Öffentliches Register
Software-GesundheitsberichtSchema 0.27.0 · Metriken 2.5.0 · 2026-07-30 23:51 UTC

ocean / ecto_libsql

Elixir Ecto database adapter for libSQL/Turso

Elixir · RustApache-2.0★ 38 Sterne⑂ 5 Forksseit Nov. 2025Auf GitHub ansehen ↗

ocean/ecto_libsql erreicht einen Gesundheitsindex von 75 von 100 und liegt damit im Bereich Gut. Am stärksten schneidet es bei Vitality (86/100) ab, am schwächsten bei Community & Adoption (40/100). Zuletzt vor 1 Tag aktualisiert. Ein einzelner Mitwirkender trägt den Großteil der jüngsten Arbeit.

75
gesamt / 100
Gut

Software-Gesundheitsindex

Metriken werden auf einer standardisierten Skala von 1–100 in gewichtete Kategorien gruppiert. Der Gesamtwert beginnt als ihr gewichtetes Mittel, kalibriert auf die Verteilung des öffentlichen Registers, sodass die Stufen Perzentilbedeutung tragen; sobald öffentliche Evidenz die Richtlinie für Hochrisikojurisdiktionen auslöst, wird die Bewertung angepasst und erhält die Obergrenze Gefährdet von 34.

75
Außergewöhnlich93-100Die Spitzengruppe des Registers (≈ obere 5 %); erfüllt im Wesentlichen alle geprüften Kriterien
Exzellent80-92Durchgehend stark; geringfügige Lücken
Gut65-79Gesund; Lücken sind begrenzt und beherrschbar
Mittel50-64Akzeptabel mit deutlichen Lücken; Überprüfung empfohlen
Schwach35-49Wesentliche Schwächen in mehreren Bereichen
Gefährdet20-34Erhebliche Schwächen; eine Übernahme erfordert Vorsicht
Kritisch1-19Schwerwiegende Probleme (aufgegeben, nur ein Maintainer, keine Hygiene)
VitalitätCommunity &VerbreitungNachhaltigkeit &GovernanceEngineering-QualitätSicherheitAI Readiness

Bewertungsprofil

Jede Achse ist eine Kategorie. Die Form zählt mehr als der Durchschnitt — ein gesundes Projekt füllt die gesamte Fläche, während ein Profil aus Spitzen und Kratern bedeutet, dass Stärke in einer Dimension Risiken in einer anderen verdeckt.

Der gewichtete Gesamtwert 65 wird auf der veröffentlichten Indexskala auf 75 kalibriert (Register-Kalibrierung 2026-08-02).

Eigentümerschaft

Drew RobinsonPersönliches Konto
68 Follower98 öffentliche Reposseit Apr. 2008

Dieses Repository gehört einem persönlichen Konto. Ein Projekt mit nur einem Eigentümer trägt ein höheres Kontinuitätsrisiko als ein organisationsgetragenes.

Paket-Ökosysteme

RegistryPaketVersionDownloads / MonatVersionenZuletzt veröffentlicht
Hexecto_libsql0.9.130614vor 79 Tagen

Metriken nach Kategorie

Vitalität

Lebt das Projekt — wird Code geschrieben und werden Releases ausgeliefert?

86Exzellent · 21 % des Gesamtindex
Wie die Bewertung erfolgt
36/36Push-Aktualität — letzter Push vor 1 Tagen
20.1/36Commit-Rhythmus — 29/52 Wochen mit Commits
18/18Commit-Volumen — 680 Commits im letzten Jahr
10/10OpenSSF Scorecard: Maintained — 30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10
Verwendete Eingangsdaten
commits_last_year680
human_commit_share0,89
days_since_last_push1
active_weeks_last_year29
Wie die Bewertung erfolgt
27/27Liefert Releases aus — 14 Releases veröffentlicht
36/36Release-Aktualität — letztes Release vor 79 Tagen
27/27Release-Rhythmus — ein Release etwa alle 16,4 Tage
0/10OpenSSF Scorecard: Signed-Releases — Project has not signed or included provenance with any releases.
Verwendete Eingangsdaten
releases_count14
latest_release_tag0.9.1
releases_from_tagsnein
days_since_latest_release79
mean_days_between_releases16,4

Community & Verbreitung

Hat das Projekt Nutzer, Downloads, Aufmerksamkeit und ein einladendes Umfeld für Beitragende?

40Schwach · 17 % des Gesamtindex
Wie die Bewertung erfolgt
25.4/60Stars — 38 Stars
5/25Forks — 5 Forks
0/15Watcher — 1 Watcher
Verwendete Eingangsdaten
forks5
stars38
watchers1
growth_stateunverified
growth_factor_pct100
growth_unverified_reasonno_history
Wie die Bewertung erfolgt
22.5/22.5README
22.5/22.5Lizenz — anerkannte Lizenz (Apache-2.0)
0/18CONTRIBUTING-Leitfaden
0/13.5Verhaltenskodex
0/7.2Issue-Vorlage
0/6.3PR-Vorlage
Verwendete Eingangsdaten
has_readmeja
has_licenseja
readme_badges
has_contributingnein
has_issue_templatenein
has_code_of_conductnein
readme_badge_services
has_pull_request_templatenein
Wie die Bewertung erfolgt
33.2/80Downloads pro Monat — 306 Downloads/Monat über hex
0/20Abhängige in der Registry — von diesem Ökosystem nicht ausgewiesen
Verwendete Eingangsdaten
packagesecto_libsql
dependents
ecosystemshex
total_downloads2.421
monthly_downloads306
Von der Bewertung ausgeschlossen (keine Daten oder nicht anwendbar): Abhängige in der Registry. Die verbleibenden Gewichte wurden renormalisiert.

Nachhaltigkeit & Governance

Überdauert das Projekt die Menschen, die es tragen — Bus-Faktor, Reaktionsfähigkeit, Trägerschaft und Paketpflege?

61Mittel · 23 % des Gesamtindex
Wie die Bewertung erfolgt
9/54Bus-Faktor — 1 Beitragende decken die Hälfte aller Commits ab
2.6/22.5Commit-Verteilung — wichtigste beitragende Person verfasste 89 % der Commits
8.1/13.5Breite der Beitragenden — 6 Beitragende
6/10OpenSSF Scorecard: Contributors — project has 2 contributing companies or organizations -- score normalized to 6
Verwendete Eingangsdaten
bus_factor1
contributors_sampled6
top_contributor_share0,886
Wie die Bewertung erfolgt
36/42Issue-Lösungsquote — 86 % der Issues geschlossen
26.2/30PR-Annahme — 90/103 entschiedene PRs gemergt
0/13Newcomer PR acceptance — kein PR eines Erstbeitragenden in 30 Tagen entschieden
1.5/15OpenSSF Scorecard: Code-Review — Found 1/6 approved changesets -- score normalized to 1
Verwendete Eingangsdaten
merged_prs90
open_issues1
closed_issues6
prs_merged_7d
prs_decided_7d
prs_merged_30d
prs_decided_30d
issue_closed_ratio0,857
closed_unmerged_prs13
first_time_authors_30d
first_time_prs_merged_30d
first_time_prs_decided_30d
Von der Bewertung ausgeschlossen (keine Daten oder nicht anwendbar): newcomer_pr_acceptance. Die verbleibenden Gewichte wurden renormalisiert.
Wie die Bewertung erfolgt
10/30Organisatorische Trägerschaft — persönliches (Nutzer-)Konto
0/20Verifizierte Domain — für Nutzerkonten nicht anwendbar
13.2/25Reichweite des Inhabers — 68 Follower von ocean
25/25Kontohistorie — 98 öffentliche Repos, Kontoalter ca. 18 Jahre
Verwendete Eingangsdaten
followers68
owner_typeUser
is_verified
owner_loginocean
public_repos98
account_age_days6.692
Von der Bewertung ausgeschlossen (keine Daten oder nicht anwendbar): Verifizierte Domain. Die verbleibenden Gewichte wurden renormalisiert.

Paketpflege

100Außergewöhnlich
Wie die Bewertung erfolgt
25/25Veröffentlicht & auflösbar — 1 Paket(e) auf hex
35/35Veröffentlichungsaktualität — letzte Veröffentlichung vor 79 Tagen
20/20Versionshistorie — 14 veröffentlichte Versionen
20/20Nicht veraltet — aktiv, nicht veraltet oder zurückgezogen
Verwendete Eingangsdaten
packagesecto_libsql
ecosystemshex
any_deprecatednein
min_days_since_publish79

Engineering-Qualität

Sind grundlegende Engineering- und Dokumentationspraktiken vorhanden?

65Gut · 19 % des Gesamtindex
Wie die Bewertung erfolgt
24/24CI-Workflows — 3 Workflow(s)
24/24Tests vorhanden
0/16Linter-Konfiguration
0/9.6Pre-Commit-Hooks
0/6.4.editorconfig
20/20OpenSSF Scorecard: CI-Tests — 10 out of 10 merged PRs checked by a CI test -- score normalized to 10
Verwendete Eingangsdaten
has_cija
has_testsja
has_editorconfignein
has_linter_confignein
has_precommit_confignein
Wie die Bewertung erfolgt
30/30README
0/25Dokumentationsverzeichnis
0/15Dokumentations-/Homepage-Site
10/10Repository-Beschreibung
10/10Topics — 7 Topics
10/10Wiki
Verwendete Eingangsdaten
topicsecto, ecto-adapter, elixir-library, libsql, libsql-client, turso, turso-db
has_wikija
homepage
has_readmeja
has_docs_dirnein
has_descriptionja

Sicherheit

Sind die sichtbaren Sicherheits- und Lieferkettenpraktiken belastbar, ohne ungeklärte Exposition gegenüber Hochrisikojurisdiktionen?

69Gut · 16 % des Gesamtindex
Wie die Bewertung erfolgt
7.5/7.5Binary-Artifacts — no binaries found in the repo
2.2/7.5Branch-Protection — branch protection is not maximal on development and all release branches
2.5/2.5CI-Tests — 10 out of 10 merged PRs checked by a CI test -- score normalized to 10
0/2.5CII-Best-Practices — no effort to earn an OpenSSF best practices badge detected
0.8/7.5Code-Review — Found 1/6 approved changesets -- score normalized to 1
1.5/2.5Contributors — project has 2 contributing companies or organizations -- score normalized to 6
10/10Dangerous-Workflow — no dangerous workflow patterns detected
7.5/7.5Dependency-Update-Tool — update tool detected
5/5Fuzzing — project is fuzzed
2.5/2.5Lizenz — license file detected
7.5/7.5Maintained — 30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10
0/5Packaging — keine Daten
2.5/5Pinned-Dependencies — dependency not pinned by hash detected -- score normalized to 5
5/5SAST — SAST tool is run on all commits
5/5Security-Policy — security policy file detected
0/7.5Signed-Releases — Project has not signed or included provenance with any releases.
0/7.5Token-Permissions — detected GitHub workflow tokens with excessive permissions
1.5/7.5Vulnerabilities — 8 existing vulnerabilities detected
Verwendete Eingangsdaten
sourceopenssf_scorecard
checks_evaluated17
scorecard_versionv5.5.0
checks_inconclusive1
scorecard_aggregate6,1
Von der Bewertung ausgeschlossen (keine Daten oder nicht anwendbar): packaging. Die verbleibenden Gewichte wurden renormalisiert.

Abhängigkeits-Advisories

100Außergewöhnlich
Wie die Bewertung erfolgt
35/35Direkte Abhängigkeiten ohne bekannte Advisories — keine direkte Abhängigkeit trägt ein bekanntes Advisory
0/25Indirekte Abhängigkeiten ohne bekannte Advisories — transitive Menge in diesem Bereich nicht von Entwicklungs- und Test-Abhängigkeiten trennbar
0/40Keine offenen Advisories — kein Advisory trägt ein Veröffentlichungsdatum
Verwendete Eingangsdaten
sourceosv
advisories12
affected_packages5
assessed_packages325
unassessed_packages6
affected_by_severityhigh 1, low 1, unknown 3
direct_affected_packages0
Von der Bewertung ausgeschlossen (keine Daten oder nicht anwendbar): Indirekte Abhängigkeiten ohne bekannte Advisories, Keine offenen Advisories. Die verbleibenden Gewichte wurden renormalisiert. 325 aufgelöste Abhängigkeiten wurden mit OSV abgeglichen. 6 konnten nicht bewertet werden — keine aufgelöste Version, ein nicht unterstütztes Ökosystem oder außerhalb der ausgewiesenen Paketliste. Dieses Repository veröffentlicht kein Paket, das der Index auflöst; bewertet wurde daher der Abhängigkeitsgraph des Repositorys. Dieser Graph vermischt Entwicklungs- und Test-Pins mit ausgelieferten Abhängigkeiten, daher werden nur die deklarierten Laufzeit-Abhängigkeiten bewertet; transitive Befunde werden als Kontext ausgewiesen und fließen nicht in die Bewertung ein. Erreichbarkeit wird nicht analysiert.

AI Readiness

Wie gut ist das Repository dafür ausgestattet, mit KI-Coding-Agenten entwickelt und gepflegt zu werden? Trägt ein bewusst kleines Gewicht (4 %): Agenten-Tooling ist ein echtes Pflegesignal, doch ein Repository ohne jedes Signal kann weiterhin 100/100 erreichen.

65Gut · 4 % des Gesamtindex
Wie die Bewertung erfolgt
45/45Agentenanweisungen — CLAUDE.md
0/15Maschinenlesbare Doku (llms.txt)
40/40Lesbare Commit-Historie — 73 von 89 menschlichen Commits benennen ihre Absicht (strukturierter Betreff oder erläuternder Text)
Verwendete Eingangsdaten
has_llms_txtnein
legible_history_share0,82
agent_instruction_filesCLAUDE.md
agent_instruction_max_bytes15.037
Wie die Bewertung erfolgt
18/18Bootstrap mit einem Befehl — mise.toml
22/22Automatisierte Tests
0/11Lint-/Format-Konfiguration
0/11Statische Typprüfung
10/10Reproduzierbare Umgebung — lockfile
0/10Belegte Agentenpraxis — keine von Agenten verfassten Commits unter den letzten 100
8/8Automatisierte Wartung — 11 der letzten 100 Commits sind automatisierte Abhängigkeits-Updates
5/10OpenSSF Scorecard: Pinned-Dependencies — dependency not pinned by hash detected -- score normalized to 5
Verwendete Eingangsdaten
has_nixnein
has_testsja
lockfilesCargo.lock, mix.lock
has_dockerfilenein
typed_languagenein
bootstrap_filesmise.toml
has_devcontainernein
has_linter_confignein
typecheck_configs
agent_commit_share0
toolchain_manifestsCargo.toml, mix.exs, native/ecto_libsql/Cargo.toml, native/ecto_libsql/fuzz/Cargo.toml
dependency_bot_commit_share0,11
Wie die Bewertung erfolgt
0/45Typprüfbarer Code — Elixir ohne Typprüfungs-Konfiguration
54.4/55Handhabbare Dateigrößen — 1/97 Quelldateien über 60 KB
Verwendete Eingangsdaten
primary_languageElixir
largest_source_bytes75.278
source_files_sampled97
oversized_source_files1
Wie die Bewertung erfolgt
0/40API-Schema (OpenAPI/GraphQL/proto)
0/20MCP-Server
40/40Lauffähige Beispiele — examples
Verwendete Eingangsdaten
example_dirsexamples
has_mcp_signalnein
api_schema_files

Eckdaten

38GitHub-Sterne
6Mitwirkende
680Commits, letzte 12 Monate
1Tage seit letztem Push
14Releases
1Bus-Faktor
1offene Issues
crates.io, HexPaket-Ökosysteme

Warnungen zur Datenerhebung

  • Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token

Weitere Details

Stern- und Fork-Verlauf 0 ★ / 5 ⇿
0Sterne
5Forks
4Releases

Wann jeder Stern und Fork hinzugefügt wurde, von GitHub erfasst und nach Tagen gruppiert. Das kumulierte Wachstum steht direkt über den täglichen Zugängen, aus denen es besteht, sodass beide gegeneinander lesbar sind: stetiger organischer Zuwachs sieht ganz anders aus als ein abrupter, kurzlebiger Ausschlag. Wo dieser Unterschied messbar ist, wird er als Wachstumsauthentizität ausgewiesen.

12345512026-012026-032026-04
Major 0Minor 1Patch 3
OpenSSF Scorecard 6.1 / 10
6.1Gesamtwert

Unabhängige, werkzeugneutrale Sicherheitsbewertung durch das quelloffene OpenSSF Scorecard. Jede Prüfung honoriert eine Sicherheits-Praxis, nicht das Werkzeug eines bestimmten Anbieters. Prüfungen, die Scorecard nicht ermitteln konnte, sind mit k. A. markiert und vom Sicherheitswert ausgeschlossen (nie als null gezählt).Scorecard v5.5.0 · 2026-07-30 23:50 UTC

10Binary-Artifactsno binaries found in the repo
3Branch-Protectionbranch protection is not maximal on development and all release branches
10CI-Tests10 out of 10 merged PRs checked by a CI test -- score normalized to 10
0CII-Best-Practicesno effort to earn an OpenSSF best practices badge detected
1Code-ReviewFound 1/6 approved changesets -- score normalized to 1
6Contributorsproject has 2 contributing companies or organizations -- score normalized to 6
10Dangerous-Workflowno dangerous workflow patterns detected
10Dependency-Update-Toolupdate tool detected
10Fuzzingproject is fuzzed
10Licenselicense file detected
10Maintained30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10
k. A.Packagingpackaging workflow not detected
5Pinned-Dependenciesdependency not pinned by hash detected -- score normalized to 5
10SASTSAST tool is run on all commits
10Security-Policysecurity policy file detected
0Signed-ReleasesProject has not signed or included provenance with any releases.
0Token-Permissionsdetected GitHub workflow tokens with excessive permissions
2Vulnerabilities8 existing vulnerabilities detected
Direkte Abhängigkeiten 6
RegistryPaketVersionsvorgabeManifest
Hexdb_connection~> 2.1mix.exs
Hexecto~> 3.11mix.exs
Hexecto_sql~> 3.11mix.exs
Hexjason~> 1.4mix.exs
Hexrustler~> 0.38mix.exs
Hexrustler_precompiled~> 0.8mix.exs
Alle Abhängigkeiten 331

Vollständig aufgelöster Abhängigkeitssatz aus dem GitHub-Abhängigkeitsgraphen: 0 direkte und 331 indirekte (transitive) Pakete. Die transitive Hülle ist vollständig, wenn das Repository eine Lockfile eincheckt.

