Öffentliches RegisterMittel
Software-GesundheitsberichtSchema 0.27.0 · Metriken 1.13.0 · 2026-07-27 03:27 UTC
junioryono / godi
Dependency Injection with Service Lifetimes for Go
junioryono/godi erreicht einen Gesundheitsindex von 68 von 100 und liegt damit im Bereich Mittel. Am stärksten schneidet es bei Engineering Quality (86/100) ab, am schwächsten bei Sustainability & Governance (52/100). Zuletzt vor 3 Tagen aktualisiert. Ein einzelner Mitwirkender trägt den Großteil der jüngsten Arbeit.
68
gesamt / 100Software-Gesundheitsindex
Metriken werden auf einer Skala von 1–100 in gewichtete Kategorien gruppiert. Der Gesamtwert beginnt als ihr Mittel; sobald öffentliche Evidenz die Richtlinie für Hochrisikojurisdiktionen auslöst, wird die Bewertung angepasst und erhält die Obergrenze 49 (Gefährdet). AI Readiness liegt außerhalb.
68
Exzellent85-100Vorbildlich; erfüllt im Wesentlichen alle geprüften Kriterien
Gut70-84Gesund; geringfügige Lücken
Mittel50-69Akzeptabel mit deutlichen Lücken; Überprüfung empfohlen
Gefährdet30-49Erhebliche Schwächen; eine Übernahme erfordert Vorsicht
Kritisch1-29Schwerwiegende Probleme (aufgegeben, nur ein Maintainer, keine Hygiene)
Bewertungsprofil
Jede Achse ist eine Kategorie. Die Form zählt mehr als der Durchschnitt — ein gesundes Projekt füllt die gesamte Fläche, während ein Profil aus Spitzen und Kratern bedeutet, dass Stärke in einer Dimension Risiken in einer anderen verdeckt.
Eigentümerschaft
Junior YonoPersönliches Konto
6 Follower31 öffentliche Reposseit Juni 2016
Dieses Repository gehört einem persönlichen Konto. Ein Projekt mit nur einem Eigentümer trägt ein höheres Kontinuitätsrisiko als ein organisationsgetragenes.
Paket-Ökosysteme
| Registry | Paket | Version | Downloads / Monat | Versionen | Zuletzt veröffentlicht |
|---|---|---|---|---|---|
| Go | github.com/junioryono/godi/v5 | v5.1.0 | - | 3 | vor 8 Tagen |
| Go | github.com/junioryono/godi/chi/v5 | v5.1.0 | - | 3 | vor 8 Tagen |
| Go | github.com/junioryono/godi/gin/v5 | v5.1.0 | - | 3 | vor 8 Tagen |
| Go | github.com/junioryono/godi/echo/v5 | v5.1.0 | - | 3 | vor 8 Tagen |
| Go | github.com/junioryono/godi/http/v5 | v5.1.0 | - | 3 | vor 8 Tagen |
| Go | github.com/junioryono/godi/huma/v5 | v5.1.0 | - | 3 | vor 8 Tagen |
| Go | github.com/junioryono/godi/fiber/v5 | v5.1.0 | - | 3 | vor 8 Tagen |
| Go | github.com/junioryono/godi | v1.6.2 | - | 17 | vor 374 Tagen |
Metriken nach Kategorie
Vitalität
Lebt das Projekt — wird Code geschrieben und werden Releases ausgeliefert?
81
Entwicklungsaktivität
68Mittel
Wie die Bewertung erfolgt
| 36/36 | Push-Aktualität — letzter Push vor 3 Tagen |
| 7.6/36 | Commit-Rhythmus — 11/52 Wochen mit Commits |
| 18/18 | Commit-Volumen — 148 Commits im letzten Jahr |
| 6/10 | OpenSSF Scorecard: Maintained — 8 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 6 |
Verwendete Eingangsdaten
| commits_last_year | 148 |
| human_commit_share | 0,93 |
| days_since_last_push | 3 |
| active_weeks_last_year | 11 |
Release-Disziplin
100Exzellent
Wie die Bewertung erfolgt
| 27/27 | Liefert Releases aus — 40 Releases veröffentlicht |
| 36/36 | Release-Aktualität — letztes Release vor 8 Tagen |
| 27/27 | Release-Rhythmus — ein Release etwa alle 35,2 Tage |
| 0/10 | OpenSSF Scorecard: Signed-Releases — keine Daten |
Verwendete Eingangsdaten
| releases_count | 40 |
| latest_release_tag | v5.1.0 |
| releases_from_tags | nein |
| days_since_latest_release | 8 |
| mean_days_between_releases | 35,2 |
Von der Bewertung ausgeschlossen (keine Daten oder nicht anwendbar): OpenSSF Scorecard: Signed-Releases. Die verbleibenden Gewichte wurden renormalisiert.
Community & Verbreitung
Hat das Projekt Nutzer, Downloads, Aufmerksamkeit und ein einladendes Umfeld für Beitragende?
59
Popularität & Verbreitung
30Gefährdet
Wie die Bewertung erfolgt
| 30.3/60 | Stars — 75 Stars |
| 0/25 | Forks — 2 Forks |
| 0/15 | Watcher — 2 Watcher |
Verwendete Eingangsdaten
| forks | 2 |
| stars | 75 |
| watchers | 2 |
| growth_state | unverified |
| growth_factor_pct | 100 |
| growth_unverified_reason | no_history |
Community-Gesundheit
92Exzellent
Wie die Bewertung erfolgt
| 22.5/22.5 | README |
| 22.5/22.5 | Lizenz — anerkannte Lizenz (MIT) |
| 18/18 | CONTRIBUTING-Leitfaden |
| 13.5/13.5 | Verhaltenskodex |
| 0/7.2 | Issue-Vorlage |
| 6.3/6.3 | PR-Vorlage |
Verwendete Eingangsdaten
| has_readme | ja |
| has_license | ja |
| has_contributing | ja |
| has_issue_template | nein |
| has_code_of_conduct | ja |
| has_pull_request_template | ja |
Nachhaltigkeit & Governance
Überdauert das Projekt die Menschen, die es tragen — Bus-Faktor, Reaktionsfähigkeit, Trägerschaft und Paketpflege?
52
Maintainer-Resilienz (Bus-Faktor)
10Kritisch
Wie die Bewertung erfolgt
| 9/54 | Bus-Faktor — 1 Beitragende decken die Hälfte aller Commits ab |
| 0/22.5 | Commit-Verteilung — wichtigste beitragende Person verfasste 100 % der Commits |
| 1.4/13.5 | Breite der Beitragenden — 1 Beitragende |
| 0/10 | OpenSSF Scorecard: Contributors — project has 0 contributing companies or organizations -- score normalized to 0 |
Verwendete Eingangsdaten
| bus_factor | 1 |
| contributors_sampled | 1 |
| top_contributor_share | 1 |
Wie die Bewertung erfolgt
| 46.8/46.8 | Issue-Lösungsquote — 100 % der Issues geschlossen |
| 19.7/38.3 | PR-Annahme — 17/33 entschiedene PRs gemergt |
| 0/15 | OpenSSF Scorecard: Code-Review — Found 0/28 approved changesets -- score normalized to 0 |
Verwendete Eingangsdaten
| merged_prs | 17 |
| open_issues | 0 |
| closed_issues | 2 |
| issue_closed_ratio | 1 |
| closed_unmerged_prs | 16 |
Eigentümerschaft & Trägerschaft
49Gefährdet
Wie die Bewertung erfolgt
| 10/30 | Organisatorische Trägerschaft — persönliches (Nutzer-)Konto |
| 0/20 | Verifizierte Domain — für Nutzerkonten nicht anwendbar |
| 6.1/25 | Reichweite des Inhabers — 6 Follower von junioryono |
| 23/25 | Kontohistorie — 31 öffentliche Repos, Kontoalter ca. 10 Jahre |
Verwendete Eingangsdaten
| followers | 6 |
| owner_type | User |
| is_verified | — |
| owner_login | junioryono |
| public_repos | 31 |
| account_age_days | 3.699 |
Von der Bewertung ausgeschlossen (keine Daten oder nicht anwendbar): Verifizierte Domain. Die verbleibenden Gewichte wurden renormalisiert.
Paketpflege
100Exzellent
Wie die Bewertung erfolgt
| 25/25 | Veröffentlicht & auflösbar — 8 Paket(e) auf go |
| 35/35 | Veröffentlichungsaktualität — letzte Veröffentlichung vor 8 Tagen |
| 20/20 | Versionshistorie — 17 veröffentlichte Versionen |
| 20/20 | Nicht veraltet — aktiv, nicht veraltet oder zurückgezogen |
Verwendete Eingangsdaten
| packages | github.com/junioryono/godi/v5, github.com/junioryono/godi/chi/v5, github.com/junioryono/godi/gin/v5, github.com/junioryono/godi/echo/v5, github.com/junioryono/godi/http/v5, github.com/junioryono/godi/huma/v5, github.com/junioryono/godi/fiber/v5, github.com/junioryono/godi |
| ecosystems | go |
| any_deprecated | nein |
| min_days_since_publish | 8 |
Engineering-Qualität
Sind grundlegende Engineering- und Dokumentationspraktiken vorhanden?
86
Wie die Bewertung erfolgt
| 24/24 | CI-Workflows — 6 Workflow(s) |
| 24/24 | Tests vorhanden |
| 16/16 | Linter-Konfiguration — .golangci.yml |
| 0/9.6 | Pre-Commit-Hooks |
| 0/6.4 | .editorconfig |
| 20/20 | OpenSSF Scorecard: CI-Tests — 6 out of 6 merged PRs checked by a CI test -- score normalized to 10 |
Verwendete Eingangsdaten
| has_ci | ja |
| has_tests | ja |
| has_editorconfig | nein |
| has_linter_config | ja |
| has_precommit_config | nein |
Dokumentation
90Exzellent
Wie die Bewertung erfolgt
| 30/30 | README |
| 25/25 | Dokumentationsverzeichnis |
| 15/15 | Dokumentations-/Homepage-Site — https://godi.readthedocs.io/en/latest/ |
| 10/10 | Repository-Beschreibung |
| 0/10 | Topics |
| 10/10 | Wiki |
Verwendete Eingangsdaten
| topics | — |
| has_wiki | ja |
| homepage | https://godi.readthedocs.io/en/latest/ |
| has_readme | ja |
| has_docs_dir | ja |
| has_description | ja |
Sicherheit
Sind die sichtbaren Sicherheits- und Lieferkettenpraktiken belastbar, ohne ungeklärte Exposition gegenüber Hochrisikojurisdiktionen?
64
Sicherheitslage
65Mittel
Wie die Bewertung erfolgt
| 7.5/7.5 | Binary-Artifacts — no binaries found in the repo |
| 6/7.5 | Branch-Protection — branch protection is not maximal on development and all release branches |
| 2.5/2.5 | CI-Tests — 6 out of 6 merged PRs checked by a CI test -- score normalized to 10 |
| 0/2.5 | CII-Best-Practices — no effort to earn an OpenSSF best practices badge detected |
| 0/7.5 | Code-Review — Found 0/28 approved changesets -- score normalized to 0 |
| 0/2.5 | Contributors — project has 0 contributing companies or organizations -- score normalized to 0 |
| 10/10 | Dangerous-Workflow — no dangerous workflow patterns detected |
| 7.5/7.5 | Dependency-Update-Tool — update tool detected |
| 0/5 | Fuzzing — project is not fuzzed |
| 2.5/2.5 | Lizenz — license file detected |
| 4.5/7.5 | Maintained — 8 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 6 |
| 0/5 | Packaging — keine Daten |
| 4/5 | Pinned-Dependencies — dependency not pinned by hash detected -- score normalized to 8 |
| 4/5 | SAST — SAST tool is not run on all commits -- score normalized to 8 |
| 5/5 | Security-Policy — security policy file detected |
| 0/7.5 | Signed-Releases — keine Daten |
| 6.8/7.5 | Token-Permissions — detected GitHub workflow tokens with excessive permissions |
| 0/7.5 | Vulnerabilities — 54 existing vulnerabilities detected |
Verwendete Eingangsdaten
| source | openssf_scorecard |
| checks_evaluated | 16 |
| scorecard_version | v5.5.0 |
| checks_inconclusive | 2 |
| scorecard_aggregate | 6,5 |
Von der Bewertung ausgeschlossen (keine Daten oder nicht anwendbar): packaging, signed_releases. Die verbleibenden Gewichte wurden renormalisiert.
Abhängigkeits-Advisories
59Mittel
Wie die Bewertung erfolgt
| 11.1/35 | Direkte Abhängigkeiten ohne bekannte Advisories — 3 betroffen: github.com/gofiber/fiber/v2 v2.52.6 (high 7.7), github.com/gofiber/fiber/v2 v2.52.12 (moderate 5.3), github.com/go-chi/chi/v5 v5.2.5 (unknown) |
| 0/25 | Indirekte Abhängigkeiten ohne bekannte Advisories — transitive Menge in diesem Bereich nicht von Entwicklungs- und Test-Abhängigkeiten trennbar |
| 33.5/40 | Keine offenen Advisories — 1 Paket(e) mit Advisory seit über 90 Tagen unbehandelt; ältestes vor 430 Tagen veröffentlicht |
Verwendete Eingangsdaten
| source | osv |
| advisories | 145 |
| affected_packages | 17 |
| assessed_packages | 108 |
| unassessed_packages | 0 |
| affected_by_severity | critical 2, high 2, moderate 6, low 1, unknown 6 |
| direct_affected_packages | 3 |
Von der Bewertung ausgeschlossen (keine Daten oder nicht anwendbar): Indirekte Abhängigkeiten ohne bekannte Advisories. Die verbleibenden Gewichte wurden renormalisiert. 108 aufgelöste Abhängigkeiten wurden mit OSV abgeglichen. Dieses Repository veröffentlicht kein Paket, das der Index auflöst; bewertet wurde daher der Abhängigkeitsgraph des Repositorys. Dieser Graph vermischt Entwicklungs- und Test-Pins mit ausgelieferten Abhängigkeiten, daher werden nur die deklarierten Laufzeit-Abhängigkeiten bewertet; transitive Befunde werden als Kontext ausgewiesen und fließen nicht in die Bewertung ein. Erreichbarkeit wird nicht analysiert.
AI Readiness
Wie gut ist das Repository dafür ausgestattet, mit KI-Coding-Agenten entwickelt und gepflegt zu werden? Ein unabhängiges, experimentelles Badge — Gewicht 0,0, es wird eigenständig ausgewiesen und verändert den Gesamt-Gesundheitswert nicht.
69
AI-Agentenkontext & Leitlinien
29Kritisch
Wie die Bewertung erfolgt
| 0/45 | Agentenanweisungen — keine CLAUDE.md / AGENTS.md / Editor-Regeln |
| 0/15 | Maschinenlesbare Doku (llms.txt) |
| 29.2/40 | Lesbare Commit-Historie — 51 von 93 menschlichen Commits benennen ihre Absicht (strukturierter Betreff oder erläuternder Text) |
Verwendete Eingangsdaten
| has_llms_txt | nein |
| legible_history_share | 0,548 |
| agent_instruction_files | — |
| agent_instruction_max_bytes | — |
AI-Verify-Loop (Build / Test / Typprüfung)
98Exzellent
Wie die Bewertung erfolgt
| 18/18 | Bootstrap mit einem Befehl — Makefile, docs/Makefile |
| 22/22 | Automatisierte Tests |
| 11/11 | Lint-/Format-Konfiguration — .golangci.yml |
| 11/11 | Statische Typprüfung — Go (statisch typisiert) |
| 10/10 | Reproduzierbare Umgebung — lockfile |
| 10/10 | Belegte Agentenpraxis — 25 der letzten 100 Commits von Agenten verfasst oder ihnen zugeschrieben |
| 8/8 | Automatisierte Wartung — 5 der letzten 100 Commits sind automatisierte Abhängigkeits-Updates |
| 8/10 | OpenSSF Scorecard: Pinned-Dependencies — dependency not pinned by hash detected -- score normalized to 8 |
Verwendete Eingangsdaten
| has_nix | nein |
| has_tests | ja |
| lockfiles | go.sum |
| has_dockerfile | nein |
| typed_language | ja |
| bootstrap_files | Makefile, docs/Makefile |
| has_devcontainer | nein |
| has_linter_config | ja |
| typecheck_configs | — |
| agent_commit_share | 0,25 |
| toolchain_manifests | benchmarks/go.mod, chi/go.mod, echo/go.mod, fiber/go.mod, gin/go.mod, go.mod, http/go.mod, huma/go.mod, integrationtests/go.mod |
| dependency_bot_commit_share | 0,05 |
AI-Code-Lesbarkeit für Modelle
100Exzellent
Wie die Bewertung erfolgt
| 45/45 | Typprüfbarer Code — Go (statisch typisiert) |
| 55/55 | Handhabbare Dateigrößen — 0/41 Quelldateien über 60 KB |
Verwendete Eingangsdaten
| primary_language | Go |
| largest_source_bytes | 44.999 |
| source_files_sampled | 41 |
| oversized_source_files | 0 |
Maschinenlesbare AI-Schnittstellen
40Gefährdet
Wie die Bewertung erfolgt
| 0/40 | API-Schema (OpenAPI/GraphQL/proto) |
| 0/20 | MCP-Server |
| 40/40 | Lauffähige Beispiele — examples |
Verwendete Eingangsdaten
| example_dirs | examples |
| has_mcp_signal | nein |
| api_schema_files | — |
Eckdaten
75GitHub-Sterne
1Mitwirkende
148Commits, letzte 12 Monate
3Tage seit letztem Push
40Releases
1Bus-Faktor
0offene Issues
Go, PyPIPaket-Ökosysteme
Warnungen zur Datenerhebung
- Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token
Weitere Details
Stern- und Fork-Verlauf 0 ★ / 2 ⇿
0Sterne
2Forks
37Releases
Wann jeder Stern und Fork hinzugefügt wurde, von GitHub erfasst und nach Tagen gruppiert. Das kumulierte Wachstum steht direkt über den täglichen Zugängen, aus denen es besteht, sodass beide gegeneinander lesbar sind: stetiger organischer Zuwachs sieht ganz anders aus als ein abrupter, kurzlebiger Ausschlag. Wo dieser Unterschied messbar ist, wird er als Wachstumsauthentizität ausgewiesen.
