Öffentliches Register
Software-GesundheitsberichtSchema 0.27.0 · Metriken 1.13.0 · 2026-07-27 19:32 UTC

rocketsciencegg / distribution

The toolkit to pack, ship, store, and deliver container content

GoApache-2.0★ 0 Sterne⑂ 0 Forksseit Dez. 2025ForkAuf GitHub ansehen ↗

rocketsciencegg/distribution erreicht einen Gesundheitsindex von 22 von 100 und liegt damit im Bereich Kritisch. Am stärksten schneidet es bei AI Readiness (68/100) ab, am schwächsten bei Community & Adoption (12/100). Zuletzt vor 234 Tagen aktualisiert. 3 Mitwirkende tragen den Großteil der jüngsten Arbeit.

22
gesamt / 100
Kritisch

Software-Gesundheitsindex

Metriken werden auf einer Skala von 1–100 in gewichtete Kategorien gruppiert. Der Gesamtwert beginnt als ihr Mittel; sobald öffentliche Evidenz die Richtlinie für Hochrisikojurisdiktionen auslöst, wird die Bewertung angepasst und erhält die Obergrenze 49 (Gefährdet). AI Readiness liegt außerhalb.

22
Exzellent85-100Vorbildlich; erfüllt im Wesentlichen alle geprüften Kriterien
Gut70-84Gesund; geringfügige Lücken
Mittel50-69Akzeptabel mit deutlichen Lücken; Überprüfung empfohlen
Gefährdet30-49Erhebliche Schwächen; eine Übernahme erfordert Vorsicht
Kritisch1-29Schwerwiegende Probleme (aufgegeben, nur ein Maintainer, keine Hygiene)
VitalitätCommunity &VerbreitungNachhaltigkeit &GovernanceEngineering-QualitätSicherheitAI Readiness

Bewertungsprofil

Jede Achse ist eine Kategorie. Die Form zählt mehr als der Durchschnitt — ein gesundes Projekt füllt die gesamte Fläche, während ein Profil aus Spitzen und Kratern bedeutet, dass Stärke in einer Dimension Risiken in einer anderen verdeckt.

Abandonment Policy applies a 60% multiplier to weighted overall health and gives it a ceiling of 49.

Eigentümerschaft

Rocket Science GroupOrganisation
30 Follower24 öffentliche Reposseit Nov. 2021

Dieses Repository wird von einer Organisation getragen — geteilte, rechenschaftspflichtige Trägerschaft, die jeden einzelnen Maintainer überdauern kann.

Paket-Ökosysteme

RegistryPaketVersionDownloads / MonatVersionenZuletzt veröffentlicht
Gogithub.com/distribution/distribution/v3verweist auf ein anderes Repo — nicht bewertetv3.1.1-9vor 87 Tagen

Metriken nach Kategorie

Vitalität

Lebt das Projekt — wird Code geschrieben und werden Releases ausgeliefert?

15Kritisch · 22 % des Gesamtindex

Entwicklungsaktivität

4Kritisch
Wie die Bewertung erfolgt
3.6/36Push-Aktualität — letzter Push vor 234 Tagen
0/36Commit-Rhythmus — 0/52 Wochen mit Commits
0/18Commit-Volumen — 0 Commits im letzten Jahr
0/10OpenSSF Scorecard: Maintained — 0 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0
Verwendete Eingangsdaten
commits_last_year0
human_commit_share1
days_since_last_push234
active_weeks_last_year0

Release-Disziplin

32Gefährdet
Wie die Bewertung erfolgt
16.2/27Liefert Releases aus — 49 Versions-Tags (keine GitHub-Releases)
0/36Release-Aktualität — letztes Release vor 1.602 Tagen
12.6/27Release-Rhythmus — ein Release etwa alle 201,4 Tage
0/10OpenSSF Scorecard: Signed-Releases — keine Daten
Verwendete Eingangsdaten
releases_count49
latest_release_tagv2.8.1
releases_from_tagsja
days_since_latest_release1.602
mean_days_between_releases201,4
Von der Bewertung ausgeschlossen (keine Daten oder nicht anwendbar): OpenSSF Scorecard: Signed-Releases. Die verbleibenden Gewichte wurden renormalisiert.

Community & Verbreitung

Hat das Projekt Nutzer, Downloads, Aufmerksamkeit und ein einladendes Umfeld für Beitragende?

12Kritisch · 18 % des Gesamtindex

Popularität & Verbreitung

1Kritisch
Wie die Bewertung erfolgt
0/60Stars — 0 Stars
0/25Forks — 0 Forks
0/15Watcher — 0 Watcher
Verwendete Eingangsdaten
forks0
stars0
watchers0
growth_stateunverified
growth_factor_pct100
growth_unverified_reasonno_history

Community-Gesundheit

25Kritisch
Wie die Bewertung erfolgt
0/22.5README
22.5/22.5Lizenz — anerkannte Lizenz (Apache-2.0)
0/18CONTRIBUTING-Leitfaden
0/13.5Verhaltenskodex
0/7.2Issue-Vorlage
0/6.3PR-Vorlage
Verwendete Eingangsdaten
has_readmenein
has_licensenein
has_contributingnein
has_issue_templatenein
has_code_of_conductnein
has_pull_request_templatenein

Nachhaltigkeit & Governance

Überdauert das Projekt die Menschen, die es tragen — Bus-Faktor, Reaktionsfähigkeit, Trägerschaft und Paketpflege?

47Gefährdet · 24 % des Gesamtindex

Maintainer-Resilienz (Bus-Faktor)

75Gut
Wie die Bewertung erfolgt
36/54Bus-Faktor — 3 Beitragende decken die Hälfte aller Commits ab
15.5/22.5Commit-Verteilung — wichtigste beitragende Person verfasste 31 % der Commits
13.5/13.5Breite der Beitragenden — 100 Beitragende
10/10OpenSSF Scorecard: Contributors — project has 59 contributing companies or organizations
Verwendete Eingangsdaten
bus_factor3
contributors_sampled100
top_contributor_share0,31

Reaktionsfähigkeit bei Issues & PRs

1Kritisch
Wie die Bewertung erfolgt
0/46.8Issue-Lösungsquote — keine Issues oder keine Daten
0/38.3PR-Annahme — keine entschiedenen Pull Requests oder keine Daten
0/15OpenSSF Scorecard: Code-Review — Found 0/30 approved changesets -- score normalized to 0
Verwendete Eingangsdaten
merged_prs0
open_issues0
closed_issues0
issue_closed_ratio—
closed_unmerged_prs0
Von der Bewertung ausgeschlossen (keine Daten oder nicht anwendbar): Issue-Lösungsquote, PR-Annahme. Die verbleibenden Gewichte wurden renormalisiert.

Eigentümerschaft & Trägerschaft

60Mittel
Wie die Bewertung erfolgt
30/30Organisatorische Trägerschaft — im Besitz einer Organisation
0/20Verifizierte Domain
10.7/25Reichweite des Inhabers — 30 Follower von rocketsciencegg
19.6/25Kontohistorie — 24 öffentliche Repos, Kontoalter ca. 4 Jahre
Verwendete Eingangsdaten
followers30
owner_typeOrganization
is_verified—
owner_loginrocketsciencegg
public_repos24
account_age_days1.713

Engineering-Qualität

Sind grundlegende Engineering- und Dokumentationspraktiken vorhanden?

62Mittel · 20 % des Gesamtindex

Engineering-Praktiken

80Gut
Wie die Bewertung erfolgt
24/24CI-Workflows — 7 Workflow(s)
24/24Tests vorhanden
16/16Linter-Konfiguration — .golangci.yml
0/9.6Pre-Commit-Hooks
0/6.4.editorconfig
0/20OpenSSF Scorecard: CI-Tests — keine Daten
Verwendete Eingangsdaten
has_cija
has_testsja
has_editorconfignein
has_linter_configja
has_precommit_confignein
Von der Bewertung ausgeschlossen (keine Daten oder nicht anwendbar): OpenSSF Scorecard: CI-Tests. Die verbleibenden Gewichte wurden renormalisiert.

Dokumentation

35Gefährdet
Wie die Bewertung erfolgt
0/30README
25/25Dokumentationsverzeichnis
0/15Dokumentations-/Homepage-Site
0/10Repository-Beschreibung
0/10Topics
10/10Wiki
Verwendete Eingangsdaten
topics—
has_wikija
homepage—
has_readmenein
has_docs_dirja
has_descriptionnein

Sicherheit

Sind die sichtbaren Sicherheits- und Lieferkettenpraktiken belastbar, ohne ungeklärte Exposition gegenüber Hochrisikojurisdiktionen?

48Gefährdet · 16 % des Gesamtindex

Sicherheitslage

51Mittel
Wie die Bewertung erfolgt
7.5/7.5Binary-Artifacts — no binaries found in the repo
0.8/7.5Branch-Protection — branch protection is not maximal on development and all release branches
0/2.5CI-Tests — keine Daten
0/2.5CII-Best-Practices — no effort to earn an OpenSSF best practices badge detected
0/7.5Code-Review — Found 0/30 approved changesets -- score normalized to 0
2.5/2.5Contributors — project has 59 contributing companies or organizations
10/10Dangerous-Workflow — no dangerous workflow patterns detected
0/7.5Dependency-Update-Tool — no update tool detected
5/5Fuzzing — project is fuzzed
2.5/2.5Lizenz — license file detected
0/7.5Maintained — 0 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0
0/5Packaging — keine Daten
0.5/5Pinned-Dependencies — dependency not pinned by hash detected -- score normalized to 1
5/5SAST — SAST tool detected: CodeQL
5/5Security-Policy — security policy file detected
0/7.5Signed-Releases — keine Daten
7.5/7.5Token-Permissions — GitHub workflow tokens follow principle of least privilege
0/7.5Vulnerabilities — 55 existing vulnerabilities detected
Verwendete Eingangsdaten
sourceopenssf_scorecard
checks_evaluated15
scorecard_versionv5.5.0
checks_inconclusive3
scorecard_aggregate5,1
Von der Bewertung ausgeschlossen (keine Daten oder nicht anwendbar): ci_tests, packaging, signed_releases. Die verbleibenden Gewichte wurden renormalisiert.

Abhängigkeits-Advisories

37Gefährdet
Wie die Bewertung erfolgt
4.6/35Direkte Abhängigkeiten ohne bekannte Advisories — 5 betroffen: golang.org/x/crypto 0.7.0 (critical 10.0), github.com/sirupsen/logrus 1.8.1 (high 7.5), golang.org/x/oauth2 0.6.0 (high 7.5), +2 weitere
0/25Indirekte Abhängigkeiten ohne bekannte Advisories — transitive Menge in diesem Bereich nicht von Entwicklungs- und Test-Abhängigkeiten trennbar
23.5/40Keine offenen Advisories — 4 Paket(e) mit Advisory seit über 90 Tagen unbehandelt; ältestes vor 1.626 Tagen veröffentlicht
Verwendete Eingangsdaten
sourceosv
advisories84
affected_packages12
assessed_packages64
unassessed_packages0
affected_by_severitycritical 2, high 5, moderate 1, unknown 4
direct_affected_packages5
Von der Bewertung ausgeschlossen (keine Daten oder nicht anwendbar): Indirekte Abhängigkeiten ohne bekannte Advisories. Die verbleibenden Gewichte wurden renormalisiert. 64 aufgelöste Abhängigkeiten wurden mit OSV abgeglichen. Dieses Repository veröffentlicht kein Paket, das der Index auflöst; bewertet wurde daher der Abhängigkeitsgraph des Repositorys. Dieser Graph vermischt Entwicklungs- und Test-Pins mit ausgelieferten Abhängigkeiten, daher werden nur die deklarierten Laufzeit-Abhängigkeiten bewertet; transitive Befunde werden als Kontext ausgewiesen und fließen nicht in die Bewertung ein. Erreichbarkeit wird nicht analysiert.

AI Readiness

Wie gut ist das Repository dafür ausgestattet, mit KI-Coding-Agenten entwickelt und gepflegt zu werden? Ein unabhängiges, experimentelles Badge — Gewicht 0,0, es wird eigenständig ausgewiesen und verändert den Gesamt-Gesundheitswert nicht.

68Mittel · 0 % des Gesamtindex

AI-Agentenkontext & Leitlinien

40Gefährdet
Wie die Bewertung erfolgt
0/45Agentenanweisungen — keine CLAUDE.md / AGENTS.md / Editor-Regeln
0/15Maschinenlesbare Doku (llms.txt)
40/40Lesbare Commit-Historie — 77 von 100 menschlichen Commits benennen ihre Absicht (strukturierter Betreff oder erläuternder Text)
Verwendete Eingangsdaten
has_llms_txtnein
legible_history_share0,77
agent_instruction_files—
agent_instruction_max_bytes—

AI-Verify-Loop (Build / Test / Typprüfung)

73Gut
Wie die Bewertung erfolgt
18/18Bootstrap mit einem Befehl — Makefile, vendor/github.com/felixge/httpsnoop/Makefile, vendor/github.com/jmespath/go-jmespath/Makefile, vendor/github.com/matttproud/golang_protobuf_extensions/pbutil/Makefile, vendor/github.com/prometheus/procfs/Makefile, vendor/github.com/spf13/cobra/Makefile, vendor/go.opencensus.io/Makefile, vendor/golang.org/x/net/http2/Makefile, vendor/google.golang.org/grpc/Makefile
22/22Automatisierte Tests
11/11Lint-/Format-Konfiguration — .golangci.yml
11/11Statische Typprüfung — Go (statisch typisiert)
10/10Reproduzierbare Umgebung — Dockerfile, lockfile
0/10Belegte Agentenpraxis — keine von Agenten verfassten Commits unter den letzten 100
0/8Automatisierte Wartung — keine automatisierten Abhängigkeits-Updates beobachtet
1/10OpenSSF Scorecard: Pinned-Dependencies — dependency not pinned by hash detected -- score normalized to 1
Verwendete Eingangsdaten
has_nixnein
has_testsja
lockfilesgo.sum
has_dockerfileja
typed_languageja
bootstrap_filesMakefile, vendor/github.com/felixge/httpsnoop/Makefile, vendor/github.com/jmespath/go-jmespath/Makefile, vendor/github.com/matttproud/golang_protobuf_extensions/pbutil/Makefile, vendor/github.com/prometheus/procfs/Makefile, vendor/github.com/spf13/cobra/Makefile, vendor/go.opencensus.io/Makefile, vendor/golang.org/x/net/http2/Makefile, vendor/google.golang.org/grpc/Makefile
has_devcontainernein
has_linter_configja
typecheck_configs—
agent_commit_share0
toolchain_manifestsgo.mod
dependency_bot_commit_share0

AI-Code-Lesbarkeit für Modelle

100Exzellent
Wie die Bewertung erfolgt
45/45Typprüfbarer Code — Go (statisch typisiert)
54.8/55Handhabbare Dateigrößen — 1/241 Quelldateien über 60 KB
Verwendete Eingangsdaten
primary_languageGo
largest_source_bytes85.762
source_files_sampled241
oversized_source_files1

Maschinenlesbare AI-Schnittstellen

80Gut
Wie die Bewertung erfolgt
40/40API-Schema (OpenAPI/GraphQL/proto) — vendor/github.com/googleapis/gax-go/v2/apierror/internal/proto/custom_error.proto, vendor/github.com/googleapis/gax-go/v2/apierror/internal/proto/error.proto, vendor/google.golang.org/appengine/internal/app_identity/app_identity_service.proto, vendor/google.golang.org/appengine/internal/base/api_base.proto, vendor/google.golang.org/appengine/internal/datastore/datastore_v3.proto, vendor/google.golang.org/appengine/internal/log/log_service.proto, vendor/google.golang.org/appengine/internal/modules/modules_service.proto, vendor/google.golang.org/appengine/internal/remote_api/remote_api.proto, vendor/google.golang.org/appengine/internal/socket/socket_service.proto, vendor/google.golang.org/appengine/internal/urlfetch/urlfetch_service.proto
0/20MCP-Server
40/40Lauffähige Beispiele — recipes
Verwendete Eingangsdaten
example_dirsrecipes
has_mcp_signalnein
api_schema_filesvendor/github.com/googleapis/gax-go/v2/apierror/internal/proto/custom_error.proto, vendor/github.com/googleapis/gax-go/v2/apierror/internal/proto/error.proto, vendor/google.golang.org/appengine/internal/app_identity/app_identity_service.proto, vendor/google.golang.org/appengine/internal/base/api_base.proto, vendor/google.golang.org/appengine/internal/datastore/datastore_v3.proto, vendor/google.golang.org/appengine/internal/log/log_service.proto, vendor/google.golang.org/appengine/internal/modules/modules_service.proto, vendor/google.golang.org/appengine/internal/remote_api/remote_api.proto, vendor/google.golang.org/appengine/internal/socket/socket_service.proto, vendor/google.golang.org/appengine/internal/urlfetch/urlfetch_service.proto

