k8stopologyawareschedwg/resource-topology-exporter erreicht einen Gesundheitsindex von 69 von 100 und liegt damit im Bereich Gut. Am stärksten schneidet es bei Vitality (78/100) ab, am schwächsten bei Community & Adoption (39/100). Zuletzt vor 9 Tagen aktualisiert. Ein einzelner Mitwirkender trägt den Großteil der jüngsten Arbeit.
69
gesamt / 100
Gut
Software-Gesundheitsindex
Metriken werden auf einer standardisierten Skala von 1–100 in gewichtete Kategorien gruppiert. Der Gesamtwert beginnt als ihr gewichtetes Mittel, kalibriert auf die Verteilung des öffentlichen Registers, sodass die Stufen Perzentilbedeutung tragen; sobald öffentliche Evidenz die Richtlinie für Hochrisikojurisdiktionen auslöst, wird die Bewertung angepasst und erhält die Obergrenze Gefährdet von 34.
69
Außergewöhnlich93-100Die Spitzengruppe des Registers (≈ obere 5 %); erfüllt im Wesentlichen alle geprüften Kriterien
Gut65-79Gesund; Lücken sind begrenzt und beherrschbar
Mittel50-64Akzeptabel mit deutlichen Lücken; Überprüfung empfohlen
Schwach35-49Wesentliche Schwächen in mehreren Bereichen
Gefährdet20-34Erhebliche Schwächen; eine Übernahme erfordert Vorsicht
Kritisch1-19Schwerwiegende Probleme (aufgegeben, nur ein Maintainer, keine Hygiene)
Bewertungsprofil
Jede Achse ist eine Kategorie. Die Form zählt mehr als der Durchschnitt — ein gesundes Projekt füllt die gesamte Fläche, während ein Profil aus Spitzen und Kratern bedeutet, dass Stärke in einer Dimension Risiken in einer anderen verdeckt.
Der gewichtete Gesamtwert 62 wird auf der veröffentlichten Indexskala auf 69 kalibriert (Register-Kalibrierung 2026-08-02).
Dieses Repository wird von einer Organisation getragen — geteilte, rechenschaftspflichtige Trägerschaft, die jeden einzelnen Maintainer überdauern kann.
Direkte Abhängigkeiten ohne bekannte Advisories — 1 betroffen: google.golang.org/grpc v1.72.2 (critical 9.1)
0/25
Indirekte Abhängigkeiten ohne bekannte Advisories — transitive Menge in diesem Bereich nicht von Entwicklungs- und Test-Abhängigkeiten trennbar
32.6/40
Keine offenen Advisories — 1 Paket(e) mit Advisory seit über 90 Tagen unbehandelt; ältestes vor 133 Tagen veröffentlicht
Verwendete Eingangsdaten
source
osv
advisories
19
affected_packages
6
assessed_packages
89
unassessed_packages
0
affected_by_severity
critical 1, high 2, moderate 1, unknown 2
direct_affected_packages
1
Von der Bewertung ausgeschlossen (keine Daten oder nicht anwendbar): Indirekte Abhängigkeiten ohne bekannte Advisories. Die verbleibenden Gewichte wurden renormalisiert. 89 aufgelöste Abhängigkeiten wurden mit OSV abgeglichen. Dieses Repository veröffentlicht kein Paket, das der Index auflöst; bewertet wurde daher der Abhängigkeitsgraph des Repositorys. Dieser Graph vermischt Entwicklungs- und Test-Pins mit ausgelieferten Abhängigkeiten, daher werden nur die deklarierten Laufzeit-Abhängigkeiten bewertet; transitive Befunde werden als Kontext ausgewiesen und fließen nicht in die Bewertung ein. Erreichbarkeit wird nicht analysiert.
Wie gut ist das Repository dafür ausgestattet, mit KI-Coding-Agenten entwickelt und gepflegt zu werden? Trägt ein bewusst kleines Gewicht (4 %): Agenten-Tooling ist ein echtes Pflegesignal, doch ein Repository ohne jedes Signal kann weiterhin 100/100 erreichen.
Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token
Weitere Details
Stern- und Fork-Verlauf 0 ★ / 15 ⇿
0Sterne
15Forks
73Releases
Wann jeder Stern und Fork hinzugefügt wurde, von GitHub erfasst und nach Tagen gruppiert. Das kumulierte Wachstum steht direkt über den täglichen Zugängen, aus denen es besteht, sodass beide gegeneinander lesbar sind: stetiger organischer Zuwachs sieht ganz anders aus als ein abrupter, kurzlebiger Ausschlag. Wo dieser Unterschied messbar ist, wird er als Wachstumsauthentizität ausgewiesen.
Major 0Minor 21Patch 52
Jeder Punkt umfasst 5 Tage.
OpenSSF Scorecard 4.6 / 10
4.6Gesamtwert
Unabhängige, werkzeugneutrale Sicherheitsbewertung durch das quelloffene OpenSSF Scorecard. Jede Prüfung honoriert eine Sicherheits-Praxis, nicht das Werkzeug eines bestimmten Anbieters. Prüfungen, die Scorecard nicht ermitteln konnte, sind mit k. A. markiert und vom Sicherheitswert ausgeschlossen (nie als null gezählt).Scorecard v5.5.0 · 2026-07-30 01:59 UTC
Vollständig aufgelöster Abhängigkeitssatz aus dem GitHub-Abhängigkeitsgraphen: 24 direkte und 65 indirekte (transitive) Pakete. Die transitive Hülle ist vollständig, wenn das Repository eine Lockfile eincheckt.
Dieses Repository veröffentlicht kein vom Index auflösbares Paket, daher wurde sein eigener Abhängigkeitsgraph bewertet – 89 Pakete, darunter auch Entwicklungs- und Test-Pins, die nie ausgeliefert werden: 6 tragen bekannte Advisories, davon 1 direkte.
Paket
Version
Beziehung
Schweregrad
Advisories
Behoben in
google.golang.org/grpc
v1.72.2
direkt
kritisch
4
1.82.1
github.com/moby/spdystream
v0.5.0
indirekt
hoch
2
0.5.1
go.opentelemetry.io/otel
v1.36.0
indirekt
hoch
2
1.41.0
golang.org/x/net
v0.47.0
indirekt
mittel
9
1.26.3
golang.org/x/sys
v0.38.0
indirekt
unbekannt
1
0.44.0
golang.org/x/text
v0.31.0
indirekt
unbekannt
1
0.39.0
Ein Advisory bedeutet, dass die im Abhängigkeitsgraphen erfasste Version in den betroffenen Bereich eines Advisories fällt. Erreichbarkeit wird nicht analysiert, und der Graph enthält Entwicklungs- und Test-Pins — ein Fund kann das Werkzeug betreffen und nicht die ausgelieferte Software.
JSON-Rohbericht maschinenlesbar
{
"data": {
"repo": {
"topics": [],
"is_fork": false,
"size_kb": 44233,
"has_wiki": true,
"homepage": null,
"languages": {
"C": 96,
"Go": 412219,
"Shell": 3619,
"Makefile": 4833,
"Dockerfile": 945
},
"pushed_at": "2026-07-20T14:05:38Z",
"created_at": "2020-12-07T12:49:58Z",
"owner_type": "Organization",
"updated_at": "2026-07-20T14:03:37Z",
"description": "Resource Topology exporter for Topology Aware Scheduler",
"is_archived": false,
"is_disabled": false,
"license_spdx": "Apache-2.0",
"default_branch": "main",
"license_spdx_raw": "Apache-2.0",
"primary_language": "Go",
"significant_languages": [
"Go"
]
},
"owner": {
"blog": null,
"name": null,
"type": "Organization",
"login": "k8stopologyawareschedwg",
"company": null,
"location": null,
"followers": 13,
"avatar_url": "https://avatars.githubusercontent.com/u/75257416?v=4",
"created_at": "2020-11-30T13:14:07Z",
"is_verified": null,
"public_repos": 13,
"account_age_days": 2067
},
"license": {
"state": "standard",
"spdx_id": "Apache-2.0",
"raw_spdx": "Apache-2.0",
"file_present": true,
"scorecard_found": true,
"profile_has_license": true
},
"activity": {
"releases": [
{
"tag": "v0.25.0",
"kind": "minor",
"published_at": "2026-07-20T14:14:30Z"
},
{
"tag": "v0.24.0",
"kind": "minor",
"published_at": "2026-03-26T13:54:45Z"
},
{
"tag": "v0.21.8",
"kind": "patch",
"published_at": "2026-03-11T10:13:26Z"
},
{
"tag": "v0.20.8",
"kind": "patch",
"published_at": "2026-03-10T11:52:43Z"
},
{
"tag": "v0.23.1",
"kind": "patch",
"published_at": "2026-03-10T11:31:21Z"
},
{
"tag": "v0.23.0",
"kind": "minor",
"published_at": "2026-03-05T11:12:46Z"
},
{
"tag": "v0.22.0",
"kind": "minor",
"published_at": "2026-03-05T10:38:04Z"
},
{
"tag": "v0.20.5",
"kind": "patch",
"published_at": "2025-09-23T15:00:18Z"
},
{
"tag": "v0.21.5",
"kind": "patch",
"published_at": "2025-09-23T14:54:02Z"
},
{
"tag": "v0.21.4",
"kind": "patch",
"published_at": "2025-09-23T13:47:50Z"
},
{
"tag": "v0.21.3",
"kind": "patch",
"published_at": "2025-09-23T12:15:08Z"
},
{
"tag": "v0.21.2",
"kind": "patch",
"published_at": "2025-07-31T08:55:06Z"
},
{
"tag": "v0.19.3",
"kind": "patch",
"published_at": "2025-07-01T15:45:06Z"
},
{
"tag": "v0.21.1",
"kind": "patch",
"published_at": "2025-07-01T15:17:54Z"
},
{
"tag": "v0.20.4",
"kind": "patch",
"published_at": "2025-07-01T15:14:12Z"
},
{
"tag": "v0.15.6",
"kind": "patch",
"published_at": "2025-05-29T08:59:43Z"
},
{
"tag": "v0.21.0",
"kind": "minor",
"published_at": "2025-04-08T12:45:42Z"
},
{
"tag": "v0.14.6",
"kind": "patch",
"published_at": "2024-12-10T08:28:21Z"
},
{
"tag": "v0.20.3",
"kind": "patch",
"published_at": "2024-12-02T12:46:57Z"
},
{
"tag": "v0.20.2",
"kind": "patch",
"published_at": "2024-11-27T13:23:09Z"
},
{
"tag": "v0.20.0",
"kind": "minor",
"published_at": "2024-11-27T13:05:04Z"
},
{
"tag": "v0.19.0",
"kind": "minor",
"published_at": "2024-04-10T17:49:45Z"
},
{
"tag": "v0.15.4",
"kind": "patch",
"published_at": "2024-04-10T17:47:33Z"
},
{
"tag": "v0.16.1",
"kind": "patch",
"published_at": "2024-04-10T17:46:57Z"
},
{
"tag": "v0.18.1",
"kind": "patch",
"published_at": "2024-03-05T14:52:47Z"
},
{
"tag": "v0.18.0",
"kind": "minor",
"published_at": "2024-02-21T15:13:41Z"
},
{
"tag": "v0.17.1",
"kind": "patch",
"published_at": "2024-02-20T15:22:22Z"
},
{
"tag": "v0.17.0",
"kind": "minor",
"published_at": "2024-02-07T12:46:35Z"
},
{
"tag": "v0.15.3",
"kind": "patch",
"published_at": "2024-01-16T08:31:34Z"
},
{
"tag": "v0.16.0",
"kind": "minor",
"published_at": "2023-11-24T14:27:03Z"
},
{
"tag": "v0.11.100",
"kind": "patch",
"published_at": "2023-11-10T07:16:29Z"
},
{
"tag": "v0.12.2",
"kind": "patch",
"published_at": "2023-11-08T10:56:42Z"
},
{
"tag": "v0.11.5",
"kind": "patch",
"published_at": "2023-10-20T12:16:59Z"
},
{
"tag": "v0.14.3",
"kind": "patch",
"published_at": "2023-10-20T11:27:43Z"
},
{
"tag": "v0.15.2",
"kind": "patch",
"published_at": "2023-10-20T11:26:30Z"
},
{
"tag": "v0.15.1",
"kind": "patch",
"published_at": "2023-10-19T16:00:59Z"
},
{
"tag": "v0.15.0",
"kind": "minor",
"published_at": "2023-10-03T12:45:18Z"
},
{
"tag": "v0.14.2",
"kind": "patch",
"published_at": "2023-09-15T07:52:22Z"
},
{
"tag": "v0.14.1",
"kind": "patch",
"published_at": "2023-09-13T09:17:17Z"
},
{
"tag": "v0.14.0",
"kind": "minor",
"published_at": "2023-09-12T13:02:44Z"
},
{
"tag": "v0.13.0",
"kind": "minor",
"published_at": "2023-08-07T10:34:10Z"
},
{
"tag": "v0.12.1",
"kind": "patch",
"published_at": "2023-07-25T13:59:04Z"
},
{
"tag": "v0.12.0",
"kind": "minor",
"published_at": "2023-07-22T07:25:45Z"
},
{
"tag": "v0.11.4",
"kind": "patch",
"published_at": "2023-07-18T13:20:52Z"
},
{
"tag": "v0.11.2",
"kind": "patch",
"published_at": "2023-06-14T13:48:09Z"
},
{
"tag": "v0.11.1",
"kind": "patch",
"published_at": "2023-05-03T14:38:51Z"
},
{
"tag": "v0.11.0",
"kind": "minor",
"published_at": "2023-04-04T13:30:03Z"
},
{
"tag": "v0.10.2",
"kind": "patch",
"published_at": "2023-04-04T10:30:09Z"
},
{
"tag": "v0.10.1",
"kind": "patch",
"published_at": "2023-03-16T11:57:12Z"
},
{
"tag": "v0.10.0",
"kind": "minor",
"published_at": "2023-02-08T12:56:37Z"
},
{
"tag": "v0.9.0",
"kind": "minor",
"published_at": "2022-11-04T10:19:32Z"
},
{
"tag": "v0.8.1",
"kind": "patch",
"published_at": "2022-11-03T20:26:43Z"
},
{
"tag": "v0.7.6",
"kind": "patch",
"published_at": "2022-10-17T13:59:13Z"
},
{
"tag": "v0.7.5",
"kind": "patch",
"published_at": "2022-09-30T15:07:46Z"
},
{
"tag": "v0.7.4",
"kind": "patch",
"published_at": "2022-09-30T12:29:30Z"
},
{
"tag": "v0.7.3",
"kind": "patch",
"published_at": "2022-09-27T15:18:59Z"
},
{
"tag": "v0.7.2",
"kind": "patch",
"published_at": "2022-09-08T11:12:51Z"
},
{
"tag": "v0.7.1",
"kind": "patch",
"published_at": "2022-09-06T14:06:15Z"
},
{
"tag": "v0.6.1",
"kind": "patch",
"published_at": "2022-07-26T08:43:22Z"
},
{
"tag": "v0.6.0",
"kind": "minor",
"published_at": "2022-05-19T11:13:10Z"
},
{
"tag": "v0.5.0",
"kind": "minor",
"published_at": "2022-04-07T07:48:44Z"
},
{
"tag": "v0.4.2",
"kind": "patch",
"published_at": "2022-03-25T16:49:05Z"
},
{
"tag": "v0.4.1",
"kind": "patch",
"published_at": "2022-01-11T13:04:05Z"
},
{
"tag": "v0.4.0",
"kind": "minor",
"published_at": "2021-12-20T08:54:48Z"
},
{
"tag": "v0.3.3",
"kind": "patch",
"published_at": "2021-12-17T08:11:05Z"
},
{
"tag": "v0.3.2",
"kind": "patch",
"published_at": "2021-12-03T13:14:15Z"
},
{
"tag": "v0.3.1",
"kind": "patch",
"published_at": "2021-11-18T07:14:55Z"
},
{
"tag": "v0.3.0",
"kind": "minor",
"published_at": "2021-11-17T11:55:43Z"
},
{
"tag": "v0.2.7",
"kind": "patch",
"published_at": "2021-11-16T11:32:08Z"
},
{
"tag": "v0.2.6",
"kind": "patch",
"published_at": "2021-11-15T09:41:45Z"
},
{
"tag": "v0.2.5",
"kind": "patch",
"published_at": "2021-10-26T11:42:52Z"
},
{
"tag": "v0.2.4",
"kind": "patch",
"published_at": "2021-10-21T16:44:51Z"
},
{
"tag": "v0.2.3",
"kind": "patch",
"published_at": "2021-10-06T09:41:02Z"
},
{
"tag": "v0.2.2",
"kind": "patch",
"published_at": "2021-10-06T09:25:46Z"
},
{
"tag": "v0.2.1",
"kind": "patch",
"published_at": "2021-09-22T12:17:43Z"
},
{
"tag": "v0.2.0",
"kind": "minor",
"published_at": "2021-09-16T10:38:51Z"
},
{
"tag": "v0.1.1",
"kind": "patch",
"published_at": "2021-09-16T10:25:37Z"
},
{
"tag": "v0.1.0",
"kind": "minor",
"published_at": "2021-08-19T10:57:01Z"
}
],
"recent_commits": [
{
"oid": "31dd21e6efdf324df105407f98b0d92972f2eb50",
"body": "cleanup updates following #396",
"is_bot": false,
"headline": "Merge pull request #399 from shajmakh/followup-396",
"author_name": "Francesco Romani",
"author_login": "ffromani",
"committed_at": "2026-07-20T14:02:22Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5d704a41682009b8fdb5135733409c7b77203a8d",
"body": "Update the function to return the payload value (empty struct instead of\n`nil`) and an error. The error handling will now be delegated to\nthe caller, and having a value variabe of the payload instead of a\npointer will reduce the checks for settings NUMA-level attributes.\n\nSigned-off-by: Shereen Haj <shajmakh@redhat.com>",
