Öffentliches RegisterGefährdet
Software-GesundheitsberichtSchema 0.27.0 · Metriken 2.3.1 · 2026-08-01 02:22 UTC
vincentluan / fosite
Extensible security first OAuth 2.0 and OpenID Connect SDK for Go.
vincentluan/fosite erreicht einen Gesundheitsindex von 34 von 100 und liegt damit im Bereich Gefährdet. Am stärksten schneidet es bei AI Readiness (69/100) ab, am schwächsten bei Community & Adoption (12/100). Zuletzt vor 10 Tagen aktualisiert. 2 Mitwirkende tragen den Großteil der jüngsten Arbeit.
34
gesamt / 100Software-Gesundheitsindex
Metriken werden auf einer standardisierten Skala von 1–100 in gewichtete Kategorien gruppiert. Der Gesamtwert beginnt als ihr gewichtetes Mittel, kalibriert auf die Verteilung des öffentlichen Registers, sodass die Stufen Perzentilbedeutung tragen; sobald öffentliche Evidenz die Richtlinie für Hochrisikojurisdiktionen auslöst, wird die Bewertung angepasst und erhält die Obergrenze Gefährdet von 34.
34
Außergewöhnlich93-100Die Spitzengruppe des Registers (≈ obere 5 %); erfüllt im Wesentlichen alle geprüften Kriterien
Exzellent80-92Durchgehend stark; geringfügige Lücken
Gut65-79Gesund; Lücken sind begrenzt und beherrschbar
Mittel50-64Akzeptabel mit deutlichen Lücken; Überprüfung empfohlen
Schwach35-49Wesentliche Schwächen in mehreren Bereichen
Gefährdet20-34Erhebliche Schwächen; eine Übernahme erfordert Vorsicht
Kritisch1-19Schwerwiegende Probleme (aufgegeben, nur ein Maintainer, keine Hygiene)
Bewertungsprofil
Jede Achse ist eine Kategorie. Die Form zählt mehr als der Durchschnitt — ein gesundes Projekt füllt die gesamte Fläche, während ein Profil aus Spitzen und Kratern bedeutet, dass Stärke in einer Dimension Risiken in einer anderen verdeckt.
Der gewichtete Gesamtwert 39 wird auf der veröffentlichten Indexskala auf 34 kalibriert (Register-Kalibrierung 2026-08-02).
Eigentümerschaft
Vincent LuanPersönliches Konto
0 Follower4 öffentliche Reposseit Mai 2021Seal Commerce
Dieses Repository gehört einem persönlichen Konto. Ein Projekt mit nur einem Eigentümer trägt ein höheres Kontinuitätsrisiko als ein organisationsgetragenes.
Paket-Ökosysteme
| Registry | Paket | Version | Downloads / Monat | Versionen | Zuletzt veröffentlicht |
|---|---|---|---|---|---|
| Go | github.com/ory/fositeverweist auf ein anderes Repo — nicht bewertet | v0.49.0 | - | 158 | vor 596 Tagen |
Metriken nach Kategorie
Vitalität
Lebt das Projekt — wird Code geschrieben und werden Releases ausgeliefert?
37
Entwicklungsaktivität
29Gefährdet
Wie die Bewertung erfolgt
| 28.8/36 | Push-Aktualität — letzter Push vor 10 Tagen |
| 0/36 | Commit-Rhythmus — 0/52 Wochen mit Commits |
| 0/18 | Commit-Volumen — 0 Commits im letzten Jahr |
| 0/10 | OpenSSF Scorecard: Maintained — project was created within the last 90 days. Please review its contents carefully |
Verwendete Eingangsdaten
| commits_last_year | 0 |
| human_commit_share | 0,91 |
| days_since_last_push | 10 |
| active_weeks_last_year | 0 |
Release-Disziplin
48Schwach
Wie die Bewertung erfolgt
| 16.2/27 | Liefert Releases aus — 100 Versions-Tags (keine GitHub-Releases) |
| 7.2/36 | Release-Aktualität — letztes Release vor 596 Tagen |
| 19.8/27 | Release-Rhythmus — ein Release etwa alle 115,9 Tage |
| 0/10 | OpenSSF Scorecard: Signed-Releases — keine Daten |
Verwendete Eingangsdaten
| releases_count | 100 |
| latest_release_tag | v0.49.0 |
| releases_from_tags | ja |
| days_since_latest_release | 596 |
| mean_days_between_releases | 115,9 |
Von der Bewertung ausgeschlossen (keine Daten oder nicht anwendbar): OpenSSF Scorecard: Signed-Releases. Die verbleibenden Gewichte wurden renormalisiert.
Community & Verbreitung
Hat das Projekt Nutzer, Downloads, Aufmerksamkeit und ein einladendes Umfeld für Beitragende?
12
Popularität & Verbreitung
1Kritisch
Wie die Bewertung erfolgt
| 0/60 | Stars — 0 Stars |
| 0/25 | Forks — 0 Forks |
| 0/15 | Watcher — 0 Watcher |
Verwendete Eingangsdaten
| forks | 0 |
| stars | 0 |
| watchers | 0 |
| growth_state | unverified |
| growth_factor_pct | 100 |
| growth_unverified_reason | no_history |
Community-Gesundheit
25Gefährdet
Wie die Bewertung erfolgt
| 0/22.5 | README |
| 22.5/22.5 | Lizenz — anerkannte Lizenz (Apache-2.0) |
| 0/18 | CONTRIBUTING-Leitfaden |
| 0/13.5 | Verhaltenskodex |
| 0/7.2 | Issue-Vorlage |
| 0/6.3 | PR-Vorlage |
Verwendete Eingangsdaten
| has_readme | nein |
| has_license | nein |
| readme_badges | — |
| has_contributing | nein |
| has_issue_template | nein |
| has_code_of_conduct | nein |
| readme_badge_services | — |
| has_pull_request_template | nein |
Nachhaltigkeit & Governance
Überdauert das Projekt die Menschen, die es tragen — Bus-Faktor, Reaktionsfähigkeit, Trägerschaft und Paketpflege?
33
Wie die Bewertung erfolgt
| 25.2/54 | Bus-Faktor — 2 Beitragende decken die Hälfte aller Commits ab |
| 12.1/22.5 | Commit-Verteilung — wichtigste beitragende Person verfasste 46 % der Commits |
| 13.5/13.5 | Breite der Beitragenden — 98 Beitragende |
| 10/10 | OpenSSF Scorecard: Contributors — project has 44 contributing companies or organizations |
Verwendete Eingangsdaten
| bus_factor | 2 |
| contributors_sampled | 98 |
| top_contributor_share | 0,462 |
Reaktionsfähigkeit bei Issues & PRs
1Kritisch
Wie die Bewertung erfolgt
| 0/42 | Issue-Lösungsquote — keine Issues oder keine Daten |
| 0/30 | PR-Annahme — keine entschiedenen Pull Requests oder keine Daten |
| 0/13 | Newcomer PR acceptance — kein PR eines Erstbeitragenden in 30 Tagen entschieden |
| 0/15 | OpenSSF Scorecard: Code-Review — Found 0/30 approved changesets -- score normalized to 0 |
Verwendete Eingangsdaten
| merged_prs | 0 |
| open_issues | 0 |
| closed_issues | 0 |
| prs_merged_7d | — |
| prs_decided_7d | — |
| prs_merged_30d | — |
| prs_decided_30d | — |
| issue_closed_ratio | — |
| closed_unmerged_prs | 0 |
| first_time_authors_30d | — |
| first_time_prs_merged_30d | — |
| first_time_prs_decided_30d | — |
Von der Bewertung ausgeschlossen (keine Daten oder nicht anwendbar): Issue-Lösungsquote, PR-Annahme, newcomer_pr_acceptance. Die verbleibenden Gewichte wurden renormalisiert.
Eigentümerschaft & Trägerschaft
32Gefährdet
Wie die Bewertung erfolgt
| 10/30 | Organisatorische Trägerschaft — persönliches (Nutzer-)Konto |
| 0/20 | Verifizierte Domain — für Nutzerkonten nicht anwendbar |
| 0/25 | Reichweite des Inhabers — 0 Follower von vincentluan |
| 15.5/25 | Kontohistorie — 4 öffentliche Repos, Kontoalter ca. 5 Jahre |
Verwendete Eingangsdaten
| followers | 0 |
| owner_type | User |
| is_verified | — |
| owner_login | vincentluan |
| public_repos | 4 |
| account_age_days | 1.901 |
Von der Bewertung ausgeschlossen (keine Daten oder nicht anwendbar): Verifizierte Domain. Die verbleibenden Gewichte wurden renormalisiert.
Engineering-Qualität
Sind grundlegende Engineering- und Dokumentationspraktiken vorhanden?
64
Engineering-Praktiken
80Exzellent
Wie die Bewertung erfolgt
| 24/24 | CI-Workflows — 9 Workflow(s) |
| 24/24 | Tests vorhanden |
| 16/16 | Linter-Konfiguration — .golangci.yml |
| 0/9.6 | Pre-Commit-Hooks |
| 0/6.4 | .editorconfig |
| 0/20 | OpenSSF Scorecard: CI-Tests — keine Daten |
Verwendete Eingangsdaten
| has_ci | ja |
| has_tests | ja |
| has_editorconfig | nein |
| has_linter_config | ja |
| has_precommit_config | nein |
Von der Bewertung ausgeschlossen (keine Daten oder nicht anwendbar): OpenSSF Scorecard: CI-Tests. Die verbleibenden Gewichte wurden renormalisiert.