RegistryPaketVersionBeziehung
crates.ioaes0.8.4indirekt
crates.ioahash0.8.12indirekt
crates.ioaho-corasick1.1.4indirekt
crates.ioallocator-api20.2.21indirekt
crates.ioandroid_system_properties0.1.5indirekt
crates.ioanyhow1.0.100indirekt
crates.ioanyhow1.0.103indirekt
crates.ioarbitrary1.4.2indirekt
crates.ioasync-stream0.3.6indirekt
crates.ioasync-stream-impl0.3.6indirekt
crates.ioasync-trait0.1.89indirekt
crates.ioautocfg1.5.0indirekt
crates.ioautocfg1.5.1indirekt
crates.ioaxum0.6.20indirekt
crates.ioaxum-core0.3.4indirekt
crates.iobase640.21.7indirekt
crates.iobincode1.3.3indirekt
crates.iobindgen0.66.1indirekt
crates.iobit-set0.8.0indirekt
crates.iobit-vec0.8.0indirekt
crates.iobitflags1.3.2indirekt
crates.iobitflags2.10.0indirekt
crates.iobitflags2.13.0indirekt
crates.ioblock-padding0.3.3indirekt
crates.iobumpalo3.19.1indirekt
crates.iobumpalo3.20.3indirekt
crates.iobyteorder1.5.0indirekt
crates.iobytesindirekt
crates.iobytes1.11.1indirekt
crates.iobytes1.12.0indirekt
crates.iocbc0.1.2indirekt
crates.iocc1.2.51indirekt
crates.iocc1.2.65indirekt
crates.iocexpr0.6.0indirekt
crates.iocfg-if1.0.4indirekt
crates.iochrono0.4.42indirekt
crates.iochrono0.4.45indirekt
crates.iocipher0.4.4indirekt
crates.ioclang-sys1.8.1indirekt
crates.iocmake0.1.57indirekt
crates.iocmake0.1.58indirekt
crates.iocore-foundation0.9.4indirekt
crates.iocore-foundation-sys0.8.7indirekt
crates.iocpufeatures0.2.17indirekt
crates.iocrc32fast1.5.0indirekt
crates.iocrypto-common0.1.7indirekt
crates.ioderive_arbitrary1.4.2indirekt
crates.ioeither1.15.0indirekt
crates.ioeither1.16.0indirekt
crates.ioequivalent1.0.2indirekt
crates.ioerrno0.3.14indirekt
crates.iofallible-iterator0.2.0indirekt
crates.iofallible-iterator0.3.0indirekt
crates.iofallible-streaming-iterator0.1.9indirekt
crates.iofastrand2.4.1indirekt
crates.iofind-msvc-tools0.1.6indirekt
crates.iofind-msvc-tools0.1.9indirekt
crates.iofnv1.0.7indirekt
crates.iofutures0.3.31indirekt
crates.iofutures0.3.32indirekt
crates.iofutures-channel0.3.31indirekt
crates.iofutures-channel0.3.32indirekt
crates.iofutures-core0.3.31indirekt
crates.iofutures-core0.3.32indirekt
crates.iofutures-executor0.3.31indirekt
crates.iofutures-executor0.3.32indirekt
crates.iofutures-io0.3.31indirekt
crates.iofutures-io0.3.32indirekt
crates.iofutures-macro0.3.31indirekt
crates.iofutures-macro0.3.32indirekt
crates.iofutures-sink0.3.31indirekt
crates.iofutures-sink0.3.32indirekt
crates.iofutures-task0.3.31indirekt
crates.iofutures-task0.3.32indirekt
crates.iofutures-util0.3.31indirekt
crates.iofutures-util0.3.32indirekt
crates.iogeneric-array0.14.7indirekt
crates.iogetrandom0.2.16indirekt
crates.iogetrandom0.2.17indirekt
crates.iogetrandom0.3.4indirekt
crates.iogetrandom0.4.3indirekt
crates.ioglob0.3.3indirekt
crates.ioh20.3.27indirekt
crates.iohashbrown0.12.3indirekt
crates.iohashbrown0.14.5indirekt
crates.iohashbrown0.16.1indirekt
crates.iohashbrown0.17.0indirekt
crates.iohashlink0.8.4indirekt
crates.ioheck0.5.0indirekt
crates.iohome0.5.12indirekt
crates.iohttp0.2.12indirekt
crates.iohttp-body0.4.6indirekt
crates.iohttp-range-header0.3.1indirekt
crates.iohttparse1.10.1indirekt
crates.iohttpdate1.0.3indirekt
crates.iohyper0.14.32indirekt
crates.iohyper-rustls0.25.0indirekt
crates.iohyper-timeout0.4.1indirekt
crates.ioiana-time-zone0.1.64indirekt
crates.ioiana-time-zone0.1.65indirekt
crates.ioiana-time-zone-haiku0.1.2indirekt
crates.ioindexmap1.9.3indirekt
crates.ioindexmap2.12.1indirekt
crates.ioindexmap2.14.0indirekt
crates.ioinout0.1.4indirekt
crates.ioinventory0.3.21indirekt
crates.ioinventory0.3.24indirekt
crates.ioitertools0.12.1indirekt
crates.ioitoa1.0.16indirekt
crates.ioitoa1.0.18indirekt
crates.iojobserver0.1.34indirekt
crates.iojs-sys0.3.83indirekt
crates.iojs-sys0.3.97indirekt
crates.iolazy_static1.5.0indirekt
crates.iolazycell1.3.0indirekt
crates.iolibc0.2.178indirekt
crates.iolibc0.2.186indirekt
crates.iolibfuzzer-sys0.4.10indirekt
crates.iolibloading0.8.9indirekt
crates.iolibloading0.9.0indirekt
crates.iolibsqlindirekt
crates.iolibsql0.9.29indirekt
crates.iolibsql0.9.30indirekt
crates.iolibsql-ffi0.9.29indirekt
crates.iolibsql-ffi0.9.30indirekt
crates.iolibsql-hrana0.9.29indirekt
crates.iolibsql-hrana0.9.30indirekt
crates.iolibsql-rusqlite0.9.29indirekt
crates.iolibsql-rusqlite0.9.30indirekt
crates.iolibsql-sqlite3-parser0.13.0indirekt
crates.iolibsql-sys0.9.29indirekt
crates.iolibsql-sys0.9.30indirekt
crates.iolibsql_replication0.9.29indirekt
crates.iolibsql_replication0.9.30indirekt
crates.iolinux-raw-sys0.12.1indirekt
crates.iolinux-raw-sys0.4.15indirekt
crates.iolock_api0.4.14indirekt
crates.iolog0.4.29indirekt
crates.iolog0.4.33indirekt
crates.iomatchit0.7.3indirekt
crates.iomemchr2.7.6indirekt
crates.iomemchr2.8.2indirekt
crates.iomime0.3.17indirekt
crates.iominimal-lexical0.2.1indirekt
crates.iomio1.1.1indirekt
crates.iomio1.2.1indirekt
crates.ionom7.1.3indirekt
crates.ionum-traits0.2.19indirekt
crates.ioonce_cell1.21.3indirekt
crates.ioonce_cell1.21.4indirekt
crates.ioopenssl-probe0.1.6indirekt
crates.ioparking_lot0.12.5indirekt
crates.ioparking_lot_core0.9.12indirekt
crates.iopeeking_take_while0.1.2indirekt
crates.iopercent-encoding2.3.2indirekt
crates.iophf0.11.3indirekt
crates.iophf_codegen0.11.3indirekt
crates.iophf_generator0.11.3indirekt
crates.iophf_shared0.11.3indirekt
crates.iopin-project1.1.10indirekt
crates.iopin-project1.1.13indirekt
crates.iopin-project-internal1.1.10indirekt
crates.iopin-project-internal1.1.13indirekt
crates.iopin-project-lite0.2.16indirekt
crates.iopin-project-lite0.2.17indirekt
crates.iopin-utils0.1.0indirekt
crates.ioppv-lite860.2.21indirekt
crates.ioprettyplease0.2.37indirekt
crates.ioproc-macro21.0.103indirekt
crates.ioproc-macro21.0.106indirekt
crates.ioproptestindirekt
crates.ioproptest1.11.0indirekt
crates.ioprost0.12.6indirekt
crates.ioprost-derive0.12.6indirekt
crates.ioquick-error1.2.3indirekt
crates.ioquote1.0.42indirekt
crates.ioquote1.0.46indirekt
crates.ior-efi5.3.0indirekt
crates.ior-efi6.0.0indirekt
crates.iorand0.8.6indirekt
crates.iorand0.9.4indirekt
crates.iorand_chacha0.3.1indirekt
crates.iorand_chacha0.9.0indirekt
crates.iorand_core0.6.4indirekt
crates.iorand_core0.9.5indirekt
crates.iorand_xorshift0.4.0indirekt
crates.ioredox_syscall0.5.18indirekt
crates.ioregex1.12.2indirekt
crates.ioregex1.12.4indirekt
crates.ioregex-automata0.4.13indirekt
crates.ioregex-automata0.4.14indirekt
crates.ioregex-lite0.1.8indirekt
crates.ioregex-lite0.1.9indirekt
crates.ioregex-syntax0.8.11indirekt
crates.ioregex-syntax0.8.8indirekt
crates.ioring0.17.14indirekt
crates.iorustc-hash1.1.0indirekt
crates.iorustix0.38.44indirekt
crates.iorustix1.1.4indirekt
crates.iorustlerindirekt
crates.iorustler0.37.2indirekt
crates.iorustler0.38.0indirekt
crates.iorustler_codegen0.37.2indirekt
crates.iorustler_codegen0.38.0indirekt
crates.iorustls0.22.4indirekt
crates.iorustls-native-certs0.7.3indirekt
crates.iorustls-pemfile2.2.0indirekt
crates.iorustls-pki-types1.13.2indirekt
crates.iorustls-pki-types1.14.1indirekt
crates.iorustls-webpki0.102.8indirekt
crates.iorustversion1.0.22indirekt
crates.iorusty-fork0.3.1indirekt
crates.ioschannel0.1.28indirekt
crates.ioschannel0.1.29indirekt
crates.ioscopeguard1.2.0indirekt
crates.iosecurity-framework2.11.1indirekt
crates.iosecurity-framework-sys2.15.0indirekt
crates.iosecurity-framework-sys2.17.0indirekt
crates.ioserde1.0.228indirekt
crates.ioserde_core1.0.228indirekt
crates.ioserde_derive1.0.228indirekt
crates.ioserde_json1.0.147indirekt
crates.ioserde_json1.0.150indirekt
crates.ioshlex1.3.0indirekt
crates.ioshlex2.0.1indirekt
crates.iosignal-hook-registry1.4.8indirekt
crates.iosiphasher1.0.1indirekt
crates.iosiphasher1.0.3indirekt
crates.ioslab0.4.11indirekt
crates.ioslab0.4.12indirekt
crates.iosmallvec1.15.1indirekt
crates.iosmallvec1.15.2indirekt
crates.iosocket20.5.10indirekt
crates.iosocket20.6.1indirekt
crates.iosocket20.6.4indirekt
crates.iosubtle2.6.1indirekt
crates.iosyn2.0.111indirekt
crates.iosyn2.0.118indirekt
crates.iosync_wrapper0.1.2indirekt
crates.iotempfile3.27.0indirekt
crates.iothiserror1.0.69indirekt
crates.iothiserror-impl1.0.69indirekt
crates.iotokioindirekt
crates.iotokio1.48.0indirekt
crates.iotokio1.52.3indirekt
crates.iotokio-io-timeout1.2.1indirekt
crates.iotokio-macros2.6.0indirekt
crates.iotokio-macros2.7.0indirekt
crates.iotokio-rustls0.25.0indirekt
crates.iotokio-stream0.1.17indirekt
crates.iotokio-stream0.1.18indirekt
crates.iotokio-util0.7.17indirekt
crates.iotokio-util0.7.18indirekt
crates.iotonic0.11.0indirekt
crates.iotonic-web0.11.0indirekt
crates.iotower0.4.13indirekt
crates.iotower-http0.4.4indirekt
crates.iotower-layer0.3.3indirekt
crates.iotower-service0.3.3indirekt
crates.iotracing0.1.44indirekt
crates.iotracing-attributes0.1.31indirekt
crates.iotracing-core0.1.36indirekt
crates.iotry-lock0.2.5indirekt
crates.iotypenum1.19.0indirekt
crates.iotypenum1.20.1indirekt
crates.iounarray0.1.4indirekt
crates.iouncased0.9.10indirekt
crates.iounicode-ident1.0.22indirekt
crates.iounicode-ident1.0.24indirekt
crates.iountrusted0.9.0indirekt
crates.iouuidindirekt
crates.iouuid1.19.0indirekt
crates.iouuid1.23.1indirekt
crates.ioversion_check0.9.5indirekt
crates.iowait-timeout0.2.1indirekt
crates.iowant0.3.1indirekt
crates.iowasi0.11.1+wasi-snapshot-preview1indirekt
crates.iowasip21.0.1+wasi-0.2.4indirekt
crates.iowasip21.0.4+wasi-0.2.12indirekt
crates.iowasm-bindgen0.2.106indirekt
crates.iowasm-bindgen0.2.120indirekt
crates.iowasm-bindgen-macro0.2.106indirekt
crates.iowasm-bindgen-macro0.2.120indirekt
crates.iowasm-bindgen-macro-support0.2.106indirekt
crates.iowasm-bindgen-macro-support0.2.120indirekt
crates.iowasm-bindgen-shared0.2.106indirekt
crates.iowasm-bindgen-shared0.2.120indirekt
crates.iowebpki-roots0.26.11indirekt
crates.iowebpki-roots1.0.4indirekt
crates.iowebpki-roots1.0.8indirekt
crates.iowhich4.4.2indirekt
crates.iowindows-core0.62.2indirekt
crates.iowindows-implement0.60.2indirekt
crates.iowindows-interface0.59.3indirekt
crates.iowindows-link0.2.1indirekt
crates.iowindows-result0.4.1indirekt
crates.iowindows-strings0.5.1indirekt
crates.iowindows-sys0.52.0indirekt
crates.iowindows-sys0.59.0indirekt
crates.iowindows-sys0.60.2indirekt
crates.iowindows-sys0.61.2indirekt
crates.iowindows-targets0.52.6indirekt
crates.iowindows-targets0.53.5indirekt
crates.iowindows_aarch64_gnullvm0.52.6indirekt
crates.iowindows_aarch64_gnullvm0.53.1indirekt
crates.iowindows_aarch64_msvc0.52.6indirekt
crates.iowindows_aarch64_msvc0.53.1indirekt
crates.iowindows_i686_gnu0.52.6indirekt
crates.iowindows_i686_gnu0.53.1indirekt
crates.iowindows_i686_gnullvm0.52.6indirekt
crates.iowindows_i686_gnullvm0.53.1indirekt
crates.iowindows_i686_msvc0.52.6indirekt
crates.iowindows_i686_msvc0.53.1indirekt
crates.iowindows_x86_64_gnu0.52.6indirekt
crates.iowindows_x86_64_gnu0.53.1indirekt
crates.iowindows_x86_64_gnullvm0.52.6indirekt
crates.iowindows_x86_64_gnullvm0.53.1indirekt
crates.iowindows_x86_64_msvc0.52.6indirekt
crates.iowindows_x86_64_msvc0.53.1indirekt
crates.iowit-bindgen0.46.0indirekt
crates.iowit-bindgen0.57.1indirekt
crates.iozerocopy0.7.35indirekt
crates.iozerocopy0.8.31indirekt
crates.iozerocopy0.8.52indirekt
crates.iozerocopy-derive0.7.35indirekt
crates.iozerocopy-derive0.8.31indirekt
crates.iozerocopy-derive0.8.52indirekt
crates.iozeroize1.8.2indirekt
crates.iozeroize1.9.0indirekt
crates.iozmij0.1.10indirekt
crates.iozmij1.0.21indirekt
Abhängigkeits-Advisories 5

Dieses Repository veröffentlicht kein vom Index auflösbares Paket, daher wurde sein eigener Abhängigkeitsgraph bewertet – 325 Pakete, darunter auch Entwicklungs- und Test-Pins, die nie ausgeliefert werden: 5 tragen bekannte Advisories, davon 0 direkte. 6 konnten nicht bewertet werden – keine aufgelöste Version, ein nicht unterstütztes Ökosystem, oder außerhalb der ausgewiesenen Paketliste.

PaketVersionBeziehungSchweregradAdvisoriesBehoben in
rustls-webpki0.102.8indirekthoch80.104.0-alpha.7
libsql-sqlite3-parser0.13.0indirektniedrig1
anyhow1.0.100indirektunbekannt11.0.103
bincode1.3.3indirektunbekannt1
rustls-pemfile2.2.0indirektunbekannt1

Ein Advisory bedeutet, dass die im Abhängigkeitsgraphen erfasste Version in den betroffenen Bereich eines Advisories fällt. Erreichbarkeit wird nicht analysiert, und der Graph enthält Entwicklungs- und Test-Pins — ein Fund kann das Werkzeug betreffen und nicht die ausgelieferte Software.