"is_bot": false,
"headline": "resmon: numaplacement: return payload value and error",
"author_name": "Shereen Haj",
"author_login": "shajmakh",
"committed_at": "2026-07-20T13:51:41Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "eacb059ede6469a51d4b411803b41213132b8788",
"body": "RTE works mainly with topology manager single-numa-policy, remove the\ngeneralization of the method that checks the policy and enforce the\ncondition to check against `single-numa-node`.\naddresses: https://github.com/k8stopologyawareschedwg/resource-topology-exporter/pull/396#discussion_r3373631853\n\nSigned-off-by: Shereen Haj <shajmakh@redhat.com>",
"is_bot": false,
"headline": "resmon: enforce single-numa-node check",
"author_name": "Shereen Haj",
"author_login": "shajmakh",
"committed_at": "2026-07-20T13:51:41Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "26781d598ce8de3f0c1c7267dff010ee10f1959f",
"body": "Remove unused consts. see: https://github.com/k8stopologyawareschedwg/resource-topology-exporter/pull/396#discussion_r3379979825\n\nSigned-off-by: Shereen Haj <shajmakh@redhat.com>",
"is_bot": false,
"headline": "resmon: remove redundant consts",
"author_name": "Shereen Haj",
"author_login": "shajmakh",
"committed_at": "2026-07-20T13:51:41Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8e7154f3d208c1a8444d219f7e451d2886bea997",
"body": "resmon: improve numaplecement logs",
"is_bot": false,
"headline": "Merge pull request #401 from ffromani/numaplacement-logs",
"author_name": "Shereen Haj",
"author_login": "shajmakh",
"committed_at": "2026-07-20T13:12:40Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8db955e8657420baa2fa47030171b26120b923b8",
"body": "add log to track the containers being encoded in the\nnumaplacement data and summary information on success.\n\nSigned-off-by: Francesco Romani <fromani@redhat.com>",
"is_bot": false,
"headline": "resmon: improve numaplecement logs",
"author_name": "Francesco Romani",
"author_login": "ffromani",
"committed_at": "2026-07-20T12:55:35Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1ed022e2c58e6e1a1f1be8df02c6fef364c15e7c",
"body": "ctxlog: wire and use context the in the resourcetopologyexporter package",
"is_bot": false,
"headline": "Merge pull request #398 from ffromani/ctxlog-resmon2",
"author_name": "Francesco Romani",
"author_login": "ffromani",
"committed_at": "2026-06-11T11:27:34Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f51cbcf19085aa8800dab70a50fb0fafeaab73a5",
"body": "We can and should get the logger from the context.\nIncludes some minor resourcemonitor fixes.\n\nSigned-off-by: Francesco Romani <fromani@redhat.com>",
"is_bot": false,
"headline": "ctxlog: wire and use context the in the resourcetopologyexporter package",
"author_name": "Francesco Romani",
"author_login": "ffromani",
"committed_at": "2026-06-11T10:46:29Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "390015efa289775aa656fec09ad64c803fdab68a",
"body": "config: narrow down dump-config options",
"is_bot": false,
"headline": "Merge pull request #367 from ffromani/simplify-dump-config",
"author_name": "Francesco Romani",
"author_login": "ffromani",
"committed_at": "2026-06-11T06:40:05Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c78c46fd00f2d02ea53d48d304c5565ef8699a43",
"body": "config: ux/devex improvements",
"is_bot": false,
"headline": "Merge pull request #395 from ffromani/config-pkg-improvements",
"author_name": "Shereen Haj",
"author_login": "shajmakh",
"committed_at": "2026-06-11T06:39:25Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ab639b3bf87faffe2c194b28aa7e82284cfa9838",
"body": "ctxlog: port ResourceMonitor to contextual logging",
"is_bot": false,
"headline": "Merge pull request #397 from ffromani/ctxlog-resmon",
"author_name": "Francesco Romani",
"author_login": "ffromani",
"committed_at": "2026-06-11T06:38:54Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4f3b540b0110f6865e393700bbe92329b0e3986c",
"body": "env vars used to be silently overridden if the base\nvalue was already set. This was intended but can turn\ninto a head-scratcher. The code now logs (at V=4) which\nenv overrides are actually applied, which improves\nvisibility at a very fair (and tiny) cost.\n\nSigned-off-by: Francesco Romani <fromani@redhat.com>",
"is_bot": false,
"headline": "config: environ: log environ overrides",
"author_name": "Francesco Romani",
"author_login": "ffromani",
"committed_at": "2026-06-10T11:59:44Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "aee3d8fd0f4f38c7c09027b707a9fbb7ac3a436c",
"body": "Validate() used to Canonicalize() and then Validate(),\nwhich is confusing and wrong - validation should be a read-only\noperation.\nSplit the steps cleanly.\n\nSigned-off-by: Francesco Romani <fromani@redhat.com>",
"is_bot": false,
"headline": "config: validate: split canonicalization from validation",
"author_name": "Francesco Romani",
"author_login": "ffromani",
"committed_at": "2026-06-10T11:55:32Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a79518a06bb0fc398079ae9363ccbaf5fa8f56f4",
"body": "use constant vs hardcode the value. Better to do the former.\n\nSigned-off-by: Francesco Romani <fromani@redhat.com>",
"is_bot": false,
"headline": "config: actually use constant",
"author_name": "Francesco Romani",
"author_login": "ffromani",
"committed_at": "2026-06-10T11:55:32Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "afa3a7ad4351b4dc58cdfaa89a7319aac34e3929",
"body": "make the comment reflect reality.\n\nSigned-off-by: Francesco Romani <fromani@redhat.com>",
"is_bot": false,
"headline": "config: cfgfile: fix comment",
"author_name": "Francesco Romani",
"author_login": "ffromani",
"committed_at": "2026-06-10T11:55:32Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8fbc244bf46efd3cb3c896fe8888385d753d3e5b",
"body": "just dead code from the initial write which somehow survived till today.\n\nSigned-off-by: Francesco Romani <fromani@redhat.com>",
"is_bot": false,
"headline": "config: drop unused constant",
"author_name": "Francesco Romani",
"author_login": "ffromani",
"committed_at": "2026-06-10T11:55:32Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "be1b8c963dbedc0acbb8c8b678e75b2291ffe2a0",
"body": "make sure to pass a context top-down from the\nentry point (cmd/...), pass through the call chain\nand consume the context checking for cancellation.\n\nSigned-off-by: Francesco Romani <fromani@redhat.com>",
"is_bot": false,
"headline": "resexp: wire and tread down context",
"author_name": "Francesco Romani",
"author_login": "ffromani",
"committed_at": "2026-06-10T11:51:38Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "67972902cc834c65fd5719484fb07b69f7bbfe8a",
"body": "Lift up in the caller the creation of ResourceMonitor\nand pass the created instance to ResouceObserver.\n\nThis enables cleaner context handling, and in general\nNew*() functions should only initialize object avoiding\ncostly, complex, possibly blocking (context-requiring)\noperations.\n\nSigned-off-by: Francesco Romani <fromani@redhat.com>",
"is_bot": false,
"headline": "resexp: decouple ResourceMonitor from NewResourceObserver",
"author_name": "Francesco Romani",
"author_login": "ffromani",
"committed_at": "2026-06-10T11:49:23Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2a40531a90fd259119bf7c26b162d7b5fd9c55df",
"body": "Log which podresource items are rejected, not which one are filtered in\n- the latter is logged using the existing helpers.\nThanks to contextual logging, we have now an easy way to correlate the\nentries.\n\nSigned-off-by: Francesco Romani <fromani@redhat.com>",
"is_bot": false,
"headline": "resmon: streamline NUMA unsuitability logs",
"author_name": "Francesco Romani",
"author_login": "ffromani",
"committed_at": "2026-06-09T12:47:02Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "97195e3f1a249ccc311dbfd54ff355916edc2647",
"body": "begin the migration to contextual logging from the\nresourcemonitor package. We will keep iterating over time.\n\nWe plan to keep `klog` as backend, but the application\ncode should operate with `go-logr.Logger` instances,\nand don't call `klog` directly anymore.\n\nSigned-off-by: Francesco Romani <fromani@redhat.com>",
"is_bot": false,
"headline": "resmon: port to contextual logging",
"author_name": "Francesco Romani",
"author_login": "ffromani",
"committed_at": "2026-06-09T12:47:02Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "388a69daee00179a802afc882e9e8986bedbce35",
"body": "The resoucemonitor main functions should take and use\na context vs create it internally, adhering to longstanding\nkubernetes best practices.\n\nFurthermore, besides general sanity best practice, this\nwill create a better base to wire in the contextual logging.\n\nAI-attribution: AIA PAI Ce Hin R claude-4.6-opus-1M v1.0\nSigned-off-by: Francesco Romani <fromani@redhat.com>",
"is_bot": false,
"headline": "resmon: wire context in",
"author_name": "Francesco Romani",
"author_login": "ffromani",
"committed_at": "2026-06-09T12:47:02Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6a289d79e84a8014d349cd22b9e6eaeda108fbf5",
"body": "In preparation of context wiring, make sure the NewResourceManager\nfunction only does non-blocking (or at least non context-requiring)\noperation and only initializes the object.\n\nAI-attribution: AIA PAI Ce Hin R claude-4.6-opus-1M v1.0\nSigned-off-by: Francesco Romani <fromani@redhat.com>",
"is_bot": false,
"headline": "resmon: split Setup() from NewResourceManager",
"author_name": "Francesco Romani",
"author_login": "ffromani",
"committed_at": "2026-06-09T12:46:59Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6822572fdbd77824ab8a19d98359c46313045f74",
"body": "resmon: encode containers' numa placements as attributes",
"is_bot": false,
"headline": "Merge pull request #396 from shajmakh/np-att-and-scan-flow-fix",
"author_name": "Francesco Romani",
"author_login": "ffromani",
"committed_at": "2026-06-09T11:03:55Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1a233994ae6164af8e0a5984b1864c21ce0c5995",
"body": "`Required` is an old API, the alternative is `Verify()`.\n\nSigned-off-by: Shereen Haj <shajmakh@redhat.com>",
"is_bot": false,
"headline": "pkg: remove deprecated `Required` filter func",
"author_name": "Shereen Haj",
"author_login": "shajmakh",
"committed_at": "2026-06-09T09:44:05Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "08308755096daa2a7321bc0affefe2520c2a358e",
"body": "Filter NUMA-eligible pods once up front, use raw podresources for device\naccounting and MethodAll fingerprinting, and align PFP verification with\nthe podres filter stack.\n\nSigned-off-by: Shereen Haj <shajmakh@redhat.com>",
"is_bot": false,
"headline": "resmon: fix Scan podresources and PFP flow",
"author_name": "Shereen Haj",
"author_login": "shajmakh",
"committed_at": "2026-06-09T09:44:05Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a5e0aba041694042a562bc26cd3a71ff213fa18c",
"body": "Add test coverage to the new code that is in charge of publishing the\nnumaplacement attributes.\nConsidering the limited automation and setup to affine containers to\nspecific NUMAs, testing NUMA zones' vector is done as best effort in\nthis project to cover only the basic cases.\n\nSigned-off-by: Shereen Haj <shajmakh@redhat.com>",
"is_bot": false,
"headline": "e2e: cover container NUMA locality attribute",
"author_name": "Shereen Haj",
"author_login": "shajmakh",
"committed_at": "2026-06-09T09:44:05Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e5d6b6796a02ba4c582644b47f41dcc64ad9ba09",
"body": "Move NUMA placement encoding into a dedicated helper and report metadata\nas unsupported, error occurred, or packed payload when PFP is enabled.\n\nSigned-off-by: Shereen Haj <shajmakh@redhat.com>",
"is_bot": false,
"headline": "resmon: extract ComputeNUMAPlacementPayload",
"author_name": "Shereen Haj",
"author_login": "shajmakh",
"committed_at": "2026-06-09T09:44:05Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9a085698e026823512c1a7deb39e7260ccf1d765",
"body": "RTE entry point has access to podresourcesAPI from which we can gather\ndata about specific NUMA placement for containers. Scan() already\nprocess the numa eligible pod resources but stops at the first\ncontainer. The new feature we desire to enable is to encode every\nnuma-eligible container and publis\n[…]\nattributes is safe and relaible.\n\nThis commit inlines the new feature implementation to allow as much as\npossible clear view of the new pipeline step.\n\nSigned-off-by: Shereen Haj <shajmakh@redhat.com>",
"is_bot": false,
"headline": "remon: publish numaplacement attributes",
"author_name": "Shereen Haj",
"author_login": "shajmakh",
"committed_at": "2026-06-09T09:44:05Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "46f5f9442447260c8267eba7c35a5856f2543dfa",
"body": "The function collects the NUMA IDs of a passed TopologyInfo object.\nThis is preliminary to checking single NUMA node affinity.\nReplace `IsPresent` with inlined calls of `GetNUMAIDs`.\n\nSigned-off-by: Shereen Haj <shajmakh@redhat.com>",
"is_bot": false,
"headline": "numalocality lib: introduce GetNUMAIDs() helper",
"author_name": "Shereen Haj",
"author_login": "shajmakh",