Dokumentation
40Schwach
Wie die Bewertung erfolgt
| 0/30 | README |
| 25/25 | Dokumentationsverzeichnis |
| 15/15 | Dokumentations-/Homepage-Site — https://www.ory.com/?utm_source=github&utm_medium=banner&utm_campaign=fosite |
| 0/10 | Repository-Beschreibung |
| 0/10 | Topics |
| 0/10 | Wiki |
Verwendete Eingangsdaten
| topics | — |
| has_wiki | nein |
| homepage | https://www.ory.com/?utm_source=github&utm_medium=banner&utm_campaign=fosite |
| has_readme | nein |
| has_docs_dir | ja |
| has_description | nein |
Sicherheit
Sind die sichtbaren Sicherheits- und Lieferkettenpraktiken belastbar, ohne ungeklärte Exposition gegenüber Hochrisikojurisdiktionen?
39
Sicherheitslage
39Schwach
Wie die Bewertung erfolgt
| 7.5/7.5 | Binary-Artifacts — no binaries found in the repo |
| 0/7.5 | Branch-Protection — branch protection not enabled on development/release branches |
| 0/2.5 | CI-Tests — keine Daten |
| 0/2.5 | CII-Best-Practices — no effort to earn an OpenSSF best practices badge detected |
| 0/7.5 | Code-Review — Found 0/30 approved changesets -- score normalized to 0 |
| 2.5/2.5 | Contributors — project has 44 contributing companies or organizations |
| 10/10 | Dangerous-Workflow — no dangerous workflow patterns detected |
| 7.5/7.5 | Dependency-Update-Tool — update tool detected |
| 0/5 | Fuzzing — project is not fuzzed |
| 2.5/2.5 | Lizenz — license file detected |
| 0/7.5 | Maintained — project was created within the last 90 days. Please review its contents carefully |
| 0/5 | Packaging — keine Daten |
| 0/5 | Pinned-Dependencies — dependency not pinned by hash detected -- score normalized to 0 |
| 0/5 | SAST — no SAST tool detected |
| 5/5 | Security-Policy — security policy file detected |
| 0/7.5 | Signed-Releases — keine Daten |
| 0/7.5 | Token-Permissions — detected GitHub workflow tokens with excessive permissions |
| 0/7.5 | Vulnerabilities — 51 existing vulnerabilities detected |
Verwendete Eingangsdaten
| source | openssf_scorecard |
| checks_evaluated | 15 |
| scorecard_version | v5.5.0 |
| checks_inconclusive | 3 |
| scorecard_aggregate | 3,9 |
Von der Bewertung ausgeschlossen (keine Daten oder nicht anwendbar): ci_tests, packaging, signed_releases. Die verbleibenden Gewichte wurden renormalisiert.
AI Readiness
Wie gut ist das Repository dafür ausgestattet, mit KI-Coding-Agenten entwickelt und gepflegt zu werden? Trägt ein bewusst kleines Gewicht (4 %): Agenten-Tooling ist ein echtes Pflegesignal, doch ein Repository ohne jedes Signal kann weiterhin 100/100 erreichen.
69
AI-Agentenkontext & Leitlinien
40Schwach
Wie die Bewertung erfolgt
| 0/45 | Agentenanweisungen — keine CLAUDE.md / AGENTS.md / Editor-Regeln |
| 0/15 | Maschinenlesbare Doku (llms.txt) |
| 40/40 | Lesbare Commit-Historie — 91 von 91 menschlichen Commits benennen ihre Absicht (strukturierter Betreff oder erläuternder Text) |
Verwendete Eingangsdaten
| has_llms_txt | nein |
| legible_history_share | 1 |
| agent_instruction_files | — |
| agent_instruction_max_bytes | — |
AI-Verify-Loop (Build / Test / Typprüfung)
80Exzellent
Wie die Bewertung erfolgt
| 18/18 | Bootstrap mit einem Befehl — Makefile |
| 22/22 | Automatisierte Tests |
| 11/11 | Lint-/Format-Konfiguration — .golangci.yml |
| 11/11 | Statische Typprüfung — Go (statisch typisiert) |
| 10/10 | Reproduzierbare Umgebung — lockfile |
| 0/10 | Belegte Agentenpraxis — keine von Agenten verfassten Commits unter den letzten 100 |
| 8/8 | Automatisierte Wartung — 9 der letzten 100 Commits sind automatisierte Abhängigkeits-Updates |
| 0/10 | OpenSSF Scorecard: Pinned-Dependencies — dependency not pinned by hash detected -- score normalized to 0 |
Verwendete Eingangsdaten
| has_nix | nein |
| has_tests | ja |
| lockfiles | go.sum, package-lock.json |
| has_dockerfile | nein |
| typed_language | ja |
| bootstrap_files | Makefile |
| has_devcontainer | nein |
| has_linter_config | ja |
| typecheck_configs | — |
| agent_commit_share | 0 |
| toolchain_manifests | go.mod |
| dependency_bot_commit_share | 0,09 |
AI-Code-Lesbarkeit für Modelle
100Außergewöhnlich
Wie die Bewertung erfolgt
| 45/45 | Typprüfbarer Code — Go (statisch typisiert) |
| 55/55 | Handhabbare Dateigrößen — 0/262 Quelldateien über 60 KB |
Verwendete Eingangsdaten
| primary_language | Go |
| largest_source_bytes | 38.973 |
| source_files_sampled | 262 |
| oversized_source_files | 0 |
Eckdaten
0GitHub-Sterne
98Mitwirkende
0Commits, letzte 12 Monate
10Tage seit letztem Push
100Releases
2Bus-Faktor
0offene Issues
Go, npmPaket-Ökosysteme
Warnungen zur Datenerhebung
- Community profile unavailable
- go package 'github.com/ory/fosite' points at a different repository (https://github.com/ory/fosite); excluded from ecosystem scoring
- GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository
Weitere Details
OpenSSF Scorecard 3.9 / 10
3.9Gesamtwert
Unabhängige, werkzeugneutrale Sicherheitsbewertung durch das quelloffene OpenSSF Scorecard. Jede Prüfung honoriert eine Sicherheits-Praxis, nicht das Werkzeug eines bestimmten Anbieters. Prüfungen, die Scorecard nicht ermitteln konnte, sind mit k. A. markiert und vom Sicherheitswert ausgeschlossen (nie als null gezählt).
| 10 | Binary-Artifacts | no binaries found in the repo |
| 0 | Branch-Protection | branch protection not enabled on development/release branches |
| k. A. | CI-Tests | no pull request found |
| 0 | CII-Best-Practices | no effort to earn an OpenSSF best practices badge detected |
| 0 | Code-Review | Found 0/30 approved changesets -- score normalized to 0 |
| 10 | Contributors | project has 44 contributing companies or organizations |
| 10 | Dangerous-Workflow | no dangerous workflow patterns detected |
| 10 | Dependency-Update-Tool | update tool detected |
| 0 | Fuzzing | project is not fuzzed |
| 10 | License | license file detected |
| 0 | Maintained | project was created within the last 90 days. Please review its contents carefully |
| k. A. | Packaging | packaging workflow not detected |
| 0 | Pinned-Dependencies | dependency not pinned by hash detected -- score normalized to 0 |
| 0 | SAST | no SAST tool detected |
| 10 | Security-Policy | security policy file detected |
| k. A. | Signed-Releases | no releases found |
| 0 | Token-Permissions | detected GitHub workflow tokens with excessive permissions |
| 0 | Vulnerabilities | 51 existing vulnerabilities detected |
Direkte Abhängigkeiten 25
| Registry | Paket | Versionsvorgabe | Manifest |
|---|---|---|---|
| Go | github.com/asaskevich/govalidator | v0.0.0-20230301143203-a9d515a09cc2 | go.mod |
| Go | github.com/cristalhq/jwt/v4 | v4.0.2 | go.mod |
| Go | github.com/dgraph-io/ristretto | v1.0.0 | go.mod |
| Go | github.com/go-jose/go-jose/v3 | v3.0.3 | go.mod |
| Go | github.com/google/uuid | v1.6.0 | go.mod |
| Go | github.com/gorilla/mux | v1.8.0 | go.mod |
| Go | github.com/gorilla/websocket | v1.5.0 | go.mod |
| Go | github.com/hashicorp/go-retryablehttp | v0.7.7 | go.mod |
| Go | github.com/magiconair/properties | v1.8.7 | go.mod |
| Go | github.com/mattn/goveralls | v0.0.12 | go.mod |
| Go | github.com/mohae/deepcopy | v0.0.0-20170929034955-c48cc78d4826 | go.mod |
| Go | github.com/oleiade/reflections | v1.0.1 | go.mod |
| Go | github.com/ory/go-acc | v0.2.9-0.20230103102148-6b1c9a70dbbe | go.mod |
| Go | github.com/ory/go-convenience | v0.1.0 | go.mod |
| Go | github.com/ory/x | v0.0.677 | go.mod |
| Go | github.com/parnurzeal/gorequest | v0.2.15 | go.mod |
| Go | github.com/pkg/errors | v0.9.1 | go.mod |
| Go | github.com/stretchr/testify | v1.9.0 | go.mod |
| Go | github.com/tidwall/gjson | v1.14.3 | go.mod |
| Go | go.opentelemetry.io/otel/trace | v1.32.0 | go.mod |
| Go | go.uber.org/mock | v0.5.0 | go.mod |
| Go | golang.org/x/crypto | v0.31.0 | go.mod |
| Go | golang.org/x/net | v0.33.0 | go.mod |
| Go | golang.org/x/oauth2 | v0.23.0 | go.mod |
| Go | golang.org/x/text | v0.21.0 | go.mod |
Alle Abhängigkeiten nicht erhoben
Der aufgelöste Abhängigkeitssatz konnte für diesen Bericht nicht erhoben werden: GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository
JSON-Rohbericht maschinenlesbar
{
"data": {
"repo": {
"topics": [],
"is_fork": true,
"size_kb": 7653,
"has_wiki": false,
"homepage": "https://www.ory.com/?utm_source=github&utm_medium=banner&utm_campaign=fosite",
"languages": {
"Go": 1160404,
"Shell": 4262,
"Makefile": 1056
},
"pushed_at": "2026-07-21T07:18:09Z",
"created_at": "2026-07-21T07:16:20Z",
"owner_type": "User",
"updated_at": "2026-07-21T07:16:20Z",