Eckdaten

0GitHub-Sterne
100Mitwirkende
0Commits, letzte 12 Monate
234Tage seit letztem Push
49Releases
3Bus-Faktor
0offene Issues
GoPaket-Ökosysteme

Warnungen zur Datenerhebung

  • Community profile unavailable
  • go package 'github.com/distribution/distribution/v3' points at a different repository (https://github.com/distribution/distribution); excluded from ecosystem scoring

Weitere Details

OpenSSF Scorecard 5.1 / 10
5.1Gesamtwert

Unabhängige, werkzeugneutrale Sicherheitsbewertung durch das quelloffene OpenSSF Scorecard. Jede Prüfung honoriert eine Sicherheits-Praxis, nicht das Werkzeug eines bestimmten Anbieters. Prüfungen, die Scorecard nicht ermitteln konnte, sind mit k. A. markiert und vom Sicherheitswert ausgeschlossen (nie als null gezählt).Scorecard v5.5.0 · 2026-07-27 19:32 UTC

10Binary-Artifactsno binaries found in the repo
1Branch-Protectionbranch protection is not maximal on development and all release branches
k. A.CI-Testsno pull request found
0CII-Best-Practicesno effort to earn an OpenSSF best practices badge detected
0Code-ReviewFound 0/30 approved changesets -- score normalized to 0
10Contributorsproject has 59 contributing companies or organizations
10Dangerous-Workflowno dangerous workflow patterns detected
0Dependency-Update-Toolno update tool detected
10Fuzzingproject is fuzzed
10Licenselicense file detected
0Maintained0 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0
k. A.Packagingpackaging workflow not detected
1Pinned-Dependenciesdependency not pinned by hash detected -- score normalized to 1
10SASTSAST tool detected: CodeQL
10Security-Policysecurity policy file detected
k. A.Signed-Releasesno releases found
10Token-PermissionsGitHub workflow tokens follow principle of least privilege
0Vulnerabilities55 existing vulnerabilities detected
Direkte Abhängigkeiten 25
RegistryPaketVersionsvorgabeManifest
Gocloud.google.com/go/storagev1.30.1go.mod
Gogithub.com/AdaLogics/go-fuzz-headersv0.0.0-20221103172237-443f56ff4ba8go.mod
Gogithub.com/Azure/azure-sdk-for-go/sdk/azcorev1.6.0go.mod
Gogithub.com/Azure/azure-sdk-for-go/sdk/azidentityv1.3.0go.mod
Gogithub.com/Azure/azure-sdk-for-go/sdk/storage/azblobv1.0.0go.mod
Gogithub.com/aws/aws-sdk-gov1.44.325go.mod
Gogithub.com/bshuster-repo/logrus-logstash-hookv1.0.0go.mod
Gogithub.com/docker/go-eventsv0.0.0-20190806004212-e31b211e4f1cgo.mod
Gogithub.com/docker/go-metricsv0.0.1go.mod
Gogithub.com/docker/libtrustv0.0.0-20150114040149-fa567046d9b1go.mod
Gogithub.com/gomodule/redigov1.8.2go.mod
Gogithub.com/gorilla/handlersv1.5.1go.mod
Gogithub.com/gorilla/muxv1.8.0go.mod
Gogithub.com/hashicorp/golang-lru/arc/v2v2.0.5go.mod
Gogithub.com/klauspost/compressv1.16.5go.mod
Gogithub.com/mitchellh/mapstructurev1.1.2go.mod
Gogithub.com/opencontainers/go-digestv1.0.0go.mod
Gogithub.com/opencontainers/image-specv1.0.2go.mod
Gogithub.com/sirupsen/logrusv1.8.1go.mod
Gogithub.com/spf13/cobrav1.6.1go.mod
Gogolang.org/x/cryptov0.7.0go.mod
Gogolang.org/x/oauth2v0.6.0go.mod
Gogoogle.golang.org/apiv0.114.0go.mod
Gogopkg.in/check.v1v1.0.0-20201130134442-10cb98267c6cgo.mod
Gogopkg.in/yaml.v2v2.4.0go.mod
Alle Abhängigkeiten 64

Vollständig aufgelöster Abhängigkeitssatz aus dem GitHub-Abhängigkeitsgraphen: 25 direkte und 39 indirekte (transitive) Pakete. Die transitive Hülle ist vollständig, wenn das Repository eine Lockfile eincheckt.

RegistryPaketVersionBeziehung
Gocloud.google.com/go/storage1.30.1direkt
Gogithub.com/adalogics/go-fuzz-headers0.0.0-20221103172237-443f56ff4ba8direkt
Gogithub.com/aws/aws-sdk-go1.44.325direkt
Gogithub.com/azure/azure-sdk-for-go/sdk/azcore1.6.0direkt
Gogithub.com/azure/azure-sdk-for-go/sdk/azidentity1.3.0direkt
Gogithub.com/azure/azure-sdk-for-go/sdk/storage/azblob1.0.0direkt
Gogithub.com/bshuster-repo/logrus-logstash-hook1.0.0direkt
Gogithub.com/docker/go-events0.0.0-20190806004212-e31b211e4f1cdirekt
Gogithub.com/docker/go-metrics0.0.1direkt
Gogithub.com/docker/libtrust0.0.0-20150114040149-fa567046d9b1direkt
Gogithub.com/gomodule/redigo1.8.2direkt
Gogithub.com/gorilla/handlers1.5.1direkt
Gogithub.com/gorilla/mux1.8.0direkt
Gogithub.com/hashicorp/golang-lru/arc/v22.0.5direkt
Gogithub.com/klauspost/compress1.16.5direkt
Gogithub.com/mitchellh/mapstructure1.1.2direkt
Gogithub.com/opencontainers/go-digest1.0.0direkt
Gogithub.com/opencontainers/image-spec1.0.2direkt
Gogithub.com/sirupsen/logrus1.8.1direkt
Gogithub.com/spf13/cobra1.6.1direkt
Gogolang.org/x/crypto0.7.0direkt
Gogolang.org/x/oauth20.6.0direkt
Gogoogle.golang.org/api0.114.0direkt
Gogopkg.in/check.v11.0.0-20201130134442-10cb98267c6cdirekt
Gogopkg.in/yaml.v22.4.0direkt
Gocloud.google.com/go0.110.0indirekt
Gocloud.google.com/go/compute1.18.0indirekt
Gocloud.google.com/go/compute/metadata0.2.3indirekt
Gocloud.google.com/go/iam0.12.0indirekt
Gogithub.com/azure/azure-sdk-for-go/sdk/internal1.3.0indirekt
Gogithub.com/azuread/microsoft-authentication-library-for-go1.0.0indirekt
Gogithub.com/beorn7/perks1.0.1indirekt
Gogithub.com/cespare/xxhash/v22.2.0indirekt
Gogithub.com/cyphar/filepath-securejoin0.2.3indirekt
Gogithub.com/felixge/httpsnoop1.0.1indirekt
Gogithub.com/golang-jwt/jwt/v44.5.0indirekt
Gogithub.com/golang/groupcache0.0.0-20200121045136-8c9f03a8e57eindirekt
Gogithub.com/golang/protobuf1.5.2indirekt
Gogithub.com/google/go-cmp0.5.9indirekt
Gogithub.com/google/uuid1.3.0indirekt
Gogithub.com/googleapis/enterprise-certificate-proxy0.2.3indirekt
Gogithub.com/googleapis/gax-go/v22.7.1indirekt
Gogithub.com/hashicorp/golang-lru/v22.0.5indirekt
Gogithub.com/inconshreveable/mousetrap1.0.1indirekt
Gogithub.com/jmespath/go-jmespath0.4.0indirekt
Gogithub.com/kr/pretty0.2.1indirekt
Gogithub.com/kr/text0.2.0indirekt
Gogithub.com/kylelemons/godebug1.1.0indirekt
Gogithub.com/matttproud/golang_protobuf_extensions1.0.1indirekt
Gogithub.com/pkg/browser0.0.0-20210911075715-681adbf594b8indirekt
Gogithub.com/prometheus/client_golang1.12.1indirekt
Gogithub.com/prometheus/client_model0.2.0indirekt
Gogithub.com/prometheus/common0.32.1indirekt
Gogithub.com/prometheus/procfs0.7.3indirekt
Gogithub.com/spf13/pflag1.0.5indirekt
Gogo.opencensus.io0.24.0indirekt
Gogolang.org/x/net0.8.0indirekt
Gogolang.org/x/sys0.6.0indirekt
Gogolang.org/x/text0.8.0indirekt
Gogolang.org/x/xerrors0.0.0-20220907171357-04be3eba64a2indirekt
Gogoogle.golang.org/appengine1.6.7indirekt
Gogoogle.golang.org/genproto0.0.0-20230320184635-7606e756e683indirekt
Gogoogle.golang.org/grpc1.53.0indirekt
Gogoogle.golang.org/protobuf1.29.1indirekt
Abhängigkeits-Advisories 12

Dieses Repository veröffentlicht kein vom Index auflösbares Paket, daher wurde sein eigener Abhängigkeitsgraph bewertet – 64 Pakete, darunter auch Entwicklungs- und Test-Pins, die nie ausgeliefert werden: 12 tragen bekannte Advisories, davon 5 direkte.

PaketVersionBeziehungSchweregradAdvisoriesBehoben in
golang.org/x/crypto0.7.0direktkritisch383.4.0
google.golang.org/grpc1.53.0indirektkritisch61.82.1
github.com/sirupsen/logrus1.8.1direkthoch21.9.3
golang.org/x/oauth20.6.0direkthoch20.27.0
github.com/golang-jwt/jwt/v44.5.0indirekthoch45.2.2
golang.org/x/net0.8.0indirekthoch2312.0.2
google.golang.org/protobuf1.29.1indirekthoch21.33.0
github.com/cyphar/filepath-securejoin0.2.3indirektmittel20.2.4
github.com/aws/aws-sdk-go1.44.325direktunbekannt2—
github.com/klauspost/compress1.16.5direktunbekannt11.18.7
golang.org/x/sys0.6.0indirektunbekannt10.44.0
golang.org/x/text0.8.0indirektunbekannt10.39.0

Ein Advisory bedeutet, dass die im Abhängigkeitsgraphen erfasste Version in den betroffenen Bereich eines Advisories fällt. Erreichbarkeit wird nicht analysiert, und der Graph enthält Entwicklungs- und Test-Pins — ein Fund kann das Werkzeug betreffen und nicht die ausgelieferte Software.