"committed_at": "2026-06-09T09:44:05Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7b5ea57e546a28f94b928e760cdef92001260e94",
"body": "Preliminary to computing the containers' NUMA placement, we need to\nensure that the RTE is working with single-numa-node policy before\nanything.\n\nSigned-off-by: Shereen Haj <shajmakh@redhat.com>",
"is_bot": false,
"headline": "resmon: store topology manager info",
"author_name": "Shereen Haj",
"author_login": "shajmakh",
"committed_at": "2026-06-09T09:44:05Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "edac75c23e7a2cb374fd8d549d6450386c8d53f8",
"body": "config: prefer config files over command line flags",
"is_bot": false,
"headline": "Merge pull request #393 from ffromani/flags-to-config",
"author_name": "Francesco Romani",
"author_login": "ffromani",
"committed_at": "2026-04-29T06:04:12Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "799e3a411738d8df65f47e8d68d7820e02d10bbf",
"body": "Don't use hardcoded value, similarly to what we do for the PFP tests.\nThis change is meant to make the test less flaky and to bring\nconsistency, in this order.\n\nSigned-off-by: Francesco Romani <fromani@redhat.com>",
"is_bot": false,
"headline": "e2e: rte: compute timeout from poll interval",
"author_name": "Francesco Romani",
"author_login": "ffromani",
"committed_at": "2026-04-28T16:19:57Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e894c05383f0eaeab49d8fca47f6ad20448b1d3c",
"body": "consistently use the `Eventually(g Gomega)` in the e2e\ntests. This was meant as behavior-preserving changes\nbut we actually fix some issues in the tests where\ntests where using plain Expect()s in the Eventually() bodies.\n\nSigned-off-by: Francesco Romani <fromani@redhat.com>",
"is_bot": false,
"headline": "e2e: use Eventually(g Gomega)",
"author_name": "Francesco Romani",
"author_login": "ffromani",
"committed_at": "2026-04-28T15:52:35Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2ba175fc3c8f588de047da5cd51fcce6db6f4610",
"body": "When RTE starts, its very first period annotation will be 0s.\nIf the e2e test code catches this, it will miscalculate the wait time\nin such a way it will overlap with the period.\n\nShould the annotation report 0s, we need to fall back to the estimated\nvalue rather than trust the estimated value.\n\nAdd logs to make it this occurrence more easy to spot: it took\nmany years and some AI help to figure out this one.\n\nSigned-off-by: Francesco Romani <fromani@redhat.com>",
"is_bot": false,
"headline": "e2e: handle 0s notification annotation",
"author_name": "Francesco Romani",
"author_login": "ffromani",
"committed_at": "2026-04-28T08:18:15Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4035462c02507da6f96520b76cc79b9b2eff53e0",
"body": "we have a notification file test which wants to\ntrigger reactive (vs periodic) updates touching\nthe notification file. The previous test was\nwell intentioned, but it was complex and racy,\nand we had flakes in CI which can be traced\ndown, albeit inconclusively, to this raciness.\n\nRewrite the test to \n[…]\ns before.\n\nWe can't guarantee this would deflake the test,\nbut the readability improvements are concrete,\nand the spirit of the test is preserved.\n\nSigned-off-by: Francesco Romani <fromani@redhat.com>",
"is_bot": false,
"headline": "e2e: rewrite the notification file test",
"author_name": "Francesco Romani",
"author_login": "ffromani",
"committed_at": "2026-04-28T08:18:15Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "43b819d2d185aaf4d3dfde5fbe630543e788a24d",
"body": "the e2e tests must deal with the fact the\npreferred config vehicle is the config file (from configmaps)\nand no longer the commandline args.\n\nCommandline args were easier to access, so we need some more\nutility code to handle the config.\n\nSigned-off-by: Francesco Romani <fromani@redhat.com>",
"is_bot": false,
"headline": "e2e: fix tests to consume config",
"author_name": "Francesco Romani",
"author_login": "ffromani",
"committed_at": "2026-04-28T08:18:15Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "351d94467724c43eabbd16706f3f8979f8bb3063",
"body": "fix a typo which caused a silent propagation failure\nof the value.\n\nSigned-off-by: Francesco Romani <fromani@redhat.com>",
"is_bot": false,
"headline": "config: dispatch: fix typo",
"author_name": "Francesco Romani",
"author_login": "ffromani",
"committed_at": "2026-04-28T08:18:15Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "98d0836732b36a0e1507ea38ba3ea92a3d4bd6fb",
"body": "Even though they will still be fully supported\nfor the foreseeable future, we should use configfiles\nas default config mechanism.\n\nUpdate the example configuration.\nThis move highlighted some gaps in the config flags/file\nmapping, which are fixed in the same commit.\n\nSigned-off-by: Francesco Romani <fromani@redhat.com>",
"is_bot": false,
"headline": "config: move away from flags, use configfile",
"author_name": "Francesco Romani",
"author_login": "ffromani",
"committed_at": "2026-04-23T09:42:27Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ef567ef3f9fb8059ea474ef91fbff37674c44a68",
"body": "introduce patch support to optimize nrt update",
"is_bot": false,
"headline": "Merge pull request #392 from ffromani/optimize-nrt-update",
"author_name": "Francesco Romani",
"author_login": "ffromani",
"committed_at": "2026-04-23T09:40:56Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "250d740740c84ab6a6c65714e3e2c524f36fe998",
"body": "enable the patch mode by default.\nWe also enable the patch resync to be safe.\n\nThe enablement is intentionally done into a separate commit\nto make a possible backport easier.\n\nSigned-off-by: Francesco Romani <fromani@redhat.com>",
"is_bot": false,
"headline": "patch: enable by default",
"author_name": "Francesco Romani",
"author_login": "ffromani",
"committed_at": "2026-04-23T09:34:04Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1b21cc4379c3378214e5f1d99678092ade8df3b2",
"body": "create a new e2e lane to exercise the patch mode.\nno changes needed on e2e tests proper.\n\nSigned-off-by: Francesco Romani <fromani@redhat.com>",
"is_bot": false,
"headline": "ci: ghactions: e2e: wire up a patch-mode lane",
"author_name": "Francesco Romani",
"author_login": "ffromani",
"committed_at": "2026-04-23T09:34:04Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9c285fa7209c0cb806fd722f6c76c54c1874b068",
"body": "add patch mode permissions and configuration\n\nSigned-off-by: Francesco Romani <fromani@redhat.com>",
"is_bot": false,
"headline": "rbac: manifests: add patch mode permissions",
"author_name": "Francesco Romani",
"author_login": "ffromani",
"committed_at": "2026-04-23T09:34:04Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "51223b18562455a6f3ab18363dbe499c9e5ddd7e",
"body": "to handle the we-dont-know-yet-how-likely case of RTE\ndrift which is detectable by metrics, we add an option\nto force a get+update resync every N patch updates.\n\nBy default we never resync.\n\nSigned-off-by: Francesco Romani <fromani@redhat.com>",
"is_bot": false,
"headline": "nrtupdater: patch: add option to force get+update resync",
"author_name": "Francesco Romani",
"author_login": "ffromani",
"committed_at": "2026-04-23T09:34:04Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f99453e6cb49cd58527c0a0596785ae981156dc4",
"body": "Using patch saves 1 API call at steady state (2->1, 50% saving)\nwith a clear fallback to the old more API intense\nbut proven-safe update path.\n\nThe traffic on the wire is a different story though:\n\n* GET + UPDATE flow (`sendObjectUpdate`)\n- GET request (client -> server) ~negligible (object name onl\n[…]\nl NRT object (as stored)\n-> Total: 1x full object + delta best case, 2x full object worst case\n\nSo the wire traffic saving ranges from 33% to 66%.\n\nSigned-off-by: Francesco Romani <fromani@redhat.com>",
"is_bot": false,
"headline": "nrtupdater: patch support",
"author_name": "Francesco Romani",
"author_login": "ffromani",
"committed_at": "2026-04-23T09:34:04Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "d1c601110bf52e591a82e94a523a15de856dc571",
"body": "internal refactoring and preparation to support\nsending data as patches, not only as updates.\n\nUsing patch mode saves 1 API call (2->1) at steady state\nso it's worth having this option and we should make\nit default once sufficient testing happened.\n\nAPI change: require a Context argument in public APIs,\nbut this was long due anyway and aligns with kube best practices.\n\nSigned-off-by: Francesco Romani <fromani@redhat.com>",
"is_bot": false,
"headline": "nrtupdate: refactor and prepare for patch mode support",
"author_name": "Francesco Romani",
"author_login": "ffromani",
"committed_at": "2026-04-23T09:34:04Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "85708660e91e0af6b13e66656633552d80a3b9d2",
"body": "podreadiness: optimize condition injection",
"is_bot": false,
"headline": "Merge pull request #391 from ffromani/optimize-condinj",
"author_name": "Francesco Romani",
"author_login": "ffromani",
"committed_at": "2026-04-20T13:58:47Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7f10eda9bf18c2e7ae72fe3db2b64375e1aed3c2",
"body": "previously, the code was attempting to update the status\neach update loop. If the condition didn't change, this still\ncaused 2 unnecessary GET to the apiserver, per node.\n\nWe cache the latest conditions set and we actually attempt\nan update iff anything changed. This is meant to preserve\nthe condition update but saves 2 GETs each cycle at steady state.\n\nSigned-off-by: Francesco Romani <fromani@redhat.com>",
"is_bot": false,
"headline": "podreadiness: optimize condition injector",
"author_name": "Francesco Romani",
"author_login": "ffromani",
"committed_at": "2026-04-20T12:30:58Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2ddc27e13b573ce2d129e7d304bb529c330b411e",
"body": "prep work for conditioninjection caching, which would\nsave us 2 API calls at steady state.\nBoth changes are intertwined, but they are simple enough:\n1. take explicit context in the API-calling function\n2. make the goroutine call explicit in the call site,\n not hidden in the package. This makes the concurrency\n model more explicit and controllable with no real\n package isolation regression.\n\nSigned-off-by: Francesco Romani <fromani@redhat.com>",
"is_bot": false,
"headline": "podreadiness: require context, make goroutine explicit",
"author_name": "Francesco Romani",
"author_login": "ffromani",
"committed_at": "2026-04-20T10:24:59Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d9828649e1dce5e558a211b99d7c35a11c75fd4d",
"body": "deps: bump to kube 0.35.z",
"is_bot": false,
"headline": "Merge pull request #389 from ffromani/bump-kube-1.35",
"author_name": "Francesco Romani",
"author_login": "ffromani",
"committed_at": "2026-03-26T13:44:54Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "505c5475746c90459791d14a65954896cc53bf70",
"body": "includes transitive dependencies like controller-runtime,\nwhich was previously misaligned.\n\nSigned-off-by: Francesco Romani <fromani@redhat.com>",
"is_bot": false,
"headline": "deps: bump to kube 0.35.z",
"author_name": "Francesco Romani",
"author_login": "ffromani",
"committed_at": "2026-03-26T12:45:08Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b1ae87c8617e51f1b617b11af7a64c2f6b963ee4",
"body": "toolchain: bump to golang 1.25",
"is_bot": false,
"headline": "Merge pull request #388 from ffromani/bump-golang-1.25",
"author_name": "Francesco Romani",
"author_login": "ffromani",
"committed_at": "2026-03-26T12:18:28Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5b1ff883984a94743db80fd993d09bd09b8e4245",
"body": "metrics: tls: add TLS min version and cipher suite flags for httptls",
"is_bot": false,
"headline": "Merge pull request #387 from swatisehgal/tls-compliance",
"author_name": "Francesco Romani",
"author_login": "ffromani",
"committed_at": "2026-03-26T12:18:10Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3b7b7d23d36a74acf1120f7c7f69152114fd47f4",
"body": "Expose cluster-aligned TLS policy for the HTTPS metrics listener.\nNew flags --metrics-tls-min-version and\n--metrics-tls-cipher-suites (and topologyExporter.metricsTLS.* in config)\nuse k8s.io/component-base/cli/flag parsing.\n\nSigned-off-by: Swati Sehgal <swsehgal@redhat.com>",
"is_bot": false,
"headline": "metrics: tls: add TLS min version and cipher suite flags for httptls",
"author_name": "Swati Sehgal",
"author_login": "swatisehgal",
"committed_at": "2026-03-26T11:31:34Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4555f57c2f773708262cc1ee697c2f9c52818a34",
"body": "Update in preparation to kubernetes bump\n\nSigned-off-by: Francesco Romani <fromani@redhat.com>",
"is_bot": false,
"headline": "toolchain: bump to golang 1.25",
"author_name": "Francesco Romani",
"author_login": "ffromani",
"committed_at": "2026-03-25T16:37:20Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "310572fccf0b82f038a6aed46b460b5a90781d2a",
"body": "config: replace flag with `PFP_STATUS_FILE` env var",
"is_bot": false,
"headline": "Merge pull request #366 from shajmakh/replace-flag-with-envvar",
"author_name": "Francesco Romani",
"author_login": "ffromani",
"committed_at": "2026-03-10T07:59:59Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7a7110d3962ba45d884b4ef1d662721e2e1523e3",
"body": "ci: release: build main binary",
