbarkeit wird nicht analysiert, und der Graph enthält Entwicklungs- und Test-Pins — ein Fund kann das Werkzeug betreffen und nicht die ausgelieferte Software.

JSON-Rohbericht maschinenlesbar

{
  "data": {
    "repo": {
      "topics": [],
      "is_fork": false,
      "size_kb": 1695,
      "has_wiki": true,
      "homepage": null,
      "languages": {
        "Go": 782264,
        "Shell": 6488,
        "Makefile": 32983,
        "Dockerfile": 6427,
        "Go Template": 5461
      },
      "pushed_at": "2026-07-24T10:05:16Z",
      "created_at": "2024-01-29T06:17:51Z",
      "owner_type": "Organization",
      "updated_at": "2026-07-23T09:47:13Z",
      "description": null,
      "is_archived": false,
      "is_disabled": false,
      "license_spdx": "Apache-2.0",
      "default_branch": "main",
      "license_spdx_raw": "Apache-2.0",
      "primary_language": "Go",
      "significant_languages": [
        "Go"
      ]
    },
    "owner": {
      "blog": "https://github.com/cybozu/",
      "name": "Cybozu Go",
      "type": "Organization",
      "login": "cybozu-go",
      "company": null,
      "location": "Japan",
      "followers": 73,
      "avatar_url": "https://avatars.githubusercontent.com/u/17453711?v=4",
      "created_at": "2016-02-24T13:52:03Z",
      "is_verified": null,
      "public_repos": 69,
      "account_age_days": 3802
    },
    "license": {
      "state": "standard",
      "spdx_id": "Apache-2.0",
      "raw_spdx": "Apache-2.0",
      "file_present": true,
      "scorecard_found": true,
      "profile_has_license": true
    },
    "activity": {
      "releases": [
        {
          "tag": "mantle-cluster-wide-chart-v0.3.6",
          "kind": "other",
          "published_at": "2026-07-21T05:46:43Z"
        },
        {
          "tag": "mantle-chart-v0.4.13",
          "kind": "other",
          "published_at": "2026-07-21T05:46:42Z"
        },
        {
          "tag": "v0.13.0",
          "kind": "minor",
          "published_at": "2026-07-17T09:08:26Z"
        },
        {
          "tag": "mantle-cluster-wide-chart-v0.3.5",
          "kind": "other",
          "published_at": "2026-07-10T06:02:00Z"
        },
        {
          "tag": "mantle-chart-v0.4.12",
          "kind": "other",
          "published_at": "2026-07-10T06:01:59Z"
        },
        {
          "tag": "v0.12.1",
          "kind": "patch",
          "published_at": "2026-07-10T01:24:55Z"
        },
        {
          "tag": "ceph-export-diff-v20.2.1.0",
          "kind": "other",
          "published_at": "2026-07-09T09:23:18Z"
        },
        {
          "tag": "mantle-cluster-wide-chart-v0.3.4",
          "kind": "other",
          "published_at": "2026-07-06T00:38:36Z"
        },
        {
          "tag": "mantle-chart-v0.4.11",
          "kind": "other",
          "published_at": "2026-07-06T00:38:35Z"
        },
        {
          "tag": "v0.12.0",
          "kind": "minor",
          "published_at": "2026-07-03T07:02:17Z"
        },
        {
          "tag": "mantle-chart-v0.4.10",
          "kind": "other",
          "published_at": "2026-06-11T08:35:49Z"
        },
        {
          "tag": "v0.11.3",
          "kind": "patch",
          "published_at": "2026-06-11T06:59:58Z"
        },
        {
          "tag": "mantle-chart-v0.4.9",
          "kind": "other",
          "published_at": "2026-06-03T08:07:57Z"
        },
        {
          "tag": "v0.11.2",
          "kind": "patch",
          "published_at": "2026-06-03T06:56:17Z"
        },
        {
          "tag": "mantle-cluster-wide-chart-v0.3.3",
          "kind": "other",
          "published_at": "2026-05-15T08:53:35Z"
        },
        {
          "tag": "mantle-chart-v0.4.8",
          "kind": "other",
          "published_at": "2026-05-15T08:53:33Z"
        },
        {
          "tag": "v0.11.1",
          "kind": "patch",
          "published_at": "2026-05-15T06:51:32Z"
        },
        {
          "tag": "mantle-chart-v0.4.7",
          "kind": "other",
          "published_at": "2026-04-28T04:13:22Z"
        },
        {
          "tag": "v0.11.0",
          "kind": "minor",
          "published_at": "2026-04-28T01:09:38Z"
        },
        {
          "tag": "mantle-chart-v0.4.6",
          "kind": "other",
          "published_at": "2026-04-01T06:22:20Z"
        },
        {
          "tag": "v0.10.3",
          "kind": "patch",
          "published_at": "2026-04-01T01:42:47Z"
        },
        {
          "tag": "mantle-chart-v0.4.5",
          "kind": "other",
          "published_at": "2026-03-24T03:00:12Z"
        },
        {
          "tag": "v0.10.2",
          "kind": "patch",
          "published_at": "2026-03-24T00:35:42Z"
        },
        {
          "tag": "mantle-cluster-wide-chart-v0.3.2",
          "kind": "other",
          "published_at": "2026-03-04T06:48:37Z"
        },
        {
          "tag": "mantle-chart-v0.4.4",
          "kind": "other",
          "published_at": "2026-03-04T06:48:36Z"
        },
        {
          "tag": "v0.10.1",
          "kind": "patch",
          "published_at": "2026-03-03T04:50:38Z"
        },
        {
          "tag": "mantle-chart-v0.4.3",
          "kind": "other",
          "published_at": "2026-01-13T06:56:28Z"
        },
        {
          "tag": "v0.10.0",
          "kind": "minor",
          "published_at": "2026-01-13T05:31:20Z"
        },
        {
          "tag": "mantle-chart-v0.4.2",
          "kind": "other",
          "published_at": "2026-01-07T00:40:46Z"
        },
        {
          "tag": "v0.9.2",
          "kind": "patch",
          "published_at": "2026-01-06T08:06:55Z"
        },
        {
          "tag": "mantle-chart-v0.4.1",
          "kind": "other",
          "published_at": "2026-01-05T04:36:47Z"
        },
        {
          "tag": "v0.9.1",
          "kind": "patch",
          "published_at": "2026-01-05T02:43:06Z"
        },
        {
          "tag": "mantle-chart-v0.4.0",
          "kind": "other",
          "published_at": "2025-12-23T06:35:20Z"
        },
        {
          "tag": "v0.9.0",
          "kind": "minor",
          "published_at": "2025-12-23T01:17:31Z"
        },
        {
          "tag": "mantle-chart-v0.3.10",
          "kind": "other",
          "published_at": "2025-12-17T04:25:49Z"
        },
        {
          "tag": "v0.8.5",
          "kind": "patch",
          "published_at": "2025-12-17T02:33:11Z"
        },
        {
          "tag": "mantle-chart-v0.3.9",
          "kind": "other",
          "published_at": "2025-12-11T09:17:53Z"
        },
        {
          "tag": "v0.8.4",
          "kind": "patch",
          "published_at": "2025-12-11T02:09:19Z"
        },
        {
          "tag": "v0.8.3",
          "kind": "patch",
          "published_at": "2025-12-09T06:57:41Z"
        },
        {
          "tag": "v0.8.2",
          "kind": "patch",
          "published_at": "2025-12-08T08:36:31Z"
        },
        {
          "tag": "mantle-cluster-wide-chart-v0.3.1",
          "kind": "other",
          "published_at": "2025-12-04T02:36:10Z"
        },
        {
          "tag": "mantle-chart-v0.3.8",
          "kind": "other",
          "published_at": "2025-12-04T02:36:08Z"
        },
        {
          "tag": "v0.8.1",
          "kind": "patch",
          "published_at": "2025-12-03T08:14:02Z"
        },
        {
          "tag": "v0.8.0",
          "kind": "minor",
          "published_at": "2025-12-02T05:17:43Z"
        },
        {
          "tag": "mantle-chart-v0.3.7",
          "kind": "other",
          "published_at": "2025-11-06T01:40:24Z"
        },
        {
          "tag": "v0.7.4",
          "kind": "patch",
          "published_at": "2025-11-05T07:33:20Z"
        },
        {
          "tag": "mantle-chart-v0.3.6",
          "kind": "other",
          "published_at": "2025-10-06T00:46:55Z"
        },
        {
          "tag": "v0.7.3",
          "kind": "patch",
          "published_at": "2025-10-03T05:50:09Z"
        },
        {
          "tag": "mantle-chart-v0.3.5",
          "kind": "other",
          "published_at": "2025-09-03T00:36:00Z"
        },
        {
          "tag": "v0.7.2",
          "kind": "patch",
          "published_at": "2025-09-02T01:54:09Z"
        },
        {
          "tag": "mantle-chart-v0.3.4",
          "kind": "other",
          "published_at": "2025-08-12T07:21:53Z"
        },
        {
          "tag": "v0.7.1",
          "kind": "patch",
          "published_at": "2025-08-12T04:56:08Z"
        },
        {
          "tag": "mantle-cluster-wide-chart-v0.3.0",
          "kind": "other",
          "published_at": "2025-07-17T01:15:35Z"
        },
        {
          "tag": "v0.7.0",
          "kind": "minor",
          "published_at": "2025-07-16T07:51:05Z"
        },
        {
          "tag": "mantle-chart-v0.3.3",
          "kind": "other",
          "published_at": "2025-06-20T04:47:56Z"
        },
        {
          "tag": "v0.6.1",
          "kind": "patch",
          "published_at": "2025-06-20T04:32:32Z"
        },
        {
          "tag": "mantle-cluster-wide-chart-v0.2.4",
          "kind": "other",
          "published_at": "2025-06-19T06:33:10Z"
        },
        {
          "tag": "mantle-chart-v0.3.2",
          "kind": "other",
          "published_at": "2025-06-19T06:33:09Z"
        },
        {
          "tag": "v0.6.0",
          "kind": "minor",
          "published_at": "2025-06-19T02:40:02Z"
        },
        {
          "tag": "mantle-chart-v0.3.1",
          "kind": "other",
          "published_at": "2025-05-20T04:45:24Z"
        },
        {
          "tag": "mantle-chart-v0.3.0",
          "kind": "other",
          "published_at": "2025-05-16T05:29:44Z"
        },
        {
          "tag": "v0.5.0",
          "kind": "minor",
          "published_at": "2025-05-16T02:32:36Z"
        },
        {
          "tag": "mantle-chart-v0.2.9",
          "kind": "other",
          "published_at": "2025-04-15T07:33:53Z"
        },
        {
          "tag": "v0.4.3",
          "kind": "patch",
          "published_at": "2025-04-15T05:06:13Z"
        },
        {
          "tag": "mantle-chart-v0.2.8",
          "kind": "other",
          "published_at": "2025-04-01T08:25:05Z"
        },
        {
          "tag": "v0.4.2",
          "kind": "patch",
          "published_at": "2025-04-01T04:18:50Z"
        },
        {
          "tag": "mantle-chart-v0.2.7",
          "kind": "other",
          "published_at": "2025-03-27T07:52:35Z"
        },
        {
          "tag": "v0.4.1",
          "kind": "patch",
          "published_at": "2025-03-27T06:45:47Z"
        },
        {
          "tag": "mantle-chart-v0.2.6",
          "kind": "other",
          "published_at": "2025-03-25T05:16:55Z"
        },
        {
          "tag": "mantle-cluster-wide-chart-v0.2.3",
          "kind": "other",
          "published_at": "2025-03-24T07:55:25Z"
        },
        {
          "tag": "mantle-chart-v0.2.5",
          "kind": "other",
          "published_at": "2025-03-24T07:55:24Z"
        },
        {
          "tag": "v0.4.0",
          "kind": "minor",
          "published_at": "2025-03-24T05:38:59Z"
        },
        {
          "tag": "ceph-export-diff-v19.2.1.0",
          "kind": "other",
          "published_at": "2025-03-17T08:13:47Z"
        },
        {
          "tag": "mantle-chart-v0.2.4",
          "kind": "other",
          "published_at": "2025-02-27T01:31:26Z"
        },
        {
          "tag": "v0.3.2",
          "kind": "patch",
          "published_at": "2025-02-26T07:25:10Z"
        },
        {
          "tag": "ceph-export-diff-v16.2.4.3",
          "kind": "other",
          "published_at": "2025-02-12T08:44:42Z"
        },
        {
          "tag": "ceph-export-diff-v16.2.4.2",
          "kind": "other",
          "published_at": "2025-01-30T02:41:35Z"
        },
        {
          "tag": "ceph-export-diff-v16.2.4.1",
          "kind": "other",
          "published_at": "2025-01-29T02:25:46Z"
        },
        {
          "tag": "mantle-chart-v0.2.3",
          "kind": "other",
          "published_at": "2025-01-24T06:23:36Z"
        },
        {
          "tag": "v0.3.1",
          "kind": "patch",
          "published_at": "2025-01-23T08:07:59Z"
        },
        {
          "tag": "ceph-export-diff-v18.2.4.0",
          "kind": "other",
          "published_at": "2025-01-23T03:59:32Z"
        },
        {
          "tag": "mantle-cluster-wide-chart-v0.2.2",
          "kind": "other",
          "published_at": "2025-01-15T02:04:34Z"
        },
        {
          "tag": "mantle-chart-v0.2.2",
          "kind": "other",
          "published_at": "2025-01-15T02:04:33Z"
        },
        {
          "tag": "v0.3.0",
          "kind": "minor",
          "published_at": "2025-01-14T07:42:16Z"
        },
        {
          "tag": "mantle-cluster-wide-chart-v0.2.1",
          "kind": "other",
          "published_at": "2024-12-12T01:12:19Z"
        },
        {
          "tag": "mantle-chart-v0.2.1",
          "kind": "other",
          "published_at": "2024-12-12T01:12:18Z"
        },
        {
          "tag": "v0.2.1",
          "kind": "patch",
          "published_at": "2024-12-10T04:57:14Z"
        },
        {
          "tag": "mantle-cluster-wide-chart-v0.2.0",
          "kind": "other",
          "published_at": "2024-12-05T04:16:07Z"
        },
        {
          "tag": "mantle-chart-v0.2.0",
          "kind": "other",
          "published_at": "2024-12-05T04:16:06Z"
        },
        {
          "tag": "v0.2.0",
          "kind": "minor",
          "published_at": "2024-12-04T07:26:47Z"
        },
        {
          "tag": "mantle-chart-v0.1.1",
          "kind": "other",
          "published_at": "2024-06-26T02:53:14Z"
        },
        {
          "tag": "mantle-cluster-wide-chart-v0.1.0",
          "kind": "other",
          "published_at": "2024-06-26T01:44:50Z"
        },
        {
          "tag": "v0.1.0",
          "kind": "minor",
          "published_at": "2024-06-26T01:41:29Z"
        }
      ],
      "recent_commits": [
        {
          "oid": "3bc34ec80125970c67adeb5f19f81185272d52ab",
          "body": "test(controller): fix flaky restore unit test",
          "is_bot": false,
          "headline": "Merge pull request #326 from cybozu-go/fix-flaky-test",
          "author_name": "Satoru Takeuchi",
          "author_login": "satoru-takeuchi",
          "committed_at": "2026-07-23T09:47:08Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "99650e87c100f6b362095a8ac9a232e174e3d9d0",
          "body": "fix osd CLBO on e2e",
          "is_bot": false,
          "headline": "Merge pull request #329 from cybozu-go/fix-unstable-e2e-osd",
          "author_name": "Ryotaro Banno",
          "author_login": "ushitora-anqou",
          "committed_at": "2026-07-22T02:24:19Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "6ddcd439fbe138db0b18a7d5d528dcc783a6a710",
          "body": "The loop device was sometimes initialized twice, causing the OSD to become\nCLBO. We reviewed the settings to avoid this unnecessary initialization.\n\nSigned-off-by: Yuji Ito <llamerada.jp@gmail.com>",
          "is_bot": false,
          "headline": "fix osd CLBO on e2e",
          "author_name": "Yuji Ito",
          "author_login": "llamerada-jp",
          "committed_at": "2026-07-21T09:16:01Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "968ad780edd1731e8896380eea15d9a4c8e5d42c",
          "body": "Bump mantle chart version to 0.4.13",
          "is_bot": false,
          "headline": "Merge pull request #327 from cybozu-go/bump-mantle-chart-0.4.13",
          "author_name": "Yuji Ito",
          "author_login": "llamerada-jp",
          "committed_at": "2026-07-21T05:13:25Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "8e3105610d7e66cae10c01cfdf00dae06264f677",
          "body": "…-0.3.6\n\nBump mantle-cluster-wide chart version to 0.3.6",
          "is_bot": false,
          "headline": "Merge pull request #328 from cybozu-go/bump-mantle-cluster-wide-chart…",
          "author_name": "Satoru Takeuchi",
          "author_login": "satoru-takeuchi",
          "committed_at": "2026-07-21T02:06:40Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "8133dac101380c8e5cf2992b8f196071eecde3a7",
          "body": "The deleteRestoringPVC and deleteRestoringPV tests called these\nfunctions right after creating the PVC/PV via the API server. Both\nfunctions read the object through the manager's cached client and\nreturn nil on NotFound, so they could miss the object and skip the\ndeletion before the cache caught up, failing the tests\nintermittently.\n\nIntroduce the waitForObjectToBeCached helper and use it to wait until\nthe cached client observes the PVC/PV before calling\ndeleteRestoringPVC/deleteRestoringPV.",
          "is_bot": false,
          "headline": "test(controller): fix flaky restore unit tests",
          "author_name": "Ryotaro Banno",
          "author_login": "ushitora-anqou",
          "committed_at": "2026-07-17T09:22:39Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "cbf4c23840742db21d0d094c82e4e90d6d8f9965",
          "body": "Signed-off-by: Ryotaro Banno <ryotaro.banno@gmail.com>",
          "is_bot": false,
          "headline": "Bump mantle-cluster-wide chart version to 0.3.6",
          "author_name": "Ryotaro Banno",
          "author_login": "ushitora-anqou",