JSON-Rohbericht maschinenlesbar
{
  "data": {
    "repo": {
      "topics": [
        "ecto",
        "ecto-adapter",
        "elixir-library",
        "libsql",
        "libsql-client",
        "turso",
        "turso-db"
      ],
      "is_fork": false,
      "size_kb": 19660,
      "has_wiki": true,
      "homepage": null,
      "languages": {
        "Rust": 213094,
        "Elixir": 910848
      },
      "pushed_at": "2026-07-29T23:32:21Z",
      "created_at": "2025-11-13T20:56:15Z",
      "owner_type": "User",
      "updated_at": "2026-07-02T23:52:56Z",
      "description": "Elixir Ecto database adapter for libSQL/Turso",
      "is_archived": false,
      "is_disabled": false,
      "license_spdx": "Apache-2.0",
      "default_branch": "main",
      "license_spdx_raw": "Apache-2.0",
      "primary_language": "Elixir",
      "significant_languages": [
        "Elixir",
        "Rust"
      ]
    },
    "owner": {
      "blog": "https://github.com/ocean",
      "name": "Drew Robinson",
      "type": "User",
      "login": "ocean",
      "company": null,
      "location": "Melbourne, Victoria",
      "followers": 68,
      "avatar_url": "https://avatars.githubusercontent.com/u/4443?v=4",
      "created_at": "2008-04-03T04:03:26Z",
      "is_verified": null,
      "public_repos": 98,
      "account_age_days": 6692
    },
    "license": {
      "state": "standard",
      "spdx_id": "Apache-2.0",
      "raw_spdx": "Apache-2.0",
      "file_present": true,
      "scorecard_found": true,
      "profile_has_license": true
    },
    "activity": {
      "releases": [
        {
          "tag": "0.9.1",
          "kind": "patch",
          "published_at": "2026-05-11T23:53:43Z"
        },
        {
          "tag": "0.9.0",
          "kind": "minor",
          "published_at": "2026-02-02T06:25:13Z"
        },
        {
          "tag": "0.8.9",
          "kind": "patch",
          "published_at": "2026-02-02T01:58:05Z"
        },
        {
          "tag": "0.8.8",
          "kind": "patch",
          "published_at": "2026-01-23T02:43:12Z"
        },
        {
          "tag": "0.8.7",
          "kind": "patch",
          "published_at": "2026-01-16T03:53:40Z"
        },
        {
          "tag": "0.8.6",
          "kind": "patch",
          "published_at": "2026-01-07T07:53:10Z"
        },
        {
          "tag": "0.8.3",
          "kind": "patch",
          "published_at": "2025-12-30T06:15:02Z"
        },
        {
          "tag": "0.8.1",
          "kind": "patch",
          "published_at": "2025-12-18T00:24:28Z"
        },
        {
          "tag": "0.8.0",
          "kind": "minor",
          "published_at": "2025-12-17T02:12:30Z"
        },
        {
          "tag": "0.7.5",
          "kind": "patch",
          "published_at": "2025-12-15T07:28:14Z"
        },
        {
          "tag": "0.7.0",
          "kind": "minor",
          "published_at": "2025-12-09T02:12:56Z"
        },
        {
          "tag": "0.6.0",
          "kind": "minor",
          "published_at": "2025-11-30T05:33:21Z"
        },
        {
          "tag": "0.5.0",
          "kind": "minor",
          "published_at": "2025-11-26T23:58:11Z"
        },
        {
          "tag": "0.4.0",
          "kind": "minor",
          "published_at": "2025-11-21T21:55:44Z"
        }
      ],
      "recent_commits": [
        {
          "oid": "dd83b4587c778dde52d8bee7c615801f2d08bcd8",
          "body": "Update Erlang and Elixir in CI",
          "is_bot": false,
          "headline": "Merge pull request #111 from ocean/dev",
          "author_name": "Drew Robinson",
          "author_login": "ocean",
          "committed_at": "2026-07-02T23:52:51Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "bb1d302ec6ce61e1bc7b39871672167d66f829d7",
          "body": "Amp-Thread-ID: https://ampcode.com/threads/T-019f1bf4-0530-702f-8db8-c8ee7585c6a7\nCo-authored-by: Amp <amp@ampcode.com>\n\n# Conflicts:\n#\tlib/ecto/adapters/libsql/connection.ex",
          "is_bot": false,
          "headline": "Merge remote-tracking branch 'origin/main' into dev",
          "author_name": "Drew Robinson",
          "author_login": "ocean",
          "committed_at": "2026-07-01T05:23:13Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "8fdf0a56876f4d4e13fec84e816020c4ebf235fe",
          "body": "…curity fix\n\n- mix: ecto/ecto_sql 3.14.0, decimal 3.1.1, credo, ex_doc, etc.\n- cargo: 27 crates updated (secure + >1wk old); anyhow 1.0.103 (RUSTSEC-2026-0190)\n- rustler 0.37.1 -> 0.38 (mix.exs + Cargo.toml)\n- adapt insert/8 for ecto_sql 3.14 callback change; drop unreachable conflict_target([]) clause\n\nAmp-Thread-ID: https://ampcode.com/threads/T-019f1bf4-0530-702f-8db8-c8ee7585c6a7\nCo-authored-by: Amp <amp@ampcode.com>",
          "is_bot": false,
          "headline": "chore(deps): update mix & cargo deps, bump rustler to 0.38, anyhow se…",
          "author_name": "Drew Robinson",
          "author_login": "ocean",
          "committed_at": "2026-07-01T05:21:44Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "8a5d3100af958308ff01447087001a283ed52bcb",
          "body": null,
          "is_bot": false,
          "headline": "ci: Update to Erlang 29.0.2",
          "author_name": "Drew Robinson",
          "author_login": "ocean",
          "committed_at": "2026-07-01T04:28:19Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "c5d910996c2244dac8589aa988ad2c2619ee6240",
          "body": null,
          "is_bot": false,
          "headline": "ci: Update to Erlang OTP 29 and Elixir 1.20.2",
          "author_name": "Drew Robinson",
          "author_login": "ocean",
          "committed_at": "2026-07-01T03:16:22Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "c5e11f35e43abac23dd6f9e074bbebe836c2ac5a",
          "body": null,
          "is_bot": false,
          "headline": "chore: Enable memory",
          "author_name": "Drew Robinson",
          "author_login": "ocean",
          "committed_at": "2026-07-01T03:15:59Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "b7edc6f5f07a5bf0fffab7976cb80cddf080d09f",
          "body": "….10.1\n\nchore(deps): bump db_connection from 2.10.0 to 2.10.1",
          "is_bot": false,
          "headline": "Merge pull request #102 from ocean/dependabot/hex/dev/db_connection-2…",
          "author_name": "Drew Robinson",
          "author_login": "ocean",
          "committed_at": "2026-07-01T02:04:13Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "bf78b0cf0ec160c58a593677b4413146e98a7938",
          "body": "Bumps [db_connection](https://github.com/elixir-ecto/db_connection) from 2.10.0 to 2.10.1.\n- [Changelog](https://github.com/elixir-ecto/db_connection/blob/master/CHANGELOG.md)\n- [Commits](https://github.com/elixir-ecto/db_connection/compare/v2.10.0...v2.10.1)\n\n---\nupdated-dependencies:\n- dependency-name: db_connection\n  dependency-version: 2.10.1\n  dependency-type: direct:production\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "chore(deps): bump db_connection from 2.10.0 to 2.10.1",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-05-14T18:28:35Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "256c18882806fbd9cfd54b6faabfe3180b791f53",
          "body": "…/release",
          "is_bot": false,
          "headline": "chore: Improve documentation references and file config for Hex build…",
          "author_name": "Drew Robinson",
          "author_login": "ocean",
          "committed_at": "2026-05-12T00:36:13Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "c16ada33cfec4d2f63802d8aae576a32e47b6b25",
          "body": null,
          "is_bot": false,
          "headline": "chore: Clarify release process doc",
          "author_name": "Drew Robinson",
          "author_login": "ocean",
          "committed_at": "2026-05-12T00:12:41Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "8e28533a708196808c02dc43e4150183cb30a623",
          "body": null,
          "is_bot": false,
          "headline": "chore: Update checksums for release 0.9.1",
          "author_name": "Drew Robinson",
          "author_login": "ocean",
          "committed_at": "2026-05-12T00:06:47Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "26b6791953255ad61d4c22137fe2a99820e0cb5b",
          "body": "chore(deps): bump CI GitHub Actions dependencies",
          "is_bot": false,
          "headline": "Merge pull request #101 from ocean/dev",
          "author_name": "Drew Robinson",
          "author_login": "ocean",
          "committed_at": "2026-05-11T10:11:30Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "5c930055de8cc5c886972bd21cbddde13403d37c",
          "body": "…s/rustler-precompiled-action-1.1.5\n\nchore(deps): bump philss/rustler-precompiled-action from 1.1.4 to 1.1.5",
          "is_bot": false,
          "headline": "Merge pull request #98 from ocean/dependabot/github_actions/dev/phils…",
          "author_name": "Drew Robinson",
          "author_login": "ocean",
          "committed_at": "2026-05-11T09:42:36Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "10f8253469e0e99e25952805572b2556f2f351e8",
          "body": "…ns/cache-5.0.4\n\nchore(deps): bump actions/cache from 5.0.3 to 5.0.4",
          "is_bot": false,
          "headline": "Merge pull request #90 from ocean/dependabot/github_actions/dev/actio…",
          "author_name": "Drew Robinson",
          "author_login": "ocean",
          "committed_at": "2026-05-11T09:42:15Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "6a7813c3fa541841383272d9e35034b3dfedde83",
          "body": "Fix upsert ON CONFLICT: missing :identifier expr + numbered parameters",
          "is_bot": false,
          "headline": "Merge pull request #95 from AlanMcCann/fix/upsert-on-conflict-identifier",
          "author_name": "Drew Robinson",
          "author_login": "ocean",
          "committed_at": "2026-05-11T09:41:35Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "7831ce1132a06a5c38853d3f82c376beefe27752",
          "body": null,
          "is_bot": false,
          "headline": "test: add unit test for empty bound IN list sentinel clause",
          "author_name": "Drew Robinson",
          "author_login": "ocean",
          "committed_at": "2026-05-11T06:11:34Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "f8f2b6a3187fdaaf76371e7baaa193cea0e71726",
          "body": null,
          "is_bot": false,
          "headline": "test: assert persisted name after replace_all upsert",
          "author_name": "Drew Robinson",
          "author_login": "ocean",
          "committed_at": "2026-05-11T06:07:13Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "bd7cd99d6d0f1ccf745ca6b8c913179b2fcd7ce1",
          "body": null,
          "is_bot": false,
          "headline": "docs: add PR #95 upsert fixes to CHANGELOG",
          "author_name": "Drew Robinson",
          "author_login": "ocean",
          "committed_at": "2026-05-11T06:06:24Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "791f1d2319c87c6142333b67b345cf26abbb4549",
          "body": "- Update all 8 test assertions from VALUES (?, ?) to VALUES (?1, ?2, ...)\n  to match the numbered parameter format introduced in this PR.\n- Fix the IN with bound list handler to also use numbered parameters\n  (?start+1, ..., ?start+length) consistent with the rest of the adapter,\n  resolving the gap\n[…]\nintegration tests exercising Repo.insert with on_conflict:\n  :replace_all, :nothing, {:replace, fields}, and insert-without-conflict,\n  proving the upsert fix works end-to-end against a real database.",
          "is_bot": false,
          "headline": "fix: update tests and fix IN bound-list numbered parameters",
          "author_name": "Drew Robinson",
          "author_login": "ocean",
          "committed_at": "2026-05-11T06:01:12Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "f0025ed217cb52db4853b66cf44b26fbfd115859",
          "body": null,
          "is_bot": false,
          "headline": "Merge branch 'main' into fix/upsert-on-conflict-identifier",
          "author_name": "Drew Robinson",
          "author_login": "ocean",
          "committed_at": "2026-05-10T20:54:39Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "08cfcba504f377843b0b18b16c4891de9d03d376",
          "body": "…precompiled-action-1.1.5",
          "is_bot": false,
          "headline": "Merge branch 'dev' into dependabot/github_actions/dev/philss/rustler-…",
          "author_name": "Drew Robinson",
          "author_login": "ocean",
          "committed_at": "2026-05-10T20:54:17Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "995f69e5cc05bc1cc65fd44cc6cf3d911b77d487",
          "body": "…ns/upload-artifact-7.0.1\n\nchore(deps): bump actions/upload-artifact from 7.0.0 to 7.0.1",
          "is_bot": false,
          "headline": "Merge pull request #99 from ocean/dependabot/github_actions/dev/actio…",
          "author_name": "Drew Robinson",
          "author_login": "ocean",
          "committed_at": "2026-05-10T13:25:02Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "a4c0bce3801127f4f74198701c3b3f0561554590",
          "body": "…rcore/zizmor-action-0.5.3\n\nchore(deps): bump zizmorcore/zizmor-action from 0.5.2 to 0.5.3",
          "is_bot": false,
          "headline": "Merge pull request #97 from ocean/dependabot/github_actions/dev/zizmo…",
          "author_name": "Drew Robinson",
          "author_login": "ocean",
          "committed_at": "2026-05-10T13:24:43Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "954685c3487d4c5b913fcd7d59dd576793bff701",
          "body": "…/fuzz/rand-0.8.6\n\nchore(deps): bump rand from 0.8.5 to 0.8.6 in /native/ecto_libsql/fuzz",
          "is_bot": false,
          "headline": "Merge pull request #94 from ocean/dependabot/cargo/native/ecto_libsql…",
          "author_name": "Drew Robinson",
          "author_login": "ocean",
          "committed_at": "2026-05-10T13:24:12Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "41f153cca87455bf4be7ee203a879193cd02ee7c",
          "body": "chore(deps-dev): bump stream_data from 1.2.0 to 1.3.0",
          "is_bot": false,
          "headline": "Merge pull request #89 from ocean/dependabot/hex/stream_data-1.3.0",
          "author_name": "Drew Robinson",
          "author_login": "ocean",
          "committed_at": "2026-05-10T13:23:37Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "a3d1f3f3487b8af748415335d765218aabc216b0",
          "body": "…precompiled-action-1.1.5",
          "is_bot": false,
          "headline": "Merge branch 'dev' into dependabot/github_actions/dev/philss/rustler-…",
          "author_name": "Drew Robinson",
          "author_login": "ocean",
          "committed_at": "2026-05-10T11:11:27Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "ef6d7371b6ec4fa740f0b1493cd748f56de1dc39",
          "body": "…or-action-0.5.3",
          "is_bot": false,
          "headline": "Merge branch 'dev' into dependabot/github_actions/dev/zizmorcore/zizm…",
          "author_name": "Drew Robinson",
          "author_login": "ocean",
          "committed_at": "2026-05-10T11:11:16Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "1e8afa18b65e7ce46e28cd82aade8519f089c321",
          "body": "….0.4",
          "is_bot": false,
          "headline": "Merge branch 'dev' into dependabot/github_actions/dev/actions/cache-5…",
          "author_name": "Drew Robinson",
          "author_login": "ocean",
          "committed_at": "2026-05-10T11:10:59Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "751739fd0fb481967bbb28eb7586c3a2e4a9e02a",
          "body": "…artifact-7.0.1",
          "is_bot": false,
          "headline": "Merge branch 'dev' into dependabot/github_actions/dev/actions/upload-…",
          "author_name": "Drew Robinson",
          "author_login": "ocean",
          "committed_at": "2026-05-10T11:10:50Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "ed35f20096524432f6bef1a1a84e8a5a0ded9dde",
          "body": null,
          "is_bot": false,
          "headline": "Merge branch 'main' into dependabot/hex/stream_data-1.3.0",
          "author_name": "Drew Robinson",
          "author_login": "ocean",
          "committed_at": "2026-05-10T11:10:37Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "fd91c0ec176c13fbb7c8fe3e8d37a0c60f69cb9f",
          "body": "Bumps [rand](https://github.com/rust-random/rand) from 0.8.5 to 0.8.6.\n- [Release notes](https://github.com/rust-random/rand/releases)\n- [Changelog](https://github.com/rust-random/rand/blob/0.8.6/CHANGELOG.md)\n- [Commits](https://github.com/rust-random/rand/compare/0.8.5...0.8.6)\n\n---\nupdated-dependencies:\n- dependency-name: rand\n  dependency-version: 0.8.6\n  dependency-type: indirect\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "chore(deps): bump rand from 0.8.5 to 0.8.6 in /native/ecto_libsql/fuzz",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-05-10T11:09:28Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "e190ca21ecfc345025a8f7ecb84fd1f00cf2c244",
          "body": "chore(deps): update Elixir and Rust dependencies",
          "is_bot": false,
          "headline": "Merge pull request #100 from ocean/dev",
          "author_name": "Drew Robinson",
          "author_login": "ocean",
          "committed_at": "2026-05-10T11:08:14Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "74a1af27cff71d492d722549c95fde6569e4a6c5",
          "body": null,
          "is_bot": false,
          "headline": "ci: Improve error handling in tests",
          "author_name": "Drew Robinson",
          "author_login": "ocean",
          "committed_at": "2026-05-10T10:30:26Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "aaa4db895298854e11ac75d079e07bb46ad79e92",
          "body": null,
          "is_bot": false,
          "headline": "docs: Clarify patch behaviour",
          "author_name": "Drew Robinson",
          "author_login": "ocean",
          "committed_at": "2026-05-10T10:29:57Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "2183c88c3400fd323c065417eebd94ce5afa5e0f",
          "body": "   - Bump version to 0.9.1\n   - Add upstream status notice to README: Turso is transitioning away\n     from libSQL toward their new Turso library; ecto_libsql will continue\n     receiving bug fixes and security updates, likely transitioning to\n     maintenance mode as the ecosystem matures\n   - Update installation snippet to ~> 0.9.0\n   - Add CHANGELOG entry covering PRAGMA routing fix, dep updates,\n     CI toolchain improvements, and security advisory acknowledgements",
          "is_bot": false,
          "headline": "chore: prepare 0.9.1 release",
          "author_name": "Drew Robinson",
          "author_login": "ocean",
          "committed_at": "2026-05-07T07:09:01Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "1c3bac78ef64842774244f8b9bb16429e8432567",
          "body": "rustls-webpki 0.102.x (via libsql → rustls 0.22 → hyper-rustls) has a\nreachable panic when parsing CRLs with an empty BIT STRING in the\nIssuingDistributionPoint extension (RUSTSEC-2026-0104). The fix requires\nrustls-webpki >=0.103.13, but libsql pins rustls 0.22.x which depends on\nthe 0.102.x series — we cannot resolve this without an upstream bump.\n\nAdded to cargo deny ignore list alongside the other rustls-webpki\nadvisories (0049, 0098, 0099) that are blocked for the same reason.",
          "is_bot": false,
          "headline": "chore(security): ignore RUSTSEC-2026-0104 blocked on libsql upstream",
          "author_name": "Drew Robinson",
          "author_login": "ocean",
          "committed_at": "2026-05-07T05:30:09Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "7d643d5242316a0b0d13067961ee7796f2d3b392",
          "body": "Elixir:\n- db_connection 2.9.0 -> 2.10.0\n- ecto 3.13.5 -> 3.13.6\n- jason 1.4.4 -> 1.4.5\n\nRust:\n- rustler 0.37.3 -> 0.37.4\n- libc 0.2.185 -> 0.2.186\n- cc 1.2.60 -> 1.2.61\n- pin-project 1.1.11 -> 1.1.12\n- js-sys 0.3.95 -> 0.3.97\n- (plus transitive bumps)\n\nAlso fix an OTP 27+ pattern-match warning in\ntest/type_loader_dumper_test.exs: matching the literal 0.0 now only\nmatches +0.0, so bind the zero rows and assert numeric equality\ninstead (covers both +0.0 and -0.0 regardless of sort order).",
          "is_bot": false,
          "headline": "chore(deps): update Elixir and Rust dependencies",
          "author_name": "Drew Robinson",
          "author_login": "ocean",
          "committed_at": "2026-05-07T02:44:44Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "d9ba80d6c5bfa64731b15c7fbb5c50df4dc277d1",
          "body": "Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact) from 7.0.0 to 7.0.1.\n- [Release notes](https://github.com/actions/upload-artifact/releases)\n- [Commits](https://github.com/actions/upload-artifact/compare/bbbca2ddaa5d8feaa63e36b76fdaad77386f024f...043fb46d1a93c77aae656e7c1c\n[…]\ndency-name: actions/upload-artifact\n  dependency-version: 7.0.1\n  dependency-type: direct:production\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "chore(deps): bump actions/upload-artifact from 7.0.0 to 7.0.1",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-05-01T21:57:45Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "9834b9d3a7579b66ef5a506949916bc33cb38603",
          "body": "Bumps [philss/rustler-precompiled-action](https://github.com/philss/rustler-precompiled-action) from 1.1.4 to 1.1.5.\n- [Release notes](https://github.com/philss/rustler-precompiled-action/releases)\n- [Changelog](https://github.com/philss/rustler-precompiled-action/blob/main/CHANGELOG.md)\n- [Commits]\n[…]\n: philss/rustler-precompiled-action\n  dependency-version: 1.1.5\n  dependency-type: direct:production\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "chore(deps): bump philss/rustler-precompiled-action from 1.1.4 to 1.1.5",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-05-01T21:57:38Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "a3a6894b180b631dd213c33320494c95d649ce63",
          "body": "Bumps [zizmorcore/zizmor-action](https://github.com/zizmorcore/zizmor-action) from 0.5.2 to 0.5.3.\n- [Release notes](https://github.com/zizmorcore/zizmor-action/releases)\n- [Commits](https://github.com/zizmorcore/zizmor-action/compare/71321a20a9ded102f6e9ce5718a2fcec2c4f70d8...b1d7e1fb5de872772f3159\n[…]\nency-name: zizmorcore/zizmor-action\n  dependency-version: 0.5.3\n  dependency-type: direct:production\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "chore(deps): bump zizmorcore/zizmor-action from 0.5.2 to 0.5.3",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-05-01T21:57:32Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "6ba88389cafb5fe7e7c0f30b3228c99596a3abe3",
          "body": "Two bugs in SQL generation that cause \"near ?: syntax error\" on any\nINSERT ... ON CONFLICT DO UPDATE query:\n\n1. Missing :identifier expression handler. Ecto generates ON CONFLICT\n   UPDATE clauses using fragment expressions containing {:identifier, _,\n   [\"column_name\"]} tuples. Without a matching e\n[…]\nntains multiple parameter\n   groups (INSERT values + ON CONFLICT UPDATE). The ecto_sqlite3 adapter\n   already uses this pattern.\n\nFixes all upsert operations including Ash Framework's upsert? actions.",
          "is_bot": false,
          "headline": "Fix upsert ON CONFLICT: missing :identifier expr + numbered parameters",
          "author_name": "Alan McCann",
          "author_login": "AlanMcCann",
          "committed_at": "2026-04-27T22:37:44Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "b9d06479027cadbb092ee93215e701fdd44e6395",
          "body": "Update some crates, allow zizmor usage, fix beads installation",
          "is_bot": false,
          "headline": "Merge pull request #92 from ocean/dev",
          "author_name": "Drew Robinson",
          "author_login": "ocean",
          "committed_at": "2026-04-22T02:27:52Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "0f3e09ef8475ba94654cc1b94496b3a2b56cbcb6",
          "body": null,
          "is_bot": false,
          "headline": "Merge branch 'main' into dev",
          "author_name": "Drew Robinson",
          "author_login": "ocean",
          "committed_at": "2026-04-22T01:44:49Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "1f3c731aec7e5c761f4b77311dfd4ebb67b3a52c",
          "body": "- credo 1.7.17 => 1.7.18\n- rustler_precompiled 0.8.4 => 0.9.0\n- stream_data 1.2.0 => 1.3.0",
          "is_bot": false,
          "headline": "chore(deps): update Elixir dependencies",
          "author_name": "Drew Robinson",
          "author_login": "ocean",
          "committed_at": "2026-04-20T07:30:32Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "88c4f075978602b2793a3862dff69407193b6868",
          "body": "…stream\n\nRUSTSEC-2026-0098 and RUSTSEC-2026-0099 affect rustls-webpki 0.102.x\nvia libsql's rustls 0.22.x pin. Cannot update until libsql bumps its\nrustls dependency to 0.23+.",
          "is_bot": false,
          "headline": "chore(security): ignore rustls-webpki advisories blocked on libsql up…",
          "author_name": "Drew Robinson",
          "author_login": "ocean",
          "committed_at": "2026-04-20T07:29:17Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "e872e45cec5a5fe2207e703ebda5c6baa2f3a9bb",
          "body": "- Add mise.toml hashing\r\n- Use single elixir_otp variable in compatibility job",
          "is_bot": false,
          "headline": "Update CI workflow",
          "author_name": "Drew Robinson",
          "author_login": "ocean",
          "committed_at": "2026-04-18T06:32:01Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "1d9c7fc5883c568d219abb0ad66b51fab2d01e36",
          "body": "Version strings now defined once in each job's matrix and referenced\nvia ${{ matrix.elixir }}, ${{ matrix.erlang }}, and ${{ matrix.elixir_otp }}\nthroughout job names, cache keys, and mise commands.",
          "is_bot": false,
          "headline": "chore(ci): use matrix variables for Elixir/OTP version strings",
          "author_name": "Drew Robinson",
          "author_login": "ocean",
          "committed_at": "2026-04-09T05:23:32Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "ee09002b183d1a9bc7b2c681878955e835cce650",
          "body": null,
          "is_bot": false,
          "headline": "chore(ci): pin Elixir to 1.19.5-otp-28 to match local",
          "author_name": "Drew Robinson",
          "author_login": "ocean",
          "committed_at": "2026-04-09T05:21:23Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "411d640dd64f912019a426dfcdfa2b5e359f7721",
          "body": "Latest: Elixir 1.19.0 / OTP 28.0\nCompat: Elixir 1.18.0 / OTP 27.0 (was 1.17.0 / 26.2)",
          "is_bot": false,
          "headline": "chore(ci): bump Elixir/OTP versions to current and previous major",
          "author_name": "Drew Robinson",
          "author_login": "ocean",
          "committed_at": "2026-04-09T05:14:50Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "18e8b305f8eb80a73c15d9e1e2dee82680d28600",
          "body": null,
          "is_bot": false,
          "headline": "chore: Update release process docs based on feedback",
          "author_name": "Drew Robinson",
          "author_login": "ocean",
          "committed_at": "2026-04-09T04:06:11Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "d244897cd1ac0e7fac3f9d3a74904fb5fcba5e85",
          "body": null,
          "is_bot": false,
          "headline": "chore: Adjust cc settings",
          "author_name": "Drew Robinson",
          "author_login": "ocean",
          "committed_at": "2026-04-09T04:02:19Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "dc104c41df1422d38a94232e49f888724477193a",
          "body": null,
          "is_bot": false,