"is_bot": false,
"headline": "Merge pull request #382 from ffromani/fix-e2e-release",
"author_name": "Francesco Romani",
"author_login": "ffromani",
"committed_at": "2026-03-10T07:32:03Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "10026dbad9d2ce9a7c37957152acf8d9d2a84048",
"body": "needed by rte-local tests which are part of the release validation set.\n\nSigned-off-by: Francesco Romani <fromani@redhat.com>",
"is_bot": false,
"headline": "ci: release: build main binary",
"author_name": "Francesco Romani",
"author_login": "ffromani",
"committed_at": "2026-03-09T14:01:41Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a2ab03ae55a84f4499b46e05f2d7122ff075dcbb",
"body": "Exportloopref linter",
"is_bot": false,
"headline": "Merge pull request #381 from AutuSnow/exportloopref_linter",
"author_name": "Francesco Romani",
"author_login": "ffromani",
"committed_at": "2026-03-09T13:16:57Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5c15c8f23f6ff3dd6eaa48fae1b571657abbd913",
"body": "…linter is no longer meaningful",
"is_bot": false,
"headline": "clean(exportloopref):Go 1.22+fixed loop variable capture issue, this …",
"author_name": "qiuxue",
"author_login": "AutuSnow",
"committed_at": "2026-03-09T09:13:00Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "74611da54a9fadcdc116e34260c158e1b867e9fb",
"body": "Switch to containerized builds, and add minimal self-contained pause entrypoint",
"is_bot": false,
"headline": "Merge pull request #375 from ffromani/add-pause-entrypoint",
"author_name": "Francesco Romani",
"author_login": "ffromani",
"committed_at": "2026-03-05T16:05:31Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b10ffc14eede3b3c633b33bb24a0cc007e88a4ee",
"body": "because the Make target now, more correctyl, only depends on tools,\nwe need to explicitly build the main binary.\n\nSigned-off-by: Francesco Romani <fromani@redhat.com>",
"is_bot": false,
"headline": "ci: gh action: build main binary explicitly",
"author_name": "Francesco Romani",
"author_login": "ffromani",
"committed_at": "2026-03-05T13:28:08Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "10d84d0afc72e35cacbcf36ef9339c763c8dae40",
"body": "this avoid the need to depend on external images\n\nSigned-off-by: Francesco Romani <fromani@redhat.com>",
"is_bot": false,
"headline": "image: add minimal pause replacement",
"author_name": "Francesco Romani",
"author_login": "ffromani",
"committed_at": "2026-03-05T13:19:45Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d6d9583c5c0f55ba2756ef0cd07f99fa2f6a67a9",
"body": "improves reproducibility with no real downside. Long needed.\n\nSigned-off-by: Francesco Romani <fromani@redhat.com>",
"is_bot": false,
"headline": "image: use dockerized build",
"author_name": "Francesco Romani",
"author_login": "ffromani",
"committed_at": "2026-03-05T12:29:05Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c3d093dc4c3ab0000facdfb5f4414671a793eaa8",
"body": "deps: bump k8s.io to v0.34.2 and fix podresources gRPC server",
"is_bot": false,
"headline": "Merge pull request #371 from swatisehgal/k8s-deps-bump",
"author_name": "Francesco Romani",
"author_login": "ffromani",
"committed_at": "2026-03-05T11:05:38Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2e46030a78309fdf8e3868908d0bc43ae5c3da79",
"body": "- Use protocmp.Transform() in tests when comparing podresources proto\n types so cmp.Diff/cmp.Equal do not panic on unexported fields.\n- Use constant format in resourcemonitor klog.Infof for linter.\n\nSigned-off-by: Swati Sehgal <swsehgal@redhat.com>",
"is_bot": false,
"headline": "tests: fix tests for proto comparisons",
"author_name": "Swati Sehgal",
"author_login": "swatisehgal",
"committed_at": "2026-03-05T10:47:03Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1ecdf1518efbcd4171c65a8b4a8aa62f86a2dee8",
"body": "- Update k8s.io dependencies to v0.34.2\n- Embed `UnimplementedPodResourcesListerServer` in Proxy to satisfy\n v1.PodResourcesListerServer interface\n\nSigned-off-by: Swati Sehgal <swsehgal@redhat.com>",
"is_bot": false,
"headline": "deps: bump k8s.io to v0.34.2 and fix podresources gRPC server",
"author_name": "Swati Sehgal",
"author_login": "swatisehgal",
"committed_at": "2026-03-05T10:42:58Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6b44b053460d752b3d713471baf778f60e24b895",
"body": "codeorg: ignore vendor",
"is_bot": false,
"headline": "Merge pull request #372 from ffromani/ignore-vendor",
"author_name": "Francesco Romani",
"author_login": "ffromani",
"committed_at": "2026-03-05T10:29:59Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "02778427a5aae172d6f2b5bb839569c2e233f5f4",
"body": "deps: bump kube libs to 1.33.9",
"is_bot": false,
"headline": "Merge pull request #374 from ffromani/bump-kube-1.33",
"author_name": "Francesco Romani",
"author_login": "ffromani",
"committed_at": "2026-03-05T10:25:49Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0be8819c5193d10cf67d4fe2403704585ebd6bd9",
"body": "make the klog call use a format string to make the linter happy.\n\nSigned-off-by: Francesco Romani <fromani@redhat.com>",
"is_bot": false,
"headline": "resmon: linter fix",
"author_name": "Francesco Romani",
"author_login": "ffromani",
"committed_at": "2026-03-05T10:00:17Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "aa9d13546689648acd20e2581d52e23c90f8e29a",
"body": "update all transitive deps.\n\nSigned-off-by: Francesco Romani <fromani@redhat.com>",
"is_bot": false,
"headline": "deps: bump kube libs to 1.33.9",
"author_name": "Francesco Romani",
"author_login": "ffromani",
"committed_at": "2026-03-05T09:56:57Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d1e2f434abbfc0fa5c376ef1c9be63c867daca0b",
"body": "golang: bump builders to 1.24",
"is_bot": false,
"headline": "Merge pull request #373 from ffromani/bump-golang-1.24",
"author_name": "Francesco Romani",
"author_login": "ffromani",
"committed_at": "2026-03-05T09:54:55Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2220e77aa10c9ec7534e5ef34b745fa862755cc9",
"body": "prepare for the 1.24 switch/rebase\n\nSigned-off-by: Francesco Romani <fromani@redhat.com>",
"is_bot": false,
"headline": "golang: bump builders to 1.24",
"author_name": "Francesco Romani",
"author_login": "ffromani",
"committed_at": "2026-03-05T09:27:07Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "15ba925bf53127addbfe80c97cc2e0bd4b4b1a6f",
"body": "since PR#294 we don't want vendor/ anymore, so ignore it\nenforces this fact.\n\nSigned-off-by: Francesco Romani <fromani@redhat.com>",
"is_bot": false,
"headline": "codeorg: ignore vendor",
"author_name": "Francesco Romani",
"author_login": "ffromani",
"committed_at": "2026-03-05T09:08:53Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "39efdf2fb940be960d88762ebfcaa8a8b25f58e2",
"body": "narrow down and update the GHW dependency",
"is_bot": false,
"headline": "Merge pull request #368 from ffromani/modernize-ghw-dep",
"author_name": "Francesco Romani",
"author_login": "ffromani",
"committed_at": "2026-01-29T12:23:30Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e1174e8cbfec6b7d60fe8f9940dc3b4246511e2d",
"body": "this allows us to narro down further the dependency tree\n\nSigned-off-by: Francesco Romani <fromani@redhat.com>",
"is_bot": false,
"headline": "ghw: bump to last snapshot",
"author_name": "Francesco Romani",
"author_login": "ffromani",
"committed_at": "2026-01-28T10:22:01Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b6a30627893d240ca774937491db62753108c771",
"body": "consume the last fixes\n\nSigned-off-by: Francesco Romani <fromani@redhat.com>",
"is_bot": false,
"headline": "deps: bump to ghw 0.21.2",
"author_name": "Francesco Romani",
"author_login": "ffromani",
"committed_at": "2026-01-28T10:22:01Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e15c2f5893ac1f2dd45ff8dc7a5b244e9b50f5fa",
"body": "narrow down our dependency tree without losing\nany functionality.\n\nSigned-off-by: Francesco Romani <fromani@redhat.com>",
"is_bot": false,
"headline": "deps: ghw: pull only the subpackages we need",
"author_name": "Francesco Romani",
"author_login": "ffromani",
"committed_at": "2026-01-28T10:22:01Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d7eead6c4ffdb206ba6dd2167841b61619e4fbba",
"body": "Drop custom file target when dumping config.\nWe remove a rarely used and potentially (very much in theory)\ninsecure option, considering dump config is in turn rarely used.\n\nIf you needed this feature, you are recommended to redirect stdout.\n\nSigned-off-by: Francesco Romani <fromani@redhat.com>",
"is_bot": false,
"headline": "config: narrow down dump-config options",
"author_name": "Francesco Romani",
"author_login": "ffromani",
"committed_at": "2026-01-14T15:33:19Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "af6bdd30220834af4f572d7064a0d24d43cc156a",
"body": "Fetching the value of an environment variable is simplier than fetching a container argument using oc exec command.Support the option of processing an environment variable in addition to the flag. The functionality of enabling podfingerprinting is still parsed as args and the exported file name will be used only when the feature is enabled.\n\nSigned-off-by: Shereen Haj <shajmakh@redhat.com>",
"is_bot": false,
"headline": "config: support `PFP_STATUS_FILE` env var",
"author_name": "Shereen Haj",
"author_login": "shajmakh",
"committed_at": "2025-09-30T10:04:56Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8ab2ca0618fc99189af596152b6e81276ac33e1c",
"body": "resmon: decouple pfpstatus dump",
"is_bot": false,
"headline": "Merge pull request #364 from ffromani/pluggable-status-dump",
"author_name": "Francesco Romani",
"author_login": "ffromani",
"committed_at": "2025-09-29T09:39:56Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "14addcee54d1bdb1d888dd87b2da34ede768012e",
"body": "The initial support for pfpstatus dump was rushed in\nand done synchronous in the scan loop. More than a potential\nperformance issue, this is an issue of unnecessary coupling.\n\nThis PR repays this technical debt by uncoupling the pfpstatus\ndump part, using the existing, built-in pofingerprint package\nfunctionality.\n\nSigned-off-by: Francesco Romani <fromani@redhat.com>",
"is_bot": false,
"headline": "resmon: decouple pfpstatus dump",
"author_name": "Francesco Romani",
"author_login": "ffromani",
"committed_at": "2025-09-29T09:28:42Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "cf6dba69f044a9a98f0a0dc44bb538f7da24008c",
"body": "resmon: per-flow verbosity for NormalizeContainerDevices",
"is_bot": false,
"headline": "Merge pull request #354 from ffromani/resmon-logs-take2",
"author_name": "Francesco Romani",
"author_login": "ffromani",
"committed_at": "2025-09-23T14:30:35Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3cfd4bd5dffff9914154798886a5710f17659da3",
"body": "We call `NormalizeContainerDevices` both in the `Scan` flow\nand in the `updateNodeAllocatable` flow. We want different\nverbosity levels for them.\n\nThe `Scan` flow is done regularly, so we want to log only\nwith VERY high verbosiness.\nThe `updateNodeAllocatable` flow is done seldom, possibly once,\nso we can afford and we actually welcome logs at low\nverbosity.\n\nSigned-off-by: Francesco Romani <fromani@redhat.com>",
"is_bot": false,
"headline": "resmon: per-flow verbosity for NormalizeContainerDevices",
"author_name": "Francesco Romani",
"author_login": "ffromani",
"committed_at": "2025-09-23T14:18:53Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7875e4d8c81a2bcd83f2f9da59e1787619e43231",
"body": "config: let flags override the config value",
"is_bot": false,
"headline": "Merge pull request #352 from ffromani/klog-override-cmdline",
"author_name": "Francesco Romani",
"author_login": "ffromani",
"committed_at": "2025-09-23T13:39:38Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a8a458821b1c31d2c6b93ce79ea93ac8c1e18359",
"body": "previously, setting -v from the commandline was\nalways ignored and the only way to override\nthe verbosity level was using flags.\n\nNow the flags take priority over the config file,\nas expected.\n\nSigned-off-by: Francesco Romani <fromani@redhat.com>",
"is_bot": false,
"headline": "config: let flags override the config value",
"author_name": "Francesco Romani",
"author_login": "ffromani",
"committed_at": "2025-09-23T13:18:53Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "91a9a1ac1d94ec95a00e59aaab948a841ad63752",
"body": "resmon: review logs",
"is_bot": false,
"headline": "Merge pull request #350 from ffromani/resmon-simplify-per-numa-res",
"author_name": "Francesco Romani",
"author_login": "ffromani",
"committed_at": "2025-09-23T11:42:17Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2c81cece604cd8704a5e0573f760e06de0fef2c3",
"body": "fix the logging verbosity to avoid spam at low verbosity level,\nbut add missing logs about the startup steps at high verbosity level.\n\nConsistently use `Infof` removing the few instance of `InfoS`.\nIf ever, we should transition directly to `go-logr`.\n\nSigned-off-by: Francesco Romani <fromani@redhat.com>",
"is_bot": false,
"headline": "resmon: review logs",
"author_name": "Francesco Romani",
"author_login": "ffromani",
"committed_at": "2025-09-23T11:36:54Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "938e79007e1439df3add8437a8c7c9dda4c2fa55",
"body": "ghactions: release: cut releases only for X.Y.0 branches",