          "committed_at": "2026-07-17T09:14:10Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "1a7d56effbba33491a80057dacdfe09f18b9a425",
          "body": "Signed-off-by: Ryotaro Banno <ryotaro.banno@gmail.com>",
          "is_bot": false,
          "headline": "Bump mantle chart version to 0.4.13",
          "author_name": "Ryotaro Banno",
          "author_login": "ushitora-anqou",
          "committed_at": "2026-07-17T09:12:24Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "491f2dcdef72c2263bf2177c8d1d372021221f14",
          "body": "feat(controller): limit export data PVC creation",
          "is_bot": false,
          "headline": "Merge pull request #324 from cybozu-go/limit-export-data-pvc-creation",
          "author_name": "Kyori Sakao",
          "author_login": "molpako",
          "committed_at": "2026-07-17T08:22:53Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "1890e77436c8fdd690f301a5d59892ea6b395d98",
          "body": "Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>",
          "is_bot": false,
          "headline": "fix(controller): correct upload jobs flag help",
          "author_name": "Ryotaro Banno",
          "author_login": "ushitora-anqou",
          "committed_at": "2026-07-17T04:41:08Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "b37bd2a0221c220e024d9576ab02b63b7cf4f069",
          "body": "Add a flag to the primary mantle-controller to limit the number of\nexport data PVCs that exist simultaneously, and make the reconciler\nthrottle PVC creation accordingly.\n\nTo prevent a multi-part backup from deadlocking under this limit:\n\n- Delete the export data PVC of the latest completed part as s\n[…]\ntaPVCs=1, plus a multik8s e2e\ntest that verifies a multi-part backup completes when\n--max-export-data-pvcs is 1 on a real cluster.\n\nCo-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>",
          "is_bot": false,
          "headline": "feat(controller): limit export data PVC creation",
          "author_name": "Ryotaro Banno",
          "author_login": "ushitora-anqou",
          "committed_at": "2026-07-17T04:41:08Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "52896dce26e4fce02e3f928fcc4904e63c3b6276",
          "body": "…n-helm-upgrade\n\nfix(e2e): force Helm conflicts for Rook installs",
          "is_bot": false,
          "headline": "Merge pull request #325 from cybozu-go/Makefile/set-force-conflicts-i…",
          "author_name": "Kohya Shiozaki",
          "author_login": "skoya76",
          "committed_at": "2026-07-13T05:59:35Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "0b3c7bdb6c599e4442d1e424a109da542c71a773",
          "body": "When retrying Rook installation, Helm fails with the following error:\n\n> Error: UPGRADE FAILED: conflict occurred while applying object\n> rook-ceph/rook-ceph ceph.rook.io/v1, Kind=CephCluster: Apply failed with\n> 3 conflicts: conflicts with \"rook\" using ceph.rook.io/v1:\n> - .spec.healthCheck.daemonH\n[…]\nce-conflicts to the Rook\nCeph cluster Helm install retries so that Helm can overwrite Server-Side\nApply field ownership conflicts.\n\nCo-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>",
          "is_bot": false,
          "headline": "fix(e2e): force Helm conflicts for Rook installs",
          "author_name": "Ryotaro Banno",
          "author_login": "ushitora-anqou",
          "committed_at": "2026-07-10T08:41:16Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "085557b8e4f5e7f40f717bfb4eb03c80f611ff0a",
          "body": "Bump mantle chart version to 0.4.12",
          "is_bot": false,
          "headline": "Merge pull request #322 from cybozu-go/bump-mantle-chart-0.4.12",
          "author_name": "Kohya Shiozaki",
          "author_login": "skoya76",
          "committed_at": "2026-07-10T05:21:31Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "c735ba092d79a1f19bc25bd1d503b59b4c181c28",
          "body": "add linters for GitHub workflows and actions",
          "is_bot": false,
          "headline": "Merge pull request #316 from cybozu-go/add-action-linters",
          "author_name": "Kyori Sakao",
          "author_login": "molpako",
          "committed_at": "2026-07-10T04:27:54Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "8bc6d422833493db245733b15ad54236f9aa2c03",
          "body": "…-0.3.5\n\nBump mantle-cluster-wide chart version to 0.3.5",
          "is_bot": false,
          "headline": "Merge pull request #323 from cybozu-go/bump-mantle-cluster-wide-chart…",
          "author_name": "Kohya Shiozaki",
          "author_login": "skoya76",
          "committed_at": "2026-07-10T04:26:20Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "aac1d0ab0e9d06c22991808e83d1513e3e18a552",
          "body": "Signed-off-by: Kyori Sakao <sakaok@cybozu.co.jp>",
          "is_bot": false,
          "headline": "Bump mantle-cluster-wide chart version to 0.3.5",
          "author_name": "Kyori Sakao",
          "author_login": "molpako",
          "committed_at": "2026-07-10T02:37:21Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "f1691b05ba23938239230473a9197318f1de8af8",
          "body": "Signed-off-by: Kyori Sakao <sakaok@cybozu.co.jp>",
          "is_bot": false,
          "headline": "Bump mantle chart version to 0.4.12",
          "author_name": "Kyori Sakao",
          "author_login": "molpako",
          "committed_at": "2026-07-10T01:53:46Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "1971a5f632862566ce561dd5548cb5059022083c",
          "body": "Signed-off-by: Shinya Hayashi <shinya-hayashi@cybozu.co.jp>",
          "is_bot": false,
          "headline": "ci: fix zizmor errors",
          "author_name": "Shinya Hayashi",
          "author_login": "peng225",
          "committed_at": "2026-07-10T01:32:21Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "95e03fa63cc9326baec1597117387cd865b44f71",
          "body": "Signed-off-by: Shinya Hayashi <shinya-hayashi@cybozu.co.jp>",
          "is_bot": false,
          "headline": "ci: validate GitHub Actions configurations with zizmor",
          "author_name": "Shinya Hayashi",
          "author_login": "peng225",
          "committed_at": "2026-07-10T01:32:21Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "c7d44d546286c447e5ed905b6812152de50b0c57",
          "body": "Signed-off-by: Shinya Hayashi <shinya-hayashi@cybozu.co.jp>",
          "is_bot": false,
          "headline": "ci: fix ghalint errors",
          "author_name": "Shinya Hayashi",
          "author_login": "peng225",
          "committed_at": "2026-07-10T01:32:21Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "26e7dcde8fd63bf0dc8f7de23da2e7d55eb514c3",
          "body": "bump export-diff command v20.2.1.0",
          "is_bot": false,
          "headline": "Merge pull request #320 from cybozu-go/bump-export-diff-v20.2.1.0",
          "author_name": "Ryotaro Banno",
          "author_login": "ushitora-anqou",
          "committed_at": "2026-07-10T00:40:59Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "21ff4a65aa6fe904f48502c4d9a5e990a451803a",
          "body": "Use https://github.com/cybozu-go/mantle/releases/tag/ceph-export-diff-v20.2.1.0\n\nSigned-off-by: Kyori Sakao <sakaok@cybozu.co.jp>",
          "is_bot": false,
          "headline": "bump export-diff command v20.2.1.0",
          "author_name": "Kyori Sakao",
          "author_login": "molpako",
          "committed_at": "2026-07-09T09:40:58Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "3d60f5445b66407cde3cd07198cd31a1b38924a6",
          "body": "ISSUE_TEMPLATE: add kubebuilder to the TODO list",
          "is_bot": false,
          "headline": "Merge pull request #314 from cybozu-go/push-tqkkztxrwovp",
          "author_name": "Kyori Sakao",
          "author_login": "molpako",
          "committed_at": "2026-07-09T08:28:23Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "5a0ef0fb1fbfa3ccac39d005814c2a2a26c93a28",
          "body": "fix typo in ceph/README.md",
          "is_bot": false,
          "headline": "Merge pull request #317 from cybozu-go/fix-typo",
          "author_name": "Kohya Shiozaki",
          "author_login": "skoya76",
          "committed_at": "2026-07-09T08:13:35Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "75e98429fab98142f4fe174ca69702876a02be78",
          "body": "Signed-off-by: Shinya Hayashi <shinya-hayashi@cybozu.co.jp>",
          "is_bot": false,
          "headline": "ci: validate GitHub Actions configurations with ghalint",
          "author_name": "Shinya Hayashi",
          "author_login": "peng225",
          "committed_at": "2026-07-09T06:48:15Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "2998f25497722e1e7213d8f7e25a662b08c4b83c",
          "body": "ceph: update to v20.2.1",
          "is_bot": false,
          "headline": "Merge pull request #318 from cybozu-go/bump-ceph-tentacle",
          "author_name": "Kohya Shiozaki",
          "author_login": "skoya76",
          "committed_at": "2026-07-09T06:07:18Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "57cf205d09f68f51c246039c6bd9b4b644326a09",
          "body": "Signed-off-by: Shinya Hayashi <shinya-hayashi@cybozu.co.jp>",
          "is_bot": false,
          "headline": "ci: fix actionlint errors",
          "author_name": "Shinya Hayashi",
          "author_login": "peng225",
          "committed_at": "2026-07-09T02:28:09Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "f71dc22ad085aa19aa592bc13685237e8fabec87",
          "body": "Signed-off-by: Shinya Hayashi <shinya-hayashi@cybozu.co.jp>",
          "is_bot": false,
          "headline": "ci: validate GitHub Actions configurations with actionlint",
          "author_name": "Shinya Hayashi",
          "author_login": "peng225",
          "committed_at": "2026-07-09T02:28:09Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "332460604316e1fe7c4d2f42791f120b488e2859",
          "body": "Pin image digests",
          "is_bot": false,
          "headline": "Merge pull request #313 from cybozu-go/pin-image-digests",
          "author_name": "Satoru Takeuchi",
          "author_login": "satoru-takeuchi",
          "committed_at": "2026-07-09T01:42:56Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "9ba8b75b4549f678339537c07c55798967815151",
          "body": "Remove the  patch that added the systemd unit file for ceph-exporter,\nsince it has been merged into upstream ceph in this release.\nhttps://github.com/ceph/ceph/commit/a53c0651fbd8991e258ce7d0e3a80865dabfea88\n\nSigned-off-by: Kyori Sakao <sakaok@cybozu.co.jp>",
          "is_bot": false,
          "headline": "ceph: update to v20.2.1",
          "author_name": "Kyori Sakao",
          "author_login": "molpako",
          "committed_at": "2026-07-09T01:10:40Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "ada9c8e4053774a5903ad294bebb40fcbf37bc7a",
          "body": "test: singlek8s: improve test for multi-controller env",
          "is_bot": false,
          "headline": "Merge pull request #307 from cybozu-go/7388-multi-controller-3",
          "author_name": "Ryotaro Banno",
          "author_login": "ushitora-anqou",
          "committed_at": "2026-07-09T01:09:05Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "b8b5610c37415767fd818fe8d8de100c4d93ec76",
          "body": "Signed-off-by: Yuji Ito <llamerada.jp@gmail.com>",
          "is_bot": false,
          "headline": "test: singlek8s: improve test for multi-controller env",
          "author_name": "Yuji Ito",
          "author_login": "llamerada-jp",
          "committed_at": "2026-07-08T08:40:31Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "a6012e4edfff4a0c7aa2ad76d3148f2c9bc85834",
          "body": "Signed-off-by: Kyori Sakao <system.222.down@gmail.com>",
          "is_bot": false,
          "headline": "fix typo in ceph/README.md",
          "author_name": "Kyori Sakao",
          "author_login": "molpako",
          "committed_at": "2026-07-08T07:38:10Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "fd96d1610e0844f0bb710c1267143bb113409af4",
          "body": "The kubebuilder version compatipble with the new Kubernetes version is\nnow required in the maintenance.md.\n\nSigned-off-by: Ryotaro Banno <ryotaro.banno@gmail.com>",
          "is_bot": false,
          "headline": "ISSUE_TEMPLATE: add kubebuilder to the TODO list",
          "author_name": "Ryotaro Banno",
          "author_login": "ushitora-anqou",
          "committed_at": "2026-07-07T08:28:41Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "b532c087edaea8aec22a3884b6b7f0f5233e75df",
          "body": "Bump mantle chart version to 0.4.11",
          "is_bot": false,
          "headline": "Merge pull request #311 from cybozu-go/bump-mantle-chart-0.4.11",
          "author_name": "Yuji Ito",
          "author_login": "llamerada-jp",
          "committed_at": "2026-07-06T00:31:53Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "81aae93be3868f91fc7995ce8d328c33ce459b69",
          "body": "This is a practice to mitigate the impact of a compromised repository\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>\nSigned-off-by: Toshikuni Fukaya <toshikuni-fukaya@cybozu.co.jp>",
          "is_bot": false,
          "headline": "Pin image digests",
          "author_name": "Toshikuni Fukaya",
          "author_login": "toshipp",
          "committed_at": "2026-07-03T09:46:45Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "83ba3f9594a275979940ce7b4181a8d56152e523",
          "body": "…-0.3.4\n\nBump mantle-cluster-wide chart version to 0.3.4",
          "is_bot": false,
          "headline": "Merge pull request #312 from cybozu-go/bump-mantle-cluster-wide-chart…",
          "author_name": "Kyori Sakao",
          "author_login": "molpako",
          "committed_at": "2026-07-03T08:03:43Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "dffc8f0624b52e1fcbc2781b39921e518585cadf",
          "body": "Signed-off-by: Kohya Shiozaki <kouyan120706@gmail.com>",
          "is_bot": false,
          "headline": "Bump mantle-cluster-wide chart version to 0.3.4",
          "author_name": "Kohya Shiozaki",
          "author_login": "skoya76",
          "committed_at": "2026-07-03T07:10:00Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "0abfb775ac8df5f013aef1d316f1ccbe2809fa7b",
          "body": "Signed-off-by: Kohya Shiozaki <kouyan120706@gmail.com>",
          "is_bot": false,
          "headline": "Bump mantle chart version to 0.4.11",
          "author_name": "Kohya Shiozaki",
          "author_login": "skoya76",
          "committed_at": "2026-07-03T07:09:42Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "24555b3171ed817d9f6a2a6330c76ad1a2dc3c44",
          "body": "…metric\n\nmetrics: add backup_exported_diff_size_bytes",
          "is_bot": false,
          "headline": "Merge pull request #301 from cybozu-go/add-backup-exported-diff-size-…",
          "author_name": "Satoru Takeuchi",
          "author_login": "satoru-takeuchi",
          "committed_at": "2026-07-03T06:45:18Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "865065bef4afe73d13055acdb2fbeef384caf853",
          "body": "Add a backup_exported_diff_size_bytes Gauge, labeled by\npersistentvolumeclaim, resource_namespace, and mantlebackup, so there is one\nseries per MantleBackup. A Gauge is used rather than a Counter because it\nlets us restore the correct value with a single Set() after the controller\nrestarts.\n\nAdd Get\n[…]\nNum and\nhandleCompletedJobsOfComponent) into listCompletedJobsOfComponent, and add\nan e2e check that backup_exported_diff_size_bytes is exposed.\n\nSigned-off-by: Kohya Shiozaki <kouyan120706@gmail.com>",
          "is_bot": false,
          "headline": "metrics: add backup_exported_diff_size_bytes",
          "author_name": "Kohya Shiozaki",
          "author_login": "skoya76",
          "committed_at": "2026-07-03T05:48:38Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "971497488ba361db386a166a5ec98719b9f08fe9",
          "body": "support multi controller",
          "is_bot": false,
          "headline": "Merge pull request #305 from cybozu-go/7388-multi-controller-2",
          "author_name": "Yuji Ito",
          "author_login": "llamerada-jp",
          "committed_at": "2026-07-03T04:38:35Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "7c8ff1cdc641a5ca51f6cfae313b7906058b1192",
          "body": "test: replace %s to \"%s\"",
          "is_bot": false,
          "headline": "Merge pull request #310 from cybozu-go/yaml-placeholders",
          "author_name": "Satoru Takeuchi",
          "author_login": "satoru-takeuchi",
          "committed_at": "2026-07-03T04:21:09Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "15b824379316a9f6b89eff771bc64e640fe4204e",
          "body": "To avoid vscode error on yaml files.\n\nSigned-off-by: Yuji Ito <llamerada.jp@gmail.com>",
          "is_bot": false,
          "headline": "test: replace %s to \"%s\"",
          "author_name": "Yuji Ito",
          "author_login": "llamerada-jp",
          "committed_at": "2026-07-03T02:14:21Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "6c4a567ad9ebe460c5fa19c5b79beb0072c6549a",
          "body": "Signed-off-by: Yuji Ito <llamerada.jp@gmail.com>",
          "is_bot": false,
          "headline": "add tests for CreateMantleBackup api",
          "author_name": "Yuji Ito",
          "author_login": "llamerada-jp",
          "committed_at": "2026-07-02T09:43:32Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "fe58bd4576e6af1426ab9095e6c888e52c56f703",