JSON-Rohbericht maschinenlesbar
{
  "data": {
    "repo": {
      "topics": [],
      "is_fork": true,
      "size_kb": 25098,
      "has_wiki": true,
      "homepage": null,
      "languages": {
        "Go": 1512414,
        "HCL": 1799,
        "Shell": 2835,
        "Makefile": 3829,
        "Dockerfile": 5696
      },
      "pushed_at": "2025-12-05T14:14:41Z",
      "created_at": "2025-12-05T14:13:29Z",
      "owner_type": "Organization",
      "updated_at": "2025-12-05T14:13:29Z",
      "description": "The toolkit to pack, ship, store, and deliver container content",
      "is_archived": false,
      "is_disabled": false,
      "license_spdx": "Apache-2.0",
      "default_branch": "main",
      "license_spdx_raw": "Apache-2.0",
      "primary_language": "Go",
      "significant_languages": [
        "Go"
      ]
    },
    "owner": {
      "blog": "https://www.rocketscience.gg",
      "name": "Rocket Science Group",
      "type": "Organization",
      "login": "rocketsciencegg",
      "company": null,
      "location": "United States of America",
      "followers": 30,
      "avatar_url": "https://avatars.githubusercontent.com/u/94499913?v=4",
      "created_at": "2021-11-17T01:16:11Z",
      "is_verified": null,
      "public_repos": 24,
      "account_age_days": 1713
    },
    "license": {
      "state": "standard",
      "spdx_id": "Apache-2.0",
      "raw_spdx": "Apache-2.0",
      "file_present": true,
      "scorecard_found": true,
      "profile_has_license": false
    },
    "activity": {
      "releases": [
        {
          "tag": "v2.8.1",
          "kind": "patch",
          "published_at": "2022-03-08T17:52:36Z"
        },
        {
          "tag": "v2.8.0",
          "kind": "minor",
          "published_at": "2022-02-07T15:40:21Z"
        },
        {
          "tag": "v2.8.0-beta.1",
          "kind": "prerelease",
          "published_at": "2022-01-21T12:46:32Z"
        },
        {
          "tag": "v2.7.1",
          "kind": "patch",
          "published_at": "2019-01-17T23:19:26Z"
        },
        {
          "tag": "v2.7.0",
          "kind": "minor",
          "published_at": "2018-12-04T00:05:39Z"
        },
        {
          "tag": "v2.7.0-rc.0",
          "kind": "prerelease",
          "published_at": "2018-09-28T23:17:04Z"
        },
        {
          "tag": "v2.6.2",
          "kind": "patch",
          "published_at": "2017-07-20T21:12:45Z"
        },
        {
          "tag": "v2.6.1",
          "kind": "patch",
          "published_at": "2017-04-05T23:18:07Z"
        },
        {
          "tag": "v2.6.1-rc.2",
          "kind": "prerelease",
          "published_at": "2017-03-21T20:13:43Z"
        },
        {
          "tag": "v2.6.1-rc.1",
          "kind": "prerelease",
          "published_at": "2017-03-21T17:49:45Z"
        },
        {
          "tag": "v2.6.0",
          "kind": "minor",
          "published_at": "2017-01-18T01:15:28Z"
        },
        {
          "tag": "v2.6.0-rc.2",
          "kind": "prerelease",
          "published_at": "2016-12-20T23:42:12Z"
        },
        {
          "tag": "v2.6.0-rc.1",
          "kind": "prerelease",
          "published_at": "2016-11-11T20:03:20Z"
        },
        {
          "tag": "v2.5.2",
          "kind": "patch",
          "published_at": "2017-07-20T21:21:03Z"
        },
        {
          "tag": "v2.5.1",
          "kind": "patch",
          "published_at": "2016-08-26T18:20:37Z"
        },
        {
          "tag": "v2.5.1-rc.1",
          "kind": "prerelease",
          "published_at": "2016-08-26T18:20:37Z"
        },
        {
          "tag": "v2.5.0",
          "kind": "minor",
          "published_at": "2016-07-28T17:28:13Z"
        },
        {
          "tag": "v2.5.0-rc.2",
          "kind": "prerelease",
          "published_at": "2016-06-29T22:33:46Z"
        },
        {
          "tag": "v2.5.0-rc.1",
          "kind": "prerelease",
          "published_at": "2016-06-14T17:37:47Z"
        },
        {
          "tag": "v2.4.1",
          "kind": "patch",
          "published_at": "2016-05-10T10:32:14Z"
        },
        {
          "tag": "v2.4.1-rc.2",
          "kind": "prerelease",
          "published_at": "2016-05-10T10:32:14Z"
        },
        {
          "tag": "v2.4.1-rc.1",
          "kind": "prerelease",
          "published_at": "2016-05-05T19:09:13Z"
        },
        {
          "tag": "v2.4.1-rc.0",
          "kind": "prerelease",
          "published_at": "2016-05-04T17:35:49Z"
        },
        {
          "tag": "v2.4.0",
          "kind": "minor",
          "published_at": "2016-04-13T17:27:36Z"
        },
        {
          "tag": "v2.4.0-rc.1",
          "kind": "prerelease",
          "published_at": "2016-03-31T00:46:27Z"
        },
        {
          "tag": "v2.4.0-rc.0",
          "kind": "prerelease",
          "published_at": "2016-03-24T23:14:17Z"
        },
        {
          "tag": "v2.3.1",
          "kind": "patch",
          "published_at": "2016-02-23T22:39:19Z"
        },
        {
          "tag": "v2.3.1-rc.0",
          "kind": "prerelease",
          "published_at": "2016-02-23T22:39:19Z"
        },
        {
          "tag": "v2.3.0",
          "kind": "minor",
          "published_at": "2016-02-04T19:11:33Z"
        },
        {
          "tag": "v2.3.0-rc.2",
          "kind": "prerelease",
          "published_at": "2016-01-28T18:04:09Z"
        },
        {
          "tag": "v2.3.0-rc.1",
          "kind": "prerelease",
          "published_at": "2016-01-21T17:34:56Z"
        },
        {
          "tag": "v2.3.0-rc.0",
          "kind": "prerelease",
          "published_at": "2016-01-19T19:00:47Z"
        },
        {
          "tag": "v2.3.0-alpha",
          "kind": "prerelease",
          "published_at": "2016-01-11T22:17:36Z"
        },
        {
          "tag": "v2.2.1",
          "kind": "patch",
          "published_at": "2015-12-09T19:52:51Z"
        },
        {
          "tag": "v2.2.0",
          "kind": "minor",
          "published_at": "2015-11-03T17:34:01Z"
        },
        {
          "tag": "v2.1.1",
          "kind": "patch",
          "published_at": "2015-08-12T22:13:45Z"
        },
        {
          "tag": "v2.1.0",
          "kind": "minor",
          "published_at": "2015-08-11T22:53:13Z"
        },
        {
          "tag": "v2.1.0-rc.0",
          "kind": "prerelease",
          "published_at": "2015-08-05T00:04:56Z"
        },
        {
          "tag": "v2.0.1",
          "kind": "patch",
          "published_at": "2015-05-06T23:37:30Z"
        },
        {
          "tag": "v2.0.0",
          "kind": "major",
          "published_at": "2015-04-16T18:27:48Z"
        },
        {
          "tag": "v2.0.0-rc.4",
          "kind": "prerelease",
          "published_at": "2015-04-16T06:23:40Z"
        },
        {
          "tag": "v2.0.0-rc.3",
          "kind": "prerelease",
          "published_at": "2015-04-10T23:55:57Z"
        },
        {
          "tag": "v2.0.0-rc.2",
          "kind": "prerelease",
          "published_at": "2015-04-08T03:02:29Z"
        },
        {
          "tag": "v2.0.0-rc.1",
          "kind": "prerelease",
          "published_at": "2015-04-07T03:05:59Z"
        },
        {
          "tag": "v2.0.0-rc.0",
          "kind": "prerelease",
          "published_at": "2015-04-03T03:12:57Z"
        },
        {
          "tag": "v2.0.0-alpha.3",
          "kind": "prerelease",
          "published_at": "2015-03-07T02:24:05Z"
        },
        {
          "tag": "v2.0.0-alpha.2",
          "kind": "prerelease",
          "published_at": "2015-02-05T03:25:10Z"
        },
        {
          "tag": "v2.0.0-alpha.1",
          "kind": "prerelease",
          "published_at": "2015-01-28T01:07:28Z"
        },
        {
          "tag": "v2.0.0-alpha.0",
          "kind": "prerelease",
          "published_at": "2015-01-20T21:42:12Z"
        }
      ],
      "recent_commits": [
        {
          "oid": "4f7424c8eb41431f4ec893ba75d808acc9f4e103",
          "body": "Remove bugsnag",
          "is_bot": false,
          "headline": "Merge pull request #4000 from DavidSpek/remove-bugsnag",
          "author_name": "Milos Gajdos",
          "author_login": "milosgajdos",
          "committed_at": "2023-08-23T14:21:18Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "4a85aab30f9f3e7d602674c80abb55ae15de0629",
          "body": "fix typo in comment and log",
          "is_bot": false,
          "headline": "Merge pull request #4012 from liubin/fix-typo",
          "author_name": "Milos Gajdos",
          "author_login": "milosgajdos",
          "committed_at": "2023-08-23T14:20:05Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "1284c487812f7fdf41afa227164fa2d30d2fc772",
          "body": "Signed-off-by: bin liu <liubin0329@gmail.com>",
          "is_bot": false,
          "headline": "fix typo in comment and log",
          "author_name": "bin liu",
          "author_login": "liubin",
          "committed_at": "2023-08-23T11:39:19Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "944446b6f565db9f16f35917c50d6e75f31c17d9",
          "body": null,
          "is_bot": false,
          "headline": "Merge pull request #3740 from joycebrum/main",
          "author_name": "Milos Gajdos",
          "author_login": "milosgajdos",
          "committed_at": "2023-08-22T12:09:03Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "59dd684cc8975a172aeec9c6fc1d44fa26015f2a",
          "body": null,
          "is_bot": false,
          "headline": "Merge pull request #3713 from Jamstah/s3-tests",
          "author_name": "Milos Gajdos",
          "author_login": "milosgajdos",
          "committed_at": "2023-08-21T12:48:43Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "1a4638a06c1ff741026995da0becf1511e46c1c8",
          "body": null,
          "is_bot": false,
          "headline": "Merge pull request #4007 from milosgajdos/remove-schema1-client",
          "author_name": "Milos Gajdos",
          "author_login": "milosgajdos",
          "committed_at": "2023-08-21T12:46:29Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "368511da8a87eb86720f51ae7dfc0e27db4e7e9a",
          "body": null,
          "is_bot": false,
          "headline": "Merge pull request #4008 from thaJeztah/s3_interface_assert",
          "author_name": "Milos Gajdos",
          "author_login": "milosgajdos",
          "committed_at": "2023-08-21T12:44:51Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "5b3be398701517100f417b4949bba6b7c824a7df",
          "body": "This was added for the other drivers in 6b388b1ba604bf5b970bbb41878f97cc3fc93376,\nbut it missed the s3 storage driver.\n\nSigned-off-by: Sebastiaan van Stijn <github@gone.nl>",
          "is_bot": false,
          "headline": "s3: add interface assertion",
          "author_name": "Sebastiaan van Stijn",
          "author_login": "thaJeztah",
          "committed_at": "2023-08-21T11:54:13Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "df2787c6cf8faeb0edcc3dbc8815b02c805132e6",
          "body": "Signed-off-by: Milos Gajdos <milosthegajdos@gmail.com>",
          "is_bot": false,
          "headline": "Update test asserts",
          "author_name": "Milos Gajdos",
          "author_login": "milosgajdos",
          "committed_at": "2023-08-21T09:27:46Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "03d926737aa8c1d4f0dfe443a4f0dd83916d68b0",
          "body": "Enable bodyclose linter",
          "is_bot": false,
          "headline": "Merge pull request #4006 from milosgajdos/enable-bodyclose",
          "author_name": "Milos Gajdos",
          "author_login": "milosgajdos",
          "committed_at": "2023-08-21T08:34:35Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "3e4c4ead4c3aa07c27f95f2a5c92c6d5c2f9dcdb",
          "body": "Signed-off-by: David van der Spek <vanderspek.david@gmail.com>",
          "is_bot": false,
          "headline": "Remove bugsnag",
          "author_name": "David van der Spek",
          "author_login": "davidspek",
          "committed_at": "2023-08-21T08:24:36Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "11c341a369f92cc971789720c033984ed5d17fc8",
          "body": "We've replaced all the schema1 references with OCI schema manifest.\nNote, there are some TODO items that must be addressed at some point in\nthe future once the schema1 package is removed completely from the\ncodebase.\n\nSigned-off-by: Milos Gajdos <milosthegajdos@gmail.com>",
          "is_bot": false,
          "headline": "Remove schema1 references from registry client",
          "author_name": "Milos Gajdos",
          "author_login": "milosgajdos",
          "committed_at": "2023-08-20T08:07:59Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "3dbfbc7255d8cd6656fbb8d08298052073f2a1c6",
          "body": "Signed-off-by: Milos Gajdos <milosthegajdos@gmail.com>",
          "is_bot": false,
          "headline": "Enable bodyclose linter",
          "author_name": "Milos Gajdos",
          "author_login": "milosgajdos",
          "committed_at": "2023-08-19T08:45:44Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "597e8a6b3459da8747bad6fefa880e9c60a7d762",
          "body": "Remove NewRelic",
          "is_bot": false,
          "headline": "Merge pull request #4001 from DavidSpek/remove-newrelic",
          "author_name": "Milos Gajdos",
          "author_login": "milosgajdos",
          "committed_at": "2023-08-18T21:35:16Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "10b8a247e40ba1c3f5a65f0d10b52a42a0e8fc84",
          "body": "Signed-off-by: Joyce Brum <joycebrum@google.com>",
          "is_bot": false,
          "headline": "fix: upgrade scorecard action to 2.0.6",
          "author_name": "Joyce Brum",
          "author_login": "joycebrum",
          "committed_at": "2023-08-18T18:16:42Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "77239356262291527f889fcef49956a572431ffa",
          "body": "Signed-off-by: Joyce Brum <joycebrumu.u@gmail.com>",
          "is_bot": false,
          "headline": "chore: enable scorecard action and badge",
          "author_name": "Joyce Brum",
          "author_login": "joycebrum",
          "committed_at": "2023-08-18T18:16:38Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "ed256e07f199c221fa9a1e28a85bd3bccbee0385",
          "body": "Revert 3902",
          "is_bot": false,
          "headline": "Merge pull request #4004 from Jamstah/revert-3902",
          "author_name": "Milos Gajdos",
          "author_login": "milosgajdos",
          "committed_at": "2023-08-18T15:26:39Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "a45c5785abf4735169ee6d5506199329405c2f5e",
          "body": "Small update of API docs",
          "is_bot": false,
          "headline": "Merge pull request #3998 from milosgajdos/update-docs",
          "author_name": "Milos Gajdos",
          "author_login": "milosgajdos",
          "committed_at": "2023-08-18T15:24:55Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "9139f52ddb1c25e64b71225928c407a91002340c",
          "body": "remove contrib folder",
          "is_bot": false,
          "headline": "Merge pull request #4003 from DavidSpek/remove-contrib-folder",
          "author_name": "Milos Gajdos",
          "author_login": "milosgajdos",
          "committed_at": "2023-08-18T13:57:33Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "bfe4a37b7d3151c1698dd37841c66ad9d9d79249",
          "body": "Regroup direct and indirect dependencies",
          "is_bot": false,
          "headline": "Merge pull request #3997 from milosgajdos/module-grouping",
          "author_name": "Milos Gajdos",
          "author_login": "milosgajdos",
          "committed_at": "2023-08-18T13:56:00Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "37a213dc4b2aaebc0c1a8077bf8f0cf82d67df8e",
          "body": "This reverts commit 65f4ce4d9397fbec875e985d7169186ac94c8ac2.\n\nSigned-off-by: James Hewitt <james.hewitt@uk.ibm.com>",
          "is_bot": false,
          "headline": "Revert \"optimize catalog last param\"",
          "author_name": "James Hewitt",
          "author_login": "Jamstah",
          "committed_at": "2023-08-18T12:52:37Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "8fd504debe08833a9f58e7281b1f048598a4f1d5",
          "body": "This reverts commit 230cc72a8b3a7d724365f449ab14da61b9112eae.\n\nSigned-off-by: James Hewitt <james.hewitt@uk.ibm.com>",
          "is_bot": false,
          "headline": "Revert \"Rename catalog funcs and update their godocs.\"",
          "author_name": "James Hewitt",
          "author_login": "Jamstah",
          "committed_at": "2023-08-18T12:52:28Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "ad11105052ce28c66aeb57d0a563be251309232d",
          "body": "This reverts commit 0f846853feb903585d5733e7aa6b56d564b03e3d.\n\nSigned-off-by: James Hewitt <james.hewitt@uk.ibm.com>",
          "is_bot": false,
          "headline": "Revert \"removed redundant check\"",
          "author_name": "James Hewitt",
          "author_login": "Jamstah",
          "committed_at": "2023-08-18T12:52:19Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "8e4a8517c5b3d7c2af7c1b418c5e353c21379017",
          "body": "This reverts commit 6a5846b32eb9f9b750c492d4eca1112bdb6855a9.\n\nSigned-off-by: James Hewitt <james.hewitt@uk.ibm.com>",
          "is_bot": false,
          "headline": "Revert \"fix: resolve most comments\"",
          "author_name": "James Hewitt",
          "author_login": "Jamstah",
          "committed_at": "2023-08-18T12:52:06Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "6fea54890d0870e33348f18af7bdf4aedf0def7b",
          "body": "Signed-off-by: David van der Spek <vanderspek.david@gmail.com>",
          "is_bot": false,
          "headline": "remove contrib folder",
          "author_name": "David van der Spek",
          "author_login": "davidspek",
          "committed_at": "2023-08-18T10:58:50Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "77c33cd24300fa92ea342c9dc57a85c1bf260851",
          "body": "Signed-off-by: David van der Spek <vanderspek.david@gmail.com>",
          "is_bot": false,
          "headline": "remove NewRelic",
          "author_name": "David van der Spek",
          "author_login": "davidspek",
          "committed_at": "2023-08-18T10:16:18Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "279fa01b2afdf612ffca6dddc33473947499c544",
          "body": "Signed-off-by: Milos Gajdos <milosthegajdos@gmail.com>",
          "is_bot": false,
          "headline": "Small update of API docs",
          "author_name": "Milos Gajdos",
          "author_login": "milosgajdos",
          "committed_at": "2023-08-18T07:47:04Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "c0a15e6448fcaec736a46622d55f323005458dcd",
          "body": "For some reason we let these be ungrouped and mixed all over the place.\nThis commit groups direct and indirect Go module dependencies.\n\nSigned-off-by: Milos Gajdos <milosthegajdos@gmail.com>",
          "is_bot": false,
          "headline": "Regroup direct and indirect dependencies",
          "author_name": "Milos Gajdos",
          "author_login": "milosgajdos",
          "committed_at": "2023-08-18T07:28:26Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "97957b12b1b2556401b46172bc6ac48f0eb5d648",
          "body": "Add some secure compilation options, especially PIE and RELRO.",
          "is_bot": false,
          "headline": "Merge pull request #3623 from TaylorKanper/security-compilation",
          "author_name": "Milos Gajdos",
          "author_login": "milosgajdos",
          "committed_at": "2023-08-18T07:26:15Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "d302c582642381b068b3738ba9e0ecc731bb005b",
          "body": "Remove waynr from MAINTAINERS",
          "is_bot": false,
          "headline": "Merge pull request #3995 from waynr/waynr-patch-1",
          "author_name": "Milos Gajdos",
          "author_login": "milosgajdos",
          "committed_at": "2023-08-18T07:18:35Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "bf3c2df6b2391e3153851999ec096da46c7d7fc2",
          "body": "Optimise catalog function rebase of #3145",
          "is_bot": false,
          "headline": "Merge pull request #3902 from pluralsh/catalog-opti-fix-rebase",
          "author_name": "Milos Gajdos",
          "author_login": "milosgajdos",
          "committed_at": "2023-08-18T07:11:29Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "ac324661882bbd131bbdf73c9acf33cd572dc04e",
          "body": "Update github.com/hashicorp/golang-lru to v2",
          "is_bot": false,
          "headline": "Merge pull request #3993 from DavidSpek/update-golang-lru",
          "author_name": "Milos Gajdos",
          "author_login": "milosgajdos",
          "committed_at": "2023-08-18T07:09:11Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "ac7a3340695639c1755bb2f535bdc342484335fa",
          "body": "Remove references to schema1 pacakge from handlers",
          "is_bot": false,
          "headline": "Merge pull request #3987 from milosgajdos/remove-schema1-handlers",
          "author_name": "Hayley Swimelar",
          "author_login": "deleteriousEffect",
          "committed_at": "2023-08-17T21:18:48Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "40c56bf1b6fb7715d05286742753e8c32ffafaba",
          "body": "This puts back the original flow where old clients are fetching manifest\nlists schema1 images where we want to try returning some image for the\ndefault architecture. This was incorrectly removed by one of the\nprevious commits.\n\nSigned-off-by: Milos Gajdos <milosthegajdos@gmail.com>",
          "is_bot": false,
          "headline": "Keep returning image for default arch to old clients fetching lists",
          "author_name": "Milos Gajdos",
          "author_login": "milosgajdos",
          "committed_at": "2023-08-17T19:57:02Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "61280d107fb494c805bd469e65771f026f169379",
          "body": "Propose James Hewitt as a new reviewer",
          "is_bot": false,
          "headline": "Merge pull request #3994 from DavidSpek/james-reviewer",
          "author_name": "Hayley Swimelar",
          "author_login": "deleteriousEffect",
          "committed_at": "2023-08-17T18:36:54Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "d7241d788bf12697153eadbf804ff91bb2fb69cf",
          "body": "fix(deps): update module github.com/aws/aws-sdk-go to v1.44.325",
          "is_bot": false,
          "headline": "Merge pull request #3990 from DavidSpek/update-aws-sdk",
          "author_name": "Hayley Swimelar",
          "author_login": "deleteriousEffect",
          "committed_at": "2023-08-17T18:36:27Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "f48e0ecd2a9d84b0ca3fdd40f34c42b9f7efe87c",
          "body": "Signed-off-by: wayne <wayne.warren.s@gmail.com>",
          "is_bot": false,
          "headline": "Remove waynr from MAINTAINERS",
          "author_name": "wayne",
          "author_login": "waynr",
          "committed_at": "2023-08-17T15:32:28Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "e51cfa660500a23df2ed8210d135ab9e0d478dad",
          "body": "Signed-off-by: David van der Spek <vanderspek.david@gmail.com>",
          "is_bot": false,
          "headline": "Add James Hewitt as a reviewer",
          "author_name": "David van der Spek",
          "author_login": "davidspek",
          "committed_at": "2023-08-17T14:47:54Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "0f006548a1e5e192f2889227fd7f2eb6006bdd29",
          "body": "Signed-off-by: David van der Spek <vanderspek.david@gmail.com>",
          "is_bot": false,
          "headline": "update golang-lru to v2",
          "author_name": "David van der Spek",
          "author_login": "davidspek",
          "committed_at": "2023-08-17T11:41:54Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "9d862f098274fbad4fb82086293d64034183794f",
          "body": "Signed-off-by: David van der Spek <vanderspek.david@gmail.com>",
          "is_bot": false,
          "headline": "fix(deps): update module github.com/aws/aws-sdk-go to v1.44.325",
          "author_name": "David van der Spek",
          "author_login": "davidspek",
          "committed_at": "2023-08-17T10:02:28Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "f517191da1e2844f84f115d60969de9eae3f87ec",
          "body": "Signed-off-by: Milos Gajdos <milosthegajdos@gmail.com>",
          "is_bot": false,
          "headline": "Add small update to api tests",
          "author_name": "Milos Gajdos",
          "author_login": "milosgajdos",
          "committed_at": "2023-08-17T08:37:26Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "7e39a7c6dcdbc988354b9933a0767ca4e6e814cd",
          "body": "schema1 package was deprecated a while ago so we are removing\nany references to it from handlers. in preparation to\nremoving it from the codebase altogether.\n\nSigned-off-by: Milos Gajdos <milosthegajdos@gmail.com>",
          "is_bot": false,
          "headline": "Remove references to schema1 pacakge from handlers",
          "author_name": "Milos Gajdos",
          "author_login": "milosgajdos",
          "committed_at": "2023-08-17T07:35:54Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "6ccc551f961310539f5cb8ca0275275d1733923d",
          "body": "Remove oss storage driver and alicdn storage driver middleware",
          "is_bot": false,
          "headline": "Merge pull request #3985 from milosgajdos/remove-oss-alibaba",
          "author_name": "Hayley Swimelar",
          "author_login": "deleteriousEffect",
          "committed_at": "2023-08-16T15:20:46Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "3f1859af26406461ddb4eed5addd8430d2f0c73a",