"is_bot": false,
"headline": "Merge pull request #347 from ffromani/limit-releases",
"author_name": "Francesco Romani",
"author_login": "ffromani",
"committed_at": "2025-07-31T11:38:37Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4ebe9a7ea4c8b4ade9e55f07fb1790ac24a05f1c",
"body": "for patch releases a github tag is fine, we will\nmake full binary releases only on a case-by-case need.\n\nthe main driver is saving CI credits.\n\nSigned-off-by: Francesco Romani <fromani@redhat.com>",
"is_bot": false,
"headline": "ghactions: release: cut releases only for X.Y.0 branches",
"author_name": "Francesco Romani",
"author_login": "ffromani",
"committed_at": "2025-07-31T08:52:16Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e7ffd1b255cf3106de3f963d6206c072242c5f37",
"body": "resmon: podres: streamline startup logs",
"is_bot": false,
"headline": "Merge pull request #343 from ffromani/startup-logs",
"author_name": "Francesco Romani",
"author_login": "ffromani",
"committed_at": "2025-07-31T07:24:53Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "751a1dafd248031314d5915c787ba8ca248f7054",
"body": "ensure 2-way consistency\n\nSigned-off-by: Francesco Romani <fromani@redhat.com>",
"is_bot": false,
"headline": "config: propagate back setting to klog",
"author_name": "Francesco Romani",
"author_login": "ffromani",
"committed_at": "2025-07-31T06:32:18Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "dacaddcca4e9846f5f72eaf77c58d32ea429e7ec",
"body": "we should startup rarely (ideally once) so we can afford\nto be more verbose, to (hopefully) improve the debuggability.\n\nHistorically we ping/ponged between quietness and verbosiness,\nthe right balance is yet to be found.\nAt least we have now the option to have a quiet run (-v=0).\n\nSigned-off-by: Francesco Romani <fromani@redhat.com>",
"is_bot": false,
"headline": "resmon: podres: streamline startup logs",
"author_name": "Francesco Romani",
"author_login": "ffromani",
"committed_at": "2025-07-30T18:37:45Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5eaf486100997b03c6283b7f6bc76e58328dc1a7",
"body": "ghactions: e2e: review the e2e-ic lane",
"is_bot": false,
"headline": "Merge pull request #345 from ffromani/review-e2e",
"author_name": "Francesco Romani",
"author_login": "ffromani",
"committed_at": "2025-07-30T18:36:37Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0885eed529d60dd69a833ff0f71fcad133ac0e9e",
"body": "rename the ancient and cryptic -ic (InfraConsuming) lane\nin a more explicit and useful name.\nShow RTE logs pre-run inconditionally for better debugging.\n\nSigned-off-by: Francesco Romani <fromani@redhat.com>",
"is_bot": false,
"headline": "ghactions: e2e: review the e2e-ic lane",
"author_name": "Francesco Romani",
"author_login": "ffromani",
"committed_at": "2025-07-30T18:31:47Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "093450f2ff9aad7d5e9015795dc6d94d63bb7874",
"body": "ghactions: bump to kind image v1.32.5",
"is_bot": false,
"headline": "Merge pull request #344 from ffromani/bump-kind",
"author_name": "Francesco Romani",
"author_login": "ffromani",
"committed_at": "2025-07-30T18:03:48Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e7a6e7951a6de6d033172c9c52c11e247e0daa9c",
"body": "we can reuse our own main image with a trivial\ndifferent entry point.\n\nSigned-off-by: Francesco Romani <fromani@redhat.com>",
"is_bot": false,
"headline": "manifests: avoid to depend on the gcr image",
"author_name": "Francesco Romani",
"author_login": "ffromani",
"committed_at": "2025-07-30T17:53:24Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "015d3c69928400e66ca9924774d98828b57b0f0c",
"body": "it seems they are more useful then harmful, so let's always show them\n\nSigned-off-by: Francesco Romani <fromani@redhat.com>",
"is_bot": false,
"headline": "ghactions: e2e: always show RTE logs",
"author_name": "Francesco Romani",
"author_login": "ffromani",
"committed_at": "2025-07-30T17:40:35Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ec34b0dc220e618dffafb41e3bbed03dafa5bdc5",
"body": "no reason to get stuck in the ancient 1.27.z\n\nSigned-off-by: Francesco Romani <fromani@redhat.com>",
"is_bot": false,
"headline": "ghactions: bump to kind image v1.32.5",
"author_name": "Francesco Romani",
"author_login": "ffromani",
"committed_at": "2025-07-30T17:40:23Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9f91a1156a7b48a0ec3f86aeb6ed2f39b4c69a09",
"body": "add ncat to the resource topology exporter image",
"is_bot": false,
"headline": "Merge pull request #336 from rbaturov/add-ncat-to-image",
"author_name": "Francesco Romani",
"author_login": "ffromani",
"committed_at": "2025-07-01T14:46:40Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "03cf14f352bbed67daecadc5036dc9943b0334a7",
"body": "This is needed for e2e coverage testing network policies.\n\nSigned-off-by: Ronny Baturov <rbaturov@redhat.com>",
"is_bot": false,
"headline": "add ncat to the resource topology exporter image",
"author_name": "Ronny Baturov",
"author_login": "rbaturov",
"committed_at": "2025-07-01T13:36:43Z",
"body_truncated": false,
"is_coding_agent": false
}
],
"releases_count": 78,
"commits_last_year": 90,
"latest_release_at": "2026-07-20T14:14:30Z",
"latest_release_tag": "v0.25.0",
"releases_from_tags": false,
"days_since_last_push": 9,
"active_weeks_last_year": 19,
"days_since_latest_release": 9,
"mean_days_between_releases": 33.3
},
"community": {
"has_readme": true,
"has_license": true,
"has_description": true,
"has_contributing": false,
"health_percentage": 37,
"has_issue_template": false,
"has_code_of_conduct": false,
"has_pull_request_template": false
},
"ecosystem": {
"packages": [
{
"name": "github.com/k8stopologyawareschedwg/resource-topology-exporter",
"exists": true,
"license": null,
"keywords": [],
"ecosystem": "go",
"matches_repo": true,
"registry_url": "https://pkg.go.dev/github.com/k8stopologyawareschedwg/resource-topology-exporter",
"is_deprecated": false,
"latest_version": "v0.25.0",
"repository_url": "https://github.com/k8stopologyawareschedwg/resource-topology-exporter",
"versions_count": 91,
"total_downloads": null,
"dependents_count": null,
"deprecation_note": null,
"maintainers_count": null,
"monthly_downloads": null,
"first_published_at": null,
"latest_published_at": "2026-07-20T14:02:22Z",
"latest_version_yanked": null,
"days_since_latest_publish": 9
}
]
},
"popularity": {
"forks": 15,
"stars": 15,
"watchers": 3,
"fork_history": {
"days": [
{
"date": "2020-12-22",
"count": 1
},
{
"date": "2021-08-16",
"count": 1
},
{
"date": "2021-11-12",
"count": 1
},
{
"date": "2022-05-19",
"count": 1
},
{
"date": "2022-06-17",
"count": 1
},
{
"date": "2023-02-07",
"count": 1
},
{
"date": "2023-06-30",
"count": 1
},
{
"date": "2023-07-25",
"count": 1
},
{
"date": "2024-03-04",
"count": 1
},
{
"date": "2024-07-05",
"count": 1
},
{
"date": "2024-09-18",
"count": 1
},
{
"date": "2024-10-01",
"count": 1
},
{
"date": "2025-02-22",
"count": 1
},
{
"date": "2025-07-15",
"count": 1
},
{
"date": "2026-03-09",
"count": 1
}
],
"complete": true,
"collected": 15,
"total_forks": 15
},
"star_history": null,
"open_issues_and_prs": 7
},
"ai_readiness": {
"has_nix": false,
"example_dirs": [
"examples"
],
"has_llms_txt": false,
"has_dockerfile": true,
"has_mcp_signal": false,
"bootstrap_files": [
"Makefile"
],
"api_schema_files": [],
"has_devcontainer": false,
"typecheck_configs": [],
"toolchain_manifests": [
"go.mod"
],
"largest_source_bytes": 53096,
"source_files_sampled": 87,
"oversized_source_files": 0,
"agent_instruction_files": [],
"agent_instruction_max_bytes": null
},
"dependencies": {
"manifests": [
"go.mod"
],
"advisories": {
"error": null,
"scope": "repository_graph",
"source": "osv",
"findings": [
{
"name": "google.golang.org/grpc",
"direct": true,
"version": "v1.72.2",
"severity": "critical",
"ecosystem": "go",
"cvss_score": 9.1,
"advisory_ids": [
"GHSA-hrxh-6v49-42gf",
"GHSA-p77j-4mvh-x3m3",
"GO-2026-4762",
"GO-2026-6061"
],
"fixed_version": "1.82.1",
"advisory_count": 4,
"oldest_advisory_days": 133
},
{
"name": "github.com/moby/spdystream",
"direct": false,
"version": "v0.5.0",
"severity": "high",
"ecosystem": "go",
"cvss_score": 7.5,
"advisory_ids": [
"GHSA-pc3f-x583-g7j2",
"GO-2026-4958"
],
"fixed_version": "0.5.1",
"advisory_count": 2,
"oldest_advisory_days": 104
},
{
"name": "go.opentelemetry.io/otel",
"direct": false,
"version": "v1.36.0",
"severity": "high",
"ecosystem": "go",
"cvss_score": 7.5,
"advisory_ids": [
"GHSA-mh2q-q3fh-2475",
"GO-2026-5506"
],
"fixed_version": "1.41.0",
"advisory_count": 2,
"oldest_advisory_days": 113
},
{
"name": "golang.org/x/net",
"direct": false,
"version": "v0.47.0",
"severity": "moderate",
"ecosystem": "go",
"cvss_score": 6.5,
"advisory_ids": [
"GHSA-5cv4-jp36-h3mw",
"GO-2026-4918",
"GO-2026-5025",
"GO-2026-5026",
"GO-2026-5027",
"GO-2026-5028",
"GO-2026-5029",
"GO-2026-5030",
"GO-2026-5942"
],
"fixed_version": "1.26.3",
"advisory_count": 9,
"oldest_advisory_days": 83
},
{
"name": "golang.org/x/sys",
"direct": false,
"version": "v0.38.0",
"severity": "unknown",
"ecosystem": "go",
"cvss_score": null,
"advisory_ids": [
"GO-2026-5024"
],
"fixed_version": "0.44.0",
"advisory_count": 1,
"oldest_advisory_days": 68
},
{
"name": "golang.org/x/text",
"direct": false,
"version": "v0.31.0",
"severity": "unknown",
"ecosystem": "go",
"cvss_score": null,
"advisory_ids": [
"GO-2026-5970"
],
"fixed_version": "0.39.0",
"advisory_count": 1,
"oldest_advisory_days": 15
}
],
"collected": true,
"malicious": [],
"truncated": false,
"by_severity": {
"high": 2,
"unknown": 2,
"critical": 1,
"moderate": 1
},
"advisory_count": 19,
"affected_count": 6,
"assessed_count": 89,
"malicious_count": 0,
"assessed_package": null,
"unassessed_count": 0,
"direct_affected_count": 1
},
"ecosystems": [
"go"
],
"dependencies": [
{
"name": "github.com/aquasecurity/go-version",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.0.0-20210121072130-637058cfe492"
},
{
"name": "github.com/evanphx/json-patch/v5",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v5.9.11"
},
{
"name": "github.com/fsnotify/fsnotify",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.9.0"
},
{
"name": "github.com/go-logr/logr",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.4.3"
},
{
"name": "github.com/google/go-cmp",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.7.0"
},
{
"name": "github.com/jaypipes/ghw",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.21.3-0.20260109185716-ee0aed93f45d"
},
{
"name": "github.com/jeremywohl/flatten/v2",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v2.0.0-20211013061545-07e4a09fb8e4"
},
{
"name": "github.com/k8stopologyawareschedwg/noderesourcetopology-api",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.1.1"
},
{
"name": "github.com/k8stopologyawareschedwg/numaplacement",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.1.0"
},
{
"name": "github.com/k8stopologyawareschedwg/podfingerprint",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.2.3"
},
{
"name": "github.com/mdomke/git-semver",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.0.0"
},
{
"name": "github.com/onsi/ginkgo/v2",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v2.27.2"
},
{
"name": "github.com/onsi/gomega",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.38.2"
},
{
"name": "github.com/prometheus/client_golang",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.23.2"
},
{
"name": "github.com/smartystreets/goconvey",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.6.4"
},
{
"name": "github.com/stretchr/testify",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.11.1"
},
{
"name": "go.uber.org/ratelimit",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.2.0"
},
{
"name": "google.golang.org/grpc",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.72.2"
},
{
"name": "google.golang.org/protobuf",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.36.11"
},
{
"name": "k8s.io/api",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.35.3"
},
{
"name": "k8s.io/apiextensions-apiserver",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.35.3"
},
{
"name": "k8s.io/apimachinery",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.35.3"
},
{
"name": "k8s.io/client-go",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.35.3"
},
{
"name": "k8s.io/component-base",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.35.3"
},
{
"name": "k8s.io/cri-client",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.35.3"
},
{
"name": "k8s.io/klog/v2",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v2.130.1"
},
{
"name": "k8s.io/kubelet",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.35.3"
},
{
"name": "k8s.io/utils",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.0.0-20251002143259-bc988d571ff4"
},
{
"name": "sigs.k8s.io/controller-runtime",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.23.3"
},
{
"name": "sigs.k8s.io/yaml",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.6.0"
}
],
"all_dependencies": {
"error": null,
"source": "github-sbom",
"packages": [
{
"name": "github.com/aquasecurity/go-version",
"direct": true,
"version": "v0.0.0-20210121072130-637058cfe492",
"ecosystem": "go"
},
{
"name": "github.com/evanphx/json-patch/v5",
"direct": true,
"version": "v5.9.11",
"ecosystem": "go"
},
{
"name": "github.com/fsnotify/fsnotify",
