dbader/node-datadog-metrics erreicht einen Gesundheitsindex von 78 von 100 und liegt damit im Bereich Gut. Am stärksten schneidet es bei Sustainability & Governance (72/100) ab, am schwächsten bei AI Readiness (50/100). Zuletzt vor 2 Tagen aktualisiert. 2 Mitwirkende tragen den Großteil der jüngsten Arbeit.
78
gesamt / 100
Gut
Software-Gesundheitsindex
Metriken werden auf einer standardisierten Skala von 1–100 in gewichtete Kategorien gruppiert. Der Gesamtwert beginnt als ihr gewichtetes Mittel, kalibriert auf die Verteilung des öffentlichen Registers, sodass die Stufen Perzentilbedeutung tragen; sobald öffentliche Evidenz die Richtlinie für Hochrisikojurisdiktionen auslöst, wird die Bewertung angepasst und erhält die Obergrenze Gefährdet von 34.
78
Außergewöhnlich93-100Die Spitzengruppe des Registers (≈ obere 5 %); erfüllt im Wesentlichen alle geprüften Kriterien
Gut65-79Gesund; Lücken sind begrenzt und beherrschbar
Mittel50-64Akzeptabel mit deutlichen Lücken; Überprüfung empfohlen
Schwach35-49Wesentliche Schwächen in mehreren Bereichen
Gefährdet20-34Erhebliche Schwächen; eine Übernahme erfordert Vorsicht
Kritisch1-19Schwerwiegende Probleme (aufgegeben, nur ein Maintainer, keine Hygiene)
Bewertungsprofil
Jede Achse ist eine Kategorie. Die Form zählt mehr als der Durchschnitt — ein gesundes Projekt füllt die gesamte Fläche, während ein Profil aus Spitzen und Kratern bedeutet, dass Stärke in einer Dimension Risiken in einer anderen verdeckt.
Der gewichtete Gesamtwert 67 wird auf der veröffentlichten Indexskala auf 78 kalibriert (Register-Kalibrierung 2026-08-02).
3.489 Follower53 öffentliche Reposseit Juni 2010Chief Python Nut at realpython.com
Dieses Repository gehört einem persönlichen Konto. Ein Projekt mit nur einem Eigentümer trägt ein höheres Kontinuitätsrisiko als ein organisationsgetragenes.
Direkte Abhängigkeiten ohne bekannte Advisories — keine direkte Abhängigkeit trägt ein bekanntes Advisory
25/25
Indirekte Abhängigkeiten ohne bekannte Advisories — keine indirekte Abhängigkeit trägt ein bekanntes Advisory
0/40
Keine offenen Advisories — kein Advisory trägt ein Veröffentlichungsdatum
Verwendete Eingangsdaten
source
osv
advisories
0
affected_packages
0
assessed_packages
38
unassessed_packages
0
affected_by_severity
none
direct_affected_packages
0
Von der Bewertung ausgeschlossen (keine Daten oder nicht anwendbar): Keine offenen Advisories. Die verbleibenden Gewichte wurden renormalisiert. Abgeglichen wurde die Laufzeit-Abhängigkeitshülle von npm:datadog-metrics@0.12.1 — das, was die Installation des veröffentlichten Pakets nach sich zieht — mit 38 Paketen. Erreichbarkeit wird nicht analysiert.
Wie gut ist das Repository dafür ausgestattet, mit KI-Coding-Agenten entwickelt und gepflegt zu werden? Trägt ein bewusst kleines Gewicht (4 %): Agenten-Tooling ist ein echtes Pflegesignal, doch ein Repository ohne jedes Signal kann weiterhin 100/100 erreichen.
Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token
Weitere Details
Stern- und Fork-Verlauf 0 ★ / 60 ⇿
0Sterne
60Forks
12Releases
Wann jeder Stern und Fork hinzugefügt wurde, von GitHub erfasst und nach Tagen gruppiert. Das kumulierte Wachstum steht direkt über den täglichen Zugängen, aus denen es besteht, sodass beide gegeneinander lesbar sind: stetiger organischer Zuwachs sieht ganz anders aus als ein abrupter, kurzlebiger Ausschlag. Wo dieser Unterschied messbar ist, wird er als Wachstumsauthentizität ausgewiesen.
Major 0Minor 3Patch 7
Jeder Punkt umfasst 10 Tage.
OpenSSF Scorecard 4.5 / 10
4.5Gesamtwert
Unabhängige, werkzeugneutrale Sicherheitsbewertung durch das quelloffene OpenSSF Scorecard. Jede Prüfung honoriert eine Sicherheits-Praxis, nicht das Werkzeug eines bestimmten Anbieters. Prüfungen, die Scorecard nicht ermitteln konnte, sind mit k. A. markiert und vom Sicherheitswert ausgeschlossen (nie als null gezählt).Scorecard v5.5.0 · 2026-08-05 07:56 UTC
Vollständig aufgelöster Abhängigkeitssatz aus dem GitHub-Abhängigkeitsgraphen: 2 direkte und 9 indirekte (transitive) Pakete. Die transitive Hülle ist vollständig, wenn das Repository eine Lockfile eincheckt.
Registry
Paket
Version
Beziehung
npm
cross-fetch
^4.0.0
direkt
npm
debug
^4.1.0
direkt
npm
@datadog/datadog-api-client
^1.31.0
indirekt
npm
@types/node
^14.14.45
indirekt
npm
chai
4.3.6
indirekt
npm
chai-as-promised
^7.1.2
indirekt
npm
chai-string
1.5.0
indirekt
npm
eslint
^8.24.0
indirekt
npm
mocha
10.8.2
indirekt
npm
nock
^13.2.9
indirekt
npm
typescript
^4.8.4
indirekt
Abhängigkeits-Advisories 0
Die Installation von npm:datadog-metrics@0.12.1 zieht 38 Pakete nach sich, direkt und transitiv: 0 tragen bekannte Advisories, davon 0 direkte Abhängigkeiten.
Keine bekannten Advisories betreffen die bewerteten Abhängigkeiten.
Ein Advisory bedeutet, dass die im Abhängigkeitsgraphen erfasste Version in den betroffenen Bereich eines Advisories fällt. Erreichbarkeit wird nicht analysiert, und der Graph enthält Entwicklungs- und Test-Pins — ein Fund kann das Werkzeug betreffen und nicht die ausgelieferte Software.
JSON-Rohbericht maschinenlesbar
{
"data": {
"icon": {
"bytes": 10642,
"width": 280,
"height": 280,
"rejected": [],
"collected": true,
"media_type": "image/png",
"source_url": "https://dbader.org/static/img/icon.png",
"source_type": "homepage",
"content_hash": "de9e6a1374315d36ec9e07ce7c3b47a0534c84f0689e834a88c34ea2cc4616f6",
"candidates_considered": 1
},
"repo": {
"topics": [],
"is_fork": false,
"size_kb": 379,
"has_wiki": true,
"homepage": "https://dbader.org/blog/monitoring-your-nodejs-app-with-datadog",
"languages": {
"Shell": 1470,
"JavaScript": 85680,
"TypeScript": 1763
},
"pushed_at": "2026-08-02T20:56:46Z",
"created_at": "2014-12-08T00:33:30Z",
"owner_type": "User",
"updated_at": "2026-08-02T20:56:51Z",
"description": "Buffered metrics reporting via the DataDog HTTP API",
"is_archived": false,
"is_disabled": false,
"license_spdx": "MIT",
"default_branch": "main",
"license_spdx_raw": "MIT",
"primary_language": "JavaScript",
"significant_languages": [
"JavaScript"
]
},
"owner": {
"blog": "https://dbader.org/",
"name": "Dan Bader",
"type": "User",
"login": "dbader",
"company": "Chief Python Nut at realpython.com",
"location": null,
"followers": 3489,
"avatar_url": "https://avatars.githubusercontent.com/u/306708?v=4",
"created_at": "2010-06-16T12:17:17Z",
"is_verified": null,
"public_repos": 53,
"account_age_days": 5893
},
"license": {
"state": "standard",
"spdx_id": "MIT",
"raw_spdx": "MIT",
"file_present": true,
"scorecard_found": true,
"profile_has_license": true
},
"activity": {
"releases": [
{
"tag": "v0.13.0-pre.2",
"kind": "prerelease",
"published_at": "2026-07-24T20:48:45Z"
},
{
"tag": "v0.13.0-pre.1",
"kind": "prerelease",
"published_at": "2025-09-01T05:38:44Z"
},
{
"tag": "v0.12.1",
"kind": "patch",
"published_at": "2024-12-19T17:55:19Z"
},
{
"tag": "v0.12.0",
"kind": "minor",
"published_at": "2024-12-06T00:19:44Z"
},
{
"tag": "v0.11.4",
"kind": "patch",
"published_at": "2024-11-10T19:27:54Z"
},
{
"tag": "v0.11.4-a.1",
"kind": "prerelease",
"published_at": "2024-11-01T05:28:40Z"
},
{
"tag": "v0.11.3",
"kind": "patch",
"published_at": "2024-11-01T05:27:30Z"
},
{
"tag": "v0.11.2",
"kind": "patch",
"published_at": "2024-06-25T15:57:39Z"
},
{
"tag": "v0.11.1",
"kind": "patch",
"published_at": "2023-09-28T20:19:51Z"
},
{
"tag": "v0.11.0",
"kind": "minor",
"published_at": "2023-02-21T22:01:46Z"
},
{
"tag": "v0.10.2",
"kind": "patch",
"published_at": "2022-10-15T18:37:09Z"
},
{
"tag": "v0.10.1",
"kind": "patch",
"published_at": "2022-09-22T03:54:39Z"
},
{
"tag": "v0.10.0",
"kind": "minor",
"published_at": "2022-09-22T03:54:12Z"
}
],
"recent_commits": [
{
"oid": "230872b1f2d5da9ad2e56938427c5ca4954e1c5a",
"body": "The security issues around GitHub actions have become a little more high profile this year, so this change applies some very basic measures by pinning the versions of actions we use and adding a cooldown to our updates to those actions.",
"is_bot": false,
"headline": "Minor security tweaks for GH actions (#158)",
"author_name": "Rob Brackett",
"author_login": "Mr0grog",
"committed_at": "2026-08-02T20:56:35Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "41b30fe6ad6c39b8bdf6b2bb8dcd88c97e5a40f7",
"body": "Bumps [actions/checkout](https://github.com/actions/checkout) from 4 to 7.\n- [Release notes](https://github.com/actions/checkout/releases)\n- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)\n- [Commits](https://github.com/actions/checkout/compare/v4...v7)\n\n---\nupdated-dependenc\n[…]\nirect:production\n update-type: version-update:semver-major\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "Bump actions/checkout from 4 to 7 (#160)",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-08-02T20:52:15Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "48941f0d166d4dac5e5a1281e181af4e89e542ae",
"body": "Bumps [actions/setup-node](https://github.com/actions/setup-node) from 6 to 7.\n- [Release notes](https://github.com/actions/setup-node/releases)\n- [Commits](https://github.com/actions/setup-node/compare/v6...v7)\n\n---\nupdated-dependencies:\n- dependency-name: actions/setup-node\n dependency-version: '\n[…]\nirect:production\n update-type: version-update:semver-major\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "Bump actions/setup-node from 6 to 7 (#159)",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-08-01T17:44:59Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "5fa3cd69800824b643b448300ed012e9c02274ca",
"body": null,
"is_bot": false,
"headline": "Prepare for continued development",
"author_name": "Rob Brackett",
"author_login": "Mr0grog",
"committed_at": "2026-07-24T20:46:36Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d378143c46e7d81d4f6c114c3de03b9b37481986",
"body": "Prepare to release v0.13.0-pre.2. This will also be published with the `next` tag. There’s still more to do for the final release, but this contains an important bugfix for anyone using v0.13.0-pre.1.",
"is_bot": false,
"headline": "Prepare v0.13.0-pre.2 (#157)",
"author_name": "Rob Brackett",
"author_login": "Mr0grog",
"committed_at": "2026-07-24T20:35:45Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5ab97e7299cc154a396ef289603b8ef1dbd48cc1",
"body": "This package works on Deno and Bun, but we’ve never formally said so. This adds integration tests for them and adds a note about it to the README.\n\n(Inspired by my exploration of proxy support over in #132.)",
"is_bot": false,
"headline": "Formally declare Deno & Bun compatibility (#148)",
"author_name": "Rob Brackett",
"author_login": "Mr0grog",
"committed_at": "2026-07-23T20:37:17Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b969d5ce74971ff01bc9a665e0ee0645a891371e",
"body": "The CI test matrix had gotten a little out of date! Also updates mocha to v10 (v11 requires too-new Node.js for us) in order to get proper Node.js 26 compatibility for our dev tools.",
"is_bot": false,
"headline": "Update CI test matrix to include current Node.js (#156)",
"author_name": "Rob Brackett",
"author_login": "Mr0grog",
"committed_at": "2026-07-23T15:36:37Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ffeca58bdae959733baa5abb04d657bfff3383a7",
"body": "Fix bug introduced in #144 where the `retryBackoff` option was not correctly applied, leading to exceptions.",
"is_bot": false,
"headline": "fix var name for backoff retry (#155)",
"author_name": "Jocelyn",
"author_login": "jjedd97",
"committed_at": "2026-07-23T06:56:11Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "cb1dff73f95cd41648c10b6cc83ac3ecf0fc26f2",