          "body": "This commit removes `oss` storage driver from distribution as well as\n`alicdn` storage middleware which only works with the `oss` driver.\n\nThere are several reasons for it:\n* no real-life expertise among the maintainers\n* oss is compatible with S3 API operations required by S3 storage driver\n\nSigned-off-by: Milos Gajdos <milosthegajdos@gmail.com>",
          "is_bot": false,
          "headline": "Remove oss storage driver and alicdn storage driver middleware",
          "author_name": "Milos Gajdos",
          "author_login": "milosgajdos",
          "committed_at": "2023-08-16T07:39:20Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "65b57464f92865b466f855c64ff461889a0acda1",
          "body": "Remove SWIFT storage driver",
          "is_bot": false,
          "headline": "Merge pull request #3982 from milosgajdos/remove-swift-storage-driver",
          "author_name": "Milos Gajdos",
          "author_login": "milosgajdos",
          "committed_at": "2023-08-16T06:47:42Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "fff194fc461a41eba931a518bc1e4a8d9136be3d",
          "body": "Fix Azure tests",
          "is_bot": false,
          "headline": "Merge pull request #3983 from Jamstah/azure-tests",
          "author_name": "Milos Gajdos",
          "author_login": "milosgajdos",
          "committed_at": "2023-08-15T17:31:05Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "46ff5f852811c2c37066770effd9b297a2a0d78c",
          "body": "The Azure tests fail if there is no Azure configuration available,\ninstead they should be skipped.\n\nAlso, one of the Azure tests is wrong and doesn't match the code.\n\nSigned-off-by: James Hewitt <james.hewitt@uk.ibm.com>",
          "is_bot": false,
          "headline": "Fix Azure tests",
          "author_name": "James Hewitt",
          "author_login": "Jamstah",
          "committed_at": "2023-08-15T15:46:36Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "7622d0a4534886072b17f58754cd1d1924a22d19",
          "body": "Other storage drivers will only return children and below, s3 should do\nthe same. The only reason it was returning was because of the addition\nof a / to ensure we treat the from as a directory.\n\nSigned-off-by: James Hewitt <james.hewitt@uk.ibm.com>",
          "is_bot": false,
          "headline": "Don't return the from of a walk",
          "author_name": "James Hewitt",
          "author_login": "Jamstah",
          "committed_at": "2023-08-15T15:26:37Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "f7bdd9127bc0afc71d7cc0facd440d8c81276232",
          "body": "This test will only work on an s3 bucket on an s3 outpost. Most\ndevelopers won't have access to one of these.\n\nSigned-off-by: James Hewitt <james.hewitt@uk.ibm.com>",
          "is_bot": false,
          "headline": "Don't test the OUTPOSTS storage class",
          "author_name": "James Hewitt",
          "author_login": "Jamstah",
          "committed_at": "2023-08-15T15:18:52Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "6ceb904c3ef529b13e6e9276977cff84be4a3b87",
          "body": "If we haven't set a storage class there's no point in checking the\nstorage class applied to the object - s3 will choose one.\n\nSigned-off-by: James Hewitt <james.hewitt@uk.ibm.com>",
          "is_bot": false,
          "headline": "Don't check returned storage class if we use NONE",
          "author_name": "James Hewitt",
          "author_login": "Jamstah",
          "committed_at": "2023-08-15T15:18:51Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "2d316a12d36f2c11f64acc55b64408f4c26347c5",
          "body": "Signed-off-by: James Hewitt <james.hewitt@uk.ibm.com>",
          "is_bot": false,
          "headline": "We don't use gocheck in these tests",
          "author_name": "James Hewitt",
          "author_login": "Jamstah",
          "committed_at": "2023-08-15T15:18:51Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "f78d81e78a20fda60efb4a29848f77d99dd0513b",
          "body": "Signed-off-by: James Hewitt <james.hewitt@uk.ibm.com>",
          "is_bot": false,
          "headline": "Remove test as S3 does not support empty directories",
          "author_name": "James Hewitt",
          "author_login": "Jamstah",
          "committed_at": "2023-08-15T15:18:48Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "2918c3244d0ecb7170208afc15d72e62531d0366",
          "body": "…dfrom\n\nSet Content-Type header in registry client ReadFrom",
          "is_bot": false,
          "headline": "Merge pull request #3981 from milosgajdos/set-content-type-client-rea…",
          "author_name": "Milos Gajdos",
          "author_login": "milosgajdos",
          "committed_at": "2023-08-15T14:21:20Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "72dc2642410cbf00b2b5c7392085ec800bac42f8",
          "body": "…lices\n\nAdded support for configuring array values with environment variables",
          "is_bot": false,
          "headline": "Merge pull request #3511 from andriisoldatenko/add-support-env-vars-s…",
          "author_name": "Milos Gajdos",
          "author_login": "milosgajdos",
          "committed_at": "2023-08-15T13:14:30Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "1813dd13b498221ffad7fda17b42d2f2dd48ad02",
          "body": "Remove references to schema1 pacakge from notifications package",
          "is_bot": false,
          "headline": "Merge pull request #3976 from milosgajdos/remove-schema1-notifcations",
          "author_name": "Milos Gajdos",
          "author_login": "milosgajdos",
          "committed_at": "2023-08-15T09:18:32Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "c6b9944ab11db3fa79f585085e502dacd85df668",
          "body": "This commit removes swift storage driver from distribution.\nThere are several reasons for it:\n* no real life expertise among the maintainers\n* swift is compatible with S3 API operations required by S3 storage driver\n\nThis will also remove depedencies that are also hard to keep up with.\n\nSigned-off-by: Milos Gajdos <milosthegajdos@gmail.com>",
          "is_bot": false,
          "headline": "Remove SWIFT storage driver",
          "author_name": "Milos Gajdos",
          "author_login": "milosgajdos",
          "committed_at": "2023-08-15T08:14:11Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "24de708d229e4b67fb434151895e909f31aa08e6",
          "body": "Client ReadFrom doesn't set Content-Type header leading to server\nside implementor to assume it's application/octet-stream. This commit\nmakes this explicit on the client side.\n\nSigned-off-by: Milos Gajdos <milosthegajdos@gmail.com>",
          "is_bot": false,
          "headline": "Set Content-Type header in registry client ReadFrom",
          "author_name": "Milos Gajdos",
          "author_login": "milosgajdos",
          "committed_at": "2023-08-15T07:46:48Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "ff46bf1c41a71a419cbbf7f346a1fccec22d7a8c",
          "body": "Cleanup storage cache metrics",
          "is_bot": false,
          "headline": "Merge pull request #2897 from SuperQ/cache_metrics",
          "author_name": "Milos Gajdos",
          "author_login": "milosgajdos",
          "committed_at": "2023-08-15T06:44:14Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "f1529a778201d1c486cf09c01b1d2dbdfbda6883",
          "body": "Remove references to schema1 pacakge from proxy package",
          "is_bot": false,
          "headline": "Merge pull request #3977 from milosgajdos/remove-schema1-proxystore",
          "author_name": "Hayley Swimelar",
          "author_login": "deleteriousEffect",
          "committed_at": "2023-08-14T23:24:45Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "0e18af15f8377172a8208d00bc339c203866b175",
          "body": "GitHub Workflows security hardening",
          "is_bot": false,
          "headline": "Merge pull request #3741 from sashashura/patch-1",
          "author_name": "Milos Gajdos",
          "author_login": "milosgajdos",
          "committed_at": "2023-08-14T18:21:28Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "5410c5582088cba8b483d4622ab60781df83293a",
          "body": "Drop docker prefix from storage driver API user agent",
          "is_bot": false,
          "headline": "Merge pull request #3979 from milosgajdos/user-agent",
          "author_name": "Wang Yan",
          "author_login": "wy65701436",
          "committed_at": "2023-08-14T18:02:47Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "745a29a0e2b62178fba43e446c778be76ec30be7",
          "body": "Propose David van der Spek as a new reviewer",
          "is_bot": false,
          "headline": "Merge pull request #3980 from milosgajdos/new-reviewer",
          "author_name": "Milos Gajdos",
          "author_login": "milosgajdos",
          "committed_at": "2023-08-14T13:00:34Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "c1147cc11febab77069ee7117bc8bccbfb73e6a7",
          "body": "Signed-off-by: Milos Gajdos <milosthegajdos@gmail.com>",
          "is_bot": false,
          "headline": "Add David van der Spek as a new reviewer",
          "author_name": "Milos Gajdos",
          "author_login": "milosgajdos",
          "committed_at": "2023-08-14T08:16:24Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "02a92efba8ef441c771e4493341a278f05e87fda",
          "body": "Signed-off-by: Milos Gajdos <milosthegajdos@gmail.com>",
          "is_bot": false,
          "headline": "Drop docker prefix from storage driver API user agent",
          "author_name": "Milos Gajdos",
          "author_login": "milosgajdos",
          "committed_at": "2023-08-13T21:27:55Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "ae0001f54dcc88834e331ecc4def812b36c8e950",
          "body": "schema1 package was deprecated a while ago so we are removing\nany references to it from the proxy package in preparation to\nremoving it from the codebase altogether.\n\nSigned-off-by: Milos Gajdos <milosthegajdos@gmail.com>",
          "is_bot": false,
          "headline": "Remove references to schema1 pacakge from proxy package",
          "author_name": "Milos Gajdos",
          "author_login": "milosgajdos",
          "committed_at": "2023-08-13T13:57:55Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "565dafa48c6aaa16de758210534109f6b7e994c6",
          "body": "Schema1 package was deprecated a while ago but it's wildly referenced\nthrhougout distribution codebase.\n\nSigned-off-by: Milos Gajdos <milosthegajdos@gmail.com>",
          "is_bot": false,
          "headline": "Remove references to schema1 pacakge from notifications package",
          "author_name": "Milos Gajdos",
          "author_login": "milosgajdos",
          "committed_at": "2023-08-13T11:44:21Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "6a5846b32eb9f9b750c492d4eca1112bdb6855a9",
          "body": "Signed-off-by: David van der Spek <vanderspek.david@gmail.com>",
          "is_bot": false,
          "headline": "fix: resolve most comments",
          "author_name": "David van der Spek",
          "author_login": "davidspek",
          "committed_at": "2023-08-10T08:47:39Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "0f846853feb903585d5733e7aa6b56d564b03e3d",
          "body": "Signed-off-by: eyjhb <eyjhbb@gmail.com\nSigned-off-by: David van der Spek <vanderspek.david@gmail.com>",
          "is_bot": false,
          "headline": "removed redundant check",
          "author_name": "eyjhb",
          "author_login": "eyJhb",
          "committed_at": "2023-08-10T08:47:37Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "230cc72a8b3a7d724365f449ab14da61b9112eae",
          "body": "Signed-off-by: Milos Gajdos <milosgajdos83@gmail.com>\nSigned-off-by: David van der Spek <vanderspek.david@gmail.com>",
          "is_bot": false,
          "headline": "Rename catalog funcs and update their godocs.",
          "author_name": "Milos Gajdos",
          "author_login": "milosgajdos",
          "committed_at": "2023-08-10T08:47:34Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "65f4ce4d9397fbec875e985d7169186ac94c8ac2",
          "body": "Signed-off-by: eyjhb <eyjhbb@gmail.com>\nSigned-off-by: David van der Spek <vanderspek.david@gmail.com>",
          "is_bot": false,
          "headline": "optimize catalog last param",
          "author_name": "eyjhbb@gmail.com",
          "author_login": "eyJhb",
          "committed_at": "2023-08-10T08:46:40Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "69fe1690134c17c3d3a84f991c38a98fd0a064ed",
          "body": "feat: added support for redis username configuration",
          "is_bot": false,
          "headline": "Merge pull request #3974 from chlins/feat/support-redis-username",
          "author_name": "Milos Gajdos",
          "author_login": "milosgajdos",
          "committed_at": "2023-08-08T08:16:39Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "32a476b840435958d622e7489a3fbaebae9cc701",
          "body": "Redis introduced an Access Control List (ACL) mechanism since version 6.0. This commit implements the necessary changes to support configuring the username for Redis. Users can now define a specific username to authenticate with Redis and enhance security through the ACL feature.\n\nSigned-off-by: chlins <chenyuzh@vmware.com>",
          "is_bot": false,
          "headline": "feat: added support for redis username configuration",
          "author_name": "chlins",
          "author_login": "chlins",
          "committed_at": "2023-08-04T07:06:12Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "c19adfdf060a4f4dc0a76aadce157a9a065aee4d",
          "body": "Split request and hit metrics into separate metrics, rather than using\nlabels. This avoids duplication of data and makes metric math easier.\n\n* Count cache errors separately to avoid weird math.\n* Hit ratio: `registry_storage_cache_hits_total / registry_storage_cache_requests_total`\n* Miss ratio: `1\n[…]\nry_storage_cache_hits_total / registry_storage_cache_requests_total`\n* Misses: `registry_storage_cache_requests_total -\nregistry_storage_cache_hits_total`\n\nSigned-off-by: Ben Kochie <superq@gmail.com>",
          "is_bot": false,
          "headline": "Cleanup storage cache metrics",
          "author_name": "Ben Kochie",
          "author_login": "SuperQ",
          "committed_at": "2023-08-04T07:03:06Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "807a836852c0f0297cd53027bef9d063c9af71d3",
          "body": "Update Code of Conduct",
          "is_bot": false,
          "headline": "Merge pull request #3971 from milosgajdos/update-coc",
          "author_name": "Milos Gajdos",
          "author_login": "milosgajdos",
          "committed_at": "2023-08-02T17:31:26Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "e7505464ce7ea9c5da158a2cd7c0b36eb4f014be",
          "body": "Signed-off-by: Milos Gajdos <milosthegajdos@gmail.com>",
          "is_bot": false,
          "headline": "Update Code of Conduct",
          "author_name": "Milos Gajdos",
          "author_login": "milosgajdos",
          "committed_at": "2023-08-02T17:16:54Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "4c86ee3f3e1439d99ead105158c5a73880a42568",
          "body": "…-check\n\nUpdate OCI conformance workflow check",
          "is_bot": false,
          "headline": "Merge pull request #3973 from milosgajdos/update-conformance-workflow…",
          "author_name": "Milos Gajdos",
          "author_login": "milosgajdos",
          "committed_at": "2023-08-02T17:16:02Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "b3ca53dfe6b9af5867007920b67deb525ec4bbc9",
          "body": "Pin the OCI conformance check workflow GHA to v1.0.1\n\nSigned-off-by: Milos Gajdos <milosthegajdos@gmail.com>",
          "is_bot": false,
          "headline": "Update OCI conformance workflow check",
          "author_name": "Milos Gajdos",
          "author_login": "milosgajdos",
          "committed_at": "2023-08-02T17:02:23Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "7b502560cad43970472964166dcb095b1f883ae4",
          "body": "Fix json formatting in registry api docs",
          "is_bot": false,
          "headline": "Merge pull request #3801 from iasoon/fix-api-docs-json",
          "author_name": "Milos Gajdos",
          "author_login": "milosgajdos",
          "committed_at": "2023-07-22T18:16:36Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "46b3d62016494dd86a9e2481deb6260e6dd27aa5",
          "body": "Split OCI Image Index from Docker Manifest List",
          "is_bot": false,
          "headline": "Merge pull request #3869 from brackendawson/split-oci-index",
          "author_name": "Wang Yan",
          "author_login": "wy65701436",
          "committed_at": "2023-07-19T04:02:15Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "83a3e3bff11e9d9fcc6222c8eec75704fc652513",
          "body": "Add information about security",
          "is_bot": false,
          "headline": "Merge pull request #3739 from Jamstah/security-md",
          "author_name": "Hayley Swimelar",
          "author_login": "deleteriousEffect",
          "committed_at": "2023-07-18T16:54:16Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "0cf87b1fd17ab8d086559e75b7e1a828605bfaed",
          "body": "Signed-off-by: Milos Gajdos <milosthegajdos@gmail.com>",
          "is_bot": false,
          "headline": "Fix the code and update tests that verify the new code works",
          "author_name": "Milos Gajdos",
          "author_login": "milosgajdos",
          "committed_at": "2023-07-17T21:40:32Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "916b94eb3aac698918e79a7b8592ac0ce5b74012",
          "body": "… #3511\n\nSigned-off-by: Andrii Soldatenko <andrii.soldatenko@dynatrace.com>",
          "is_bot": false,
          "headline": "Added support for configuring array values with environment variables…",
          "author_name": "Andrii Soldatenko",
          "author_login": "andriisoldatenko",
          "committed_at": "2023-07-16T19:01:29Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "003dd5aaa1f37ae25dc55bbad01ae1b987184044",
          "body": "Added support for specifying ACME-server by using REGISTRY_HTTP_TLS_LETSENCRYPT_DIRECTORYURL",
          "is_bot": false,
          "headline": "Merge pull request #3942 from lavalleeale-forks/main",
          "author_name": "Milos Gajdos",
          "author_login": "milosgajdos",
          "committed_at": "2023-07-14T15:28:34Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "d5c1b39b8bfc77b74d00c8f155d977c01c1d5e80",
          "body": "Make redirect middleware can use path",
          "is_bot": false,
          "headline": "Merge pull request #3206 from takmatsu/suppurt-path-in-middleware",
          "author_name": "Milos Gajdos",
          "author_login": "milosgajdos",
          "committed_at": "2023-07-14T09:50:29Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "316e1c6b82bd2f84e3fe534254c5db7c58e42813",
          "body": "Signed-off-by: Milos Gajdos <milosthegajdos@gmail.com>",
          "is_bot": false,
          "headline": "Get rid of unnecessary import alias",
          "author_name": "Milos Gajdos",
          "author_login": "milosgajdos",
          "committed_at": "2023-07-14T09:37:42Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "a3eb956464cdfac3133987efe2ad529623e109f8",
          "body": "Signed-off-by: MATSUMOTO TAKEAKI <takeaki.matsumoto@linecorp.com>",
          "is_bot": false,
          "headline": "use path.Join() for building path",
          "author_name": "MATSUMOTO TAKEAKI",
          "author_login": "takmatsu",
          "committed_at": "2023-07-14T09:37:21Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "a1cfd267c8ff193d8b6a00a9c83a56faa346f89c",
          "body": "Signed-off-by: MATSUMOTO TAKEAKI <takeaki.matsumoto@linecorp.com>",
          "is_bot": false,
          "headline": "Make redirect middleware can use path",
          "author_name": "MATSUMOTO TAKEAKI",
          "author_login": "takmatsu",
          "committed_at": "2023-07-14T09:36:23Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "69023c7f85071b33ad61bd61f149a3d0c065aa7e",
          "body": null,
          "is_bot": false,
          "headline": "Merge pull request #3880 from wzshiming/proxy-cache-configurable",
          "author_name": "Milos Gajdos",
          "author_login": "milosgajdos",
          "committed_at": "2023-07-14T07:43:19Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "4aef4e4e845aab88361503e5070961127f0df3ed",
          "body": "Centered logo in README.md",
          "is_bot": false,
          "headline": "Merge pull request #3957 from Dancheg97/main",
          "author_name": "Hayley Swimelar",
          "author_login": "deleteriousEffect",
          "committed_at": "2023-07-13T15:12:51Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "e7b1bfb9114c71a8687cbcf4a41396b6beef65c5",
          "body": "Signed-off-by: Danila Fominykh <dancheg97@fmnx.su>",
          "is_bot": false,
          "headline": "Centered logo in README.md",
          "author_name": "Danila Fominykh",
          "author_login": null,
          "committed_at": "2023-07-13T11:32:08Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "40ef2353fa4f0ecea64e5db6b4315e69b4e37be8",
          "body": "docs: fix typo",
          "is_bot": false,
          "headline": "Merge pull request #3955 from cloud-native-team/main",
          "author_name": "Milos Gajdos",
          "author_login": "milosgajdos",
          "committed_at": "2023-07-11T08:05:20Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "dedc8fa7cc427f4bfc29c56835737286b41a06c6",
          "body": "Signed-off-by: cui fliter <imcusg@gmail.com>",
          "is_bot": false,
          "headline": "docs: fix typo",
          "author_name": "cui fliter",
          "author_login": "cuishuang",
          "committed_at": "2023-07-10T08:18:15Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "ac79c0d94a03dabb6b57bc76bfe619a25c45bc56",
          "body": "Update to golang 1.19.10",
          "is_bot": false,
          "headline": "Merge pull request #3952 from bmanuel/golang1.19.10",
          "author_name": "Wang Yan",
          "author_login": "wy65701436",
          "committed_at": "2023-07-06T06:29:36Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "bac7f02e02a1ba4b8e4a5a79a5a0b5b4055d2b9a",
          "body": null,
          "is_bot": false,
          "headline": "Merge pull request #3950 from milosgajdos/enable-build-tags",
          "author_name": "Milos Gajdos",
          "author_login": "milosgajdos",
          "committed_at": "2023-06-29T21:47:36Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "36dd5b79ca81c7d945fb701d8eb958c0e212e24c",
          "body": "This addresses CVE-2023-29402, CVE-2023-29403, CVE-2023-29404, CVE-2023-29405\nwhich were patched in 1.19.10.\n\nSigned-off-by: Ben Manuel <ben.manuel@procore.com>",
          "is_bot": false,
          "headline": "Update to golang 1.19.10",
          "author_name": "Ben Manuel",
          "author_login": "bmanuel",
          "committed_at": "2023-06-29T20:49:27Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "5cd209bd53140f5a7937776fb92dd65607c85254",
          "body": "Use docker-compose spec v3 in nginx receipt",
          "is_bot": false,
          "headline": "Merge pull request #3872 from das7pad/patch-1",
          "author_name": "Milos Gajdos",
          "author_login": "milosgajdos",
          "committed_at": "2023-06-29T18:19:25Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "6b388b1ba604bf5b970bbb41878f97cc3fc93376",
          "body": "This enables go build tags so the GCS and OSS driver support is\navailable in the binary distributed via the image build by Dockerfile.\n\nThis led to quite a few fixes in the GCS and OSS packages raised as\nwarning by golang-ci linter.\n\nSigned-off-by: Milos Gajdos <milosthegajdos@gmail.com>",
          "is_bot": false,
          "headline": "Enable Go build tags",
          "author_name": "Milos Gajdos",
          "author_login": "milosgajdos",
          "committed_at": "2023-06-28T10:41:22Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "71a6c56fbf6c24d724b50914a5108ef0a7ff98ff",
          "body": "registry/handlers/app: log healthcheck error before return",
          "is_bot": false,
          "headline": "Merge pull request #3948 from flavianmissi/log-healthcheck-error",
          "author_name": "Hayley Swimelar",
          "author_login": "deleteriousEffect",
          "committed_at": "2023-06-27T21:06:31Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "87081252bad11fad7c9232f1d3dd39dfe383b35f",
          "body": "Signed-off-by: Flavian Missi <fmissi@redhat.com>",
          "is_bot": false,
          "headline": "registry/handlers/app: log healthcheck error before return",
          "author_name": "Flavian Missi",
          "author_login": "flavianmissi",
          "committed_at": "2023-06-27T07:50:15Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "22725209e368b7c00878e82374692d05e79b1d3c",
          "body": "Fix path not found error in Azure",
          "is_bot": false,
          "headline": "Merge pull request #3936 from flavianmissi/azure-path-not-found",
          "author_name": "Milos Gajdos",
          "author_login": "milosgajdos",
          "committed_at": "2023-06-26T12:21:00Z",
          "body_truncated": false,
          "is_coding_agent": false
        }
      ],
      "releases_count": 49,
      "commits_last_year": 0,
      "latest_release_at": "2022-03-08T17:52:36Z",
      "latest_release_tag": "v2.8.1",
      "releases_from_tags": true,
      "days_since_last_push": 234,
      "active_weeks_last_year": 0,
      "days_since_latest_release": 1602,
      "mean_days_between_releases": 201.4
    },
    "community": {
      "has_readme": false,
      "has_license": false,
      "has_description": false,
      "has_contributing": false,
      "health_percentage": null,