"direct": true,
"version": "v1.9.0",
"ecosystem": "go"
},
{
"name": "github.com/go-logr/logr",
"direct": true,
"version": "v1.4.3",
"ecosystem": "go"
},
{
"name": "github.com/google/go-cmp",
"direct": true,
"version": "v0.7.0",
"ecosystem": "go"
},
{
"name": "github.com/jaypipes/ghw",
"direct": true,
"version": "v0.21.3-0.20260109185716-ee0aed93f45d",
"ecosystem": "go"
},
{
"name": "github.com/jeremywohl/flatten/v2",
"direct": true,
"version": "v2.0.0-20211013061545-07e4a09fb8e4",
"ecosystem": "go"
},
{
"name": "github.com/k8stopologyawareschedwg/noderesourcetopology-api",
"direct": true,
"version": "v0.1.1",
"ecosystem": "go"
},
{
"name": "github.com/k8stopologyawareschedwg/numaplacement",
"direct": true,
"version": "v0.1.0",
"ecosystem": "go"
},
{
"name": "github.com/k8stopologyawareschedwg/podfingerprint",
"direct": true,
"version": "v0.2.3",
"ecosystem": "go"
},
{
"name": "github.com/mdomke/git-semver",
"direct": true,
"version": "v1.0.0",
"ecosystem": "go"
},
{
"name": "github.com/onsi/ginkgo/v2",
"direct": true,
"version": "v2.27.2",
"ecosystem": "go"
},
{
"name": "github.com/onsi/gomega",
"direct": true,
"version": "v1.38.2",
"ecosystem": "go"
},
{
"name": "github.com/prometheus/client_golang",
"direct": true,
"version": "v1.23.2",
"ecosystem": "go"
},
{
"name": "github.com/smartystreets/goconvey",
"direct": true,
"version": "v1.6.4",
"ecosystem": "go"
},
{
"name": "github.com/stretchr/testify",
"direct": true,
"version": "v1.11.1",
"ecosystem": "go"
},
{
"name": "go.uber.org/ratelimit",
"direct": true,
"version": "v0.2.0",
"ecosystem": "go"
},
{
"name": "google.golang.org/grpc",
"direct": true,
"version": "v1.72.2",
"ecosystem": "go"
},
{
"name": "google.golang.org/protobuf",
"direct": true,
"version": "v1.36.11",
"ecosystem": "go"
},
{
"name": "k8s.io/cri-client",
"direct": true,
"version": "v0.35.3",
"ecosystem": "go"
},
{
"name": "k8s.io/klog/v2",
"direct": true,
"version": "v2.130.1",
"ecosystem": "go"
},
{
"name": "k8s.io/utils",
"direct": true,
"version": "v0.0.0-20251002143259-bc988d571ff4",
"ecosystem": "go"
},
{
"name": "sigs.k8s.io/controller-runtime",
"direct": true,
"version": "v0.23.3",
"ecosystem": "go"
},
{
"name": "sigs.k8s.io/yaml",
"direct": true,
"version": "v1.6.0",
"ecosystem": "go"
},
{
"name": "github.com/andres-erbsen/clock",
"direct": false,
"version": "v0.0.0-20160526145045-9e14626cd129",
"ecosystem": "go"
},
{
"name": "github.com/beorn7/perks",
"direct": false,
"version": "v1.0.1",
"ecosystem": "go"
},
{
"name": "github.com/blang/semver/v4",
"direct": false,
"version": "v4.0.0",
"ecosystem": "go"
},
{
"name": "github.com/cespare/xxhash/v2",
"direct": false,
"version": "v2.3.0",
"ecosystem": "go"
},
{
"name": "github.com/davecgh/go-spew",
"direct": false,
"version": "v1.1.2-0.20180830191138-d8f796af33cc",
"ecosystem": "go"
},
{
"name": "github.com/emicklei/go-restful/v3",
"direct": false,
"version": "v3.12.2",
"ecosystem": "go"
},
{
"name": "github.com/fxamacker/cbor/v2",
"direct": false,
"version": "v2.9.0",
"ecosystem": "go"
},
{
"name": "github.com/go-ole/go-ole",
"direct": false,
"version": "v1.2.6",
"ecosystem": "go"
},
{
"name": "github.com/go-openapi/jsonpointer",
"direct": false,
"version": "v0.21.0",
"ecosystem": "go"
},
{
"name": "github.com/go-openapi/jsonreference",
"direct": false,
"version": "v0.20.2",
"ecosystem": "go"
},
{
"name": "github.com/go-openapi/swag",
"direct": false,
"version": "v0.23.0",
"ecosystem": "go"
},
{
"name": "github.com/go-task/slim-sprig/v3",
"direct": false,
"version": "v3.0.0",
"ecosystem": "go"
},
{
"name": "github.com/gogo/protobuf",
"direct": false,
"version": "v1.3.2",
"ecosystem": "go"
},
{
"name": "github.com/google/gnostic-models",
"direct": false,
"version": "v0.7.0",
"ecosystem": "go"
},
{
"name": "github.com/google/pprof",
"direct": false,
"version": "v0.0.0-20250403155104-27863c87afa6",
"ecosystem": "go"
},
{
"name": "github.com/google/uuid",
"direct": false,
"version": "v1.6.0",
"ecosystem": "go"
},
{
"name": "github.com/gopherjs/gopherjs",
"direct": false,
"version": "v0.0.0-20200217142428-fce0ec30dd00",
"ecosystem": "go"
},
{
"name": "github.com/gorilla/websocket",
"direct": false,
"version": "v1.5.4-0.20250319132907-e064f32e3674",
"ecosystem": "go"
},
{
"name": "github.com/inconshreveable/mousetrap",
"direct": false,
"version": "v1.1.0",
"ecosystem": "go"
},
{
"name": "github.com/jaypipes/pcidb",
"direct": false,
"version": "v1.1.1",
"ecosystem": "go"
},
{
"name": "github.com/josharian/intern",
"direct": false,
"version": "v1.0.0",
"ecosystem": "go"
},
{
"name": "github.com/json-iterator/go",
"direct": false,
"version": "v1.1.12",
"ecosystem": "go"
},
{
"name": "github.com/jtolds/gls",
"direct": false,
"version": "v4.20.0+incompatible",
"ecosystem": "go"
},
{
"name": "github.com/mailru/easyjson",
"direct": false,
"version": "v0.7.7",
"ecosystem": "go"
},
{
"name": "github.com/masterminds/semver/v3",
"direct": false,
"version": "v3.4.0",
"ecosystem": "go"
},
{
"name": "github.com/microsoft/go-winio",
"direct": false,
"version": "v0.6.2",
"ecosystem": "go"
},
{
"name": "github.com/moby/spdystream",
"direct": false,
"version": "v0.5.0",
"ecosystem": "go"
},
{
"name": "github.com/modern-go/concurrent",
"direct": false,
"version": "v0.0.0-20180306012644-bacd9c7ef1dd",
"ecosystem": "go"
},
{
"name": "github.com/modern-go/reflect2",
"direct": false,
"version": "v1.0.3-0.20250322232337-35a7c28c31ee",
"ecosystem": "go"
},
{
"name": "github.com/munnerz/goautoneg",
"direct": false,
"version": "v0.0.0-20191010083416-a7dc8b61c822",
"ecosystem": "go"
},
{
"name": "github.com/mxk/go-flowrate",
"direct": false,
"version": "v0.0.0-20140419014527-cca7078d478f",
"ecosystem": "go"
},
{
"name": "github.com/oneofone/xxhash",
"direct": false,
"version": "v1.2.9-0.20201014161131-8506fca4db5e",
"ecosystem": "go"
},
{
"name": "github.com/pkg/errors",
"direct": false,
"version": "v0.9.1",
"ecosystem": "go"
},
{
"name": "github.com/pmezard/go-difflib",
"direct": false,
"version": "v1.0.1-0.20181226105442-5d4384ee4fb2",
"ecosystem": "go"
},
{
"name": "github.com/prometheus/client_model",
"direct": false,
"version": "v0.6.2",
"ecosystem": "go"
},
{
"name": "github.com/prometheus/common",
"direct": false,
"version": "v0.66.1",
"ecosystem": "go"
},
{
"name": "github.com/prometheus/procfs",
"direct": false,
"version": "v0.16.1",
"ecosystem": "go"
},
{
"name": "github.com/smartystreets/assertions",
"direct": false,
"version": "v1.2.0",
"ecosystem": "go"
},
{
"name": "github.com/spf13/cobra",
"direct": false,
"version": "v1.10.0",
"ecosystem": "go"
},
{
"name": "github.com/spf13/pflag",
"direct": false,
"version": "v1.0.9",
"ecosystem": "go"
},
{
"name": "github.com/stretchr/objx",
"direct": false,
"version": "v0.5.2",
"ecosystem": "go"
},
{
"name": "github.com/x448/float16",
"direct": false,
"version": "v0.8.4",
"ecosystem": "go"
},
{
"name": "github.com/yusufpapurcu/wmi",
"direct": false,
"version": "v1.2.4",
"ecosystem": "go"
},
{
"name": "go.opentelemetry.io/otel",
"direct": false,
"version": "v1.36.0",
"ecosystem": "go"
},
{
"name": "go.opentelemetry.io/otel/trace",
"direct": false,
"version": "v1.36.0",
"ecosystem": "go"
},
{
"name": "go.yaml.in/yaml/v2",
"direct": false,
"version": "v2.4.3",
"ecosystem": "go"
},
{
"name": "go.yaml.in/yaml/v3",
"direct": false,
"version": "v3.0.4",
"ecosystem": "go"
},
{
"name": "golang.org/x/mod",
"direct": false,
"version": "v0.29.0",
"ecosystem": "go"
},
{
"name": "golang.org/x/net",
"direct": false,
"version": "v0.47.0",
"ecosystem": "go"
},
{
"name": "golang.org/x/oauth2",
"direct": false,
"version": "v0.30.0",
"ecosystem": "go"
},
{
"name": "golang.org/x/sync",
"direct": false,
"version": "v0.18.0",
"ecosystem": "go"
},
{
"name": "golang.org/x/sys",
"direct": false,
"version": "v0.38.0",
"ecosystem": "go"
},
{
"name": "golang.org/x/term",
"direct": false,
"version": "v0.37.0",
"ecosystem": "go"
},
{
"name": "golang.org/x/text",
"direct": false,
"version": "v0.31.0",
"ecosystem": "go"
},
{
"name": "golang.org/x/time",
"direct": false,
"version": "v0.9.0",
"ecosystem": "go"
},
{
"name": "golang.org/x/tools",
"direct": false,
"version": "v0.38.0",
"ecosystem": "go"
},
{
"name": "golang.org/x/xerrors",
"direct": false,
"version": "v0.0.0-20220907171357-04be3eba64a2",
"ecosystem": "go"
},
{
"name": "google.golang.org/genproto/googleapis/rpc",
"direct": false,
"version": "v0.0.0-20250528174236-200df99c418a",
"ecosystem": "go"
},
{
"name": "gopkg.in/evanphx/json-patch.v4",
"direct": false,
"version": "v4.13.0",
"ecosystem": "go"
},
{
"name": "gopkg.in/inf.v0",
"direct": false,
"version": "v0.9.1",
"ecosystem": "go"
},
{
"name": "gopkg.in/yaml.v3",
"direct": false,
"version": "v3.0.1",
"ecosystem": "go"
},
{
"name": "k8s.io/kube-openapi",
"direct": false,
"version": "v0.0.0-20250910181357-589584f1c912",
"ecosystem": "go"
},
{
"name": "sigs.k8s.io/json",
"direct": false,
"version": "v0.0.0-20250730193827-2d320260d730",
"ecosystem": "go"
},
{
"name": "sigs.k8s.io/randfill",
"direct": false,
"version": "v1.0.0",
"ecosystem": "go"
},
{
"name": "sigs.k8s.io/structured-merge-diff/v6",
"direct": false,
"version": "v6.3.2-0.20260122202528-d9cc6641c482",
"ecosystem": "go"
}
],
"collected": true,
"truncated": false,
"total_count": 89,
"direct_count": 24,
"indirect_count": 65
}
},
"maintainership": {
"issues": {
"open_prs": 1,
"merged_prs": 328,
"open_issues": 6,
"closed_ratio": 0.842,
"closed_issues": 32,
"closed_unmerged_prs": 34
},
"bus_factor": 1,
"bot_contributors": 0,
"top_contributors": [
{
"type": "User",
"login": "ffromani",
"commits": 604,
"avatar_url": "https://avatars.githubusercontent.com/u/25349329?v=4"
},
{
"type": "User",
"login": "Tal-or",
"commits": 65,
"avatar_url": "https://avatars.githubusercontent.com/u/36886869?v=4"
},
{
"type": "User",
"login": "swatisehgal",
"commits": 39,
"avatar_url": "https://avatars.githubusercontent.com/u/18619641?v=4"
},
{
"type": "User",
"login": "shajmakh",
"commits": 13,
"avatar_url": "https://avatars.githubusercontent.com/u/83756492?v=4"
},
{
"type": "User",
"login": "jlojosnegros",
"commits": 6,
"avatar_url": "https://avatars.githubusercontent.com/u/24541551?v=4"
},
{
"type": "User",
"login": "jaypipes",
"commits": 3,
"avatar_url": "https://avatars.githubusercontent.com/u/265023?v=4"
},
{
"type": "User",
"login": "hhsubra",
"commits": 2,
"avatar_url": "https://avatars.githubusercontent.com/u/1683606?v=4"
},
{
"type": "User",
"login": "rbaturov",
"commits": 1,
"avatar_url": "https://avatars.githubusercontent.com/u/113368764?v=4"
},
{
"type": "User",
"login": "AutuSnow",
"commits": 1,
"avatar_url": "https://avatars.githubusercontent.com/u/144877719?v=4"
}
],
"contributors_sampled": 9,
"top_contributor_share": 0.823
},
"quality_signals": {
"has_ci": true,
"has_tests": true,
"ci_workflows": [
"e2e.yml",
"go.yml",
"release.yml"
],
"has_docs_dir": false,
"linter_configs": [
".golangci.yaml"
],
"has_editorconfig": false,
"has_linter_config": true,
"has_precommit_config": false
},
"security_signals": {
"lockfiles": [
"go.sum"
],
"scorecard": {
"checks": [
{
"name": "Binary-Artifacts",
"score": 10,
"reason": "no binaries found in the repo",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#binary-artifacts"
},
{
"name": "Branch-Protection",
"score": null,
"reason": "internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#branch-protection"
},
{
"name": "CI-Tests",
"score": 10,
"reason": "7 out of 7 merged PRs checked by a CI test -- score normalized to 10",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#ci-tests"
},
{
"name": "CII-Best-Practices",
"score": 0,
"reason": "no effort to earn an OpenSSF best practices badge detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#cii-best-practices"
},
{
"name": "Code-Review",
"score": 10,
"reason": "all changesets reviewed",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#code-review"
},
{
"name": "Contributors",
"score": 10,
"reason": "project has 3 contributing companies or organizations -- score normalized to 10",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#contributors"
},
{
"name": "Dangerous-Workflow",
"score": 10,
"reason": "no dangerous workflow patterns detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dangerous-workflow"
},
{
"name": "Dependency-Update-Tool",
"score": 0,
"reason": "no update tool detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dependency-update-tool"
},
{
"name": "Fuzzing",
"score": 0,
"reason": "project is not fuzzed",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#fuzzing"
},
{
"name": "License",
"score": 10,
"reason": "license file detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#license"
},
{
"name": "Maintained",
"score": 10,
"reason": "30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#maintained"
},
{
"name": "Packaging",
"score": 10,
"reason": "packaging workflow detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#packaging"
},
{
"name": "Pinned-Dependencies",
"score": 0,
"reason": "dependency not pinned by hash detected -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#pinned-dependencies"
},
{
"name": "SAST",
"score": 0,
"reason": "SAST tool is not run on all commits -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#sast"
},
{
"name": "Security-Policy",
"score": 0,
"reason": "security policy file not detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#security-policy"