Major 4Minor 9Patch 24
OpenSSF Scorecard 6.5 / 10
6.5Gesamtwert
Unabhängige, werkzeugneutrale Sicherheitsbewertung durch das quelloffene OpenSSF Scorecard. Jede Prüfung honoriert eine Sicherheits-Praxis, nicht das Werkzeug eines bestimmten Anbieters. Prüfungen, die Scorecard nicht ermitteln konnte, sind mit k. A. markiert und vom Sicherheitswert ausgeschlossen (nie als null gezählt).
| 10 | Binary-Artifacts | no binaries found in the repo |
| 8 | Branch-Protection | branch protection is not maximal on development and all release branches |
| 10 | CI-Tests | 6 out of 6 merged PRs checked by a CI test -- score normalized to 10 |
| 0 | CII-Best-Practices | no effort to earn an OpenSSF best practices badge detected |
| 0 | Code-Review | Found 0/28 approved changesets -- score normalized to 0 |
| 0 | Contributors | project has 0 contributing companies or organizations -- score normalized to 0 |
| 10 | Dangerous-Workflow | no dangerous workflow patterns detected |
| 10 | Dependency-Update-Tool | update tool detected |
| 0 | Fuzzing | project is not fuzzed |
| 10 | License | license file detected |
| 6 | Maintained | 8 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 6 |
| k. A. | Packaging | packaging workflow not detected |
| 8 | Pinned-Dependencies | dependency not pinned by hash detected -- score normalized to 8 |
| 8 | SAST | SAST tool is not run on all commits -- score normalized to 8 |
| 10 | Security-Policy | security policy file detected |
| k. A. | Signed-Releases | no releases found |
| 9 | Token-Permissions | detected GitHub workflow tokens with excessive permissions |
| 0 | Vulnerabilities | 54 existing vulnerabilities detected |
Direkte Abhängigkeiten 29
| Registry | Paket | Versionsvorgabe | Manifest |
|---|---|---|---|
| Go | github.com/junioryono/godi/v5 | v5.0.0 | chi/go.mod |
| Go | github.com/stretchr/testify | v1.11.1 | chi/go.mod |
| Go | github.com/junioryono/godi/v5 | v5.0.0 | echo/go.mod |
| Go | github.com/labstack/echo/v4 | v4.13.3 | echo/go.mod |
| Go | github.com/stretchr/testify | v1.11.1 | echo/go.mod |
| Go | github.com/gofiber/fiber/v2 | v2.52.6 | fiber/go.mod |
| Go | github.com/junioryono/godi/v5 | v5.0.0 | fiber/go.mod |
| Go | github.com/stretchr/testify | v1.11.1 | fiber/go.mod |
| Go | github.com/gin-gonic/gin | v1.10.0 | gin/go.mod |
| Go | github.com/junioryono/godi/v5 | v5.0.0 | gin/go.mod |
| Go | github.com/stretchr/testify | v1.11.1 | gin/go.mod |
| Go | github.com/stretchr/testify | v1.11.1 | go.mod |
| Go | github.com/junioryono/godi/v5 | v5.0.0 | http/go.mod |
| Go | github.com/stretchr/testify | v1.11.1 | http/go.mod |
| Go | github.com/danielgtaylor/huma/v2 | v2.37.3 | huma/go.mod |
| Go | github.com/junioryono/godi/v5 | v5.0.0 | huma/go.mod |
| Go | github.com/stretchr/testify | v1.11.1 | huma/go.mod |
| Go | github.com/danielgtaylor/huma/v2 | v2.37.3 | integrationtests/go.mod |
| Go | github.com/gin-gonic/gin | v1.11.0 | integrationtests/go.mod |
| Go | github.com/go-chi/chi/v5 | v5.2.5 | integrationtests/go.mod |
| Go | github.com/gofiber/fiber/v2 | v2.52.12 | integrationtests/go.mod |
| Go | github.com/junioryono/godi/chi/v5 | v5.0.1 | integrationtests/go.mod |
| Go | github.com/junioryono/godi/echo/v5 | v5.0.1 | integrationtests/go.mod |
| Go | github.com/junioryono/godi/fiber/v5 | v5.0.1 | integrationtests/go.mod |
| Go | github.com/junioryono/godi/gin/v5 | v5.0.1 | integrationtests/go.mod |
| Go | github.com/junioryono/godi/http/v5 | v5.0.1 | integrationtests/go.mod |
| Go | github.com/junioryono/godi/huma/v5 | v5.0.1 | integrationtests/go.mod |
| Go | github.com/junioryono/godi/v5 | v5.0.1 | integrationtests/go.mod |
| Go | github.com/labstack/echo/v4 | v4.15.0 | integrationtests/go.mod |
Alle Abhängigkeiten 108
Vollständig aufgelöster Abhängigkeitssatz aus dem GitHub-Abhängigkeitsgraphen: 9 direkte und 99 indirekte (transitive) Pakete. Die transitive Hülle ist vollständig, wenn das Repository eine Lockfile eincheckt.
| Registry | Paket | Version | Beziehung |
|---|---|---|---|
| Go | github.com/danielgtaylor/huma/v2 | v2.37.3 | direkt |
| Go | github.com/gin-gonic/gin | v1.10.0 | direkt |
| Go | github.com/gin-gonic/gin | v1.11.0 | direkt |
| Go | github.com/go-chi/chi/v5 | v5.2.5 | direkt |
| Go | github.com/gofiber/fiber/v2 | v2.52.12 | direkt |
| Go | github.com/gofiber/fiber/v2 | v2.52.6 | direkt |
| Go | github.com/labstack/echo/v4 | v4.13.3 | direkt |
| Go | github.com/labstack/echo/v4 | v4.15.0 | direkt |
| Go | github.com/stretchr/testify | v1.11.1 | direkt |
| Go | github.com/andybalholm/brotli | v1.1.0 | indirekt |
| Go | github.com/andybalholm/brotli | v1.2.0 | indirekt |
| Go | github.com/bytedance/gopkg | v0.1.3 | indirekt |
| Go | github.com/bytedance/sonic | v1.11.6 | indirekt |
| Go | github.com/bytedance/sonic | v1.15.0 | indirekt |
| Go | github.com/bytedance/sonic/loader | v0.1.1 | indirekt |
| Go | github.com/bytedance/sonic/loader | v0.5.0 | indirekt |
| Go | github.com/clipperhouse/uax29/v2 | v2.7.0 | indirekt |
| Go | github.com/cloudwego/base64x | v0.1.4 | indirekt |
| Go | github.com/cloudwego/base64x | v0.1.6 | indirekt |
| Go | github.com/cloudwego/iasm | v0.2.0 | indirekt |
| Go | github.com/davecgh/go-spew | v1.1.1 | indirekt |
| Go | github.com/gabriel-vasile/mimetype | v1.4.13 | indirekt |
| Go | github.com/gabriel-vasile/mimetype | v1.4.3 | indirekt |
| Go | github.com/gin-contrib/sse | v0.1.0 | indirekt |
| Go | github.com/gin-contrib/sse | v1.1.0 | indirekt |
| Go | github.com/go-playground/locales | v0.14.1 | indirekt |
| Go | github.com/go-playground/universal-translator | v0.18.1 | indirekt |
| Go | github.com/go-playground/validator/v10 | v10.20.0 | indirekt |
| Go | github.com/go-playground/validator/v10 | v10.30.1 | indirekt |
| Go | github.com/goccy/go-json | v0.10.2 | indirekt |
| Go | github.com/goccy/go-json | v0.10.5 | indirekt |
| Go | github.com/goccy/go-yaml | v1.19.2 | indirekt |
| Go | github.com/google/uuid | v1.6.0 | indirekt |
| Go | github.com/json-iterator/go | v1.1.12 | indirekt |
| Go | github.com/klauspost/compress | v1.17.9 | indirekt |
| Go | github.com/klauspost/compress | v1.18.4 | indirekt |
| Go | github.com/klauspost/cpuid/v2 | v2.2.7 | indirekt |
| Go | github.com/klauspost/cpuid/v2 | v2.3.0 | indirekt |
| Go | github.com/labstack/gommon | v0.4.2 | indirekt |
| Go | github.com/leodido/go-urn | v1.4.0 | indirekt |
| Go | github.com/mattn/go-colorable | v0.1.13 | indirekt |
| Go | github.com/mattn/go-colorable | v0.1.14 | indirekt |
| Go | github.com/mattn/go-isatty | v0.0.20 | indirekt |
| Go | github.com/mattn/go-runewidth | v0.0.16 | indirekt |
| Go | github.com/mattn/go-runewidth | v0.0.20 | indirekt |
| Go | github.com/modern-go/concurrent | v0.0.0-20180306012644-bacd9c7ef1dd | indirekt |
| Go | github.com/modern-go/reflect2 | v1.0.2 | indirekt |
| Go | github.com/pelletier/go-toml/v2 | v2.2.2 | indirekt |
| Go | github.com/pelletier/go-toml/v2 | v2.2.4 | indirekt |
| Go | github.com/pmezard/go-difflib | v1.0.0 | indirekt |
| Go | github.com/quic-go/qpack | v0.6.0 | indirekt |
| Go | github.com/quic-go/quic-go | v0.59.0 | indirekt |
| Go | github.com/rivo/uniseg | v0.2.0 | indirekt |
| Go | github.com/samber/do/v2 | v2.0.0 | indirekt |
| Go | github.com/samber/go-type-to-string | v1.8.0 | indirekt |
| Go | github.com/twitchyliquid64/golang-asm | v0.15.1 | indirekt |
| Go | github.com/ugorji/go/codec | v1.2.12 | indirekt |
| Go | github.com/ugorji/go/codec | v1.3.1 | indirekt |
| Go | github.com/valyala/bytebufferpool | v1.0.0 | indirekt |
| Go | github.com/valyala/fasthttp | v1.51.0 | indirekt |
| Go | github.com/valyala/fasthttp | v1.69.0 | indirekt |
| Go | github.com/valyala/fasttemplate | v1.2.2 | indirekt |
| Go | github.com/valyala/tcplisten | v1.0.0 | indirekt |
| Go | go.uber.org/dig | v1.19.0 | indirekt |
| Go | golang.org/x/arch | v0.24.0 | indirekt |
| Go | golang.org/x/arch | v0.8.0 | indirekt |
| Go | golang.org/x/crypto | v0.23.0 | indirekt |
| Go | golang.org/x/crypto | v0.31.0 | indirekt |
| Go | golang.org/x/crypto | v0.54.0 | indirekt |
| Go | golang.org/x/net | v0.25.0 | indirekt |
| Go | golang.org/x/net | v0.33.0 | indirekt |
| Go | golang.org/x/net | v0.56.0 | indirekt |
| Go | golang.org/x/sys | v0.20.0 | indirekt |
| Go | golang.org/x/sys | v0.28.0 | indirekt |
| Go | golang.org/x/sys | v0.47.0 | indirekt |
| Go | golang.org/x/text | v0.15.0 | indirekt |
| Go | golang.org/x/text | v0.21.0 | indirekt |
| Go | golang.org/x/text | v0.40.0 | indirekt |
| Go | google.golang.org/protobuf | v1.34.1 | indirekt |
| Go | google.golang.org/protobuf | v1.36.11 | indirekt |
| Go | gopkg.in/yaml.v3 | v3.0.1 | indirekt |
| PyPI | babel | 2.17.0 | indirekt |
| PyPI | certifi | 2025.1.31 | indirekt |
| PyPI | chardet | 5.2.0 | indirekt |
| PyPI | commonmark | 0.9.1 | indirekt |
| PyPI | docutils | 0.20.1 | indirekt |
| PyPI | idna | 3.10 | indirekt |
| PyPI | imagesize | 1.4.1 | indirekt |
| PyPI | jinja2 | 3.1.6 | indirekt |
| PyPI | markupsafe | 3.0.2 | indirekt |
| PyPI | myst-parser | 3.0.1 | indirekt |
| PyPI | packaging | 25.0 | indirekt |
| PyPI | pygments | 2.19.1 | indirekt |
| PyPI | pyparsing | 3.2.3 | indirekt |
| PyPI | pytz | 2025.2 | indirekt |
| PyPI | requests | 2.32.3 | indirekt |
| PyPI | snowballstemmer | 2.2.0 | indirekt |
| PyPI | sphinx | 7.4.7 | indirekt |
| PyPI | sphinx-copybutton | 0.5.2 | indirekt |
| PyPI | sphinx-rtd-theme | 3.0.2 | indirekt |
| PyPI | sphinxcontrib-applehelp | 2.0.0 | indirekt |
| PyPI | sphinxcontrib-devhelp | 2.0.0 | indirekt |
| PyPI | sphinxcontrib-htmlhelp | 2.1.0 | indirekt |
| PyPI | sphinxcontrib-jsmath | 1.0.1 | indirekt |
| PyPI | sphinxcontrib-qthelp | 2.0.0 | indirekt |
| PyPI | sphinxcontrib-serializinghtml | 2.0.0 | indirekt |
| PyPI | sphinxext-rediraffe | 0.2.7 | indirekt |
| PyPI | urllib3 | 2.4.0 | indirekt |
Abhängigkeits-Advisories 17
Dieses Repository veröffentlicht kein vom Index auflösbares Paket, daher wurde sein eigener Abhängigkeitsgraph bewertet – 108 Pakete, darunter auch Entwicklungs- und Test-Pins, die nie ausgeliefert werden: 17 tragen bekannte Advisories, davon 3 direkte.
| Paket | Version | Beziehung | Schweregrad | Advisories | Behoben in |
|---|---|---|---|---|---|
| golang.org/x/crypto | v0.23.0 | indirekt | kritisch | 36 | 0.52.0 |
| golang.org/x/crypto | v0.31.0 | indirekt | kritisch | 34 | 0.52.0 |
| github.com/gofiber/fiber/v2 | v2.52.6 | direkt | hoch | 11 | 3.3.0 |
| urllib3 | 2.4.0 | indirekt | hoch | 12 | 2.7.0 |
| github.com/gofiber/fiber/v2 | v2.52.12 | direkt | mittel | 3 | 3.3.0 |
| github.com/quic-go/quic-go | v0.59.0 | indirekt | mittel | 2 | 0.59.1 |
| golang.org/x/net | v0.25.0 | indirekt | mittel | 16 | 1.26.3 |
| golang.org/x/net | v0.33.0 | indirekt | mittel | 15 | 1.26.3 |
| idna | 3.10 | indirekt | mittel | 2 | 3.15 |
| requests | 2.32.3 | indirekt | mittel | 4 | 2.33.0 |
| pygments | 2.19.1 | indirekt | niedrig | 2 | 2.20.0 |
| github.com/go-chi/chi/v5 | v5.2.5 | direkt | unbekannt | 3 | 5.3.0 |
| golang.org/x/crypto | v0.54.0 | indirekt | unbekannt | 1 | — |
| golang.org/x/sys | v0.20.0 | indirekt | unbekannt | 1 | 0.44.0 |
| golang.org/x/sys | v0.28.0 | indirekt | unbekannt | 1 | 0.44.0 |
| golang.org/x/text | v0.15.0 | indirekt | unbekannt | 1 | 0.39.0 |
| golang.org/x/text | v0.21.0 | indirekt | unbekannt | 1 | 0.39.0 |
Ein Advisory bedeutet, dass die im Abhängigkeitsgraphen erfasste Version in den betroffenen Bereich eines Advisories fällt. Erreichbarkeit wird nicht analysiert, und der Graph enthält Entwicklungs- und Test-Pins — ein Fund kann das Werkzeug betreffen und nicht die ausgelieferte Software.