          "body": "Signed-off-by: Yuji Ito <llamerada.jp@gmail.com>",
          "is_bot": false,
          "headline": "add tests for CreateUpdatePVC",
          "author_name": "Yuji Ito",
          "author_login": "llamerada-jp",
          "committed_at": "2026-07-02T09:43:32Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "510c7244bdec80b74c6b1557497a9139caa912b4",
          "body": "Signed-off-by: Yuji Ito <llamerada.jp@gmail.com>",
          "is_bot": false,
          "headline": "simplify initialization of ResourceManager",
          "author_name": "Yuji Ito",
          "author_login": "llamerada-jp",
          "committed_at": "2026-07-02T09:43:32Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "8fea800e7235e3ac94ed3d2676599b424645c439",
          "body": "Signed-off-by: Yuji Ito <llamerada.jp@gmail.com>",
          "is_bot": false,
          "headline": "add cluster id check for CreateOrUpdatePVC/CreateMantleBackup api",
          "author_name": "Yuji Ito",
          "author_login": "llamerada-jp",
          "committed_at": "2026-07-02T09:43:32Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "a7ad1de2f4a5edd780e17d6b7712b06981439702",
          "body": "The local-backup-target-pvc-uid label is now attached in reconcileLocalBackup\nbefore provisionRBDSnapshot is called, so attaching the same label again in\nprovisionRBDSnapshot is redundant. Remove it together with the extra\nGet/Update round-trip it required.\n\nSigned-off-by: Yuji Ito <llamerada.jp@gmail.com>",
          "is_bot": false,
          "headline": "controller: remove the duplicate label attachment",
          "author_name": "Yuji Ito",
          "author_login": "llamerada-jp",
          "committed_at": "2026-07-02T09:43:32Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "801edd21ab6e3418bf1abf10fc9e2debdf437859",
          "body": "Previously, whether a MantleBackup should be processed by this controller\nwas decided deep in getSnapshotTarget via checkPVCInManagedCluster.\nTherefore, unnecessary processing was being performed.\n\nSigned-off-by: Yuji Ito <llamerada.jp@gmail.com>",
          "is_bot": false,
          "headline": "controller: check the managed MantleBackup early in Reconcile",
          "author_name": "Yuji Ito",
          "author_login": "llamerada-jp",
          "committed_at": "2026-07-02T09:43:32Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "6e6e4a94f154cb4c8c59688e74e6a07fca9afb41",
          "body": "…ub-actions-updates-d744c51a49\n\nbuild(deps): bump the github-actions-updates group with 2 updates",
          "is_bot": false,
          "headline": "Merge pull request #309 from cybozu-go/dependabot/github_actions/gith…",
          "author_name": "Kohya Shiozaki",
          "author_login": "skoya76",
          "committed_at": "2026-07-02T04:30:19Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "345f1d8aeed23a58c199cb2b010e8fc723df6261",
          "body": "controller: introduce reconcileResult for MantleBackupReconciler",
          "is_bot": false,
          "headline": "Merge pull request #299 from cybozu-go/7388-multi-controller",
          "author_name": "Ryotaro Banno",
          "author_login": "ushitora-anqou",
          "committed_at": "2026-07-02T01:49:48Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "4b2aef37303752fbc9827ec3124e8ff649922194",
          "body": "enrich comments to clarify purpose of code",
          "is_bot": false,
          "headline": "Merge pull request #306 from cybozu-go/add-technical-note-3",
          "author_name": "Kyori Sakao",
          "author_login": "molpako",
          "committed_at": "2026-07-02T00:16:54Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "425717264c82b82d6883f3d4e2ab79d544bf66ee",
          "body": "Bumps the github-actions-updates group with 2 updates: [actions/checkout](https://github.com/actions/checkout) and [actions/setup-go](https://github.com/actions/setup-go).\n\n\nUpdates `actions/checkout` from 6.0.2 to 7.0.0\n- [Release notes](https://github.com/actions/checkout/releases)\n- [Changelog](h\n[…]\ndency-version: 6.4.0\n  dependency-type: direct:production\n  update-type: version-update:semver-minor\n  dependency-group: github-actions-updates\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "build(deps): bump the github-actions-updates group with 2 updates",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-07-01T23:08:30Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "19fdf2b09d1476e705247de773c3a335839f27ff",
          "body": "Replace the (ctrl.Result, error) return convention used throughout\nMantleBackupReconciler's helper methods with a single *reconcile.Result\nvalue. reconcile.Result encodes exactly one of four outcomes: success,\nrequeue, error, or \"continue\" (nil), which makes the control flow of\neach step explicit and removes the need to juggle ctrl.Result and error\nside by side at every call site.\n\nSigned-off-by: Yuji Ito <llamerada.jp@gmail.com>",
          "is_bot": false,
          "headline": "controller: introduce reconcileResult for MantleBackupReconciler",
          "author_name": "Yuji Ito",
          "author_login": "llamerada-jp",
          "committed_at": "2026-07-01T06:59:47Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "a2fe4e0cca935d516fc8b93d87a1abfad5d959e5",
          "body": "Signed-off-by: Satoru Takeuchi <satoru.takeuchi@gmail.com>",
          "is_bot": false,
          "headline": "enrich comments to clarify purpose of code",
          "author_name": "Satoru Takeuchi",
          "author_login": "satoru-takeuchi",
          "committed_at": "2026-07-01T03:05:30Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "b9bc4b878f145304f664d83d6af15fe834604be7",
          "body": "Add technical notes for zeroout job",
          "is_bot": false,
          "headline": "Merge pull request #298 from cybozu-go/add-technical-note-2",
          "author_name": "Ryotaro Banno",
          "author_login": "ushitora-anqou",
          "committed_at": "2026-06-22T08:45:23Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "eb9fffaa4e84e80c401889dc2c704bc9f7da86f0",
          "body": "…inikube\n\ne2e: use K8s v1.35.1 supported by the minikube in use",
          "is_bot": false,
          "headline": "Merge pull request #297 from cybozu-go/use-k8s-version-supported-by-m…",
          "author_name": "Yuji Ito",
          "author_login": "llamerada-jp",
          "committed_at": "2026-06-22T04:51:07Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "dea3ab9cb349bbfe29aa4b109198b38813fdc479",
          "body": "Signed-off-by: Satoru Takeuchi <satoru.takeuchi@gmail.com>",
          "is_bot": false,
          "headline": "Add technical notes for zeroout job",
          "author_name": "Satoru Takeuchi",
          "author_login": "satoru-takeuchi",
          "committed_at": "2026-06-22T02:55:19Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "6914aa00d9cab6d415cedc4e48a7de1373c5e13c",
          "body": "follow Kubebuilder recommendations in maintenance",
          "is_bot": false,
          "headline": "Merge pull request #296 from cybozu-go/push-mumuzkuksspl",
          "author_name": "Satoru Takeuchi",
          "author_login": "satoru-takeuchi",
          "committed_at": "2026-06-22T01:31:37Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "12d8d97adb85cf9b2cfe0239a659c18883fe61e3",
          "body": "Signed-off-by: Kyori Sakao <sakaok@cybozu.co.jp>",
          "is_bot": false,
          "headline": "e2e: use K8s v1.35.1 supported by the minikube in use",
          "author_name": "Kyori Sakao",
          "author_login": "molpako",
          "committed_at": "2026-06-22T00:17:24Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "c401a87a217121a02ef94bc653234e79da54e2fb",
          "body": "Kubebuilder uses go 1.25.7, so we should use it, too.\n\ncf. https://github.com/kubernetes-sigs/kubebuilder/blob/v4.14.0/testdata/project-v4/go.mod#L3\n\nNote that, if we try to stick to the versions Kubebuilder is using, we\nshould change k8s.io/* libraries' versions from v0.35.4 to v0.35.2.\nHowever, th\n[…]\n just\nfollow the Go version only. Once we need to support newer versions of\nKubernetes we'll follow the Kubebuilder's recommendetaions strictly.\n\nSigned-off-by: Ryotaro Banno <ryotaro.banno@gmail.com>",
          "is_bot": false,
          "headline": "go.mod: use go 1.25.7",
          "author_name": "Ryotaro Banno",
          "author_login": "ushitora-anqou",
          "committed_at": "2026-06-19T00:20:53Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "c1813d0771d15821e9b0b05532838c9ebe4318df",
          "body": "Signed-off-by: Ryotaro Banno <ryotaro.banno@gmail.com>",
          "is_bot": false,
          "headline": "follow Kubebuilder recommendations in maintenance",
          "author_name": "Ryotaro Banno",
          "author_login": "ushitora-anqou",
          "committed_at": "2026-06-18T08:36:54Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "1bd7c7e6945fda12653d8109a7dcd934e18f5577",
          "body": "…bName\n\nrefactor(domain): extract GetMBCUIDFromCronJobName from controller",
          "is_bot": false,
          "headline": "Merge pull request #295 from cybozu-go/add-domain-GetMBCUIDFromCronJo…",
          "author_name": "Yuji Ito",
          "author_login": "llamerada-jp",
          "committed_at": "2026-06-16T01:09:54Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "71452dcaad48cbeec4c1889be930b8e92eeaf9f6",
          "body": "Extract the CronJob-name-to-MBC-UID mapping logic from the inline\nclosure in SetupWithManager into a domain-layer function.\n\nSigned-off-by: Ryotaro Banno <ryotaro.banno@gmail.com>",
          "is_bot": false,
          "headline": "refactor(domain): extract GetMBCUIDFromCronJobName from controller",
          "author_name": "Ryotaro Banno",
          "author_login": "ushitora-anqou",
          "committed_at": "2026-06-15T09:07:21Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "4c7626d67af9c895bfc3d6f04c4743d964795b42",
          "body": "KAIZEN: add comments explaining the developers' intent.",
          "is_bot": false,
          "headline": "Merge pull request #293 from cybozu-go/add-technical-note",
          "author_name": "Kohya Shiozaki",
          "author_login": "skoya76",
          "committed_at": "2026-06-11T09:51:42Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "0ac07f4b4e46b3535e8ec3c19bbb42a89f656f33",
          "body": "Bump mantle chart version to 0.4.10",
          "is_bot": false,
          "headline": "Merge pull request #294 from cybozu-go/bump-mantle-chart-0.4.10",
          "author_name": "Satoru Takeuchi",
          "author_login": "satoru-takeuchi",
          "committed_at": "2026-06-11T08:34:49Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "e4605fe8f4d7a4b73a4d7363a81c6315c3d38271",
          "body": "Signed-off-by: Yuji Ito <llamerada.jp@gmail.com>",
          "is_bot": false,
          "headline": "Bump mantle chart version to 0.4.10",
          "author_name": "Yuji Ito",
          "author_login": "llamerada-jp",
          "committed_at": "2026-06-11T07:41:16Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "134eca9f3ef03b3f7dbb2b050d3040d6f23bceb9",
          "body": "Fix expire not running when target PVC is deleted before backup expires",
          "is_bot": false,
          "headline": "Merge pull request #276 from cybozu-go/fix-expire",
          "author_name": "Kyori Sakao",
          "author_login": "molpako",
          "committed_at": "2026-06-11T06:37:13Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "64827099baca2e48eec08f623d484c37d23682f9",
          "body": "Signed-off-by: Yuji Ito <llamerada.jp@gmail.com>",
          "is_bot": false,
          "headline": "add GinkgoHelper() for util functions",
          "author_name": "Yuji Ito",
          "author_login": "llamerada-jp",
          "committed_at": "2026-06-11T05:02:11Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "d89c0b61cf8931d4eff4dd9c745c0004be6d3c80",
          "body": "Signed-off-by: Yuji Ito <llamerada.jp@gmail.com>",
          "is_bot": false,
          "headline": "Fix snapshot removal for RBD images in trash",
          "author_name": "Yuji Ito",
          "author_login": "llamerada-jp",
          "committed_at": "2026-06-11T04:55:16Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "005beef329af82fe3b4e122bb42c654dca75ccdb",
          "body": "Signed-off-by: Satoru Takeuchi <satoru.takeuchi@gmail.com>",
          "is_bot": false,
          "headline": "KAIZEN: add comments explaining the developers' intent.",
          "author_name": "Satoru Takeuchi",
          "author_login": "satoru-takeuchi",
          "committed_at": "2026-06-11T02:00:34Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "4f4bf445ac57cccb3be8372df78d1bb99149ad42",
          "body": "Signed-off-by: Yuji Ito <llamerada.jp@gmail.com>",
          "is_bot": false,
          "headline": "Fix RBD snapshot leak when delete PV/PVC before MantleBackup",
          "author_name": "Yuji Ito",
          "author_login": "llamerada-jp",
          "committed_at": "2026-06-10T07:45:28Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "5dae855a07ea545bb1caab7237200793ebc956bf",
          "body": "Signed-off-by: Yuji Ito <llamerada.jp@gmail.com>",
          "is_bot": false,
          "headline": "Fix expire not running when target PVC is deleted before backup expires",
          "author_name": "Yuji Ito",
          "author_login": "llamerada-jp",
          "committed_at": "2026-06-10T07:45:28Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "e6f561b3520879ca26dc9bdd54e2f0f7af1c1d1c",
          "body": "ci: add permissions",
          "is_bot": false,
          "headline": "Merge pull request #291 from cybozu-go/push-mopzqtuqmpmu",
          "author_name": "Kohya Shiozaki",
          "author_login": "skoya76",
          "committed_at": "2026-06-08T07:14:07Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "beec6fb540bb2369d54730ca3d2a876c185d4c94",
          "body": null,
          "is_bot": false,
          "headline": "ci: add permissions",
          "author_name": "Ryotaro Banno",
          "author_login": "ushitora-anqou",
          "committed_at": "2026-06-04T08:20:26Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "d39087ad477523f06ad1a5e706b70244ce3ebc00",
          "body": "…ub-actions-updates-e6ee9d7de3\n\nbuild(deps): bump actions/checkout from 6 to 6.0.2 in the github-actions-updates group",
          "is_bot": false,
          "headline": "Merge pull request #290 from cybozu-go/dependabot/github_actions/gith…",
          "author_name": "Ryotaro Banno",
          "author_login": "ushitora-anqou",
          "committed_at": "2026-06-04T06:30:22Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "f3ace75a0a66c7064aacbf5dbb7443c68478dc04",
          "body": "Bumps the github-actions-updates group with 1 update: [actions/checkout](https://github.com/actions/checkout).\n\n\nUpdates `actions/checkout` from 6 to 6.0.2\n- [Release notes](https://github.com/actions/checkout/releases)\n- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)\n- [Com\n[…]\ndency-version: 6.0.2\n  dependency-type: direct:production\n  update-type: version-update:semver-patch\n  dependency-group: github-actions-updates\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "build(deps): bump actions/checkout in the github-actions-updates group",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-06-03T15:21:19Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "051734dd740e80087855103b2c8c85ab9403e65a",
          "body": "Bump mantle chart version to 0.4.9",
          "is_bot": false,
          "headline": "Merge pull request #289 from cybozu-go/bump-mantle-chart-0.4.9",
          "author_name": "Kohya Shiozaki",
          "author_login": "skoya76",
          "committed_at": "2026-06-03T07:52:25Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "5969fb197c199bda7b19346017c8266499d006c5",
          "body": "Signed-off-by: Ryotaro Banno <ryotaro.banno@gmail.com>",
          "is_bot": false,
          "headline": "Bump mantle chart version to 0.4.9",
          "author_name": "Ryotaro Banno",
          "author_login": "ushitora-anqou",
          "committed_at": "2026-06-03T07:00:15Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "a8d1c467d7a380176ea6b2d9d9a5a6bf210e0947",
          "body": "test(e2e): delete MantleBackups after backup-failure tests to avoid interfering with subsequent tests",
          "is_bot": false,
          "headline": "Merge pull request #287 from cybozu-go/fix-backup-failure-test-flakiness",
          "author_name": "Yuji Ito",
          "author_login": "llamerada-jp",
          "committed_at": "2026-06-01T00:46:19Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "3fbb1a922d74a3958925212b602cdf388507aae8",
          "body": "…nterfering with subsequent tests\n\nThe test \"should handle removal of MantleBackup in secondary k8s cluster\nduring an incremental backup\" was failing with a timeout.\n\nWhen the previous test (primary MantleBackup deletion scenario) finishes, a\nresidual secondary MantleBackup is left behind in \"waitin\n[…]\nps on both clusters at the\nend of each backup-failure test via DeferCleanup, so that no residual\nMantleBackups remain when the next test starts.\n\nSigned-off-by: Kohya Shiozaki <kouyan120706@gmail.com>",
          "is_bot": false,