      "has_issue_template": false,
      "has_code_of_conduct": false,
      "has_pull_request_template": false
    },
    "ecosystem": {
      "packages": [
        {
          "name": "github.com/distribution/distribution/v3",
          "exists": true,
          "license": null,
          "keywords": [],
          "ecosystem": "go",
          "matches_repo": false,
          "registry_url": "https://pkg.go.dev/github.com/distribution/distribution/v3",
          "is_deprecated": false,
          "latest_version": "v3.1.1",
          "repository_url": "https://github.com/distribution/distribution",
          "versions_count": 9,
          "total_downloads": null,
          "dependents_count": null,
          "deprecation_note": null,
          "maintainers_count": null,
          "monthly_downloads": null,
          "first_published_at": null,
          "latest_published_at": "2026-05-01T15:28:51Z",
          "latest_version_yanked": null,
          "days_since_latest_publish": 87
        }
      ]
    },
    "popularity": {
      "forks": 0,
      "stars": 0,
      "watchers": 0,
      "fork_history": {
        "days": [],
        "complete": true,
        "collected": 0,
        "total_forks": 0
      },
      "star_history": {
        "days": [],
        "complete": true,
        "collected": 0,
        "total_stars": 0,
        "collected_at": null
      },
      "open_issues_and_prs": 1
    },
    "ai_readiness": {
      "has_nix": false,
      "example_dirs": [
        "recipes"
      ],
      "has_llms_txt": false,
      "has_dockerfile": true,
      "has_mcp_signal": false,
      "bootstrap_files": [
        "Makefile",
        "vendor/github.com/felixge/httpsnoop/Makefile",
        "vendor/github.com/jmespath/go-jmespath/Makefile",
        "vendor/github.com/matttproud/golang_protobuf_extensions/pbutil/Makefile",
        "vendor/github.com/prometheus/procfs/Makefile",
        "vendor/github.com/spf13/cobra/Makefile",
        "vendor/go.opencensus.io/Makefile",
        "vendor/golang.org/x/net/http2/Makefile",
        "vendor/google.golang.org/grpc/Makefile"
      ],
      "api_schema_files": [
        "vendor/github.com/googleapis/gax-go/v2/apierror/internal/proto/custom_error.proto",
        "vendor/github.com/googleapis/gax-go/v2/apierror/internal/proto/error.proto",
        "vendor/google.golang.org/appengine/internal/app_identity/app_identity_service.proto",
        "vendor/google.golang.org/appengine/internal/base/api_base.proto",
        "vendor/google.golang.org/appengine/internal/datastore/datastore_v3.proto",
        "vendor/google.golang.org/appengine/internal/log/log_service.proto",
        "vendor/google.golang.org/appengine/internal/modules/modules_service.proto",
        "vendor/google.golang.org/appengine/internal/remote_api/remote_api.proto",
        "vendor/google.golang.org/appengine/internal/socket/socket_service.proto",
        "vendor/google.golang.org/appengine/internal/urlfetch/urlfetch_service.proto"
      ],
      "has_devcontainer": false,
      "typecheck_configs": [],
      "toolchain_manifests": [
        "go.mod"
      ],
      "largest_source_bytes": 85762,
      "source_files_sampled": 241,
      "oversized_source_files": 1,
      "agent_instruction_files": [],
      "agent_instruction_max_bytes": null
    },
    "dependencies": {
      "manifests": [
        "go.mod"
      ],
      "advisories": {
        "error": null,
        "scope": "repository_graph",
        "source": "osv",
        "findings": [
          {
            "name": "golang.org/x/crypto",
            "direct": true,
            "version": "0.7.0",
            "severity": "critical",
            "ecosystem": "go",
            "cvss_score": 10,
            "advisory_ids": [
              "GHSA-45gg-vh54-h5m9",
              "GHSA-45x7-px36-x8w8",
              "GHSA-5cgq-3rg8-m6cv",
              "GHSA-78mq-xcr3-xm33",
              "GHSA-89gr-r52h-f8rx",
              "GHSA-9m57-25v3-79x9",
              "GHSA-f5wc-c3c7-36mc",
              "GHSA-f6x5-jh6r-wrfv",
              "GHSA-hcg3-q754-cr77",
              "GHSA-j5w8-q4qc-rx2x"
            ],
            "fixed_version": "3.4.0",
            "advisory_count": 38,
            "oldest_advisory_days": 952
          },
          {
            "name": "google.golang.org/grpc",
            "direct": false,
            "version": "1.53.0",
            "severity": "critical",
            "ecosystem": "go",
            "cvss_score": 9.1,
            "advisory_ids": [
              "GHSA-hrxh-6v49-42gf",
              "GHSA-m425-mq94-257g",
              "GHSA-p77j-4mvh-x3m3",
              "GO-2023-2153",
              "GO-2026-4762",
              "GO-2026-6061"
            ],
            "fixed_version": "1.82.1",
            "advisory_count": 6,
            "oldest_advisory_days": 1005
          },
          {
            "name": "github.com/sirupsen/logrus",
            "direct": true,
            "version": "1.8.1",
            "severity": "high",
            "ecosystem": "go",
            "cvss_score": 7.5,
            "advisory_ids": [
              "GHSA-4f99-4q7p-p3gh",
              "GO-2025-4188"
            ],
            "fixed_version": "1.9.3",
            "advisory_count": 2,
            "oldest_advisory_days": 234
          },
          {
            "name": "golang.org/x/oauth2",
            "direct": true,
            "version": "0.6.0",
            "severity": "high",
            "ecosystem": "go",
            "cvss_score": 7.5,
            "advisory_ids": [
              "GHSA-6v2p-p543-phr9",
              "GO-2025-3488"
            ],
            "fixed_version": "0.27.0",
            "advisory_count": 2,
            "oldest_advisory_days": 516
          },
          {
            "name": "github.com/golang-jwt/jwt/v4",
            "direct": false,
            "version": "4.5.0",
            "severity": "high",
            "ecosystem": "go",
            "cvss_score": 7.5,
            "advisory_ids": [
              "GHSA-29wx-vh33-7x7r",
              "GHSA-mh63-6h87-95cp",
              "GO-2024-3250",
              "GO-2025-3553"
            ],
            "fixed_version": "5.2.2",
            "advisory_count": 4,
            "oldest_advisory_days": 629
          },
          {
            "name": "golang.org/x/net",
            "direct": false,
            "version": "0.8.0",
            "severity": "high",
            "ecosystem": "go",
            "cvss_score": 7.5,
            "advisory_ids": [
              "GHSA-2wrh-6pvc-2jm9",
              "GHSA-4374-p667-p6c8",
              "GHSA-4v7x-pqxf-cx7m",
              "GHSA-5cv4-jp36-h3mw",
              "GHSA-qppj-fm5r-hxr3",
              "GHSA-qxp5-gwg8-xv66",
              "GHSA-vvgc-356p-c3xw",
              "GO-2023-1988",
              "GO-2023-2102",
              "GO-2024-2687"
            ],
            "fixed_version": "12.0.2",
            "advisory_count": 23,
            "oldest_advisory_days": 1090
          },
          {
            "name": "google.golang.org/protobuf",
            "direct": false,
            "version": "1.29.1",
            "severity": "high",
            "ecosystem": "go",
            "cvss_score": 7.5,
            "advisory_ids": [
              "GHSA-8r3f-844c-mc37",
              "GO-2024-2611"
            ],
            "fixed_version": "1.33.0",
            "advisory_count": 2,
            "oldest_advisory_days": 873
          },
          {
            "name": "github.com/cyphar/filepath-securejoin",
            "direct": false,
            "version": "0.2.3",
            "severity": "moderate",
            "ecosystem": "go",
            "cvss_score": null,
            "advisory_ids": [
              "GHSA-6xv5-86q9-7xr8",
              "GO-2023-2048"
            ],
            "fixed_version": "0.2.4",
            "advisory_count": 2,
            "oldest_advisory_days": 1054
          },
          {
            "name": "github.com/aws/aws-sdk-go",
            "direct": true,
            "version": "1.44.325",
            "severity": "unknown",
            "ecosystem": "go",
            "cvss_score": null,
            "advisory_ids": [
              "GO-2022-0635",
              "GO-2022-0646"
            ],
            "fixed_version": null,
            "advisory_count": 2,
            "oldest_advisory_days": 1626
          },
          {
            "name": "github.com/klauspost/compress",
            "direct": true,
            "version": "1.16.5",
            "severity": "unknown",
            "ecosystem": "go",
            "cvss_score": null,
            "advisory_ids": [
              "GO-2026-5841"
            ],
            "fixed_version": "1.18.7",
            "advisory_count": 1,
            "oldest_advisory_days": 0
          },
          {
            "name": "golang.org/x/sys",
            "direct": false,
            "version": "0.6.0",
            "severity": "unknown",
            "ecosystem": "go",
            "cvss_score": null,
            "advisory_ids": [
              "GO-2026-5024"
            ],
            "fixed_version": "0.44.0",
            "advisory_count": 1,
            "oldest_advisory_days": 66
          },
          {
            "name": "golang.org/x/text",
            "direct": false,
            "version": "0.8.0",
            "severity": "unknown",
            "ecosystem": "go",
            "cvss_score": null,
            "advisory_ids": [
              "GO-2026-5970"
            ],
            "fixed_version": "0.39.0",
            "advisory_count": 1,
            "oldest_advisory_days": 13
          }
        ],
        "collected": true,
        "malicious": [],
        "truncated": false,
        "by_severity": {
          "high": 5,
          "unknown": 4,
          "critical": 2,
          "moderate": 1
        },
        "advisory_count": 84,
        "affected_count": 12,
        "assessed_count": 64,
        "malicious_count": 0,
        "assessed_package": null,
        "unassessed_count": 0,
        "direct_affected_count": 5
      },
      "ecosystems": [
        "go"
      ],
      "dependencies": [
        {
          "name": "cloud.google.com/go/storage",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.30.1"
        },
        {
          "name": "github.com/AdaLogics/go-fuzz-headers",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.0.0-20221103172237-443f56ff4ba8"
        },
        {
          "name": "github.com/Azure/azure-sdk-for-go/sdk/azcore",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.6.0"
        },
        {
          "name": "github.com/Azure/azure-sdk-for-go/sdk/azidentity",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.3.0"
        },
        {
          "name": "github.com/Azure/azure-sdk-for-go/sdk/storage/azblob",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.0.0"
        },
        {
          "name": "github.com/aws/aws-sdk-go",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.44.325"
        },
        {
          "name": "github.com/bshuster-repo/logrus-logstash-hook",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.0.0"
        },
        {
          "name": "github.com/docker/go-events",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.0.0-20190806004212-e31b211e4f1c"
        },
        {
          "name": "github.com/docker/go-metrics",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.0.1"
        },
        {
          "name": "github.com/docker/libtrust",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.0.0-20150114040149-fa567046d9b1"
        },
        {
          "name": "github.com/gomodule/redigo",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.8.2"
        },
        {
          "name": "github.com/gorilla/handlers",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.5.1"
        },
        {
          "name": "github.com/gorilla/mux",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.8.0"
        },
        {
          "name": "github.com/hashicorp/golang-lru/arc/v2",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v2.0.5"
        },
        {
          "name": "github.com/klauspost/compress",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.16.5"
        },
        {
          "name": "github.com/mitchellh/mapstructure",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.1.2"
        },
        {
          "name": "github.com/opencontainers/go-digest",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.0.0"
        },
        {
          "name": "github.com/opencontainers/image-spec",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.0.2"
        },
        {
          "name": "github.com/sirupsen/logrus",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.8.1"
        },
        {
          "name": "github.com/spf13/cobra",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.6.1"
        },
        {
          "name": "golang.org/x/crypto",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.7.0"
        },
        {
          "name": "golang.org/x/oauth2",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.6.0"
        },
        {
          "name": "google.golang.org/api",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.114.0"
        },
        {
          "name": "gopkg.in/check.v1",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.0.0-20201130134442-10cb98267c6c"
        },
        {
          "name": "gopkg.in/yaml.v2",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v2.4.0"
        }
      ],
      "all_dependencies": {
        "error": null,
        "source": "github-sbom",
        "packages": [
          {
            "name": "cloud.google.com/go/storage",
            "direct": true,
            "version": "1.30.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/adalogics/go-fuzz-headers",
            "direct": true,
            "version": "0.0.0-20221103172237-443f56ff4ba8",
            "ecosystem": "go"
          },
          {
            "name": "github.com/aws/aws-sdk-go",
            "direct": true,
            "version": "1.44.325",
            "ecosystem": "go"
          },
          {
            "name": "github.com/azure/azure-sdk-for-go/sdk/azcore",
            "direct": true,
            "version": "1.6.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/azure/azure-sdk-for-go/sdk/azidentity",
            "direct": true,
            "version": "1.3.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/azure/azure-sdk-for-go/sdk/storage/azblob",
            "direct": true,
            "version": "1.0.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/bshuster-repo/logrus-logstash-hook",
            "direct": true,
            "version": "1.0.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/docker/go-events",
            "direct": true,
            "version": "0.0.0-20190806004212-e31b211e4f1c",
            "ecosystem": "go"
          },
          {
            "name": "github.com/docker/go-metrics",
            "direct": true,
            "version": "0.0.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/docker/libtrust",
            "direct": true,
            "version": "0.0.0-20150114040149-fa567046d9b1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/gomodule/redigo",
            "direct": true,
            "version": "1.8.2",
            "ecosystem": "go"
          },
          {
            "name": "github.com/gorilla/handlers",
            "direct": true,
            "version": "1.5.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/gorilla/mux",
            "direct": true,
            "version": "1.8.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/hashicorp/golang-lru/arc/v2",
            "direct": true,
            "version": "2.0.5",
            "ecosystem": "go"
          },
          {
            "name": "github.com/klauspost/compress",
            "direct": true,
            "version": "1.16.5",
            "ecosystem": "go"
          },
          {
            "name": "github.com/mitchellh/mapstructure",
            "direct": true,
            "version": "1.1.2",
            "ecosystem": "go"
          },
          {
            "name": "github.com/opencontainers/go-digest",
            "direct": true,
            "version": "1.0.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/opencontainers/image-spec",
            "direct": true,
            "version": "1.0.2",
            "ecosystem": "go"
          },
          {
            "name": "github.com/sirupsen/logrus",
            "direct": true,
            "version": "1.8.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/spf13/cobra",
            "direct": true,
            "version": "1.6.1",
            "ecosystem": "go"
          },
          {
            "name": "golang.org/x/crypto",
            "direct": true,
            "version": "0.7.0",
            "ecosystem": "go"
          },
          {
            "name": "golang.org/x/oauth2",
            "direct": true,
            "version": "0.6.0",
            "ecosystem": "go"
          },
          {
            "name": "google.golang.org/api",
            "direct": true,
            "version": "0.114.0",
            "ecosystem": "go"
          },
          {
            "name": "gopkg.in/check.v1",
            "direct": true,
            "version": "1.0.0-20201130134442-10cb98267c6c",
            "ecosystem": "go"
          },
          {
            "name": "gopkg.in/yaml.v2",
            "direct": true,
            "version": "2.4.0",
            "ecosystem": "go"
          },
          {
            "name": "cloud.google.com/go",
            "direct": false,
            "version": "0.110.0",
            "ecosystem": "go"
          },
          {
            "name": "cloud.google.com/go/compute",
            "direct": false,
            "version": "1.18.0",
            "ecosystem": "go"
          },
          {
            "name": "cloud.google.com/go/compute/metadata",
            "direct": false,
            "version": "0.2.3",
            "ecosystem": "go"
          },
          {
            "name": "cloud.google.com/go/iam",
            "direct": false,
            "version": "0.12.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/azure/azure-sdk-for-go/sdk/internal",
            "direct": false,
            "version": "1.3.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/azuread/microsoft-authentication-library-for-go",
            "direct": false,
            "version": "1.0.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/beorn7/perks",
            "direct": false,
            "version": "1.0.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/cespare/xxhash/v2",
            "direct": false,
            "version": "2.2.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/cyphar/filepath-securejoin",
            "direct": false,
            "version": "0.2.3",
            "ecosystem": "go"
          },
          {
            "name": "github.com/felixge/httpsnoop",
            "direct": false,
            "version": "1.0.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/golang-jwt/jwt/v4",
            "direct": false,
            "version": "4.5.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/golang/groupcache",
            "direct": false,
            "version": "0.0.0-20200121045136-8c9f03a8e57e",
            "ecosystem": "go"
          },
          {
            "name": "github.com/golang/protobuf",
            "direct": false,
            "version": "1.5.2",
            "ecosystem": "go"
          },
          {
            "name": "github.com/google/go-cmp",
            "direct": false,
            "version": "0.5.9",
            "ecosystem": "go"
          },
          {
            "name": "github.com/google/uuid",
            "direct": false,
            "version": "1.3.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/googleapis/enterprise-certificate-proxy",
            "direct": false,
            "version": "0.2.3",
            "ecosystem": "go"
          },
          {
            "name": "github.com/googleapis/gax-go/v2",
            "direct": false,
            "version": "2.7.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/hashicorp/golang-lru/v2",
            "direct": false,
            "version": "2.0.5",
            "ecosystem": "go"
          },
          {
            "name": "github.com/inconshreveable/mousetrap",
            "direct": false,
            "version": "1.0.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/jmespath/go-jmespath",
            "direct": false,
            "version": "0.4.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/kr/pretty",
            "direct": false,
            "version": "0.2.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/kr/text",
            "direct": false,
            "version": "0.2.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/kylelemons/godebug",
            "direct": false,
            "version": "1.1.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/matttproud/golang_protobuf_extensions",
            "direct": false,
            "version": "1.0.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/pkg/browser",
            "direct": false,
            "version": "0.0.0-20210911075715-681adbf594b8",
            "ecosystem": "go"
          },
          {
            "name": "github.com/prometheus/client_golang",
            "direct": false,
            "version": "1.12.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/prometheus/client_model",
            "direct": false,
            "version": "0.2.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/prometheus/common",
            "direct": false,
            "version": "0.32.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/prometheus/procfs",
            "direct": false,
            "version": "0.7.3",
            "ecosystem": "go"
          },
          {
            "name": "github.com/spf13/pflag",
            "direct": false,
            "version": "1.0.5",
            "ecosystem": "go"
          },
          {
            "name": "go.opencensus.io",
            "direct": false,
            "version": "0.24.0",
            "ecosystem": "go"
          },
          {
            "name": "golang.org/x/net",
            "direct": false,
            "version": "0.8.0",
            "ecosystem": "go"
          },
          {
            "name": "golang.org/x/sys",
            "direct": false,
            "version": "0.6.0",
            "ecosystem": "go"
          },
          {
            "name": "golang.org/x/text",
            "direct": false,
            "version": "0.8.0",
            "ecosystem": "go"
          },
          {
            "name": "golang.org/x/xerrors",
            "direct": false,
            "version": "0.0.0-20220907171357-04be3eba64a2",
            "ecosystem": "go"
          },
          {
            "name": "google.golang.org/appengine",
            "direct": false,
            "version": "1.6.7",
            "ecosystem": "go"
          },
          {
            "name": "google.golang.org/genproto",
            "direct": false,
            "version": "0.0.0-20230320184635-7606e756e683",
            "ecosystem": "go"
          },
          {
            "name": "google.golang.org/grpc",
            "direct": false,
            "version": "1.53.0",
            "ecosystem": "go"
          },
          {
            "name": "google.golang.org/protobuf",
            "direct": false,
            "version": "1.29.1",
            "ecosystem": "go"
          }
        ],
        "collected": true,
        "truncated": false,
        "total_count": 64,
        "direct_count": 25,
        "indirect_count": 39
      }
    },
    "maintainership": {
      "issues": {
        "open_prs": 1,
        "merged_prs": 0,
        "open_issues": 0,
        "closed_ratio": null,
        "closed_issues": 0,
        "closed_unmerged_prs": 0
      },
      "bus_factor": 3,
      "bot_contributors": 0,
      "top_contributors": [
        {
          "type": "User",
          "login": "stevvooe",
          "commits": 957,
          "avatar_url": "https://avatars.githubusercontent.com/u/120601?v=4"
        },
        {
          "type": "User",
          "login": "dmcgowan",
          "commits": 465,
          "avatar_url": "https://avatars.githubusercontent.com/u/169601?v=4"
        },
        {
          "type": "User",
          "login": "milosgajdos",
          "commits": 181,
          "avatar_url": "https://avatars.githubusercontent.com/u/1392526?v=4"
        },
        {
          "type": "User",
          "login": "BrianBland",
          "commits": 143,
          "avatar_url": "https://avatars.githubusercontent.com/u/2295742?v=4"
        },
        {
          "type": "User",
          "login": "thaJeztah",
          "commits": 138,
          "avatar_url": "https://avatars.githubusercontent.com/u/1804568?v=4"
        },
        {
          "type": "User",
          "login": "lebauce",
          "commits": 68,
          "avatar_url": "https://avatars.githubusercontent.com/u/28005?v=4"
        },
        {
          "type": "User",
          "login": "crosbymichael",
          "commits": 48,
          "avatar_url": "https://avatars.githubusercontent.com/u/749551?v=4"
        },
        {
          "type": "User",
          "login": "tiborvass",
          "commits": 41,
          "avatar_url": "https://avatars.githubusercontent.com/u/827131?v=4"
        },
        {
          "type": "User",
          "login": "vieux",
          "commits": 39,
          "avatar_url": "https://avatars.githubusercontent.com/u/1032519?v=4"
        },
        {
          "type": "User",
          "login": "creack",
          "commits": 39,
          "avatar_url": "https://avatars.githubusercontent.com/u/521701?v=4"
        }
      ],
      "contributors_sampled": 100,