JSON-Rohbericht maschinenlesbar
{
"data": {
"repo": {
"topics": [],
"is_fork": false,
"size_kb": 1236,
"has_wiki": true,
"homepage": "https://godi.readthedocs.io/en/latest/",
"languages": {
"Go": 552448,
"Shell": 17661,
"Makefile": 2639
},
"pushed_at": "2026-07-23T04:34:01Z",
"created_at": "2025-07-10T01:30:28Z",
"owner_type": "User",
"updated_at": "2026-07-18T18:22:08Z",
"description": "Dependency Injection with Service Lifetimes for Go",
"is_archived": false,
"is_disabled": false,
"license_spdx": "MIT",
"default_branch": "main",
"license_spdx_raw": "MIT",
"primary_language": "Go",
"significant_languages": [
"Go"
]
},
"owner": {
"blog": null,
"name": "Junior Yono",
"type": "User",
"login": "junioryono",
"company": null,
"location": null,
"followers": 6,
"avatar_url": "https://avatars.githubusercontent.com/u/19849174?v=4",
"created_at": "2016-06-10T02:18:46Z",
"is_verified": null,
"public_repos": 31,
"account_age_days": 3699
},
"license": {
"state": "standard",
"spdx_id": "MIT",
"raw_spdx": "MIT",
"file_present": true,
"scorecard_found": true,
"profile_has_license": true
},
"activity": {
"releases": [
{
"tag": "v5.1.0",
"kind": "minor",
"published_at": "2026-07-18T16:26:19Z"
},
{
"tag": "v5.0.1",
"kind": "patch",
"published_at": "2026-06-13T06:34:38Z"
},
{
"tag": "v5.0.0",
"kind": "major",
"published_at": "2026-06-13T06:17:35Z"
},
{
"tag": "v4.2.4",
"kind": "patch",
"published_at": "2026-05-22T03:16:04Z"
},
{
"tag": "v4.2.3",
"kind": "patch",
"published_at": "2026-03-01T18:42:58Z"
},
{
"tag": "v4.2.2",
"kind": "patch",
"published_at": "2025-12-14T07:58:49Z"
},
{
"tag": "v4.2.1",
"kind": "patch",
"published_at": "2025-12-14T07:09:18Z"
},
{
"tag": "v4.2.0",
"kind": "minor",
"published_at": "2025-12-13T06:19:49Z"
},
{
"tag": "v4.1.4",
"kind": "patch",
"published_at": "2025-09-05T06:58:49Z"
},
{
"tag": "v4.1.3",
"kind": "patch",
"published_at": "2025-09-05T05:59:34Z"
},
{
"tag": "v4.1.2",
"kind": "patch",
"published_at": "2025-09-05T04:02:34Z"
},
{
"tag": "v4.1.1",
"kind": "patch",
"published_at": "2025-09-04T01:33:25Z"
},
{
"tag": "v4.1.0",
"kind": "minor",
"published_at": "2025-08-22T22:44:08Z"
},
{
"tag": "v4.0.1",
"kind": "patch",
"published_at": "2025-08-19T04:53:09Z"
},
{
"tag": "v4.0.0",
"kind": "major",
"published_at": "2025-08-18T23:40:41Z"
},
{
"tag": "v3.0.0",
"kind": "major",
"published_at": "2025-07-28T01:42:51Z"
},
{
"tag": "v2.1.0",
"kind": "minor",
"published_at": "2025-07-22T04:27:15Z"
},
{
"tag": "v2.0.5",
"kind": "patch",
"published_at": "2025-07-22T03:46:10Z"
},
{
"tag": "v2.0.4",
"kind": "patch",
"published_at": "2025-07-22T00:55:25Z"
},
{
"tag": "v2.0.3",
"kind": "patch",
"published_at": "2025-07-22T00:13:39Z"
},
{
"tag": "v2.0.2",
"kind": "patch",
"published_at": "2025-07-21T01:22:50Z"
},
{
"tag": "v2.0.1",
"kind": "patch",
"published_at": "2025-07-21T01:17:51Z"
},
{
"tag": "v2.0.0",
"kind": "major",
"published_at": "2025-07-21T01:06:05Z"
},
{
"tag": "v1.6.2",
"kind": "patch",
"published_at": "2025-07-17T03:53:11Z"
},
{
"tag": "v1.6.1",
"kind": "patch",
"published_at": "2025-07-17T03:49:13Z"
},
{
"tag": "v1.6.0",
"kind": "minor",
"published_at": "2025-07-17T03:44:25Z"
},
{
"tag": "v1.5.1",
"kind": "patch",
"published_at": "2025-07-17T03:41:03Z"
},
{
"tag": "v1.5.0",
"kind": "minor",
"published_at": "2025-07-17T03:18:19Z"
},
{
"tag": "v1.4.0",
"kind": "minor",
"published_at": "2025-07-17T02:44:32Z"
},
{
"tag": "v1.3.3",
"kind": "patch",
"published_at": "2025-07-16T23:14:17Z"
},
{
"tag": "v1.3.2",
"kind": "patch",
"published_at": "2025-07-16T23:11:45Z"
},
{
"tag": "v1.3.1",
"kind": "patch",
"published_at": "2025-07-16T23:07:25Z"
},
{
"tag": "v1.3.0",
"kind": "minor",
"published_at": "2025-07-16T22:58:19Z"
},
{
"tag": "v1.2.2",
"kind": "patch",
"published_at": "2025-07-16T01:11:07Z"
},
{
"tag": "v1.2.1",
"kind": "patch",
"published_at": "2025-07-15T01:44:50Z"
},
{
"tag": "v1.2.0",
"kind": "minor",
"published_at": "2025-07-14T04:13:36Z"
},
{
"tag": "v1.1.0",
"kind": "minor",
"published_at": "2025-07-14T01:58:53Z"
},
{
"tag": "v1.0.2",
"kind": "patch",
"published_at": "2025-07-13T23:31:37Z"
},
{
"tag": "v1.0.1",
"kind": "patch",
"published_at": "2025-07-12T19:45:15Z"
},
{
"tag": "v1.0.0",
"kind": "major",
"published_at": "2025-07-11T06:55:19Z"
}
],
"recent_commits": [
{
"oid": "dfe475678533d3322f8033cb60f9fd3c3b89eae3",
"body": "Dependabot's config parser does not support YAML anchors or aliases, so\nit rejected .github/dependabot.yml with \"YAML aliases are not supported\"\nand stopped opening dependency update PRs.\n\nExpand the &weekly, &go_groups, and &go_commit anchors inline at each of\nthe eleven update entries. The parsed \n[…]\nes; only Dependabot's\nown server-side parser rejects them.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>\nClaude-Session: https://claude.ai/code/session_013ArexH3Dgxun8wYj4MxQ5T",
"is_bot": false,
"headline": "fix(ci): expand dependabot YAML aliases",
"author_name": "Junior Yono",
"author_login": "junioryono",
"committed_at": "2026-07-18T18:22:03Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "22b01d1e4dfe98b3091e90937e3b25d449575a0d",
"body": "Co-authored-by: Claude Fable 5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix: harden lifecycle, integrations, and release checks (#35)",
"author_name": "Junior Yono",
"author_login": "junioryono",
"committed_at": "2026-07-18T16:20:17Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "bbe7a21cccc16698ab5a6d3ae2785d21232cf27c",
"body": "Signed-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "chore(deps): bump actions/checkout from 6 to 7 (#34)",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-07-17T04:46:36Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ba5269d7b9750a26cf84286df2e63e00ffde0041",
"body": "Signed-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "chore(deps): bump codecov/codecov-action from 6 to 7 (#33)",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-06-15T19:43:38Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "fdf0b77965c9505b9a9ece2d91c2725615536e0d",
"body": "Co-authored-by: Claude Fable 5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix: correct integration module paths to <framework>/v5 (#32)",
"author_name": "Junior Yono",
"author_login": "junioryono",
"committed_at": "2026-06-13T06:29:52Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "f497ed2a475e1b09c36738643e93c5f83d1766c9",
"body": "…eness (#31)\n\nCo-authored-by: Claude Fable 5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "feat: huma integration, router alignment, and v5 migration/CI complet…",
"author_name": "Junior Yono",
"author_login": "junioryono",
"committed_at": "2026-06-13T06:14:43Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "1f11ae46d6a711eac4c574c6aa78a4935fd610f7",
"body": "… (#30)\n\nCo-authored-by: Claude Fable 5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "feat!: defer registration errors to Build, v5 API, bug fixes, Go 1.26…",
"author_name": "Junior Yono",
"author_login": "junioryono",
"committed_at": "2026-06-13T04:40:29Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "6cda87cc0ac9c3252184fb5f1548c9511cb5e926",
"body": "…solver perf\n\nAudit pass over the v4 module. No public signatures changed.\n\nCorrectness:\n\n- scope.Close vs concurrent resolve no longer panics with \"assignment to\n entry in nil map\" (scope.go:setInstance now bails if the scope was\n closed between the resolver's disposed check and the map write).\n-\n[…]\nr -race. Existing tests\ncontinue to pass; framework integrations (chi, echo, fiber, gin, http)\nalso pass against the local module.\n\nCo-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix: concurrent scope safety, single-flight scoped resolution, and re…",
"author_name": "Junior Yono",
"author_login": "junioryono",
"committed_at": "2026-05-22T03:09:27Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "8874b346c966e72c02c930882e6b20ee22d8a7cf",
"body": "Put Bug Fixes before Features in release notes, and remove the\nFramework Integrations install section.\n\nCo-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>",
"is_bot": false,
"headline": "ci: reorder release notes and remove framework integrations",
"author_name": "Junior Yono",
"author_login": "junioryono",
"committed_at": "2026-03-01T18:46:40Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "49b65a1acfb0a07ae12086616a6c6080ec617245",
"body": "go.mod requires go >= 1.24.6, so older versions fail with\nGOTOOLCHAIN=local. Keep only 1.24 and 1.25.\n\nCo-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>",
"is_bot": false,
"headline": "ci: drop Go 1.22 and 1.23 from test matrix",
"author_name": "Junior Yono",
"author_login": "junioryono",
"committed_at": "2026-03-01T17:34:27Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "da577d4bfe325dfcc30e57102d894d261ffd74de",
"body": "- actions/setup-go v5 → v6 (test.yml, release.yml)\n- golangci/golangci-lint-action v8 → v9 (test.yml)\n- actions/upload-artifact v4 → v5 (test.yml)\n- github/codeql-action v3 → v4 (test.yml)\n- actions/github-script v7 → v8 (pr-labeler.yml)\n\nAll upgrades are Node.js 20 → 24 runtime updates with no breaking\nAPI changes. Supersedes PRs #18, #19, #21, #22, #23.\n\nCo-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>",
"is_bot": false,
"headline": "ci: bump GitHub Actions to latest major versions",
"author_name": "Junior Yono",
"author_login": "junioryono",
"committed_at": "2026-03-01T17:33:05Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "3447b7a4aeeea95a1531a1d0cd44210d2540a4f8",
"body": "Fixes QF1012 staticcheck warnings in errors.go and\ninternal/graph/errors.go.\n\nCo-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>",
"is_bot": false,
"headline": "style: use fmt.Fprintf instead of WriteString(fmt.Sprintf(...))",
"author_name": "Junior Yono",
"author_login": "junioryono",
"committed_at": "2026-03-01T17:30:34Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "7e834aac61416f988900aea60829293307a95864",
"body": "…nitialized\n\nWhen a singleton consumed a group via godi.In (e.g., `group:\"routes\"`),\nthe dependency graph created a phantom node (Key=nil) that didn't match\nreal group members (Key=1,2,...), so the topological sort had no ordering\nconstraint. This caused ErrSingletonNotInitialized during Build() whe\n[…]\ngroup nodes to real\nmembers before cycle detection. Also fix validateLifetimes() to properly\ndetect lifetime violations for group dependencies.\n\nCo-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix: resolve group dependency graph ordering causing ErrSingletonNotI…",
"author_name": "Junior Yono",
"author_login": "junioryono",
"committed_at": "2026-03-01T17:26:52Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "6b57b98749394c50bdb554ed6fd49ffe48761e51",
"body": "🤖 Generated with [Claude Code](https://claude.com/claude-code)\n\nCo-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "docs: fix whitespace alignment in ASCII diagrams",
"author_name": "Junior Yono",
"author_login": "junioryono",
"committed_at": "2025-12-14T16:36:00Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "4a5903b3a90cded9d38667e0b7bacfc24d2fce6b",
"body": "Update tag workflow to create tags for all submodules (gin, chi, echo,\nfiber, http) following Go's multi-module tagging convention. Add\ninstallation instructions to release notes.\n\n🤖 Generated with [Claude Code](https://claude.com/claude-code)\n\nCo-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "ci: add multi-module tagging for Go submodules",
"author_name": "Junior Yono",
"author_login": "junioryono",
"committed_at": "2025-12-14T07:56:20Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "a626bd3637e6c82b35ba5ddd8ad19fdcb8a3146a",
"body": "🤖 Generated with [Claude Code](https://claude.com/claude-code)\n\nCo-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "chore: explicitly set draft: false in release workflow",
"author_name": "Junior Yono",
"author_login": "junioryono",
"committed_at": "2025-12-13T06:17:25Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "15b77b3969e20a30f85579c2f6f2ac31bd4cace8",
"body": "git describe --tags returns the most recent tag reachable from HEAD,\nnot the highest semantic version. This caused collisions when tags\nexisted on different branches.\n\nNow lists all tags and sorts by semantic version to find the highest.\nAlso adds a pre-flight check before tag creation.\n\n🤖 Generated with [Claude Code](https://claude.com/claude-code)\n\nCo-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix: use highest semver tag instead of git describe",
"author_name": "Junior Yono",
"author_login": "junioryono",
"committed_at": "2025-12-13T05:46:31Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "f0e7dcfa61780fa716f8674a2b4bc0431f85cde9",
"body": "These web framework integration packages trigger gosec SSA analyzer\npanics due to external dependencies.\n\n🤖 Generated with [Claude Code](https://claude.com/claude-code)\n\nCo-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "ci: exclude gin and chi from gosec scan",
"author_name": "Junior Yono",
"author_login": "junioryono",
"committed_at": "2025-12-13T05:33:53Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "79cdd6059dfbbb4a16702c128c4d5f6a1d9795e2",
"body": "- Fix gocritic dupOption error by using typed nil variable in test\n- Exclude fiber and echo packages from gosec to avoid SSA analyzer panic\n\n🤖 Generated with [Claude Code](https://claude.com/claude-code)\n\nCo-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "ci: fix linter issues in GitHub Actions",
"author_name": "Junior Yono",
"author_login": "junioryono",
"committed_at": "2025-12-13T05:31:58Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "2a23c2cdebdc42a2fea396e5f35f90eb6dd8950d",
"body": "- Update README.md modules section to use godi.NewModule\n- Update docs/concepts/modules.md with declarative module syntax\n- Update docs/features/resource-cleanup.md to use godi.Disposable\n- Fix formatting in test files\n\n🤖 Generated with [Claude Code](https://claude.com/claude-code)\n\nCo-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "docs: update module examples to use NewModule pattern",
"author_name": "Junior Yono",
"author_login": "junioryono",
"committed_at": "2025-12-13T05:23:24Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "51c24a6b575a8cca1d48316549bdac79c2da92e4",
"body": "🤖 Generated with [Claude Code](https://claude.com/claude-code)\n\nCo-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "docs: fix comment alignment in README",
"author_name": "Junior Yono",
"author_login": "junioryono",
"committed_at": "2025-12-13T05:01:11Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "cc9b5522ff1d2f74ad68341d428400d06157bc93",
"body": "Replace google/uuid with atomic counters for provider and scope IDs,\npre-size maps/slices for typical usage, add deferred graph building for\nbulk operations, and share analyzer across registrations for caching.\n\n🤖 Generated with [Claude Code](https://claude.com/claude-code)\n\nCo-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "perf: remove uuid dependency and optimize ID generation",
"author_name": "Junior Yono",
"author_login": "junioryono",
"committed_at": "2025-12-13T04:41:52Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "85063f050f0714d12d419e4de27a0a18d0a34f1a",
"body": "- Reorganize documentation into logical sections:\n - concepts/: lifetimes, scopes, modules, how-it-works\n - features/: interface binding, keyed services, groups, etc.\n - getting-started/: step-by-step tutorial\n - guides/: testing, error handling, web apps, migration\n - integrations/: net/http, \n[…]\nchmarks section\n - Better quick start examples\n - Framework integration links\n\n🤖 Generated with [Claude Code](https://claude.com/claude-code)\n\nCo-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "docs: restructure documentation and add benchmarks",
"author_name": "Junior Yono",
"author_login": "junioryono",
"committed_at": "2025-12-13T04:09:23Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "d591c9a8871fd0f6418d342cc886bc0ed106d914",
"body": "…object bug\n\n- Create testutil_test.go with shared test types, constructors, and helpers\n- Refactor collection_test.go: focused tests without redundancy\n- Refactor scope_test.go: focused tests covering all lifetime semantics\n- Simplify descriptor_test.go, errors_test.go, lifetime_test.go, module_tes\n[…]\nelds.\n\nTest coverage maintained at 84%+ for main package, 91-93% for internals.\n\n🤖 Generated with [Claude Code](https://claude.com/claude-code)\n\nCo-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "refactor: streamline tests with shared infrastructure and fix result …",
"author_name": "Junior Yono",
"author_login": "junioryono",
"committed_at": "2025-12-13T01:57:26Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "22b2f68ebb46b65af16d45f5863f70650538b3b1",