          "headline": "test(e2e): delete MantleBackups after backup-failure tests to avoid i…",
          "author_name": "Kohya Shiozaki",
          "author_login": "skoya76",
          "committed_at": "2026-05-29T08:18:19Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "f97b5a05d601c798b87821aae9519ec6e995a941",
          "body": "…ph-export-diff-only-on-release\n\ndoc: allow creating tags for ceph-export-diff only on release",
          "is_bot": false,
          "headline": "Merge pull request #288 from cybozu-go/doc-allow-creating-tags-for-ce…",
          "author_name": "Yuji Ito",
          "author_login": "llamerada-jp",
          "committed_at": "2026-05-29T02:09:46Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "4f2e896d4f6e71d4670a43663bdf568b44b25ceb",
          "body": "Add steps to disable tag creation for ceph-export-diff temporarily\non the release process.\n\nSigned-off-by: Satoru Takeuchi <satoru.takeuchi@gmail.com>",
          "is_bot": false,
          "headline": "doc: allow creating tags for ceph-export-diff only on release",
          "author_name": "Satoru Takeuchi",
          "author_login": "satoru-takeuchi",
          "committed_at": "2026-05-29T01:48:38Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "8cb91fefc34bb8ea6c0e2a579cdafaab7adbd945",
          "body": "refactor(controller): move MBC provision logic to domain/usecase/infra layers",
          "is_bot": false,
          "headline": "Merge pull request #277 from cybozu-go/implement-new-mbc-controller",
          "author_name": "Satoru Takeuchi",
          "author_login": "satoru-takeuchi",
          "committed_at": "2026-05-28T01:38:48Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "3b40e6659b7b4f58f7d60cee799590598763b787",
          "body": "…a layers\n\nMove the MantleBackupConfig provision logic (PVC cluster ID lookup,\nfinalizer/annotation setup, metrics export, CronJob create-or-update)\nfrom the controller package into the domain/usecase/infra layers,\nfollowing the same architecture established in PRs #250 and #252.\n\nRemove the ErrNotI\n[…]\nfallback pattern and the duplicated\ncreateOrUpdateCronJob/getMBCCronJobName from the controller.\n\nAdd unit tests for domain.Provision and integration tests for the\nprovision path in the usecase layer.",
          "is_bot": false,
          "headline": "refactor(controller): move MBC provision logic to domain/usecase/infr…",
          "author_name": "Ryotaro Banno",
          "author_login": "ushitora-anqou",
          "committed_at": "2026-05-27T08:18:22Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "f6770fa28eefc676d89f058c87b75a700ae7ed8c",
          "body": "…es-after-our-product-is-ready\n\nIssue template: update kubernetes after our product is ready",
          "is_bot": false,
          "headline": "Merge pull request #286 from cybozu-go/issue-template-update-kubernet…",
          "author_name": "Ryotaro Banno",
          "author_login": "ushitora-anqou",
          "committed_at": "2026-05-26T08:50:18Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "1ef6f661565820f6bbeeed1ee37cddf4234545dd",
          "body": "We need to update kubernetes after our product is ready.\n\nSigned-off-by: Satoru Takeuchi <satoru.takeuchi@gmail.com>",
          "is_bot": false,
          "headline": "issue template: update checklist of task for upgrading kubernetes",
          "author_name": "Satoru Takeuchi",
          "author_login": "satoru-takeuchi",
          "committed_at": "2026-05-26T05:23:54Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "05387c5da7a53a54127e7c94bec77deb477f8738",
          "body": "- Clarify the purpose of each check list\n- Remove redundant text directly under the section heading\n\nSigned-off-by: Satoru Takeuchi <satoru.takeuchi@gmail.com>",
          "is_bot": false,
          "headline": "issue template: cleanup",
          "author_name": "Satoru Takeuchi",
          "author_login": "satoru-takeuchi",
          "committed_at": "2026-05-26T05:23:54Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "d2b60dfbfbc9c53fab95d66412ed059ca33c9844",
          "body": "clarify the k8s update task's checkbox",
          "is_bot": false,
          "headline": "Merge pull request #285 from cybozu-go/clarify-checkbox-meaning",
          "author_name": "Shinya Hayashi",
          "author_login": "peng225",
          "committed_at": "2026-05-26T00:52:40Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "f441eeaebf610d8fca54d6dea594fdec2a6964a1",
          "body": "Signed-off-by: Shinya Hayashi <shinya-hayashi@cybozu.co.jp>",
          "is_bot": false,
          "headline": "clarify the k8s update task's checkbox",
          "author_name": "Shinya Hayashi",
          "author_login": "peng225",
          "committed_at": "2026-05-22T09:53:13Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "6fb2d6238ac5b96e210ab2952929443336d11b0c",
          "body": "…-0.3.3\n\nBump mantle-cluster-wide chart version to 0.3.3",
          "is_bot": false,
          "headline": "Merge pull request #283 from cybozu-go/bump-mantle-cluster-wide-chart…",
          "author_name": "Yuji Ito",
          "author_login": "llamerada-jp",
          "committed_at": "2026-05-15T07:48:11Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "8893f6510adea2fa4658f9d7d2b9c97e91882dce",
          "body": "Bump mantle chart version to 0.4.8",
          "is_bot": false,
          "headline": "Merge pull request #282 from cybozu-go/bump-mantle-chart-0.4.8",
          "author_name": "Yuji Ito",
          "author_login": "llamerada-jp",
          "committed_at": "2026-05-15T07:46:37Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "21acdff6712bf3e1ebc91ec9d7be56d1c6e77470",
          "body": "Signed-off-by: Ryotaro Banno <ryotaro.banno@gmail.com>",
          "is_bot": false,
          "headline": "Bump mantle-cluster-wide chart version to 0.3.3",
          "author_name": "Ryotaro Banno",
          "author_login": "ushitora-anqou",
          "committed_at": "2026-05-15T06:55:14Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "349ac7a8c04af8be20b4960edd828299178c15c0",
          "body": "Signed-off-by: Ryotaro Banno <ryotaro.banno@gmail.com>",
          "is_bot": false,
          "headline": "Bump mantle chart version to 0.4.8",
          "author_name": "Ryotaro Banno",
          "author_login": "ushitora-anqou",
          "committed_at": "2026-05-15T06:52:54Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "237feaba9b4a7f94397cc41961d16d3084f41a07",
          "body": "controller: remove controllerExpandSecretRef and controllerPublishSecretRef from static PVs",
          "is_bot": false,
          "headline": "Merge pull request #280 from cybozu-go/push-nsrprwlxuwvl",
          "author_name": "Yuji Ito",
          "author_login": "llamerada-jp",
          "committed_at": "2026-05-15T05:54:07Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "684e943c65ebc06c22d359d235f26ff0fd372705",
          "body": "Support Kubernetes 1.35",
          "is_bot": false,
          "headline": "Merge pull request #279 from cybozu-go/support-k8s-1.35",
          "author_name": "Satoru Takeuchi",
          "author_login": "satoru-takeuchi",
          "committed_at": "2026-05-15T01:46:48Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "0610deeb84edef112723d5ed3b3172c938c40457",
          "body": "With the upgrade of the Rook Helm chart from v1.18.6 to v1.19.5 (done\nas part of the Kubernetes 1.35 support work), the behavior of `ceph -s`\nchanged: it now exits with code 0 even when no OSDs are running yet,\nwhereas previously it only returned 0 once the cluster was ready for\nstorage operations.\n\n[…]\nng the cluster ready.\nThe e2e test cluster is configured with a single OSD\n(storageClassDeviceSets.count: 1), so one OSD being up is sufficient.\n\nSigned-off-by: Kohya Shiozaki <kouyan120706@gmail.com>",
          "is_bot": false,
          "headline": "test: wait for OSDs to be up in wait-ceph-ready",
          "author_name": "Kohya Shiozaki",
          "author_login": "skoya76",
          "committed_at": "2026-05-14T23:56:03Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "b470f22b91961eec8ecba47324f4b82b03fc5d38",
          "body": "Fix modernize issues in cmd/controller/main.go and a prealloc issue in\ntest/e2e/singlek8s/util.go.\n\nSigned-off-by: Kohya Shiozaki <kouyan120706@gmail.com>",
          "is_bot": false,
          "headline": "fix lint errors detected by golangci-lint v2.11.4",
          "author_name": "Kohya Shiozaki",
          "author_login": "skoya76",
          "committed_at": "2026-05-14T23:05:21Z",
          "body_truncated": false,
          "is_coding_agent": false
        }
      ],
      "releases_count": 93,
      "commits_last_year": 302,
      "latest_release_at": "2026-07-21T05:46:43Z",
      "latest_release_tag": "mantle-cluster-wide-chart-v0.3.6",
      "releases_from_tags": false,
      "days_since_last_push": 0,
      "active_weeks_last_year": 43,
      "days_since_latest_release": 3,
      "mean_days_between_releases": 2
    },
    "community": {
      "has_readme": true,
      "has_license": true,
      "has_description": false,
      "has_contributing": false,
      "health_percentage": 37,
      "has_issue_template": false,
      "has_code_of_conduct": false,
      "has_pull_request_template": false
    },
    "ecosystem": {
      "packages": [
        {
          "name": "github.com/cybozu-go/mantle",
          "exists": true,
          "license": null,
          "keywords": [],
          "ecosystem": "go",
          "matches_repo": true,
          "registry_url": "https://pkg.go.dev/github.com/cybozu-go/mantle",
          "is_deprecated": false,
          "latest_version": "v0.13.0",
          "repository_url": "https://github.com/cybozu-go/mantle",
          "versions_count": 38,
          "total_downloads": null,
          "dependents_count": null,
          "deprecation_note": null,
          "maintainers_count": null,
          "monthly_downloads": null,
          "first_published_at": null,
          "latest_published_at": "2026-07-17T08:22:53Z",
          "latest_version_yanked": null,
          "days_since_latest_publish": 7
        }
      ]
    },
    "popularity": {
      "forks": 2,
      "stars": 3,
      "watchers": 5,
      "fork_history": {
        "days": [
          {
            "date": "2024-12-07",
            "count": 1
          },
          {
            "date": "2026-01-17",
            "count": 1
          }
        ],
        "complete": true,
        "collected": 2,
        "total_forks": 2
      },
      "star_history": null,
      "open_issues_and_prs": 6
    },
    "ai_readiness": {
      "has_nix": false,
      "example_dirs": [
        "samples"
      ],
      "has_llms_txt": false,
      "has_dockerfile": true,
      "has_mcp_signal": false,
      "bootstrap_files": [
        "Makefile",
        "ceph/Makefile",
        "test/e2e/Makefile"
      ],
      "api_schema_files": [
        "pkg/controller/proto/controller.proto"
      ],
      "has_devcontainer": false,
      "typecheck_configs": [],
      "toolchain_manifests": [
        "go.mod"
      ],
      "largest_source_bytes": 132183,
      "source_files_sampled": 90,
      "oversized_source_files": 2,
      "agent_instruction_files": [],
      "agent_instruction_max_bytes": null
    },
    "dependencies": {
      "manifests": [
        "go.mod"
      ],
      "advisories": {
        "error": null,
        "scope": "repository_graph",
        "source": "osv",
        "findings": [
          {
            "name": "google.golang.org/grpc",
            "direct": true,
            "version": "v1.81.0",
            "severity": "critical",
            "ecosystem": "go",
            "cvss_score": 9.1,
            "advisory_ids": [
              "GHSA-hrxh-6v49-42gf"
            ],
            "fixed_version": "1.82.1",
            "advisory_count": 1,
            "oldest_advisory_days": 2
          },
          {
            "name": "golang.org/x/crypto",
            "direct": false,
            "version": "v0.50.0",
            "severity": "critical",
            "ecosystem": "go",
            "cvss_score": 10,
            "advisory_ids": [
              "GHSA-45gg-vh54-h5m9",
              "GHSA-5cgq-3rg8-m6cv",
              "GHSA-78mq-xcr3-xm33",
              "GHSA-89gr-r52h-f8rx",
              "GHSA-9m57-25v3-79x9",
              "GHSA-f5wc-c3c7-36mc",
              "GHSA-jppx-rxg9-jmrx",
              "GHSA-q4h4-gmj2-qvw2",
              "GHSA-qpw4-5x99-6vjp",
              "GHSA-rm3j-f69w-wqmq"
            ],
            "fixed_version": "0.52.0",
            "advisory_count": 27,
            "oldest_advisory_days": 63
          },
          {
            "name": "golang.org/x/net",
            "direct": false,
            "version": "v0.53.0",
            "severity": "moderate",
            "ecosystem": "go",
            "cvss_score": 6.5,
            "advisory_ids": [
              "GHSA-5cv4-jp36-h3mw",
              "GO-2026-5025",
              "GO-2026-5026",
              "GO-2026-5027",
              "GO-2026-5028",
              "GO-2026-5029",
              "GO-2026-5030",
              "GO-2026-5942"
            ],
            "fixed_version": "0.56.0",
            "advisory_count": 8,
            "oldest_advisory_days": 63
          },
          {
            "name": "k8s.io/kubernetes",
            "direct": true,
            "version": "v1.35.4",
            "severity": "unknown",
            "ecosystem": "go",
            "cvss_score": null,
            "advisory_ids": [
              "GO-2025-3521",
              "GO-2025-3547"
            ],
            "fixed_version": null,
            "advisory_count": 2,
            "oldest_advisory_days": 485
          },
          {
            "name": "golang.org/x/sys",
            "direct": false,
            "version": "v0.43.0",
            "severity": "unknown",
            "ecosystem": "go",
            "cvss_score": null,
            "advisory_ids": [
              "GO-2026-5024"
            ],
            "fixed_version": "0.44.0",
            "advisory_count": 1,
            "oldest_advisory_days": 62
          },
          {
            "name": "golang.org/x/text",
            "direct": false,
            "version": "v0.36.0",
            "severity": "unknown",
            "ecosystem": "go",
            "cvss_score": null,
            "advisory_ids": [
              "GO-2026-5970"
            ],
            "fixed_version": "0.39.0",
            "advisory_count": 1,
            "oldest_advisory_days": 9
          }
        ],
        "collected": true,
        "malicious": [],
        "truncated": false,
        "by_severity": {
          "unknown": 3,
          "critical": 2,
          "moderate": 1
        },
        "advisory_count": 40,
        "affected_count": 6,
        "assessed_count": 119,
        "malicious_count": 0,
        "assessed_package": null,
        "unassessed_count": 0,
        "direct_affected_count": 2
      },
      "ecosystems": [
        "go"
      ],
      "dependencies": [
        {
          "name": "github.com/aws/aws-sdk-go-v2",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.41.7"
        },
        {
          "name": "github.com/aws/aws-sdk-go-v2/config",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.32.17"
        },
        {
          "name": "github.com/aws/aws-sdk-go-v2/service/s3",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.101.0"
        },
        {
          "name": "github.com/grpc-ecosystem/go-grpc-middleware/v2",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v2.3.3"
        },
        {
          "name": "github.com/onsi/ginkgo/v2",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v2.28.3"
        },
        {
          "name": "github.com/onsi/gomega",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.40.0"
        },
        {
          "name": "github.com/prometheus/client_golang",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.23.2"
        },
        {
          "name": "github.com/pseudomuto/protoc-gen-doc",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.5.1"
        },
        {
          "name": "github.com/spf13/cobra",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.10.2"
        },
        {
          "name": "github.com/stretchr/testify",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.11.1"
        },
        {
          "name": "go.uber.org/mock",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.6.0"
        },
        {
          "name": "golang.org/x/time",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.15.0"
        },
        {
          "name": "google.golang.org/grpc",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.81.0"
        },
        {
          "name": "google.golang.org/grpc/cmd/protoc-gen-go-grpc",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.6.2"
        },
        {
          "name": "google.golang.org/protobuf",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.36.11"
        },
        {
          "name": "k8s.io/api",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.35.4"
        },
        {
          "name": "k8s.io/apimachinery",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.35.4"
        },
        {
          "name": "k8s.io/client-go",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.35.4"
        },
        {