      "top_contributor_share": 0.31
    },
    "quality_signals": {
      "has_ci": true,
      "has_tests": true,
      "ci_workflows": [
        "build.yml",
        "codeql-analysis.yml",
        "conformance.yml",
        "e2e.yml",
        "fossa.yml",
        "scorecards.yml",
        "validate.yml"
      ],
      "has_docs_dir": true,
      "linter_configs": [
        ".golangci.yml"
      ],
      "has_editorconfig": false,
      "has_linter_config": true,
      "has_precommit_config": false
    },
    "security_signals": {
      "lockfiles": [
        "go.sum"
      ],
      "scorecard": {
        "checks": [
          {
            "name": "Binary-Artifacts",
            "score": 10,
            "reason": "no binaries found in the repo",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#binary-artifacts"
          },
          {
            "name": "Branch-Protection",
            "score": 1,
            "reason": "branch protection is not maximal on development and all release branches",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#branch-protection"
          },
          {
            "name": "CI-Tests",
            "score": null,
            "reason": "no pull request found",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#ci-tests"
          },
          {
            "name": "CII-Best-Practices",
            "score": 0,
            "reason": "no effort to earn an OpenSSF best practices badge detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#cii-best-practices"
          },
          {
            "name": "Code-Review",
            "score": 0,
            "reason": "Found 0/30 approved changesets -- score normalized to 0",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#code-review"
          },
          {
            "name": "Contributors",
            "score": 10,
            "reason": "project has 59 contributing companies or organizations",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#contributors"
          },
          {
            "name": "Dangerous-Workflow",
            "score": 10,
            "reason": "no dangerous workflow patterns detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dangerous-workflow"
          },
          {
            "name": "Dependency-Update-Tool",
            "score": 0,
            "reason": "no update tool detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dependency-update-tool"
          },
          {
            "name": "Fuzzing",
            "score": 10,
            "reason": "project is fuzzed",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#fuzzing"
          },
          {
            "name": "License",
            "score": 10,
            "reason": "license file detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#license"
          },
          {
            "name": "Maintained",
            "score": 0,
            "reason": "0 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#maintained"
          },
          {
            "name": "Packaging",
            "score": null,
            "reason": "packaging workflow not detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#packaging"
          },
          {
            "name": "Pinned-Dependencies",
            "score": 1,
            "reason": "dependency not pinned by hash detected -- score normalized to 1",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#pinned-dependencies"
          },
          {
            "name": "SAST",
            "score": 10,
            "reason": "SAST tool detected: CodeQL",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#sast"
          },
          {
            "name": "Security-Policy",
            "score": 10,
            "reason": "security policy file detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#security-policy"
          },
          {
            "name": "Signed-Releases",
            "score": null,
            "reason": "no releases found",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#signed-releases"
          },
          {
            "name": "Token-Permissions",
            "score": 10,
            "reason": "GitHub workflow tokens follow principle of least privilege",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#token-permissions"
          },
          {
            "name": "Vulnerabilities",
            "score": 0,
            "reason": "55 existing vulnerabilities detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#vulnerabilities"
          }
        ],
        "commit": "4f7424c8eb41431f4ec893ba75d808acc9f4e103",
        "ran_at": "2026-07-27T19:32:06Z",
        "aggregate_score": 5.1,
        "scorecard_version": "v5.5.0"
      },
      "has_codeql_workflow": true,
      "has_security_policy": true,
      "has_dependabot_config": false
    },
    "contribution_flow": {
      "collected": true,
      "ci_last_run_at": "2026-07-23T13:13:03Z",
      "oldest_open_prs": [
        {
          "number": 1,
          "created_at": "2025-12-05T14:14:42Z",
          "last_comment_at": null,
          "last_comment_author": null
        }
      ],
      "last_merged_pr_at": null,
      "ci_last_conclusion": "SUCCESS",
      "oldest_open_issues": []
    }
  },
  "config": {
    "disabled_metrics": [],
    "disabled_categories": [],
    "disabled_components": {}
  },
  "source": {
    "url": "https://github.com/rocketsciencegg/distribution",
    "host": "github.com",
    "name": "distribution",
    "owner": "rocketsciencegg"
  },
  "metrics": {
    "overall": {
      "key": "overall",
      "band": "critical",
      "name": "Overall health",
      "note": "Abandonment Policy applies a 60% multiplier to weighted overall health and gives it a ceiling of 49.",
      "notes": [
        {
          "code": "abandonment_overall_adjustment",
          "params": {
            "cap": 49,
            "pct": 60
          }
        }
      ],
      "value": 22,
      "inputs": {
        "security": 48,
        "vitality": 15,
        "community": 12,
        "governance": 47,
        "engineering": 62,
        "abandonment_cap": 49,
        "abandonment_state": "likely_abandoned",
        "abandonment_multiplier": 60,
        "weighted_overall_before_abandonment": 37,
        "overall_after_abandonment_multiplier": 22
      },
      "components": []
    },
    "categories": [
      {
        "key": "vitality",
        "band": "critical",
        "name": "Vitality",
        "value": 15,
        "weight": 0.22,
        "metrics": [
          {
            "key": "development_activity",
            "band": "critical",
            "name": "Development activity",
            "note": null,
            "notes": [],
            "value": 4,
            "inputs": {
              "commits_last_year": 0,
              "human_commit_share": 1,
              "days_since_last_push": 234,
              "active_weeks_last_year": 0
            },
            "components": [
              {
                "key": "push_recency",
                "name": "Push recency",
                "detail": "last push 234 days ago",
                "points": 3.6,
                "status": "partial",
                "details": [
                  {
                    "code": "push_recency",
                    "params": {
                      "days": 234
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "commit_cadence",
                "name": "Commit cadence",
                "detail": "0/52 weeks with commits",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "commit_cadence_weeks",
                    "params": {
                      "weeks": 0
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "commit_volume",
                "name": "Commit volume",
                "detail": "0 commits in the last year",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "commits_last_year",
                    "params": {
                      "count": 0
                    }
                  }
                ],
                "max_points": 18
              },
              {
                "key": "openssf_scorecard_maintained",
                "name": "OpenSSF Scorecard: Maintained",
                "detail": "0 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "release_discipline",
            "band": "at_risk",
            "name": "Release discipline",
            "note": "Excluded from scoring (no data or not applicable): OpenSSF Scorecard: Signed-Releases. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "openssf_scorecard_signed_releases"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 32,
            "inputs": {
              "releases_count": 49,
              "latest_release_tag": "v2.8.1",
              "releases_from_tags": true,
              "days_since_latest_release": 1602,
              "mean_days_between_releases": 201.4
            },
            "components": [
              {
                "key": "ships_releases",
                "name": "Ships releases",
                "detail": "49 version tags (no GitHub releases)",
                "points": 16.2,
                "status": "partial",
                "details": [
                  {
                    "code": "version_tags_no_releases",
                    "params": {
                      "count": 49
                    }
                  }
                ],
                "max_points": 27
              },
              {
                "key": "release_recency",
                "name": "Release recency",
                "detail": "latest release 1602 days ago",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "release_recency",
                    "params": {
                      "days": 1602
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "release_cadence",
                "name": "Release cadence",
                "detail": "a release every ~201.4 days",
                "points": 12.6,
                "status": "partial",
                "details": [
                  {
                    "code": "release_cadence",
                    "params": {
                      "gap": 201.4
                    }
                  }
                ],
                "max_points": 27
              },
              {
                "key": "openssf_scorecard_signed_releases",
                "name": "OpenSSF Scorecard: Signed-Releases",
                "detail": "no releases found",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 10
              }
            ]
          },
          {
            "key": "abandonment",
            "band": "moderate",
            "name": "Abandonment",
            "note": null,
            "notes": [],
            "value": 60,
            "inputs": {
              "cap": 49,
              "state": "likely_abandoned",
              "guards": [],
              "signals": [
                "unfixed_advisory",
                "release_stall",
                "scorecard_unmaintained"
              ],
              "red_flag": true,
              "multiplier_pct": 60,
              "declared_reason": null,
              "unverified_reason": null,
              "unanswered_open_prs": 1,
              "unanswered_open_issues": 0,
              "days_since_last_merged_pr": null,
              "days_since_last_human_commit": 1069,
              "days_since_last_human_commit_is_floor": false
            },
            "components": [
              {
                "key": "project_is_still_maintained",
                "name": "Project is still maintained",
                "detail": "no human commit for 1069 days; 3 unmet obligation(s): a fixed advisory left unapplied, releases stalled, Scorecard reports it unmaintained",
                "points": 60,
                "status": "partial",
                "details": [
                  {
                    "code": "abandonment_flagged",
                    "params": {
                      "days": 1069,
                      "count": 3,
                      "signals": "a fixed advisory left unapplied, releases stalled, Scorecard reports it unmaintained"
                    }
                  }
                ],
                "max_points": 100
              }
            ]
          }
        ],
        "description": "Is the project alive — is code being written and are releases shipping?"
      },
      {
        "key": "community",
        "band": "critical",
        "name": "Community & Adoption",
        "value": 12,
        "weight": 0.18,
        "metrics": [
          {
            "key": "popularity",
            "band": "critical",
            "name": "Popularity & adoption",
            "note": null,
            "notes": [],
            "value": 1,
            "inputs": {
              "forks": 0,
              "stars": 0,
              "watchers": 0,
              "growth_state": "unverified",
              "growth_factor_pct": 100,
              "growth_unverified_reason": "no_history"
            },
            "components": [
              {
                "key": "stars",
                "name": "Stars",
                "detail": "0 stars",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "stars",
                    "params": {
                      "count": 0
                    }
                  }
                ],
                "max_points": 60
              },
              {
                "key": "forks",
                "name": "Forks",
                "detail": "0 forks",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "forks",
                    "params": {
                      "count": 0
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "watchers",
                "name": "Watchers",
                "detail": "0 watchers",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "watchers",
                    "params": {
                      "count": 0
                    }
                  }
                ],
                "max_points": 15
              }
            ]
          },
          {
            "key": "community_health",
            "band": "critical",
            "name": "Community health",
            "note": null,
            "notes": [],
            "value": 25,
            "inputs": {
              "has_readme": false,
              "has_license": false,
              "has_contributing": false,
              "has_issue_template": false,
              "has_code_of_conduct": false,
              "has_pull_request_template": false
            },
            "components": [
              {
                "key": "readme",
                "name": "README",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 22.5
              },
              {
                "key": "license",
                "name": "License",
                "detail": "recognized license (Apache-2.0)",
                "points": 22.5,
                "status": "met",
                "details": [
                  {
                    "code": "license_standard",
                    "params": {}
                  },
                  {
                    "code": "license_spdx",
                    "params": {
                      "spdx": "Apache-2.0"
                    }
                  }
                ],
                "max_points": 22.5
              },
              {
                "key": "contributing_guide",
                "name": "CONTRIBUTING guide",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 18
              },
              {
                "key": "code_of_conduct",
                "name": "Code of conduct",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 13.5
              },
              {
                "key": "issue_template",
                "name": "Issue template",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.2
              },
              {
                "key": "pr_template",
                "name": "PR template",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 6.3
              }
            ]
          }
        ],
        "description": "Does the project have users, downloads, attention, and a welcoming setup for contributors?"
      },
      {
        "key": "governance",
        "band": "at_risk",
        "name": "Sustainability & Governance",
        "value": 47,
        "weight": 0.24,
        "metrics": [
          {
            "key": "maintainer_resilience",
            "band": "good",
            "name": "Maintainer resilience (bus factor)",
            "note": null,
            "notes": [],
            "value": 75,
            "inputs": {
              "bus_factor": 3,
              "contributors_sampled": 100,
              "top_contributor_share": 0.31
            },
            "components": [
              {
                "key": "bus_factor",
                "name": "Bus factor",
                "detail": "3 contributor(s) cover half of all commits",
                "points": 36,
                "status": "partial",
                "details": [
                  {
                    "code": "bus_factor",
                    "params": {
                      "count": 3
                    }
                  }
                ],
                "max_points": 54
              },
              {
                "key": "commit_distribution",
                "name": "Commit distribution",
                "detail": "top contributor authored 31% of commits",
                "points": 15.5,
                "status": "partial",
                "details": [
                  {
                    "code": "top_contributor_share",
                    "params": {
                      "share": 31
                    }
                  }
                ],
                "max_points": 22.5
              },
              {
                "key": "contributor_breadth",
                "name": "Contributor breadth",
                "detail": "100 contributors",
                "points": 13.5,
                "status": "met",
                "details": [
                  {
                    "code": "contributors_sampled",
                    "params": {
                      "count": 100
                    }
                  }
                ],
                "max_points": 13.5
              },
              {
                "key": "openssf_scorecard_contributors",
                "name": "OpenSSF Scorecard: Contributors",
                "detail": "project has 59 contributing companies or organizations",
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "responsiveness",
            "band": "critical",
            "name": "Issue & PR responsiveness",
            "note": "Excluded from scoring (no data or not applicable): Issue resolution, PR acceptance. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "issue_resolution",
                    "pr_acceptance"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 1,
            "inputs": {
              "merged_prs": 0,
              "open_issues": 0,
              "closed_issues": 0,
              "issue_closed_ratio": null,
              "closed_unmerged_prs": 0
            },
            "components": [
              {
                "key": "issue_resolution",
                "name": "Issue resolution",
                "detail": "no issues or no data",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_issues_or_data",
                    "params": {}
                  }
                ],
                "max_points": 46.75
              },
              {
                "key": "pr_acceptance",
                "name": "PR acceptance",
                "detail": "no decided pull requests or no data",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_decided_prs_or_data",
                    "params": {}
                  }
                ],
                "max_points": 38.25
              },
              {
                "key": "openssf_scorecard_code_review",
                "name": "OpenSSF Scorecard: Code-Review",
                "detail": "Found 0/30 approved changesets -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 15
              }
            ]
          },
          {
            "key": "stewardship",
            "band": "moderate",
            "name": "Ownership & stewardship",
            "note": null,
            "notes": [],
            "value": 60,
            "inputs": {
              "followers": 30,
              "owner_type": "Organization",
              "is_verified": null,
              "owner_login": "rocketsciencegg",
              "public_repos": 24,
              "account_age_days": 1713
            },
            "components": [
              {
                "key": "ownership_backing",
                "name": "Ownership backing",
                "detail": "organization-owned",
                "points": 30,
                "status": "met",
                "details": [
                  {
                    "code": "owner_organization",
                    "params": {}
                  }
                ],
                "max_points": 30
              },
              {
                "key": "verified_domain",
                "name": "Verified domain",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 20
              },
              {
                "key": "owner_reach",
                "name": "Owner reach",
                "detail": "30 followers of rocketsciencegg",
                "points": 10.7,
                "status": "partial",
                "details": [
                  {
                    "code": "owner_followers",
                    "params": {
                      "count": 30,
                      "login": "rocketsciencegg"
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "track_record",
                "name": "Track record",
                "detail": "24 public repos, account ~4 yr old",
                "points": 19.6,
                "status": "partial",
                "details": [
                  {
                    "code": "public_repos",
                    "params": {
                      "count": 24
                    }
                  },
                  {
                    "code": "account_age_years",
                    "params": {
                      "years": 4
                    }
                  }
                ],
                "max_points": 25
              }
            ]
          }
        ],
        "description": "Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?"
      },
      {
        "key": "engineering",
        "band": "moderate",
        "name": "Engineering Quality",
        "value": 62,
        "weight": 0.2,
        "metrics": [
          {
            "key": "engineering_practices",
            "band": "good",
            "name": "Engineering practices",
            "note": "Excluded from scoring (no data or not applicable): OpenSSF Scorecard: CI-Tests. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "openssf_scorecard_ci_tests"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 80,
            "inputs": {
              "has_ci": true,
              "has_tests": true,
              "has_editorconfig": false,
              "has_linter_config": true,
              "has_precommit_config": false
            },
            "components": [
              {
                "key": "ci_workflows",
                "name": "CI workflows",
                "detail": "7 workflow(s)",
                "points": 24,
                "status": "met",
                "details": [
                  {
                    "code": "ci_workflows",
                    "params": {
                      "count": 7
                    }
                  }
                ],
                "max_points": 24
              },
              {
                "key": "tests_present",
                "name": "Tests present",
                "detail": null,
                "points": 24,
                "status": "met",
                "details": [],
                "max_points": 24
              },
              {
                "key": "linter_config",
                "name": "Linter config",
                "detail": ".golangci.yml",
                "points": 16,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": ".golangci.yml"
                    }
                  }
                ],
                "max_points": 16
              },
              {
                "key": "pre_commit_hooks",
                "name": "Pre-commit hooks",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 9.6
              },
              {
                "key": "editorconfig",
                "name": ".editorconfig",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 6.4
              },
              {
                "key": "openssf_scorecard_ci_tests",
                "name": "OpenSSF Scorecard: CI-Tests",
                "detail": "no pull request found",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 20
              }
            ]
          },
          {
            "key": "documentation",
            "band": "at_risk",
            "name": "Documentation",
            "note": null,
            "notes": [],
            "value": 35,
            "inputs": {
              "topics": [],
              "has_wiki": true,
              "homepage": null,
              "has_readme": false,
              "has_docs_dir": true,
              "has_description": false
            },
            "components": [
              {
                "key": "readme",
                "name": "README",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 30
              },
              {
                "key": "documentation_directory",
                "name": "Documentation directory",
                "detail": null,
                "points": 25,
                "status": "met",
                "details": [],
                "max_points": 25
              },
              {