"body": "- Replace singleton map + RWMutex with sync.Map for lock-free reads\n (~25x faster concurrent resolution: 140ns → 5.5ns)\n- Add cached ConstructorInvoker via Analyzer.GetInvoker() to reduce\n allocations per resolution\n- Add comprehensive benchmark suite (benchmark_test.go) for:\n - Resolution benchm\n[…]\ncs\n- Concurrent singleton: 5.5ns, 0 allocs\n- Concurrent scoped: 5.2ns, 0 allocs\n\n🤖 Generated with [Claude Code](https://claude.com/claude-code)\n\nCo-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "perf: add lock-free singleton cache and performance optimizations",
"author_name": "Junior Yono",
"author_login": "junioryono",
"committed_at": "2025-12-13T01:14:56Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "39a1092685822468c239f8f8853a941640ec8814",
"body": "- Enhanced error formatting with visual dependency chains using arrows\n- Added Assign/AssignKeyed methods to Descriptor for direct value assignment\n- Improved BuildError, ResolutionError, and CircularDependencyError messages\n- Added context checking in Build and BuildWithContext for cancellation sup\n[…]\netween constructors\n- Updated graph error test to expect new arrow notation (↓)\n\n🤖 Generated with [Claude Code](https://claude.com/claude-code)\n\nCo-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "refactor: improve error messages and add assignment operators",
"author_name": "Junior Yono",
"author_login": "junioryono",
"committed_at": "2025-12-12T04:58:13Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "f36dfc9a38990a66f8e0c6cac38ae586406b5e0e",
"body": "Add request-scoped DI middleware and type-safe handler wrappers for\npopular Go web frameworks:\n\n- gin: ScopeMiddleware, Handle[T] with panic recovery\n- chi: ScopeMiddleware, Handle[T] for standard http handlers\n- echo: ScopeMiddleware, Handle[T] with echo.Context\n- fiber: ScopeMiddleware, Handle[T],\n[…]\n\n- WithPanicRecovery and WithPanicHandler options\n- Comprehensive test coverage\n\n🤖 Generated with [Claude Code](https://claude.com/claude-code)\n\nCo-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "feat: add framework integrations for gin, chi, echo, fiber, and http",
"author_name": "Junior Yono",
"author_login": "junioryono",
"committed_at": "2025-12-12T02:41:14Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "8284b42b9a435195f29a898300bee8ba2c5c8f83",
"body": "Add Remove[T]() and RemoveKeyed[T](key) as ModuleOptions for removing services. This provides a cleaner, type-safe API for service removal, especially useful in testing scenarios where services need to be swapped with mocks.",
"is_bot": false,
"headline": "feat: add generic Remove and RemoveKeyed ModuleOptions",
"author_name": "Junior Yono",
"author_login": "junioryono",
"committed_at": "2025-10-02T00:45:14Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1a6834dd9a1a9d40a61075f13ea7f3a0dad5d58b",
"body": "- Add VoidReturn field to Descriptor to track functions with no valid returns\n- Collect void return scoped descriptors during provider build\n- Initialize scoped void return functions when creating new scopes\n- Support functions with only error returns as void return functions\n- Add comprehensive tes\n[…]\nrious lifetimes\n- Add tests for void return functions with dependencies\n\nThis allows using functions with no returns or only error returns as\ninitialization hooks that execute when scopes are created.",
"is_bot": false,
"headline": "feat: enhance support for void return functions and initialization",
"author_name": "Junior Yono",
"author_login": "junioryono",
"committed_at": "2025-09-05T06:55:38Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "8be76d2f4cb55b5ce1962652f0a4a07827a773a2",
"body": "Allow registration of functions with no return values or error-only returns as initializers.\nThese functions can now be registered and will be called for their side effects during\ncontainer initialization.\n\n- Remove validation that rejected functions with no returns\n- Auto-generate UUID keys for no-return functions to ensure uniqueness\n- Use empty struct type as marker for initializer functions\n- Update tests to verify no-return functions work correctly",
"is_bot": false,
"headline": "feat: support functions with no returns for initialization",
"author_name": "Junior Yono",
"author_login": "junioryono",
"committed_at": "2025-09-05T05:56:31Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c40eb9c856920245200f2f6639f55c5938b978d5",
"body": "Use RELEASE_TOKEN instead of GITHUB_TOKEN to avoid permission issues\nwhen pushing tags from GitHub Actions workflow",
"is_bot": false,
"headline": "fix: use RELEASE_TOKEN for tag creation",
"author_name": "Junior Yono",
"author_login": "junioryono",
"committed_at": "2025-09-05T03:58:58Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "951e8b8a992ae3572addb03f402dddce3f9e7160",
"body": "- Change quotes to double quotes for consistency\n- Reorder version bump options (Patch, Minor, Major)\n- Remove trailing spaces and add newline at EOF",
"is_bot": false,
"headline": "style: format tag.yml and reorder version options",
"author_name": "Junior Yono",
"author_login": "junioryono",
"committed_at": "2025-09-05T03:55:54Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "85bc96f6ac0c34b7f33e2fcb2552e3d211209b33",
"body": "- Modified .github/workflows/test.yml to add workflow_call trigger, making it reusable by other workflows\n- Created .github/workflows/tag.yml that uses the reusable test workflow and handles automated version tagging\n- Tag workflow supports Major, Minor, and Patch version bumps via manual dispatch\n- Ensures all tests pass before creating new tags\n- Automatically calculates new version based on existing tags and desired bump type",
"is_bot": false,
"headline": "feat(ci): add reusable test workflow and automated tagging system",
"author_name": "Junior Yono",
"author_login": "junioryono",
"committed_at": "2025-09-05T03:54:30Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "72bd624626b5c6895bc4dd2903ab17ecef2562a2",
"body": "Applied gofmt to ensure consistent code formatting across collection.go,\ncollection_test.go, errors.go, and errors_test.go files.",
"is_bot": false,
"headline": "style: apply gofmt formatting to modified files",
"author_name": "Junior Yono",
"author_login": "junioryono",
"committed_at": "2025-09-05T03:42:48Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9c484e46b369b25e02d9642f388fca2cc1e78a9a",
"body": "…ency info\n\nThe error now clearly explains that a service with one lifetime cannot depend\non a service with an incompatible lifetime. Added DependencyType field to show\nwhich specific dependency is causing the conflict.",
"is_bot": false,
"headline": "fix(errors): improve LifetimeConflictError message and include depend…",
"author_name": "Junior Yono",
"author_login": "junioryono",
"committed_at": "2025-09-05T03:41:49Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e62d2781f6c70496b58ca73e41bdc3e059f683b0",
"body": "Remove the \"What Happens After Merge\" section as the automated release process details are no longer applicable",
"is_bot": false,
"headline": "docs: remove automated release section from CONTRIBUTING.md",
"author_name": "Junior Yono",
"author_login": "junioryono",
"committed_at": "2025-09-04T02:07:39Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1a0c71b11b059ee7291f0bb89666493d3ec558a1",
"body": "Remove the root Makefile as it's no longer needed for the project workflow",
"is_bot": false,
"headline": "chore: remove root Makefile",
"author_name": "Junior Yono",
"author_login": "junioryono",
"committed_at": "2025-09-04T02:02:41Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c2398fbb39f9c0c9ac0e0df413547ac630013bcf",
"body": "Remove the ignore pattern for internal/testutil since this directory no longer exists in the project",
"is_bot": false,
"headline": "ci: remove testutil ignore from codecov configuration",
"author_name": "Junior Yono",
"author_login": "junioryono",
"committed_at": "2025-09-04T02:00:28Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7b7869f1d34cc76a849fe8590cdfa928400bd9f7",
"body": "- Fix variable shadowing issue in doBuild() error handling where closeErr was incorrectly reassigned as err\n- Add proper result object (Out struct) field registration logic to handle each field as a separate service\n- Add comprehensive test coverage for both error handling and result object registration",
"is_bot": false,
"headline": "fix: correct error handling and result object registration in collection",
"author_name": "Junior Yono",
"author_login": "junioryono",
"committed_at": "2025-09-04T01:25:23Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d3a9775f0d3cddb473dd5d1e061a847a5b11e593",
"body": null,
"is_bot": false,
"headline": "docs: reorganize into feature-specific pages",
"author_name": "Junior Yono",
"author_login": "junioryono",
"committed_at": "2025-08-22T22:22:17Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5f877e64962517ae078c0a31ec3d256ef2f896ff",
"body": null,
"is_bot": false,
"headline": "ci: do not update docs changelog file on update anymore",
"author_name": "Junior Yono",
"author_login": "junioryono",
"committed_at": "2025-08-22T22:20:37Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "cd6553f507184188c839c295943ca937754b55ea",
"body": null,
"is_bot": false,
"headline": "feat!: change As module function to use generics",
"author_name": "Junior Yono",
"author_login": "junioryono",
"committed_at": "2025-08-22T20:33:09Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4f9c27db6520313b148d1cbf3e4dbdb652db1bf2",
"body": "…ead through",
"is_bot": false,
"headline": "docs: make readme and getting started page easier to understand and r…",
"author_name": "Junior Yono",
"author_login": "junioryono",
"committed_at": "2025-08-20T05:52:37Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "cb32220709c57584a09175f5c08ca92318f28332",
"body": null,
"is_bot": false,
"headline": "ci: add code coverage token to github actions workflow",
"author_name": "Junior Yono",
"author_login": "junioryono",
"committed_at": "2025-08-20T05:28:17Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f3c65b841136ba708080acf0f81246f94b751024",
"body": "…hub actions workflow (#17)",
"is_bot": false,
"headline": "ci: fix code coverage not updating due to incorrect go version in git…",
"author_name": "Junior Yono",
"author_login": "junioryono",
"committed_at": "2025-08-20T05:22:30Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "bf0fc9b895f58b42f4c626b9f046e971ecdfa43b",
"body": "…after next service resolution",
"is_bot": false,
"headline": "test: add test that checks if modified scope service remains changed …",
"author_name": "Junior Yono",
"author_login": "junioryono",
"committed_at": "2025-08-19T05:07:13Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ddc39602fc9deb2b25a41f69b849224c5b0978e1",
"body": "- Update changelog",
"is_bot": true,
"headline": "chore(release): v4.0.1 [skip ci]",
"author_name": "github-actions[bot]",
"author_login": "github-actions[bot]",
"committed_at": "2025-08-19T04:53:08Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4cd53bf56705e94489329691afc1b7236f17b858",
"body": null,
"is_bot": false,
"headline": "fix: ensure transient disposable services are disposed on scope close",
"author_name": "Junior Yono",
"author_login": "junioryono",
"committed_at": "2025-08-19T04:49:04Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b121561dbca2c357fd3996e978021871e1cb900f",
"body": null,
"is_bot": false,
"headline": "test: replace t.Error/Fatal methods with testify assertions",
"author_name": "Junior Yono",
"author_login": "junioryono",
"committed_at": "2025-08-19T01:23:36Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "46d68ce7fcb4684ea98e264ee202b32c1a626bad",
"body": null,
"is_bot": false,
"headline": "ci: update golangci-lint",
"author_name": "Junior Yono",
"author_login": "junioryono",
"committed_at": "2025-08-19T00:57:55Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9d2e557b138bef2702ba5fe9cd0f332ce41a5a96",
"body": "Signed-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>\nCo-authored-by: Junior Yono <jryono123@gmail.com>",
"is_bot": true,
"headline": "chore(deps): bump amannn/action-semantic-pull-request from 5 to 6 (#13)",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2025-08-19T00:17:19Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "16a4c0354ac4216a19ec65c6ce0c6920823459c3",
"body": "Signed-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>\nCo-authored-by: Junior Yono <jryono123@gmail.com>",
"is_bot": true,
"headline": "chore(deps): bump actions/checkout from 4 to 5 (#12)",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2025-08-19T00:14:44Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9aba1bd7b605a03f7e2f073632b0a8b422c21fbe",
"body": "Signed-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "chore(deps): bump codecov/codecov-action from 4 to 5 (#11)",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2025-08-19T00:13:03Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "001341d9dcb819b8566230c8c4f0a397fa1dda8f",
"body": null,
"is_bot": false,
"headline": "update workflow tokens",
"author_name": "Junior Yono",
"author_login": "junioryono",
"committed_at": "2025-08-19T00:09:26Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "aa566514283bf31d1296bccc6e7dc14f7eb77429",
"body": null,
"is_bot": false,
"headline": "update release workflow to not use version.json",
"author_name": "Junior Yono",
"author_login": "junioryono",
"committed_at": "2025-08-18T23:50:00Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f5f05b8ef954ef0a5d0ad2c43dc9b60de2e88aab",
"body": null,
"is_bot": false,
"headline": "update changelog",
"author_name": "Junior Yono",
"author_login": "junioryono",
"committed_at": "2025-08-18T23:47:35Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c2781ed59bdb2ea0a2012fe93f4f1a6572f31454",
"body": "- Update changelog\n- Bump version",
"is_bot": true,
"headline": "chore(release): v4.0.0 [skip ci]",
"author_name": "github-actions[bot]",
"author_login": "github-actions[bot]",
"committed_at": "2025-08-18T23:40:39Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c7809be9545e18bbecf9dcd7a89fb7e608f4224c",
"body": null,
"is_bot": false,
"headline": "update release workflow",
"author_name": "Junior Yono",
"author_login": "junioryono",
"committed_at": "2025-08-18T23:40:13Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9b184ac9a3f04bb876a624e74177f1baf7c6d698",
"body": null,
"is_bot": false,
"headline": "update release workflow",
"author_name": "Junior Yono",
"author_login": "junioryono",
"committed_at": "2025-08-18T23:37:57Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8668269fa9123ecc33e09cd0193f3526566692a3",
"body": null,
"is_bot": false,
"headline": "delete version.json from release ci",
"author_name": "Junior Yono",
"author_login": "junioryono",
"committed_at": "2025-08-18T23:28:02Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "90bd9256a3bf2e85b09c48b24ebe892a2973f0b7",
"body": null,
"is_bot": false,
"headline": "fix ci issues",
"author_name": "Junior Yono",
"author_login": "junioryono",
"committed_at": "2025-08-18T23:26:56Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6578f8e9e8ccb405419f37a2eab2289f4310a5c9",
"body": "- Update changelog\n- Bump version",
"is_bot": false,
"headline": "chore(release): v3.0.2 [skip ci]",
"author_name": "Conventional Changelog Action",
"author_login": null,
"committed_at": "2025-08-18T23:17:28Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e0ba5696bc278741d7b4b4340767e8222a65a32d",
"body": "- Update changelog\n- Bump version [skip ci]",
"is_bot": false,
"headline": "chore(release): {tag} [skip ci]",
"author_name": "Conventional Changelog Action",
"author_login": null,
"committed_at": "2025-08-18T23:17:28Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "15760a0e81fee46be3d082751d6fc9e8facd092d",
"body": null,
"is_bot": false,
"headline": "fix release workflow issues",
"author_name": "Junior Yono",
"author_login": "junioryono",
"committed_at": "2025-08-18T23:16:58Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f7e58df13537598333a2b20d8f5c43a0142105d6",
"body": "- Update changelog\n- Bump version",
"is_bot": false,
"headline": "chore(release): v1.6.1 [skip ci]",
"author_name": "Conventional Changelog Action",
"author_login": null,
"committed_at": "2025-08-18T23:06:44Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c12d204c8df90dd548b766bd7caefeadf0bebf85",
"body": "- Update changelog\n- Bump version [skip ci]",
"is_bot": false,
"headline": "chore(release): {tag} [skip ci]",
"author_name": "Conventional Changelog Action",
"author_login": null,
"committed_at": "2025-08-18T23:06:43Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "60ce36359930d6eb0481ed65cd24fc03f1733971",
"body": null,
"is_bot": false,
"headline": "fix release workflow crash",
"author_name": "Junior Yono",
"author_login": "junioryono",
"committed_at": "2025-08-18T23:06:07Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "92cb6a8ed1a0ec7f6e7368beea9127b00bc76b9e",
"body": null,
"is_bot": false,
"headline": "update release workflow again",
"author_name": "Junior Yono",
"author_login": "junioryono",
"committed_at": "2025-08-18T23:04:36Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3db72bb89c013367c5c4816e798f9fce2e2e8dbb",
"body": null,
"is_bot": false,