          "name": "k8s.io/kube-openapi",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.0.0-20260511211612-da4e56fe5676"
        },
        {
          "name": "k8s.io/kubernetes",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.35.4"
        },
        {
          "name": "k8s.io/utils",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.0.0-20260507154919-ff6756f316d2"
        },
        {
          "name": "sigs.k8s.io/controller-runtime",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.23.3"
        },
        {
          "name": "sigs.k8s.io/yaml",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.6.0"
        }
      ],
      "all_dependencies": {
        "error": null,
        "source": "github-sbom",
        "packages": [
          {
            "name": "github.com/aws/aws-sdk-go-v2",
            "direct": true,
            "version": "v1.41.7",
            "ecosystem": "go"
          },
          {
            "name": "github.com/aws/aws-sdk-go-v2/config",
            "direct": true,
            "version": "v1.32.17",
            "ecosystem": "go"
          },
          {
            "name": "github.com/aws/aws-sdk-go-v2/service/s3",
            "direct": true,
            "version": "v1.101.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/grpc-ecosystem/go-grpc-middleware/v2",
            "direct": true,
            "version": "v2.3.3",
            "ecosystem": "go"
          },
          {
            "name": "github.com/onsi/ginkgo/v2",
            "direct": true,
            "version": "v2.28.3",
            "ecosystem": "go"
          },
          {
            "name": "github.com/onsi/gomega",
            "direct": true,
            "version": "v1.40.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/prometheus/client_golang",
            "direct": true,
            "version": "v1.23.2",
            "ecosystem": "go"
          },
          {
            "name": "github.com/pseudomuto/protoc-gen-doc",
            "direct": true,
            "version": "v1.5.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/spf13/cobra",
            "direct": true,
            "version": "v1.10.2",
            "ecosystem": "go"
          },
          {
            "name": "github.com/stretchr/testify",
            "direct": true,
            "version": "v1.11.1",
            "ecosystem": "go"
          },
          {
            "name": "go.uber.org/mock",
            "direct": true,
            "version": "v0.6.0",
            "ecosystem": "go"
          },
          {
            "name": "golang.org/x/time",
            "direct": true,
            "version": "v0.15.0",
            "ecosystem": "go"
          },
          {
            "name": "google.golang.org/grpc",
            "direct": true,
            "version": "v1.81.0",
            "ecosystem": "go"
          },
          {
            "name": "google.golang.org/grpc/cmd/protoc-gen-go-grpc",
            "direct": true,
            "version": "v1.6.2",
            "ecosystem": "go"
          },
          {
            "name": "google.golang.org/protobuf",
            "direct": true,
            "version": "v1.36.11",
            "ecosystem": "go"
          },
          {
            "name": "k8s.io/api",
            "direct": true,
            "version": "v0.35.4",
            "ecosystem": "go"
          },
          {
            "name": "k8s.io/apimachinery",
            "direct": true,
            "version": "v0.35.4",
            "ecosystem": "go"
          },
          {
            "name": "k8s.io/client-go",
            "direct": true,
            "version": "v0.35.4",
            "ecosystem": "go"
          },
          {
            "name": "k8s.io/kube-openapi",
            "direct": true,
            "version": "v0.0.0-20260511211612-da4e56fe5676",
            "ecosystem": "go"
          },
          {
            "name": "k8s.io/kubernetes",
            "direct": true,
            "version": "v1.35.4",
            "ecosystem": "go"
          },
          {
            "name": "k8s.io/utils",
            "direct": true,
            "version": "v0.0.0-20260507154919-ff6756f316d2",
            "ecosystem": "go"
          },
          {
            "name": "sigs.k8s.io/controller-runtime",
            "direct": true,
            "version": "v0.23.3",
            "ecosystem": "go"
          },
          {
            "name": "sigs.k8s.io/yaml",
            "direct": true,
            "version": "v1.6.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/aokoli/goutils",
            "direct": false,
            "version": "v1.0.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream",
            "direct": false,
            "version": "v1.7.10",
            "ecosystem": "go"
          },
          {
            "name": "github.com/aws/aws-sdk-go-v2/credentials",
            "direct": false,
            "version": "v1.19.16",
            "ecosystem": "go"
          },
          {
            "name": "github.com/aws/aws-sdk-go-v2/feature/ec2/imds",
            "direct": false,
            "version": "v1.18.23",
            "ecosystem": "go"
          },
          {
            "name": "github.com/aws/aws-sdk-go-v2/internal/configsources",
            "direct": false,
            "version": "v1.4.23",
            "ecosystem": "go"
          },
          {
            "name": "github.com/aws/aws-sdk-go-v2/internal/endpoints/v2",
            "direct": false,
            "version": "v2.7.23",
            "ecosystem": "go"
          },
          {
            "name": "github.com/aws/aws-sdk-go-v2/internal/v4a",
            "direct": false,
            "version": "v1.4.24",
            "ecosystem": "go"
          },
          {
            "name": "github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding",
            "direct": false,
            "version": "v1.13.9",
            "ecosystem": "go"
          },
          {
            "name": "github.com/aws/aws-sdk-go-v2/service/internal/checksum",
            "direct": false,
            "version": "v1.9.15",
            "ecosystem": "go"
          },
          {
            "name": "github.com/aws/aws-sdk-go-v2/service/internal/presigned-url",
            "direct": false,
            "version": "v1.13.23",
            "ecosystem": "go"
          },
          {
            "name": "github.com/aws/aws-sdk-go-v2/service/internal/s3shared",
            "direct": false,
            "version": "v1.19.23",
            "ecosystem": "go"
          },
          {
            "name": "github.com/aws/aws-sdk-go-v2/service/signin",
            "direct": false,
            "version": "v1.0.11",
            "ecosystem": "go"
          },
          {
            "name": "github.com/aws/aws-sdk-go-v2/service/sso",
            "direct": false,
            "version": "v1.30.17",
            "ecosystem": "go"
          },
          {
            "name": "github.com/aws/aws-sdk-go-v2/service/ssooidc",
            "direct": false,
            "version": "v1.35.21",
            "ecosystem": "go"
          },
          {
            "name": "github.com/aws/aws-sdk-go-v2/service/sts",
            "direct": false,
            "version": "v1.42.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/aws/smithy-go",
            "direct": false,
            "version": "v1.25.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/beorn7/perks",
            "direct": false,
            "version": "v1.0.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/blang/semver/v4",
            "direct": false,
            "version": "v4.0.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/cespare/xxhash/v2",
            "direct": false,
            "version": "v2.3.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/davecgh/go-spew",
            "direct": false,
            "version": "v1.1.2-0.20180830191138-d8f796af33cc",
            "ecosystem": "go"
          },
          {
            "name": "github.com/emicklei/go-restful/v3",
            "direct": false,
            "version": "v3.13.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/envoyproxy/protoc-gen-validate",
            "direct": false,
            "version": "v1.3.3",
            "ecosystem": "go"
          },
          {
            "name": "github.com/evanphx/json-patch/v5",
            "direct": false,
            "version": "v5.9.11",
            "ecosystem": "go"
          },
          {
            "name": "github.com/fsnotify/fsnotify",
            "direct": false,
            "version": "v1.9.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/fxamacker/cbor/v2",
            "direct": false,
            "version": "v2.9.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/go-logr/logr",
            "direct": false,
            "version": "v1.4.3",
            "ecosystem": "go"
          },
          {
            "name": "github.com/go-logr/zapr",
            "direct": false,
            "version": "v1.3.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/go-openapi/jsonpointer",
            "direct": false,
            "version": "v0.21.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/go-openapi/jsonreference",
            "direct": false,
            "version": "v0.20.2",
            "ecosystem": "go"
          },
          {
            "name": "github.com/go-openapi/swag",
            "direct": false,
            "version": "v0.25.4",
            "ecosystem": "go"
          },
          {
            "name": "github.com/go-openapi/swag/cmdutils",
            "direct": false,
            "version": "v0.25.4",
            "ecosystem": "go"
          },
          {
            "name": "github.com/go-openapi/swag/conv",
            "direct": false,
            "version": "v0.25.4",
            "ecosystem": "go"
          },
          {
            "name": "github.com/go-openapi/swag/fileutils",
            "direct": false,
            "version": "v0.25.4",
            "ecosystem": "go"
          },
          {
            "name": "github.com/go-openapi/swag/jsonname",
            "direct": false,
            "version": "v0.25.4",
            "ecosystem": "go"
          },
          {
            "name": "github.com/go-openapi/swag/jsonutils",
            "direct": false,
            "version": "v0.25.4",
            "ecosystem": "go"
          },
          {
            "name": "github.com/go-openapi/swag/loading",
            "direct": false,
            "version": "v0.25.4",
            "ecosystem": "go"
          },
          {
            "name": "github.com/go-openapi/swag/mangling",
            "direct": false,
            "version": "v0.25.4",
            "ecosystem": "go"
          },
          {
            "name": "github.com/go-openapi/swag/netutils",
            "direct": false,
            "version": "v0.25.4",
            "ecosystem": "go"
          },
          {
            "name": "github.com/go-openapi/swag/stringutils",
            "direct": false,
            "version": "v0.25.4",
            "ecosystem": "go"
          },
          {
            "name": "github.com/go-openapi/swag/typeutils",
            "direct": false,
            "version": "v0.25.4",
            "ecosystem": "go"
          },
          {
            "name": "github.com/go-openapi/swag/yamlutils",
            "direct": false,
            "version": "v0.25.4",
            "ecosystem": "go"
          },
          {
            "name": "github.com/go-task/slim-sprig/v3",
            "direct": false,
            "version": "v3.0.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/gogo/protobuf",
            "direct": false,
            "version": "v1.3.2",
            "ecosystem": "go"
          },
          {
            "name": "github.com/golang/protobuf",
            "direct": false,
            "version": "v1.5.4",
            "ecosystem": "go"
          },
          {
            "name": "github.com/google/btree",
            "direct": false,
            "version": "v1.1.3",
            "ecosystem": "go"
          },
          {
            "name": "github.com/google/gnostic-models",
            "direct": false,
            "version": "v0.7.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/google/go-cmp",
            "direct": false,
            "version": "v0.7.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/google/pprof",
            "direct": false,
            "version": "v0.0.0-20260402051712-545e8a4df936",
            "ecosystem": "go"
          },
          {
            "name": "github.com/google/uuid",
            "direct": false,
            "version": "v1.6.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/huandu/xstrings",
            "direct": false,
            "version": "v1.0.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/imdario/mergo",
            "direct": false,
            "version": "v0.3.4",
            "ecosystem": "go"
          },
          {
            "name": "github.com/inconshreveable/mousetrap",
            "direct": false,
            "version": "v1.1.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/json-iterator/go",
            "direct": false,
            "version": "v1.1.12",
            "ecosystem": "go"
          },
          {
            "name": "github.com/masterminds/semver",
            "direct": false,
            "version": "v1.4.2",
            "ecosystem": "go"
          },
          {
            "name": "github.com/masterminds/semver/v3",
            "direct": false,
            "version": "v3.4.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/masterminds/sprig",
            "direct": false,
            "version": "v2.15.0+incompatible",
            "ecosystem": "go"
          },
          {
            "name": "github.com/modern-go/concurrent",
            "direct": false,
            "version": "v0.0.0-20180306012644-bacd9c7ef1dd",
            "ecosystem": "go"
          },
          {
            "name": "github.com/modern-go/reflect2",
            "direct": false,
            "version": "v1.0.3-0.20250322232337-35a7c28c31ee",
            "ecosystem": "go"
          },
          {
            "name": "github.com/munnerz/goautoneg",
            "direct": false,
            "version": "v0.0.0-20191010083416-a7dc8b61c822",
            "ecosystem": "go"
          },
          {
            "name": "github.com/mwitkow/go-proto-validators",
            "direct": false,
            "version": "v0.0.0-20180403085117-0950a7990007",
            "ecosystem": "go"
          },
          {
            "name": "github.com/pmezard/go-difflib",
            "direct": false,
            "version": "v1.0.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/prometheus/client_model",
            "direct": false,
            "version": "v0.6.2",
            "ecosystem": "go"
          },
          {
            "name": "github.com/prometheus/common",
            "direct": false,
            "version": "v0.66.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/prometheus/procfs",
            "direct": false,
            "version": "v0.16.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/pseudomuto/protokit",
            "direct": false,
            "version": "v0.2.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/spf13/pflag",
            "direct": false,
            "version": "v1.0.10",
            "ecosystem": "go"
          },
          {
            "name": "github.com/x448/float16",
            "direct": false,
            "version": "v0.8.4",
            "ecosystem": "go"
          },
          {
            "name": "go.opentelemetry.io/otel",
            "direct": false,
            "version": "v1.43.0",
            "ecosystem": "go"
          },
          {
            "name": "go.opentelemetry.io/otel/trace",
            "direct": false,
            "version": "v1.43.0",
            "ecosystem": "go"
          },
          {
            "name": "go.uber.org/multierr",
            "direct": false,
            "version": "v1.11.0",
            "ecosystem": "go"
          },
          {
            "name": "go.uber.org/zap",
            "direct": false,
            "version": "v1.27.0",
            "ecosystem": "go"
          },
          {
            "name": "go.yaml.in/yaml/v2",
            "direct": false,
            "version": "v2.4.3",
            "ecosystem": "go"
          },
          {
            "name": "go.yaml.in/yaml/v3",
            "direct": false,
            "version": "v3.0.4",
            "ecosystem": "go"
          },
          {
            "name": "golang.org/x/crypto",
            "direct": false,
            "version": "v0.50.0",
            "ecosystem": "go"
          },
          {
            "name": "golang.org/x/mod",
            "direct": false,
            "version": "v0.35.0",
            "ecosystem": "go"
          },
          {
            "name": "golang.org/x/net",
            "direct": false,
            "version": "v0.53.0",
            "ecosystem": "go"
          },
          {
            "name": "golang.org/x/oauth2",
            "direct": false,
            "version": "v0.36.0",
            "ecosystem": "go"
          },
          {
            "name": "golang.org/x/sync",
            "direct": false,
            "version": "v0.20.0",
            "ecosystem": "go"
          },
          {
            "name": "golang.org/x/sys",
            "direct": false,
            "version": "v0.43.0",
            "ecosystem": "go"
          },
          {