                "key": "documentation_homepage_site",
                "name": "Documentation / homepage site",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 15
              },
              {
                "key": "repository_description",
                "name": "Repository description",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              },
              {
                "key": "topics",
                "name": "Topics",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              },
              {
                "key": "wiki",
                "name": "Wiki",
                "detail": null,
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              }
            ]
          }
        ],
        "description": "Are baseline engineering and documentation practices in place?"
      },
      {
        "key": "security",
        "band": "at_risk",
        "name": "Security",
        "value": 48,
        "weight": 0.16,
        "metrics": [
          {
            "key": "security_posture",
            "band": "moderate",
            "name": "Security posture",
            "note": "Excluded from scoring (no data or not applicable): CI-Tests, Packaging, Signed-Releases. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "ci_tests",
                    "packaging",
                    "signed_releases"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 51,
            "inputs": {
              "source": "openssf_scorecard",
              "checks_evaluated": 15,
              "scorecard_version": "v5.5.0",
              "checks_inconclusive": 3,
              "scorecard_aggregate": 5.1
            },
            "components": [
              {
                "key": "binary_artifacts",
                "name": "Binary-Artifacts",
                "detail": "no binaries found in the repo",
                "points": 7.5,
                "status": "met",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "branch_protection",
                "name": "Branch-Protection",
                "detail": "branch protection is not maximal on development and all release branches",
                "points": 0.8,
                "status": "partial",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "ci_tests",
                "name": "CI-Tests",
                "detail": "no pull request found",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 2.5
              },
              {
                "key": "cii_best_practices",
                "name": "CII-Best-Practices",
                "detail": "no effort to earn an OpenSSF best practices badge detected",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "code_review",
                "name": "Code-Review",
                "detail": "Found 0/30 approved changesets -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "contributors",
                "name": "Contributors",
                "detail": "project has 59 contributing companies or organizations",
                "points": 2.5,
                "status": "met",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "dangerous_workflow",
                "name": "Dangerous-Workflow",
                "detail": "no dangerous workflow patterns detected",
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              },
              {
                "key": "dependency_update_tool",
                "name": "Dependency-Update-Tool",
                "detail": "no update tool detected",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "fuzzing",
                "name": "Fuzzing",
                "detail": "project is fuzzed",
                "points": 5,
                "status": "met",
                "details": [],
                "max_points": 5
              },
              {
                "key": "license",
                "name": "License",
                "detail": "license file detected",
                "points": 2.5,
                "status": "met",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "maintained",
                "name": "Maintained",
                "detail": "0 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "packaging",
                "name": "Packaging",
                "detail": "packaging workflow not detected",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 5
              },
              {
                "key": "pinned_dependencies",
                "name": "Pinned-Dependencies",
                "detail": "dependency not pinned by hash detected -- score normalized to 1",
                "points": 0.5,
                "status": "partial",
                "details": [],
                "max_points": 5
              },
              {
                "key": "sast",
                "name": "SAST",
                "detail": "SAST tool detected: CodeQL",
                "points": 5,
                "status": "met",
                "details": [],
                "max_points": 5
              },
              {
                "key": "security_policy",
                "name": "Security-Policy",
                "detail": "security policy file detected",
                "points": 5,
                "status": "met",
                "details": [],
                "max_points": 5
              },
              {
                "key": "signed_releases",
                "name": "Signed-Releases",
                "detail": "no releases found",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 7.5
              },
              {
                "key": "token_permissions",
                "name": "Token-Permissions",
                "detail": "GitHub workflow tokens follow principle of least privilege",
                "points": 7.5,
                "status": "met",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "vulnerabilities",
                "name": "Vulnerabilities",
                "detail": "55 existing vulnerabilities detected",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              }
            ]
          },
          {
            "key": "dependency_advisories",
            "band": "at_risk",
            "name": "Dependency advisories",
            "note": "Excluded from scoring (no data or not applicable): Indirect dependencies free of known advisories. Remaining weights renormalized. Matched 64 resolved dependencies against OSV. This repository publishes no package the index resolves, so the repository dependency graph was assessed instead. That graph mixes development and test pins with shipped dependencies, so only the declared runtime dependencies are scored; transitive findings are reported as context and excluded from the score. Reachability is not analyzed.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "indirect_dependencies_free_of_known_advisories"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              },
              {
                "code": "advisories_scope_repository",
                "params": {
                  "assessed": 64
                }
              },
              {
                "code": "advisories_repo_graph_caveat",
                "params": {}
              },
              {
                "code": "advisories_reachability",
                "params": {}
              }
            ],
            "value": 37,
            "inputs": {
              "source": "osv",
              "advisories": 84,
              "affected_packages": 12,
              "assessed_packages": 64,
              "unassessed_packages": 0,
              "affected_by_severity": "critical 2, high 5, moderate 1, unknown 4",
              "direct_affected_packages": 5
            },
            "components": [
              {
                "key": "direct_dependencies_free_of_known_advisories",
                "name": "Direct dependencies free of known advisories",
                "detail": "5 affected: golang.org/x/crypto 0.7.0 (critical 10.0), github.com/sirupsen/logrus 1.8.1 (high 7.5), golang.org/x/oauth2 0.6.0 (high 7.5), +2 more",
                "points": 4.6,
                "status": "partial",
                "details": [
                  {
                    "code": "advisories_affected",
                    "params": {
                      "count": 5,
                      "packages": "golang.org/x/crypto 0.7.0 (critical 10.0), github.com/sirupsen/logrus 1.8.1 (high 7.5), golang.org/x/oauth2 0.6.0 (high 7.5)"
                    }
                  },
                  {
                    "code": "advisories_affected_more",
                    "params": {
                      "count": 2
                    }
                  }
                ],
                "max_points": 35
              },
              {
                "key": "indirect_dependencies_free_of_known_advisories",
                "name": "Indirect dependencies free of known advisories",
                "detail": "transitive set not separable from development and test dependencies in this scope",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "advisories_scope_not_separable",
                    "params": {}
                  }
                ],
                "max_points": 25
              },
              {
                "key": "no_advisories_left_outstanding",
                "name": "No advisories left outstanding",
                "detail": "4 advisory-carrying package(s) unaddressed past 90 days; oldest published 1626 days ago",
                "points": 23.5,
                "status": "partial",
                "details": [
                  {
                    "code": "advisories_stale",
                    "params": {
                      "days": 90,
                      "count": 4,
                      "oldest": 1626
                    }
                  }
                ],
                "max_points": 40
              }
            ]
          },
          {
            "key": "malicious_dependencies",
            "band": "excellent",
            "name": "Malicious dependencies",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "source": "osv",
              "meaning": "reported as a malicious package by the OpenSSF corpus; the remedy is removal or moving off the compromised name, never an upgrade of the same artifact. Versions the registry has since pulled are listed but not scored",
              "packages": [],
              "red_flag": false,
              "assessed_packages": 64,
              "malicious_packages": 0,
              "direct_malicious_packages": 0,
              "withdrawn_malicious_packages": 0,
              "installable_malicious_packages": 0
            },
            "components": [
              {
                "key": "no_dependency_reported_as_a_malicious_package",
                "name": "No dependency reported as a malicious package",
                "detail": "no dependency is reported as a malicious package",
                "points": 100,
                "status": "met",
                "details": [
                  {
                    "code": "no_malicious_dependencies",
                    "params": {}
                  }
                ],
                "max_points": 100
              }
            ]
          },
          {
            "key": "high_risk_jurisdiction_exposure",
            "band": "excellent",
            "name": "High-Risk Jurisdiction Exposure",
            "note": "Only high-confidence self-published location evidence affects this multiplier. Ambiguous matches are review-only; country evidence is not proof of nationality, citizenship, legal registration, malicious intent, or sanctions status.",
            "notes": [
              {
                "code": "jurisdiction_evidence_limits",
                "params": {}
              }
            ],
            "value": 100,
            "inputs": {
              "meaning": "self-published location evidence; not nationality or citizenship",
              "red_flag": false,
              "exposures": [],
              "policy_countries": [
                "Russia",
                "Iran",
                "North Korea"
              ],
              "review_only_matches": 0,
              "assessed_self_published_locations": 12
            },
            "components": [
              {
                "key": "policy_exposure_multiplier",
                "name": "Policy exposure multiplier",
                "detail": "no confirmed policy-scope location match",
                "points": 100,
                "status": "met",
                "details": [
                  {
                    "code": "jurisdiction_no_match",
                    "params": {}
                  }
                ],
                "max_points": 100
              }
            ]
          }
        ],
        "description": "Are visible security and supply-chain practices strong, with no malicious dependency and no unresolved high-risk jurisdiction exposure?"
      },
      {
        "key": "ai_readiness",
        "band": "moderate",
        "name": "AI Readiness",
        "value": 68,
        "weight": 0,
        "metrics": [
          {
            "key": "ai_agent_context",
            "band": "at_risk",
            "name": "Agent context & guidance",
            "note": null,
            "notes": [],
            "value": 40,
            "inputs": {
              "has_llms_txt": false,
              "legible_history_share": 0.77,
              "agent_instruction_files": [],
              "agent_instruction_max_bytes": null
            },
            "components": [
              {
                "key": "agent_instructions",
                "name": "Agent instructions",
                "detail": "no CLAUDE.md / AGENTS.md / editor rules",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "no_agent_instructions",
                    "params": {}
                  }
                ],
                "max_points": 45
              },
              {
                "key": "machine_readable_docs_llms_txt",
                "name": "Machine-readable docs (llms.txt)",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 15
              },
              {
                "key": "legible_commit_history",
                "name": "Legible commit history",
                "detail": "77 of 100 human commits state their intent (structured subject or explanatory body)",
                "points": 40,
                "status": "met",
                "details": [
                  {
                    "code": "legible_history",
                    "params": {
                      "legible": 77,
                      "sampled": 100
                    }
                  }
                ],
                "max_points": 40
              }
            ]
          },
          {
            "key": "ai_verify_loop",
            "band": "good",
            "name": "Verify loop (build / test / typecheck)",
            "note": null,
            "notes": [],
            "value": 73,
            "inputs": {
              "has_nix": false,
              "has_tests": true,
              "lockfiles": [
                "go.sum"
              ],
              "has_dockerfile": true,
              "typed_language": true,
              "bootstrap_files": [
                "Makefile",
                "vendor/github.com/felixge/httpsnoop/Makefile",
                "vendor/github.com/jmespath/go-jmespath/Makefile",
                "vendor/github.com/matttproud/golang_protobuf_extensions/pbutil/Makefile",
                "vendor/github.com/prometheus/procfs/Makefile",
                "vendor/github.com/spf13/cobra/Makefile",
                "vendor/go.opencensus.io/Makefile",
                "vendor/golang.org/x/net/http2/Makefile",
                "vendor/google.golang.org/grpc/Makefile"
              ],
              "has_devcontainer": false,
              "has_linter_config": true,
              "typecheck_configs": [],
              "agent_commit_share": 0,
              "toolchain_manifests": [
                "go.mod"
              ],
              "dependency_bot_commit_share": 0
            },
            "components": [
              {
                "key": "one_command_bootstrap",
                "name": "One-command bootstrap",
                "detail": "Makefile, vendor/github.com/felixge/httpsnoop/Makefile, vendor/github.com/jmespath/go-jmespath/Makefile, vendor/github.com/matttproud/golang_protobuf_extensions/pbutil/Makefile, vendor/github.com/prometheus/procfs/Makefile, vendor/github.com/spf13/cobra/Makefile, vendor/go.opencensus.io/Makefile, vendor/golang.org/x/net/http2/Makefile, vendor/google.golang.org/grpc/Makefile",
                "points": 18,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "Makefile, vendor/github.com/felixge/httpsnoop/Makefile, vendor/github.com/jmespath/go-jmespath/Makefile, vendor/github.com/matttproud/golang_protobuf_extensions/pbutil/Makefile, vendor/github.com/prometheus/procfs/Makefile, vendor/github.com/spf13/cobra/Makefile, vendor/go.opencensus.io/Makefile, vendor/golang.org/x/net/http2/Makefile, vendor/google.golang.org/grpc/Makefile"
                    }
                  }
                ],
                "max_points": 18
              },
              {
                "key": "automated_tests",
                "name": "Automated tests",
                "detail": null,
                "points": 22,
                "status": "met",
                "details": [],
                "max_points": 22
              },
              {
                "key": "lint_format_config",
                "name": "Lint / format config",
                "detail": ".golangci.yml",
                "points": 11,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": ".golangci.yml"
                    }
                  }
                ],
                "max_points": 11
              },
              {
                "key": "static_type_checking",
                "name": "Static type checking",
                "detail": "Go (statically typed)",
                "points": 11,
                "status": "met",
                "details": [
                  {
                    "code": "statically_typed_language",
                    "params": {
                      "language": "Go"
                    }
                  }
                ],
                "max_points": 11
              },
              {
                "key": "reproducible_environment",
                "name": "Reproducible environment",
                "detail": "Dockerfile, lockfile",
                "points": 10,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "Dockerfile, lockfile"
                    }
                  }
                ],
                "max_points": 10
              },
              {
                "key": "demonstrated_agent_practice",
                "name": "Demonstrated agent practice",
                "detail": "no agent-authored commits among the last 100",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "no_agent_authored_commits",
                    "params": {
                      "sampled": 100
                    }
                  }
                ],
                "max_points": 10
              },
              {
                "key": "automated_maintenance",
                "name": "Automated maintenance",
                "detail": "no automated dependency updates observed",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "no_dependency_automation",
                    "params": {}
                  }
                ],
                "max_points": 8
              },
              {
                "key": "openssf_scorecard_pinned_dependencies",
                "name": "OpenSSF Scorecard: Pinned-Dependencies",
                "detail": "dependency not pinned by hash detected -- score normalized to 1",
                "points": 1,
                "status": "partial",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "ai_code_legibility",
            "band": "excellent",
            "name": "Code legibility for models",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "primary_language": "Go",
              "largest_source_bytes": 85762,
              "source_files_sampled": 241,
              "oversized_source_files": 1
            },
            "components": [
              {
                "key": "type_checkable_code",
                "name": "Type-checkable code",
                "detail": "Go (statically typed)",
                "points": 45,
                "status": "met",
                "details": [
                  {
                    "code": "statically_typed_language",
                    "params": {
                      "language": "Go"
                    }
                  }
                ],
                "max_points": 45
              },
              {
                "key": "manageable_file_sizes",
                "name": "Manageable file sizes",
                "detail": "1/241 source files over 60KB",
                "points": 54.8,
                "status": "partial",
                "details": [
                  {
                    "code": "oversized_source_files",
                    "params": {
                      "kb": 60,
                      "sampled": 241,
                      "oversized": 1
                    }
                  }
                ],
                "max_points": 55
              }
            ]
          },
          {
            "key": "ai_interfaces",
            "band": "good",
            "name": "Machine-readable interfaces",
            "note": null,
            "notes": [],
            "value": 80,
            "inputs": {
              "example_dirs": [
                "recipes"
              ],
              "has_mcp_signal": false,
              "api_schema_files": [
                "vendor/github.com/googleapis/gax-go/v2/apierror/internal/proto/custom_error.proto",
                "vendor/github.com/googleapis/gax-go/v2/apierror/internal/proto/error.proto",
                "vendor/google.golang.org/appengine/internal/app_identity/app_identity_service.proto",
                "vendor/google.golang.org/appengine/internal/base/api_base.proto",
                "vendor/google.golang.org/appengine/internal/datastore/datastore_v3.proto",
                "vendor/google.golang.org/appengine/internal/log/log_service.proto",
                "vendor/google.golang.org/appengine/internal/modules/modules_service.proto",
                "vendor/google.golang.org/appengine/internal/remote_api/remote_api.proto",
                "vendor/google.golang.org/appengine/internal/socket/socket_service.proto",
                "vendor/google.golang.org/appengine/internal/urlfetch/urlfetch_service.proto"
              ]
            },
            "components": [
              {
                "key": "api_schema_openapi_graphql_proto",
                "name": "API schema (OpenAPI/GraphQL/proto)",
                "detail": "vendor/github.com/googleapis/gax-go/v2/apierror/internal/proto/custom_error.proto, vendor/github.com/googleapis/gax-go/v2/apierror/internal/proto/error.proto, vendor/google.golang.org/appengine/internal/app_identity/app_identity_service.proto, vendor/google.golang.org/appengine/internal/base/api_base.proto, vendor/google.golang.org/appengine/internal/datastore/datastore_v3.proto, vendor/google.golang.org/appengine/internal/log/log_service.proto, vendor/google.golang.org/appengine/internal/modules/modules_service.proto, vendor/google.golang.org/appengine/internal/remote_api/remote_api.proto, vendor/google.golang.org/appengine/internal/socket/socket_service.proto, vendor/google.golang.org/appengine/internal/urlfetch/urlfetch_service.proto",
                "points": 40,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "vendor/github.com/googleapis/gax-go/v2/apierror/internal/proto/custom_error.proto, vendor/github.com/googleapis/gax-go/v2/apierror/internal/proto/error.proto, vendor/google.golang.org/appengine/internal/app_identity/app_identity_service.proto, vendor/google.golang.org/appengine/internal/base/api_base.proto, vendor/google.golang.org/appengine/internal/datastore/datastore_v3.proto, vendor/google.golang.org/appengine/internal/log/log_service.proto, vendor/google.golang.org/appengine/internal/modules/modules_service.proto, vendor/google.golang.org/appengine/internal/remote_api/remote_api.proto, vendor/google.golang.org/appengine/internal/socket/socket_service.proto, vendor/google.golang.org/appengine/internal/urlfetch/urlfetch_service.proto"
                    }
                  }
                ],
                "max_points": 40
              },
              {
                "key": "mcp_server",
                "name": "MCP server",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 20
              },
              {
                "key": "runnable_examples",
                "name": "Runnable examples",
                "detail": "recipes",
                "points": 40,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "recipes"
                    }
                  }
                ],
                "max_points": 40
              }
            ]
          }
        ],
        "description": "How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score."
      }
    ],
    "metrics_version": "1.13.0"
  },
  "warnings": [
    "Community profile unavailable",
    "go package 'github.com/distribution/distribution/v3' points at a different repository (https://github.com/distribution/distribution); excluded from ecosystem scoring"
  ],
  "report_type": "repository",
  "generated_at": "2026-07-27T19:32:25.250453Z",
  "schema_version": "0.27.0",
  "badge_url": "https://raw.githubusercontent.com/inspect-software/badges/main/v1/r/rocketsciencegg/distribution.svg",
  "full_name": "rocketsciencegg/distribution",
  "license_state": "standard",
  "license_spdx": "Apache-2.0"
}