          "headline": "docs: add RELEASE_PROCESS.md",
          "author_name": "Drew Robinson",
          "author_login": "ocean",
          "committed_at": "2026-04-09T02:58:29Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "e61ad2a2bdfbff9c48777c3ca90bc702a0b83951",
          "body": null,
          "is_bot": false,
          "headline": "chore(deps): bump libsql crates from 0.9.29 to 0.9.30",
          "author_name": "Drew Robinson",
          "author_login": "ocean",
          "committed_at": "2026-04-08T23:06:23Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "075f5366d0cffc47bfad8a75fa4e5d5f85272994",
          "body": "…ermissions",
          "is_bot": false,
          "headline": "chore(claude): add zizmor, gh api, and mise.jdx.dev to allowed tool p…",
          "author_name": "Drew Robinson",
          "author_login": "ocean",
          "committed_at": "2026-04-08T23:06:20Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "be66372cb44f9975a9e8e72076bea5aede7d464e",
          "body": "- Remove backup/ files from git tracking (.beads/.gitignore already excludes them)\n- Add .beads-credential-key to gitignore (machine-specific secret)\n- Add embeddeddolt/ to gitignore (auto-created runtime directory)",
          "is_bot": false,
          "headline": "chore(beads): fix git tracking for beads installation",
          "author_name": "Drew Robinson",
          "author_login": "ocean",
          "committed_at": "2026-04-08T23:05:28Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "857a87c834d30057ead0646f39bbcb1d1ce2d521",
          "body": "….0.4",
          "is_bot": false,
          "headline": "Merge branch 'dev' into dependabot/github_actions/dev/actions/cache-5…",
          "author_name": "Drew Robinson",
          "author_login": "ocean",
          "committed_at": "2026-03-26T07:59:05Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "cf9c95a882993073c5398ab6a1dcb2ed13b96c54",
          "body": null,
          "is_bot": false,
          "headline": "Merge branch 'main' into dependabot/hex/stream_data-1.3.0",
          "author_name": "Drew Robinson",
          "author_login": "ocean",
          "committed_at": "2026-03-26T07:58:49Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "9166b6e714db3c14b6f75c7bff2eaad23688a619",
          "body": "chore: Create zizmor.yml",
          "is_bot": false,
          "headline": "Merge pull request #87 from ocean/dev",
          "author_name": "Drew Robinson",
          "author_login": "ocean",
          "committed_at": "2026-03-26T07:42:07Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "50f2aceb39dc469756165f8cade7fd7770417d6a",
          "body": "…ency)\n\nrustls-webpki 0.102.x CRL matching flaw requires rustls 0.23+ to fix,\nbut libsql pins rustls 0.22.x. Low severity, waiting for upstream update.",
          "is_bot": false,
          "headline": "chore: Exempt RUSTSEC-2026-0049 in cargo-deny (upstream libsql depend…",
          "author_name": "Drew Robinson",
          "author_login": "ocean",
          "committed_at": "2026-03-21T11:19:14Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "587874d7e7a68f17ab7465cdd807e06d154b0527",
          "body": "Bumps [actions/cache](https://github.com/actions/cache) from 5.0.3 to 5.0.4.\n- [Release notes](https://github.com/actions/cache/releases)\n- [Changelog](https://github.com/actions/cache/blob/main/RELEASES.md)\n- [Commits](https://github.com/actions/cache/compare/cdf6c1fa76f9f475f3d7449005a359c84ca0f30\n[…]\ns:\n- dependency-name: actions/cache\n  dependency-version: 5.0.4\n  dependency-type: direct:production\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "chore(deps): bump actions/cache from 5.0.3 to 5.0.4",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-03-21T06:36:51Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "5a514cb2c5c669defd7f80e82628d4fb1b5b60eb",
          "body": "- Replace erlef/setup-beam GitHub Action with mise version manager\n  installed via curl (pure shell, no third-party JS action). This\n  eliminates the Node.js 20 deprecation warning that setup-beam triggers.\n- Remove `environment: test` from turso-remote-tests job to fix\n  \"Branch refs/pull/N/merge i\n[…]\neady restricts it to PRs targeting main.\n- Add zizmor inline suppressions for secrets-outside-env warnings.\n- Add explicit mix local.hex/rebar setup (previously handled by\n  setup-beam automatically).",
          "is_bot": false,
          "headline": "chore(ci): Replace erlef/setup-beam with mise and fix Turso env issue",
          "author_name": "Drew Robinson",
          "author_login": "ocean",
          "committed_at": "2026-03-21T06:35:41Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "3dd1088788407fae9f36fc2df2628403c38a75a5",
          "body": "Define project tool versions (Erlang 27.0, Elixir 1.18.0-otp-27) via\nmise version manager, replacing reliance on the erlef/setup-beam GitHub\nAction which triggers Node.js 20 deprecation warnings.",
          "is_bot": false,
          "headline": "chore: Add mise.toml for Erlang/Elixir version management",
          "author_name": "Drew Robinson",
          "author_login": "ocean",
          "committed_at": "2026-03-21T06:35:35Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "33356fa79ddcf472217c14cedee5ff8a158244ce",
          "body": null,
          "is_bot": false,
          "headline": "Merge branch 'main' into dev",
          "author_name": "Drew Robinson",
          "author_login": "ocean",
          "committed_at": "2026-03-20T06:21:26Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "34fed27351b0bc4d4a229b20ee14a21258907682",
          "body": null,
          "is_bot": false,
          "headline": "Merge branch 'main' into dependabot/hex/stream_data-1.3.0",
          "author_name": "Drew Robinson",
          "author_login": "ocean",
          "committed_at": "2026-03-20T06:19:20Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "9d306f20cc96aff25365c4d8750aeb771a7eed97",
          "body": null,
          "is_bot": false,
          "headline": "Add target-branch 'dev' for Dependabot updates",
          "author_name": "Drew Robinson",
          "author_login": "ocean",
          "committed_at": "2026-03-20T06:19:05Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "166dc9d6ee1e8a20394b23f5050043144e9b307a",
          "body": "…-TYtjO\n\nsecurity: apply zizmor GitHub Actions security improvements",
          "is_bot": false,
          "headline": "Merge pull request #88 from ocean/claude/zizmor-security-improvements…",
          "author_name": "Drew Robinson",
          "author_login": "ocean",
          "committed_at": "2026-03-20T06:14:45Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "933ca89df0473f5c9dc02128a9de86ceb8ef5ae5",
          "body": null,
          "is_bot": false,
          "headline": "chore(security): Add correct tags for actions/cache version",
          "author_name": "Drew Robinson",
          "author_login": "ocean",
          "committed_at": "2026-03-19T23:45:35Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "25611c06382548c11b3f34e8ea796f90d09ac991",
          "body": "…ope secrets",
          "is_bot": false,
          "headline": "chore(security): Add environment for running Turos remote tests to sc…",
          "author_name": "Drew Robinson",
          "author_login": "ocean",
          "committed_at": "2026-03-19T23:42:22Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "744e03b5c5815182ba518729b85435f15d6653f6",
          "body": "…mor's suggestion",
          "is_bot": false,
          "headline": "chore(security): Add default days for package update cooldown per Ziz…",
          "author_name": "Drew Robinson",
          "author_login": "ocean",
          "committed_at": "2026-03-19T23:41:47Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "25aad9ab910b9cf32e52f7cb9fbc92600df83612",
          "body": "Bumps [stream_data](https://github.com/whatyouhide/stream_data) from 1.2.0 to 1.3.0.\n- [Changelog](https://github.com/whatyouhide/stream_data/blob/main/CHANGELOG.md)\n- [Commits](https://github.com/whatyouhide/stream_data/compare/v1.2.0...v1.3.0)\n\n---\nupdated-dependencies:\n- dependency-name: stream_data\n  dependency-version: 1.3.0\n  dependency-type: direct:development\n  update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "chore(deps-dev): bump stream_data from 1.2.0 to 1.3.0",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-03-16T19:01:23Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "5f2f17208b641cb7f81336c42c8e1b7b5beddc64",
          "body": "Ran zizmor v1.23.1 against all workflow files and resolved all high-priority\nfindings (reduced from 30 high to 0 high):\n\n- Pin all action references to commit SHAs to prevent supply-chain attacks:\n  - actions/checkout@de0fac2e (v6.0.2)\n  - actions/cache@cdf6c1fa (v5)\n  - actions/upload-artifact@bbbc\n[…]\n findings: 4 medium secrets-outside-env warnings for Turso secrets,\nwhich require configuring a GitHub Deployment Environment in repo settings.\n\nhttps://claude.ai/code/session_01EUdjWCLtSWQYY5j4yc8Qb5",
          "is_bot": false,
          "headline": "security: apply zizmor GitHub Actions security improvements",
          "author_name": "Claude",
          "author_login": "claude",
          "committed_at": "2026-03-15T09:27:30Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "8de2fb0159a1674e1fb026fe0edf7dd854e4925d",
          "body": "Add Zizmor GitHub Action security scanning",
          "is_bot": false,
          "headline": "chore: Create zizmor.yml",
          "author_name": "Drew Robinson",
          "author_login": "ocean",
          "committed_at": "2026-03-11T09:34:34Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "199a29893037471041838d3b139a8f4094c433c9",
          "body": null,
          "is_bot": false,
          "headline": "Merge branch 'main' into dev",
          "author_name": "Drew Robinson",
          "author_login": "ocean",
          "committed_at": "2026-03-10T07:05:38Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "bbedff2c3af34b6875f5d9898cb50882b9100fd3",
          "body": "chore(deps): bump ecto_sql from 3.13.4 to 3.13.5",
          "is_bot": false,
          "headline": "Merge pull request #86 from ocean/dependabot/hex/ecto_sql-3.13.5",
          "author_name": "Drew Robinson",
          "author_login": "ocean",
          "committed_at": "2026-03-10T07:04:13Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "9abf9700bc4dee693e1b172ac258f153e6d5a404",
          "body": "chore(deps-dev): bump credo from 1.7.16 to 1.7.17",
          "is_bot": false,
          "headline": "Merge pull request #85 from ocean/dependabot/hex/credo-1.7.17",
          "author_name": "Drew Robinson",
          "author_login": "ocean",
          "committed_at": "2026-03-10T07:03:51Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "1a51fd06ac8a0b571f6da84d34a91f0e0e602c88",
          "body": "Bumps [ecto_sql](https://github.com/elixir-ecto/ecto_sql) from 3.13.4 to 3.13.5.\n- [Changelog](https://github.com/elixir-ecto/ecto_sql/blob/master/CHANGELOG.md)\n- [Commits](https://github.com/elixir-ecto/ecto_sql/commits)\n\n---\nupdated-dependencies:\n- dependency-name: ecto_sql\n  dependency-version: 3.13.5\n  dependency-type: direct:production\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "chore(deps): bump ecto_sql from 3.13.4 to 3.13.5",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-03-09T19:55:50Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "95cd65474872540a5cea8bde71790ce10fa00710",
          "body": "Bumps [credo](https://github.com/rrrene/credo) from 1.7.16 to 1.7.17.\n- [Release notes](https://github.com/rrrene/credo/releases)\n- [Changelog](https://github.com/rrrene/credo/blob/master/CHANGELOG.md)\n- [Commits](https://github.com/rrrene/credo/compare/v1.7.16...v1.7.17)\n\n---\nupdated-dependencies:\n- dependency-name: credo\n  dependency-version: 1.7.17\n  dependency-type: direct:development\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "chore(deps-dev): bump credo from 1.7.16 to 1.7.17",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-03-09T19:55:42Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "aafc0766dc67fe4f23eb4a9680a8bd268da68cae",
          "body": null,
          "is_bot": false,
          "headline": "chore: update beads gitignore patterns for v0.59.0",
          "author_name": "Drew Robinson",
          "author_login": "ocean",
          "committed_at": "2026-03-06T07:10:07Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "583225b46a3f519f74ad83de42321fce946e427a",
          "body": "Update .beads/.gitignore with new Dolt server runtime file patterns\nand updated structure for v0.59.0. Add Dolt database patterns to\nroot .gitignore.",
          "is_bot": false,
          "headline": "chore: update beads gitignore patterns for v0.59.0",
          "author_name": "Drew Robinson",
          "author_login": "ocean",
          "committed_at": "2026-03-06T07:05:29Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "dcec15d09abb7d7a37c2b4845856c52475562990",
          "body": null,
          "is_bot": false,
          "headline": "bd: backup 2026-03-04 22:34",
          "author_name": "Drew Robinson",
          "author_login": "ocean",
          "committed_at": "2026-03-04T22:34:19Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "4d87be986af283a797a91e8ac2ec38d178f698a9",
          "body": "…pload-artifact-7\n\nchore(deps): bump actions/upload-artifact from 6 to 7",
          "is_bot": false,
          "headline": "Merge pull request #84 from ocean/dependabot/github_actions/actions/u…",
          "author_name": "Drew Robinson",
          "author_login": "ocean",
          "committed_at": "2026-03-03T04:53:49Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "84811ddd757d346c89922b3ef9d45cfe84715077",
          "body": "…ifact-7",
          "is_bot": false,
          "headline": "Merge branch 'main' into dependabot/github_actions/actions/upload-art…",
          "author_name": "Drew Robinson",
          "author_login": "ocean",
          "committed_at": "2026-03-03T04:16:43Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "5f9a8afd25e1a2477523bf408bbbcdfe7181fb04",
          "body": "chore: Ignore Beads ephemeral DB",
          "is_bot": false,
          "headline": "Merge pull request #83 from ocean/dev",
          "author_name": "Drew Robinson",
          "author_login": "ocean",
          "committed_at": "2026-03-02T02:18:34Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "9b50ad669d3f60d495809869d786c50a23b9811b",
          "body": "Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact) from 6 to 7.\n- [Release notes](https://github.com/actions/upload-artifact/releases)\n- [Commits](https://github.com/actions/upload-artifact/compare/v6...v7)\n\n---\nupdated-dependencies:\n- dependency-name: actions/upload-artifact\n  dependency-version: '7'\n  dependency-type: direct:production\n  update-type: version-update:semver-major\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "chore(deps): bump actions/upload-artifact from 6 to 7",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-03-01T18:28:09Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "82173bb4254205c120522d364083e1e71407a17b",
          "body": null,
          "is_bot": false,
          "headline": "chore: Ignore Beads ephemeral DB",
          "author_name": "Drew Robinson",
          "author_login": "ocean",
          "committed_at": "2026-03-01T00:32:31Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "320c0b7ba9666c5e0845cb0894450ff5557bc9e9",
          "body": "fix: Route PRAGMA statements through query() path and fix CI test",
          "is_bot": false,
          "headline": "Merge pull request #82 from ocean/dev",
          "author_name": "Drew Robinson",
          "author_login": "ocean",
          "committed_at": "2026-02-26T02:21:39Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "f8d98425af7171f91c89a1829337d39fbec32f29",
          "body": null,
          "is_bot": false,
          "headline": "docs: Fix code formatting",
          "author_name": "Drew Robinson",
          "author_login": "ocean",
          "committed_at": "2026-02-26T01:11:17Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "7dbb31c26c37e819a67080e7132a704b70184d4a",
          "body": "Amp-Thread-ID: https://ampcode.com/threads/T-019c977d-c248-73b7-a08b-ff94d46ec68a\nCo-authored-by: Amp <amp@ampcode.com>",
          "is_bot": false,
          "headline": "test: add explicit assertion for bare PRAGMA token in should_use_query",
          "author_name": "Drew Robinson",
          "author_login": "ocean",
          "committed_at": "2026-02-26T01:09:59Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "d44baccc5465cfead1753c7a5c02f2dd8cee36cf",
          "body": null,
          "is_bot": false,
          "headline": "docs: Fix code formatting",
          "author_name": "Drew Robinson",
          "author_login": "ocean",
          "committed_at": "2026-02-26T01:08:27Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "aebc72fd6d5127a22ef5ca6903a03c23d7a07279",
          "body": null,
          "is_bot": false,
          "headline": "chore: Update local claude config",
          "author_name": "Drew Robinson",
          "author_login": "ocean",
          "committed_at": "2026-02-25T23:02:58Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "085d36309f704983d0bbad69b7c0121f1d474c45",
          "body": null,
          "is_bot": false,
          "headline": "docs: Streamline documentation for agents",
          "author_name": "Drew Robinson",
          "author_login": "ocean",
          "committed_at": "2026-02-25T23:00:07Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "c00c12a5fcb298bf81442977b241910bb3b6201f",
          "body": null,
          "is_bot": false,
          "headline": "test: Add mixed-case assertions to test_pragma_with_whitespace",
          "author_name": "Drew Robinson",
          "author_login": "ocean",
          "committed_at": "2026-02-22T23:51:10Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "c22a78d2eac82ab7c9b17ec2198e2f38b3640224",
          "body": "…tion\n\nMirror the existing test_not_select_if_part_of_word / test_not_cte_if_part_of_word\nand test_explain_with_whitespace patterns for the PRAGMA branch of should_use_query:\n\n- test_not_pragma_if_part_of_word: asserts that \"PRAGMATIC\" and similar strings\n  do NOT match, confirming the word-boundary guard is enforced.\n- test_pragma_with_whitespace: asserts that leading spaces, tabs, and newlines\n  before PRAGMA are correctly skipped by skip_whitespace_and_comments.",
          "is_bot": false,
          "headline": "test: Add word-boundary and leading-whitespace tests for PRAGMA detec…",
          "author_name": "Drew Robinson",
          "author_login": "ocean",
          "committed_at": "2026-02-22T23:34:04Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "a5f79ce0a3d92776198b6c51659df9629983b3dd",
          "body": "…ity races\n\nCreating and dropping the locations table and composite unique index inside\neach test's setup callback causes a race: each Ecto.Adapters.SQL.query! call\nchecks out a different connection from the pool, and on Linux the connection\nused for the UPSERT in the test body may not yet see the i\n[…]\nbles. The per-test setup now simply deletes\nrows from the table, which is a plain DML statement visible to all connections\nimmediately. This eliminates any DDL-visibility race across pool connections.",
          "is_bot": false,
          "headline": "fix: Avoid per-test DDL for locations table to prevent schema visibil…",
          "author_name": "Drew Robinson",
          "author_login": "ocean",
          "committed_at": "2026-02-22T23:28:42Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "acedd561ea4e1b23befb516c721866fed2c766e2",
          "body": null,
          "is_bot": false,
          "headline": "docs: Update comment for Rust should_use_query() check",
          "author_name": "Drew Robinson",
          "author_login": "ocean",
          "committed_at": "2026-02-22T23:09:57Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "c96600c3d1b039ef8eb68e64c1d19c335a4ba913",
          "body": "The test_pragma_statements test incorrectly asserted that PRAGMA statements\nshould NOT use the query() path. Since PRAGMA can return rows, the correct\nbehaviour (implemented in the previous commit) is to always route PRAGMA\nthrough query(). Update the test assertions accordingly and add extra cases\nto cover wal_checkpoint and lowercase pragma.",
          "is_bot": false,
          "headline": "fix: Update Rust test to match PRAGMA query path behaviour",
          "author_name": "Drew Robinson",
          "author_login": "ocean",
          "committed_at": "2026-02-22T23:06:30Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "a358d1745ede092933dacd6a301b9cd04790d6f6",
          "body": "PRAGMA statements can return rows (e.g. PRAGMA wal_checkpoint(FULL) returns\nbusy/log/checkpointed columns), but should_use_query() did not recognise them,\ncausing them to be routed through execute() which fails with \"Execute returned\nrows\" from libsql.\n\nTwo fixes:\n- native/ecto_libsql/src/utils.rs: \n[…]\nons until the WAL is\n  checkpointed, causing the ON CONFLICT clause to fail with \"does not match any\n  PRIMARY KEY or UNIQUE constraint\".\n\nFixes CI failure introduced by rustler 0.37.1 -> 0.37.3 bump.",
          "is_bot": false,
          "headline": "fix: Route PRAGMA statements through query() path and fix CI test",
          "author_name": "Drew Robinson",
          "author_login": "ocean",
          "committed_at": "2026-02-22T22:58:34Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "86106f7312f89a3b90a3be3b59f933cb31dd78e0",
          "body": "chore(deps): bump rustler from 0.37.1 to 0.37.3",
          "is_bot": false,
          "headline": "Merge pull request #81 from ocean/dependabot/hex/rustler-0.37.3",
          "author_name": "Drew Robinson",
          "author_login": "ocean",
          "committed_at": "2026-02-21T22:49:39Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "8d6e1f980ae62d342315f52b73914aaf7453680c",
          "body": "Bumps [rustler](https://github.com/rusterlium/rustler) from 0.37.1 to 0.37.3.\n- [Release notes](https://github.com/rusterlium/rustler/releases)\n- [Changelog](https://github.com/rusterlium/rustler/blob/master/CHANGELOG.md)\n- [Commits](https://github.com/rusterlium/rustler/compare/rustler-0.37.1...rus\n[…]\nencies:\n- dependency-name: rustler\n  dependency-version: 0.37.3\n  dependency-type: direct:production\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "chore(deps): bump rustler from 0.37.1 to 0.37.3",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-02-16T19:04:35Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "f56fecbe8fa0ff6234031facb3a85692682b3de1",
          "body": null,
          "is_bot": false,
          "headline": "chore: Adjust beads config",
          "author_name": "Drew Robinson",
          "author_login": "ocean",
          "committed_at": "2026-02-16T05:04:12Z",
          "body_truncated": false,
          "is_coding_agent": false
        }
      ],
      "releases_count": 14,
      "commits_last_year": 680,
      "latest_release_at": "2026-05-11T23:53:43Z",
      "latest_release_tag": "0.9.1",
      "releases_from_tags": false,
      "days_since_last_push": 1,
      "active_weeks_last_year": 29,
      "days_since_latest_release": 79,
      "mean_days_between_releases": 16.4
    },
    "community": {
      "has_readme": true,
      "has_license": true,
      "has_description": true,
      "has_contributing": false,
      "health_percentage": 57,
      "has_issue_template": false,
      "has_code_of_conduct": false,
      "has_pull_request_template": false
    },
    "ecosystem": {
      "packages": [
        {
          "name": "ecto_libsql",
          "exists": true,
          "license": "Apache-2.0",
          "keywords": [],
          "ecosystem": "hex",
          "matches_repo": true,
          "registry_url": "https://hex.pm/packages/ecto_libsql",
          "is_deprecated": false,
          "latest_version": "0.9.1",
          "repository_url": "https://github.com/ocean/ecto_libsql",
          "versions_count": 14,
          "total_downloads": 2421,
          "dependents_count": null,
          "deprecation_note": null,
          "maintainers_count": null,
          "monthly_downloads": 306,
          "first_published_at": "2025-11-21T21:54:12.371624Z",
          "latest_published_at": "2026-05-12T00:34:10.485158Z",
          "latest_version_yanked": null,
          "days_since_latest_publish": 79
        }
      ]
    },
    "popularity": {
      "forks": 5,
      "stars": 38,
      "watchers": 1,
      "fork_history": {
        "days": [
          {
            "date": "2026-01-09",
            "count": 1
          },
          {
            "date": "2026-01-28",
            "count": 1
          },
          {
            "date": "2026-02-21",
            "count": 1
          },
          {
            "date": "2026-02-26",
            "count": 1
          },
          {
            "date": "2026-04-27",
            "count": 1
          }
        ],
        "complete": true,
        "collected": 5,
        "total_forks": 5
      },
      "star_history": null,
      "open_issues_and_prs": 9
    },
    "ai_readiness": {
      "has_nix": false,
      "example_dirs": [
        "examples"
      ],
      "has_llms_txt": false,
      "has_dockerfile": false,
      "has_mcp_signal": false,
      "bootstrap_files": [
        "mise.toml"
      ],
      "api_schema_files": [],
      "has_devcontainer": false,
      "typecheck_configs": [],
      "toolchain_manifests": [
        "Cargo.toml",
        "mix.exs",
        "native/ecto_libsql/Cargo.toml",
        "native/ecto_libsql/fuzz/Cargo.toml"
      ],
      "largest_source_bytes": 75278,
      "source_files_sampled": 97,
      "oversized_source_files": 1,
      "agent_instruction_files": [
        "CLAUDE.md"
      ],
      "agent_instruction_max_bytes": 15037
    },
    "dependencies": {
      "manifests": [
        "Cargo.toml",
        "mix.exs"
      ],
      "advisories": {
        "error": null,
        "scope": "repository_graph",
        "source": "osv",
        "findings": [
          {
            "name": "rustls-webpki",
            "direct": false,
            "version": "0.102.8",
            "severity": "high",
            "ecosystem": "crates",
            "cvss_score": 7.5,
            "advisory_ids": [
              "GHSA-82j2-j2ch-gfr8",
              "GHSA-965h-392x-2mh5",
              "GHSA-pwjx-qhcg-rvj4",
              "GHSA-xgp8-3hg3-c2mh",
              "RUSTSEC-2026-0049",
              "RUSTSEC-2026-0098",
              "RUSTSEC-2026-0099",
              "RUSTSEC-2026-0104"
            ],
            "fixed_version": "0.104.0-alpha.7",
            "advisory_count": 8,
            "oldest_advisory_days": 132
          },
          {
            "name": "libsql-sqlite3-parser",
            "direct": false,
            "version": "0.13.0",
            "severity": "low",
            "ecosystem": "crates",
            "cvss_score": 2.9,
            "advisory_ids": [
              "GHSA-8m95-fffc-h4c5"
            ],
            "fixed_version": null,
            "advisory_count": 1,
            "oldest_advisory_days": 447
          },
          {
            "name": "anyhow",
            "direct": false,
            "version": "1.0.100",
            "severity": "unknown",
            "ecosystem": "crates",
            "cvss_score": null,
            "advisory_ids": [
              "RUSTSEC-2026-0190"