"description": "Extensible security first OAuth 2.0 and OpenID Connect SDK for Go.",
"is_archived": false,
"is_disabled": false,
"license_spdx": "Apache-2.0",
"default_branch": "master",
"license_spdx_raw": "Apache-2.0",
"primary_language": "Go",
"significant_languages": [
"Go"
]
},
"owner": {
"blog": null,
"name": "Vincent Luan",
"type": "User",
"login": "vincentluan",
"company": "Seal Commerce",
"location": null,
"followers": 0,
"avatar_url": "https://avatars.githubusercontent.com/u/84302820?v=4",
"created_at": "2021-05-17T04:09:58Z",
"is_verified": null,
"public_repos": 4,
"account_age_days": 1901
},
"license": {
"state": "standard",
"spdx_id": "Apache-2.0",
"raw_spdx": "Apache-2.0",
"file_present": true,
"scorecard_found": true,
"profile_has_license": false
},
"activity": {
"releases": [
{
"tag": "v0.49.0",
"kind": "minor",
"published_at": "2024-12-12T13:22:13Z"
},
{
"tag": "v0.48.0",
"kind": "minor",
"published_at": "2024-11-28T12:15:44Z"
},
{
"tag": "v0.47.0",
"kind": "minor",
"published_at": "2024-07-16T08:27:43Z"
},
{
"tag": "v0.46.1",
"kind": "patch",
"published_at": "2024-02-15T10:00:27Z"
},
{
"tag": "v0.46.0",
"kind": "minor",
"published_at": "2024-02-13T08:13:24Z"
},
{
"tag": "v0.45.0",
"kind": "minor",
"published_at": "2023-12-27T11:29:19Z"
},
{
"tag": "v0.44.0",
"kind": "minor",
"published_at": "2022-12-07T12:20:17Z"
},
{
"tag": "v0.43.0",
"kind": "minor",
"published_at": "2022-10-06T18:32:05Z"
},
{
"tag": "v0.42.2",
"kind": "patch",
"published_at": "2022-04-17T17:10:33Z"
},
{
"tag": "v0.42.1",
"kind": "patch",
"published_at": "2022-02-03T15:21:45Z"
},
{
"tag": "v0.42.0",
"kind": "minor",
"published_at": "2022-01-06T15:23:05Z"
},
{
"tag": "v0.41.0",
"kind": "minor",
"published_at": "2021-11-13T11:13:33Z"
},
{
"tag": "v0.40.2",
"kind": "patch",
"published_at": "2021-05-28T07:22:28Z"
},
{
"tag": "v0.40.1",
"kind": "patch",
"published_at": "2021-05-23T13:25:59Z"
},
{
"tag": "v0.40.0",
"kind": "minor",
"published_at": "2021-05-21T18:38:30Z"
},
{
"tag": "v0.39.0",
"kind": "minor",
"published_at": "2021-03-08T11:38:59Z"
},
{
"tag": "v0.38.0",
"kind": "minor",
"published_at": "2021-02-23T19:09:33Z"
},
{
"tag": "v0.37.0",
"kind": "minor",
"published_at": "2021-02-05T16:34:34Z"
},
{
"tag": "v0.36.1",
"kind": "patch",
"published_at": "2021-01-11T13:53:13Z"
},
{
"tag": "v0.36.0",
"kind": "minor",
"published_at": "2020-11-16T13:19:21Z"
},
{
"tag": "v0.35.1",
"kind": "patch",
"published_at": "2020-10-11T18:52:30Z"
},
{
"tag": "v0.35.0",
"kind": "minor",
"published_at": "2020-10-06T13:36:44Z"
},
{
"tag": "v0.34.1",
"kind": "patch",
"published_at": "2020-10-02T13:15:49Z"
},
{
"tag": "v0.34.0",
"kind": "minor",
"published_at": "2020-09-24T11:45:46Z"
},
{
"tag": "v0.33.0",
"kind": "minor",
"published_at": "2020-09-16T09:26:47Z"
},
{
"tag": "v0.32.4",
"kind": "patch",
"published_at": "2020-09-15T11:15:28Z"
},
{
"tag": "v0.32.3",
"kind": "patch",
"published_at": "2020-09-12T11:01:24Z"
},
{
"tag": "v0.32.2",
"kind": "patch",
"published_at": "2020-06-22T07:51:15Z"
},
{
"tag": "v0.32.1",
"kind": "patch",
"published_at": "2020-06-05T06:34:01Z"
},
{
"tag": "v0.32.0",
"kind": "minor",
"published_at": "2020-05-28T13:56:44Z"
},
{
"tag": "v0.31.3",
"kind": "patch",
"published_at": "2020-05-09T11:35:30Z"
},
{
"tag": "v0.31.2",
"kind": "patch",
"published_at": "2020-04-16T11:10:17Z"
},
{
"tag": "v0.31.1",
"kind": "patch",
"published_at": "2020-04-16T10:16:53Z"
},
{
"tag": "v0.31.0",
"kind": "minor",
"published_at": "2020-03-29T09:27:31Z"
},
{
"tag": "v0.30.6",
"kind": "patch",
"published_at": "2020-03-26T18:57:00Z"
},
{
"tag": "v0.30.5",
"kind": "patch",
"published_at": "2020-03-25T10:53:41Z"
},
{
"tag": "v0.30.4",
"kind": "patch",
"published_at": "2020-03-17T22:37:10Z"
},
{
"tag": "v0.30.3",
"kind": "patch",
"published_at": "2020-03-04T16:56:42Z"
},
{
"tag": "v0.30.2",
"kind": "patch",
"published_at": "2019-11-21T15:49:44Z"
},
{
"tag": "v0.30.1",
"kind": "patch",
"published_at": "2019-09-23T09:50:11Z"
},
{
"tag": "v0.30.0",
"kind": "minor",
"published_at": "2019-09-16T20:17:53Z"
},
{
"tag": "v0.29.8",
"kind": "patch",
"published_at": "2019-08-29T10:02:47Z"
},
{
"tag": "v0.29.7",
"kind": "patch",
"published_at": "2019-08-06T09:24:25Z"
},
{
"tag": "v0.29.6",
"kind": "patch",
"published_at": "2019-04-26T09:13:28Z"
},
{
"tag": "v0.29.5",
"kind": "patch",
"published_at": "2019-04-25T09:50:31Z"
},
{
"tag": "v0.29.4",
"kind": "patch",
"published_at": "2019-04-25T09:50:31Z"
},
{
"tag": "v0.29.3",
"kind": "patch",
"published_at": "2019-04-17T14:45:18Z"
},
{
"tag": "v0.29.2",
"kind": "patch",
"published_at": "2019-04-11T18:01:58Z"
},
{
"tag": "v0.29.1",
"kind": "patch",
"published_at": "2019-03-27T10:27:58Z"
},
{
"tag": "v0.29.0",
"kind": "minor",
"published_at": "2018-12-23T19:19:29Z"
},
{
"tag": "v0.28.1",
"kind": "patch",
"published_at": "2018-12-04T11:23:25Z"
},
{
"tag": "v0.28.0",
"kind": "minor",
"published_at": "2018-11-16T08:59:22Z"
},
{
"tag": "v0.27.4",
"kind": "patch",
"published_at": "2018-11-12T22:07:27Z"
},
{
"tag": "v0.27.3",
"kind": "patch",
"published_at": "2018-11-08T09:30:55Z"
},
{
"tag": "v0.27.2",
"kind": "patch",
"published_at": "2018-11-07T08:24:59Z"
},
{
"tag": "v0.27.1",
"kind": "patch",
"published_at": "2018-11-03T16:08:16Z"
},
{
"tag": "v0.27.0",
"kind": "minor",
"published_at": "2018-10-31T18:53:18Z"
},
{
"tag": "v0.26.1",
"kind": "patch",
"published_at": "2018-10-25T19:59:04Z"
},
{
"tag": "v0.26.0",
"kind": "minor",
"published_at": "2018-10-24T12:17:58Z"
},
{
"tag": "v0.25.1",
"kind": "patch",
"published_at": "2018-10-23T14:09:23Z"
},
{
"tag": "v0.25.0",
"kind": "minor",
"published_at": "2018-10-08T23:26:23Z"
},
{
"tag": "v0.24.0",
"kind": "minor",
"published_at": "2018-09-27T12:54:45Z"
},
{
"tag": "v0.23.0",
"kind": "minor",
"published_at": "2018-09-22T14:18:12Z"
},
{
"tag": "v0.22.0",
"kind": "minor",
"published_at": "2018-09-19T21:24:06Z"
},
{
"tag": "v0.21.5",
"kind": "patch",
"published_at": "2018-08-31T11:20:04Z"
},
{
"tag": "v0.21.4",
"kind": "patch",
"published_at": "2018-08-26T13:34:28Z"
},
{
"tag": "v0.21.3",
"kind": "patch",
"published_at": "2018-08-22T19:26:55Z"
},
{
"tag": "v0.21.2",
"kind": "patch",
"published_at": "2018-08-07T09:05:04Z"
},
{
"tag": "v0.21.1",
"kind": "patch",
"published_at": "2018-07-22T09:16:02Z"
},
{
"tag": "v0.21.0",
"kind": "minor",
"published_at": "2018-06-23T12:50:37Z"
},
{
"tag": "v0.20.3",
"kind": "patch",
"published_at": "2018-06-07T10:52:56Z"
},
{
"tag": "v0.20.2",
"kind": "patch",
"published_at": "2018-05-29T11:52:21Z"
},
{
"tag": "v0.20.1",
"kind": "patch",
"published_at": "2018-05-29T10:59:51Z"
},
{
"tag": "v0.20.0",
"kind": "minor",
"published_at": "2018-05-28T19:25:34Z"
},
{
"tag": "v0.19.8",
"kind": "patch",
"published_at": "2018-05-24T19:19:06Z"
},
{
"tag": "v0.19.7",
"kind": "patch",
"published_at": "2018-05-24T12:16:52Z"
},
{
"tag": "v0.19.6",
"kind": "patch",
"published_at": "2018-05-24T10:29:29Z"
},
{
"tag": "v0.19.5",
"kind": "patch",
"published_at": "2018-05-23T20:32:25Z"
},
{
"tag": "v0.19.4",
"kind": "patch",
"published_at": "2018-05-20T13:04:42Z"
},
{
"tag": "v0.19.3",
"kind": "patch",
"published_at": "2018-05-20T12:40:32Z"
},
{
"tag": "v0.19.2",
"kind": "patch",
"published_at": "2018-05-19T14:20:51Z"
},
{
"tag": "v0.19.1",
"kind": "patch",
"published_at": "2018-05-19T13:59:12Z"
},
{
"tag": "v0.19.0",
"kind": "minor",
"published_at": "2018-05-17T15:35:56Z"
},
{
"tag": "v0.18.1",
"kind": "patch",
"published_at": "2018-05-01T10:04:27Z"
},
{
"tag": "v0.18.0",
"kind": "minor",
"published_at": "2018-04-30T09:59:18Z"
},
{
"tag": "v0.17.2",
"kind": "patch",
"published_at": "2018-04-26T07:15:03Z"
},
{
"tag": "v0.17.1",
"kind": "patch",
"published_at": "2018-04-22T12:57:54Z"
},
{
"tag": "v0.17.0",
"kind": "minor",
"published_at": "2018-04-08T13:35:23Z"
},
{
"tag": "v0.16.5",
"kind": "patch",
"published_at": "2018-03-17T12:40:06Z"
},
{
"tag": "v0.16.4",
"kind": "patch",
"published_at": "2018-02-07T10:00:47Z"
},
{
"tag": "v0.16.3",
"kind": "patch",
"published_at": "2018-02-07T09:44:52Z"
},
{
"tag": "v0.16.2",
"kind": "patch",
"published_at": "2018-01-25T11:44:34Z"
},
{
"tag": "v0.16.1",
"kind": "patch",
"published_at": "2017-12-23T21:02:18Z"
},
{
"tag": "v0.16.0",
"kind": "minor",
"published_at": "2017-12-23T14:56:29Z"
},
{
"tag": "v0.15.6",
"kind": "patch",
"published_at": "2017-12-21T15:42:22Z"
},
{
"tag": "v0.15.5",
"kind": "patch",
"published_at": "2017-12-17T20:37:27Z"
},
{
"tag": "v0.15.4",
"kind": "patch",