Verwandte Einträge

Geprüfte Repositories, die Katalog-Tags oder Ökosysteme mit rocketsciencegg/distribution teilen. Nebeneinander lesen →

94wandb/wandbThe AI developer platform. Use Weights & Biases to train and fine-tune models, and manage models from experimentation to production.Exzellent93apache/airflowApache Airflow - A platform to programmatically author, schedule, and monitor workflowsExzellent92moby/mobyThe Moby Project - a collaborative project for the container ecosystem to assemble container-based systemsExzellent92envoyproxy/envoyCloud-native high-performance edge/middle/service proxyExzellent91lyft/envoyCloud-native high-performance edge/middle/service proxyExzellent91authelia/autheliaThe Single Sign-On Multi-Factor portal for web apps, now OpenID Certified™Exzellent

Bewertungen sind Signale, keine Garantien. Sie spiegeln öffentlich sichtbare Praxis auf GitHub wider — kein Code-Audit und keine Sicherheitsgarantie.

Fehlende Daten werden ausgeschlossen und die Gewichte neu normiert, nie als null bewertet. Die Methodik ist versioniert und offen: Metriken v1.13.0, Schema v0.27.0 — vollständige Methodik · Metriken-Wiki.

Wie ein einzelnes Ergebnis im Gesamtregister steht: aggregierte Statistiken — Go.