            ],
            "fixed_version": "1.0.103",
            "advisory_count": 1,
            "oldest_advisory_days": 35
          },
          {
            "name": "bincode",
            "direct": false,
            "version": "1.3.3",
            "severity": "unknown",
            "ecosystem": "crates",
            "cvss_score": null,
            "advisory_ids": [
              "RUSTSEC-2025-0141"
            ],
            "fixed_version": null,
            "advisory_count": 1,
            "oldest_advisory_days": 226
          },
          {
            "name": "rustls-pemfile",
            "direct": false,
            "version": "2.2.0",
            "severity": "unknown",
            "ecosystem": "crates",
            "cvss_score": null,
            "advisory_ids": [
              "RUSTSEC-2025-0134"
            ],
            "fixed_version": null,
            "advisory_count": 1,
            "oldest_advisory_days": 244
          }
        ],
        "collected": true,
        "malicious": [],
        "truncated": false,
        "by_severity": {
          "low": 1,
          "high": 1,
          "unknown": 3
        },
        "advisory_count": 12,
        "affected_count": 5,
        "assessed_count": 325,
        "malicious_count": 0,
        "assessed_package": null,
        "unassessed_count": 6,
        "direct_affected_count": 0
      },
      "ecosystems": [
        "crates",
        "hex"
      ],
      "dependencies": [
        {
          "name": "db_connection",
          "manifest": "mix.exs",
          "ecosystem": "hex",
          "version_constraint": "~> 2.1"
        },
        {
          "name": "ecto",
          "manifest": "mix.exs",
          "ecosystem": "hex",
          "version_constraint": "~> 3.11"
        },
        {
          "name": "ecto_sql",
          "manifest": "mix.exs",
          "ecosystem": "hex",
          "version_constraint": "~> 3.11"
        },
        {
          "name": "jason",
          "manifest": "mix.exs",
          "ecosystem": "hex",
          "version_constraint": "~> 1.4"
        },
        {
          "name": "rustler",
          "manifest": "mix.exs",
          "ecosystem": "hex",
          "version_constraint": "~> 0.38"
        },
        {
          "name": "rustler_precompiled",
          "manifest": "mix.exs",
          "ecosystem": "hex",
          "version_constraint": "~> 0.8"
        }
      ],
      "all_dependencies": {
        "error": null,
        "source": "github-sbom",
        "packages": [
          {
            "name": "aes",
            "direct": false,
            "version": "0.8.4",
            "ecosystem": "crates"
          },
          {
            "name": "ahash",
            "direct": false,
            "version": "0.8.12",
            "ecosystem": "crates"
          },
          {
            "name": "aho-corasick",
            "direct": false,
            "version": "1.1.4",
            "ecosystem": "crates"
          },
          {
            "name": "allocator-api2",
            "direct": false,
            "version": "0.2.21",
            "ecosystem": "crates"
          },
          {
            "name": "android_system_properties",
            "direct": false,
            "version": "0.1.5",
            "ecosystem": "crates"
          },
          {
            "name": "anyhow",
            "direct": false,
            "version": "1.0.100",
            "ecosystem": "crates"
          },
          {
            "name": "anyhow",
            "direct": false,
            "version": "1.0.103",
            "ecosystem": "crates"
          },
          {
            "name": "arbitrary",
            "direct": false,
            "version": "1.4.2",
            "ecosystem": "crates"
          },
          {
            "name": "async-stream",
            "direct": false,
            "version": "0.3.6",
            "ecosystem": "crates"
          },
          {
            "name": "async-stream-impl",
            "direct": false,
            "version": "0.3.6",
            "ecosystem": "crates"
          },
          {
            "name": "async-trait",
            "direct": false,
            "version": "0.1.89",
            "ecosystem": "crates"
          },
          {
            "name": "autocfg",
            "direct": false,
            "version": "1.5.0",
            "ecosystem": "crates"
          },
          {
            "name": "autocfg",
            "direct": false,
            "version": "1.5.1",
            "ecosystem": "crates"
          },
          {
            "name": "axum",
            "direct": false,
            "version": "0.6.20",
            "ecosystem": "crates"
          },
          {
            "name": "axum-core",
            "direct": false,
            "version": "0.3.4",
            "ecosystem": "crates"
          },
          {
            "name": "base64",
            "direct": false,
            "version": "0.21.7",
            "ecosystem": "crates"
          },
          {
            "name": "bincode",
            "direct": false,
            "version": "1.3.3",
            "ecosystem": "crates"
          },
          {
            "name": "bindgen",
            "direct": false,
            "version": "0.66.1",
            "ecosystem": "crates"
          },
          {
            "name": "bit-set",
            "direct": false,
            "version": "0.8.0",
            "ecosystem": "crates"
          },
          {
            "name": "bit-vec",
            "direct": false,
            "version": "0.8.0",
            "ecosystem": "crates"
          },
          {
            "name": "bitflags",
            "direct": false,
            "version": "1.3.2",
            "ecosystem": "crates"
          },
          {
            "name": "bitflags",
            "direct": false,
            "version": "2.10.0",
            "ecosystem": "crates"
          },
          {
            "name": "bitflags",
            "direct": false,
            "version": "2.13.0",
            "ecosystem": "crates"
          },
          {
            "name": "block-padding",
            "direct": false,
            "version": "0.3.3",
            "ecosystem": "crates"
          },
          {
            "name": "bumpalo",
            "direct": false,
            "version": "3.19.1",
            "ecosystem": "crates"
          },
          {
            "name": "bumpalo",
            "direct": false,
            "version": "3.20.3",
            "ecosystem": "crates"
          },
          {
            "name": "byteorder",
            "direct": false,
            "version": "1.5.0",
            "ecosystem": "crates"
          },
          {
            "name": "bytes",
            "direct": false,
            "version": null,
            "ecosystem": "crates"
          },
          {
            "name": "bytes",
            "direct": false,
            "version": "1.11.1",
            "ecosystem": "crates"
          },
          {
            "name": "bytes",
            "direct": false,
            "version": "1.12.0",
            "ecosystem": "crates"
          },
          {
            "name": "cbc",
            "direct": false,
            "version": "0.1.2",
            "ecosystem": "crates"
          },
          {
            "name": "cc",
            "direct": false,
            "version": "1.2.51",
            "ecosystem": "crates"
          },
          {
            "name": "cc",
            "direct": false,
            "version": "1.2.65",
            "ecosystem": "crates"
          },
          {
            "name": "cexpr",
            "direct": false,
            "version": "0.6.0",
            "ecosystem": "crates"
          },
          {
            "name": "cfg-if",
            "direct": false,
            "version": "1.0.4",
            "ecosystem": "crates"
          },
          {
            "name": "chrono",
            "direct": false,
            "version": "0.4.42",
            "ecosystem": "crates"
          },
          {
            "name": "chrono",
            "direct": false,
            "version": "0.4.45",
            "ecosystem": "crates"
          },
          {
            "name": "cipher",
            "direct": false,
            "version": "0.4.4",
            "ecosystem": "crates"
          },
          {
            "name": "clang-sys",
            "direct": false,
            "version": "1.8.1",
            "ecosystem": "crates"
          },
          {
            "name": "cmake",
            "direct": false,
            "version": "0.1.57",
            "ecosystem": "crates"
          },
          {
            "name": "cmake",
            "direct": false,
            "version": "0.1.58",
            "ecosystem": "crates"
          },
          {
            "name": "core-foundation",
            "direct": false,
            "version": "0.9.4",
            "ecosystem": "crates"
          },
          {
            "name": "core-foundation-sys",
            "direct": false,
            "version": "0.8.7",
            "ecosystem": "crates"
          },
          {
            "name": "cpufeatures",
            "direct": false,
            "version": "0.2.17",
            "ecosystem": "crates"
          },
          {
            "name": "crc32fast",
            "direct": false,
            "version": "1.5.0",
            "ecosystem": "crates"
          },
          {
            "name": "crypto-common",
            "direct": false,
            "version": "0.1.7",
            "ecosystem": "crates"
          },
          {
            "name": "derive_arbitrary",
            "direct": false,
            "version": "1.4.2",
            "ecosystem": "crates"
          },
          {
            "name": "either",
            "direct": false,
            "version": "1.15.0",
            "ecosystem": "crates"
          },
          {
            "name": "either",
            "direct": false,
            "version": "1.16.0",
            "ecosystem": "crates"
          },
          {
            "name": "equivalent",
            "direct": false,
            "version": "1.0.2",
            "ecosystem": "crates"
          },
          {
            "name": "errno",
            "direct": false,
            "version": "0.3.14",
            "ecosystem": "crates"
          },
          {
            "name": "fallible-iterator",
            "direct": false,
            "version": "0.2.0",
            "ecosystem": "crates"
          },
          {
            "name": "fallible-iterator",
            "direct": false,
            "version": "0.3.0",
            "ecosystem": "crates"
          },
          {
            "name": "fallible-streaming-iterator",
            "direct": false,
            "version": "0.1.9",
            "ecosystem": "crates"
          },
          {
            "name": "fastrand",
            "direct": false,
            "version": "2.4.1",
            "ecosystem": "crates"
          },
          {
            "name": "find-msvc-tools",
            "direct": false,
            "version": "0.1.6",
            "ecosystem": "crates"
          },
          {
            "name": "find-msvc-tools",
            "direct": false,
            "version": "0.1.9",
            "ecosystem": "crates"
          },
          {
            "name": "fnv",
            "direct": false,
            "version": "1.0.7",
            "ecosystem": "crates"
          },
          {
            "name": "futures",
            "direct": false,
            "version": "0.3.31",
            "ecosystem": "crates"
          },
          {
            "name": "futures",
            "direct": false,
            "version": "0.3.32",
            "ecosystem": "crates"
          },
          {
            "name": "futures-channel",
            "direct": false,
            "version": "0.3.31",
            "ecosystem": "crates"
          },
          {
            "name": "futures-channel",
            "direct": false,
            "version": "0.3.32",
            "ecosystem": "crates"
          },
          {
            "name": "futures-core",
            "direct": false,
            "version": "0.3.31",
            "ecosystem": "crates"
          },
          {
            "name": "futures-core",
            "direct": false,
            "version": "0.3.32",
            "ecosystem": "crates"
          },
          {
            "name": "futures-executor",
            "direct": false,
            "version": "0.3.31",
            "ecosystem": "crates"
          },
          {
            "name": "futures-executor",
            "direct": false,
            "version": "0.3.32",
            "ecosystem": "crates"
          },
          {
            "name": "futures-io",
            "direct": false,
            "version": "0.3.31",
            "ecosystem": "crates"
          },
          {
            "name": "futures-io",
            "direct": false,
            "version": "0.3.32",
            "ecosystem": "crates"
          },
          {
            "name": "futures-macro",
            "direct": false,
            "version": "0.3.31",
            "ecosystem": "crates"
          },
          {
            "name": "futures-macro",
            "direct": false,
            "version": "0.3.32",
            "ecosystem": "crates"
          },
          {
            "name": "futures-sink",
            "direct": false,
            "version": "0.3.31",
            "ecosystem": "crates"
          },
          {
            "name": "futures-sink",
            "direct": false,
            "version": "0.3.32",
            "ecosystem": "crates"
          },
          {
            "name": "futures-task",
            "direct": false,
            "version": "0.3.31",
            "ecosystem": "crates"
          },
          {
            "name": "futures-task",
            "direct": false,
            "version": "0.3.32",
            "ecosystem": "crates"
          },
          {
            "name": "futures-util",
            "direct": false,
            "version": "0.3.31",
            "ecosystem": "crates"
          },
          {
            "name": "futures-util",
            "direct": false,
            "version": "0.3.32",
            "ecosystem": "crates"
          },
          {
            "name": "generic-array",
            "direct": false,
            "version": "0.14.7",
            "ecosystem": "crates"
          },
          {
            "name": "getrandom",
            "direct": false,
            "version": "0.2.16",
            "ecosystem": "crates"
          },
          {
            "name": "getrandom",
            "direct": false,
            "version": "0.2.17",
            "ecosystem": "crates"
          },
          {
            "name": "getrandom",
            "direct": false,
            "version": "0.3.4",
            "ecosystem": "crates"
          },
          {
            "name": "getrandom",
            "direct": false,
            "version": "0.4.3",
            "ecosystem": "crates"
          },
          {
            "name": "glob",
            "direct": false,
            "version": "0.3.3",
            "ecosystem": "crates"
          },
          {
            "name": "h2",
            "direct": false,
            "version": "0.3.27",
            "ecosystem": "crates"
          },
          {
            "name": "hashbrown",
            "direct": false,
            "version": "0.12.3",
            "ecosystem": "crates"
          },
          {
            "name": "hashbrown",
            "direct": false,
            "version": "0.14.5",
            "ecosystem": "crates"
          },
          {
            "name": "hashbrown",
            "direct": false,
            "version": "0.16.1",
            "ecosystem": "crates"
          },
          {
            "name": "hashbrown",
            "direct": false,
            "version": "0.17.0",
            "ecosystem": "crates"
          },
          {
            "name": "hashlink",
            "direct": false,
            "version": "0.8.4",
            "ecosystem": "crates"
          },
          {
            "name": "heck",
            "direct": false,
            "version": "0.5.0",
            "ecosystem": "crates"
          },
          {
            "name": "home",
            "direct": false,
            "version": "0.5.12",
            "ecosystem": "crates"
          },
          {
            "name": "http",
            "direct": false,
            "version": "0.2.12",
            "ecosystem": "crates"
          },
          {
            "name": "http-body",
            "direct": false,
            "version": "0.4.6",
            "ecosystem": "crates"
          },
          {
            "name": "http-range-header",
            "direct": false,
            "version": "0.3.1",
            "ecosystem": "crates"
          },
          {
            "name": "httparse",
            "direct": false,
            "version": "1.10.1",
            "ecosystem": "crates"
          },
          {
            "name": "httpdate",
            "direct": false,
            "version": "1.0.3",
            "ecosystem": "crates"
          },
          {
            "name": "hyper",
            "direct": false,
            "version": "0.14.32",
            "ecosystem": "crates"
          },
          {
            "name": "hyper-rustls",
            "direct": false,
            "version": "0.25.0",
            "ecosystem": "crates"
          },
          {
            "name": "hyper-timeout",
            "direct": false,
            "version": "0.4.1",
            "ecosystem": "crates"
          },
          {
            "name": "iana-time-zone",
            "direct": false,
            "version": "0.1.64",
            "ecosystem": "crates"
          },
          {
            "name": "iana-time-zone",
            "direct": false,
            "version": "0.1.65",
            "ecosystem": "crates"
          },
          {
            "name": "iana-time-zone-haiku",
            "direct": false,
            "version": "0.1.2",
            "ecosystem": "crates"
          },
          {
            "name": "indexmap",
            "direct": false,
            "version": "1.9.3",
            "ecosystem": "crates"
          },
          {
            "name": "indexmap",
            "direct": false,
            "version": "2.12.1",
            "ecosystem": "crates"
          },
          {
            "name": "indexmap",
            "direct": false,
            "version": "2.14.0",
            "ecosystem": "crates"
          },
          {
            "name": "inout",
            "direct": false,
            "version": "0.1.4",
            "ecosystem": "crates"
          },
          {
            "name": "inventory",
            "direct": false,
            "version": "0.3.21",
            "ecosystem": "crates"
          },
          {
            "name": "inventory",
            "direct": false,
            "version": "0.3.24",
            "ecosystem": "crates"
          },
          {
            "name": "itertools",
            "direct": false,
            "version": "0.12.1",
            "ecosystem": "crates"
          },
          {
            "name": "itoa",
            "direct": false,
            "version": "1.0.16",
            "ecosystem": "crates"
          },
          {
            "name": "itoa",
            "direct": false,
            "version": "1.0.18",
            "ecosystem": "crates"
          },
          {
            "name": "jobserver",
            "direct": false,
            "version": "0.1.34",
            "ecosystem": "crates"
          },
          {
            "name": "js-sys",
            "direct": false,
            "version": "0.3.83",
            "ecosystem": "crates"
          },
          {
            "name": "js-sys",
            "direct": false,
            "version": "0.3.97",
            "ecosystem": "crates"
          },
          {
            "name": "lazy_static",
            "direct": false,
            "version": "1.5.0",
            "ecosystem": "crates"
          },
          {
            "name": "lazycell",
            "direct": false,
            "version": "1.3.0",
            "ecosystem": "crates"
          },
          {
            "name": "libc",
            "direct": false,
            "version": "0.2.178",
            "ecosystem": "crates"
          },
          {
            "name": "libc",
            "direct": false,
            "version": "0.2.186",
            "ecosystem": "crates"
          },
          {
            "name": "libfuzzer-sys",
            "direct": false,
            "version": "0.4.10",
            "ecosystem": "crates"
          },
          {
            "name": "libloading",
            "direct": false,
            "version": "0.8.9",
            "ecosystem": "crates"
          },
          {
            "name": "libloading",
            "direct": false,
            "version": "0.9.0",
            "ecosystem": "crates"
          },
          {
            "name": "libsql",
            "direct": false,
            "version": null,
            "ecosystem": "crates"
          },
          {
            "name": "libsql",
            "direct": false,
            "version": "0.9.29",
            "ecosystem": "crates"
          },
          {
            "name": "libsql",
            "direct": false,
            "version": "0.9.30",
            "ecosystem": "crates"
          },
          {
            "name": "libsql-ffi",
            "direct": false,
            "version": "0.9.29",
            "ecosystem": "crates"
          },
          {
            "name": "libsql-ffi",
            "direct": false,
            "version": "0.9.30",
            "ecosystem": "crates"
          },
          {
            "name": "libsql-hrana",
            "direct": false,
            "version": "0.9.29",
            "ecosystem": "crates"
          },
          {
            "name": "libsql-hrana",
            "direct": false,
            "version": "0.9.30",
            "ecosystem": "crates"
          },
          {
            "name": "libsql-rusqlite",
            "direct": false,
            "version": "0.9.29",
            "ecosystem": "crates"
          },
          {
            "name": "libsql-rusqlite",
            "direct": false,
            "version": "0.9.30",
            "ecosystem": "crates"
          },
          {
            "name": "libsql-sqlite3-parser",
            "direct": false,
            "version": "0.13.0",
            "ecosystem": "crates"
          },
          {
            "name": "libsql-sys",
            "direct": false,
            "version": "0.9.29",
            "ecosystem": "crates"
          },
          {
            "name": "libsql-sys",
            "direct": false,
            "version": "0.9.30",
            "ecosystem": "crates"
          },
          {
            "name": "libsql_replication",
            "direct": false,
            "version": "0.9.29",
            "ecosystem": "crates"
          },
          {
            "name": "libsql_replication",
            "direct": false,
            "version": "0.9.30",
            "ecosystem": "crates"
          },
          {
            "name": "linux-raw-sys",
            "direct": false,
            "version": "0.12.1",
            "ecosystem": "crates"
          },
          {
            "name": "linux-raw-sys",
            "direct": false,
            "version": "0.4.15",
            "ecosystem": "crates"
          },
          {
            "name": "lock_api",
            "direct": false,
            "version": "0.4.14",
            "ecosystem": "crates"
          },
          {
            "name": "log",
            "direct": false,
            "version": "0.4.29",
            "ecosystem": "crates"
          },
          {
            "name": "log",
            "direct": false,
            "version": "0.4.33",
            "ecosystem": "crates"
          },
          {
            "name": "matchit",
            "direct": false,
            "version": "0.7.3",
            "ecosystem": "crates"
          },
          {
            "name": "memchr",
            "direct": false,
            "version": "2.7.6",
            "ecosystem": "crates"
          },
          {
            "name": "memchr",
            "direct": false,
            "version": "2.8.2",
            "ecosystem": "crates"
          },
          {
            "name": "mime",
            "direct": false,
            "version": "0.3.17",
            "ecosystem": "crates"
          },
          {
            "name": "minimal-lexical",
            "direct": false,
            "version": "0.2.1",
            "ecosystem": "crates"
          },
          {
            "name": "mio",
            "direct": false,
            "version": "1.1.1",
            "ecosystem": "crates"
          },
          {
            "name": "mio",
            "direct": false,
            "version": "1.2.1",
            "ecosystem": "crates"
          },
          {
            "name": "nom",
            "direct": false,
            "version": "7.1.3",
            "ecosystem": "crates"
          },
          {
            "name": "num-traits",
            "direct": false,
            "version": "0.2.19",
            "ecosystem": "crates"
          },
          {
            "name": "once_cell",
            "direct": false,
            "version": "1.21.3",
            "ecosystem": "crates"
          },
          {
            "name": "once_cell",
            "direct": false,
            "version": "1.21.4",
            "ecosystem": "crates"
          },
          {
            "name": "openssl-probe",
            "direct": false,
            "version": "0.1.6",
            "ecosystem": "crates"
          },
          {
            "name": "parking_lot",
            "direct": false,
            "version": "0.12.5",
            "ecosystem": "crates"
          },
          {
            "name": "parking_lot_core",
            "direct": false,
            "version": "0.9.12",
            "ecosystem": "crates"
          },
          {
            "name": "peeking_take_while",
            "direct": false,
            "version": "0.1.2",
            "ecosystem": "crates"
          },
          {
            "name": "percent-encoding",
            "direct": false,
            "version": "2.3.2",
            "ecosystem": "crates"
          },
          {
            "name": "phf",
            "direct": false,
            "version": "0.11.3",
            "ecosystem": "crates"
          },
          {
            "name": "phf_codegen",
            "direct": false,
            "version": "0.11.3",
            "ecosystem": "crates"
          },
          {
            "name": "phf_generator",
            "direct": false,
            "version": "0.11.3",
            "ecosystem": "crates"
          },
          {
            "name": "phf_shared",
            "direct": false,
            "version": "0.11.3",
            "ecosystem": "crates"
          },
          {
            "name": "pin-project",
            "direct": false,
            "version": "1.1.10",
            "ecosystem": "crates"
          },
          {
            "name": "pin-project",
            "direct": false,
            "version": "1.1.13",
            "ecosystem": "crates"
          },
          {
            "name": "pin-project-internal",
            "direct": false,
            "version": "1.1.10",
            "ecosystem": "crates"
          },
          {
            "name": "pin-project-internal",
            "direct": false,
            "version": "1.1.13",
            "ecosystem": "crates"
          },
          {
            "name": "pin-project-lite",
            "direct": false,