"body": "Bumps [actions/checkout](https://github.com/actions/checkout) from 6 to 7.\n- [Release notes](https://github.com/actions/checkout/releases)\n- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)\n- [Commits](https://github.com/actions/checkout/compare/v6...v7)\n\n---\nupdated-dependenc\n[…]\nirect:production\n update-type: version-update:semver-major\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "Bump actions/checkout from 6 to 7 (#154)",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-07-01T23:29:17Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "1c54505e4e4ef84a96fa5bc0aaf4f6494585a124",
"body": "Bumps [actions/checkout](https://github.com/actions/checkout) from 5 to 6.\n- [Release notes](https://github.com/actions/checkout/releases)\n- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)\n- [Commits](https://github.com/actions/checkout/compare/v5...v6)\n\n---\nupdated-dependenc\n[…]\nirect:production\n update-type: version-update:semver-major\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "Bump actions/checkout from 5 to 6 (#152)",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2025-12-05T17:03:49Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "817cbf9e66233670d85ae0f1e57802bf6239b61c",
"body": "Bumps [actions/setup-node](https://github.com/actions/setup-node) from 5 to 6.\n- [Release notes](https://github.com/actions/setup-node/releases)\n- [Commits](https://github.com/actions/setup-node/compare/v5...v6)\n\n---\nupdated-dependencies:\n- dependency-name: actions/setup-node\n dependency-version: '\n[…]\nirect:production\n update-type: version-update:semver-major\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "Bump actions/setup-node from 5 to 6 (#153)",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2025-12-05T17:00:48Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "04fd2aefd5119aedd4e4ce68ef0bd000214ab55d",
"body": "Bumps [actions/setup-node](https://github.com/actions/setup-node) from 4 to 5.\n- [Release notes](https://github.com/actions/setup-node/releases)\n- [Commits](https://github.com/actions/setup-node/compare/v4...v5)\n\n---\nupdated-dependencies:\n- dependency-name: actions/setup-node\n dependency-version: '\n[…]\nirect:production\n update-type: version-update:semver-major\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "Bump actions/setup-node from 4 to 5 (#150)",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2025-10-02T05:57:00Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "78908f2c5f8476cf1f833545ae3e105389864963",
"body": null,
"is_bot": true,
"headline": "Bump actions/checkout from 4 to 5 (#147)",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2025-09-02T13:35:24Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4a2ebc9eabffe57119306fd112b58965b6251d06",
"body": "Includes an update to the repo URL in `package.json` based on NPM publishing changes.",
"is_bot": false,
"headline": "Prepare for continued development",
"author_name": "Rob Brackett",
"author_login": "Mr0grog",
"committed_at": "2025-09-01T05:31:58Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2b03156d40871bd69c0f5b6718d0edaf31170547",
"body": null,
"is_bot": false,
"headline": "Prepare v0.13.0-pre.1 release (#146)",
"author_name": "Rob Brackett",
"author_login": "Mr0grog",
"committed_at": "2025-09-01T05:19:14Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "bae7265f0c92d12b5697022fa92675c8181cea5f",
"body": "This drops our dependency on `@datadog/datadog-api-client` in favor of directly calling the API via HTTP. It requires a little more code on our side, but gets us a bit more flexibility and drops a 15 MB (!) dependency that we barely use.\n\nThis partly covers #132. There is definitely followup work to do here, but we want to get this out the door so people can use it and provide feedback.",
"is_bot": false,
"headline": "Drop the official Datadog client (#144)",
"author_name": "Rob Brackett",
"author_login": "Mr0grog",
"committed_at": "2025-09-01T05:02:16Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "cbf67ee5cd09f8a99a5507d739e9f0c7732bb4ca",
"body": null,
"is_bot": false,
"headline": "Prepare for future development",
"author_name": "Rob Brackett",
"author_login": "Mr0grog",
"committed_at": "2024-12-19T17:56:47Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "361413652681076ac4315396db2d83c47a07a0b7",
"body": "Release v0.12.1 with some maintenance updates and the new `process.beforeExit` functionality from #141.",
"is_bot": false,
"headline": "Prepare v0.12.1 (#143)",
"author_name": "Rob Brackett",
"author_login": "Mr0grog",
"committed_at": "2024-12-19T17:49:44Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "31ababb877516985b386430f692b47b0005fbc1d",
"body": "This attaches to the process’s `beforeExit` event (supported in Node.js, Deno, and Bun) when auto-flushing is enabled in order to automatically flush when a program exits. Before, you needed to remember to call `metrics.flush()` manually at the end of your program, which is easy to forget (or not even know about in the first place!).\n\nIt also adds a `stop()` method that disables auto-flushing and flushes any remaining buffered metrics.\n\nFixes #136.",
"is_bot": false,
"headline": "Auto-flush on process exit (#141)",
"author_name": "Rob Brackett",
"author_login": "Mr0grog",
"committed_at": "2024-12-18T23:40:50Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "06b0bb69f77954bf7b0e7d4cd702327beb36a34d",
"body": "In #125, we switched the default aync interface to promises/async/await, but missed updating the module-level tests. This updates them.",
"is_bot": false,
"headline": "Use new promise interface in module tests (#142)",
"author_name": "Rob Brackett",
"author_login": "Mr0grog",
"committed_at": "2024-12-18T00:19:28Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "950765cd9fba14d1a86832e6c544e324853e0755",
"body": "Formatting the release history with headings makes it much more scannable (for me, at least), and also helps developers using assistive technology to scan the page. It also makes the notes for individual releases linkable.",
"is_bot": false,
"headline": "Reformat release history with headings (#140)",
"author_name": "Rob Brackett",
"author_login": "Mr0grog",
"committed_at": "2024-12-13T21:02:40Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8cca1bd7fcf2d3a11cc2de1912ff2ef6158ff6d8",
"body": null,
"is_bot": false,
"headline": "Prepare for development",
"author_name": "Rob Brackett",
"author_login": "Mr0grog",
"committed_at": "2024-12-06T00:24:43Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7a0dbb6e2f595136743928385947f44730c1894e",
"body": null,
"is_bot": false,
"headline": "Prepare v0.12.0 (#139)",
"author_name": "Rob Brackett",
"author_login": "Mr0grog",
"committed_at": "2024-12-06T00:06:53Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "64a624963fa1435427f5ce796a233bef6b072b18",
"body": "This adds retry support for submitting metrics. It’s rare, but at scale most users have probably encountered some failures to send metrics (although they might not have noticed it in their logs). Fixes #108.\n\nThe basic approach here is to just retry failed requests rather than some more complicated \n[…]\n times to retry a railed request.\n retries: 3,\n\n // Subsequent retries multiply this by powers of two, so this produces retries after:\n // 1 second, 2 seconds, 4 seconds\n retryBackoff: 1\n});\n```",
"is_bot": false,
"headline": "Retry on Datadog API errors (#138)",
"author_name": "Rob Brackett",
"author_login": "Mr0grog",
"committed_at": "2024-12-05T22:10:06Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "2e789308ba41a743e9c49fd3a4b2cbf9edd802ea",
"body": "Allow environment variables to be prefixed with either `DATADOG_` (old behavior) or `DD_` (new) in order to use the same configuration names as the Datadog Agent. Fixes #135.",
"is_bot": false,
"headline": "Support `DD_` env var prefix (#137)",
"author_name": "Rob Brackett",
"author_login": "Mr0grog",
"committed_at": "2024-12-04T07:41:30Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "488adc7e276700ca7ee5db00a67f4f22ae15eedf",
"body": "Application keys are not actually needed for submitting metrics or distributions (or events or logs, in case we ever wind up supporting that), so specifying them risks exposing a potentially more powerful credential for no real reason. When support for them was originally added, this library used a \n[…]\n API client for other things. That's no longer the case (the client is not accessible from outside this library), so there's no reason to continue to support this, which might encourage dangerous use.",
"is_bot": false,
"headline": "Drop support for application keys (#127)",
"author_name": "Rob Brackett",
"author_login": "Mr0grog",
"committed_at": "2024-11-28T23:35:59Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "8f88c9ff74243aeff801da1d92ccd664409a4a3e",
"body": "The `flush()` method and the `report(series)` method on reporters now use promises instead of callbacks, moving to a more standardized model for async operations. The old callbacks are still supported, but deprecated, and will be removed in the future. Fixes #84.\r\n\r\nOther items to note here:\r\n- The \n[…]\n handler (unlike normal async functions).\r\n- Moved HTTP-related tests to a new reporters suite; the logger tests now use a mock reporter.\r\n- Bumps version to v0.12.0-dev since this is a major feature.",
"is_bot": false,
"headline": "Use promises instead of callbacks (#125)",
"author_name": "Rob Brackett",
"author_login": "Mr0grog",
"committed_at": "2024-11-28T22:54:56Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "3f4d1d48255c242549dc063a2350a06194327a2a",
"body": "…#129)\n\nThis adds a `CONTRIBUTING.md` guide that includes instructions for maintainers on how to publish releases (since we do it manually, and there are a bunch of steps you want to keep in mind and not forget -- or at least that I need help remembering!). Fixes #91.",
"is_bot": false,
"headline": "Add contributing guide with publishing instructions for maintainers (…",
"author_name": "Rob Brackett",
"author_login": "Mr0grog",
"committed_at": "2024-11-20T15:05:40Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "828358fb99db92ee4e57ad5a058995cb91b0e817",
"body": "This new `npm run check-integration` script sends some metrics and distributions to Datadog using this library, then queries the API for those same metric values to make sure they were successfully ingested and will be visible in Datadog's UI.\r\n\r\nThe goal here is to provide a minimal check of real, \n[…]\nlightweight (it only checks one metric type, for example).\r\n\r\nThis also moves some other test tools as scripts from the `test` to the `test-other` directory so they don’t get mixed up with unit tests.",
"is_bot": false,
"headline": "Add script to test live API integration (#128)",
"author_name": "Rob Brackett",
"author_login": "Mr0grog",
"committed_at": "2024-11-20T14:57:24Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "56875f5730ffa31da4a68028f0ed26a90e20faa4",
"body": "Back in #100, I renamed the `apiHost` option to `site` (in order to match up with Datadog's own docs and terminology), but forgot to rename the corresponding environment variable. This deprecates `DATADOG_API_HOST` in favor of `DATADOG_SITE` (as should have been done before). We'll remove support for the old env var when we remove `apiHost`.",
"is_bot": false,
"headline": "Rename `DATADOG_API_HOST` → `DATADOG_SITE` (#134)",