},
{
"name": "Signed-Releases",
"score": 0,
"reason": "Project has not signed or included provenance with any releases.",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#signed-releases"
},
{
"name": "Token-Permissions",
"score": 0,
"reason": "detected GitHub workflow tokens with excessive permissions",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#token-permissions"
},
{
"name": "Vulnerabilities",
"score": 0,
"reason": "14 existing vulnerabilities detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#vulnerabilities"
}
],
"commit": "31dd21e6efdf324df105407f98b0d92972f2eb50",
"ran_at": "2026-07-30T01:59:54Z",
"aggregate_score": 4.6,
"scorecard_version": "v5.5.0"
},
"has_codeql_workflow": false,
"has_security_policy": false,
"has_dependabot_config": false
},
"contribution_flow": {
"collected": true,
"ci_last_run_at": "2026-07-20T14:14:49Z",
"oldest_open_prs": [
{
"number": 394,
"created_at": "2026-05-11T12:28:55Z",
"last_comment_at": null,
"last_comment_author": null
}
],
"last_merged_pr_at": "2026-07-20T14:02:23Z",
"ci_last_conclusion": "SUCCESS",
"oldest_open_issues": [
{
"number": 124,
"created_at": "2022-09-06T12:27:23Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 284,
"created_at": "2024-04-10T15:01:00Z",
"last_comment_at": "2024-04-10T16:05:53Z",
"last_comment_author": "ffromani"
},
{
"number": 290,
"created_at": "2024-05-14T12:15:55Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 295,
"created_at": "2024-06-14T13:33:51Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 311,
"created_at": "2024-12-04T15:06:19Z",
"last_comment_at": "2024-12-04T15:27:55Z",
"last_comment_author": "ffromani"
},
{
"number": 312,
"created_at": "2024-12-06T14:34:31Z",
"last_comment_at": null,
"last_comment_author": null
}
]
}
},
"config": {
"disabled_metrics": [],
"disabled_categories": [],
"disabled_components": {}
},
"source": {
"url": "https://github.com/k8stopologyawareschedwg/resource-topology-exporter",
"host": "github.com",
"name": "resource-topology-exporter",
"owner": "k8stopologyawareschedwg"
},
"metrics": {
"overall": {
"key": "overall",
"band": "good",
"name": "Overall health",
"note": "The weighted overall 62 is calibrated to 69 on the published index scale (record calibration 2026-08-02).",
"notes": [
{
"code": "overall_calibration",
"params": {
"raw": 62,
"calibrated": 69,
"calibration": "2026-08-02"
}
}
],
"value": 69,
"inputs": {
"security": 48,
"vitality": 78,
"community": 39,
"governance": 67,
"calibration": "2026-08-02",
"engineering": 70,
"ai_readiness": 62,
"weighted_overall_raw": 62
},
"components": []
},
"categories": [
{
"key": "vitality",
"band": "good",
"name": "Vitality",
"value": 78,
"weight": 0.21,
"metrics": [
{
"key": "development_activity",
"band": "good",
"name": "Development activity",
"note": null,
"notes": [],
"value": 70,
"inputs": {
"commits_last_year": 90,
"human_commit_share": 1,
"days_since_last_push": 9,
"active_weeks_last_year": 19
},
"components": [
{
"key": "push_recency",
"name": "Push recency",
"detail": "last push 9 days ago",
"points": 28.8,
"status": "partial",
"details": [
{
"code": "push_recency",
"params": {
"days": 9
}
}
],
"max_points": 36
},
{
"key": "commit_cadence",
"name": "Commit cadence",
"detail": "19/52 weeks with commits",
"points": 13.2,
"status": "partial",
"details": [
{
"code": "commit_cadence_weeks",
"params": {
"weeks": 19
}
}
],
"max_points": 36
},
{
"key": "commit_volume",
"name": "Commit volume",
"detail": "90 commits in the last year",
"points": 17.6,
"status": "partial",
"details": [
{
"code": "commits_last_year",
"params": {
"count": 90
}
}
],
"max_points": 18
},
{
"key": "openssf_scorecard_maintained",
"name": "OpenSSF Scorecard: Maintained",
"detail": "30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
}
]
},
{
"key": "release_discipline",
"band": "excellent",
"name": "Release discipline",
"note": null,
"notes": [],
"value": 90,
"inputs": {
"releases_count": 78,
"latest_release_tag": "v0.25.0",
"releases_from_tags": false,
"days_since_latest_release": 9,
"mean_days_between_releases": 33.3
},
"components": [
{
"key": "ships_releases",
"name": "Ships releases",
"detail": "78 releases published",
"points": 27,
"status": "met",
"details": [
{
"code": "releases_published",
"params": {
"count": 78
}
}
],
"max_points": 27
},
{
"key": "release_recency",
"name": "Release recency",
"detail": "latest release 9 days ago",
"points": 36,
"status": "met",
"details": [
{
"code": "release_recency",
"params": {
"days": 9
}
}
],
"max_points": 36
},
{
"key": "release_cadence",
"name": "Release cadence",
"detail": "a release every ~33.3 days",
"points": 27,
"status": "met",
"details": [
{
"code": "release_cadence",
"params": {
"gap": 33.3
}
}
],
"max_points": 27
},
{
"key": "openssf_scorecard_signed_releases",
"name": "OpenSSF Scorecard: Signed-Releases",
"detail": "Project has not signed or included provenance with any releases.",
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
},
{
"key": "abandonment",
"band": "exceptional",
"name": "Abandonment",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"cap": null,
"state": "maintained",
"guards": [],
"signals": [],
"red_flag": false,
"multiplier_pct": 100,
"declared_reason": null,
"unverified_reason": null,
"unanswered_open_prs": null,
"unanswered_open_issues": null,
"days_since_last_merged_pr": null,
"days_since_last_human_commit": 13,
"days_since_last_human_commit_is_floor": false
},
"components": [
{
"key": "project_is_still_maintained",
"name": "Project is still maintained",
"detail": "last human commit 13 days ago",
"points": 100,
"status": "met",
"details": [
{
"code": "abandonment_maintained",
"params": {
"days": 13
}
}
],
"max_points": 100
}
]
}
],
"description": "Is the project alive — is code being written and are releases shipping?"
},
{
"key": "community",
"band": "weak",
"name": "Community & Adoption",
"value": 39,
"weight": 0.17,
"metrics": [
{
"key": "popularity",
"band": "at_risk",
"name": "Popularity & adoption",
"note": null,
"notes": [],
"value": 30,
"inputs": {
"forks": 15,
"stars": 15,
"watchers": 3,
"growth_state": "unverified",
"growth_factor_pct": 100,
"growth_unverified_reason": "no_history"
},
"components": [
{
"key": "stars",
"name": "Stars",
"detail": "15 stars",
"points": 18.6,
"status": "partial",
"details": [
{
"code": "stars",
"params": {
"count": 15
}
}
],
"max_points": 60
},
{
"key": "forks",
"name": "Forks",
"detail": "15 forks",
"points": 9.6,
"status": "partial",
"details": [
{
"code": "forks",
"params": {
"count": 15
}
}
],
"max_points": 25
},
{
"key": "watchers",
"name": "Watchers",
"detail": "3 watchers",
"points": 1.7,
"status": "partial",
"details": [
{
"code": "watchers",
"params": {
"count": 3
}
}
],
"max_points": 15
}
]
},
{
"key": "community_health",
"band": "moderate",
"name": "Community health",
"note": null,
"notes": [],
"value": 50,
"inputs": {
"has_readme": true,
"has_license": true,
"readme_badges": null,
"has_contributing": false,
"has_issue_template": false,
"has_code_of_conduct": false,
"readme_badge_services": [],
"has_pull_request_template": false
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 22.5,
"status": "met",
"details": [],
"max_points": 22.5
},
{
"key": "license",
"name": "License",
"detail": "recognized license (Apache-2.0)",
"points": 22.5,
"status": "met",
"details": [
{
"code": "license_standard",
"params": {}
},
{
"code": "license_spdx",
"params": {
"spdx": "Apache-2.0"
}
}
],
"max_points": 22.5
},
{
"key": "contributing_guide",
"name": "CONTRIBUTING guide",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 18
},
{
"key": "code_of_conduct",
"name": "Code of conduct",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 13.5
},
{
"key": "issue_template",
"name": "Issue template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.2
},
{
"key": "pr_template",
"name": "PR template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 6.3
}
]
}
],
"description": "Does the project have users, downloads, attention, and a welcoming setup for contributors?"
},
{
"key": "governance",
"band": "good",
"name": "Sustainability & Governance",
"value": 67,
"weight": 0.23,
"metrics": [
{
"key": "maintainer_resilience",
"band": "weak",
"name": "Maintainer resilience (bus factor)",
"note": null,
"notes": [],
"value": 35,
"inputs": {
"bus_factor": 1,
"contributors_sampled": 9,
"top_contributor_share": 0.823
},
"components": [
{
"key": "bus_factor",
"name": "Bus factor",
"detail": "1 contributor(s) cover half of all commits",
"points": 9,
"status": "partial",
"details": [
{
"code": "bus_factor",
"params": {
"count": 1
}
}
],
"max_points": 54
},
{
"key": "commit_distribution",
"name": "Commit distribution",
"detail": "top contributor authored 82% of commits",
"points": 4,
"status": "partial",
"details": [
{
"code": "top_contributor_share",
"params": {
"share": 82
}
}
],
"max_points": 22.5
},
{
"key": "contributor_breadth",
"name": "Contributor breadth",
"detail": "9 contributors",
"points": 12.2,
"status": "partial",
"details": [
{
"code": "contributors_sampled",
"params": {
"count": 9
}
}
],
"max_points": 13.5
},
{
"key": "openssf_scorecard_contributors",
"name": "OpenSSF Scorecard: Contributors",
"detail": "project has 3 contributing companies or organizations -- score normalized to 10",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
}
]
},
{
"key": "responsiveness",
"band": "excellent",
"name": "Issue & PR responsiveness",
"note": "Excluded from scoring (no data or not applicable): Newcomer PR acceptance. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"newcomer_pr_acceptance"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 89,
"inputs": {
"merged_prs": 328,
"open_issues": 6,
"closed_issues": 32,
"prs_merged_7d": null,
"prs_decided_7d": null,
"prs_merged_30d": null,
"prs_decided_30d": null,
"issue_closed_ratio": 0.842,
"closed_unmerged_prs": 34,
"first_time_authors_30d": null,
"first_time_prs_merged_30d": null,
"first_time_prs_decided_30d": null
},
"components": [
{
"key": "issue_resolution",
"name": "Issue resolution",
"detail": "84% of issues closed",
"points": 35.4,
"status": "partial",
"details": [
{
"code": "issues_closed_share",
"params": {
"share": 84
}
}
],
"max_points": 42
},
{
"key": "pr_acceptance",
"name": "PR acceptance",
"detail": "328/362 decided PRs merged",
"points": 27.2,
"status": "partial",
"details": [
{
"code": "decided_prs_merged",
"params": {
"merged": 328,
"decided": 362
}
}
],
"max_points": 30
},
{
"key": "newcomer_pr_acceptance",
"name": "Newcomer PR acceptance",
"detail": "no first-time contributor's PR decided in 30d",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_newcomer_prs",
"params": {
"days": 30
}
}
],
"max_points": 13
},
{
"key": "openssf_scorecard_code_review",
"name": "OpenSSF Scorecard: Code-Review",
"detail": "all changesets reviewed",
"points": 15,
"status": "met",
"details": [],
"max_points": 15
}
]
},
{
"key": "stewardship",
"band": "moderate",
"name": "Ownership & stewardship",
"note": null,
"notes": [],
"value": 58,
"inputs": {
"followers": 13,
"owner_type": "Organization",
"is_verified": null,
"owner_login": "k8stopologyawareschedwg",
"public_repos": 13,
"account_age_days": 2067
},
"components": [
{
"key": "ownership_backing",
"name": "Ownership backing",
"detail": "organization-owned",
"points": 30,
"status": "met",
"details": [
{
"code": "owner_organization",
"params": {}
}
],
"max_points": 30
},
{
"key": "verified_domain",
"name": "Verified domain",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 20
},
{
"key": "owner_reach",
"name": "Owner reach",
"detail": "13 followers of k8stopologyawareschedwg",
"points": 8.2,
"status": "partial",
"details": [
{
"code": "owner_followers",
"params": {
"count": 13,
"login": "k8stopologyawareschedwg"
}
}
],
"max_points": 25
},
{
"key": "track_record",
"name": "Track record",
"detail": "13 public repos, account ~5 yr old",
"points": 19.7,
"status": "partial",
"details": [
{
"code": "public_repos",
"params": {
"count": 13
}
},
{
"code": "account_age_years",
"params": {
"years": 5
}
}
],
"max_points": 25
}
]
},
{
"key": "package_maintenance",
"band": "exceptional",
"name": "Package maintenance",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"packages": [
"github.com/k8stopologyawareschedwg/resource-topology-exporter"
],
"ecosystems": "go",
"any_deprecated": false,
"min_days_since_publish": 9
},
"components": [
{
"key": "published_resolvable",
"name": "Published & resolvable",
"detail": "1 package(s) on go",
"points": 25,
"status": "met",
"details": [
{
"code": "packages_published",
"params": {
"count": 1,
"ecosystems": "go"
}
}
],
"max_points": 25
},
{
"key": "publish_recency",
"name": "Publish recency",
"detail": "latest publish 9 days ago",
"points": 35,
"status": "met",
"details": [
{
"code": "publish_recency",
"params": {
"days": 9
}
}
],
"max_points": 35
},
{
"key": "version_history",
"name": "Version history",
"detail": "91 published versions",
"points": 20,
"status": "met",
"details": [
{
"code": "published_versions",
"params": {
"count": 91
}
}
],
"max_points": 20
},
{
"key": "not_deprecated",
"name": "Not deprecated",
"detail": "active, not deprecated or yanked",
"points": 20,
"status": "met",
"details": [
{
"code": "package_not_deprecated",
"params": {}
}
],
"max_points": 20
}
]
}
],
"description": "Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?"