"published_at": "2017-12-17T20:20:29Z"
},
{
"tag": "v0.15.3",
"kind": "patch",
"published_at": "2017-12-17T17:56:50Z"
},
{
"tag": "v0.15.2",
"kind": "patch",
"published_at": "2017-12-10T21:04:21Z"
},
{
"tag": "v0.15.1",
"kind": "patch",
"published_at": "2017-12-10T15:37:52Z"
}
],
"recent_commits": [
{
"oid": "a5f0b09bf31c17297b25637bb3fec2ff7a55b159",
"body": "If someone stores the session as JSON (as we do in Hydra), omitting\nempty keys can slightly reduce the storage size, while resulting in the\nexact same behavior.",
"is_bot": false,
"headline": "chore: slightly reduce session JSON size (#859)",
"author_name": "Patrik",
"author_login": "zepatrik",
"committed_at": "2025-07-03T09:34:31Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "35ebb052f3b42abca3c04eb5ef515d4e985cf83a",
"body": null,
"is_bot": false,
"headline": "fix: proper locking of memory store (#856)",
"author_name": "Mitar",
"author_login": "mitar",
"committed_at": "2025-07-01T12:29:24Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "258a3a7bdad61af3e49c5e9a41071cf2493295f2",
"body": null,
"is_bot": false,
"headline": "ci: revert branch to main repo and master (#857)",
"author_name": "hackerman",
"author_login": "aeneasr",
"committed_at": "2025-07-01T09:24:34Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8052806a6efe52832867d24cd41b17463190903d",
"body": "…mit/bc603a639a8b300ffed3cf80197d3839969d7ef9",
"is_bot": false,
"headline": "chore: update repository templates to https://github.com/ory/meta/com…",
"author_name": "ory-bot",
"author_login": "ory-bot",
"committed_at": "2025-03-12T16:14:22Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "75b904ddbee4e0b37ad5ed081a2adad1a9bae293",
"body": "…4-a0805db90819 to 1.2.1 (#842)\n\nBumps [github.com/elazarl/goproxy](https://github.com/elazarl/goproxy)\nfrom 0.0.0-20221015165544-a0805db90819 to 1.2.1.\n<details>\n<summary>Release notes</summary>\n<p><em>Sourced from <a\nhref=\"https://github.com/elazarl/goproxy/releases\">github.com/elazarl/goproxy's\nr\n[…]\nbled on this pull request as it has\nbeen open for over 30 days.\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "chore(deps): bump github.com/elazarl/goproxy from 0.0.0-2022101516554…",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2025-02-03T12:44:47Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "0e5aa192dc25e3ea5d3dd84d5a32b3e2506d114b",
"body": "There are some invalid links in the documentation, which can result in\nthe user writing this PR and forgetting what they were working on in the\nfirst place.",
"is_bot": false,
"headline": "docs: inconsistent RFC links in documentation (#836)",
"author_name": "Colum",
"author_login": "volfco",
"committed_at": "2025-02-03T12:44:37Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2b393b6b38df5bee3e30ec1b98d6d066f9c376ae",
"body": "```\nBREAKING CHANGES: This patch breaks up `OAuth2AuthorizeExplicitFactory` into\n`OAuth2AuthorizeExplicitAuthFactory` and `Oauth2AuthorizeExplicitTokenFactory`\n```\n\nThis PR is based on the work done on\nhttps://github.com/ory/fosite/pull/701, by @supercairos and\n@BuzzBumbleBee. That PR was based on an older version of fosite and was\nmissing some features/tests.\n\nCo-authored-by: Shu <shu.du@canonical.com>",
"is_bot": false,
"headline": "Implement RFC 8628 (#826)",
"author_name": "Nikos Sklikas",
"author_login": "nsklikas",
"committed_at": "2025-02-03T12:43:42Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "049ed1924cd0b41f12357b0fe617530c264421ac",
"body": "…mit/83e71e6e97a5eab38bede33eceef40d550d1fe6e",
"is_bot": false,
"headline": "chore: update repository templates to https://github.com/ory/meta/com…",
"author_name": "ory-bot",
"author_login": "ory-bot",
"committed_at": "2025-01-02T13:56:36Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "af3992eac8353d44f74e16a70952f6eeaf856893",
"body": null,
"is_bot": false,
"headline": "autogen: update license overview",
"author_name": "ory-bot",
"author_login": "ory-bot",
"committed_at": "2025-01-02T12:40:13Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f2e501049dfaa72d0f62974f2f1f75ab5391fc58",
"body": null,
"is_bot": false,
"headline": "autogen: update license overview",
"author_name": "ory-bot",
"author_login": "ory-bot",
"committed_at": "2025-01-02T12:34:58Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "57c58efbf4dc89069addd9f10c1a75fa549e7298",
"body": "…mit/44efd83ab7aab755d07b60db9049091bd8ad2533",
"is_bot": false,
"headline": "chore: update repository templates to https://github.com/ory/meta/com…",
"author_name": "ory-bot",
"author_login": "ory-bot",
"committed_at": "2025-01-02T12:21:36Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "398f862fabde606106fbbafaafb9517db01a4d40",
"body": "…mit/c091d7964885eaf0458fca234bf3521ffc4bc43b",
"is_bot": false,
"headline": "chore: update repository templates to https://github.com/ory/meta/com…",
"author_name": "ory-bot",
"author_login": "ory-bot",
"committed_at": "2025-01-02T12:18:49Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "db59a34fd07a978cd053d4485c3bafdc54348cbb",
"body": "…mit/cb2a20fceb295da97a8988e4947a3555b3f026a8",
"is_bot": false,
"headline": "chore: update repository templates to https://github.com/ory/meta/com…",
"author_name": "ory-bot",
"author_login": "ory-bot",
"committed_at": "2024-12-31T10:42:18Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "420bb041767e1cc42f8ad7c3bc8876809f3693e9",
"body": "…mit/6dd58197127fcc22f1602fe2481e65e3fb356441",
"is_bot": false,
"headline": "chore: update repository templates to https://github.com/ory/meta/com…",
"author_name": "ory-bot",
"author_login": "ory-bot",
"committed_at": "2024-12-31T10:37:09Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2985962891c6592cfdc2794d8ba34810ad44d171",
"body": "…mit/b1eed8856cd301603956084d58f021707ace940a",
"is_bot": false,
"headline": "chore: update repository templates to https://github.com/ory/meta/com…",
"author_name": "ory-bot",
"author_login": "ory-bot",
"committed_at": "2024-12-30T22:49:04Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "451f66de10866c8089febf1aeb33436929d49738",
"body": null,
"is_bot": false,
"headline": "autogen: update license overview",
"author_name": "ory-bot",
"author_login": "ory-bot",
"committed_at": "2024-12-30T22:06:07Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d7b87ac91c722d6f146db25bce030e49910063d2",
"body": "…mit/cbb120bd7c046b6af46b2148f5cfc1b3d03a1dd2",
"is_bot": false,
"headline": "chore: update repository templates to https://github.com/ory/meta/com…",
"author_name": "aeneasr",
"author_login": "aeneasr",
"committed_at": "2024-12-30T12:52:56Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "06587840186e7359f88a8b8f3d495d78cc11c7e4",
"body": "…mit/7ba40649aea8bbadc478c01f97ff6231fb492fb8",
"is_bot": false,
"headline": "chore: update repository templates to https://github.com/ory/meta/com…",
"author_name": "aeneasr",
"author_login": "aeneasr",
"committed_at": "2024-12-30T11:20:57Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d0fec64b1d0f72b746a13c252275b3612a98872d",
"body": null,
"is_bot": false,
"headline": "chore: update codeowners (#841)",
"author_name": "hackerman",
"author_login": "aeneasr",
"committed_at": "2024-12-30T10:21:55Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "782ea3e91fe6df0739a640a9e264e49fd423e4ac",
"body": "…mit/000f213efcd4e98ac3462086c47de58005c4b697",
"is_bot": false,
"headline": "chore: update repository templates to https://github.com/ory/meta/com…",
"author_name": "aeneasr",
"author_login": "aeneasr",
"committed_at": "2024-12-27T13:04:09Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0e8a333bb32fc4234b85f3bec8aa2e70f3f56a35",
"body": null,
"is_bot": false,
"headline": "feat: upgrade github.com/ory/x to v0.0.677 (#840)",
"author_name": "Dorian Selimovic",
"author_login": "dselim",
"committed_at": "2024-12-16T09:58:13Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "653c812bc40cbda049857b432ad3346f1a53d42d",
"body": "Bumps [golang.org/x/crypto](https://github.com/golang/crypto) from 0.23.0 to 0.31.0.\r\n- [Commits](https://github.com/golang/crypto/compare/v0.23.0...v0.31.0)\r\n\r\n---\r\nupdated-dependencies:\r\n- dependency-name: golang.org/x/crypto\r\n dependency-type: direct:production\r\n...\r\n\r\nSigned-off-by: dependabot[bot] <support@github.com>\r\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "chore(deps): bump golang.org/x/crypto from 0.23.0 to 0.31.0 (#839)",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2024-12-12T13:22:13Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f3336b1618e720f15a82bc34af82b2dbfd2f47eb",