"author_name": "Rob Brackett",
"author_login": "Mr0grog",
"committed_at": "2024-11-20T07:50:09Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "407e8d39d429dba330749b1542a98cc7840a4cd2",
"body": "In #120, I added a test of our built types. Since we do a clean build of the types before publishing, we should also do a final check of those build results just to avoid any accidental issues for things that weren't fully checked (usually CI protects us here, but since we publish manually, a final check is useful!).",
"is_bot": false,
"headline": "Check that types are valid before publishing (#130)",
"author_name": "Rob Brackett",
"author_login": "Mr0grog",
"committed_at": "2024-11-17T23:53:40Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "19b772872afd649b1749a974987a952cd0c6158e",
"body": "The `Map` object is built for our exact use-case here, and is both faster and safer than using a plain JS object (what we currently do) or an object created with `Object.create(null)`. This is a pretty minor improvement, but still worthwhile.",
"is_bot": false,
"headline": "Use `Map` for aggregator buffer (#126)",
"author_name": "Rob Brackett",
"author_login": "Mr0grog",
"committed_at": "2024-11-17T23:53:09Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ecf4b0d47a08d3f877c99b3835d6ac249f2caef9",
"body": null,
"is_bot": false,
"headline": "Bump version for development",
"author_name": "Rob Brackett",
"author_login": "Mr0grog",
"committed_at": "2024-11-10T19:31:52Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9f8767619cacf70ec287911e2475c0c06b49669b",
"body": null,
"is_bot": false,
"headline": "Prepare v0.11.4 for release (#124)",
"author_name": "Rob Brackett",
"author_login": "Mr0grog",
"committed_at": "2024-11-10T19:20:37Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6d49b785f356236a8eb0fedfed661b03b95f865c",
"body": null,
"is_bot": false,
"headline": "Prepare v0.11.4-a.1",
"author_name": "Rob Brackett",
"author_login": "Mr0grog",
"committed_at": "2024-11-01T05:16:41Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "804190a016b7b0099cbadeb2fc290d90a38e5dbc",
"body": null,
"is_bot": false,
"headline": "Prepare v0.11.3",
"author_name": "Rob Brackett",
"author_login": "Mr0grog",
"committed_at": "2024-11-01T05:03:16Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a6dca69979e14ca47bcf198b0238251819411e55",
"body": null,
"is_bot": false,
"headline": "Mark v0.11.3a1",
"author_name": "Rob Brackett",
"author_login": "Mr0grog",
"committed_at": "2024-11-01T04:32:57Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a834a057491518f9324316d69d561afff89da620",
"body": "Even though we started generating TypeScript types from the JSDoc a while back, it turns out `BufferedMetricsLogger` was getting exported as a *value* and not a type. That technically works in TS, but requires some weird syntax and is definitely not what you want. This changes up our imports and exports a bit to get the TypeScript compiler to do the right thing, and adds a basic test of the types to make sure we don't regress.\r\n\r\nSee #119.",
"is_bot": false,
"headline": "Export a type for BufferedMetricsLogger (#120)",
"author_name": "Rob Brackett",
"author_login": "Mr0grog",
"committed_at": "2024-11-01T04:24:10Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b0e993652c497d0462dffd4c13f3cb66d7031186",
"body": "Bumps [actions/setup-node](https://github.com/actions/setup-node) from 3 to 4.\r\n- [Release notes](https://github.com/actions/setup-node/releases)\r\n- [Commits](https://github.com/actions/setup-node/compare/v3...v4)\r\n\r\n---\r\nupdated-dependencies:\r\n- dependency-name: actions/setup-node\r\n dependency-typ\n[…]\n:production\r\n update-type: version-update:semver-major\r\n...\r\n\r\nSigned-off-by: dependabot[bot] <support@github.com>\r\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "Bump actions/setup-node from 3 to 4 (#123)",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2024-10-31T18:03:30Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "72ff76d7a5fbd98c24db2f95bb60ae308b3dd4f1",
"body": "Bumps [actions/checkout](https://github.com/actions/checkout) from 3 to 4.\r\n- [Release notes](https://github.com/actions/checkout/releases)\r\n- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)\r\n- [Commits](https://github.com/actions/checkout/compare/v3...v4)\r\n\r\n---\r\nupdated-dep\n[…]\n:production\r\n update-type: version-update:semver-major\r\n...\r\n\r\nSigned-off-by: dependabot[bot] <support@github.com>\r\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "Bump actions/checkout from 3 to 4 (#122)",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2024-10-31T18:01:48Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "99b46246af976d6ed339f29c0d22dd0f193bfe77",
"body": "Node.js has moved forward by several major versions since our CI configuration was last updated, and this updates our CI test matrix to cover them. I've also added Dependabot for updating CI workflows, but not JS dependencies (we only want security updates for those).",
"is_bot": false,
"headline": "Expand CI test matrix, add dependabot for actions (#121)",
"author_name": "Rob Brackett",
"author_login": "Mr0grog",
"committed_at": "2024-10-31T17:59:49Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9d104385b0ab9e69bddbaa781ab1f9198daeae75",
"body": null,
"is_bot": false,
"headline": "Bump version for development",
"author_name": "Rob Brackett",
"author_login": "Mr0grog",
"committed_at": "2024-06-25T15:55:47Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "89c4425c02ffc112f19bba08feacb2b926dfef1f",
"body": "Update release notes and version number.",
"is_bot": false,
"headline": "Prepare to release v0.11.2",
"author_name": "Rob Brackett",
"author_login": "Mr0grog",
"committed_at": "2024-06-25T15:45:23Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "26e7cd27c7f29e2ed09a472df3923a1b3dd34487",
"body": "Issue #115 demonstrated how easy it is to get confused about API vs. application keys, so I’ve added some more documentation here about the difference as well as links to the official documentation about it (https://docs.datadoghq.com/account_management/api-app-keys/).\r\n\r\nI’ve also added a custom `AuthorizationError` class with a more explanatory message (also with links to the docs), so people should see something more helpful in their console or logs, too.",
"is_bot": false,
"headline": "Add more documentation about API vs. App keys (#118)",
"author_name": "Rob Brackett",
"author_login": "Mr0grog",
"committed_at": "2024-06-25T15:39:08Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6390e07a9278b57a6543fa43f8f68aa45ab20d36",
"body": "The docs and types listed an option for histograms called `aggregations`, but the correct name was actually `aggregates`. This updates the types and adds a test (unfortunately we can’t easy typecheck our tests right now, but this is at least something).\r\n\r\nCo-authored-by: Rob Brackett <rob@robbrackett.com>",
"is_bot": false,
"headline": "fix: Wrong terminology in types and doc (#117)",
"author_name": "Charley DAVID",
"author_login": "Calyhre",
"committed_at": "2024-06-21T19:44:03Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a8beb15eb1d31bd30898522101b5627c41b35ef4",
"body": null,
"is_bot": false,
"headline": "Bump version for development",
"author_name": "Rob Brackett",
"author_login": "Mr0grog",
"committed_at": "2023-09-28T20:21:56Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "64ef67f1eddbebfe3c4cc06f25c3c04a658b8f8f",
"body": null,
"is_bot": false,
"headline": "Prepare to release v0.11.1",
"author_name": "Rob Brackett",
"author_login": "Mr0grog",
"committed_at": "2023-09-28T20:01:33Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7bbc47c3e2e371bd0af8742af87853b06a48e29a",
"body": "Recent versions of `@datadog/datadog-api-client` have deprecated one of the configuration methods we use, so this updates the minimum required version of that package and switches to the new configuration method. (There are no other breaking changes or differences in Node.js requirements, so this is safe.)",
"is_bot": false,
"headline": "chore: update api usage (#112)",
"author_name": "Andrea Catalucci",
"author_login": "acatalucci-synth",
"committed_at": "2023-09-28T19:57:58Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f174ca1fdbce55b20ba6622014c152704bcee63d",
"body": null,
"is_bot": false,
"headline": "Bump version for development",
"author_name": "Rob Brackett",
"author_login": "Mr0grog",
"committed_at": "2023-02-21T22:04:04Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "fac9ff7b572f157bb15222cf8f890a4758f9effa",
"body": "This is a follow-on to #104. I missed that this file would get published, even though it should not be.",
"is_bot": false,
"headline": "Do not publish `tsconfig.tsbuildinfo`",
"author_name": "Rob Brackett",
"author_login": "Mr0grog",
"committed_at": "2023-02-21T21:50:37Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0ce4d51d343a895c3981de6439f4b9b861198832",
"body": null,
"is_bot": false,
"headline": "Prepare v0.11.0 for release",
"author_name": "Rob Brackett",
"author_login": "Mr0grog",
"committed_at": "2023-02-21T21:42:26Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "74fcb28c1aa19974a14be09e431c524be20b6204",
"body": null,
"is_bot": false,
"headline": "Fix typo!",
"author_name": "Rob Brackett",
"author_login": "Mr0grog",
"committed_at": "2023-02-21T21:30:14Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "825e6b06a5c8a5fcdb62dd7366027592f0154df5",
"body": "The proposed feature in #107 was withdrawn because the problem it was solving could have already been handled with a custom reporter. This adds some documentation about how to set up a custom reporter to prevent similar misunderstandings in the future.",
"is_bot": false,
"headline": "Document using a custom reporter",
"author_name": "Rob Brackett",
"author_login": "Mr0grog",
"committed_at": "2023-02-21T21:30:14Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "735b632d8157311a1a2d0447ddf4baa54d24847b",
"body": "…#100)\n\nThe `apiHost` property here is the same as what Datadog’s docs refer to `site`, so we’ve renamed it to match. We’ve also lower-cased the second \"d\" in `DatadogReporter`, since the previous spelling was wrong (see #59 and #98 for more about that).\r\n\r\nBoth of the old names still work, but using them prints deprecation warnings to let users know they should update their code.",
"is_bot": false,
"headline": "Rename `apiHost` → `site` and `DataDogReporter` → `DatadogReporter` (…",
"author_name": "Rob Brackett",
"author_login": "Mr0grog",
"committed_at": "2023-02-21T21:16:26Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2c4222c49218904190a87a570447e7aa81e725f9",
"body": "Version 0.10.2 was just released with critical bugfixes, and this adds those updates to the `main` development branch (which has breaking changes and is focused on v0.11.0).",
"is_bot": false,
"headline": "Port updates from v0.10.x fork to main",
"author_name": "Rob Brackett",
"author_login": "Mr0grog",
"committed_at": "2022-10-15T01:14:54Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d5306dcfa9787c85132a8b942e540b72d7a17a4b",
"body": "I missed adding release notes in #104, so I'm adding them separately here. This also cleans up some extra blank lines from that change.",
"is_bot": false,
"headline": "Add release notes for #104 (#105)",
"author_name": "Rob Brackett",
"author_login": "Mr0grog",
"committed_at": "2022-10-13T23:36:21Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "13b709bf47834daf612508a1e9f27acbefa28b60",