            "name": "golang.org/x/term",
            "direct": false,
            "version": "v0.42.0",
            "ecosystem": "go"
          },
          {
            "name": "golang.org/x/text",
            "direct": false,
            "version": "v0.36.0",
            "ecosystem": "go"
          },
          {
            "name": "golang.org/x/tools",
            "direct": false,
            "version": "v0.44.0",
            "ecosystem": "go"
          },
          {
            "name": "gomodules.xyz/jsonpatch/v2",
            "direct": false,
            "version": "v2.4.0",
            "ecosystem": "go"
          },
          {
            "name": "google.golang.org/genproto/googleapis/api",
            "direct": false,
            "version": "v0.0.0-20260226221140-a57be14db171",
            "ecosystem": "go"
          },
          {
            "name": "google.golang.org/genproto/googleapis/rpc",
            "direct": false,
            "version": "v0.0.0-20260226221140-a57be14db171",
            "ecosystem": "go"
          },
          {
            "name": "gopkg.in/evanphx/json-patch.v4",
            "direct": false,
            "version": "v4.13.0",
            "ecosystem": "go"
          },
          {
            "name": "gopkg.in/inf.v0",
            "direct": false,
            "version": "v0.9.1",
            "ecosystem": "go"
          },
          {
            "name": "gopkg.in/yaml.v3",
            "direct": false,
            "version": "v3.0.1",
            "ecosystem": "go"
          },
          {
            "name": "k8s.io/apiextensions-apiserver",
            "direct": false,
            "version": "v0.35.0",
            "ecosystem": "go"
          },
          {
            "name": "k8s.io/apiserver",
            "direct": false,
            "version": "v0.35.4",
            "ecosystem": "go"
          },
          {
            "name": "k8s.io/component-base",
            "direct": false,
            "version": "v0.35.4",
            "ecosystem": "go"
          },
          {
            "name": "k8s.io/controller-manager",
            "direct": false,
            "version": "v0.35.4",
            "ecosystem": "go"
          },
          {
            "name": "k8s.io/klog/v2",
            "direct": false,
            "version": "v2.140.0",
            "ecosystem": "go"
          },
          {
            "name": "sigs.k8s.io/json",
            "direct": false,
            "version": "v0.0.0-20250730193827-2d320260d730",
            "ecosystem": "go"
          },
          {
            "name": "sigs.k8s.io/randfill",
            "direct": false,
            "version": "v1.0.0",
            "ecosystem": "go"
          },
          {
            "name": "sigs.k8s.io/structured-merge-diff/v6",
            "direct": false,
            "version": "v6.3.2",
            "ecosystem": "go"
          }
        ],
        "collected": true,
        "truncated": false,
        "total_count": 119,
        "direct_count": 23,
        "indirect_count": 96
      }
    },
    "maintainership": {
      "issues": {
        "open_prs": 5,
        "merged_prs": 287,
        "open_issues": 1,
        "closed_ratio": 0.833,
        "closed_issues": 5,
        "closed_unmerged_prs": 32
      },
      "bus_factor": 2,
      "bot_contributors": 1,
      "top_contributors": [
        {
          "type": "User",
          "login": "ushitora-anqou",
          "commits": 405,
          "avatar_url": "https://avatars.githubusercontent.com/u/26652789?v=4"
        },
        {
          "type": "User",
          "login": "satoru-takeuchi",
          "commits": 164,
          "avatar_url": "https://avatars.githubusercontent.com/u/6075867?v=4"
        },
        {
          "type": "User",
          "login": "llamerada-jp",
          "commits": 119,
          "avatar_url": "https://avatars.githubusercontent.com/u/2675889?v=4"
        },
        {
          "type": "User",
          "login": "toshipp",
          "commits": 55,
          "avatar_url": "https://avatars.githubusercontent.com/u/2258537?v=4"
        },
        {
          "type": "User",
          "login": "peng225",
          "commits": 54,
          "avatar_url": "https://avatars.githubusercontent.com/u/6281688?v=4"
        },
        {
          "type": "User",
          "login": "molpako",
          "commits": 40,
          "avatar_url": "https://avatars.githubusercontent.com/u/35787116?v=4"
        },
        {
          "type": "User",
          "login": "skoya76",
          "commits": 37,
          "avatar_url": "https://avatars.githubusercontent.com/u/67150414?v=4"
        },
        {
          "type": "User",
          "login": "cupnes",
          "commits": 12,
          "avatar_url": "https://avatars.githubusercontent.com/u/4611487?v=4"
        },
        {
          "type": "User",
          "login": "pluser",
          "commits": 2,
          "avatar_url": "https://avatars.githubusercontent.com/u/1411155?v=4"
        },
        {
          "type": "User",
          "login": "daichimukai",
          "commits": 1,
          "avatar_url": "https://avatars.githubusercontent.com/u/1753873?v=4"
        }
      ],
      "contributors_sampled": 10,
      "top_contributor_share": 0.456
    },
    "quality_signals": {
      "has_ci": true,
      "has_tests": true,
      "ci_workflows": [
        "ceph-export-diff-release.yaml",
        "ceph-export-diff-test.yaml",
        "check-do-not-merge.yaml",
        "e2e-multiple-k8s-clusters.yaml",
        "e2e.yaml",
        "helm-release.yaml",
        "main.yaml",
        "meta-actions.yaml",
        "release.yaml"
      ],
      "has_docs_dir": true,
      "linter_configs": [
        ".golangci.yml"
      ],
      "has_editorconfig": false,
      "has_linter_config": true,
      "has_precommit_config": false
    },
    "security_signals": {
      "lockfiles": [
        "go.sum"
      ],
      "scorecard": {
        "checks": [
          {
            "name": "Binary-Artifacts",
            "score": 10,
            "reason": "no binaries found in the repo",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#binary-artifacts"
          },
          {
            "name": "Branch-Protection",
            "score": 8,
            "reason": "branch protection is not maximal on development and all release branches",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#branch-protection"
          },
          {
            "name": "CI-Tests",
            "score": 10,
            "reason": "14 out of 14 merged PRs checked by a CI test -- score normalized to 10",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#ci-tests"
          },
          {
            "name": "CII-Best-Practices",
            "score": 0,
            "reason": "no effort to earn an OpenSSF best practices badge detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#cii-best-practices"
          },
          {
            "name": "Code-Review",
            "score": 10,
            "reason": "all changesets reviewed",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#code-review"
          },
          {
            "name": "Contributors",
            "score": 10,
            "reason": "project has 11 contributing companies or organizations",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#contributors"
          },
          {
            "name": "Dangerous-Workflow",
            "score": 10,
            "reason": "no dangerous workflow patterns detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dangerous-workflow"
          },
          {
            "name": "Dependency-Update-Tool",
            "score": 10,
            "reason": "update tool detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dependency-update-tool"
          },
          {
            "name": "Fuzzing",
            "score": 0,
            "reason": "project is not fuzzed",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#fuzzing"
          },
          {
            "name": "License",
            "score": 10,
            "reason": "license file detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#license"
          },
          {
            "name": "Maintained",
            "score": 10,
            "reason": "30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#maintained"
          },
          {
            "name": "Packaging",
            "score": 10,
            "reason": "packaging workflow detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#packaging"
          },
          {
            "name": "Pinned-Dependencies",
            "score": 5,
            "reason": "dependency not pinned by hash detected -- score normalized to 5",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#pinned-dependencies"
          },
          {
            "name": "SAST",
            "score": 0,
            "reason": "SAST tool is not run on all commits -- score normalized to 0",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#sast"
          },
          {
            "name": "Security-Policy",
            "score": 0,
            "reason": "security policy file not detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#security-policy"
          },
          {
            "name": "Signed-Releases",
            "score": 0,
            "reason": "Project has not signed or included provenance with any releases.",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#signed-releases"
          },
          {
            "name": "Token-Permissions",
            "score": 0,
            "reason": "detected GitHub workflow tokens with excessive permissions",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#token-permissions"
          },
          {
            "name": "Vulnerabilities",
            "score": 0,
            "reason": "26 existing vulnerabilities detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#vulnerabilities"
          }
        ],
        "commit": "3bc34ec80125970c67adeb5f19f81185272d52ab",
        "ran_at": "2026-07-24T13:02:30Z",
        "aggregate_score": 5.8,
        "scorecard_version": "v5.5.0"
      },
      "has_codeql_workflow": false,
      "has_security_policy": false,
      "has_dependabot_config": true
    },
    "contribution_flow": {
      "collected": true,
      "ci_last_run_at": "2026-07-23T09:54:27Z",
      "oldest_open_prs": [
        {
          "number": 134,
          "created_at": "2025-03-25T09:42:21Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 308,
          "created_at": "2026-06-30T08:37:21Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 315,
          "created_at": "2026-07-08T02:44:23Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 319,
          "created_at": "2026-07-09T09:09:45Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 330,
          "created_at": "2026-07-24T09:37:59Z",
          "last_comment_at": null,
          "last_comment_author": null
        }
      ],
      "last_merged_pr_at": "2026-07-23T09:47:08Z",
      "ci_last_conclusion": "SUCCESS",
      "oldest_open_issues": [
        {
          "number": 271,
          "created_at": "2026-04-23T01:12:35Z",
          "last_comment_at": null,
          "last_comment_author": null
        }
      ]
    }
  },
  "config": {
    "disabled_metrics": [],
    "disabled_categories": [],
    "disabled_components": {}
  },
  "source": {
    "url": "https://github.com/cybozu-go/mantle",
    "host": "github.com",
    "name": "mantle",
    "owner": "cybozu-go"
  },
  "metrics": {
    "overall": {
      "key": "overall",
      "band": "moderate",
      "name": "Overall health",
      "note": null,
      "notes": [],
      "value": 68,
      "inputs": {
        "security": 59,
        "vitality": 92,
        "community": 28,
        "governance": 77,
        "engineering": 76
      },
      "components": []
    },
    "categories": [
      {
        "key": "vitality",
        "band": "excellent",
        "name": "Vitality",
        "value": 92,
        "weight": 0.22,
        "metrics": [
          {
            "key": "development_activity",
            "band": "excellent",
            "name": "Development activity",
            "note": null,
            "notes": [],
            "value": 94,
            "inputs": {
              "commits_last_year": 302,
              "human_commit_share": 0.98,
              "days_since_last_push": 0,
              "active_weeks_last_year": 43
            },
            "components": [
              {
                "key": "push_recency",
                "name": "Push recency",
                "detail": "last push 0 days ago",
                "points": 36,
                "status": "met",
                "details": [
                  {
                    "code": "push_recency",
                    "params": {
                      "days": 0
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "commit_cadence",
                "name": "Commit cadence",
                "detail": "43/52 weeks with commits",
                "points": 29.8,
                "status": "partial",
                "details": [
                  {
                    "code": "commit_cadence_weeks",
                    "params": {
                      "weeks": 43
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "commit_volume",
                "name": "Commit volume",
                "detail": "302 commits in the last year",
                "points": 18,
                "status": "met",
                "details": [
                  {
                    "code": "commits_last_year",
                    "params": {
                      "count": 302
                    }
                  }
                ],
                "max_points": 18
              },
              {
                "key": "openssf_scorecard_maintained",
                "name": "OpenSSF Scorecard: Maintained",
                "detail": "30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10",
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "release_discipline",
            "band": "excellent",
            "name": "Release discipline",
            "note": null,
            "notes": [],
            "value": 90,
            "inputs": {
              "releases_count": 93,
              "latest_release_tag": "mantle-cluster-wide-chart-v0.3.6",
              "releases_from_tags": false,
              "days_since_latest_release": 3,
              "mean_days_between_releases": 2
            },
            "components": [
              {
                "key": "ships_releases",
                "name": "Ships releases",
                "detail": "93 releases published",
                "points": 27,
                "status": "met",
                "details": [
                  {
                    "code": "releases_published",
                    "params": {
                      "count": 93
                    }
                  }
                ],
                "max_points": 27
              },
              {
                "key": "release_recency",
                "name": "Release recency",
                "detail": "latest release 3 days ago",
                "points": 36,
                "status": "met",
                "details": [
                  {
                    "code": "release_recency",
                    "params": {
                      "days": 3
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "release_cadence",
                "name": "Release cadence",
                "detail": "a release every ~2 days",
                "points": 27,
                "status": "met",
                "details": [
                  {
                    "code": "release_cadence",
                    "params": {
                      "gap": 2
                    }
                  }
                ],
                "max_points": 27
              },
              {
                "key": "openssf_scorecard_signed_releases",
                "name": "OpenSSF Scorecard: Signed-Releases",
                "detail": "Project has not signed or included provenance with any releases.",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "abandonment",
            "band": "excellent",
            "name": "Abandonment",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "cap": null,
              "state": "maintained",
              "guards": [],
              "signals": [],
              "red_flag": false,
              "multiplier_pct": 100,
              "declared_reason": null,
              "unverified_reason": null,
              "unanswered_open_prs": null,
              "unanswered_open_issues": null,
              "days_since_last_merged_pr": null,
              "days_since_last_human_commit": 1,
              "days_since_last_human_commit_is_floor": false
            },
            "components": [
              {
                "key": "project_is_still_maintained",
                "name": "Project is still maintained",
                "detail": "last human commit 1 days ago",
                "points": 100,
                "status": "met",
                "details": [
                  {
                    "code": "abandonment_maintained",
                    "params": {
                      "days": 1
                    }
                  }
                ],
                "max_points": 100
              }
            ]
          }
        ],
        "description": "Is the project alive — is code being written and are releases shipping?"