"body": "Previously, the refresh token handler was using a combination of delete/update storage primitives. This made optimizing and implementing the refresh token handling difficult. Going forward, the RefreshTokenStorage must implement `RotateRefreshToken`. Token creation continues to be separated.\r\n\r\nBREA\n[…]\nr error)\r\n\tDeleteRefreshTokenSession(ctx context.Context, signature string) (err error)\r\n\r\n+\tRotateRefreshToken(ctx context.Context, requestID string, refreshTokenSignature string) (err error)\r\n}\r\n```",
"is_bot": false,
"headline": "refactor: refresh token rotation (#838)",
"author_name": "hackerman",
"author_login": "aeneasr",
"committed_at": "2024-12-12T13:21:53Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "6c26dc54eb6467a784f939a5e11290e65272fd03",
"body": "…mit/1af2225678e6ed0f1947b17a07626774bff38667",
"is_bot": false,
"headline": "chore: update repository templates to https://github.com/ory/meta/com…",
"author_name": "aeneasr",
"author_login": "aeneasr",
"committed_at": "2024-12-04T15:38:06Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "db74aa7abd9f22deb0d6779a6870c1a65445f298",
"body": "See https://github.com/ory-corp/cloud/issues/7311",
"is_bot": false,
"headline": "chore: make serialization error wrappable (#837)",
"author_name": "hackerman",
"author_login": "aeneasr",
"committed_at": "2024-11-28T12:15:44Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6335f90b7d2cf2009b94a7441baa87d1686408c0",
"body": null,
"is_bot": false,
"headline": "revert: signature extraction in the HMAC strategy (#835)",
"author_name": "Patrik",
"author_login": "zepatrik",
"committed_at": "2024-11-04T16:14:57Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f34ee269e9effa89dc4c04ebf3517211094f2710",
"body": null,
"is_bot": false,
"headline": "fix: remove duplicated matcher split (#834)",
"author_name": "Astone",
"author_login": "acynothia",
"committed_at": "2024-11-04T09:56:33Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b653f78f00e56ccffc8b4ae14c66598e6192b279",
"body": null,
"is_bot": false,
"headline": "chore: update ory/x and ristretto (#832)",
"author_name": "hackerman",
"author_login": "aeneasr",
"committed_at": "2024-11-01T17:16:53Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "168636ff33c7e3768d308f3f963156b87ae686fc",
"body": null,
"is_bot": false,
"headline": "feat: add identity ID to password grant extra claims (#831)",
"author_name": "Henning Perl",
"author_login": "hperl",
"committed_at": "2024-10-29T13:40:14Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "939bdbfc01a79b8b8f394397ffac685bda3f7db6",
"body": null,
"is_bot": false,
"headline": "chore: minor improvements to readability and updated code style (#827)",
"author_name": "Patrik",
"author_login": "zepatrik",
"committed_at": "2024-10-21T10:01:28Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "869a37ce486cb0ca921449319e1048004b2f1bd8",
"body": null,
"is_bot": false,
"headline": "fix: do not store stacktrace in sentinel errors (#823)",
"author_name": "Mitar",
"author_login": "mitar",
"committed_at": "2024-09-16T11:18:29Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "11cc7021807064f0f2422815cc41f8dd2b4b5c8e",
"body": null,
"is_bot": false,
"headline": "fix: pass JWK for singing so that KeyID is set in JWTs (#799)",
"author_name": "Mitar",
"author_login": "mitar",
"committed_at": "2024-09-16T11:18:24Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "aa7c79e2d3e80d28611c72e47a9919c73041c530",
"body": "Fixes an issue where Authorize Requests which were intended for an OpenID Connect 1.0 client would incorrectly be allowed when missing the redirect URI when it's required by the specification.\r\n\r\nCloses #685\r\nCloses #762\r\n\r\nBREAKING CHANGES: Going forward, calls to `/oauth2/auth` which trigger OpenID Connect require the `redirect_uri` query parameter to be set.",
"is_bot": false,
"headline": "fix: require redirect_uri for OpenID Connect calls (#814)",
"author_name": "hackerman",
"author_login": "aeneasr",
"committed_at": "2024-09-16T11:17:55Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8631deb35b30a927970c216a58985ab17e6e471d",
"body": "…mit/fe4ffe081358634ef4d59fdc2ffe2741c63981c8",
"is_bot": false,
"headline": "chore: update repository templates to https://github.com/ory/meta/com…",
"author_name": "aeneasr",
"author_login": "aeneasr",
"committed_at": "2024-08-27T10:15:24Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b88142c4e09c440baf6346e43ae0399ac48e444a",
"body": "…mit/4132def510aefccb5bdb55519823bff9b7be5bc7",
"is_bot": false,
"headline": "chore: update repository templates to https://github.com/ory/meta/com…",
"author_name": "aeneasr",
"author_login": "aeneasr",
"committed_at": "2024-08-27T10:14:44Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "482c77b7387779b34825352f83e155fbabe319a6",
"body": "…mit/3cf0f005564ff7e18f13640dd3dab677f610049f",
"is_bot": false,
"headline": "chore: update repository templates to https://github.com/ory/meta/com…",
"author_name": "aeneasr",
"author_login": "aeneasr",
"committed_at": "2024-08-27T09:41:52Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "da74f51ad0f17d77242c84e738d8a76cbb1e10a5",
"body": "…mit/939b80fbfd795b1e137654c60deac78b752e7196",
"is_bot": false,
"headline": "chore: update repository templates to https://github.com/ory/meta/com…",
"author_name": "aeneasr",
"author_login": "aeneasr",
"committed_at": "2024-08-27T09:35:15Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "abe824a9e9065673ad5e1c5609a4156cd0715d70",
"body": "…mit/297c8a5a3563dacb5fb28b60436623ee5608726e",
"is_bot": false,
"headline": "chore: update repository templates to https://github.com/ory/meta/com…",
"author_name": "aeneasr",
"author_login": "aeneasr",
"committed_at": "2024-08-22T13:00:08Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "15d55bfb0bfc74ddbdd80a156b7614e6413b3427",
"body": "…mit/95e82c6db80b6928cfb4a27f165e1ed70d52dee4",
"is_bot": false,
"headline": "chore: update repository templates to https://github.com/ory/meta/com…",
"author_name": "aeneasr",
"author_login": "aeneasr",
"committed_at": "2024-08-22T07:24:53Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3ec8db807b5ee7a9070f46304c9a183f2bba7c7b",
"body": "This PR addresses improvements to the OAuth2 package, making it easier to inject custom strategies. As part of this change, the HMAC strategy has been split into a prefixed and unprefixed strategy. Due to this, the instantiation of `HMACSHAStrategy` has changed.\r\n\r\nThis patch addresses improvements \n[…]\nnfig{GlobalSecret: []byte(\"foobarfoobarfoobarfoobarfoobarfoobarfoobarfoobar\")}},\r\n+\t&fosite.Config{\r\n+\t\tAccessTokenLifespan: time.Hour * 24,\r\n+\t\tAuthorizeCodeLifespan: time.Hour * 24,\r\n+\t},\r\n+)\r\n```",
"is_bot": false,
"headline": "refactor: improve dependency injection capabilities (#816)",
"author_name": "hackerman",
"author_login": "aeneasr",
"committed_at": "2024-07-16T08:27:43Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "27de382c1e514ee208c5541fcf0194e6a055b573",
"body": "This reverts commit 576230ace1a2a488d9f4d4af4272df0caae9eec9.",
"is_bot": false,
"headline": "revert: splitting the HMAC SHA strategy (#813) (#815)",
"author_name": "hackerman",
"author_login": "aeneasr",
"committed_at": "2024-07-10T13:19:30Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e00e96d20589968885c9fbf358f4cedd14e1496c",
"body": null,
"is_bot": false,
"headline": "fix: always issue headers in WriteIntrospectionResponse (#802)",
"author_name": "Mitar",
"author_login": "mitar",
"committed_at": "2024-07-09T13:26:42Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "576230ace1a2a488d9f4d4af4272df0caae9eec9",
"body": "BREAKING CHANGES: Going forward, the `HMACSHAStrategy` requires a `BaseHMACSHAStrategy`. Here is how to upgrade it:\r\n\r\n```patch\r\nvar hmacshaStrategy = HMACSHAStrategy{\r\n-\tEnigma: &hmac.HMACStrategy{Config: &fosite.Config{GlobalSecret: []byte(\"foobarfoobarfoobarfoobarfoobarfoobarfoobarfoobar\")}},\r\n-\t\n[…]\nt: []byte(\"foobarfoobarfoobarfoobarfoobarfoobarfoobarfoobar\")}},\r\n+\t\tConfig: &fosite.Config{\r\n+\t\t\tAccessTokenLifespan: time.Hour * 24,\r\n+\t\t\tAuthorizeCodeLifespan: time.Hour * 24,\r\n+\t\t},\r\n\t},\r\n}\r\n```",
"is_bot": false,