            "version": "0.2.16",
            "ecosystem": "crates"
          },
          {
            "name": "pin-project-lite",
            "direct": false,
            "version": "0.2.17",
            "ecosystem": "crates"
          },
          {
            "name": "pin-utils",
            "direct": false,
            "version": "0.1.0",
            "ecosystem": "crates"
          },
          {
            "name": "ppv-lite86",
            "direct": false,
            "version": "0.2.21",
            "ecosystem": "crates"
          },
          {
            "name": "prettyplease",
            "direct": false,
            "version": "0.2.37",
            "ecosystem": "crates"
          },
          {
            "name": "proc-macro2",
            "direct": false,
            "version": "1.0.103",
            "ecosystem": "crates"
          },
          {
            "name": "proc-macro2",
            "direct": false,
            "version": "1.0.106",
            "ecosystem": "crates"
          },
          {
            "name": "proptest",
            "direct": false,
            "version": null,
            "ecosystem": "crates"
          },
          {
            "name": "proptest",
            "direct": false,
            "version": "1.11.0",
            "ecosystem": "crates"
          },
          {
            "name": "prost",
            "direct": false,
            "version": "0.12.6",
            "ecosystem": "crates"
          },
          {
            "name": "prost-derive",
            "direct": false,
            "version": "0.12.6",
            "ecosystem": "crates"
          },
          {
            "name": "quick-error",
            "direct": false,
            "version": "1.2.3",
            "ecosystem": "crates"
          },
          {
            "name": "quote",
            "direct": false,
            "version": "1.0.42",
            "ecosystem": "crates"
          },
          {
            "name": "quote",
            "direct": false,
            "version": "1.0.46",
            "ecosystem": "crates"
          },
          {
            "name": "r-efi",
            "direct": false,
            "version": "5.3.0",
            "ecosystem": "crates"
          },
          {
            "name": "r-efi",
            "direct": false,
            "version": "6.0.0",
            "ecosystem": "crates"
          },
          {
            "name": "rand",
            "direct": false,
            "version": "0.8.6",
            "ecosystem": "crates"
          },
          {
            "name": "rand",
            "direct": false,
            "version": "0.9.4",
            "ecosystem": "crates"
          },
          {
            "name": "rand_chacha",
            "direct": false,
            "version": "0.3.1",
            "ecosystem": "crates"
          },
          {
            "name": "rand_chacha",
            "direct": false,
            "version": "0.9.0",
            "ecosystem": "crates"
          },
          {
            "name": "rand_core",
            "direct": false,
            "version": "0.6.4",
            "ecosystem": "crates"
          },
          {
            "name": "rand_core",
            "direct": false,
            "version": "0.9.5",
            "ecosystem": "crates"
          },
          {
            "name": "rand_xorshift",
            "direct": false,
            "version": "0.4.0",
            "ecosystem": "crates"
          },
          {
            "name": "redox_syscall",
            "direct": false,
            "version": "0.5.18",
            "ecosystem": "crates"
          },
          {
            "name": "regex",
            "direct": false,
            "version": "1.12.2",
            "ecosystem": "crates"
          },
          {
            "name": "regex",
            "direct": false,
            "version": "1.12.4",
            "ecosystem": "crates"
          },
          {
            "name": "regex-automata",
            "direct": false,
            "version": "0.4.13",
            "ecosystem": "crates"
          },
          {
            "name": "regex-automata",
            "direct": false,
            "version": "0.4.14",
            "ecosystem": "crates"
          },
          {
            "name": "regex-lite",
            "direct": false,
            "version": "0.1.8",
            "ecosystem": "crates"
          },
          {
            "name": "regex-lite",
            "direct": false,
            "version": "0.1.9",
            "ecosystem": "crates"
          },
          {
            "name": "regex-syntax",
            "direct": false,
            "version": "0.8.11",
            "ecosystem": "crates"
          },
          {
            "name": "regex-syntax",
            "direct": false,
            "version": "0.8.8",
            "ecosystem": "crates"
          },
          {
            "name": "ring",
            "direct": false,
            "version": "0.17.14",
            "ecosystem": "crates"
          },
          {
            "name": "rustc-hash",
            "direct": false,
            "version": "1.1.0",
            "ecosystem": "crates"
          },
          {
            "name": "rustix",
            "direct": false,
            "version": "0.38.44",
            "ecosystem": "crates"
          },
          {
            "name": "rustix",
            "direct": false,
            "version": "1.1.4",
            "ecosystem": "crates"
          },
          {
            "name": "rustler",
            "direct": false,
            "version": null,
            "ecosystem": "crates"
          },
          {
            "name": "rustler",
            "direct": false,
            "version": "0.37.2",
            "ecosystem": "crates"
          },
          {
            "name": "rustler",
            "direct": false,
            "version": "0.38.0",
            "ecosystem": "crates"
          },
          {
            "name": "rustler_codegen",
            "direct": false,
            "version": "0.37.2",
            "ecosystem": "crates"
          },
          {
            "name": "rustler_codegen",
            "direct": false,
            "version": "0.38.0",
            "ecosystem": "crates"
          },
          {
            "name": "rustls",
            "direct": false,
            "version": "0.22.4",
            "ecosystem": "crates"
          },
          {
            "name": "rustls-native-certs",
            "direct": false,
            "version": "0.7.3",
            "ecosystem": "crates"
          },
          {
            "name": "rustls-pemfile",
            "direct": false,
            "version": "2.2.0",
            "ecosystem": "crates"
          },
          {
            "name": "rustls-pki-types",
            "direct": false,
            "version": "1.13.2",
            "ecosystem": "crates"
          },
          {
            "name": "rustls-pki-types",
            "direct": false,
            "version": "1.14.1",
            "ecosystem": "crates"
          },
          {
            "name": "rustls-webpki",
            "direct": false,
            "version": "0.102.8",
            "ecosystem": "crates"
          },
          {
            "name": "rustversion",
            "direct": false,
            "version": "1.0.22",
            "ecosystem": "crates"
          },
          {
            "name": "rusty-fork",
            "direct": false,
            "version": "0.3.1",
            "ecosystem": "crates"
          },
          {
            "name": "schannel",
            "direct": false,
            "version": "0.1.28",
            "ecosystem": "crates"
          },
          {
            "name": "schannel",
            "direct": false,
            "version": "0.1.29",
            "ecosystem": "crates"
          },
          {
            "name": "scopeguard",
            "direct": false,
            "version": "1.2.0",
            "ecosystem": "crates"
          },
          {
            "name": "security-framework",
            "direct": false,
            "version": "2.11.1",
            "ecosystem": "crates"
          },
          {
            "name": "security-framework-sys",
            "direct": false,
            "version": "2.15.0",
            "ecosystem": "crates"
          },
          {
            "name": "security-framework-sys",
            "direct": false,
            "version": "2.17.0",
            "ecosystem": "crates"
          },
          {
            "name": "serde",
            "direct": false,
            "version": "1.0.228",
            "ecosystem": "crates"
          },
          {
            "name": "serde_core",
            "direct": false,
            "version": "1.0.228",
            "ecosystem": "crates"
          },
          {
            "name": "serde_derive",
            "direct": false,
            "version": "1.0.228",
            "ecosystem": "crates"
          },
          {
            "name": "serde_json",
            "direct": false,
            "version": "1.0.147",
            "ecosystem": "crates"
          },
          {
            "name": "serde_json",
            "direct": false,
            "version": "1.0.150",
            "ecosystem": "crates"
          },
          {
            "name": "shlex",
            "direct": false,
            "version": "1.3.0",
            "ecosystem": "crates"
          },
          {
            "name": "shlex",
            "direct": false,
            "version": "2.0.1",
            "ecosystem": "crates"
          },
          {
            "name": "signal-hook-registry",
            "direct": false,
            "version": "1.4.8",
            "ecosystem": "crates"
          },
          {
            "name": "siphasher",
            "direct": false,
            "version": "1.0.1",
            "ecosystem": "crates"
          },
          {
            "name": "siphasher",
            "direct": false,
            "version": "1.0.3",
            "ecosystem": "crates"
          },
          {
            "name": "slab",
            "direct": false,
            "version": "0.4.11",
            "ecosystem": "crates"
          },
          {
            "name": "slab",
            "direct": false,
            "version": "0.4.12",
            "ecosystem": "crates"
          },
          {
            "name": "smallvec",
            "direct": false,
            "version": "1.15.1",
            "ecosystem": "crates"
          },
          {
            "name": "smallvec",
            "direct": false,
            "version": "1.15.2",
            "ecosystem": "crates"
          },
          {
            "name": "socket2",
            "direct": false,
            "version": "0.5.10",
            "ecosystem": "crates"
          },
          {
            "name": "socket2",
            "direct": false,
            "version": "0.6.1",
            "ecosystem": "crates"
          },
          {
            "name": "socket2",
            "direct": false,
            "version": "0.6.4",
            "ecosystem": "crates"
          },
          {
            "name": "subtle",
            "direct": false,
            "version": "2.6.1",
            "ecosystem": "crates"
          },
          {
            "name": "syn",
            "direct": false,
            "version": "2.0.111",
            "ecosystem": "crates"
          },
          {
            "name": "syn",
            "direct": false,
            "version": "2.0.118",
            "ecosystem": "crates"
          },
          {
            "name": "sync_wrapper",
            "direct": false,
            "version": "0.1.2",
            "ecosystem": "crates"
          },
          {
            "name": "tempfile",
            "direct": false,
            "version": "3.27.0",
            "ecosystem": "crates"
          },
          {
            "name": "thiserror",
            "direct": false,
            "version": "1.0.69",
            "ecosystem": "crates"
          },
          {
            "name": "thiserror-impl",
            "direct": false,
            "version": "1.0.69",
            "ecosystem": "crates"
          },
          {
            "name": "tokio",
            "direct": false,
            "version": null,
            "ecosystem": "crates"
          },
          {
            "name": "tokio",
            "direct": false,
            "version": "1.48.0",
            "ecosystem": "crates"
          },
          {
            "name": "tokio",
            "direct": false,
            "version": "1.52.3",
            "ecosystem": "crates"
          },
          {
            "name": "tokio-io-timeout",
            "direct": false,
            "version": "1.2.1",
            "ecosystem": "crates"
          },
          {
            "name": "tokio-macros",
            "direct": false,
            "version": "2.6.0",
            "ecosystem": "crates"
          },
          {
            "name": "tokio-macros",
            "direct": false,
            "version": "2.7.0",
            "ecosystem": "crates"
          },
          {
            "name": "tokio-rustls",
            "direct": false,
            "version": "0.25.0",
            "ecosystem": "crates"
          },
          {
            "name": "tokio-stream",
            "direct": false,
            "version": "0.1.17",
            "ecosystem": "crates"
          },
          {
            "name": "tokio-stream",
            "direct": false,
            "version": "0.1.18",
            "ecosystem": "crates"
          },
          {
            "name": "tokio-util",
            "direct": false,
            "version": "0.7.17",
            "ecosystem": "crates"
          },
          {
            "name": "tokio-util",
            "direct": false,
            "version": "0.7.18",
            "ecosystem": "crates"
          },
          {
            "name": "tonic",
            "direct": false,
            "version": "0.11.0",
            "ecosystem": "crates"
          },
          {
            "name": "tonic-web",
            "direct": false,
            "version": "0.11.0",
            "ecosystem": "crates"
          },
          {
            "name": "tower",
            "direct": false,
            "version": "0.4.13",
            "ecosystem": "crates"
          },
          {
            "name": "tower-http",
            "direct": false,
            "version": "0.4.4",
            "ecosystem": "crates"
          },
          {
            "name": "tower-layer",
            "direct": false,
            "version": "0.3.3",
            "ecosystem": "crates"
          },
          {
            "name": "tower-service",
            "direct": false,
            "version": "0.3.3",
            "ecosystem": "crates"
          },
          {
            "name": "tracing",
            "direct": false,
            "version": "0.1.44",
            "ecosystem": "crates"
          },
          {
            "name": "tracing-attributes",
            "direct": false,
            "version": "0.1.31",
            "ecosystem": "crates"
          },
          {
            "name": "tracing-core",
            "direct": false,
            "version": "0.1.36",
            "ecosystem": "crates"
          },
          {
            "name": "try-lock",
            "direct": false,
            "version": "0.2.5",
            "ecosystem": "crates"
          },
          {
            "name": "typenum",
            "direct": false,
            "version": "1.19.0",
            "ecosystem": "crates"
          },
          {
            "name": "typenum",
            "direct": false,
            "version": "1.20.1",
            "ecosystem": "crates"
          },
          {
            "name": "unarray",
            "direct": false,
            "version": "0.1.4",
            "ecosystem": "crates"
          },
          {
            "name": "uncased",
            "direct": false,
            "version": "0.9.10",
            "ecosystem": "crates"
          },
          {
            "name": "unicode-ident",
            "direct": false,
            "version": "1.0.22",
            "ecosystem": "crates"
          },
          {
            "name": "unicode-ident",
            "direct": false,
            "version": "1.0.24",
            "ecosystem": "crates"
          },
          {
            "name": "untrusted",
            "direct": false,
            "version": "0.9.0",
            "ecosystem": "crates"
          },
          {
            "name": "uuid",
            "direct": false,
            "version": null,
            "ecosystem": "crates"
          },
          {
            "name": "uuid",
            "direct": false,
            "version": "1.19.0",
            "ecosystem": "crates"
          },
          {
            "name": "uuid",
            "direct": false,
            "version": "1.23.1",
            "ecosystem": "crates"
          },
          {
            "name": "version_check",
            "direct": false,
            "version": "0.9.5",
            "ecosystem": "crates"
          },
          {
            "name": "wait-timeout",
            "direct": false,
            "version": "0.2.1",
            "ecosystem": "crates"
          },
          {
            "name": "want",
            "direct": false,
            "version": "0.3.1",
            "ecosystem": "crates"
          },
          {
            "name": "wasi",
            "direct": false,
            "version": "0.11.1+wasi-snapshot-preview1",
            "ecosystem": "crates"
          },
          {
            "name": "wasip2",
            "direct": false,
            "version": "1.0.1+wasi-0.2.4",
            "ecosystem": "crates"
          },
          {
            "name": "wasip2",
            "direct": false,
            "version": "1.0.4+wasi-0.2.12",
            "ecosystem": "crates"
          },
          {
            "name": "wasm-bindgen",
            "direct": false,
            "version": "0.2.106",
            "ecosystem": "crates"
          },
          {
            "name": "wasm-bindgen",
            "direct": false,
            "version": "0.2.120",
            "ecosystem": "crates"
          },
          {
            "name": "wasm-bindgen-macro",
            "direct": false,
            "version": "0.2.106",
            "ecosystem": "crates"
          },
          {
            "name": "wasm-bindgen-macro",
            "direct": false,
            "version": "0.2.120",
            "ecosystem": "crates"
          },
          {
            "name": "wasm-bindgen-macro-support",
            "direct": false,
            "version": "0.2.106",
            "ecosystem": "crates"
          },
          {
            "name": "wasm-bindgen-macro-support",
            "direct": false,
            "version": "0.2.120",
            "ecosystem": "crates"
          },
          {
            "name": "wasm-bindgen-shared",
            "direct": false,
            "version": "0.2.106",
            "ecosystem": "crates"
          },
          {
            "name": "wasm-bindgen-shared",
            "direct": false,
            "version": "0.2.120",
            "ecosystem": "crates"
          },
          {
            "name": "webpki-roots",
            "direct": false,
            "version": "0.26.11",
            "ecosystem": "crates"
          },
          {
            "name": "webpki-roots",
            "direct": false,
            "version": "1.0.4",
            "ecosystem": "crates"
          },
          {
            "name": "webpki-roots",
            "direct": false,
            "version": "1.0.8",
            "ecosystem": "crates"
          },
          {
            "name": "which",
            "direct": false,
            "version": "4.4.2",
            "ecosystem": "crates"
          },
          {
            "name": "windows-core",
            "direct": false,
            "version": "0.62.2",
            "ecosystem": "crates"
          },
          {
            "name": "windows-implement",
            "direct": false,
            "version": "0.60.2",
            "ecosystem": "crates"
          },
          {
            "name": "windows-interface",
            "direct": false,
            "version": "0.59.3",
            "ecosystem": "crates"
          },
          {
            "name": "windows-link",
            "direct": false,
            "version": "0.2.1",
            "ecosystem": "crates"
          },
          {
            "name": "windows-result",
            "direct": false,
            "version": "0.4.1",
            "ecosystem": "crates"
          },
          {
            "name": "windows-strings",
            "direct": false,
            "version": "0.5.1",
            "ecosystem": "crates"
          },
          {
            "name": "windows-sys",
            "direct": false,
            "version": "0.52.0",
            "ecosystem": "crates"
          },
          {
            "name": "windows-sys",
            "direct": false,
            "version": "0.59.0",
            "ecosystem": "crates"
          },
          {
            "name": "windows-sys",
            "direct": false,
            "version": "0.60.2",
            "ecosystem": "crates"
          },
          {
            "name": "windows-sys",
            "direct": false,
            "version": "0.61.2",
            "ecosystem": "crates"
          },
          {
            "name": "windows-targets",
            "direct": false,
            "version": "0.52.6",
            "ecosystem": "crates"
          },
          {
            "name": "windows-targets",
            "direct": false,
            "version": "0.53.5",
            "ecosystem": "crates"
          },
          {
            "name": "windows_aarch64_gnullvm",
            "direct": false,
            "version": "0.52.6",
            "ecosystem": "crates"
          },
          {
            "name": "windows_aarch64_gnullvm",
            "direct": false,
            "version": "0.53.1",
            "ecosystem": "crates"
          },
          {
            "name": "windows_aarch64_msvc",
            "direct": false,
            "version": "0.52.6",
            "ecosystem": "crates"
          },
          {
            "name": "windows_aarch64_msvc",
            "direct": false,
            "version": "0.53.1",
            "ecosystem": "crates"
          },
          {
            "name": "windows_i686_gnu",
            "direct": false,
            "version": "0.52.6",
            "ecosystem": "crates"
          },
          {
            "name": "windows_i686_gnu",
            "direct": false,
            "version": "0.53.1",
            "ecosystem": "crates"
          },
          {
            "name": "windows_i686_gnullvm",
            "direct": false,
            "version": "0.52.6",
            "ecosystem": "crates"
          },
          {
            "name": "windows_i686_gnullvm",
            "direct": false,
            "version": "0.53.1",
            "ecosystem": "crates"
          },
          {
            "name": "windows_i686_msvc",
            "direct": false,
            "version": "0.52.6",
            "ecosystem": "crates"
          },
          {
            "name": "windows_i686_msvc",
            "direct": false,
            "version": "0.53.1",
            "ecosystem": "crates"
          },
          {
            "name": "windows_x86_64_gnu",
            "direct": false,
            "version": "0.52.6",
            "ecosystem": "crates"
          },
          {
            "name": "windows_x86_64_gnu",
            "direct": false,
            "version": "0.53.1",
            "ecosystem": "crates"
          },
          {
            "name": "windows_x86_64_gnullvm",
            "direct": false,
            "version": "0.52.6",
            "ecosystem": "crates"
          },
          {
            "name": "windows_x86_64_gnullvm",
            "direct": false,
            "version": "0.53.1",
            "ecosystem": "crates"
          },
          {
            "name": "windows_x86_64_msvc",
            "direct": false,
            "version": "0.52.6",
            "ecosystem": "crates"
          },
          {
            "name": "windows_x86_64_msvc",
            "direct": false,
            "version": "0.53.1",
            "ecosystem": "crates"
          },
          {
            "name": "wit-bindgen",
            "direct": false,
            "version": "0.46.0",
            "ecosystem": "crates"
          },
          {
            "name": "wit-bindgen",
            "direct": false,
            "version": "0.57.1",
            "ecosystem": "crates"
          },
          {
            "name": "zerocopy",
            "direct": false,
            "version": "0.7.35",
            "ecosystem": "crates"
          },
          {
            "name": "zerocopy",
            "direct": false,
            "version": "0.8.31",
            "ecosystem": "crates"
          },
          {
            "name": "zerocopy",
            "direct": false,
            "version": "0.8.52",
            "ecosystem": "crates"
          },
          {
            "name": "zerocopy-derive",
            "direct": false,
            "version": "0.7.35",
            "ecosystem": "crates"
          },
          {
            "name": "zerocopy-derive",
            "direct": false,
            "version": "0.8.31",
            "ecosystem": "crates"
          },
          {
            "name": "zerocopy-derive",
            "direct": false,
            "version": "0.8.52",
            "ecosystem": "crates"
          },
          {
            "name": "zeroize",
            "direct": false,
            "version": "1.8.2",
            "ecosystem": "crates"
          },
          {
            "name": "zeroize",
            "direct": false,
            "version": "1.9.0",
            "ecosystem": "crates"
          },
          {
            "name": "zmij",
            "direct": false,
            "version": "0.1.10",
            "ecosystem": "crates"
          },
          {
            "name": "zmij",
            "direct": false,
            "version": "1.0.21",
            "ecosystem": "crates"
          }
        ],
        "collected": true,
        "truncated": false,
        "total_count": 331,
        "direct_count": 0,
        "indirect_count": 331
      }
    },
    "maintainership": {
      "issues": {
        "open_prs": 8,
        "merged_prs": 90,
        "open_issues": 1,
        "closed_ratio": 0.857,
        "closed_issues": 6,
        "closed_unmerged_prs": 13
      },
      "bus_factor": 1,
      "bot_contributors": 2,
      "top_contributors": [
        {
          "type": "User",
          "login": "ocean",
          "commits": 590,
          "avatar_url": "https://avatars.githubusercontent.com/u/4443?v=4"
        },
        {
          "type": "User",
          "login": "claude",
          "commits": 61,
          "avatar_url": "https://avatars.githubusercontent.com/u/81847?v=4"
        },
        {
          "type": "User",
          "login": "danawanb",
          "commits": 9,
          "avatar_url": "https://avatars.githubusercontent.com/u/25291194?v=4"
        },
        {
          "type": "User",
          "login": "ricardo-valero",
          "commits": 3,
          "avatar_url": "https://avatars.githubusercontent.com/u/55701657?v=4"
        },
        {
          "type": "User",
          "login": "nadilas",
          "commits": 2,
          "avatar_url": "https://avatars.githubusercontent.com/u/5324856?v=4"
        },
        {
          "type": "User",
          "login": "AlanMcCann",
          "commits": 1,
          "avatar_url": "https://avatars.githubusercontent.com/u/124184?v=4"
        }
      ],