"body": "This probably shouldn't have gotten in originally, but it's pretty noisy when all tests run twice when pushing new commits to a PR (once for the push event and once for the update to the PR).",
"is_bot": false,
"headline": "Stop running tests twice on every PR push",
"author_name": "Rob Brackett",
"author_login": "Mr0grog",
"committed_at": "2022-10-13T21:17:41Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b3dc3e5a356615d8bc377bdac3e149d11319f510",
"body": null,
"is_bot": false,
"headline": "Fix intentional error",
"author_name": "Rob Brackett",
"author_login": "Mr0grog",
"committed_at": "2022-10-13T21:17:41Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7f1bb86009d543d39299bb21f2ff4b72259c0c13",
"body": "The prepare script runs when installing, which causes errors when running tests, and means we see type errors multiple times over in CI. This moves it to prepack so it only runs when packing and/or publishing.",
"is_bot": false,
"headline": "Move build to prepack",
"author_name": "Rob Brackett",
"author_login": "Mr0grog",
"committed_at": "2022-10-13T21:17:41Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7c325d4c918890db68fa8733c2830e128f4f3d36",
"body": null,
"is_bot": false,
"headline": "Add intentional error to make sure CI catches it",
"author_name": "Rob Brackett",
"author_login": "Mr0grog",
"committed_at": "2022-10-13T21:17:41Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ac6ec4cfcb98920249a218cd651e8e97f3d129b1",
"body": "This extends the previous change to use class syntax and JSDoc comments everywhere in the codebase. It also turns on type checking (which now works because we are using class syntax everywhere).",
"is_bot": false,
"headline": "Use class syntax in rest of private code",
"author_name": "Rob Brackett",
"author_login": "Mr0grog",
"committed_at": "2022-10-13T21:17:41Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "902c77f80f7488d26c9819e93775ccf528eec5e8",
"body": "This updates the syntax for all the public classes (reporters, BufferedMertricsLogger) to use native `class` syntax. This allows TypeScript to build better type definitions (compare the output before and after this commit). It also makes for slightly more compact and easy-to-manage syntax.\n\nPartially fixes #83.",
"is_bot": false,
"headline": "Convert public classes to ES6 class syntax",
"author_name": "Rob Brackett",
"author_login": "Mr0grog",
"committed_at": "2022-10-13T21:17:41Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9f12ea03efecb648518a08f5b9af2e2e400f6bb9",
"body": "This should help verify that most changes are valid.",
"is_bot": false,
"headline": "Build types in CI",
"author_name": "Rob Brackett",
"author_login": "Mr0grog",
"committed_at": "2022-10-13T21:17:41Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8e72b1614d4529032a3dae0d50495df259fc441e",
"body": "This converts a number of comments in the code to JSDoc-style comments (and adds some more detailed descriptions/types along the way) and uses TypeScript to build type definition files from the comments. This allows you to publish types directly from this package instead of making TypeScript user in\n[…]\new comments for objects that are not publicly exposed (although that would be a good idea for consistency). It also adds NPM lifecycle scripts to automatically build types when publishing.\n\nFixes #86.",
"is_bot": false,
"headline": "Build TypeScript types from doc comments",
"author_name": "Rob Brackett",
"author_login": "Mr0grog",
"committed_at": "2022-10-13T21:17:41Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "e116612baaa8058807a4f9758b195480a5a1bfb8",
"body": "This switches linting tools from JSHint and JSCS to ESLint. The primary goal here was to solve several security vulnerabilities, but this also uncovered some places previous rules were not being applied (!). This attempts to follow the same settings the project previously had for JSCS and JSHint.\r\n\r\nFixes #85 and also fixes all security warnings when running `npm install`.",
"is_bot": false,
"headline": "Switch to ESLint for all code linting (#102)",
"author_name": "Rob Brackett",
"author_login": "Mr0grog",
"committed_at": "2022-10-13T19:43:49Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "cf99e13a4e60a6bf48c3098d5379885ebdc7d210",
"body": "This adds a `histogram` option to `init()` and `BufferedMetricsLogger` that provides a default options object for all calls to the `histogram()` method. Fixes #88.",
"is_bot": false,
"headline": "Add a `histogram` option",
"author_name": "Rob Brackett",
"author_login": "Mr0grog",
"committed_at": "2022-09-27T21:44:17Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "aac204352c3497a1f071c74a09d0b83f0086e35b",
"body": null,
"is_bot": false,
"headline": "Add failing test for histogram options",
"author_name": "Rob Brackett",
"author_login": "Mr0grog",
"committed_at": "2022-09-27T21:44:17Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "450416056cc6c80b17248e793337fd96248351f3",
"body": null,
"is_bot": false,
"headline": "Add docs and release notes",
"author_name": "Rob Brackett",
"author_login": "Mr0grog",
"committed_at": "2022-09-26T21:52:10Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "20822e04dd10f8036831e183d394345505a7edb2",
"body": "If metrics failed while sending to Datadog and no explicit error handler was set, log the error regardless of the user's DEBUG setting. This is usually critical info and should not ever be silenced. Fixes #52.\n\nThis also creates a central place to configure `debug` so we don't ever have typos or other configuration inconsistencies across the package.",
"is_bot": false,
"headline": "Never silence sending errors",
"author_name": "Rob Brackett",
"author_login": "Mr0grog",
"committed_at": "2022-09-26T21:52:10Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "25bd5ae3e5cd1aeb5ad04620716d80f3f40d8607",
"body": "The new `onError` option for `init()` and `BufferedMetricsLogger` allows people to specify a function for handling asynchronous errors sending metrics, which otherwise wouldn't be possible to know about. This is useful for integrating with other error tracking services if you aren't using Datadog for that (e.g. Sentry.io), taking other special fallback actions, or just getting more detail about the failure.",
"is_bot": false,
"headline": "Add `onError` option",
"author_name": "Rob Brackett",
"author_login": "Mr0grog",
"committed_at": "2022-09-26T21:52:10Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "412852f245a73440101ee349e9dc623640d93e1d",
"body": null,
"is_bot": false,
"headline": "Fix .editorconfig for YAML files",
"author_name": "Rob Brackett",
"author_login": "Mr0grog",
"committed_at": "2022-09-25T18:58:54Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5c907472ab009ae4a9fb022efa11ab09f98af200",
"body": null,
"is_bot": false,
"headline": "Fix bad instances of \"DataDog\"",
"author_name": "Rob Brackett",
"author_login": "Mr0grog",
"committed_at": "2022-09-25T18:58:54Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "edcd8f8f1310287dde4dd648fade6bef4f004f44",
"body": "In #59, @dbenamy fixed a number of places where the text \"DataDog\" (incorrect) was used instead of \"Datadog\" (correct). People have since added more incorrect usages (many from me!), so this adds a quick script to log an error during linting to prevent re-introducing the problem.",
"is_bot": false,
"headline": "Check for uppercase second D in \"Datadog\"",
"author_name": "Rob Brackett",
"author_login": "Mr0grog",
"committed_at": "2022-09-25T18:58:54Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a3e0cf9a1fada0e4ac86a1252c39a7ceee55e955",
"body": null,
"is_bot": false,
"headline": "Add missing changelog from #82 (oops)",
"author_name": "Rob Brackett",
"author_login": "Mr0grog",
"committed_at": "2022-09-24T17:38:48Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "97272ee380b79252158f2c573fc7100eb45dc14c",
"body": "This uses a `WeakMap` to keep the clients private without leaking memory. If/when we update to `class` syntax, we should probably use private fields for this instead.\n\nFixes #82.",
"is_bot": false,
"headline": "Use separate Datadog clients for each reporter",
"author_name": "Rob Brackett",
"author_login": "Mr0grog",
"committed_at": "2022-09-23T19:19:53Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "dd7c65097bf25d19daa528464cd3fba706da5451",
"body": "This test should fail, demonstrating the issue with #82.\n\nThis also adds tests for the success and error handlers on `flush`, and adds the `nock` package to mock HTTP responses.",
"is_bot": false,
"headline": "Add test for loggers with different credentials",
"author_name": "Rob Brackett",
"author_login": "Mr0grog",
"committed_at": "2022-09-23T19:19:53Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "326f4b5deb182cac7b9212bab7f92097c3524806",
"body": "This adds information about the supported versions of Node.js in the README and in the `engines` field of `package.json` (so NPM can show warnings).",
"is_bot": false,
"headline": "Declare supported version of Node.js",
"author_name": "Rob Brackett",
"author_login": "Mr0grog",
"committed_at": "2022-09-23T19:19:08Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "bec15ea0f368e77fbd826aa43411e1d9d1842e03",
"body": "We no longer use Travis for CI, and whatever version of Node.js a developer has set locally should not be shared (this is a library that works with many versions of Node.js, not an application that should be locked to a single \"correct\" version).",
"is_bot": false,
"headline": "Drop vestigial Travis and NVM config files (#97)",
"author_name": "Rob Brackett",
"author_login": "Mr0grog",
"committed_at": "2022-09-23T19:07:52Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b33e66663c79dbf01c0cba286955124df6781223",
"body": "This updates Mocha and Chai (and plugins) to their latest compatible versions and fixes #87.\n\nMocha v10 (the latest) drops support for Node.js v12, so we can't update to it. Instead, we can update to the latest v9.x release, which at least fixes a number of security vulnerabilities. Our usage of Moc\n[…]\n always means that the provided *keys* might be keys or might be paths. In v3.x, `deep` was used for both in different circumstances, which led to some fuzziness about what a given assertion is doing.",
"is_bot": false,
"headline": "Update test tools (#94)",
"author_name": "Rob Brackett",
"author_login": "Mr0grog",
"committed_at": "2022-09-23T03:55:34Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "c4ee0ce2db5473ca78105c9b5c136aebb03821a0",
"body": null,
"is_bot": false,
"headline": "Clean up files to follow linter rules",
"author_name": "Rob Brackett",
"author_login": "Mr0grog",
"committed_at": "2022-09-23T03:00:58Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b96941f8d2f2fcb234daf51f59a38e9b58dbe58a",
"body": null,
"is_bot": false,
"headline": "Add .editorconfig file",
"author_name": "Rob Brackett",
"author_login": "Mr0grog",
"committed_at": "2022-09-23T03:00:58Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "dbc4eea1e0c30d3b3a93d2487757dfbe1e974f0b",
"body": "This updates JSCS and JSHint to their latest versions and updates their configuration to match the current code style here. It does not solve the vulnerabilities in JSCS (since it is no longer maintained), but gets us a little closer to something that at least *works*.",
"is_bot": false,
"headline": "Update linters to latest versions",
"author_name": "Rob Brackett",
"author_login": "Mr0grog",