"headline": "update release workflow",
"author_name": "Junior Yono",
"author_login": "junioryono",
"committed_at": "2025-08-18T23:01:38Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "64047978c82d7646450d23275f32feba9898871f",
"body": null,
"is_bot": false,
"headline": "format layout html",
"author_name": "Junior Yono",
"author_login": "junioryono",
"committed_at": "2025-08-18T22:55:11Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4d83f2b1e508707f99641414733af0b2f93cd963",
"body": null,
"is_bot": false,
"headline": "fix linting issue",
"author_name": "Junior Yono",
"author_login": "junioryono",
"committed_at": "2025-08-17T23:11:26Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0fa284034685a3ad5b7dfca9a2c516f178d33338",
"body": null,
"is_bot": false,
"headline": "update docs",
"author_name": "Junior Yono",
"author_login": "junioryono",
"committed_at": "2025-08-17T22:40:15Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "bf4844398ad59b40e7b8c2f1138118171c98f01e",
"body": null,
"is_bot": false,
"headline": "update docs",
"author_name": "Junior Yono",
"author_login": "junioryono",
"committed_at": "2025-08-17T22:26:51Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e17a21210d958d34fdee641d23fd7145e5b53a32",
"body": null,
"is_bot": false,
"headline": "fix not being able to get scope from context",
"author_name": "Junior Yono",
"author_login": "junioryono",
"committed_at": "2025-08-17T22:22:38Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f09100b62be8a538aa35ce7c9004d1b86bd3fb6d",
"body": null,
"is_bot": false,
"headline": "rename HasService to Contains and HasKeyedService to ContainsKeyed",
"author_name": "Junior Yono",
"author_login": "junioryono",
"committed_at": "2025-08-17T22:21:44Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f7fef3183fb21d476909e9a70612c0e7f819c7cf",
"body": null,
"is_bot": false,
"headline": "clean up createInstance method",
"author_name": "Junior Yono",
"author_login": "junioryono",
"committed_at": "2025-08-17T20:17:26Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b5fefbe93271e597be64aadb8e99c6e915e8682c",
"body": null,
"is_bot": false,
"headline": "cache instances that do not have a constructor",
"author_name": "Junior Yono",
"author_login": "junioryono",
"committed_at": "2025-08-17T20:13:37Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0e2b9bcff125eb5eca253ba0d6cb2415209297c4",
"body": null,
"is_bot": false,
"headline": "refactor instance caching",
"author_name": "Junior Yono",
"author_login": "junioryono",
"committed_at": "2025-08-17T20:10:02Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7ad20ba066f1d95bc365bd219083e052efe14953",
"body": null,
"is_bot": false,
"headline": "refactor",
"author_name": "Junior Yono",
"author_login": "junioryono",
"committed_at": "2025-08-17T19:09:57Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d7ff4f6b9fc461d6321075cbe80a79135925529b",
"body": null,
"is_bot": false,
"headline": "removed unused property",
"author_name": "Junior Yono",
"author_login": "junioryono",
"committed_at": "2025-08-17T18:23:54Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "bdacdc8f25c188a01800e1b3fd817d26a332d04e",
"body": null,
"is_bot": false,
"headline": "add permissions to workflow",
"author_name": "Junior Yono",
"author_login": "junioryono",
"committed_at": "2025-08-17T18:14:03Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "13b133d14ac01294b87f85c9c6bca17be58adf89",
"body": null,
"is_bot": false,
"headline": "fix linting errors",
"author_name": "Junior Yono",
"author_login": "junioryono",
"committed_at": "2025-08-17T18:12:03Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c663e715b86b7f93fc231e3aa189328a9b7ed57c",
"body": null,
"is_bot": false,
"headline": "add tests/docs for groups with mixed lifetimes",
"author_name": "Junior Yono",
"author_login": "junioryono",
"committed_at": "2025-08-17T18:10:11Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "09f0174b9f1fb9651af3274491dd6056031a47da",
"body": null,
"is_bot": false,
"headline": "remove decorator",
"author_name": "Junior Yono",
"author_login": "junioryono",
"committed_at": "2025-08-17T17:55:20Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "998a6cda9efa32e29dbca6899236de5ffda3ded3",
"body": null,
"is_bot": false,
"headline": "fix all tests",
"author_name": "Junior Yono",
"author_login": "junioryono",
"committed_at": "2025-08-17T17:45:48Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "39347ce6bdc18b13f3311f8be82733a1bd00408a",
"body": null,
"is_bot": false,
"headline": "fix scope ctx test",
"author_name": "Junior Yono",
"author_login": "junioryono",
"committed_at": "2025-08-17T16:43:55Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "54ac6765fa3d6d590f6f985af5670bb96bc25bec",
"body": null,
"is_bot": false,
"headline": "add newScope method",
"author_name": "Junior Yono",
"author_login": "junioryono",
"committed_at": "2025-08-17T16:43:49Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4c46c816bcf3e35163c30c0295cb074d2ee7a05f",
"body": null,
"is_bot": false,
"headline": "register internal services when building collection",
"author_name": "Junior Yono",
"author_login": "junioryono",
"committed_at": "2025-08-17T16:22:09Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a984edf525786b22ac7c772f2ec6f51f96c776e1",
"body": null,
"is_bot": false,
"headline": "tidy up docs",
"author_name": "Junior Yono",
"author_login": "junioryono",
"committed_at": "2025-08-17T07:14:20Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "222343910db63b4063037d4de1237b694fa37712",
"body": null,
"is_bot": false,
"headline": "fix lifetime tests",
"author_name": "Junior Yono",
"author_login": "junioryono",
"committed_at": "2025-08-17T06:36:10Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "75b2cfd3408b3528ce8a4f09ccaa8a47a4684172",
"body": null,
"is_bot": false,
"headline": "fix security issues",
"author_name": "Junior Yono",
"author_login": "junioryono",
"committed_at": "2025-08-17T06:16:27Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f37199a47d9d2cc2c850f7af84f5ae05291b2b03",
"body": null,
"is_bot": false,
"headline": "do not allow transient instances to depend on scoped instances",
"author_name": "Junior Yono",
"author_login": "junioryono",
"committed_at": "2025-08-17T05:58:38Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e2979f10f4dab8edcab77ec1741a00931018aaa9",
"body": null,
"is_bot": false,
"headline": "add comments",
"author_name": "Junior Yono",
"author_login": "junioryono",
"committed_at": "2025-08-17T05:29:25Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5948270cdcb2e2cc65cafdbf86377f317b259824",
"body": null,
"is_bot": false,
"headline": "add tests",
"author_name": "Junior Yono",
"author_login": "junioryono",
"committed_at": "2025-08-17T05:18:07Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0283681aa1846d13396f66229e884eed4449ce03",
"body": null,
"is_bot": false,
"headline": "fix linting issues",
"author_name": "Junior Yono",
"author_login": "junioryono",
"committed_at": "2025-08-17T00:16:34Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1123ec4e8951fa538941e335f8c33150747a717b",
"body": null,
"is_bot": false,
"headline": "update ci rules",
"author_name": "Junior Yono",
"author_login": "junioryono",
"committed_at": "2025-08-17T00:03:58Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "28321c8e7ad23df66e06f10e4019b0fa58064bd4",
"body": null,
"is_bot": false,
"headline": "update ci rules",
"author_name": "Junior Yono",
"author_login": "junioryono",
"committed_at": "2025-08-16T23:56:52Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ab107cf79412ff3e46a6d2fc9357eb3a2605f4f5",
"body": null,
"is_bot": false,
"headline": "downgrade go version to 1.24.6",
"author_name": "Junior Yono",
"author_login": "junioryono",
"committed_at": "2025-08-16T23:42:43Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c73e124af53c07c6dcdd850ba26c5a25137dad80",
"body": null,
"is_bot": false,
"headline": "downgrade golangci/golangci-lint-action to v6",
"author_name": "Junior Yono",
"author_login": "junioryono",
"committed_at": "2025-08-16T23:40:06Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "21265a1524805c66dfe8d7c2f59508ffcfb9aba9",
"body": null,
"is_bot": false,
"headline": "fix parsing issue with go test",
"author_name": "Junior Yono",
"author_login": "junioryono",
"committed_at": "2025-08-16T23:35:59Z",
"body_truncated": false,
"is_coding_agent": false
}
],
"releases_count": 40,
"commits_last_year": 148,
"latest_release_at": "2026-07-18T16:26:19Z",
"latest_release_tag": "v5.1.0",
"releases_from_tags": false,
"days_since_last_push": 3,
"active_weeks_last_year": 11,
"days_since_latest_release": 8,
"mean_days_between_releases": 35.2
},
"community": {
"has_readme": true,
"has_license": true,
"has_description": true,
"has_contributing": true,
"health_percentage": 100,
"has_issue_template": false,
"has_code_of_conduct": true,
"has_pull_request_template": true
},
"ecosystem": {
"packages": [
{
"name": "github.com/junioryono/godi/v5",
"exists": true,
"license": null,
"keywords": [],
"ecosystem": "go",
"matches_repo": true,
"registry_url": "https://pkg.go.dev/github.com/junioryono/godi/v5",
"is_deprecated": false,
"latest_version": "v5.1.0",
"repository_url": "https://github.com/junioryono/godi",
"versions_count": 3,
"total_downloads": null,
"dependents_count": null,
"deprecation_note": null,
"maintainers_count": null,
"monthly_downloads": null,
"first_published_at": null,
"latest_published_at": "2026-07-18T16:20:17Z",
"latest_version_yanked": null,
"days_since_latest_publish": 8
},
{
"name": "github.com/junioryono/godi/chi/v5",
"exists": true,
"license": null,
"keywords": [],
"ecosystem": "go",
"matches_repo": true,
"registry_url": "https://pkg.go.dev/github.com/junioryono/godi/chi/v5",
"is_deprecated": false,
"latest_version": "v5.1.0",
"repository_url": "https://github.com/junioryono/godi",
"versions_count": 3,
"total_downloads": null,
"dependents_count": null,
"deprecation_note": null,
"maintainers_count": null,
"monthly_downloads": null,
"first_published_at": null,
"latest_published_at": "2026-07-18T16:20:17Z",
"latest_version_yanked": null,
"days_since_latest_publish": 8
},
{
"name": "github.com/junioryono/godi/gin/v5",
"exists": true,
"license": null,
"keywords": [],
"ecosystem": "go",
"matches_repo": true,
"registry_url": "https://pkg.go.dev/github.com/junioryono/godi/gin/v5",
"is_deprecated": false,
"latest_version": "v5.1.0",
"repository_url": "https://github.com/junioryono/godi",
"versions_count": 3,
"total_downloads": null,
"dependents_count": null,
"deprecation_note": null,
"maintainers_count": null,
"monthly_downloads": null,
"first_published_at": null,
"latest_published_at": "2026-07-18T16:20:17Z",
"latest_version_yanked": null,
"days_since_latest_publish": 8
},
{
"name": "github.com/junioryono/godi/echo/v5",
"exists": true,
"license": null,
"keywords": [],
"ecosystem": "go",
"matches_repo": true,
"registry_url": "https://pkg.go.dev/github.com/junioryono/godi/echo/v5",
"is_deprecated": false,
"latest_version": "v5.1.0",
"repository_url": "https://github.com/junioryono/godi",
"versions_count": 3,
"total_downloads": null,
"dependents_count": null,
"deprecation_note": null,
"maintainers_count": null,
"monthly_downloads": null,
"first_published_at": null,
"latest_published_at": "2026-07-18T16:20:17Z",
"latest_version_yanked": null,
"days_since_latest_publish": 8
},
{
"name": "github.com/junioryono/godi/http/v5",
"exists": true,
"license": null,
"keywords": [],
"ecosystem": "go",
"matches_repo": true,
"registry_url": "https://pkg.go.dev/github.com/junioryono/godi/http/v5",
"is_deprecated": false,
"latest_version": "v5.1.0",
"repository_url": "https://github.com/junioryono/godi",
"versions_count": 3,
"total_downloads": null,
"dependents_count": null,
"deprecation_note": null,
"maintainers_count": null,
"monthly_downloads": null,
"first_published_at": null,
"latest_published_at": "2026-07-18T16:20:17Z",
"latest_version_yanked": null,
"days_since_latest_publish": 8
},
{
"name": "github.com/junioryono/godi/huma/v5",
"exists": true,
"license": null,
"keywords": [],
"ecosystem": "go",
"matches_repo": true,
"registry_url": "https://pkg.go.dev/github.com/junioryono/godi/huma/v5",
"is_deprecated": false,
"latest_version": "v5.1.0",
"repository_url": "https://github.com/junioryono/godi",
"versions_count": 3,
"total_downloads": null,
"dependents_count": null,
"deprecation_note": null,
"maintainers_count": null,
"monthly_downloads": null,
"first_published_at": null,
"latest_published_at": "2026-07-18T16:20:17Z",
"latest_version_yanked": null,
"days_since_latest_publish": 8
},
{
"name": "github.com/junioryono/godi/fiber/v5",
"exists": true,
"license": null,
"keywords": [],
"ecosystem": "go",
"matches_repo": true,
"registry_url": "https://pkg.go.dev/github.com/junioryono/godi/fiber/v5",
"is_deprecated": false,
"latest_version": "v5.1.0",
"repository_url": "https://github.com/junioryono/godi",
"versions_count": 3,
"total_downloads": null,
"dependents_count": null,
"deprecation_note": null,
"maintainers_count": null,
"monthly_downloads": null,
"first_published_at": null,
"latest_published_at": "2026-07-18T16:20:17Z",
"latest_version_yanked": null,
"days_since_latest_publish": 8
},
{
"name": "github.com/junioryono/godi",
"exists": true,
"license": null,
"keywords": [],
"ecosystem": "go",
"matches_repo": true,
"registry_url": "https://pkg.go.dev/github.com/junioryono/godi",
"is_deprecated": false,
"latest_version": "v1.6.2",
"repository_url": "https://github.com/junioryono/godi",
"versions_count": 17,
"total_downloads": null,
"dependents_count": null,
"deprecation_note": null,
"maintainers_count": null,
"monthly_downloads": null,
"first_published_at": null,
"latest_published_at": "2025-07-17T03:53:10Z",
"latest_version_yanked": null,
"days_since_latest_publish": 374
}
]
},
"popularity": {
"forks": 2,
"stars": 75,
"watchers": 2,
"fork_history": {
"days": [
{
"date": "2025-07-11",
"count": 1
},
{
"date": "2026-06-07",
"count": 1
}
],
"complete": true,
"collected": 2,
"total_forks": 2
},
"star_history": null,
"open_issues_and_prs": 8
},
"ai_readiness": {
"has_nix": false,
"example_dirs": [
"examples"
],
"has_llms_txt": false,
"has_dockerfile": false,
"has_mcp_signal": false,
"bootstrap_files": [
"Makefile",
"docs/Makefile"
],
"api_schema_files": [],
"has_devcontainer": false,
"typecheck_configs": [],
"toolchain_manifests": [
"benchmarks/go.mod",
"chi/go.mod",
"echo/go.mod",
"fiber/go.mod",
"gin/go.mod",
"go.mod",
"http/go.mod",
"huma/go.mod",
"integrationtests/go.mod"
],
"largest_source_bytes": 44999,
"source_files_sampled": 41,
"oversized_source_files": 0,
"agent_instruction_files": [],
"agent_instruction_max_bytes": null
},
"dependencies": {
"manifests": [
"benchmarks/go.mod",
"chi/go.mod",
"docs/requirements.txt",
"echo/go.mod",
"fiber/go.mod",
"gin/go.mod",
"go.mod",
"http/go.mod",
"huma/go.mod",
"integrationtests/go.mod"
],
"advisories": {
"error": null,
"scope": "repository_graph",
"source": "osv",
"findings": [
{
"name": "golang.org/x/crypto",
"direct": false,
"version": "v0.23.0",
"severity": "critical",
"ecosystem": "go",
"cvss_score": 10,
"advisory_ids": [
"GHSA-45gg-vh54-h5m9",
"GHSA-5cgq-3rg8-m6cv",
"GHSA-78mq-xcr3-xm33",
"GHSA-89gr-r52h-f8rx",
"GHSA-9m57-25v3-79x9",
"GHSA-f5wc-c3c7-36mc",
"GHSA-f6x5-jh6r-wrfv",
"GHSA-hcg3-q754-cr77",
"GHSA-j5w8-q4qc-rx2x",
"GHSA-jppx-rxg9-jmrx"
],
"fixed_version": "0.52.0",
"advisory_count": 36,
"oldest_advisory_days": 592
},
{
"name": "golang.org/x/crypto",
"direct": false,
"version": "v0.31.0",
"severity": "critical",
"ecosystem": "go",
"cvss_score": 10,
"advisory_ids": [
"GHSA-45gg-vh54-h5m9",
"GHSA-5cgq-3rg8-m6cv",
"GHSA-78mq-xcr3-xm33",
"GHSA-89gr-r52h-f8rx",
"GHSA-9m57-25v3-79x9",
"GHSA-f5wc-c3c7-36mc",
"GHSA-f6x5-jh6r-wrfv",
"GHSA-hcg3-q754-cr77",
"GHSA-j5w8-q4qc-rx2x",
"GHSA-jppx-rxg9-jmrx"
],
"fixed_version": "0.52.0",
"advisory_count": 34,
"oldest_advisory_days": 516
},
{
"name": "github.com/gofiber/fiber/v2",
"direct": true,
"version": "v2.52.6",
"severity": "high",
"ecosystem": "go",
"cvss_score": 7.7,
"advisory_ids": [
"GHSA-68rr-p4fp-j59v",
"GHSA-gcfq-8gqf-4876",
"GHSA-hg3g-gphw-5hhm",
"GHSA-mrq8-rjmw-wpq3",
"GHSA-qjv7-627w-8qjv",
"GHSA-qx2q-88mx-vhg7",
"GO-2025-3706",
"GO-2025-3845",
"GO-2026-4471",
"GO-2026-4543"
],
"fixed_version": "3.3.0",
"advisory_count": 11,
"oldest_advisory_days": 430
},
{
"name": "urllib3",
"direct": false,
"version": "2.4.0",
"severity": "high",
"ecosystem": "pypi",
"cvss_score": 7.5,
"advisory_ids": [
"GHSA-2xpw-w6gg-jr37",
"GHSA-38jv-5279-wg99",
"GHSA-48p4-8xcf-vxj5",
"GHSA-gm62-xv2j-4w53",
"GHSA-pq67-6m6q-mj2v",
"GHSA-qccp-gfcp-xxvc",
"PYSEC-2026-141",
"PYSEC-2026-1994",
"PYSEC-2026-1996",
"PYSEC-2026-1997"
],
"fixed_version": "2.7.0",
"advisory_count": 12,
"oldest_advisory_days": 403
},
{
"name": "github.com/gofiber/fiber/v2",
"direct": true,
"version": "v2.52.12",
"severity": "moderate",
"ecosystem": "go",
"cvss_score": 5.3,
"advisory_ids": [
"GHSA-gcfq-8gqf-4876",
"GHSA-qjv7-627w-8qjv",
"GO-2026-5585"
],
"fixed_version": "3.3.0",
"advisory_count": 3,
"oldest_advisory_days": 82
},
{
"name": "github.com/quic-go/quic-go",
"direct": false,