      },
      {
        "key": "community",
        "band": "critical",
        "name": "Community & Adoption",
        "value": 28,
        "weight": 0.18,
        "metrics": [
          {
            "key": "popularity",
            "band": "critical",
            "name": "Popularity & adoption",
            "note": null,
            "notes": [],
            "value": 8,
            "inputs": {
              "forks": 2,
              "stars": 3,
              "watchers": 5,
              "growth_state": "unverified",
              "growth_factor_pct": 100,
              "growth_unverified_reason": "no_history"
            },
            "components": [
              {
                "key": "stars",
                "name": "Stars",
                "detail": "3 stars",
                "points": 4.9,
                "status": "partial",
                "details": [
                  {
                    "code": "stars",
                    "params": {
                      "count": 3
                    }
                  }
                ],
                "max_points": 60
              },
              {
                "key": "forks",
                "name": "Forks",
                "detail": "2 forks",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "forks",
                    "params": {
                      "count": 2
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "watchers",
                "name": "Watchers",
                "detail": "5 watchers",
                "points": 3.3,
                "status": "partial",
                "details": [
                  {
                    "code": "watchers",
                    "params": {
                      "count": 5
                    }
                  }
                ],
                "max_points": 15
              }
            ]
          },
          {
            "key": "community_health",
            "band": "moderate",
            "name": "Community health",
            "note": null,
            "notes": [],
            "value": 50,
            "inputs": {
              "has_readme": true,
              "has_license": true,
              "has_contributing": false,
              "has_issue_template": false,
              "has_code_of_conduct": false,
              "has_pull_request_template": false
            },
            "components": [
              {
                "key": "readme",
                "name": "README",
                "detail": null,
                "points": 22.5,
                "status": "met",
                "details": [],
                "max_points": 22.5
              },
              {
                "key": "license",
                "name": "License",
                "detail": "recognized license (Apache-2.0)",
                "points": 22.5,
                "status": "met",
                "details": [
                  {
                    "code": "license_standard",
                    "params": {}
                  },
                  {
                    "code": "license_spdx",
                    "params": {
                      "spdx": "Apache-2.0"
                    }
                  }
                ],
                "max_points": 22.5
              },
              {
                "key": "contributing_guide",
                "name": "CONTRIBUTING guide",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 18
              },
              {
                "key": "code_of_conduct",
                "name": "Code of conduct",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 13.5
              },
              {
                "key": "issue_template",
                "name": "Issue template",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.2
              },
              {
                "key": "pr_template",
                "name": "PR template",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 6.3
              }
            ]
          }
        ],
        "description": "Does the project have users, downloads, attention, and a welcoming setup for contributors?"
      },
      {
        "key": "governance",
        "band": "good",
        "name": "Sustainability & Governance",
        "value": 77,
        "weight": 0.24,
        "metrics": [
          {
            "key": "maintainer_resilience",
            "band": "moderate",
            "name": "Maintainer resilience (bus factor)",
            "note": null,
            "notes": [],
            "value": 61,
            "inputs": {
              "bus_factor": 2,
              "contributors_sampled": 10,
              "top_contributor_share": 0.456
            },
            "components": [
              {
                "key": "bus_factor",
                "name": "Bus factor",
                "detail": "2 contributor(s) cover half of all commits",
                "points": 25.2,
                "status": "partial",
                "details": [
                  {
                    "code": "bus_factor",
                    "params": {
                      "count": 2
                    }
                  }
                ],
                "max_points": 54
              },
              {
                "key": "commit_distribution",
                "name": "Commit distribution",
                "detail": "top contributor authored 46% of commits",
                "points": 12.2,
                "status": "partial",
                "details": [
                  {
                    "code": "top_contributor_share",
                    "params": {
                      "share": 46
                    }
                  }
                ],
                "max_points": 22.5
              },
              {
                "key": "contributor_breadth",
                "name": "Contributor breadth",
                "detail": "10 contributors",
                "points": 13.5,
                "status": "met",
                "details": [
                  {
                    "code": "contributors_sampled",
                    "params": {
                      "count": 10
                    }
                  }
                ],
                "max_points": 13.5
              },
              {
                "key": "openssf_scorecard_contributors",
                "name": "OpenSSF Scorecard: Contributors",
                "detail": "project has 11 contributing companies or organizations",
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "responsiveness",
            "band": "excellent",
            "name": "Issue & PR responsiveness",
            "note": null,
            "notes": [],
            "value": 88,
            "inputs": {
              "merged_prs": 287,
              "open_issues": 1,
              "closed_issues": 5,
              "issue_closed_ratio": 0.833,
              "closed_unmerged_prs": 32
            },
            "components": [
              {
                "key": "issue_resolution",
                "name": "Issue resolution",
                "detail": "83% of issues closed",
                "points": 38.9,
                "status": "partial",
                "details": [
                  {
                    "code": "issues_closed_share",
                    "params": {
                      "share": 83
                    }
                  }
                ],
                "max_points": 46.75
              },
              {
                "key": "pr_acceptance",
                "name": "PR acceptance",
                "detail": "287/319 decided PRs merged",
                "points": 34.4,
                "status": "partial",
                "details": [
                  {
                    "code": "decided_prs_merged",
                    "params": {
                      "merged": 287,
                      "decided": 319
                    }
                  }
                ],
                "max_points": 38.25
              },
              {
                "key": "openssf_scorecard_code_review",
                "name": "OpenSSF Scorecard: Code-Review",
                "detail": "all changesets reviewed",
                "points": 15,
                "status": "met",
                "details": [],
                "max_points": 15
              }
            ]
          },
          {
            "key": "stewardship",
            "band": "moderate",
            "name": "Ownership & stewardship",
            "note": null,
            "notes": [],
            "value": 68,
            "inputs": {
              "followers": 73,
              "owner_type": "Organization",
              "is_verified": null,
              "owner_login": "cybozu-go",
              "public_repos": 69,
              "account_age_days": 3802
            },
            "components": [
              {
                "key": "ownership_backing",
                "name": "Ownership backing",
                "detail": "organization-owned",
                "points": 30,
                "status": "met",
                "details": [
                  {
                    "code": "owner_organization",
                    "params": {}
                  }
                ],
                "max_points": 30
              },
              {
                "key": "verified_domain",
                "name": "Verified domain",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 20
              },
              {
                "key": "owner_reach",
                "name": "Owner reach",
                "detail": "73 followers of cybozu-go",
                "points": 13.4,
                "status": "partial",
                "details": [
                  {
                    "code": "owner_followers",
                    "params": {
                      "count": 73,
                      "login": "cybozu-go"
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "track_record",
                "name": "Track record",
                "detail": "69 public repos, account ~10 yr old",
                "points": 25,
                "status": "met",
                "details": [
                  {
                    "code": "public_repos",
                    "params": {
                      "count": 69
                    }
                  },
                  {
                    "code": "account_age_years",
                    "params": {
                      "years": 10
                    }
                  }
                ],
                "max_points": 25
              }
            ]
          },
          {
            "key": "package_maintenance",
            "band": "excellent",
            "name": "Package maintenance",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "packages": [
                "github.com/cybozu-go/mantle"
              ],
              "ecosystems": "go",
              "any_deprecated": false,
              "min_days_since_publish": 7
            },
            "components": [
              {
                "key": "published_resolvable",
                "name": "Published & resolvable",
                "detail": "1 package(s) on go",
                "points": 25,
                "status": "met",
                "details": [
                  {
                    "code": "packages_published",
                    "params": {
                      "count": 1,
                      "ecosystems": "go"
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "publish_recency",
                "name": "Publish recency",
                "detail": "latest publish 7 days ago",
                "points": 35,
                "status": "met",
                "details": [
                  {
                    "code": "publish_recency",
                    "params": {
                      "days": 7
                    }
                  }
                ],
                "max_points": 35
              },
              {
                "key": "version_history",
                "name": "Version history",
                "detail": "38 published versions",
                "points": 20,
                "status": "met",
                "details": [
                  {
                    "code": "published_versions",
                    "params": {
                      "count": 38
                    }
                  }
                ],
                "max_points": 20
              },
              {
                "key": "not_deprecated",
                "name": "Not deprecated",
                "detail": "active, not deprecated or yanked",
                "points": 20,
                "status": "met",
                "details": [
                  {
                    "code": "package_not_deprecated",
                    "params": {}
                  }
                ],
                "max_points": 20
              }
            ]
          }
        ],
        "description": "Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?"
      },
      {
        "key": "engineering",
        "band": "good",
        "name": "Engineering Quality",
        "value": 76,
        "weight": 0.2,
        "metrics": [
          {
            "key": "engineering_practices",
            "band": "good",
            "name": "Engineering practices",
            "note": null,
            "notes": [],
            "value": 84,
            "inputs": {
              "has_ci": true,
              "has_tests": true,
              "has_editorconfig": false,
              "has_linter_config": true,
              "has_precommit_config": false
            },
            "components": [
              {
                "key": "ci_workflows",
                "name": "CI workflows",
                "detail": "9 workflow(s)",
                "points": 24,
                "status": "met",
                "details": [
                  {
                    "code": "ci_workflows",
                    "params": {
                      "count": 9
                    }
                  }
                ],
                "max_points": 24
              },
              {
                "key": "tests_present",
                "name": "Tests present",
                "detail": null,
                "points": 24,
                "status": "met",
                "details": [],
                "max_points": 24
              },
              {
                "key": "linter_config",
                "name": "Linter config",
                "detail": ".golangci.yml",
                "points": 16,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": ".golangci.yml"
                    }
                  }
                ],
                "max_points": 16
              },
              {
                "key": "pre_commit_hooks",
                "name": "Pre-commit hooks",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 9.6
              },
              {
                "key": "editorconfig",
                "name": ".editorconfig",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 6.4
              },
              {
                "key": "openssf_scorecard_ci_tests",
                "name": "OpenSSF Scorecard: CI-Tests",
                "detail": "14 out of 14 merged PRs checked by a CI test -- score normalized to 10",
                "points": 20,
                "status": "met",
                "details": [],
                "max_points": 20
              }
            ]
          },
          {
            "key": "documentation",
            "band": "moderate",
            "name": "Documentation",
            "note": null,
            "notes": [],
            "value": 65,
            "inputs": {
              "topics": [],
              "has_wiki": true,
              "homepage": null,
              "has_readme": true,
              "has_docs_dir": true,
              "has_description": false
            },
            "components": [
              {
                "key": "readme",
                "name": "README",
                "detail": null,
                "points": 30,
                "status": "met",
                "details": [],
                "max_points": 30
              },
              {
                "key": "documentation_directory",
                "name": "Documentation directory",
                "detail": null,
                "points": 25,
                "status": "met",
                "details": [],
                "max_points": 25
              },
              {
                "key": "documentation_homepage_site",
                "name": "Documentation / homepage site",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 15
              },
              {
                "key": "repository_description",
                "name": "Repository description",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              },
              {
                "key": "topics",
                "name": "Topics",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              },
              {
                "key": "wiki",
                "name": "Wiki",
                "detail": null,
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              }
            ]
          }
        ],
        "description": "Are baseline engineering and documentation practices in place?"