},
{
"key": "engineering",
"band": "good",
"name": "Engineering Quality",
"value": 70,
"weight": 0.19,
"metrics": [
{
"key": "engineering_practices",
"band": "excellent",
"name": "Engineering practices",
"note": null,
"notes": [],
"value": 84,
"inputs": {
"has_ci": true,
"has_tests": true,
"has_editorconfig": false,
"has_linter_config": true,
"has_precommit_config": false
},
"components": [
{
"key": "ci_workflows",
"name": "CI workflows",
"detail": "3 workflow(s)",
"points": 24,
"status": "met",
"details": [
{
"code": "ci_workflows",
"params": {
"count": 3
}
}
],
"max_points": 24
},
{
"key": "tests_present",
"name": "Tests present",
"detail": null,
"points": 24,
"status": "met",
"details": [],
"max_points": 24
},
{
"key": "linter_config",
"name": "Linter config",
"detail": ".golangci.yaml",
"points": 16,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": ".golangci.yaml"
}
}
],
"max_points": 16
},
{
"key": "pre_commit_hooks",
"name": "Pre-commit hooks",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 9.6
},
{
"key": "editorconfig",
"name": ".editorconfig",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 6.4
},
{
"key": "openssf_scorecard_ci_tests",
"name": "OpenSSF Scorecard: CI-Tests",
"detail": "7 out of 7 merged PRs checked by a CI test -- score normalized to 10",
"points": 20,
"status": "met",
"details": [],
"max_points": 20
}
]
},
{
"key": "documentation",
"band": "moderate",
"name": "Documentation",
"note": null,
"notes": [],
"value": 50,
"inputs": {
"topics": [],
"has_wiki": true,
"homepage": null,
"has_readme": true,
"has_docs_dir": false,
"has_description": true
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 30,
"status": "met",
"details": [],
"max_points": 30
},
{
"key": "documentation_directory",
"name": "Documentation directory",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 25
},
{
"key": "documentation_homepage_site",
"name": "Documentation / homepage site",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
},
{
"key": "repository_description",
"name": "Repository description",
"detail": null,
"points": 10,
"status": "met",
"details": [],
"max_points": 10
},
{
"key": "topics",
"name": "Topics",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
},
{
"key": "wiki",
"name": "Wiki",
"detail": null,
"points": 10,
"status": "met",
"details": [],
"max_points": 10
}
]
}
],
"description": "Are baseline engineering and documentation practices in place?"
},
{
"key": "security",
"band": "weak",
"name": "Security",
"value": 48,
"weight": 0.16,
"metrics": [
{
"key": "security_posture",
"band": "weak",
"name": "Security posture",
"note": "Excluded from scoring (no data or not applicable): Branch-Protection. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"branch_protection"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 46,
"inputs": {
"source": "openssf_scorecard",
"checks_evaluated": 17,
"scorecard_version": "v5.5.0",
"checks_inconclusive": 1,
"scorecard_aggregate": 4.6
},
"components": [
{
"key": "binary_artifacts",
"name": "Binary-Artifacts",
"detail": "no binaries found in the repo",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "branch_protection",
"name": "Branch-Protection",
"detail": "internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 7.5
},
{
"key": "ci_tests",
"name": "CI-Tests",
"detail": "7 out of 7 merged PRs checked by a CI test -- score normalized to 10",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "cii_best_practices",
"name": "CII-Best-Practices",
"detail": "no effort to earn an OpenSSF best practices badge detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 2.5
},
{
"key": "code_review",
"name": "Code-Review",
"detail": "all changesets reviewed",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "contributors",
"name": "Contributors",
"detail": "project has 3 contributing companies or organizations -- score normalized to 10",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "dangerous_workflow",
"name": "Dangerous-Workflow",
"detail": "no dangerous workflow patterns detected",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
},
{
"key": "dependency_update_tool",
"name": "Dependency-Update-Tool",
"detail": "no update tool detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "fuzzing",
"name": "Fuzzing",
"detail": "project is not fuzzed",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "license",
"name": "License",
"detail": "license file detected",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "maintained",
"name": "Maintained",
"detail": "30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "packaging",
"name": "Packaging",
"detail": "packaging workflow detected",
"points": 5,
"status": "met",
"details": [],
"max_points": 5
},
{
"key": "pinned_dependencies",
"name": "Pinned-Dependencies",
"detail": "dependency not pinned by hash detected -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "sast",
"name": "SAST",
"detail": "SAST tool is not run on all commits -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "security_policy",
"name": "Security-Policy",
"detail": "security policy file not detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "signed_releases",
"name": "Signed-Releases",
"detail": "Project has not signed or included provenance with any releases.",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "token_permissions",
"name": "Token-Permissions",
"detail": "detected GitHub workflow tokens with excessive permissions",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "vulnerabilities",
"name": "Vulnerabilities",
"detail": "14 existing vulnerabilities detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
}
]
},
{
"key": "dependency_advisories",
"band": "moderate",
"name": "Dependency advisories",
"note": "Excluded from scoring (no data or not applicable): Indirect dependencies free of known advisories. Remaining weights renormalized. Matched 89 resolved dependencies against OSV. This repository publishes no package the index resolves, so the repository dependency graph was assessed instead. That graph mixes development and test pins with shipped dependencies, so only the declared runtime dependencies are scored; transitive findings are reported as context and excluded from the score. Reachability is not analyzed.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"indirect_dependencies_free_of_known_advisories"
]
}
},
{
"code": "weights_renormalized",
"params": {}
},
{
"code": "advisories_scope_repository",
"params": {
"assessed": 89
}
},
{
"code": "advisories_repo_graph_caveat",
"params": {}
},
{
"code": "advisories_reachability",
"params": {}
}
],
"value": 56,
"inputs": {
"source": "osv",
"advisories": 19,
"affected_packages": 6,
"assessed_packages": 89,
"unassessed_packages": 0,
"affected_by_severity": "critical 1, high 2, moderate 1, unknown 2",
"direct_affected_packages": 1
},
"components": [
{
"key": "direct_dependencies_free_of_known_advisories",
"name": "Direct dependencies free of known advisories",
"detail": "1 affected: google.golang.org/grpc v1.72.2 (critical 9.1)",
"points": 9.5,
"status": "partial",
"details": [
{
"code": "advisories_affected",
"params": {
"count": 1,
"packages": "google.golang.org/grpc v1.72.2 (critical 9.1)"
}
}
],
"max_points": 35
},
{
"key": "indirect_dependencies_free_of_known_advisories",
"name": "Indirect dependencies free of known advisories",
"detail": "transitive set not separable from development and test dependencies in this scope",
"points": 0,
"status": "excluded",
"details": [
{
"code": "advisories_scope_not_separable",
"params": {}
}
],
"max_points": 25
},
{
"key": "no_advisories_left_outstanding",
"name": "No advisories left outstanding",
"detail": "1 advisory-carrying package(s) unaddressed past 90 days; oldest published 133 days ago",
"points": 32.6,
"status": "partial",
"details": [
{
"code": "advisories_stale",
"params": {
"days": 90,
"count": 1,
"oldest": 133
}
}
],
"max_points": 40
}
]
},
{
"key": "malicious_dependencies",
"band": "exceptional",
"name": "Malicious dependencies",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"source": "osv",
"meaning": "reported as a malicious package by the OpenSSF corpus; the remedy is removal or moving off the compromised name, never an upgrade of the same artifact. Versions the registry has since pulled are listed but not scored",
"packages": [],
"red_flag": false,
"assessed_packages": 89,
"malicious_packages": 0,
"direct_malicious_packages": 0,
"withdrawn_malicious_packages": 0,
"installable_malicious_packages": 0
},
"components": [
{
"key": "no_dependency_reported_as_a_malicious_package",
"name": "No dependency reported as a malicious package",
"detail": "no dependency is reported as a malicious package",
"points": 100,
"status": "met",
"details": [
{
"code": "no_malicious_dependencies",
"params": {}
}
],
"max_points": 100
}
]
},
{
"key": "high_risk_jurisdiction_exposure",
"band": "exceptional",
"name": "High-Risk Jurisdiction Exposure",
"note": "Only high-confidence self-published location evidence affects this multiplier. Ambiguous matches are review-only; country evidence is not proof of nationality, citizenship, legal registration, malicious intent, or sanctions status.",
"notes": [
{
"code": "jurisdiction_evidence_limits",
"params": {}
}
],
"value": 100,
"inputs": {
"meaning": "self-published location evidence; not nationality or citizenship",
"red_flag": false,
"exposures": [],
"policy_countries": [
"Russia",
"Iran",
"North Korea"
],
"commit_weight_rule": {
"min_commits": 50,
"min_commit_share": 0.1
},
"review_only_matches": 0,
"below_threshold_exposures": [],
"assessed_self_published_locations": 7
},
"components": [
{
"key": "policy_exposure_multiplier",
"name": "Policy exposure multiplier",
"detail": "no confirmed policy-scope location match",
"points": 100,
"status": "met",
"details": [
{
"code": "jurisdiction_no_match",
"params": {}
}
],
"max_points": 100
}
]
}
],
"description": "Are visible security and supply-chain practices strong, with no malicious dependency and no unresolved high-risk jurisdiction exposure?"
},
{
"key": "ai_readiness",
"band": "moderate",
"name": "AI Readiness",
"value": 62,
"weight": 0.04,
"metrics": [
{
"key": "ai_agent_context",
"band": "weak",
"name": "Agent context & guidance",
"note": null,
"notes": [],
"value": 40,
"inputs": {
"has_llms_txt": false,
"legible_history_share": 0.99,
"agent_instruction_files": [],
"agent_instruction_max_bytes": null
},
"components": [
{
"key": "agent_instructions",
"name": "Agent instructions",
"detail": "no CLAUDE.md / AGENTS.md / editor rules",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_agent_instructions",
"params": {}
}
],
"max_points": 45
},
{
"key": "machine_readable_docs_llms_txt",
"name": "Machine-readable docs (llms.txt)",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
},
{
"key": "legible_commit_history",
"name": "Legible commit history",
"detail": "99 of 100 human commits state their intent (structured subject or explanatory body)",
"points": 40,
"status": "met",
"details": [
{
"code": "legible_history",
"params": {
"legible": 99,
"sampled": 100
}
}
],
"max_points": 40
}
]
},
{
"key": "ai_verify_loop",
"band": "good",
"name": "Verify loop (build / test / typecheck)",
"note": null,
"notes": [],
"value": 72,
"inputs": {
"has_nix": false,
"has_tests": true,
"lockfiles": [
"go.sum"
],
"has_dockerfile": true,
"typed_language": true,
"bootstrap_files": [
"Makefile"
],
"has_devcontainer": false,
"has_linter_config": true,
"typecheck_configs": [],
"agent_commit_share": 0,
"toolchain_manifests": [
"go.mod"
],
"dependency_bot_commit_share": 0
},
"components": [
{
"key": "one_command_bootstrap",
"name": "One-command bootstrap",
"detail": "Makefile",
"points": 18,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "Makefile"
}
}
],
"max_points": 18
},
{
"key": "automated_tests",
"name": "Automated tests",
"detail": null,
"points": 22,
"status": "met",
"details": [],
"max_points": 22
},
{
"key": "lint_format_config",
"name": "Lint / format config",
"detail": ".golangci.yaml",
"points": 11,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": ".golangci.yaml"
}
}
],
"max_points": 11
},
{
"key": "static_type_checking",
"name": "Static type checking",
"detail": "Go (statically typed)",
"points": 11,
"status": "met",
"details": [
{
"code": "statically_typed_language",
"params": {
"language": "Go"
}
}
],
"max_points": 11
},
{
"key": "reproducible_environment",
"name": "Reproducible environment",
"detail": "Dockerfile, lockfile",
"points": 10,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "Dockerfile, lockfile"
}
}
],
"max_points": 10
},
{
"key": "demonstrated_agent_practice",
"name": "Demonstrated agent practice",
"detail": "no agent-authored commits among the last 100",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_agent_authored_commits",
"params": {
"sampled": 100
}
}
],
"max_points": 10
},
{
"key": "automated_maintenance",
"name": "Automated maintenance",
"detail": "no automated dependency updates observed",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_dependency_automation",
"params": {}
}
],
"max_points": 8
},
{
"key": "openssf_scorecard_pinned_dependencies",
"name": "OpenSSF Scorecard: Pinned-Dependencies",
"detail": "dependency not pinned by hash detected -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
},
{
"key": "ai_code_legibility",
"band": "exceptional",
"name": "Code legibility for models",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"primary_language": "Go",
"largest_source_bytes": 53096,
"source_files_sampled": 87,
"oversized_source_files": 0
},
"components": [
{
"key": "type_checkable_code",
"name": "Type-checkable code",
"detail": "Go (statically typed)",
"points": 45,
"status": "met",
"details": [
{
"code": "statically_typed_language",
"params": {
"language": "Go"
}
}
],
"max_points": 45
},
{
"key": "manageable_file_sizes",
"name": "Manageable file sizes",
"detail": "0/87 source files over 60KB",
"points": 55,
"status": "met",
"details": [
{
"code": "oversized_source_files",
"params": {
"kb": 60,
"sampled": 87,
"oversized": 0
}
}
],
"max_points": 55
}
]
},
{
"key": "ai_interfaces",
"band": "weak",
"name": "Machine-readable interfaces",
"note": null,
"notes": [],
"value": 40,
"inputs": {
"example_dirs": [
"examples"
],
"has_mcp_signal": false,
"api_schema_files": []
},
"components": [
{
"key": "api_schema_openapi_graphql_proto",
"name": "API schema (OpenAPI/GraphQL/proto)",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 40
},
{
"key": "mcp_server",
"name": "MCP server",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 20
},
{
"key": "runnable_examples",
"name": "Runnable examples",
"detail": "examples",
"points": 40,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "examples"
}
}
],
"max_points": 40
}
]
}
],
"description": "How well is the repo equipped to be developed and maintained with AI coding agents? Carries a deliberately small weight: agent tooling is a real maintenance signal, but its absence must never gate the top of the scale (calibration saturates at raw 91, so 100/100 remains reachable with AI Readiness at zero)."
}
],
"classification": {
"labels": [
"library"
],
"scores": {
"library": 6
},
"primary": "library",
"evidence": [
{
"tier": "distribution",
"label": "library",
"source": "registry:go",
"weight": 6
}
],
"artifacts": [],
"confidence": "medium",
"host_extension": false,
"runs_as_process": false,
"consumed_by_code": true
},
"metrics_version": "2.3.1"
},
"warnings": [
"Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token"
],
"report_type": "repository",
"generated_at": "2026-07-30T02:00:15.565025Z",
"schema_version": "0.27.0",
"badge_url": "https://raw.githubusercontent.com/inspect-software/badges/main/v1/k/k8stopologyawareschedwg/resource-topology-exporter.svg",
"full_name": "k8stopologyawareschedwg/resource-topology-exporter",
"license_state": "standard",
"license_spdx": "Apache-2.0"
}
Verwandte Einträge
Geprüfte Repositories, die Katalog-Tags oder Ökosysteme mit k8stopologyawareschedwg/resource-topology-exporter teilen. Nebeneinander lesen →
Bewertungen sind Signale, keine Garantien. Sie spiegeln öffentlich sichtbare Praxis auf GitHub wider — kein Code-Audit und keine Sicherheitsgarantie.
Fehlende Daten werden ausgeschlossen und die Gewichte neu normiert, nie als null bewertet. Die Methodik ist versioniert und offen: Metriken v2.3.1, Schema v0.27.0 — vollständige Methodik · Metriken-Wiki.