"version": "v0.59.0",
"severity": "moderate",
"ecosystem": "go",
"cvss_score": 5.3,
"advisory_ids": [
"GHSA-vvgj-x9jq-8cj9",
"GO-2026-5676"
],
"fixed_version": "0.59.1",
"advisory_count": 2,
"oldest_advisory_days": 53
},
{
"name": "golang.org/x/net",
"direct": false,
"version": "v0.25.0",
"severity": "moderate",
"ecosystem": "go",
"cvss_score": 6.5,
"advisory_ids": [
"GHSA-5cv4-jp36-h3mw",
"GHSA-qxp5-gwg8-xv66",
"GHSA-vvgc-356p-c3xw",
"GO-2024-3333",
"GO-2025-3503",
"GO-2025-3595",
"GO-2026-4440",
"GO-2026-4441",
"GO-2026-4918",
"GO-2026-5025"
],
"fixed_version": "1.26.3",
"advisory_count": 16,
"oldest_advisory_days": 585
},
{
"name": "golang.org/x/net",
"direct": false,
"version": "v0.33.0",
"severity": "moderate",
"ecosystem": "go",
"cvss_score": 6.5,
"advisory_ids": [
"GHSA-5cv4-jp36-h3mw",
"GHSA-qxp5-gwg8-xv66",
"GHSA-vvgc-356p-c3xw",
"GO-2025-3503",
"GO-2025-3595",
"GO-2026-4440",
"GO-2026-4441",
"GO-2026-4918",
"GO-2026-5025",
"GO-2026-5026"
],
"fixed_version": "1.26.3",
"advisory_count": 15,
"oldest_advisory_days": 501
},
{
"name": "idna",
"direct": false,
"version": "3.10",
"severity": "moderate",
"ecosystem": "pypi",
"cvss_score": 5.3,
"advisory_ids": [
"GHSA-65pc-fj4g-8rjx",
"PYSEC-2026-215"
],
"fixed_version": "3.15",
"advisory_count": 2,
"oldest_advisory_days": 68
},
{
"name": "requests",
"direct": false,
"version": "2.32.3",
"severity": "moderate",
"ecosystem": "pypi",
"cvss_score": 5.5,
"advisory_ids": [
"GHSA-9hjg-9r4m-mvj7",
"GHSA-gc5v-m9x4-r6x2",
"PYSEC-2026-1872",
"PYSEC-2026-2275"
],
"fixed_version": "2.33.0",
"advisory_count": 4,
"oldest_advisory_days": 412
},
{
"name": "pygments",
"direct": false,
"version": "2.19.1",
"severity": "low",
"ecosystem": "pypi",
"cvss_score": 3.3,
"advisory_ids": [
"GHSA-5239-wwwm-4pmq",
"PYSEC-2026-2987"
],
"fixed_version": "2.20.0",
"advisory_count": 2,
"oldest_advisory_days": 126
},
{
"name": "github.com/go-chi/chi/v5",
"direct": true,
"version": "v5.2.5",
"severity": "unknown",
"ecosystem": "go",
"cvss_score": null,
"advisory_ids": [
"GO-2026-5774",
"GO-2026-5775",
"GO-2026-5777"
],
"fixed_version": "5.3.0",
"advisory_count": 3,
"oldest_advisory_days": 2
},
{
"name": "golang.org/x/crypto",
"direct": false,
"version": "v0.54.0",
"severity": "unknown",
"ecosystem": "go",
"cvss_score": null,
"advisory_ids": [
"GO-2026-5932"
],
"fixed_version": null,
"advisory_count": 1,
"oldest_advisory_days": 19
},
{
"name": "golang.org/x/sys",
"direct": false,
"version": "v0.20.0",
"severity": "unknown",
"ecosystem": "go",
"cvss_score": null,
"advisory_ids": [
"GO-2026-5024"
],
"fixed_version": "0.44.0",
"advisory_count": 1,
"oldest_advisory_days": 65
},
{
"name": "golang.org/x/sys",
"direct": false,
"version": "v0.28.0",
"severity": "unknown",
"ecosystem": "go",
"cvss_score": null,
"advisory_ids": [
"GO-2026-5024"
],
"fixed_version": "0.44.0",
"advisory_count": 1,
"oldest_advisory_days": 65
},
{
"name": "golang.org/x/text",
"direct": false,
"version": "v0.15.0",
"severity": "unknown",
"ecosystem": "go",
"cvss_score": null,
"advisory_ids": [
"GO-2026-5970"
],
"fixed_version": "0.39.0",
"advisory_count": 1,
"oldest_advisory_days": 12
},
{
"name": "golang.org/x/text",
"direct": false,
"version": "v0.21.0",
"severity": "unknown",
"ecosystem": "go",
"cvss_score": null,
"advisory_ids": [
"GO-2026-5970"
],
"fixed_version": "0.39.0",
"advisory_count": 1,
"oldest_advisory_days": 12
}
],
"collected": true,
"malicious": [],
"truncated": false,
"by_severity": {
"low": 1,
"high": 2,
"unknown": 6,
"critical": 2,
"moderate": 6
},
"advisory_count": 145,
"affected_count": 17,
"assessed_count": 108,
"malicious_count": 0,
"assessed_package": null,
"unassessed_count": 0,
"direct_affected_count": 3
},
"ecosystems": [
"go",
"pypi"
],
"dependencies": [
{
"name": "github.com/junioryono/godi/v5",
"manifest": "chi/go.mod",
"ecosystem": "go",
"version_constraint": "v5.0.0"
},
{
"name": "github.com/stretchr/testify",
"manifest": "chi/go.mod",
"ecosystem": "go",
"version_constraint": "v1.11.1"
},
{
"name": "github.com/junioryono/godi/v5",
"manifest": "echo/go.mod",
"ecosystem": "go",
"version_constraint": "v5.0.0"
},
{
"name": "github.com/labstack/echo/v4",
"manifest": "echo/go.mod",
"ecosystem": "go",
"version_constraint": "v4.13.3"
},
{
"name": "github.com/stretchr/testify",
"manifest": "echo/go.mod",
"ecosystem": "go",
"version_constraint": "v1.11.1"
},
{
"name": "github.com/gofiber/fiber/v2",
"manifest": "fiber/go.mod",
"ecosystem": "go",
"version_constraint": "v2.52.6"
},
{
"name": "github.com/junioryono/godi/v5",
"manifest": "fiber/go.mod",
"ecosystem": "go",
"version_constraint": "v5.0.0"
},
{
"name": "github.com/stretchr/testify",
"manifest": "fiber/go.mod",
"ecosystem": "go",
"version_constraint": "v1.11.1"
},
{
"name": "github.com/gin-gonic/gin",
"manifest": "gin/go.mod",
"ecosystem": "go",
"version_constraint": "v1.10.0"
},
{
"name": "github.com/junioryono/godi/v5",
"manifest": "gin/go.mod",
"ecosystem": "go",
"version_constraint": "v5.0.0"
},
{
"name": "github.com/stretchr/testify",
"manifest": "gin/go.mod",
"ecosystem": "go",
"version_constraint": "v1.11.1"
},
{
"name": "github.com/stretchr/testify",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.11.1"
},
{
"name": "github.com/junioryono/godi/v5",
"manifest": "http/go.mod",
"ecosystem": "go",
"version_constraint": "v5.0.0"
},
{
"name": "github.com/stretchr/testify",
"manifest": "http/go.mod",
"ecosystem": "go",
"version_constraint": "v1.11.1"
},
{
"name": "github.com/danielgtaylor/huma/v2",
"manifest": "huma/go.mod",
"ecosystem": "go",
"version_constraint": "v2.37.3"
},
{
"name": "github.com/junioryono/godi/v5",
"manifest": "huma/go.mod",
"ecosystem": "go",
"version_constraint": "v5.0.0"
},
{
"name": "github.com/stretchr/testify",
"manifest": "huma/go.mod",
"ecosystem": "go",
"version_constraint": "v1.11.1"
},
{
"name": "github.com/danielgtaylor/huma/v2",
"manifest": "integrationtests/go.mod",
"ecosystem": "go",
"version_constraint": "v2.37.3"
},
{
"name": "github.com/gin-gonic/gin",
"manifest": "integrationtests/go.mod",
"ecosystem": "go",
"version_constraint": "v1.11.0"
},
{
"name": "github.com/go-chi/chi/v5",
"manifest": "integrationtests/go.mod",
"ecosystem": "go",
"version_constraint": "v5.2.5"
},
{
"name": "github.com/gofiber/fiber/v2",
"manifest": "integrationtests/go.mod",
"ecosystem": "go",
"version_constraint": "v2.52.12"
},
{
"name": "github.com/junioryono/godi/chi/v5",
"manifest": "integrationtests/go.mod",
"ecosystem": "go",
"version_constraint": "v5.0.1"
},
{
"name": "github.com/junioryono/godi/echo/v5",
"manifest": "integrationtests/go.mod",
"ecosystem": "go",
"version_constraint": "v5.0.1"
},
{
"name": "github.com/junioryono/godi/fiber/v5",
"manifest": "integrationtests/go.mod",
"ecosystem": "go",
"version_constraint": "v5.0.1"
},
{
"name": "github.com/junioryono/godi/gin/v5",
"manifest": "integrationtests/go.mod",
"ecosystem": "go",
"version_constraint": "v5.0.1"
},
{
"name": "github.com/junioryono/godi/http/v5",
"manifest": "integrationtests/go.mod",
"ecosystem": "go",
"version_constraint": "v5.0.1"
},
{
"name": "github.com/junioryono/godi/huma/v5",
"manifest": "integrationtests/go.mod",
"ecosystem": "go",
"version_constraint": "v5.0.1"
},
{
"name": "github.com/junioryono/godi/v5",
"manifest": "integrationtests/go.mod",
"ecosystem": "go",
"version_constraint": "v5.0.1"
},
{
"name": "github.com/labstack/echo/v4",
"manifest": "integrationtests/go.mod",
"ecosystem": "go",
"version_constraint": "v4.15.0"
}
],
"all_dependencies": {
"error": null,
"source": "github-sbom",
"packages": [
{
"name": "github.com/danielgtaylor/huma/v2",
"direct": true,
"version": "v2.37.3",
"ecosystem": "go"
},
{
"name": "github.com/gin-gonic/gin",
"direct": true,
"version": "v1.10.0",
"ecosystem": "go"
},
{
"name": "github.com/gin-gonic/gin",
"direct": true,
"version": "v1.11.0",
"ecosystem": "go"
},
{
"name": "github.com/go-chi/chi/v5",
"direct": true,
"version": "v5.2.5",
"ecosystem": "go"
},
{
"name": "github.com/gofiber/fiber/v2",
"direct": true,
"version": "v2.52.12",
"ecosystem": "go"
},
{
"name": "github.com/gofiber/fiber/v2",
"direct": true,
"version": "v2.52.6",
"ecosystem": "go"
},
{
"name": "github.com/labstack/echo/v4",
"direct": true,
"version": "v4.13.3",
"ecosystem": "go"
},
{
"name": "github.com/labstack/echo/v4",
"direct": true,
"version": "v4.15.0",
"ecosystem": "go"
},
{
"name": "github.com/stretchr/testify",
"direct": true,
"version": "v1.11.1",
"ecosystem": "go"
},
{
"name": "github.com/andybalholm/brotli",
"direct": false,
"version": "v1.1.0",
"ecosystem": "go"
},
{
"name": "github.com/andybalholm/brotli",
"direct": false,
"version": "v1.2.0",
"ecosystem": "go"
},
{
"name": "github.com/bytedance/gopkg",
"direct": false,
"version": "v0.1.3",
"ecosystem": "go"
},
{
"name": "github.com/bytedance/sonic",
"direct": false,
"version": "v1.11.6",
"ecosystem": "go"
},
{
"name": "github.com/bytedance/sonic",
"direct": false,
"version": "v1.15.0",
"ecosystem": "go"
},
{
"name": "github.com/bytedance/sonic/loader",
"direct": false,
"version": "v0.1.1",
"ecosystem": "go"
},
{
"name": "github.com/bytedance/sonic/loader",
"direct": false,
"version": "v0.5.0",
"ecosystem": "go"
},
{
"name": "github.com/clipperhouse/uax29/v2",
"direct": false,
"version": "v2.7.0",
"ecosystem": "go"
},
{
"name": "github.com/cloudwego/base64x",
"direct": false,
"version": "v0.1.4",
"ecosystem": "go"
},
{
"name": "github.com/cloudwego/base64x",
"direct": false,
"version": "v0.1.6",
"ecosystem": "go"
},
{
"name": "github.com/cloudwego/iasm",
"direct": false,
"version": "v0.2.0",
"ecosystem": "go"
},
{
"name": "github.com/davecgh/go-spew",
"direct": false,
"version": "v1.1.1",
"ecosystem": "go"
},
{
"name": "github.com/gabriel-vasile/mimetype",
"direct": false,
"version": "v1.4.13",
"ecosystem": "go"
},
{
"name": "github.com/gabriel-vasile/mimetype",
"direct": false,
"version": "v1.4.3",
"ecosystem": "go"
},
{
"name": "github.com/gin-contrib/sse",
"direct": false,
"version": "v0.1.0",
"ecosystem": "go"
},
{
"name": "github.com/gin-contrib/sse",
"direct": false,
"version": "v1.1.0",
"ecosystem": "go"
},
{
"name": "github.com/go-playground/locales",
"direct": false,
"version": "v0.14.1",
"ecosystem": "go"
},
{
"name": "github.com/go-playground/universal-translator",
"direct": false,
"version": "v0.18.1",
"ecosystem": "go"
},
{
"name": "github.com/go-playground/validator/v10",
"direct": false,
"version": "v10.20.0",
"ecosystem": "go"
},
{
"name": "github.com/go-playground/validator/v10",
"direct": false,
"version": "v10.30.1",
"ecosystem": "go"
},
{
"name": "github.com/goccy/go-json",
"direct": false,
"version": "v0.10.2",
"ecosystem": "go"
},
{
"name": "github.com/goccy/go-json",
"direct": false,
"version": "v0.10.5",
"ecosystem": "go"
},
{
"name": "github.com/goccy/go-yaml",
"direct": false,
"version": "v1.19.2",
"ecosystem": "go"
},
{
"name": "github.com/google/uuid",
"direct": false,
"version": "v1.6.0",
"ecosystem": "go"
},
{
"name": "github.com/json-iterator/go",
"direct": false,
"version": "v1.1.12",
"ecosystem": "go"
},
{
"name": "github.com/klauspost/compress",
"direct": false,
"version": "v1.17.9",
"ecosystem": "go"
},
{
"name": "github.com/klauspost/compress",
"direct": false,
"version": "v1.18.4",
"ecosystem": "go"
},
{
"name": "github.com/klauspost/cpuid/v2",
"direct": false,
"version": "v2.2.7",
"ecosystem": "go"
},
{
"name": "github.com/klauspost/cpuid/v2",
"direct": false,
"version": "v2.3.0",
"ecosystem": "go"
},
{
"name": "github.com/labstack/gommon",
"direct": false,
"version": "v0.4.2",
"ecosystem": "go"
},
{
"name": "github.com/leodido/go-urn",
"direct": false,
"version": "v1.4.0",
"ecosystem": "go"
},
{
"name": "github.com/mattn/go-colorable",
"direct": false,
"version": "v0.1.13",
"ecosystem": "go"
},
{
"name": "github.com/mattn/go-colorable",
"direct": false,
"version": "v0.1.14",
"ecosystem": "go"
},
{
"name": "github.com/mattn/go-isatty",
"direct": false,
"version": "v0.0.20",
"ecosystem": "go"
},
{
"name": "github.com/mattn/go-runewidth",
"direct": false,
"version": "v0.0.16",
"ecosystem": "go"
},
{
"name": "github.com/mattn/go-runewidth",
"direct": false,
"version": "v0.0.20",
"ecosystem": "go"
},
{
"name": "github.com/modern-go/concurrent",
"direct": false,
"version": "v0.0.0-20180306012644-bacd9c7ef1dd",
"ecosystem": "go"
},
{
"name": "github.com/modern-go/reflect2",
"direct": false,
"version": "v1.0.2",
"ecosystem": "go"
},
{
"name": "github.com/pelletier/go-toml/v2",
"direct": false,
"version": "v2.2.2",
"ecosystem": "go"
},
{
"name": "github.com/pelletier/go-toml/v2",
"direct": false,
"version": "v2.2.4",
"ecosystem": "go"
},
{
"name": "github.com/pmezard/go-difflib",
"direct": false,
"version": "v1.0.0",
"ecosystem": "go"
},
{
"name": "github.com/quic-go/qpack",
"direct": false,
"version": "v0.6.0",
"ecosystem": "go"
},
{
"name": "github.com/quic-go/quic-go",
"direct": false,
"version": "v0.59.0",
"ecosystem": "go"
},
{
"name": "github.com/rivo/uniseg",
"direct": false,
"version": "v0.2.0",
"ecosystem": "go"
},
{
"name": "github.com/samber/do/v2",
"direct": false,
"version": "v2.0.0",
"ecosystem": "go"
},
{
"name": "github.com/samber/go-type-to-string",
"direct": false,
"version": "v1.8.0",
"ecosystem": "go"
},
{
"name": "github.com/twitchyliquid64/golang-asm",
"direct": false,
"version": "v0.15.1",
"ecosystem": "go"
},
{
"name": "github.com/ugorji/go/codec",
"direct": false,
"version": "v1.2.12",
"ecosystem": "go"
},
{
"name": "github.com/ugorji/go/codec",
"direct": false,
"version": "v1.3.1",
"ecosystem": "go"
},
{
"name": "github.com/valyala/bytebufferpool",
"direct": false,
"version": "v1.0.0",
"ecosystem": "go"
},
{
"name": "github.com/valyala/fasthttp",
"direct": false,
"version": "v1.51.0",
"ecosystem": "go"
},
{
"name": "github.com/valyala/fasthttp",
"direct": false,
"version": "v1.69.0",
"ecosystem": "go"
},
{
"name": "github.com/valyala/fasttemplate",
"direct": false,
"version": "v1.2.2",
"ecosystem": "go"
},
{
"name": "github.com/valyala/tcplisten",
"direct": false,
"version": "v1.0.0",
"ecosystem": "go"
},
{
"name": "go.uber.org/dig",
"direct": false,
"version": "v1.19.0",
"ecosystem": "go"
},
{
"name": "golang.org/x/arch",
"direct": false,
"version": "v0.24.0",
"ecosystem": "go"
},
{
"name": "golang.org/x/arch",
"direct": false,
"version": "v0.8.0",
"ecosystem": "go"
},
{
"name": "golang.org/x/crypto",
"direct": false,
"version": "v0.23.0",
"ecosystem": "go"
},
{
"name": "golang.org/x/crypto",
"direct": false,
"version": "v0.31.0",
"ecosystem": "go"
},
{
"name": "golang.org/x/crypto",
"direct": false,
"version": "v0.54.0",
"ecosystem": "go"
},
{
"name": "golang.org/x/net",
"direct": false,
"version": "v0.25.0",
"ecosystem": "go"
},
{
"name": "golang.org/x/net",
"direct": false,
"version": "v0.33.0",
"ecosystem": "go"
},
{
"name": "golang.org/x/net",
"direct": false,
"version": "v0.56.0",
"ecosystem": "go"
},
{
"name": "golang.org/x/sys",
"direct": false,
"version": "v0.20.0",
"ecosystem": "go"
},
{
"name": "golang.org/x/sys",
"direct": false,
"version": "v0.28.0",
"ecosystem": "go"
},
{
"name": "golang.org/x/sys",
"direct": false,
"version": "v0.47.0",
"ecosystem": "go"
},
{
"name": "golang.org/x/text",
"direct": false,
"version": "v0.15.0",
"ecosystem": "go"
},
{
"name": "golang.org/x/text",
"direct": false,
"version": "v0.21.0",
"ecosystem": "go"
},
{
"name": "golang.org/x/text",
"direct": false,
"version": "v0.40.0",
"ecosystem": "go"
},
{
"name": "google.golang.org/protobuf",
"direct": false,
"version": "v1.34.1",
"ecosystem": "go"
},
{
"name": "google.golang.org/protobuf",
"direct": false,
"version": "v1.36.11",
"ecosystem": "go"
},
{
"name": "gopkg.in/yaml.v3",
"direct": false,
"version": "v3.0.1",
"ecosystem": "go"
},
{
"name": "babel",
"direct": false,
"version": "2.17.0",
"ecosystem": "pypi"
},
{
"name": "certifi",
"direct": false,
"version": "2025.1.31",
"ecosystem": "pypi"
},
{
"name": "chardet",
"direct": false,
"version": "5.2.0",
"ecosystem": "pypi"
},
{
"name": "commonmark",
"direct": false,
"version": "0.9.1",
"ecosystem": "pypi"
},
{
"name": "docutils",
"direct": false,
"version": "0.20.1",
"ecosystem": "pypi"
},
{
"name": "idna",
"direct": false,
"version": "3.10",
"ecosystem": "pypi"
},
{
"name": "imagesize",
"direct": false,
"version": "1.4.1",
"ecosystem": "pypi"
},
{
"name": "jinja2",
"direct": false,
"version": "3.1.6",
"ecosystem": "pypi"
},
{
"name": "markupsafe",
"direct": false,
"version": "3.0.2",
"ecosystem": "pypi"
},
{
"name": "myst-parser",
"direct": false,
"version": "3.0.1",
"ecosystem": "pypi"
},
{
"name": "packaging",
"direct": false,
"version": "25.0",
"ecosystem": "pypi"
},
{
"name": "pygments",
"direct": false,
"version": "2.19.1",
"ecosystem": "pypi"
},
{
"name": "pyparsing",
"direct": false,
"version": "3.2.3",
"ecosystem": "pypi"
},
{
"name": "pytz",
"direct": false,
"version": "2025.2",
"ecosystem": "pypi"
},
{
"name": "requests",
"direct": false,
"version": "2.32.3",
"ecosystem": "pypi"
},
{
"name": "snowballstemmer",
"direct": false,
"version": "2.2.0",
"ecosystem": "pypi"
},
{
"name": "sphinx",
"direct": false,
"version": "7.4.7",
"ecosystem": "pypi"
},
{
"name": "sphinx-copybutton",
"direct": false,
"version": "0.5.2",
"ecosystem": "pypi"
},
{