      },
      {
        "key": "security",
        "band": "moderate",
        "name": "Security",
        "value": 59,
        "weight": 0.16,
        "metrics": [
          {
            "key": "security_posture",
            "band": "moderate",
            "name": "Security posture",
            "note": null,
            "notes": [],
            "value": 58,
            "inputs": {
              "source": "openssf_scorecard",
              "checks_evaluated": 18,
              "scorecard_version": "v5.5.0",
              "checks_inconclusive": 0,
              "scorecard_aggregate": 5.8
            },
            "components": [
              {
                "key": "binary_artifacts",
                "name": "Binary-Artifacts",
                "detail": "no binaries found in the repo",
                "points": 7.5,
                "status": "met",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "branch_protection",
                "name": "Branch-Protection",
                "detail": "branch protection is not maximal on development and all release branches",
                "points": 6,
                "status": "partial",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "ci_tests",
                "name": "CI-Tests",
                "detail": "14 out of 14 merged PRs checked by a CI test -- score normalized to 10",
                "points": 2.5,
                "status": "met",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "cii_best_practices",
                "name": "CII-Best-Practices",
                "detail": "no effort to earn an OpenSSF best practices badge detected",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "code_review",
                "name": "Code-Review",
                "detail": "all changesets reviewed",
                "points": 7.5,
                "status": "met",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "contributors",
                "name": "Contributors",
                "detail": "project has 11 contributing companies or organizations",
                "points": 2.5,
                "status": "met",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "dangerous_workflow",
                "name": "Dangerous-Workflow",
                "detail": "no dangerous workflow patterns detected",
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              },
              {
                "key": "dependency_update_tool",
                "name": "Dependency-Update-Tool",
                "detail": "update tool detected",
                "points": 7.5,
                "status": "met",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "fuzzing",
                "name": "Fuzzing",
                "detail": "project is not fuzzed",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 5
              },
              {
                "key": "license",
                "name": "License",
                "detail": "license file detected",
                "points": 2.5,
                "status": "met",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "maintained",
                "name": "Maintained",
                "detail": "30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10",
                "points": 7.5,
                "status": "met",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "packaging",
                "name": "Packaging",
                "detail": "packaging workflow detected",
                "points": 5,
                "status": "met",
                "details": [],
                "max_points": 5
              },
              {
                "key": "pinned_dependencies",
                "name": "Pinned-Dependencies",
                "detail": "dependency not pinned by hash detected -- score normalized to 5",
                "points": 2.5,
                "status": "partial",
                "details": [],
                "max_points": 5
              },
              {
                "key": "sast",
                "name": "SAST",
                "detail": "SAST tool is not run on all commits -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 5
              },
              {
                "key": "security_policy",
                "name": "Security-Policy",
                "detail": "security policy file not detected",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 5
              },
              {
                "key": "signed_releases",
                "name": "Signed-Releases",
                "detail": "Project has not signed or included provenance with any releases.",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "token_permissions",
                "name": "Token-Permissions",
                "detail": "detected GitHub workflow tokens with excessive permissions",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "vulnerabilities",
                "name": "Vulnerabilities",
                "detail": "26 existing vulnerabilities detected",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              }
            ]
          },
          {
            "key": "dependency_advisories",
            "band": "moderate",
            "name": "Dependency advisories",
            "note": "Excluded from scoring (no data or not applicable): Indirect dependencies free of known advisories. Remaining weights renormalized. Matched 119 resolved dependencies against OSV. This repository publishes no package the index resolves, so the repository dependency graph was assessed instead. That graph mixes development and test pins with shipped dependencies, so only the declared runtime dependencies are scored; transitive findings are reported as context and excluded from the score. Reachability is not analyzed.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "indirect_dependencies_free_of_known_advisories"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              },
              {
                "code": "advisories_scope_repository",
                "params": {
                  "assessed": 119
                }
              },
              {
                "code": "advisories_repo_graph_caveat",
                "params": {}
              },
              {
                "code": "advisories_reachability",
                "params": {}
              }
            ],
            "value": 61,
            "inputs": {
              "source": "osv",
              "advisories": 40,
              "affected_packages": 6,
              "assessed_packages": 119,
              "unassessed_packages": 0,
              "affected_by_severity": "critical 2, moderate 1, unknown 3",
              "direct_affected_packages": 2
            },
            "components": [
              {
                "key": "direct_dependencies_free_of_known_advisories",
                "name": "Direct dependencies free of known advisories",
                "detail": "2 affected: google.golang.org/grpc v1.81.0 (critical 9.1), k8s.io/kubernetes v1.35.4 (unknown)",
                "points": 8.9,
                "status": "partial",
                "details": [
                  {
                    "code": "advisories_affected",
                    "params": {
                      "count": 2,
                      "packages": "google.golang.org/grpc v1.81.0 (critical 9.1), k8s.io/kubernetes v1.35.4 (unknown)"
                    }
                  }
                ],
                "max_points": 35
              },
              {
                "key": "indirect_dependencies_free_of_known_advisories",
                "name": "Indirect dependencies free of known advisories",
                "detail": "transitive set not separable from development and test dependencies in this scope",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "advisories_scope_not_separable",
                    "params": {}
                  }
                ],
                "max_points": 25
              },
              {
                "key": "no_advisories_left_outstanding",
                "name": "No advisories left outstanding",
                "detail": "1 advisory-carrying package(s) unaddressed past 90 days; oldest published 485 days ago",
                "points": 37.2,
                "status": "partial",
                "details": [
                  {
                    "code": "advisories_stale",
                    "params": {
                      "days": 90,
                      "count": 1,
                      "oldest": 485
                    }
                  }
                ],
                "max_points": 40
              }
            ]
          },
          {
            "key": "malicious_dependencies",
            "band": "excellent",
            "name": "Malicious dependencies",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "source": "osv",
              "meaning": "reported as a malicious package by the OpenSSF corpus; the remedy is removal or moving off the compromised name, never an upgrade of the same artifact. Versions the registry has since pulled are listed but not scored",
              "packages": [],
              "red_flag": false,
              "assessed_packages": 119,
              "malicious_packages": 0,
              "direct_malicious_packages": 0,
              "withdrawn_malicious_packages": 0,
              "installable_malicious_packages": 0
            },
            "components": [
              {
                "key": "no_dependency_reported_as_a_malicious_package",
                "name": "No dependency reported as a malicious package",
                "detail": "no dependency is reported as a malicious package",
                "points": 100,
                "status": "met",
                "details": [
                  {
                    "code": "no_malicious_dependencies",
                    "params": {}
                  }
                ],
                "max_points": 100
              }
            ]
          },
          {
            "key": "high_risk_jurisdiction_exposure",
            "band": "excellent",
            "name": "High-Risk Jurisdiction Exposure",
            "note": "Only high-confidence self-published location evidence affects this multiplier. Ambiguous matches are review-only; country evidence is not proof of nationality, citizenship, legal registration, malicious intent, or sanctions status.",
            "notes": [
              {
                "code": "jurisdiction_evidence_limits",
                "params": {}
              }
            ],
            "value": 100,
            "inputs": {
              "meaning": "self-published location evidence; not nationality or citizenship",
              "red_flag": false,
              "exposures": [],
              "policy_countries": [
                "Russia",
                "Iran",
                "North Korea"
              ],
              "review_only_matches": 0,
              "assessed_self_published_locations": 10
            },
            "components": [
              {
                "key": "policy_exposure_multiplier",
                "name": "Policy exposure multiplier",
                "detail": "no confirmed policy-scope location match",
                "points": 100,
                "status": "met",
                "details": [
                  {
                    "code": "jurisdiction_no_match",
                    "params": {}
                  }
                ],
                "max_points": 100
              }
            ]
          }
        ],
        "description": "Are visible security and supply-chain practices strong, with no malicious dependency and no unresolved high-risk jurisdiction exposure?"
      },
      {
        "key": "ai_readiness",
        "band": "good",
        "name": "AI Readiness",
        "value": 76,
        "weight": 0,
        "metrics": [
          {
            "key": "ai_agent_context",
            "band": "at_risk",
            "name": "Agent context & guidance",
            "note": null,
            "notes": [],
            "value": 40,
            "inputs": {
              "has_llms_txt": false,
              "legible_history_share": 0.745,
              "agent_instruction_files": [],
              "agent_instruction_max_bytes": null
            },
            "components": [
              {
                "key": "agent_instructions",
                "name": "Agent instructions",
                "detail": "no CLAUDE.md / AGENTS.md / editor rules",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "no_agent_instructions",
                    "params": {}
                  }
                ],
                "max_points": 45
              },
              {
                "key": "machine_readable_docs_llms_txt",
                "name": "Machine-readable docs (llms.txt)",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 15
              },
              {
                "key": "legible_commit_history",
                "name": "Legible commit history",
                "detail": "73 of 98 human commits state their intent (structured subject or explanatory body)",
                "points": 39.7,
                "status": "partial",
                "details": [
                  {
                    "code": "legible_history",
                    "params": {
                      "legible": 73,
                      "sampled": 98
                    }
                  }
                ],
                "max_points": 40
              }
            ]
          },
          {
            "key": "ai_verify_loop",
            "band": "excellent",
            "name": "Verify loop (build / test / typecheck)",
            "note": null,
            "notes": [],
            "value": 93,
            "inputs": {
              "has_nix": false,
              "has_tests": true,
              "lockfiles": [
                "go.sum"
              ],
              "has_dockerfile": true,
              "typed_language": true,
              "bootstrap_files": [
                "Makefile",
                "ceph/Makefile",
                "test/e2e/Makefile"
              ],
              "has_devcontainer": false,
              "has_linter_config": true,
              "typecheck_configs": [],
              "agent_commit_share": 0.04,
              "toolchain_manifests": [
                "go.mod"
              ],
              "dependency_bot_commit_share": 0.02
            },
            "components": [
              {
                "key": "one_command_bootstrap",
                "name": "One-command bootstrap",
                "detail": "Makefile, ceph/Makefile, test/e2e/Makefile",
                "points": 18,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "Makefile, ceph/Makefile, test/e2e/Makefile"
                    }
                  }
                ],
                "max_points": 18
              },
              {
                "key": "automated_tests",
                "name": "Automated tests",
                "detail": null,
                "points": 22,
                "status": "met",
                "details": [],
                "max_points": 22
              },
              {
                "key": "lint_format_config",
                "name": "Lint / format config",
                "detail": ".golangci.yml",
                "points": 11,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": ".golangci.yml"
                    }
                  }
                ],
                "max_points": 11
              },
              {
                "key": "static_type_checking",
                "name": "Static type checking",
                "detail": "Go (statically typed)",
                "points": 11,
                "status": "met",
                "details": [
                  {
                    "code": "statically_typed_language",
                    "params": {
                      "language": "Go"
                    }
                  }
                ],
                "max_points": 11
              },
              {
                "key": "reproducible_environment",
                "name": "Reproducible environment",
                "detail": "Dockerfile, lockfile",
                "points": 10,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "Dockerfile, lockfile"
                    }
                  }
                ],
                "max_points": 10
              },
              {
                "key": "demonstrated_agent_practice",
                "name": "Demonstrated agent practice",
                "detail": "4 of the last 100 commits agent-authored or agent-credited",
                "points": 8,
                "status": "partial",
                "details": [
                  {
                    "code": "agent_authored_commits",
                    "params": {
                      "count": 4,
                      "sampled": 100
                    }
                  }
                ],
                "max_points": 10
              },
              {
                "key": "automated_maintenance",
                "name": "Automated maintenance",
                "detail": "2 of the last 100 commits are automated dependency updates",
                "points": 8,
                "status": "met",
                "details": [
                  {
                    "code": "dependency_bot_commits",
                    "params": {
                      "count": 2,
                      "sampled": 100
                    }
                  }
                ],
                "max_points": 8
              },
              {
                "key": "openssf_scorecard_pinned_dependencies",
                "name": "OpenSSF Scorecard: Pinned-Dependencies",
                "detail": "dependency not pinned by hash detected -- score normalized to 5",
                "points": 5,
                "status": "partial",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "ai_code_legibility",
            "band": "excellent",
            "name": "Code legibility for models",
            "note": null,
            "notes": [],
            "value": 99,
            "inputs": {
              "primary_language": "Go",
              "largest_source_bytes": 132183,
              "source_files_sampled": 90,
              "oversized_source_files": 2
            },
            "components": [
              {
                "key": "type_checkable_code",
                "name": "Type-checkable code",
                "detail": "Go (statically typed)",
                "points": 45,
                "status": "met",
                "details": [
                  {
                    "code": "statically_typed_language",
                    "params": {
                      "language": "Go"
                    }
                  }
                ],
                "max_points": 45
              },
              {
                "key": "manageable_file_sizes",
                "name": "Manageable file sizes",
                "detail": "2/90 source files over 60KB",
                "points": 53.8,
                "status": "partial",
                "details": [
                  {
                    "code": "oversized_source_files",
                    "params": {
                      "kb": 60,
                      "sampled": 90,
                      "oversized": 2
                    }
                  }
                ],
                "max_points": 55
              }
            ]
          },
          {
            "key": "ai_interfaces",
            "band": "good",
            "name": "Machine-readable interfaces",
            "note": null,
            "notes": [],
            "value": 80,
            "inputs": {
              "example_dirs": [
                "samples"
              ],
              "has_mcp_signal": false,
              "api_schema_files": [
                "pkg/controller/proto/controller.proto"
              ]
            },
            "components": [
              {
                "key": "api_schema_openapi_graphql_proto",
                "name": "API schema (OpenAPI/GraphQL/proto)",
                "detail": "pkg/controller/proto/controller.proto",
                "points": 40,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "pkg/controller/proto/controller.proto"
                    }
                  }
                ],
                "max_points": 40
              },
              {
                "key": "mcp_server",
                "name": "MCP server",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 20
              },
              {
                "key": "runnable_examples",
                "name": "Runnable examples",
                "detail": "samples",
                "points": 40,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "samples"
                    }
                  }
                ],
                "max_points": 40
              }
            ]
          }
        ],
        "description": "How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score."
      }
    ],
    "metrics_version": "1.13.0"
  },
  "warnings": [
    "Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token"
  ],
  "report_type": "repository",
  "generated_at": "2026-07-24T13:02:51.714905Z",
  "schema_version": "0.27.0",
  "badge_url": "https://raw.githubusercontent.com/inspect-software/badges/main/v1/c/cybozu-go/mantle.svg",
  "full_name": "cybozu-go/mantle",
  "license_state": "standard",
  "license_spdx": "Apache-2.0"
}

Bewertungen sind Signale, keine Garantien. Sie spiegeln öffentlich sichtbare Praxis auf GitHub wider — kein Code-Audit und keine Sicherheitsgarantie.

Fehlende Daten werden ausgeschlossen und die Gewichte neu normiert, nie als null bewertet. Die Methodik ist versioniert und offen: Metriken v1.13.0, Schema v0.27.0 — vollständige Methodik · Metriken-Wiki.

Wie ein einzelnes Ergebnis im Gesamtregister steht: aggregierte Statistiken — Go.

Software-Gesundheitsindex

Bewertungsprofil

Eigentümerschaft

Paket-Ökosysteme

Metriken nach Kategorie

Eckdaten

Warnungen zur Datenerhebung

Weitere Details

Verwandte Einträge