      "contributors_sampled": 6,
      "top_contributor_share": 0.886
    },
    "quality_signals": {
      "has_ci": true,
      "has_tests": true,
      "ci_workflows": [
        "ci.yml",
        "release.yml",
        "zizmor.yml"
      ],
      "has_docs_dir": false,
      "linter_configs": [],
      "has_editorconfig": false,
      "has_linter_config": false,
      "has_precommit_config": false
    },
    "security_signals": {
      "lockfiles": [
        "Cargo.lock",
        "mix.lock"
      ],
      "scorecard": {
        "checks": [
          {
            "name": "Binary-Artifacts",
            "score": 10,
            "reason": "no binaries found in the repo",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#binary-artifacts"
          },
          {
            "name": "Branch-Protection",
            "score": 3,
            "reason": "branch protection is not maximal on development and all release branches",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#branch-protection"
          },
          {
            "name": "CI-Tests",
            "score": 10,
            "reason": "10 out of 10 merged PRs checked by a CI test -- score normalized to 10",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#ci-tests"
          },
          {
            "name": "CII-Best-Practices",
            "score": 0,
            "reason": "no effort to earn an OpenSSF best practices badge detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#cii-best-practices"
          },
          {
            "name": "Code-Review",
            "score": 1,
            "reason": "Found 1/6 approved changesets -- score normalized to 1",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#code-review"
          },
          {
            "name": "Contributors",
            "score": 6,
            "reason": "project has 2 contributing companies or organizations -- score normalized to 6",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#contributors"
          },
          {
            "name": "Dangerous-Workflow",
            "score": 10,
            "reason": "no dangerous workflow patterns detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dangerous-workflow"
          },
          {
            "name": "Dependency-Update-Tool",
            "score": 10,
            "reason": "update tool detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dependency-update-tool"
          },
          {
            "name": "Fuzzing",
            "score": 10,
            "reason": "project is fuzzed",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#fuzzing"
          },
          {
            "name": "License",
            "score": 10,
            "reason": "license file detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#license"
          },
          {
            "name": "Maintained",
            "score": 10,
            "reason": "30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#maintained"
          },
          {
            "name": "Packaging",
            "score": null,
            "reason": "packaging workflow not detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#packaging"
          },
          {
            "name": "Pinned-Dependencies",
            "score": 5,
            "reason": "dependency not pinned by hash detected -- score normalized to 5",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#pinned-dependencies"
          },
          {
            "name": "SAST",
            "score": 10,
            "reason": "SAST tool is run on all commits",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#sast"
          },
          {
            "name": "Security-Policy",
            "score": 10,
            "reason": "security policy file detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#security-policy"
          },
          {
            "name": "Signed-Releases",
            "score": 0,
            "reason": "Project has not signed or included provenance with any releases.",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#signed-releases"
          },
          {
            "name": "Token-Permissions",
            "score": 0,
            "reason": "detected GitHub workflow tokens with excessive permissions",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#token-permissions"
          },
          {
            "name": "Vulnerabilities",
            "score": 2,
            "reason": "8 existing vulnerabilities detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#vulnerabilities"
          }
        ],
        "commit": "dd83b4587c778dde52d8bee7c615801f2d08bcd8",
        "ran_at": "2026-07-30T23:50:46Z",
        "aggregate_score": 6.1,
        "scorecard_version": "v5.5.0"
      },
      "has_codeql_workflow": false,
      "has_security_policy": true,
      "has_dependabot_config": true
    },
    "contribution_flow": {
      "collected": true,
      "ci_last_run_at": "2026-07-30T18:23:33Z",
      "oldest_open_prs": [
        {
          "number": 104,
          "created_at": "2026-05-28T20:21:35Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 105,
          "created_at": "2026-05-28T20:21:46Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 112,
          "created_at": "2026-07-01T18:26:04Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 113,
          "created_at": "2026-07-01T18:26:07Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 114,
          "created_at": "2026-07-01T18:26:17Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 115,
          "created_at": "2026-07-09T18:23:32Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 116,
          "created_at": "2026-07-16T18:23:27Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 117,
          "created_at": "2026-07-23T18:23:35Z",
          "last_comment_at": null,
          "last_comment_author": null
        }
      ],
      "last_merged_pr_at": "2026-07-02T23:52:51Z",
      "ci_last_conclusion": "SUCCESS",
      "oldest_open_issues": [
        {
          "number": 118,
          "created_at": "2026-07-27T07:01:34Z",
          "last_comment_at": null,
          "last_comment_author": null
        }
      ]
    }
  },
  "config": {
    "disabled_metrics": [],
    "disabled_categories": [],
    "disabled_components": {}
  },
  "source": {
    "url": "https://github.com/ocean/ecto_libsql",
    "host": "github.com",
    "name": "ecto_libsql",
    "owner": "ocean"
  },
  "metrics": {
    "overall": {
      "key": "overall",
      "band": "good",
      "name": "Overall health",
      "note": "The weighted overall 65 is calibrated to 75 on the published index scale (record calibration 2026-08-02).",
      "notes": [
        {
          "code": "overall_calibration",
          "params": {
            "raw": 65,
            "calibrated": 75,
            "calibration": "2026-08-02"
          }
        }
      ],
      "value": 75,
      "inputs": {
        "security": 69,
        "vitality": 86,
        "community": 40,
        "governance": 61,
        "calibration": "2026-08-02",
        "engineering": 65,
        "ai_readiness": 65,
        "weighted_overall_raw": 65
      },
      "components": []
    },
    "categories": [
      {
        "key": "vitality",
        "band": "excellent",
        "name": "Vitality",
        "value": 86,
        "weight": 0.21,
        "metrics": [
          {
            "key": "development_activity",
            "band": "excellent",
            "name": "Development activity",
            "note": null,
            "notes": [],
            "value": 84,
            "inputs": {
              "commits_last_year": 680,
              "human_commit_share": 0.89,
              "days_since_last_push": 1,
              "active_weeks_last_year": 29
            },
            "components": [
              {
                "key": "push_recency",
                "name": "Push recency",
                "detail": "last push 1 days ago",
                "points": 36,
                "status": "met",
                "details": [
                  {
                    "code": "push_recency",
                    "params": {
                      "days": 1
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "commit_cadence",
                "name": "Commit cadence",
                "detail": "29/52 weeks with commits",
                "points": 20.1,
                "status": "partial",
                "details": [
                  {
                    "code": "commit_cadence_weeks",
                    "params": {
                      "weeks": 29
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "commit_volume",
                "name": "Commit volume",
                "detail": "680 commits in the last year",
                "points": 18,
                "status": "met",
                "details": [
                  {
                    "code": "commits_last_year",
                    "params": {
                      "count": 680
                    }
                  }
                ],
                "max_points": 18
              },
              {
                "key": "openssf_scorecard_maintained",
                "name": "OpenSSF Scorecard: Maintained",
                "detail": "30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10",
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "release_discipline",
            "band": "excellent",
            "name": "Release discipline",
            "note": null,
            "notes": [],
            "value": 90,
            "inputs": {
              "releases_count": 14,
              "latest_release_tag": "0.9.1",
              "releases_from_tags": false,
              "days_since_latest_release": 79,
              "mean_days_between_releases": 16.4
            },
            "components": [
              {
                "key": "ships_releases",
                "name": "Ships releases",
                "detail": "14 releases published",
                "points": 27,
                "status": "met",
                "details": [
                  {
                    "code": "releases_published",
                    "params": {
                      "count": 14
                    }
                  }
                ],
                "max_points": 27
              },
              {
                "key": "release_recency",
                "name": "Release recency",
                "detail": "latest release 79 days ago",
                "points": 36,
                "status": "met",
                "details": [
                  {
                    "code": "release_recency",
                    "params": {
                      "days": 79
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "release_cadence",
                "name": "Release cadence",
                "detail": "a release every ~16.4 days",
                "points": 27,
                "status": "met",
                "details": [
                  {
                    "code": "release_cadence",
                    "params": {
                      "gap": 16.4
                    }
                  }
                ],
                "max_points": 27
              },
              {
                "key": "openssf_scorecard_signed_releases",
                "name": "OpenSSF Scorecard: Signed-Releases",
                "detail": "Project has not signed or included provenance with any releases.",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "abandonment",
            "band": "exceptional",
            "name": "Abandonment",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "cap": null,
              "state": "maintained",
              "guards": [],
              "signals": [],
              "red_flag": false,
              "multiplier_pct": 100,
              "declared_reason": null,
              "unverified_reason": null,
              "unanswered_open_prs": null,
              "unanswered_open_issues": null,
              "days_since_last_merged_pr": null,
              "days_since_last_human_commit": 32,
              "days_since_last_human_commit_is_floor": false
            },
            "components": [
              {
                "key": "project_is_still_maintained",
                "name": "Project is still maintained",
                "detail": "last human commit 32 days ago",
                "points": 100,
                "status": "met",
                "details": [
                  {
                    "code": "abandonment_maintained",
                    "params": {
                      "days": 32
                    }
                  }
                ],
                "max_points": 100
              }
            ]
          }
        ],
        "description": "Is the project alive — is code being written and are releases shipping?"
      },
      {
        "key": "community",
        "band": "weak",
        "name": "Community & Adoption",
        "value": 40,
        "weight": 0.17,
        "metrics": [
          {
            "key": "popularity",
            "band": "at_risk",
            "name": "Popularity & adoption",
            "note": null,
            "notes": [],
            "value": 30,
            "inputs": {
              "forks": 5,
              "stars": 38,
              "watchers": 1,
              "growth_state": "unverified",
              "growth_factor_pct": 100,
              "growth_unverified_reason": "no_history"
            },
            "components": [
              {
                "key": "stars",
                "name": "Stars",
                "detail": "38 stars",
                "points": 25.4,
                "status": "partial",
                "details": [
                  {
                    "code": "stars",
                    "params": {
                      "count": 38
                    }
                  }
                ],
                "max_points": 60
              },
              {
                "key": "forks",
                "name": "Forks",
                "detail": "5 forks",
                "points": 5,
                "status": "partial",
                "details": [
                  {
                    "code": "forks",
                    "params": {
                      "count": 5
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "watchers",
                "name": "Watchers",
                "detail": "1 watchers",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "watchers",
                    "params": {
                      "count": 1
                    }
                  }
                ],
                "max_points": 15
              }
            ]
          },
          {
            "key": "community_health",
            "band": "moderate",
            "name": "Community health",
            "note": null,
            "notes": [],
            "value": 50,
            "inputs": {
              "has_readme": true,
              "has_license": true,
              "readme_badges": null,
              "has_contributing": false,
              "has_issue_template": false,
              "has_code_of_conduct": false,
              "readme_badge_services": [],
              "has_pull_request_template": false
            },
            "components": [
              {
                "key": "readme",
                "name": "README",
                "detail": null,
                "points": 22.5,
                "status": "met",
                "details": [],
                "max_points": 22.5
              },
              {
                "key": "license",
                "name": "License",
                "detail": "recognized license (Apache-2.0)",
                "points": 22.5,
                "status": "met",
                "details": [
                  {
                    "code": "license_standard",
                    "params": {}
                  },
                  {
                    "code": "license_spdx",
                    "params": {
                      "spdx": "Apache-2.0"
                    }
                  }
                ],
                "max_points": 22.5
              },
              {
                "key": "contributing_guide",
                "name": "CONTRIBUTING guide",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 18
              },
              {
                "key": "code_of_conduct",
                "name": "Code of conduct",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 13.5
              },
              {
                "key": "issue_template",
                "name": "Issue template",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.2
              },
              {
                "key": "pr_template",
                "name": "PR template",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 6.3
              }
            ]
          },
          {
            "key": "ecosystem_adoption",
            "band": "weak",
            "name": "Ecosystem adoption (downloads)",
            "note": "Excluded from scoring (no data or not applicable): Registry dependents. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "registry_dependents"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 42,
            "inputs": {
              "packages": [
                "ecto_libsql"
              ],
              "dependents": null,
              "ecosystems": "hex",
              "total_downloads": 2421,
              "monthly_downloads": 306
            },
            "components": [
              {
                "key": "monthly_downloads",
                "name": "Monthly downloads",
                "detail": "306 downloads/month across hex",
                "points": 33.2,
                "status": "partial",
                "details": [
                  {
                    "code": "downloads_monthly",
                    "params": {
                      "count": 306,
                      "ecosystems": "hex"
                    }
                  }
                ],
                "max_points": 80
              },
              {
                "key": "registry_dependents",
                "name": "Registry dependents",
                "detail": "not reported by this ecosystem",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "not_reported_by_this_ecosystem",
                    "params": {}
                  }
                ],
                "max_points": 20
              }
            ]
          }
        ],
        "description": "Does the project have users, downloads, attention, and a welcoming setup for contributors?"
      },
      {
        "key": "governance",
        "band": "moderate",
        "name": "Sustainability & Governance",
        "value": 61,
        "weight": 0.23,
        "metrics": [
          {
            "key": "maintainer_resilience",
            "band": "at_risk",
            "name": "Maintainer resilience (bus factor)",
            "note": null,
            "notes": [],
            "value": 26,
            "inputs": {
              "bus_factor": 1,
              "contributors_sampled": 6,
              "top_contributor_share": 0.886
            },
            "components": [
              {
                "key": "bus_factor",
                "name": "Bus factor",
                "detail": "1 contributor(s) cover half of all commits",
                "points": 9,
                "status": "partial",
                "details": [
                  {
                    "code": "bus_factor",
                    "params": {
                      "count": 1
                    }
                  }
                ],
                "max_points": 54
              },
              {
                "key": "commit_distribution",
                "name": "Commit distribution",
                "detail": "top contributor authored 89% of commits",
                "points": 2.6,
                "status": "partial",
                "details": [
                  {
                    "code": "top_contributor_share",
                    "params": {
                      "share": 89
                    }
                  }
                ],
                "max_points": 22.5
              },
              {
                "key": "contributor_breadth",
                "name": "Contributor breadth",
                "detail": "6 contributors",
                "points": 8.1,
                "status": "partial",
                "details": [
                  {
                    "code": "contributors_sampled",
                    "params": {
                      "count": 6
                    }
                  }
                ],
                "max_points": 13.5
              },
              {
                "key": "openssf_scorecard_contributors",
                "name": "OpenSSF Scorecard: Contributors",
                "detail": "project has 2 contributing companies or organizations -- score normalized to 6",
                "points": 6,
                "status": "partial",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "responsiveness",
            "band": "good",
            "name": "Issue & PR responsiveness",
            "note": "Excluded from scoring (no data or not applicable): Newcomer PR acceptance. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "newcomer_pr_acceptance"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 73,
            "inputs": {
              "merged_prs": 90,
              "open_issues": 1,
              "closed_issues": 6,
              "prs_merged_7d": null,
              "prs_decided_7d": null,
              "prs_merged_30d": null,
              "prs_decided_30d": null,
              "issue_closed_ratio": 0.857,
              "closed_unmerged_prs": 13,
              "first_time_authors_30d": null,
              "first_time_prs_merged_30d": null,
              "first_time_prs_decided_30d": null
            },
            "components": [
              {
                "key": "issue_resolution",
                "name": "Issue resolution",
                "detail": "86% of issues closed",
                "points": 36,
                "status": "partial",
                "details": [
                  {
                    "code": "issues_closed_share",
                    "params": {
                      "share": 86
                    }
                  }
                ],
                "max_points": 42
              },
              {
                "key": "pr_acceptance",
                "name": "PR acceptance",
                "detail": "90/103 decided PRs merged",
                "points": 26.2,
                "status": "partial",
                "details": [
                  {
                    "code": "decided_prs_merged",
                    "params": {
                      "merged": 90,
                      "decided": 103
                    }
                  }
                ],
                "max_points": 30
              },
              {
                "key": "newcomer_pr_acceptance",
                "name": "Newcomer PR acceptance",
                "detail": "no first-time contributor's PR decided in 30d",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_newcomer_prs",
                    "params": {
                      "days": 30
                    }
                  }
                ],
                "max_points": 13
              },
              {
                "key": "openssf_scorecard_code_review",
                "name": "OpenSSF Scorecard: Code-Review",
                "detail": "Found 1/6 approved changesets -- score normalized to 1",
                "points": 1.5,
                "status": "partial",
                "details": [],
                "max_points": 15
              }
            ]
          },
          {
            "key": "stewardship",
            "band": "moderate",
            "name": "Ownership & stewardship",
            "note": "Excluded from scoring (no data or not applicable): Verified domain. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "verified_domain"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 60,
            "inputs": {
              "followers": 68,
              "owner_type": "User",
              "is_verified": null,
              "owner_login": "ocean",
              "public_repos": 98,
              "account_age_days": 6692
            },
            "components": [
              {
                "key": "ownership_backing",
                "name": "Ownership backing",
                "detail": "personal (user) account",
                "points": 10,
                "status": "partial",
                "details": [
                  {
                    "code": "owner_personal",
                    "params": {}
                  }
                ],
                "max_points": 30
              },
              {
                "key": "verified_domain",
                "name": "Verified domain",
                "detail": "not applicable to user accounts",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "not_applicable_to_user_accounts",
                    "params": {}
                  }
                ],
                "max_points": 20
              },
              {
                "key": "owner_reach",
                "name": "Owner reach",
                "detail": "68 followers of ocean",
                "points": 13.2,
                "status": "partial",
                "details": [
                  {
                    "code": "owner_followers",
                    "params": {
                      "count": 68,
                      "login": "ocean"
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "track_record",
                "name": "Track record",
                "detail": "98 public repos, account ~18 yr old",
                "points": 25,
                "status": "met",
                "details": [
                  {
                    "code": "public_repos",
                    "params": {
                      "count": 98
                    }
                  },
                  {
                    "code": "account_age_years",
                    "params": {
                      "years": 18
                    }
                  }
                ],
                "max_points": 25
              }
            ]
          },
          {
            "key": "package_maintenance",
            "band": "exceptional",
            "name": "Package maintenance",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "packages": [
                "ecto_libsql"
              ],
              "ecosystems": "hex",
              "any_deprecated": false,
              "min_days_since_publish": 79
            },
            "components": [
              {
                "key": "published_resolvable",
                "name": "Published & resolvable",
                "detail": "1 package(s) on hex",
                "points": 25,
                "status": "met",
                "details": [
                  {
                    "code": "packages_published",
                    "params": {
                      "count": 1,
                      "ecosystems": "hex"
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "publish_recency",
                "name": "Publish recency",
                "detail": "latest publish 79 days ago",
                "points": 35,
                "status": "met",
                "details": [
                  {
                    "code": "publish_recency",
                    "params": {
                      "days": 79
                    }
                  }
                ],
                "max_points": 35
              },
              {
                "key": "version_history",