"committed_at": "2022-09-23T03:00:58Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e97b2781bb536666e2ff95fbf04a5545ce42919d",
"body": "This adds some additional release notes that weren’t covered in #90 because the changes were still in progress when it was merged.",
"is_bot": false,
"headline": "Release note updates for \"in development\" section (#93)",
"author_name": "Rob Brackett",
"author_login": "Mr0grog",
"committed_at": "2022-09-22T16:47:28Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "664131147a1aca0a7a68a8817c9ad0cae7314bb4",
"body": null,
"is_bot": false,
"headline": "Add notes for in-development changes",
"author_name": "Rob Brackett",
"author_login": "Mr0grog",
"committed_at": "2022-09-22T00:06:24Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0422d390cddc9d4e096a3e52cefac17432d37f69",
"body": "These release notes were missing from the README. Fixes #79.",
"is_bot": false,
"headline": "Add release notes for 0.8.2 through 0.10.1",
"author_name": "Rob Brackett",
"author_login": "Mr0grog",
"committed_at": "2022-09-22T00:06:24Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6357926202c90f56f2f368f00ab7a95a80e5b6d7",
"body": "It looks like the `apiHost` option was added in #50, had some fixes committed directly to the main branch later (?), and then was broken in #62 when the underlying Datadog client implementation was changed. This fixes it, and resolves #42.\n\nThe `agent` option was also broken in #62, but the PR discu\n[…]\nlook intentional (while there are no notes about breaking `apiHost`). However, only part of the implementation awas removed and it was still documented in some spots. I also cleaned all that out here.",
"is_bot": false,
"headline": "Fix the broken `apiHost` option",
"author_name": "Rob Brackett",
"author_login": "Mr0grog",
"committed_at": "2022-09-22T00:05:13Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "1c6c4410b925bf01280afa78bcc8900a6613a511",
"body": null,
"is_bot": false,
"headline": "Metrics should flush a *copy* of tags so alteration is safe",
"author_name": "Rob Brackett",
"author_login": "Mr0grog",
"committed_at": "2022-09-21T17:58:55Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "cfc00d1e19f79df78ee311627b4c3746a2a256f3",
"body": null,
"is_bot": false,
"headline": "Use newer style for functions in object literals",
"author_name": "Rob Brackett",
"author_login": "Mr0grog",
"committed_at": "2022-09-21T17:58:55Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5883d5ad22553fe4ce622b8f677d60af719386ad",
"body": null,
"is_bot": false,
"headline": "Use arrow function where they simplify things",
"author_name": "Rob Brackett",
"author_login": "Mr0grog",
"committed_at": "2022-09-21T17:58:55Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e8cb8a067dfe8864a408c018907f69ddbf33e472",
"body": null,
"is_bot": false,
"headline": "Use native promise tools instead of callbackify",
"author_name": "Rob Brackett",
"author_login": "Mr0grog",
"committed_at": "2022-09-21T17:58:55Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7a8f279a937385a5b58ddbff171646222a71ebb4",
"body": null,
"is_bot": false,
"headline": "Don't use concat(), it's slow and memory-intensive",
"author_name": "Rob Brackett",
"author_login": "Mr0grog",
"committed_at": "2022-09-21T17:58:55Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "72b64ece86b90871b6ca3982b06c8ae525d7d290",
"body": null,
"is_bot": false,
"headline": "Use Array.prototype.includes()",
"author_name": "Rob Brackett",
"author_login": "Mr0grog",
"committed_at": "2022-09-21T17:58:55Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "262f1eecff966792925c97438444248fe677d90c",
"body": null,
"is_bot": false,
"headline": "Use for...of loops where appropriate",
"author_name": "Rob Brackett",
"author_login": "Mr0grog",
"committed_at": "2022-09-21T17:58:55Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a8df9d1daf650fdfd42133bcafee04437cd602fd",
"body": "Both dependencies of this package used to exact dependencies, which can result in a lot of redundancy if a consumer of this package has other dependencies that also use `debug` or `@datadog/datadog-api-client`. Instead, we now use \"compatible with\" ranges to let consumers use any version of our dependencies that should work with our code.\n\nThis also updates `debug` to the current major release. (This declares anything compatible with 4.1, not 4.0, since 4.1 has an important fix.)",
"is_bot": false,
"headline": "Use ranges for dependency versions",
"author_name": "Rob Brackett",
"author_login": "Mr0grog",
"committed_at": "2022-09-20T20:02:11Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "70f462a095384d52b927981ca8ff2f9fa6405203",
"body": "We recently switched to GitHub actions in stead of Travis for continuous integration, but forgot to update the status image in the README. This fixes it to be based on our actual build status for the `main` branch.\r\n\r\nSee also #75.",
"is_bot": false,
"headline": "Update README build status for GitHub actions",
"author_name": "Rob Brackett",
"author_login": "Mr0grog",
"committed_at": "2022-09-20T17:49:44Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "13b8e1eb51b95180bc8135c7a8f98552a0bea9be",
"body": "Add median aggregation for histograms",
"is_bot": false,
"headline": "Merge pull request #69 from Mr0grog/68-histogram-median",
"author_name": "Erik Boesen",
"author_login": "ErikBoesen",
"committed_at": "2022-09-19T22:30:40Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9a8c7bdc10fe3d22bce2be6488ca9d80c68df025",
"body": null,
"is_bot": false,
"headline": "Document histogram options",
"author_name": "Rob Brackett",
"author_login": "Mr0grog",
"committed_at": "2022-09-19T22:28:52Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1056473b0fdf3c2c5a7ff19e32db69d93521b839",
"body": null,
"is_bot": false,
"headline": "Document `median` in README",
"author_name": "Rob Brackett",
"author_login": "Mr0grog",
"committed_at": "2022-09-19T22:27:22Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "648b13c6a8a74500ebbf84a65a99ff2afae7bd29",
"body": null,
"is_bot": false,
"headline": "Add test for median",
"author_name": "Rob Brackett",
"author_login": "Mr0grog",
"committed_at": "2022-09-19T22:27:22Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "cef5e62f5945f62a18d7c532195fa73e339e573b",
"body": null,
"is_bot": false,
"headline": "Fix metric order/count-dependent tests",
"author_name": "Rob Brackett",
"author_login": "Mr0grog",
"committed_at": "2022-09-19T22:27:22Z",
"body_truncated": false,
"is_coding_agent": false
}
],
"releases_count": 13,
"commits_last_year": 16,
"latest_release_at": "2026-07-24T20:48:45Z",
"latest_release_tag": "v0.13.0-pre.2",
"releases_from_tags": false,
"days_since_last_push": 2,
"active_weeks_last_year": 6,
"days_since_latest_release": 11,
"mean_days_between_releases": 138.8
},
"artifacts": {
"collected": true,
"structure": [],
"declarations": [
{
"name": "datadog-metrics",
"path": "package.json",
"tokens": [
"npm.entry"
],
"ecosystem": "npm"
}
]
},
"community": {
"has_readme": true,
"has_license": true,
"readme_badges": {
"hosts": [],
"total": 0,
"header": 0,
"collected": true,
"has_inspect_badge": false
},
"has_description": true,
"has_contributing": true,
"health_percentage": 57,
"has_issue_template": false,
"has_code_of_conduct": false,
"has_pull_request_template": false
},
"ecosystem": {
"packages": [
{
"name": "datadog-metrics",
"exists": true,
"license": "MIT",
"keywords": [
"datadog",
"metrics",
"stats"
],
"ecosystem": "npm",
"categories": [],
"matches_repo": true,
"registry_url": "https://www.npmjs.com/package/datadog-metrics",
"declared_type": null,
"is_deprecated": false,
"latest_version": "0.12.1",
"repository_url": "https://github.com/dbader/node-datadog-metrics",
"versions_count": 33,
"total_downloads": null,
"dependents_count": null,
"deprecation_note": null,
"maintainers_count": 4,
"monthly_downloads": 10535159,
"first_published_at": "2014-12-08T01:12:05.441000Z",
"latest_published_at": "2024-12-19T17:54:05.820000Z",
"latest_version_yanked": null,
"days_since_latest_publish": 593
}
]
},
"popularity": {
"forks": 60,
"stars": 147,
"watchers": 4,
"fork_history": {
"days": [
{
"date": "2015-03-27",
"count": 1
},
{
"date": "2015-10-15",
"count": 1
},
{
"date": "2015-11-05",
"count": 1
},
{
"date": "2015-12-04",
"count": 1
},
{
"date": "2016-03-17",
"count": 1
},
{
"date": "2016-10-14",
"count": 1
},
{
"date": "2017-01-06",
"count": 1
},
{
"date": "2017-03-14",
"count": 1
},
{
"date": "2017-04-21",
"count": 1
},
{
"date": "2017-04-26",
"count": 1
},
{
"date": "2017-10-23",
"count": 1
},
{
"date": "2017-11-17",
"count": 2
},
{
"date": "2018-01-02",
"count": 1
},
{
"date": "2018-01-10",
"count": 1
},
{
"date": "2018-02-13",
"count": 1
},
{
"date": "2018-04-06",
"count": 1
},
{
"date": "2018-04-13",
"count": 1
},
{
"date": "2018-07-01",
"count": 1
},
{
"date": "2018-10-24",
"count": 1
},
{
"date": "2018-11-07",
"count": 1
},
{
"date": "2018-11-20",
"count": 1
},
{
"date": "2018-12-02",
"count": 1
},
{
"date": "2019-01-21",
"count": 1
},
{
"date": "2019-05-08",
"count": 1
},
{
"date": "2019-07-12",
"count": 1
},
{
"date": "2019-10-25",
"count": 1
},
{
"date": "2019-11-04",
"count": 1
},
{
"date": "2019-12-17",
"count": 1
},
{
"date": "2020-01-17",
"count": 1
},
{
"date": "2020-03-06",
"count": 1
},
{
"date": "2020-03-27",
"count": 1
},
{
"date": "2020-05-04",
"count": 1
},
{
"date": "2020-07-18",
"count": 1
},
{
"date": "2020-09-13",
"count": 1
},
{
"date": "2020-09-25",
"count": 1
},
{
"date": "2020-12-09",
"count": 1
},
{
"date": "2021-01-25",
"count": 1
},
{
"date": "2021-04-23",
"count": 1
},
{
"date": "2021-10-16",
"count": 1
},
{
"date": "2022-03-07",
"count": 1
},
{
"date": "2022-04-06",
"count": 1
},
{
"date": "2022-08-29",
"count": 1
},
{
"date": "2022-09-05",
"count": 1
},
{
"date": "2022-09-15",
"count": 1
},
{
"date": "2022-10-04",
"count": 1
},
{
"date": "2022-11-26",
"count": 1
},
{
"date": "2022-12-09",
"count": 1
},
{
"date": "2023-09-27",
"count": 2
},
{
"date": "2023-11-29",
"count": 1
},
{
"date": "2024-04-02",
"count": 1
},
{
"date": "2025-02-11",
"count": 1
},
{
"date": "2025-03-27",
"count": 1
},
{
"date": "2025-05-24",
"count": 1
},
{
"date": "2025-11-03",
"count": 1
}
],
"complete": true,
"collected": 56,
"total_forks": 60
},
"star_history": null,
"open_issues_and_prs": 7
},
"ai_readiness": {
"has_nix": false,
"example_dirs": [
"examples"
],
"has_llms_txt": false,
"has_dockerfile": false,
"has_mcp_signal": false,
"bootstrap_files": [],
"api_schema_files": [],
"has_devcontainer": false,
"typecheck_configs": [
"tsconfig.json"
],
"toolchain_manifests": [],
"largest_source_bytes": 15766,
"source_files_sampled": 17,
"oversized_source_files": 0,
"agent_instruction_files": [],
"agent_instruction_max_bytes": null
},
"dependencies": {
"manifests": [
"package.json"
],
"advisories": {
"error": null,
"scope": "published_package",
"source": "osv",
"findings": [],
"collected": true,
"malicious": [],
"truncated": false,
"by_severity": {},
"advisory_count": 0,
"affected_count": 0,
"assessed_count": 38,
"malicious_count": 0,
"assessed_package": "npm:datadog-metrics@0.12.1",
"unassessed_count": 0,
"direct_affected_count": 0
},
"ecosystems": [
"npm"
],
"dependencies": [
{
"name": "cross-fetch",
"manifest": "package.json",
"ecosystem": "npm",
"version_constraint": "^4.0.0"
},
{
"name": "debug",
"manifest": "package.json",
"ecosystem": "npm",
"version_constraint": "^4.1.0"
}
],
"all_dependencies": {
"error": null,
"source": "github-sbom",
"packages": [
{
"name": "cross-fetch",