"name": "sphinx-rtd-theme",
"direct": false,
"version": "3.0.2",
"ecosystem": "pypi"
},
{
"name": "sphinxcontrib-applehelp",
"direct": false,
"version": "2.0.0",
"ecosystem": "pypi"
},
{
"name": "sphinxcontrib-devhelp",
"direct": false,
"version": "2.0.0",
"ecosystem": "pypi"
},
{
"name": "sphinxcontrib-htmlhelp",
"direct": false,
"version": "2.1.0",
"ecosystem": "pypi"
},
{
"name": "sphinxcontrib-jsmath",
"direct": false,
"version": "1.0.1",
"ecosystem": "pypi"
},
{
"name": "sphinxcontrib-qthelp",
"direct": false,
"version": "2.0.0",
"ecosystem": "pypi"
},
{
"name": "sphinxcontrib-serializinghtml",
"direct": false,
"version": "2.0.0",
"ecosystem": "pypi"
},
{
"name": "sphinxext-rediraffe",
"direct": false,
"version": "0.2.7",
"ecosystem": "pypi"
},
{
"name": "urllib3",
"direct": false,
"version": "2.4.0",
"ecosystem": "pypi"
}
],
"collected": true,
"truncated": false,
"total_count": 108,
"direct_count": 9,
"indirect_count": 99
}
},
"maintainership": {
"issues": {
"open_prs": 8,
"merged_prs": 17,
"open_issues": 0,
"closed_ratio": 1,
"closed_issues": 2,
"closed_unmerged_prs": 16
},
"bus_factor": 1,
"bot_contributors": 2,
"top_contributors": [
{
"type": "User",
"login": "junioryono",
"commits": 208,
"avatar_url": "https://avatars.githubusercontent.com/u/19849174?v=4"
}
],
"contributors_sampled": 1,
"top_contributor_share": 1
},
"quality_signals": {
"has_ci": true,
"has_tests": true,
"ci_workflows": [
"dependency-review.yml",
"pr-check.yml",
"pr-labeler.yml",
"release.yml",
"tag.yml",
"test.yml"
],
"has_docs_dir": true,
"linter_configs": [
".golangci.yml"
],
"has_editorconfig": false,
"has_linter_config": true,
"has_precommit_config": false
},
"security_signals": {
"lockfiles": [
"go.sum"
],
"scorecard": {
"checks": [
{
"name": "Binary-Artifacts",
"score": 10,
"reason": "no binaries found in the repo",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#binary-artifacts"
},
{
"name": "Branch-Protection",
"score": 8,
"reason": "branch protection is not maximal on development and all release branches",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#branch-protection"
},
{
"name": "CI-Tests",
"score": 10,
"reason": "6 out of 6 merged PRs checked by a CI test -- score normalized to 10",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#ci-tests"
},
{
"name": "CII-Best-Practices",
"score": 0,
"reason": "no effort to earn an OpenSSF best practices badge detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#cii-best-practices"
},
{
"name": "Code-Review",
"score": 0,
"reason": "Found 0/28 approved changesets -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#code-review"
},
{
"name": "Contributors",
"score": 0,
"reason": "project has 0 contributing companies or organizations -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#contributors"
},
{
"name": "Dangerous-Workflow",
"score": 10,
"reason": "no dangerous workflow patterns detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dangerous-workflow"
},
{
"name": "Dependency-Update-Tool",
"score": 10,
"reason": "update tool detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dependency-update-tool"
},
{
"name": "Fuzzing",
"score": 0,
"reason": "project is not fuzzed",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#fuzzing"
},
{
"name": "License",
"score": 10,
"reason": "license file detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#license"
},
{
"name": "Maintained",
"score": 6,
"reason": "8 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 6",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#maintained"
},
{
"name": "Packaging",
"score": null,
"reason": "packaging workflow not detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#packaging"
},
{
"name": "Pinned-Dependencies",
"score": 8,
"reason": "dependency not pinned by hash detected -- score normalized to 8",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#pinned-dependencies"
},
{
"name": "SAST",
"score": 8,
"reason": "SAST tool is not run on all commits -- score normalized to 8",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#sast"
},
{
"name": "Security-Policy",
"score": 10,
"reason": "security policy file detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#security-policy"
},
{
"name": "Signed-Releases",
"score": null,
"reason": "no releases found",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#signed-releases"
},
{
"name": "Token-Permissions",
"score": 9,
"reason": "detected GitHub workflow tokens with excessive permissions",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#token-permissions"
},
{
"name": "Vulnerabilities",
"score": 0,
"reason": "54 existing vulnerabilities detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#vulnerabilities"
}
],
"commit": "dfe475678533d3322f8033cb60f9fd3c3b89eae3",
"ran_at": "2026-07-27T03:27:00Z",
"aggregate_score": 6.5,
"scorecard_version": "v5.5.0"
},
"has_codeql_workflow": false,
"has_security_policy": true,
"has_dependabot_config": true
},
"contribution_flow": {
"collected": true,
"ci_last_run_at": "2026-07-23T04:35:43Z",
"oldest_open_prs": [
{
"number": 36,
"created_at": "2026-07-18T18:22:53Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 37,
"created_at": "2026-07-18T18:22:54Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 38,
"created_at": "2026-07-18T18:22:56Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 39,
"created_at": "2026-07-18T18:22:57Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 41,
"created_at": "2026-07-18T18:23:04Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 42,
"created_at": "2026-07-18T18:24:12Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 43,
"created_at": "2026-07-23T04:33:28Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 44,
"created_at": "2026-07-23T04:34:01Z",
"last_comment_at": null,
"last_comment_author": null
}
],
"last_merged_pr_at": "2026-07-18T16:20:17Z",
"ci_last_conclusion": "SUCCESS",
"oldest_open_issues": []
}
},
"config": {
"disabled_metrics": [],
"disabled_categories": [],
"disabled_components": {}
},
"source": {
"url": "https://github.com/junioryono/godi",
"host": "github.com",
"name": "godi",
"owner": "junioryono"
},
"metrics": {
"overall": {
"key": "overall",
"band": "moderate",
"name": "Overall health",
"note": null,
"notes": [],
"value": 68,
"inputs": {
"security": 64,
"vitality": 81,
"community": 59,
"governance": 52,
"engineering": 86
},
"components": []
},
"categories": [
{
"key": "vitality",
"band": "good",
"name": "Vitality",
"value": 81,
"weight": 0.22,
"metrics": [
{
"key": "development_activity",
"band": "moderate",
"name": "Development activity",
"note": null,
"notes": [],
"value": 68,
"inputs": {
"commits_last_year": 148,
"human_commit_share": 0.93,
"days_since_last_push": 3,
"active_weeks_last_year": 11
},
"components": [
{
"key": "push_recency",
"name": "Push recency",
"detail": "last push 3 days ago",
"points": 36,
"status": "met",
"details": [
{
"code": "push_recency",
"params": {
"days": 3
}
}
],
"max_points": 36
},
{
"key": "commit_cadence",
"name": "Commit cadence",
"detail": "11/52 weeks with commits",
"points": 7.6,
"status": "partial",
"details": [
{
"code": "commit_cadence_weeks",
"params": {
"weeks": 11
}
}
],
"max_points": 36
},
{
"key": "commit_volume",
"name": "Commit volume",
"detail": "148 commits in the last year",
"points": 18,
"status": "met",
"details": [
{
"code": "commits_last_year",
"params": {
"count": 148
}
}
],
"max_points": 18
},
{
"key": "openssf_scorecard_maintained",
"name": "OpenSSF Scorecard: Maintained",
"detail": "8 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 6",
"points": 6,
"status": "partial",
"details": [],
"max_points": 10
}
]
},
{
"key": "release_discipline",
"band": "excellent",
"name": "Release discipline",
"note": "Excluded from scoring (no data or not applicable): OpenSSF Scorecard: Signed-Releases. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"openssf_scorecard_signed_releases"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 100,
"inputs": {
"releases_count": 40,
"latest_release_tag": "v5.1.0",
"releases_from_tags": false,
"days_since_latest_release": 8,
"mean_days_between_releases": 35.2
},
"components": [
{
"key": "ships_releases",
"name": "Ships releases",
"detail": "40 releases published",
"points": 27,
"status": "met",
"details": [
{
"code": "releases_published",
"params": {
"count": 40
}
}
],
"max_points": 27
},
{
"key": "release_recency",
"name": "Release recency",
"detail": "latest release 8 days ago",
"points": 36,
"status": "met",
"details": [
{
"code": "release_recency",
"params": {
"days": 8
}
}
],
"max_points": 36
},
{
"key": "release_cadence",
"name": "Release cadence",
"detail": "a release every ~35.2 days",
"points": 27,
"status": "met",
"details": [
{
"code": "release_cadence",
"params": {
"gap": 35.2
}
}
],
"max_points": 27
},
{
"key": "openssf_scorecard_signed_releases",
"name": "OpenSSF Scorecard: Signed-Releases",
"detail": "no releases found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 10
}
]
},
{
"key": "abandonment",
"band": "excellent",
"name": "Abandonment",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"cap": null,
"state": "maintained",
"guards": [],
"signals": [],
"red_flag": false,
"multiplier_pct": 100,
"declared_reason": null,
"unverified_reason": null,
"unanswered_open_prs": null,
"unanswered_open_issues": null,
"days_since_last_merged_pr": null,
"days_since_last_human_commit": 8,
"days_since_last_human_commit_is_floor": false
},
"components": [
{
"key": "project_is_still_maintained",
"name": "Project is still maintained",
"detail": "last human commit 8 days ago",
"points": 100,
"status": "met",
"details": [
{
"code": "abandonment_maintained",
"params": {
"days": 8
}
}
],
"max_points": 100
}
]
}
],
"description": "Is the project alive — is code being written and are releases shipping?"
},
{
"key": "community",
"band": "moderate",
"name": "Community & Adoption",
"value": 59,
"weight": 0.18,
"metrics": [
{
"key": "popularity",
"band": "at_risk",
"name": "Popularity & adoption",
"note": null,
"notes": [],
"value": 30,
"inputs": {
"forks": 2,
"stars": 75,
"watchers": 2,
"growth_state": "unverified",
"growth_factor_pct": 100,
"growth_unverified_reason": "no_history"
},
"components": [
{
"key": "stars",
"name": "Stars",
"detail": "75 stars",
"points": 30.3,
"status": "partial",
"details": [
{
"code": "stars",
"params": {
"count": 75
}
}
],
"max_points": 60
},
{
"key": "forks",
"name": "Forks",
"detail": "2 forks",
"points": 0,
"status": "missed",
"details": [
{
"code": "forks",
"params": {
"count": 2
}
}
],
"max_points": 25
},
{
"key": "watchers",
"name": "Watchers",
"detail": "2 watchers",
"points": 0,
"status": "missed",
"details": [
{
"code": "watchers",
"params": {
"count": 2
}
}
],
"max_points": 15
}
]
},
{
"key": "community_health",
"band": "excellent",
"name": "Community health",
"note": null,
"notes": [],
"value": 92,
"inputs": {
"has_readme": true,
"has_license": true,
"has_contributing": true,
"has_issue_template": false,
"has_code_of_conduct": true,
"has_pull_request_template": true
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 22.5,
"status": "met",
"details": [],
"max_points": 22.5
},
{
"key": "license",
"name": "License",
"detail": "recognized license (MIT)",
"points": 22.5,
"status": "met",
"details": [
{
"code": "license_standard",
"params": {}
},
{
"code": "license_spdx",
"params": {
"spdx": "MIT"
}
}
],
"max_points": 22.5
},
{
"key": "contributing_guide",
"name": "CONTRIBUTING guide",
"detail": null,
"points": 18,
"status": "met",
"details": [],
"max_points": 18
},
{
"key": "code_of_conduct",
"name": "Code of conduct",
"detail": null,
"points": 13.5,
"status": "met",
"details": [],
"max_points": 13.5
},
{
"key": "issue_template",
"name": "Issue template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.2
},
{
"key": "pr_template",
"name": "PR template",
"detail": null,
"points": 6.3,
"status": "met",
"details": [],
"max_points": 6.3
}
]
}
],
"description": "Does the project have users, downloads, attention, and a welcoming setup for contributors?"
},
{
"key": "governance",
"band": "moderate",
"name": "Sustainability & Governance",
"value": 52,
"weight": 0.24,
"metrics": [
{
"key": "maintainer_resilience",
"band": "critical",
"name": "Maintainer resilience (bus factor)",
"note": null,
"notes": [],
"value": 10,
"inputs": {
"bus_factor": 1,
"contributors_sampled": 1,
"top_contributor_share": 1
},
"components": [
{
"key": "bus_factor",
"name": "Bus factor",
"detail": "1 contributor(s) cover half of all commits",
"points": 9,
"status": "partial",
"details": [
{
"code": "bus_factor",
"params": {
"count": 1
}
}
],
"max_points": 54
},
{
"key": "commit_distribution",
"name": "Commit distribution",
"detail": "top contributor authored 100% of commits",
"points": 0,
"status": "missed",
"details": [
{
"code": "top_contributor_share",
"params": {
"share": 100
}
}
],
"max_points": 22.5
},
{
"key": "contributor_breadth",
"name": "Contributor breadth",
"detail": "1 contributors",
"points": 1.4,
"status": "partial",
"details": [
{
"code": "contributors_sampled",
"params": {
"count": 1
}
}
],
"max_points": 13.5
},
{
"key": "openssf_scorecard_contributors",
"name": "OpenSSF Scorecard: Contributors",
"detail": "project has 0 contributing companies or organizations -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
},
{
"key": "responsiveness",
"band": "moderate",
"name": "Issue & PR responsiveness",
"note": null,
"notes": [],
"value": 66,
"inputs": {
"merged_prs": 17,
"open_issues": 0,
"closed_issues": 2,
"issue_closed_ratio": 1,
"closed_unmerged_prs": 16
},
"components": [
{
"key": "issue_resolution",
"name": "Issue resolution",
"detail": "100% of issues closed",
"points": 46.8,
"status": "met",
"details": [
{
"code": "issues_closed_share",
"params": {
"share": 100
}
}
],
"max_points": 46.75
},
{
"key": "pr_acceptance",
"name": "PR acceptance",
"detail": "17/33 decided PRs merged",
"points": 19.7,
"status": "partial",
"details": [
{
"code": "decided_prs_merged",
"params": {
"merged": 17,
"decided": 33
}
}
],
"max_points": 38.25
},
{
"key": "openssf_scorecard_code_review",
"name": "OpenSSF Scorecard: Code-Review",
"detail": "Found 0/28 approved changesets -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
}
]
},
{
"key": "stewardship",
"band": "at_risk",
"name": "Ownership & stewardship",
"note": "Excluded from scoring (no data or not applicable): Verified domain. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"verified_domain"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 49,
"inputs": {
"followers": 6,
"owner_type": "User",
"is_verified": null,
"owner_login": "junioryono",
"public_repos": 31,
"account_age_days": 3699
},
"components": [
{
"key": "ownership_backing",
"name": "Ownership backing",
"detail": "personal (user) account",
"points": 10,
"status": "partial",
"details": [
{
"code": "owner_personal",
"params": {}
}
],
"max_points": 30
},
{
"key": "verified_domain",
"name": "Verified domain",
"detail": "not applicable to user accounts",
"points": 0,
"status": "excluded",
"details": [
{
"code": "not_applicable_to_user_accounts",
"params": {}
}
],
"max_points": 20
},
{
"key": "owner_reach",
"name": "Owner reach",
"detail": "6 followers of junioryono",
"points": 6.1,
"status": "partial",
"details": [
{
"code": "owner_followers",
"params": {
"count": 6,
"login": "junioryono"
}
}
],
"max_points": 25
},
{
"key": "track_record",
"name": "Track record",
"detail": "31 public repos, account ~10 yr old",
"points": 23,
"status": "partial",
"details": [
{
"code": "public_repos",
"params": {
"count": 31
}
},
{
"code": "account_age_years",
"params": {
"years": 10
}
}
],
"max_points": 25
}
]
},
{
"key": "package_maintenance",
"band": "excellent",
"name": "Package maintenance",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"packages": [
"github.com/junioryono/godi/v5",
"github.com/junioryono/godi/chi/v5",
"github.com/junioryono/godi/gin/v5",
"github.com/junioryono/godi/echo/v5",
"github.com/junioryono/godi/http/v5",
"github.com/junioryono/godi/huma/v5",
"github.com/junioryono/godi/fiber/v5",
"github.com/junioryono/godi"
],
"ecosystems": "go",
"any_deprecated": false,
"min_days_since_publish": 8
},
"components": [
{
"key": "published_resolvable",
"name": "Published & resolvable",
"detail": "8 package(s) on go",
"points": 25,
"status": "met",
"details": [
{
"code": "packages_published",
"params": {
"count": 8,
"ecosystems": "go"
}
}
],
"max_points": 25
},
{
"key": "publish_recency",
"name": "Publish recency",
"detail": "latest publish 8 days ago",
"points": 35,
"status": "met",
"details": [
{
"code": "publish_recency",
"params": {
"days": 8
}
}
],
"max_points": 35
},
{
"key": "version_history",
"name": "Version history",
"detail": "17 published versions",
"points": 20,
"status": "met",
"details": [
{
"code": "published_versions",
"params": {
"count": 17
}
}
],
"max_points": 20
},
{
"key": "not_deprecated",
"name": "Not deprecated",
"detail": "active, not deprecated or yanked",
"points": 20,
"status": "met",
"details": [
{
"code": "package_not_deprecated",
"params": {}
}
],
"max_points": 20
}
]
}
],
"description": "Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?"