"headline": "refactor: split HMAC SHA strategy (#813)",
"author_name": "hackerman",
"author_login": "aeneasr",
"committed_at": "2024-07-09T10:31:51Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "886248bbfbb5e25552629f17b26b169d49300832",
"body": "Bumps [golang.org/x/net](https://github.com/golang/net) from 0.13.0 to 0.23.0.\r\n- [Commits](https://github.com/golang/net/compare/v0.13.0...v0.23.0)\r\n\r\n---\r\nupdated-dependencies:\r\n- dependency-name: golang.org/x/net\r\n dependency-type: direct:production\r\n...\r\n\r\nSigned-off-by: dependabot[bot] <support@github.com>\r\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "chore(deps): bump golang.org/x/net from 0.13.0 to 0.23.0 (#808)",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2024-07-09T10:31:41Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8b7a4703b7d632b322cd88a83dd81532c9546c12",
"body": "Bumps [github.com/hashicorp/go-retryablehttp](https://github.com/hashicorp/go-retryablehttp) from 0.7.4 to 0.7.7.\r\n- [Changelog](https://github.com/hashicorp/go-retryablehttp/blob/main/CHANGELOG.md)\r\n- [Commits](https://github.com/hashicorp/go-retryablehttp/compare/v0.7.4...v0.7.7)\r\n\r\n---\r\nupdated-d\n[…]\n/go-retryablehttp\r\n dependency-type: direct:production\r\n...\r\n\r\nSigned-off-by: dependabot[bot] <support@github.com>\r\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "chore(deps): bump github.com/hashicorp/go-retryablehttp (#812)",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2024-07-09T09:53:34Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "7f362db216d67819a48c18c85aa1cdd61ebfba71",
"body": "This was added in 452f37728, but doesn't appear to be used anywhere.",
"is_bot": false,
"headline": "chore: remove unneeded dependency github.com/ecordell/optgen (#810)",
"author_name": "James-REANNZ",
"author_login": "James-REANNZ",
"committed_at": "2024-07-09T09:53:14Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "bdcae1b234517278d1c633aa85a5f7d04b278bbe",
"body": "Bumps [braces](https://github.com/micromatch/braces) from 3.0.2 to 3.0.3.\r\n- [Changelog](https://github.com/micromatch/braces/blob/master/CHANGELOG.md)\r\n- [Commits](https://github.com/micromatch/braces/compare/3.0.2...3.0.3)\r\n\r\n---\r\nupdated-dependencies:\r\n- dependency-name: braces\r\n dependency-type: indirect\r\n...\r\n\r\nSigned-off-by: dependabot[bot] <support@github.com>\r\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "chore(deps-dev): bump braces from 3.0.2 to 3.0.3 (#811)",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2024-07-04T11:07:54Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1e7c582e74e42c33848f765b320028fbb734bbc5",
"body": "…mit/e838bee8d0a29d022b61472be9efccf096099130",
"is_bot": false,
"headline": "chore: update repository templates to https://github.com/ory/meta/com…",
"author_name": "aeneasr",
"author_login": "aeneasr",
"committed_at": "2024-05-22T07:33:33Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5e039ca9eef18ba5317f62760e111214bf93945f",
"body": "…804)\n\nBumps google.golang.org/protobuf from 1.31.0 to 1.33.0.\r\n\r\n---\r\nupdated-dependencies:\r\n- dependency-name: google.golang.org/protobuf\r\n dependency-type: indirect\r\n...\r\n\r\nSigned-off-by: dependabot[bot] <support@github.com>\r\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "chore(deps): bump google.golang.org/protobuf from 1.31.0 to 1.33.0 (#…",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2024-04-03T13:59:05Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "743edee90541ec229e3bbdf9c9cd166865a78ea3",
"body": "…#800)\n\nBumps [github.com/go-jose/go-jose/v3](https://github.com/go-jose/go-jose) from 3.0.0 to 3.0.3.\r\n- [Release notes](https://github.com/go-jose/go-jose/releases)\r\n- [Changelog](https://github.com/go-jose/go-jose/blob/v3.0.3/CHANGELOG.md)\r\n- [Commits](https://github.com/go-jose/go-jose/compare/v\n[…]\no-jose/go-jose/v3\r\n dependency-type: direct:production\r\n...\r\n\r\nSigned-off-by: dependabot[bot] <support@github.com>\r\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "chore(deps): bump github.com/go-jose/go-jose/v3 from 3.0.0 to 3.0.3 (…",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2024-04-03T13:58:48Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "1f27af44d4f83c258c118839ca3171fff08aa77b",
"body": null,
"is_bot": false,
"headline": "fix: use stdlib to check loopback address (#795)",
"author_name": "Mitar",
"author_login": "mitar",
"committed_at": "2024-02-15T10:00:27Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c5e0ca32136c7692f0b4d1783e97683269156fea",
"body": null,
"is_bot": false,
"headline": "docs: file CHANGELOG.md is not used anymore (#794)",
"author_name": "Mitar",
"author_login": "mitar",
"committed_at": "2024-02-14T08:47:15Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c16a2d159d6d8fa804105b665da7fcd252ba16a6",
"body": "This fixes an issue where the PKCE sessions are generated needlessly which also leads to errors in some circumstances.",
"is_bot": false,
"headline": "fix(pkce): session generated needlessly (#759)",
"author_name": "James Elliott",
"author_login": "james-d-elliott",
"committed_at": "2024-02-13T13:16:20Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f38352921f2216c0ca5c35428641beec430f0255",
"body": null,
"is_bot": false,
"headline": "fix: add missing ctx argument to IsRedirectURISecureStrict (#785)",
"author_name": "Mitar",
"author_login": "mitar",
"committed_at": "2024-02-13T12:39:44Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "505fb247e7d6c44b1581d92d689644246aad709e",
"body": null,
"is_bot": false,
"headline": "fix: pass standard params to storage (#791)",
"author_name": "hackerman",
"author_login": "aeneasr",
"committed_at": "2024-02-13T08:58:37Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9b98b55ef698b4b45c74467e0367f479653c9a63",
"body": null,
"is_bot": false,
"headline": "fix: properly propagate request ID (#756)",
"author_name": "Vivek Shankar",
"author_login": "vivshankar",
"committed_at": "2024-02-13T08:13:24Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0c340c45c5ed54b8719ded12ff7bf951360b1e03",
"body": null,
"is_bot": false,
"headline": "docs: do not list client_secret_jwt as supported (#787)",
"author_name": "Mitar",
"author_login": "mitar",
"committed_at": "2024-02-13T08:05:35Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "fd987c73a28f45d2df05442b3bb599e599cb7b72",
"body": null,
"is_bot": false,
"headline": "chore: update copyright years",
"author_name": "aeneasr",
"author_login": "aeneasr",
"committed_at": "2024-02-13T08:00:06Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c0b30f65bca686b3583384c611278fa8079f022a",
"body": "…nge (#793)\n\nRemove deprecation of `DeleteOpenIDConnectSession` storage interface function and call it during\r\nauthorization code exchange. This function was not previously called. Implementors of the openid\r\nstorage interface who which to preserve the old behavior should implement this function as a\r\nno-op which returns `nil`.\r\n\r\nFixes #790",
"is_bot": false,
"headline": "fix: call DeleteOpenIDConnectSession during successful authcode excha…",
"author_name": "Ryan Richard",
"author_login": "cfryanr",
"committed_at": "2024-02-13T07:57:46Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f4114878826c6d26b6751a1ea61f69ebbc25d4f2",
"body": null,
"is_bot": false,
"headline": "Fix broken link (#783)",
"author_name": "Suvin Nimnaka",
"author_login": "Suvink",
"committed_at": "2024-01-03T16:22:02Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2c69fd81013a1b99b929955fd8b81311f0b80957",
"body": null,
"is_bot": false,
"headline": "fix: quick start secret config (#781)",
"author_name": "n0izn0iz",
"author_login": "n0izn0iz",
"committed_at": "2023-12-27T11:29:19Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d13014349c063cc358c0369a0aa9557f6a652167",
"body": "Co-authored-by: Jonas Hungershausen <jonas.hungershausen@ory.sh>",
"is_bot": false,
"headline": "feat: support multiple token URLs (#780)",
"author_name": "Henning Perl",
"author_login": "hperl",
"committed_at": "2023-12-20T12:22:07Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "dfa2c0a1b63cdc963d86372b84516a025076f373",
"body": null,
"is_bot": false,
"headline": "fix: remove redundant map access (#775)",
"author_name": "dtam-cybozu",
"author_login": "dtam-cybozu",
"committed_at": "2023-11-13T12:51:21Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "44fd2cc2356954292d435e45712624d4145debc7",