"direct": true,
"version": "^4.0.0",
"ecosystem": "npm"
},
{
"name": "debug",
"direct": true,
"version": "^4.1.0",
"ecosystem": "npm"
},
{
"name": "@datadog/datadog-api-client",
"direct": false,
"version": "^1.31.0",
"ecosystem": "npm"
},
{
"name": "@types/node",
"direct": false,
"version": "^14.14.45",
"ecosystem": "npm"
},
{
"name": "chai",
"direct": false,
"version": "4.3.6",
"ecosystem": "npm"
},
{
"name": "chai-as-promised",
"direct": false,
"version": "^7.1.2",
"ecosystem": "npm"
},
{
"name": "chai-string",
"direct": false,
"version": "1.5.0",
"ecosystem": "npm"
},
{
"name": "eslint",
"direct": false,
"version": "^8.24.0",
"ecosystem": "npm"
},
{
"name": "mocha",
"direct": false,
"version": "10.8.2",
"ecosystem": "npm"
},
{
"name": "nock",
"direct": false,
"version": "^13.2.9",
"ecosystem": "npm"
},
{
"name": "typescript",
"direct": false,
"version": "^4.8.4",
"ecosystem": "npm"
}
],
"collected": true,
"truncated": false,
"total_count": 11,
"direct_count": 2,
"indirect_count": 9
}
},
"maintainership": {
"issues": {
"open_prs": 1,
"merged_prs": 92,
"open_issues": 6,
"closed_ratio": 0.895,
"closed_issues": 51,
"closed_unmerged_prs": 10
},
"bus_factor": 2,
"bot_contributors": 1,
"top_contributors": [
{
"type": "User",
"login": "Mr0grog",
"commits": 94,
"avatar_url": "https://avatars.githubusercontent.com/u/74178?v=4"
},
{
"type": "User",
"login": "dbader",
"commits": 37,
"avatar_url": "https://avatars.githubusercontent.com/u/306708?v=4"
},
{
"type": "User",
"login": "csabapalfi",
"commits": 28,
"avatar_url": "https://avatars.githubusercontent.com/u/181959?v=4"
},
{
"type": "User",
"login": "ErikBoesen",
"commits": 13,
"avatar_url": "https://avatars.githubusercontent.com/u/5923662?v=4"
},
{
"type": "User",
"login": "rpelliard",
"commits": 4,
"avatar_url": "https://avatars.githubusercontent.com/u/5392527?v=4"
},
{
"type": "User",
"login": "dustingibbs",
"commits": 3,
"avatar_url": "https://avatars.githubusercontent.com/u/5171223?v=4"
},
{
"type": "User",
"login": "dkMorlok",
"commits": 2,
"avatar_url": "https://avatars.githubusercontent.com/u/2921037?v=4"
},
{
"type": "User",
"login": "gquinteros93",
"commits": 2,
"avatar_url": "https://avatars.githubusercontent.com/u/53574912?v=4"
},
{
"type": "User",
"login": "acatalucci-synth",
"commits": 1,
"avatar_url": "https://avatars.githubusercontent.com/u/133665309?v=4"
},
{
"type": "User",
"login": "Calyhre",
"commits": 1,
"avatar_url": "https://avatars.githubusercontent.com/u/3692274?v=4"
}
],
"contributors_sampled": 18,
"top_contributor_share": 0.487
},
"quality_signals": {
"has_ci": true,
"has_tests": true,
"ci_workflows": [
"ci.yml"
],
"has_docs_dir": false,
"linter_configs": [
".eslintrc.json"
],
"has_editorconfig": true,
"has_linter_config": true,
"has_precommit_config": false
},
"security_signals": {
"lockfiles": [],
"scorecard": {
"checks": [
{
"name": "Binary-Artifacts",
"score": 10,
"reason": "no binaries found in the repo",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#binary-artifacts"
},
{
"name": "Branch-Protection",
"score": 0,
"reason": "branch protection not enabled on development/release branches",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#branch-protection"
},
{
"name": "CI-Tests",
"score": 2,
"reason": "6 out of 26 merged PRs checked by a CI test -- score normalized to 2",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#ci-tests"
},
{
"name": "CII-Best-Practices",
"score": 0,
"reason": "no effort to earn an OpenSSF best practices badge detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#cii-best-practices"
},
{
"name": "Code-Review",
"score": 0,
"reason": "Found 1/23 approved changesets -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#code-review"
},
{
"name": "Contributors",
"score": 10,
"reason": "project has 25 contributing companies or organizations",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#contributors"
},
{
"name": "Dangerous-Workflow",
"score": 10,
"reason": "no dangerous workflow patterns detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dangerous-workflow"
},
{
"name": "Dependency-Update-Tool",
"score": 10,
"reason": "update tool detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dependency-update-tool"
},
{
"name": "Fuzzing",
"score": 0,
"reason": "project is not fuzzed",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#fuzzing"
},
{
"name": "License",
"score": 10,
"reason": "license file detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#license"
},
{
"name": "Maintained",
"score": 7,
"reason": "9 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 7",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#maintained"
},
{
"name": "Packaging",
"score": null,
"reason": "packaging workflow not detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#packaging"
},
{
"name": "Pinned-Dependencies",
"score": 4,
"reason": "dependency not pinned by hash detected -- score normalized to 4",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#pinned-dependencies"
},
{
"name": "SAST",
"score": 0,
"reason": "SAST tool is not run on all commits -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#sast"
},
{
"name": "Security-Policy",
"score": 0,
"reason": "security policy file not detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#security-policy"
},
{
"name": "Signed-Releases",
"score": 0,
"reason": "Project has not signed or included provenance with any releases.",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#signed-releases"
},
{
"name": "Token-Permissions",
"score": 0,
"reason": "detected GitHub workflow tokens with excessive permissions",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#token-permissions"
},
{
"name": "Vulnerabilities",
"score": 10,
"reason": "0 existing vulnerabilities detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#vulnerabilities"
}
],
"commit": "230872b1f2d5da9ad2e56938427c5ca4954e1c5a",
"ran_at": "2026-08-05T07:56:18Z",
"aggregate_score": 4.5,
"scorecard_version": "v5.5.0"
},
"has_codeql_workflow": false,
"has_security_policy": false,
"has_dependabot_config": true
},
"contribution_flow": {
"collected": true,
"recent_prs": {
"merged_7d": 1,
"decided_7d": 1,
"merged_30d": 5,
"authors_30d": 2,
"decided_30d": 5,
"sample_size": 60,
"window_days": 30,
"sample_exhausted": false,
"authors_probed_30d": 2,
"newcomer_merged_30d": 1,
"bot_prs_excluded_30d": 2,
"newcomer_authors_30d": 1,
"newcomer_decided_30d": 1
},
"ci_last_run_at": "2026-08-02T20:57:23Z",
"oldest_open_prs": [
{
"number": 151,
"created_at": "2025-11-03T17:07:40Z",
"last_comment_at": null,
"last_comment_author": null
}
],
"last_merged_pr_at": "2026-08-02T20:56:35Z",
"ci_last_conclusion": "SUCCESS",
"oldest_open_issues": [
{
"number": 12,
"created_at": "2015-12-04T12:01:53Z",
"last_comment_at": "2017-10-26T05:18:56Z",
"last_comment_author": "karsai5"
},
{
"number": 19,
"created_at": "2016-08-04T14:14:53Z",
"last_comment_at": "2017-01-30T10:08:49Z",
"last_comment_author": "dbader"
},
{
"number": 33,
"created_at": "2017-11-09T13:41:46Z",
"last_comment_at": "2022-09-27T20:20:52Z",
"last_comment_author": "Mr0grog"
},
{
"number": 53,
"created_at": "2020-06-29T14:27:18Z",
"last_comment_at": "2024-11-12T21:38:27Z",
"last_comment_author": "Mr0grog"
},
{
"number": 55,
"created_at": "2020-09-12T00:16:25Z",
"last_comment_at": "2022-09-20T01:36:17Z",
"last_comment_author": "Mr0grog"
},
{
"number": 132,
"created_at": "2024-11-12T22:38:27Z",
"last_comment_at": "2025-09-11T00:58:22Z",
"last_comment_author": "Mr0grog"
}
]
}
},
"config": {
"disabled_metrics": [],
"disabled_categories": [],
"disabled_components": {}
},
"source": {
"url": "https://github.com/dbader/node-datadog-metrics",
"host": "github.com",
"name": "node-datadog-metrics",
"owner": "dbader"
},
"metrics": {
"overall": {
"key": "overall",
"band": "good",
"name": "Overall health",
"note": "The weighted overall 67 is calibrated to 78 on the published index scale (record calibration 2026-08-02).",
"notes": [
{
"code": "overall_calibration",
"params": {
"raw": 67,
"calibrated": 78,
"calibration": "2026-08-02"
}
}
],
"value": 78,
"inputs": {
"security": 56,
"vitality": 65,
"community": 71,
"governance": 72,
"calibration": "2026-08-02",
"engineering": 70,
"ai_readiness": 50,
"weighted_overall_raw": 67
},
"components": []
},
"categories": [
{
"key": "vitality",
"band": "good",
"name": "Vitality",
"value": 65,
"weight": 0.21,
"metrics": [
{
"key": "development_activity",
"band": "moderate",
"name": "Development activity",
"note": null,
"notes": [],
"value": 58,
"inputs": {
"commits_last_year": 16,
"human_commit_share": 0.91,
"days_since_last_push": 2,
"active_weeks_last_year": 6
},
"components": [
{
"key": "push_recency",
"name": "Push recency",
"detail": "last push 2 days ago",
"points": 36,
"status": "met",
"details": [
{
"code": "push_recency",
"params": {
"days": 2
}
}
],
"max_points": 36
},
{
"key": "commit_cadence",
"name": "Commit cadence",
"detail": "6/52 weeks with commits",
"points": 4.2,
"status": "partial",
"details": [
{
"code": "commit_cadence_weeks",
"params": {
"weeks": 6
}
}
],
"max_points": 36
},
{
"key": "commit_volume",
"name": "Commit volume",
"detail": "16 commits in the last year",
"points": 11.1,
"status": "partial",
"details": [
{
"code": "commits_last_year",
"params": {
"count": 16
}
}
],
"max_points": 18
},
{
"key": "openssf_scorecard_maintained",
"name": "OpenSSF Scorecard: Maintained",
"detail": "9 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 7",
"points": 7,
"status": "partial",
"details": [],
"max_points": 10
}
]
},
{
"key": "release_discipline",
"band": "good",
"name": "Release discipline",
"note": null,
"notes": [],
"value": 76,
"inputs": {
"releases_count": 13,
"latest_release_tag": "v0.13.0-pre.2",
"releases_from_tags": false,
"days_since_latest_release": 11,
"mean_days_between_releases": 138.8
},
"components": [
{
"key": "ships_releases",
"name": "Ships releases",
"detail": "13 releases published",
"points": 27,
"status": "met",
"details": [
{
"code": "releases_published",
"params": {
"count": 13
}
}
],
"max_points": 27
},
{
"key": "release_recency",
"name": "Release recency",
"detail": "latest release 11 days ago",
"points": 36,
"status": "met",
"details": [
{
"code": "release_recency",
"params": {
"days": 11
}
}
],
"max_points": 36
},
{
"key": "release_cadence",
"name": "Release cadence",
"detail": "a release every ~138.8 days",
"points": 12.6,
"status": "partial",
"details": [
{
"code": "release_cadence",
"params": {
"gap": 138.8
}
}
],
"max_points": 27
},
{
"key": "openssf_scorecard_signed_releases",
"name": "OpenSSF Scorecard: Signed-Releases",
"detail": "Project has not signed or included provenance with any releases.",
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
},
{
"key": "abandonment",
"band": "exceptional",
"name": "Abandonment",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"cap": null,
"state": "maintained",
"guards": [],
"signals": [],
"red_flag": false,
"multiplier_pct": 100,
"declared_reason": null,
"unverified_reason": null,
"unanswered_open_prs": null,
"unanswered_open_issues": null,
"days_since_last_merged_pr": null,
"days_since_last_human_commit": 2,
"days_since_last_human_commit_is_floor": false
},
"components": [
{
"key": "project_is_still_maintained",
"name": "Project is still maintained",
"detail": "last human commit 2 days ago",
"points": 100,
"status": "met",
"details": [
{
"code": "abandonment_maintained",
"params": {
"days": 2
}
}
],
"max_points": 100
}
]
}
],
"description": "Is the project alive — is code being written and are releases shipping?"