                "name": "Version history",
                "detail": "14 published versions",
                "points": 20,
                "status": "met",
                "details": [
                  {
                    "code": "published_versions",
                    "params": {
                      "count": 14
                    }
                  }
                ],
                "max_points": 20
              },
              {
                "key": "not_deprecated",
                "name": "Not deprecated",
                "detail": "active, not deprecated or yanked",
                "points": 20,
                "status": "met",
                "details": [
                  {
                    "code": "package_not_deprecated",
                    "params": {}
                  }
                ],
                "max_points": 20
              }
            ]
          }
        ],
        "description": "Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?"
      },
      {
        "key": "engineering",
        "band": "good",
        "name": "Engineering Quality",
        "value": 65,
        "weight": 0.19,
        "metrics": [
          {
            "key": "engineering_practices",
            "band": "good",
            "name": "Engineering practices",
            "note": null,
            "notes": [],
            "value": 68,
            "inputs": {
              "has_ci": true,
              "has_tests": true,
              "has_editorconfig": false,
              "has_linter_config": false,
              "has_precommit_config": false
            },
            "components": [
              {
                "key": "ci_workflows",
                "name": "CI workflows",
                "detail": "3 workflow(s)",
                "points": 24,
                "status": "met",
                "details": [
                  {
                    "code": "ci_workflows",
                    "params": {
                      "count": 3
                    }
                  }
                ],
                "max_points": 24
              },
              {
                "key": "tests_present",
                "name": "Tests present",
                "detail": null,
                "points": 24,
                "status": "met",
                "details": [],
                "max_points": 24
              },
              {
                "key": "linter_config",
                "name": "Linter config",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 16
              },
              {
                "key": "pre_commit_hooks",
                "name": "Pre-commit hooks",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 9.6
              },
              {
                "key": "editorconfig",
                "name": ".editorconfig",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 6.4
              },
              {
                "key": "openssf_scorecard_ci_tests",
                "name": "OpenSSF Scorecard: CI-Tests",
                "detail": "10 out of 10 merged PRs checked by a CI test -- score normalized to 10",
                "points": 20,
                "status": "met",
                "details": [],
                "max_points": 20
              }
            ]
          },
          {
            "key": "documentation",
            "band": "moderate",
            "name": "Documentation",
            "note": null,
            "notes": [],
            "value": 60,
            "inputs": {
              "topics": [
                "ecto",
                "ecto-adapter",
                "elixir-library",
                "libsql",
                "libsql-client",
                "turso",
                "turso-db"
              ],
              "has_wiki": true,
              "homepage": null,
              "has_readme": true,
              "has_docs_dir": false,
              "has_description": true
            },
            "components": [
              {
                "key": "readme",
                "name": "README",
                "detail": null,
                "points": 30,
                "status": "met",
                "details": [],
                "max_points": 30
              },
              {
                "key": "documentation_directory",
                "name": "Documentation directory",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 25
              },
              {
                "key": "documentation_homepage_site",
                "name": "Documentation / homepage site",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 15
              },
              {
                "key": "repository_description",
                "name": "Repository description",
                "detail": null,
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              },
              {
                "key": "topics",
                "name": "Topics",
                "detail": "7 topics",
                "points": 10,
                "status": "met",
                "details": [
                  {
                    "code": "topics_count",
                    "params": {
                      "count": 7
                    }
                  }
                ],
                "max_points": 10
              },
              {
                "key": "wiki",
                "name": "Wiki",
                "detail": null,
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              }
            ]
          }
        ],
        "description": "Are baseline engineering and documentation practices in place?"
      },
      {
        "key": "security",
        "band": "good",
        "name": "Security",
        "value": 69,
        "weight": 0.16,
        "metrics": [
          {
            "key": "security_posture",
            "band": "moderate",
            "name": "Security posture",
            "note": "Excluded from scoring (no data or not applicable): Packaging. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "packaging"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 61,
            "inputs": {
              "source": "openssf_scorecard",
              "checks_evaluated": 17,
              "scorecard_version": "v5.5.0",
              "checks_inconclusive": 1,
              "scorecard_aggregate": 6.1
            },
            "components": [
              {
                "key": "binary_artifacts",
                "name": "Binary-Artifacts",
                "detail": "no binaries found in the repo",
                "points": 7.5,
                "status": "met",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "branch_protection",
                "name": "Branch-Protection",
                "detail": "branch protection is not maximal on development and all release branches",
                "points": 2.2,
                "status": "partial",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "ci_tests",
                "name": "CI-Tests",
                "detail": "10 out of 10 merged PRs checked by a CI test -- score normalized to 10",
                "points": 2.5,
                "status": "met",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "cii_best_practices",
                "name": "CII-Best-Practices",
                "detail": "no effort to earn an OpenSSF best practices badge detected",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "code_review",
                "name": "Code-Review",
                "detail": "Found 1/6 approved changesets -- score normalized to 1",
                "points": 0.8,
                "status": "partial",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "contributors",
                "name": "Contributors",
                "detail": "project has 2 contributing companies or organizations -- score normalized to 6",
                "points": 1.5,
                "status": "partial",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "dangerous_workflow",
                "name": "Dangerous-Workflow",
                "detail": "no dangerous workflow patterns detected",
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              },
              {
                "key": "dependency_update_tool",
                "name": "Dependency-Update-Tool",
                "detail": "update tool detected",
                "points": 7.5,
                "status": "met",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "fuzzing",
                "name": "Fuzzing",
                "detail": "project is fuzzed",
                "points": 5,
                "status": "met",
                "details": [],
                "max_points": 5
              },
              {
                "key": "license",
                "name": "License",
                "detail": "license file detected",
                "points": 2.5,
                "status": "met",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "maintained",
                "name": "Maintained",
                "detail": "30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10",
                "points": 7.5,
                "status": "met",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "packaging",
                "name": "Packaging",
                "detail": "packaging workflow not detected",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 5
              },
              {
                "key": "pinned_dependencies",
                "name": "Pinned-Dependencies",
                "detail": "dependency not pinned by hash detected -- score normalized to 5",
                "points": 2.5,
                "status": "partial",
                "details": [],
                "max_points": 5
              },
              {
                "key": "sast",
                "name": "SAST",
                "detail": "SAST tool is run on all commits",
                "points": 5,
                "status": "met",
                "details": [],
                "max_points": 5
              },
              {
                "key": "security_policy",
                "name": "Security-Policy",
                "detail": "security policy file detected",
                "points": 5,
                "status": "met",
                "details": [],
                "max_points": 5
              },
              {
                "key": "signed_releases",
                "name": "Signed-Releases",
                "detail": "Project has not signed or included provenance with any releases.",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "token_permissions",
                "name": "Token-Permissions",
                "detail": "detected GitHub workflow tokens with excessive permissions",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "vulnerabilities",
                "name": "Vulnerabilities",
                "detail": "8 existing vulnerabilities detected",
                "points": 1.5,
                "status": "partial",
                "details": [],
                "max_points": 7.5
              }
            ]
          },
          {
            "key": "dependency_advisories",
            "band": "exceptional",
            "name": "Dependency advisories",
            "note": "Excluded from scoring (no data or not applicable): Indirect dependencies free of known advisories, No advisories left outstanding. Remaining weights renormalized. Matched 325 resolved dependencies against OSV; 6 could not be assessed (no resolved version, an unsupported ecosystem, or beyond the reported package list). This repository publishes no package the index resolves, so the repository dependency graph was assessed instead. That graph mixes development and test pins with shipped dependencies, so only the declared runtime dependencies are scored; transitive findings are reported as context and excluded from the score. Reachability is not analyzed.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "indirect_dependencies_free_of_known_advisories",
                    "no_advisories_left_outstanding"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              },
              {
                "code": "advisories_scope_repository",
                "params": {
                  "assessed": 325
                }
              },
              {
                "code": "advisories_unassessed",
                "params": {
                  "count": 6
                }
              },
              {
                "code": "advisories_repo_graph_caveat",
                "params": {}
              },
              {
                "code": "advisories_reachability",
                "params": {}
              }
            ],
            "value": 100,
            "inputs": {
              "source": "osv",
              "advisories": 12,
              "affected_packages": 5,
              "assessed_packages": 325,
              "unassessed_packages": 6,
              "affected_by_severity": "high 1, low 1, unknown 3",
              "direct_affected_packages": 0
            },
            "components": [
              {
                "key": "direct_dependencies_free_of_known_advisories",
                "name": "Direct dependencies free of known advisories",
                "detail": "no direct dependency carries a known advisory",
                "points": 35,
                "status": "met",
                "details": [
                  {
                    "code": "no_direct_advisories",
                    "params": {}
                  }
                ],
                "max_points": 35
              },
              {
                "key": "indirect_dependencies_free_of_known_advisories",
                "name": "Indirect dependencies free of known advisories",
                "detail": "transitive set not separable from development and test dependencies in this scope",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "advisories_scope_not_separable",
                    "params": {}
                  }
                ],
                "max_points": 25
              },
              {
                "key": "no_advisories_left_outstanding",
                "name": "No advisories left outstanding",
                "detail": "no advisory carries a publication date",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "advisories_no_publication_date",
                    "params": {}
                  }
                ],
                "max_points": 40
              }
            ]
          },
          {
            "key": "malicious_dependencies",
            "band": "exceptional",
            "name": "Malicious dependencies",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "source": "osv",
              "meaning": "reported as a malicious package by the OpenSSF corpus; the remedy is removal or moving off the compromised name, never an upgrade of the same artifact. Versions the registry has since pulled are listed but not scored",
              "packages": [],
              "red_flag": false,
              "assessed_packages": 325,
              "malicious_packages": 0,
              "direct_malicious_packages": 0,
              "withdrawn_malicious_packages": 0,
              "installable_malicious_packages": 0
            },
            "components": [
              {
                "key": "no_dependency_reported_as_a_malicious_package",
                "name": "No dependency reported as a malicious package",
                "detail": "no dependency is reported as a malicious package",
                "points": 100,
                "status": "met",
                "details": [
                  {
                    "code": "no_malicious_dependencies",
                    "params": {}
                  }
                ],
                "max_points": 100
              }
            ]
          },
          {
            "key": "high_risk_jurisdiction_exposure",
            "band": "exceptional",
            "name": "High-Risk Jurisdiction Exposure",
            "note": "Only high-confidence self-published location evidence affects this multiplier. Ambiguous matches are review-only; country evidence is not proof of nationality, citizenship, legal registration, malicious intent, or sanctions status.",
            "notes": [
              {
                "code": "jurisdiction_evidence_limits",
                "params": {}
              }
            ],
            "value": 100,
            "inputs": {
              "meaning": "self-published location evidence; not nationality or citizenship",
              "red_flag": false,
              "exposures": [],
              "policy_countries": [
                "Russia",
                "Iran",
                "North Korea"
              ],
              "commit_weight_rule": {
                "min_commits": 50,
                "min_commit_share": 0.1
              },
              "review_only_matches": 0,
              "below_threshold_exposures": [],
              "assessed_self_published_locations": 5
            },
            "components": [
              {
                "key": "policy_exposure_multiplier",
                "name": "Policy exposure multiplier",
                "detail": "no confirmed policy-scope location match",
                "points": 100,
                "status": "met",
                "details": [
                  {
                    "code": "jurisdiction_no_match",
                    "params": {}
                  }
                ],
                "max_points": 100
              }
            ]
          }
        ],
        "description": "Are visible security and supply-chain practices strong, with no malicious dependency and no unresolved high-risk jurisdiction exposure?"
      },
      {
        "key": "ai_readiness",
        "band": "good",
        "name": "AI Readiness",
        "value": 65,
        "weight": 0.04,
        "metrics": [
          {
            "key": "ai_agent_context",
            "band": "excellent",
            "name": "Agent context & guidance",
            "note": null,
            "notes": [],
            "value": 85,
            "inputs": {
              "has_llms_txt": false,
              "legible_history_share": 0.82,
              "agent_instruction_files": [
                "CLAUDE.md"
              ],
              "agent_instruction_max_bytes": 15037
            },
            "components": [
              {
                "key": "agent_instructions",
                "name": "Agent instructions",
                "detail": "CLAUDE.md",
                "points": 45,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "CLAUDE.md"
                    }
                  }
                ],
                "max_points": 45
              },
              {
                "key": "machine_readable_docs_llms_txt",
                "name": "Machine-readable docs (llms.txt)",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 15
              },
              {
                "key": "legible_commit_history",
                "name": "Legible commit history",
                "detail": "73 of 89 human commits state their intent (structured subject or explanatory body)",
                "points": 40,
                "status": "met",
                "details": [
                  {
                    "code": "legible_history",
                    "params": {
                      "legible": 73,
                      "sampled": 89
                    }
                  }
                ],
                "max_points": 40
              }
            ]
          },
          {
            "key": "ai_verify_loop",
            "band": "moderate",
            "name": "Verify loop (build / test / typecheck)",
            "note": null,
            "notes": [],
            "value": 63,
            "inputs": {
              "has_nix": false,
              "has_tests": true,
              "lockfiles": [
                "Cargo.lock",
                "mix.lock"
              ],
              "has_dockerfile": false,
              "typed_language": false,
              "bootstrap_files": [
                "mise.toml"
              ],
              "has_devcontainer": false,
              "has_linter_config": false,
              "typecheck_configs": [],
              "agent_commit_share": 0,
              "toolchain_manifests": [
                "Cargo.toml",
                "mix.exs",
                "native/ecto_libsql/Cargo.toml",
                "native/ecto_libsql/fuzz/Cargo.toml"
              ],
              "dependency_bot_commit_share": 0.11
            },
            "components": [
              {
                "key": "one_command_bootstrap",
                "name": "One-command bootstrap",
                "detail": "mise.toml",
                "points": 18,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "mise.toml"
                    }
                  }
                ],
                "max_points": 18
              },
              {
                "key": "automated_tests",
                "name": "Automated tests",
                "detail": null,
                "points": 22,
                "status": "met",
                "details": [],
                "max_points": 22
              },
              {
                "key": "lint_format_config",
                "name": "Lint / format config",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 11
              },
              {
                "key": "static_type_checking",
                "name": "Static type checking",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 11
              },
              {
                "key": "reproducible_environment",
                "name": "Reproducible environment",
                "detail": "lockfile",
                "points": 10,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "lockfile"
                    }
                  }
                ],
                "max_points": 10
              },
              {
                "key": "demonstrated_agent_practice",
                "name": "Demonstrated agent practice",
                "detail": "no agent-authored commits among the last 100",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "no_agent_authored_commits",
                    "params": {
                      "sampled": 100
                    }
                  }
                ],
                "max_points": 10
              },
              {
                "key": "automated_maintenance",
                "name": "Automated maintenance",
                "detail": "11 of the last 100 commits are automated dependency updates",
                "points": 8,
                "status": "met",
                "details": [
                  {
                    "code": "dependency_bot_commits",
                    "params": {
                      "count": 11,
                      "sampled": 100
                    }
                  }
                ],
                "max_points": 8
              },
              {
                "key": "openssf_scorecard_pinned_dependencies",
                "name": "OpenSSF Scorecard: Pinned-Dependencies",
                "detail": "dependency not pinned by hash detected -- score normalized to 5",
                "points": 5,
                "status": "partial",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "ai_code_legibility",
            "band": "moderate",
            "name": "Code legibility for models",
            "note": null,
            "notes": [],
            "value": 54,
            "inputs": {
              "primary_language": "Elixir",
              "largest_source_bytes": 75278,
              "source_files_sampled": 97,
              "oversized_source_files": 1
            },
            "components": [
              {
                "key": "type_checkable_code",
                "name": "Type-checkable code",
                "detail": "Elixir without a type-check config",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "no_typecheck_config_language",
                    "params": {
                      "language": "Elixir"
                    }
                  }
                ],
                "max_points": 45
              },
              {
                "key": "manageable_file_sizes",
                "name": "Manageable file sizes",
                "detail": "1/97 source files over 60KB",
                "points": 54.4,
                "status": "partial",
                "details": [
                  {
                    "code": "oversized_source_files",
                    "params": {
                      "kb": 60,
                      "sampled": 97,
                      "oversized": 1
                    }
                  }
                ],
                "max_points": 55
              }
            ]
          },
          {
            "key": "ai_interfaces",
            "band": "weak",
            "name": "Machine-readable interfaces",
            "note": null,
            "notes": [],
            "value": 40,
            "inputs": {
              "example_dirs": [
                "examples"
              ],
              "has_mcp_signal": false,
              "api_schema_files": []
            },
            "components": [
              {
                "key": "api_schema_openapi_graphql_proto",
                "name": "API schema (OpenAPI/GraphQL/proto)",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 40
              },
              {
                "key": "mcp_server",
                "name": "MCP server",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 20
              },
              {
                "key": "runnable_examples",
                "name": "Runnable examples",
                "detail": "examples",
                "points": 40,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "examples"
                    }
                  }
                ],
                "max_points": 40
              }
            ]
          }
        ],
        "description": "How well is the repo equipped to be developed and maintained with AI coding agents? Carries a deliberately small weight: agent tooling is a real maintenance signal, but its absence must never gate the top of the scale (calibration saturates at raw 91, so 100/100 remains reachable with AI Readiness at zero)."
      }
    ],
    "classification": {
      "top": [
        "library"
      ],
      "labels": [
        "library"
      ],
      "scores": {
        "library": 6
      },
      "primary": "library",
      "evidence": [
        {
          "tier": "distribution",
          "label": "library",
          "source": "registry:hex",
          "weight": 6
        }
      ],
      "artifacts": [],
      "confidence": "medium",
      "host_extension": false,
      "runs_as_process": false,
      "consumed_by_code": true
    },
    "metrics_version": "2.5.0"
  },
  "warnings": [
    "Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token"
  ],
  "report_type": "repository",
  "generated_at": "2026-07-30T23:51:01.356774Z",
  "schema_version": "0.27.0",
  "badge_url": "https://raw.githubusercontent.com/inspect-software/badges/main/v1/o/ocean/ecto_libsql.svg",
  "full_name": "ocean/ecto_libsql",
  "license_state": "standard",
  "license_spdx": "Apache-2.0"
}

Bewertungen sind Signale, keine Garantien. Sie spiegeln öffentlich sichtbare Praxis auf GitHub wider — kein Code-Audit und keine Sicherheitsgarantie.

Fehlende Daten werden ausgeschlossen und die Gewichte neu normiert, nie als null bewertet. Die Methodik ist versioniert und offen: Metriken v2.5.0, Schema v0.27.0 — vollständige Methodik · Metriken-Wiki.

Wie ein einzelnes Ergebnis im Gesamtregister steht: aggregierte StatistikenHex.