"body": "Closes #750",
"is_bot": false,
"headline": "fix: isloopback returns true incorrectly (#765)",
"author_name": "James Elliott",
"author_login": "james-d-elliott",
"committed_at": "2023-08-22T09:49:27Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1df109bb45fadd90b34c3d15cbc7431426cc9853",
"body": "…mit/ac80097fa427e7ae39820c59cac62dc6e11b9aff",
"is_bot": false,
"headline": "chore: update repository templates to https://github.com/ory/meta/com…",
"author_name": "aeneasr",
"author_login": "aeneasr",
"committed_at": "2023-08-07T14:30:48Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d4605bb2b3a6d2d8b626798dc7e9146ce248de91",
"body": null,
"is_bot": false,
"headline": "feat: add verifiable credentials handler (#758)",
"author_name": "Henning Perl",
"author_login": "hperl",
"committed_at": "2023-08-07T11:35:40Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "198f913c8e9ebbc1f0ebf93b98e8b626b327495d",
"body": null,
"is_bot": false,
"headline": "feat: basic tracing instrumentation with OpenTelemetry (#761)",
"author_name": "Arne Luenser",
"author_login": "alnr",
"committed_at": "2023-08-04T07:55:40Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "039746ca601db3dc2c52c9fd86ffe8a8cf92da7b",
"body": "…mit/af28aff50b62a9eeb69de4842e0e164f82c9e066",
"is_bot": false,
"headline": "chore: update repository templates to https://github.com/ory/meta/com…",
"author_name": "aeneasr",
"author_login": "aeneasr",
"committed_at": "2023-08-03T15:39:23Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8098e48b2e0935855b61f3d7f924596620fdfc82",
"body": null,
"is_bot": false,
"headline": "chore: update dependencies (#752)",
"author_name": "Henning Perl",
"author_login": "hperl",
"committed_at": "2023-07-04T08:38:23Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "69300915a423ea67d98d0eb8531d926efa229aba",
"body": null,
"is_bot": false,
"headline": "chore(deps): bump github.com/ory/x to v0.0.559 (#751)",
"author_name": "Joe Kralicky",
"author_login": "kralicky",
"committed_at": "2023-06-14T12:49:36Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "45a6785cc54fcbd9195b0de4b821bb5fed6a41be",
"body": null,
"is_bot": false,
"headline": "feat: add the ability to set jwt header type (#737)",
"author_name": "Misi",
"author_login": "mgyongyosi",
"committed_at": "2023-03-17T11:43:49Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "daf3b15f0433c207e40601065cb9c92c52a025f2",
"body": null,
"is_bot": false,
"headline": "ci: use Go 1.19",
"author_name": "aeneasr",
"author_login": "aeneasr",
"committed_at": "2023-02-26T08:19:32Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b383f14706a59bb57a74d8d03e586320412f6f9f",
"body": "Bumps [golang.org/x/crypto](https://github.com/golang/crypto) from 0.0.0-20210921155107-089bfa567519 to 0.1.0.\r\n- [Release notes](https://github.com/golang/crypto/releases)\r\n- [Commits](https://github.com/golang/crypto/commits/v0.1.0)\r\n\r\n---\r\nupdated-dependencies:\r\n- dependency-name: golang.org/x/crypto\r\n dependency-type: direct:production\r\n...\r\n\r\nSigned-off-by: dependabot[bot] <support@github.com>\r\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "chore(deps): bump golang.org/x/crypto (#739)",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2023-02-25T17:14:44Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "09b78db595843010f312b00b60c35794ea46a475",
"body": "Bumps [golang.org/x/net](https://github.com/golang/net) from 0.0.0-20220722155237-a158d28d115b to 0.7.0.\r\n- [Release notes](https://github.com/golang/net/releases)\r\n- [Commits](https://github.com/golang/net/commits/v0.7.0)\r\n\r\n---\r\nupdated-dependencies:\r\n- dependency-name: golang.org/x/net\r\n dependency-type: direct:production\r\n...\r\n\r\nSigned-off-by: dependabot[bot] <support@github.com>\r\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "chore(deps): bump golang.org/x/net (#738)",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2023-02-25T17:04:30Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "bc43abc237aeb3469521dfa13ca812eb8d5e6c5d",
"body": null,
"is_bot": false,
"headline": "docs: update copyright (#732)",
"author_name": "James Elliott",
"author_login": "james-d-elliott",
"committed_at": "2023-01-10T15:44:51Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "33e448c60d91a9972b2ce9acc1776951556b6c75",
"body": null,
"is_bot": false,
"headline": "ci: remove circle",
"author_name": "hackerman",
"author_login": "aeneasr",
"committed_at": "2023-01-05T15:58:17Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e570564951ec312d5dc1c1c21180ca3e759c5075",
"body": "BREAKING CHANGE: `GetGlobalSecret` and `GetRotatedGlobalSecrets` signatures changed and it is now possible to add an error.",
"is_bot": false,
"headline": "refactor: allow secret configuration to return errors (#726)",
"author_name": "hackerman",
"author_login": "aeneasr",
"committed_at": "2022-12-07T12:20:17Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f52879d654a8c1b4c639aadca60decdc4281f3ff",
"body": null,
"is_bot": false,
"headline": "fix: fix server error of handling refresh token reuse (#704)",
"author_name": "sawadashota",
"author_login": "sawadashota",
"committed_at": "2022-11-16T10:24:51Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "295d028067d4c5c11eef95471a41c2014ae0dbe3",
"body": null,
"is_bot": false,
"headline": "chore: update Ory CLI with breaking changes to the format task (#721)",
"author_name": "Kevin Goslar",
"author_login": "kevgo",
"committed_at": "2022-11-08T01:50:01Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7efa846d221578f8716c7610632501631db8d27e",
"body": null,
"is_bot": false,
"headline": "docs: standardize license headers (#710)",
"author_name": "Kevin Goslar",
"author_login": "kevgo",
"committed_at": "2022-11-03T14:29:46Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2a93db5176f636ad5d3722df40010d611e31926d",
"body": null,
"is_bot": false,
"headline": "chore: update module golang.org/x/text to v0.4.0 (#719)",
"author_name": "James Elliott",
"author_login": "james-d-elliott",
"committed_at": "2022-11-03T10:05:42Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f2085d0114e931d5125ba30bd39fe1ec6f90c093",
"body": null,
"is_bot": false,
"headline": "missing init of the par sessions in the example store (#711)",
"author_name": "Michael Boke",
"author_login": "michaelboke",
"committed_at": "2022-11-03T10:05:29Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "61284fe547e1359979bdd86fccdf52fca1dc863f",
"body": null,
"is_bot": false,
"headline": "chore: remove obsolete header (#720)",
"author_name": "Kevin Goslar",
"author_login": "kevgo",
"committed_at": "2022-11-02T20:20:05Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3c774b194595a125ff41fdd7927262c3fce93a51",
"body": "…mit/d3f8710e356fb833d4bd71b4ba19d062df2ea89e",
"is_bot": false,
"headline": "chore: update repository templates to https://github.com/ory/meta/com…",
"author_name": "aeneasr",
"author_login": "aeneasr",
"committed_at": "2022-11-02T11:39:33Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6968898d7cf49bbc9c525a5aa704c7c2bbdf982a",
"body": null,
"is_bot": false,
"headline": "chore: license checker (#714)",
"author_name": "Kevin Goslar",
"author_login": "kevgo",
"committed_at": "2022-11-02T11:29:30Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "603ceb4998baeb7180f571625038b312c8f402d0",
"body": "…mit/a2fba7e968572391ac4a55ce362dca0c4800c97d",
"is_bot": false,
"headline": "chore: update repository templates to https://github.com/ory/meta/com…",
"author_name": "aeneasr",
"author_login": "aeneasr",
"committed_at": "2022-11-02T01:00:16Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a3392df6cd65c6aee83c147ee86176d3900fe307",
"body": "…mit/b41b1ee5ed62f47bac563014929c64bff0c14163",
"is_bot": false,
"headline": "chore: update repository templates to https://github.com/ory/meta/com…",
"author_name": "aeneasr",
"author_login": "aeneasr",
"committed_at": "2022-11-02T00:41:48Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "07a3a768e008b44115c147c93270b482432b0ca9",
"body": "…mit/852a1aece5fefac0a03f928672538c5d8c536ad8",
"is_bot": false,
"headline": "chore: update repository templates to https://github.com/ory/meta/com…",
"author_name": "aeneasr",
"author_login": "aeneasr",
"committed_at": "2022-11-01T20:11:26Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "849443a459a75d48744ba9c52859467692b451ac",
"body": null,