},
{
"key": "community",
"band": "good",
"name": "Community & Adoption",
"value": 71,
"weight": 0.17,
"metrics": [
{
"key": "popularity",
"band": "moderate",
"name": "Popularity & adoption",
"note": null,
"notes": [],
"value": 53,
"inputs": {
"forks": 60,
"stars": 147,
"watchers": 4,
"growth_state": "unverified",
"growth_factor_pct": 100,
"growth_unverified_reason": "no_history"
},
"components": [
{
"key": "stars",
"name": "Stars",
"detail": "147 stars",
"points": 35.1,
"status": "partial",
"details": [
{
"code": "stars",
"params": {
"count": 147
}
}
],
"max_points": 60
},
{
"key": "forks",
"name": "Forks",
"detail": "60 forks",
"points": 14.8,
"status": "partial",
"details": [
{
"code": "forks",
"params": {
"count": 60
}
}
],
"max_points": 25
},
{
"key": "watchers",
"name": "Watchers",
"detail": "4 watchers",
"points": 2.7,
"status": "partial",
"details": [
{
"code": "watchers",
"params": {
"count": 4
}
}
],
"max_points": 15
}
]
},
{
"key": "community_health",
"band": "good",
"name": "Community health",
"note": null,
"notes": [],
"value": 70,
"inputs": {
"has_readme": true,
"has_license": true,
"readme_badges": 0,
"has_contributing": true,
"has_issue_template": false,
"has_code_of_conduct": false,
"readme_badge_services": [],
"has_pull_request_template": false
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 22.5,
"status": "met",
"details": [],
"max_points": 22.5
},
{
"key": "license",
"name": "License",
"detail": "recognized license (MIT)",
"points": 22.5,
"status": "met",
"details": [
{
"code": "license_standard",
"params": {}
},
{
"code": "license_spdx",
"params": {
"spdx": "MIT"
}
}
],
"max_points": 22.5
},
{
"key": "contributing_guide",
"name": "CONTRIBUTING guide",
"detail": null,
"points": 18,
"status": "met",
"details": [],
"max_points": 18
},
{
"key": "code_of_conduct",
"name": "Code of conduct",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 13.5
},
{
"key": "issue_template",
"name": "Issue template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.2
},
{
"key": "pr_template",
"name": "PR template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 6.3
}
]
},
{
"key": "ecosystem_adoption",
"band": "exceptional",
"name": "Ecosystem adoption (downloads)",
"note": "Excluded from scoring (no data or not applicable): Registry dependents. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"registry_dependents"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 100,
"inputs": {
"packages": [
"datadog-metrics"
],
"dependents": null,
"ecosystems": "npm",
"total_downloads": null,
"monthly_downloads": 10535159
},
"components": [
{
"key": "monthly_downloads",
"name": "Monthly downloads",
"detail": "10,535,159 downloads/month across npm",
"points": 80,
"status": "met",
"details": [
{
"code": "downloads_monthly",
"params": {
"count": 10535159,
"ecosystems": "npm"
}
}
],
"max_points": 80
},
{
"key": "registry_dependents",
"name": "Registry dependents",
"detail": "not reported by this ecosystem",
"points": 0,
"status": "excluded",
"details": [
{
"code": "not_reported_by_this_ecosystem",
"params": {}
}
],
"max_points": 20
}
]
}
],
"description": "Does the project have users, downloads, attention, and a welcoming setup for contributors?"
},
{
"key": "governance",
"band": "good",
"name": "Sustainability & Governance",
"value": 72,
"weight": 0.23,
"metrics": [
{
"key": "maintainer_resilience",
"band": "moderate",
"name": "Maintainer resilience (bus factor)",
"note": null,
"notes": [],
"value": 60,
"inputs": {
"bus_factor": 2,
"contributors_sampled": 18,
"top_contributor_share": 0.487
},
"components": [
{
"key": "bus_factor",
"name": "Bus factor",
"detail": "2 contributor(s) cover half of all commits",
"points": 25.2,
"status": "partial",
"details": [
{
"code": "bus_factor",
"params": {
"count": 2
}
}
],
"max_points": 54
},
{
"key": "commit_distribution",
"name": "Commit distribution",
"detail": "top contributor authored 49% of commits",
"points": 11.5,
"status": "partial",
"details": [
{
"code": "top_contributor_share",
"params": {
"share": 49
}
}
],
"max_points": 22.5
},
{
"key": "contributor_breadth",
"name": "Contributor breadth",
"detail": "18 contributors",
"points": 13.5,
"status": "met",
"details": [
{
"code": "contributors_sampled",
"params": {
"count": 18
}
}
],
"max_points": 13.5
},
{
"key": "openssf_scorecard_contributors",
"name": "OpenSSF Scorecard: Contributors",
"detail": "project has 25 contributing companies or organizations",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
}
]
},
{
"key": "responsiveness",
"band": "good",
"name": "Issue & PR responsiveness",
"note": null,
"notes": [],
"value": 78,
"inputs": {
"merged_prs": 92,
"open_issues": 6,
"closed_issues": 51,
"prs_merged_7d": 1,
"prs_decided_7d": 1,
"prs_merged_30d": 5,
"prs_decided_30d": 5,
"issue_closed_ratio": 0.895,
"closed_unmerged_prs": 10,
"first_time_authors_30d": 1,
"first_time_prs_merged_30d": 1,
"first_time_prs_decided_30d": 1
},
"components": [
{
"key": "issue_resolution",
"name": "Issue resolution",
"detail": "90% of issues closed",
"points": 37.6,
"status": "partial",
"details": [
{
"code": "issues_closed_share",
"params": {
"share": 90
}
}
],
"max_points": 42
},
{
"key": "pr_acceptance",
"name": "PR acceptance",
"detail": "92/102 decided PRs merged",
"points": 27.1,
"status": "partial",
"details": [
{
"code": "decided_prs_merged",
"params": {
"merged": 92,
"decided": 102
}
}
],
"max_points": 30
},
{
"key": "newcomer_pr_acceptance",
"name": "Newcomer PR acceptance",
"detail": "1/1 first-time contributors' PRs merged in 30d",
"points": 13,
"status": "met",
"details": [
{
"code": "newcomer_prs_merged",
"params": {
"days": 30,
"merged": 1,
"decided": 1
}
}
],
"max_points": 13
},
{
"key": "openssf_scorecard_code_review",
"name": "OpenSSF Scorecard: Code-Review",
"detail": "Found 1/23 approved changesets -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
}
]
},
{
"key": "stewardship",
"band": "good",
"name": "Ownership & stewardship",
"note": "Excluded from scoring (no data or not applicable): Verified domain. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"verified_domain"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 74,
"inputs": {
"followers": 3489,
"owner_type": "User",
"is_verified": null,
"owner_login": "dbader",
"public_repos": 53,
"account_age_days": 5893
},
"components": [
{
"key": "ownership_backing",
"name": "Ownership backing",
"detail": "personal (user) account",
"points": 10,
"status": "partial",
"details": [
{
"code": "owner_personal",
"params": {}
}
],
"max_points": 30
},
{
"key": "verified_domain",
"name": "Verified domain",
"detail": "not applicable to user accounts",
"points": 0,
"status": "excluded",
"details": [
{
"code": "not_applicable_to_user_accounts",
"params": {}
}
],
"max_points": 20
},
{
"key": "owner_reach",
"name": "Owner reach",
"detail": "3,489 followers of dbader",
"points": 25,
"status": "met",
"details": [
{
"code": "owner_followers",
"params": {
"count": 3489,
"login": "dbader"
}
}
],
"max_points": 25
},
{
"key": "track_record",
"name": "Track record",
"detail": "53 public repos, account ~16 yr old",
"points": 24.6,
"status": "partial",
"details": [
{
"code": "public_repos",
"params": {
"count": 53
}
},
{
"code": "account_age_years",
"params": {
"years": 16
}
}
],
"max_points": 25
}
]
},
{
"key": "package_maintenance",
"band": "good",
"name": "Package maintenance",
"note": null,
"notes": [],
"value": 79,
"inputs": {
"packages": [
"datadog-metrics"
],
"ecosystems": "npm",
"any_deprecated": false,
"min_days_since_publish": 593
},
"components": [
{
"key": "published_resolvable",
"name": "Published & resolvable",
"detail": "1 package(s) on npm",
"points": 25,
"status": "met",
"details": [
{
"code": "packages_published",
"params": {
"count": 1,
"ecosystems": "npm"
}
}
],
"max_points": 25
},
{
"key": "publish_recency",
"name": "Publish recency",
"detail": "latest publish 593 days ago",
"points": 14,
"status": "partial",
"details": [
{
"code": "publish_recency",
"params": {
"days": 593
}
}
],
"max_points": 35
},
{
"key": "version_history",
"name": "Version history",
"detail": "33 published versions",
"points": 20,
"status": "met",
"details": [
{
"code": "published_versions",
"params": {
"count": 33
}
}
],
"max_points": 20
},
{
"key": "not_deprecated",
"name": "Not deprecated",
"detail": "active, not deprecated or yanked",
"points": 20,
"status": "met",
"details": [
{
"code": "package_not_deprecated",
"params": {}
}
],
"max_points": 20
}
]
}
],
"description": "Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?"
},
{
"key": "engineering",
"band": "good",
"name": "Engineering Quality",
"value": 70,
"weight": 0.19,
"metrics": [
{
"key": "engineering_practices",
"band": "good",
"name": "Engineering practices",
"note": null,
"notes": [],
"value": 74,
"inputs": {
"has_ci": true,
"has_tests": true,
"has_editorconfig": true,
"has_linter_config": true,
"has_precommit_config": false
},
"components": [
{
"key": "ci_workflows",
"name": "CI workflows",
"detail": "1 workflow(s)",
"points": 24,
"status": "met",
"details": [
{
"code": "ci_workflows",
"params": {
"count": 1
}
}
],
"max_points": 24
},
{
"key": "tests_present",
"name": "Tests present",
"detail": null,
"points": 24,
"status": "met",
"details": [],
"max_points": 24
},
{
"key": "linter_config",
"name": "Linter config",
"detail": ".eslintrc.json",
"points": 16,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": ".eslintrc.json"
}
}
],
"max_points": 16
},
{
"key": "pre_commit_hooks",
"name": "Pre-commit hooks",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 9.6
},
{
"key": "editorconfig",
"name": ".editorconfig",
"detail": null,
"points": 6.4,
"status": "met",
"details": [],
"max_points": 6.4
},
{
"key": "openssf_scorecard_ci_tests",
"name": "OpenSSF Scorecard: CI-Tests",
"detail": "6 out of 26 merged PRs checked by a CI test -- score normalized to 2",
"points": 4,
"status": "partial",
"details": [],
"max_points": 20
}
]
},
{
"key": "documentation",
"band": "good",
"name": "Documentation",
"note": null,
"notes": [],
"value": 65,
"inputs": {
"topics": [],
"has_wiki": true,
"homepage": "https://dbader.org/blog/monitoring-your-nodejs-app-with-datadog",
"has_readme": true,
"has_docs_dir": false,
"has_description": true
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 30,
"status": "met",
"details": [],
"max_points": 30
},
{
"key": "documentation_directory",
"name": "Documentation directory",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 25
},
{
"key": "documentation_homepage_site",
"name": "Documentation / homepage site",
"detail": "https://dbader.org/blog/monitoring-your-nodejs-app-with-datadog",
"points": 15,
"status": "met",
"details": [],
"max_points": 15
},
{
"key": "repository_description",
"name": "Repository description",
"detail": null,
"points": 10,
"status": "met",
"details": [],
"max_points": 10
},
{
"key": "topics",
"name": "Topics",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
},
{
"key": "wiki",
"name": "Wiki",
"detail": null,
"points": 10,
"status": "met",
"details": [],
"max_points": 10
}
]
}
],
"description": "Are baseline engineering and documentation practices in place?"