},
{
"key": "engineering",
"band": "excellent",
"name": "Engineering Quality",
"value": 86,
"weight": 0.2,
"metrics": [
{
"key": "engineering_practices",
"band": "good",
"name": "Engineering practices",
"note": null,
"notes": [],
"value": 84,
"inputs": {
"has_ci": true,
"has_tests": true,
"has_editorconfig": false,
"has_linter_config": true,
"has_precommit_config": false
},
"components": [
{
"key": "ci_workflows",
"name": "CI workflows",
"detail": "6 workflow(s)",
"points": 24,
"status": "met",
"details": [
{
"code": "ci_workflows",
"params": {
"count": 6
}
}
],
"max_points": 24
},
{
"key": "tests_present",
"name": "Tests present",
"detail": null,
"points": 24,
"status": "met",
"details": [],
"max_points": 24
},
{
"key": "linter_config",
"name": "Linter config",
"detail": ".golangci.yml",
"points": 16,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": ".golangci.yml"
}
}
],
"max_points": 16
},
{
"key": "pre_commit_hooks",
"name": "Pre-commit hooks",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 9.6
},
{
"key": "editorconfig",
"name": ".editorconfig",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 6.4
},
{
"key": "openssf_scorecard_ci_tests",
"name": "OpenSSF Scorecard: CI-Tests",
"detail": "6 out of 6 merged PRs checked by a CI test -- score normalized to 10",
"points": 20,
"status": "met",
"details": [],
"max_points": 20
}
]
},
{
"key": "documentation",
"band": "excellent",
"name": "Documentation",
"note": null,
"notes": [],
"value": 90,
"inputs": {
"topics": [],
"has_wiki": true,
"homepage": "https://godi.readthedocs.io/en/latest/",
"has_readme": true,
"has_docs_dir": true,
"has_description": true
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 30,
"status": "met",
"details": [],
"max_points": 30
},
{
"key": "documentation_directory",
"name": "Documentation directory",
"detail": null,
"points": 25,
"status": "met",
"details": [],
"max_points": 25
},
{
"key": "documentation_homepage_site",
"name": "Documentation / homepage site",
"detail": "https://godi.readthedocs.io/en/latest/",
"points": 15,
"status": "met",
"details": [],
"max_points": 15
},
{
"key": "repository_description",
"name": "Repository description",
"detail": null,
"points": 10,
"status": "met",
"details": [],
"max_points": 10
},
{
"key": "topics",
"name": "Topics",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
},
{
"key": "wiki",
"name": "Wiki",
"detail": null,
"points": 10,
"status": "met",
"details": [],
"max_points": 10
}
]
}
],
"description": "Are baseline engineering and documentation practices in place?"
},
{
"key": "security",
"band": "moderate",
"name": "Security",
"value": 64,
"weight": 0.16,
"metrics": [
{
"key": "security_posture",
"band": "moderate",
"name": "Security posture",
"note": "Excluded from scoring (no data or not applicable): Packaging, Signed-Releases. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"packaging",
"signed_releases"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 65,
"inputs": {
"source": "openssf_scorecard",
"checks_evaluated": 16,
"scorecard_version": "v5.5.0",
"checks_inconclusive": 2,
"scorecard_aggregate": 6.5
},
"components": [
{
"key": "binary_artifacts",
"name": "Binary-Artifacts",
"detail": "no binaries found in the repo",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "branch_protection",
"name": "Branch-Protection",
"detail": "branch protection is not maximal on development and all release branches",
"points": 6,
"status": "partial",
"details": [],
"max_points": 7.5
},
{
"key": "ci_tests",
"name": "CI-Tests",
"detail": "6 out of 6 merged PRs checked by a CI test -- score normalized to 10",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "cii_best_practices",
"name": "CII-Best-Practices",
"detail": "no effort to earn an OpenSSF best practices badge detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 2.5
},
{
"key": "code_review",
"name": "Code-Review",
"detail": "Found 0/28 approved changesets -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "contributors",
"name": "Contributors",
"detail": "project has 0 contributing companies or organizations -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 2.5
},
{
"key": "dangerous_workflow",
"name": "Dangerous-Workflow",
"detail": "no dangerous workflow patterns detected",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
},
{
"key": "dependency_update_tool",
"name": "Dependency-Update-Tool",
"detail": "update tool detected",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "fuzzing",
"name": "Fuzzing",
"detail": "project is not fuzzed",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "license",
"name": "License",
"detail": "license file detected",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "maintained",
"name": "Maintained",
"detail": "8 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 6",
"points": 4.5,
"status": "partial",
"details": [],
"max_points": 7.5
},
{
"key": "packaging",
"name": "Packaging",
"detail": "packaging workflow not detected",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 5
},
{
"key": "pinned_dependencies",
"name": "Pinned-Dependencies",
"detail": "dependency not pinned by hash detected -- score normalized to 8",
"points": 4,
"status": "partial",
"details": [],
"max_points": 5
},
{
"key": "sast",
"name": "SAST",
"detail": "SAST tool is not run on all commits -- score normalized to 8",
"points": 4,
"status": "partial",
"details": [],
"max_points": 5
},
{
"key": "security_policy",
"name": "Security-Policy",
"detail": "security policy file detected",
"points": 5,
"status": "met",
"details": [],
"max_points": 5
},
{
"key": "signed_releases",
"name": "Signed-Releases",
"detail": "no releases found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 7.5
},
{
"key": "token_permissions",
"name": "Token-Permissions",
"detail": "detected GitHub workflow tokens with excessive permissions",
"points": 6.8,
"status": "partial",
"details": [],
"max_points": 7.5
},
{
"key": "vulnerabilities",
"name": "Vulnerabilities",
"detail": "54 existing vulnerabilities detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
}
]
},
{
"key": "dependency_advisories",
"band": "moderate",
"name": "Dependency advisories",
"note": "Excluded from scoring (no data or not applicable): Indirect dependencies free of known advisories. Remaining weights renormalized. Matched 108 resolved dependencies against OSV. This repository publishes no package the index resolves, so the repository dependency graph was assessed instead. That graph mixes development and test pins with shipped dependencies, so only the declared runtime dependencies are scored; transitive findings are reported as context and excluded from the score. Reachability is not analyzed.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"indirect_dependencies_free_of_known_advisories"
]
}
},
{
"code": "weights_renormalized",
"params": {}
},
{
"code": "advisories_scope_repository",
"params": {
"assessed": 108
}
},
{
"code": "advisories_repo_graph_caveat",
"params": {}
},
{
"code": "advisories_reachability",
"params": {}
}
],
"value": 59,
"inputs": {
"source": "osv",
"advisories": 145,
"affected_packages": 17,
"assessed_packages": 108,
"unassessed_packages": 0,
"affected_by_severity": "critical 2, high 2, moderate 6, low 1, unknown 6",
"direct_affected_packages": 3
},
"components": [
{
"key": "direct_dependencies_free_of_known_advisories",
"name": "Direct dependencies free of known advisories",
"detail": "3 affected: github.com/gofiber/fiber/v2 v2.52.6 (high 7.7), github.com/gofiber/fiber/v2 v2.52.12 (moderate 5.3), github.com/go-chi/chi/v5 v5.2.5 (unknown)",
"points": 11.1,
"status": "partial",
"details": [
{
"code": "advisories_affected",
"params": {
"count": 3,
"packages": "github.com/gofiber/fiber/v2 v2.52.6 (high 7.7), github.com/gofiber/fiber/v2 v2.52.12 (moderate 5.3), github.com/go-chi/chi/v5 v5.2.5 (unknown)"
}
}
],
"max_points": 35
},
{
"key": "indirect_dependencies_free_of_known_advisories",
"name": "Indirect dependencies free of known advisories",
"detail": "transitive set not separable from development and test dependencies in this scope",
"points": 0,
"status": "excluded",
"details": [
{
"code": "advisories_scope_not_separable",
"params": {}
}
],
"max_points": 25
},
{
"key": "no_advisories_left_outstanding",
"name": "No advisories left outstanding",
"detail": "1 advisory-carrying package(s) unaddressed past 90 days; oldest published 430 days ago",
"points": 33.5,
"status": "partial",
"details": [
{
"code": "advisories_stale",
"params": {
"days": 90,
"count": 1,
"oldest": 430
}
}
],
"max_points": 40
}
]
},
{
"key": "malicious_dependencies",
"band": "excellent",
"name": "Malicious dependencies",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"source": "osv",
"meaning": "reported as a malicious package by the OpenSSF corpus; the remedy is removal or moving off the compromised name, never an upgrade of the same artifact. Versions the registry has since pulled are listed but not scored",
"packages": [],
"red_flag": false,
"assessed_packages": 108,
"malicious_packages": 0,
"direct_malicious_packages": 0,
"withdrawn_malicious_packages": 0,
"installable_malicious_packages": 0
},
"components": [
{
"key": "no_dependency_reported_as_a_malicious_package",
"name": "No dependency reported as a malicious package",
"detail": "no dependency is reported as a malicious package",
"points": 100,
"status": "met",
"details": [
{
"code": "no_malicious_dependencies",
"params": {}
}
],
"max_points": 100
}
]
}
],
"description": "Are visible security and supply-chain practices strong, with no malicious dependency and no unresolved high-risk jurisdiction exposure?"
},
{
"key": "ai_readiness",
"band": "moderate",
"name": "AI Readiness",
"value": 69,
"weight": 0,
"metrics": [
{
"key": "ai_agent_context",
"band": "critical",
"name": "Agent context & guidance",
"note": null,
"notes": [],
"value": 29,
"inputs": {
"has_llms_txt": false,
"legible_history_share": 0.548,
"agent_instruction_files": [],
"agent_instruction_max_bytes": null
},
"components": [
{
"key": "agent_instructions",
"name": "Agent instructions",
"detail": "no CLAUDE.md / AGENTS.md / editor rules",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_agent_instructions",
"params": {}
}
],
"max_points": 45
},
{
"key": "machine_readable_docs_llms_txt",
"name": "Machine-readable docs (llms.txt)",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
},
{
"key": "legible_commit_history",
"name": "Legible commit history",
"detail": "51 of 93 human commits state their intent (structured subject or explanatory body)",
"points": 29.2,
"status": "partial",
"details": [
{
"code": "legible_history",
"params": {
"legible": 51,
"sampled": 93
}
}
],
"max_points": 40
}
]
},
{
"key": "ai_verify_loop",
"band": "excellent",
"name": "Verify loop (build / test / typecheck)",
"note": null,
"notes": [],
"value": 98,
"inputs": {
"has_nix": false,
"has_tests": true,
"lockfiles": [
"go.sum"
],
"has_dockerfile": false,
"typed_language": true,
"bootstrap_files": [
"Makefile",
"docs/Makefile"
],
"has_devcontainer": false,
"has_linter_config": true,
"typecheck_configs": [],
"agent_commit_share": 0.25,
"toolchain_manifests": [
"benchmarks/go.mod",
"chi/go.mod",
"echo/go.mod",
"fiber/go.mod",
"gin/go.mod",
"go.mod",
"http/go.mod",
"huma/go.mod",
"integrationtests/go.mod"
],
"dependency_bot_commit_share": 0.05
},
"components": [
{
"key": "one_command_bootstrap",
"name": "One-command bootstrap",
"detail": "Makefile, docs/Makefile",
"points": 18,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "Makefile, docs/Makefile"
}
}
],
"max_points": 18
},
{
"key": "automated_tests",
"name": "Automated tests",
"detail": null,
"points": 22,
"status": "met",
"details": [],
"max_points": 22
},
{
"key": "lint_format_config",
"name": "Lint / format config",
"detail": ".golangci.yml",
"points": 11,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": ".golangci.yml"
}
}
],
"max_points": 11
},
{
"key": "static_type_checking",
"name": "Static type checking",
"detail": "Go (statically typed)",
"points": 11,
"status": "met",
"details": [
{
"code": "statically_typed_language",
"params": {
"language": "Go"
}
}
],
"max_points": 11
},
{
"key": "reproducible_environment",
"name": "Reproducible environment",
"detail": "lockfile",
"points": 10,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "lockfile"
}
}
],
"max_points": 10
},
{
"key": "demonstrated_agent_practice",
"name": "Demonstrated agent practice",
"detail": "25 of the last 100 commits agent-authored or agent-credited",
"points": 10,
"status": "met",
"details": [
{
"code": "agent_authored_commits",
"params": {
"count": 25,
"sampled": 100
}
}
],
"max_points": 10
},
{
"key": "automated_maintenance",
"name": "Automated maintenance",
"detail": "5 of the last 100 commits are automated dependency updates",
"points": 8,
"status": "met",
"details": [
{
"code": "dependency_bot_commits",
"params": {
"count": 5,
"sampled": 100
}
}
],
"max_points": 8
},
{
"key": "openssf_scorecard_pinned_dependencies",
"name": "OpenSSF Scorecard: Pinned-Dependencies",
"detail": "dependency not pinned by hash detected -- score normalized to 8",
"points": 8,
"status": "partial",
"details": [],
"max_points": 10
}
]
},
{
"key": "ai_code_legibility",
"band": "excellent",
"name": "Code legibility for models",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"primary_language": "Go",
"largest_source_bytes": 44999,
"source_files_sampled": 41,
"oversized_source_files": 0
},
"components": [
{
"key": "type_checkable_code",
"name": "Type-checkable code",
"detail": "Go (statically typed)",
"points": 45,
"status": "met",
"details": [
{
"code": "statically_typed_language",
"params": {
"language": "Go"
}
}
],
"max_points": 45
},
{
"key": "manageable_file_sizes",
"name": "Manageable file sizes",
"detail": "0/41 source files over 60KB",
"points": 55,
"status": "met",
"details": [
{
"code": "oversized_source_files",
"params": {
"kb": 60,
"sampled": 41,
"oversized": 0
}
}
],
"max_points": 55
}
]
},
{
"key": "ai_interfaces",
"band": "at_risk",
"name": "Machine-readable interfaces",
"note": null,
"notes": [],
"value": 40,
"inputs": {
"example_dirs": [
"examples"
],
"has_mcp_signal": false,
"api_schema_files": []
},
"components": [
{
"key": "api_schema_openapi_graphql_proto",
"name": "API schema (OpenAPI/GraphQL/proto)",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 40
},
{
"key": "mcp_server",
"name": "MCP server",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 20
},
{
"key": "runnable_examples",
"name": "Runnable examples",
"detail": "examples",
"points": 40,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "examples"
}
}
],
"max_points": 40
}
]
}
],
"description": "How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score."
}
],
"metrics_version": "1.13.0"
},
"warnings": [
"Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token"
],
"report_type": "repository",
"generated_at": "2026-07-27T03:27:07.923140Z",
"schema_version": "0.27.0",
"badge_url": "https://raw.githubusercontent.com/inspect-software/badges/main/v1/j/junioryono/godi.svg",
"full_name": "junioryono/godi",
"license_state": "standard",
"license_spdx": "MIT"
}Bewertungen sind Signale, keine Garantien. Sie spiegeln öffentlich sichtbare Praxis auf GitHub wider — kein Code-Audit und keine Sicherheitsgarantie.
Fehlende Daten werden ausgeschlossen und die Gewichte neu normiert, nie als null bewertet. Die Methodik ist versioniert und offen: Metriken v1.13.0, Schema v0.27.0 — vollständige Methodik · Metriken-Wiki.
Wie ein einzelnes Ergebnis im Gesamtregister steht: aggregierte Statistiken — Go.