},
{
"key": "security",
"band": "moderate",
"name": "Security",
"value": 56,
"weight": 0.16,
"metrics": [
{
"key": "security_posture",
"band": "weak",
"name": "Security posture",
"note": "Excluded from scoring (no data or not applicable): Packaging. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"packaging"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 45,
"inputs": {
"source": "openssf_scorecard",
"checks_evaluated": 17,
"scorecard_version": "v5.5.0",
"checks_inconclusive": 1,
"scorecard_aggregate": 4.5
},
"components": [
{
"key": "binary_artifacts",
"name": "Binary-Artifacts",
"detail": "no binaries found in the repo",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "branch_protection",
"name": "Branch-Protection",
"detail": "branch protection not enabled on development/release branches",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "ci_tests",
"name": "CI-Tests",
"detail": "6 out of 26 merged PRs checked by a CI test -- score normalized to 2",
"points": 0.5,
"status": "partial",
"details": [],
"max_points": 2.5
},
{
"key": "cii_best_practices",
"name": "CII-Best-Practices",
"detail": "no effort to earn an OpenSSF best practices badge detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 2.5
},
{
"key": "code_review",
"name": "Code-Review",
"detail": "Found 1/23 approved changesets -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "contributors",
"name": "Contributors",
"detail": "project has 25 contributing companies or organizations",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "dangerous_workflow",
"name": "Dangerous-Workflow",
"detail": "no dangerous workflow patterns detected",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
},
{
"key": "dependency_update_tool",
"name": "Dependency-Update-Tool",
"detail": "update tool detected",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "fuzzing",
"name": "Fuzzing",
"detail": "project is not fuzzed",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "license",
"name": "License",
"detail": "license file detected",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "maintained",
"name": "Maintained",
"detail": "9 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 7",
"points": 5.2,
"status": "partial",
"details": [],
"max_points": 7.5
},
{
"key": "packaging",
"name": "Packaging",
"detail": "packaging workflow not detected",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 5
},
{
"key": "pinned_dependencies",
"name": "Pinned-Dependencies",
"detail": "dependency not pinned by hash detected -- score normalized to 4",
"points": 2,
"status": "partial",
"details": [],
"max_points": 5
},
{
"key": "sast",
"name": "SAST",
"detail": "SAST tool is not run on all commits -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "security_policy",
"name": "Security-Policy",
"detail": "security policy file not detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "signed_releases",
"name": "Signed-Releases",
"detail": "Project has not signed or included provenance with any releases.",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "token_permissions",
"name": "Token-Permissions",
"detail": "detected GitHub workflow tokens with excessive permissions",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "vulnerabilities",
"name": "Vulnerabilities",
"detail": "0 existing vulnerabilities detected",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
}
]
},
{
"key": "dependency_advisories",
"band": "exceptional",
"name": "Dependency advisories",
"note": "Excluded from scoring (no data or not applicable): No advisories left outstanding. Remaining weights renormalized. Matched the npm:datadog-metrics@0.12.1 runtime dependency closure — what installing the published package pulls in — 38 packages. Reachability is not analyzed.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"no_advisories_left_outstanding"
]
}
},
{
"code": "weights_renormalized",
"params": {}
},
{
"code": "advisories_scope_published",
"params": {
"package": "npm:datadog-metrics@0.12.1",
"assessed": 38
}
},
{
"code": "advisories_reachability",
"params": {}
}
],
"value": 100,
"inputs": {
"source": "osv",
"advisories": 0,
"affected_packages": 0,
"assessed_packages": 38,
"unassessed_packages": 0,
"affected_by_severity": "none",
"direct_affected_packages": 0
},
"components": [
{
"key": "direct_dependencies_free_of_known_advisories",
"name": "Direct dependencies free of known advisories",
"detail": "no direct dependency carries a known advisory",
"points": 35,
"status": "met",
"details": [
{
"code": "no_direct_advisories",
"params": {}
}
],
"max_points": 35
},
{
"key": "indirect_dependencies_free_of_known_advisories",
"name": "Indirect dependencies free of known advisories",
"detail": "no indirect dependency carries a known advisory",
"points": 25,
"status": "met",
"details": [
{
"code": "no_indirect_advisories",
"params": {}
}
],
"max_points": 25
},
{
"key": "no_advisories_left_outstanding",
"name": "No advisories left outstanding",
"detail": "no advisory carries a publication date",
"points": 0,
"status": "excluded",
"details": [
{
"code": "advisories_no_publication_date",
"params": {}
}
],
"max_points": 40
}
]
},
{
"key": "malicious_dependencies",
"band": "exceptional",
"name": "Malicious dependencies",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"source": "osv",
"meaning": "reported as a malicious package by the OpenSSF corpus; the remedy is removal or moving off the compromised name, never an upgrade of the same artifact. Versions the registry has since pulled are listed but not scored",
"packages": [],
"red_flag": false,
"assessed_packages": 38,
"malicious_packages": 0,
"direct_malicious_packages": 0,
"withdrawn_malicious_packages": 0,
"installable_malicious_packages": 0
},
"components": [
{
"key": "no_dependency_reported_as_a_malicious_package",
"name": "No dependency reported as a malicious package",
"detail": "no dependency is reported as a malicious package",
"points": 100,
"status": "met",
"details": [
{
"code": "no_malicious_dependencies",
"params": {}
}
],
"max_points": 100
}
]
},
{
"key": "high_risk_jurisdiction_exposure",
"band": "exceptional",
"name": "High-Risk Jurisdiction Exposure",
"note": "Only high-confidence self-published location evidence affects this multiplier. Ambiguous matches are review-only; country evidence is not proof of nationality, citizenship, legal registration, malicious intent, or sanctions status.",
"notes": [
{
"code": "jurisdiction_evidence_limits",
"params": {}
}
],
"value": 100,
"inputs": {
"meaning": "self-published location evidence; not nationality or citizenship",
"red_flag": false,
"exposures": [],
"policy_countries": [
"Russia",
"Iran",
"North Korea"
],
"commit_weight_rule": {
"min_commits": 50,
"min_commit_share": 0.1
},
"review_only_matches": 0,
"below_threshold_exposures": [],
"assessed_self_published_locations": 15
},
"components": [
{
"key": "policy_exposure_multiplier",
"name": "Policy exposure multiplier",
"detail": "no confirmed policy-scope location match",
"points": 100,
"status": "met",
"details": [
{
"code": "jurisdiction_no_match",
"params": {}
}
],
"max_points": 100
}
]
}
],
"description": "Are visible security and supply-chain practices strong, with no malicious dependency and no unresolved high-risk jurisdiction exposure?"
},
{
"key": "ai_readiness",
"band": "moderate",
"name": "AI Readiness",
"value": 50,
"weight": 0.04,
"metrics": [
{
"key": "ai_agent_context",
"band": "at_risk",
"name": "Agent context & guidance",
"note": null,
"notes": [],
"value": 32,
"inputs": {
"has_llms_txt": false,
"legible_history_share": 0.604,
"agent_instruction_files": [],
"agent_instruction_max_bytes": null
},
"components": [
{
"key": "agent_instructions",
"name": "Agent instructions",
"detail": "no CLAUDE.md / AGENTS.md / editor rules",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_agent_instructions",
"params": {}
}
],
"max_points": 45
},
{
"key": "machine_readable_docs_llms_txt",
"name": "Machine-readable docs (llms.txt)",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
},
{
"key": "legible_commit_history",
"name": "Legible commit history",
"detail": "55 of 91 human commits state their intent (structured subject or explanatory body)",
"points": 32.2,
"status": "partial",
"details": [
{
"code": "legible_history",
"params": {
"legible": 55,
"sampled": 91
}
}
],
"max_points": 40
}
]
},
{
"key": "ai_verify_loop",
"band": "moderate",
"name": "Verify loop (build / test / typecheck)",
"note": null,
"notes": [],
"value": 56,
"inputs": {
"has_nix": false,
"has_tests": true,
"lockfiles": [],
"has_dockerfile": false,
"typed_language": false,
"bootstrap_files": [],
"has_devcontainer": false,
"has_linter_config": true,
"typecheck_configs": [
"tsconfig.json"
],
"agent_commit_share": 0,
"toolchain_manifests": [],
"dependency_bot_commit_share": 0.09
},
"components": [
{
"key": "one_command_bootstrap",
"name": "One-command bootstrap",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 18
},
{
"key": "automated_tests",
"name": "Automated tests",
"detail": null,
"points": 22,
"status": "met",
"details": [],
"max_points": 22
},
{
"key": "lint_format_config",
"name": "Lint / format config",
"detail": ".eslintrc.json",
"points": 11,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": ".eslintrc.json"
}
}
],
"max_points": 11
},
{
"key": "static_type_checking",
"name": "Static type checking",
"detail": "tsconfig.json",
"points": 11,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "tsconfig.json"
}
}
],
"max_points": 11
},
{
"key": "reproducible_environment",
"name": "Reproducible environment",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
},
{
"key": "demonstrated_agent_practice",
"name": "Demonstrated agent practice",
"detail": "no agent-authored commits among the last 100",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_agent_authored_commits",
"params": {
"sampled": 100
}
}
],
"max_points": 10
},
{
"key": "automated_maintenance",
"name": "Automated maintenance",
"detail": "9 of the last 100 commits are automated dependency updates",
"points": 8,
"status": "met",
"details": [
{
"code": "dependency_bot_commits",
"params": {
"count": 9,
"sampled": 100
}
}
],
"max_points": 8
},
{
"key": "openssf_scorecard_pinned_dependencies",
"name": "OpenSSF Scorecard: Pinned-Dependencies",
"detail": "dependency not pinned by hash detected -- score normalized to 4",
"points": 4,
"status": "partial",
"details": [],
"max_points": 10
}
]
},
{
"key": "ai_code_legibility",
"band": "excellent",
"name": "Code legibility for models",
"note": null,
"notes": [],
"value": 82,
"inputs": {
"primary_language": "JavaScript",
"largest_source_bytes": 15766,
"source_files_sampled": 17,
"oversized_source_files": 0
},
"components": [
{
"key": "type_checkable_code",
"name": "Type-checkable code",
"detail": "JavaScript with type-check config (tsconfig.json)",
"points": 27,
"status": "partial",
"details": [
{
"code": "typecheck_config_language",
"params": {
"files": "tsconfig.json",
"language": "JavaScript"
}
}
],
"max_points": 45
},
{
"key": "manageable_file_sizes",
"name": "Manageable file sizes",
"detail": "0/17 source files over 60KB",
"points": 55,
"status": "met",
"details": [
{
"code": "oversized_source_files",
"params": {
"kb": 60,
"sampled": 17,
"oversized": 0
}
}
],
"max_points": 55
}
]
},
{
"key": "ai_interfaces",
"band": "weak",
"name": "Machine-readable interfaces",
"note": null,
"notes": [],
"value": 40,
"inputs": {
"example_dirs": [
"examples"
],
"has_mcp_signal": false,
"api_schema_files": []
},
"components": [
{
"key": "api_schema_openapi_graphql_proto",
"name": "API schema (OpenAPI/GraphQL/proto)",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 40
},
{
"key": "mcp_server",
"name": "MCP server",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 20
},
{
"key": "runnable_examples",
"name": "Runnable examples",
"detail": "examples",
"points": 40,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "examples"
}
}
],
"max_points": 40
}
]
}
],
"description": "How well is the repo equipped to be developed and maintained with AI coding agents? Carries a deliberately small weight: agent tooling is a real maintenance signal, but its absence must never gate the top of the scale (calibration saturates at raw 91, so 100/100 remains reachable with AI Readiness at zero)."
}
],
"classification": {
"top": [
"library"
],
"labels": [
"library"
],
"scores": {
"library": 14
},
"primary": "library",
"evidence": [
{
"tier": "declared",
"label": "library",
"source": "npm.entry",
"weight": 8
},
{
"tier": "distribution",
"label": "library",
"source": "registry:npm",
"weight": 6
}
],
"artifacts": [
{
"path": "package.json",
"labels": [
"library"
],
"ecosystem": "npm"
}
],
"confidence": "high",
"host_extension": false,
"runs_as_process": false,
"consumed_by_code": true
},
"metrics_version": "2.5.0"
},
"warnings": [
"Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token"
],
"report_type": "repository",
"generated_at": "2026-08-05T07:56:39.428470Z",
"schema_version": "0.31.0",
"badge_url": "https://raw.githubusercontent.com/inspect-software/badges/main/v1/d/dbader/node-datadog-metrics.svg",
"full_name": "dbader/node-datadog-metrics",
"license_state": "standard",
"license_spdx": "MIT"
}
Verwandte Einträge
Geprüfte Repositories, die Katalog-Tags oder Ökosysteme mit dbader/node-datadog-metrics teilen. Nebeneinander lesen →
Bewertungen sind Signale, keine Garantien. Sie spiegeln öffentlich sichtbare Praxis auf GitHub wider — kein Code-Audit und keine Sicherheitsgarantie.
Fehlende Daten werden ausgeschlossen und die Gewichte neu normiert, nie als null bewertet. Die Methodik ist versioniert und offen: Metriken v2.5.0, Schema v0.31.0 — vollständige Methodik · Metriken-Wiki.