"is_bot": false,
"headline": "fix: handle inactive token error (#712)",
"author_name": "Takuya Kori",
"author_login": "inari111",
"committed_at": "2022-10-26T13:00:31Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2d32d9ebe7d97181c9193292f7004133ae097f40",
"body": "…mit/6ab5ce6da0cc57d4492e932602bbfd4a76547795",
"is_bot": false,
"headline": "chore: update repository templates to https://github.com/ory/meta/com…",
"author_name": "aeneasr",
"author_login": "aeneasr",
"committed_at": "2022-10-19T11:33:34Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "dc436751dfefa272ba7d64f5edc961c4ffeb1133",
"body": "…mit/23d918a32533554c30d720dc44e821de3cda18f8",
"is_bot": false,
"headline": "chore: update repository templates to https://github.com/ory/meta/com…",
"author_name": "aeneasr",
"author_login": "aeneasr",
"committed_at": "2022-10-06T18:32:05Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "af4aea2be6d2d237dd1e91a30ffbfbe0f2955d8e",
"body": null,
"is_bot": false,
"headline": "ci: use hydra main branch (#706)",
"author_name": "hackerman",
"author_login": "aeneasr",
"committed_at": "2022-10-06T05:35:51Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d50e6dd6216ec82d5ee89d77f9ccef7d5a7156af",
"body": null,
"is_bot": false,
"headline": "ci: use hydra main branch (#707)",
"author_name": "hackerman",
"author_login": "aeneasr",
"committed_at": "2022-10-06T05:35:43Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e98c0d745a0c652f18364f303b653f75d9a151c6",
"body": "…mit/4ef13422e91f15b9f70014a0d67b92498ab728d1",
"is_bot": false,
"headline": "chore: update repository templates to https://github.com/ory/meta/com…",
"author_name": "aeneasr",
"author_login": "aeneasr",
"committed_at": "2022-09-23T12:44:12Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a3a24239c3fec48b707fb88bc79b070843e97181",
"body": "…mit/935cc0443464fd76fbf41dff1081b368080c9353",
"is_bot": false,
"headline": "chore: update repository templates to https://github.com/ory/meta/com…",
"author_name": "aeneasr",
"author_login": "aeneasr",
"committed_at": "2022-09-22T12:40:56Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ef3e950835e8dd0ab3405f36745b962ede11e3a8",
"body": null,
"is_bot": false,
"headline": "chore: format using Make (#703)",
"author_name": "Kevin Goslar",
"author_login": "kevgo",
"committed_at": "2022-09-22T12:13:41Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "aa73376a0661016c7f5686c1cba5f1c7d6229f21",
"body": null,
"is_bot": false,
"headline": "autogen(docs): regenerate and update changelog",
"author_name": "aeneasr",
"author_login": "aeneasr",
"committed_at": "2022-09-22T12:07:20Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ef753d550d59b077f6ae349d6c795e2c142ec676",
"body": "This reverts commit 2eea63bddcbdf50771adf670391e495e339f619f since CircleCI is still used here.",
"is_bot": false,
"headline": "Revert \"chore: delete .circleci folder (#699)\" (#705)",
"author_name": "Kevin Goslar",
"author_login": "kevgo",
"committed_at": "2022-09-22T12:05:24Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "08c976b13828f98dcb743940272509889cf02d17",
"body": "[skip ci] - updated repository templates to https://github.com/ory/meta/commit/ac6bef904ee4d135b9d5ee85418716237cf09df0",
"is_bot": false,
"headline": "chore: update repository templates",
"author_name": "aeneasr",
"author_login": "aeneasr",
"committed_at": "2022-09-14T18:53:57Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2eea63bddcbdf50771adf670391e495e339f619f",
"body": null,
"is_bot": false,
"headline": "chore: delete .circleci folder (#699)",
"author_name": "Kevin Goslar",
"author_login": "kevgo",
"committed_at": "2022-09-08T09:28:29Z",
"body_truncated": false,
"is_coding_agent": false
}
],
"releases_count": 100,
"commits_last_year": 0,
"latest_release_at": "2024-12-12T13:22:13Z",
"latest_release_tag": "v0.49.0",
"releases_from_tags": true,
"days_since_last_push": 10,
"active_weeks_last_year": 0,
"days_since_latest_release": 596,
"mean_days_between_releases": 115.9
},
"community": {
"has_readme": false,
"has_license": false,
"has_description": false,
"has_contributing": false,
"health_percentage": null,
"has_issue_template": false,
"has_code_of_conduct": false,
"has_pull_request_template": false
},
"ecosystem": {
"packages": [
{
"name": "github.com/ory/fosite",
"exists": true,
"license": null,
"keywords": [],
"ecosystem": "go",
"matches_repo": false,
"registry_url": "https://pkg.go.dev/github.com/ory/fosite",
"is_deprecated": false,
"latest_version": "v0.49.0",
"repository_url": "https://github.com/ory/fosite",
"versions_count": 158,
"total_downloads": null,
"dependents_count": null,
"deprecation_note": null,
"maintainers_count": null,
"monthly_downloads": null,
"first_published_at": null,
"latest_published_at": "2024-12-12T13:22:13Z",
"latest_version_yanked": null,
"days_since_latest_publish": 596
}
]
},
"popularity": {
"forks": 0,
"stars": 0,
"watchers": 0,
"fork_history": {
"days": [],
"complete": true,
"collected": 0,
"total_forks": 0
},
"star_history": {
"days": [],
"complete": true,
"collected": 0,
"total_stars": 0,
"collected_at": null
},
"open_issues_and_prs": 0
},
"ai_readiness": {
"has_nix": false,
"example_dirs": [],
"has_llms_txt": false,
"has_dockerfile": false,
"has_mcp_signal": false,
"bootstrap_files": [
"Makefile"
],
"api_schema_files": [],
"has_devcontainer": false,
"typecheck_configs": [],
"toolchain_manifests": [
"go.mod"
],
"largest_source_bytes": 38973,
"source_files_sampled": 262,
"oversized_source_files": 0,
"agent_instruction_files": [],
"agent_instruction_max_bytes": null
},
"dependencies": {
"manifests": [
"go.mod",
"package.json"
],
"advisories": {
"error": null,
"scope": null,
"source": null,
"findings": [],
"collected": false,
"malicious": [],
"truncated": false,
"by_severity": {},
"advisory_count": 0,
"affected_count": 0,
"assessed_count": 0,
"malicious_count": 0,
"assessed_package": null,
"unassessed_count": 0,
"direct_affected_count": 0
},
"ecosystems": [
"go",
"npm"
],
"dependencies": [
{
"name": "github.com/asaskevich/govalidator",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.0.0-20230301143203-a9d515a09cc2"
},
{
"name": "github.com/cristalhq/jwt/v4",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v4.0.2"
},
{
"name": "github.com/dgraph-io/ristretto",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.0.0"
},
{
"name": "github.com/go-jose/go-jose/v3",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v3.0.3"
},
{
"name": "github.com/google/uuid",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.6.0"
},
{
"name": "github.com/gorilla/mux",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.8.0"
},
{
"name": "github.com/gorilla/websocket",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.5.0"
},
{
"name": "github.com/hashicorp/go-retryablehttp",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.7.7"
},
{
"name": "github.com/magiconair/properties",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.8.7"
},
{
"name": "github.com/mattn/goveralls",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.0.12"
},
{
"name": "github.com/mohae/deepcopy",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.0.0-20170929034955-c48cc78d4826"
},
{
"name": "github.com/oleiade/reflections",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.0.1"
},
{
"name": "github.com/ory/go-acc",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.2.9-0.20230103102148-6b1c9a70dbbe"
},
{
"name": "github.com/ory/go-convenience",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.1.0"
},
{
"name": "github.com/ory/x",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.0.677"
},
{
"name": "github.com/parnurzeal/gorequest",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.2.15"
},
{
"name": "github.com/pkg/errors",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.9.1"
},
{
"name": "github.com/stretchr/testify",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.9.0"
},
{
"name": "github.com/tidwall/gjson",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.14.3"
},
{
"name": "go.opentelemetry.io/otel/trace",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.32.0"
},
{
"name": "go.uber.org/mock",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.5.0"
},
{
"name": "golang.org/x/crypto",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.31.0"
},
{
"name": "golang.org/x/net",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.33.0"
},
{
"name": "golang.org/x/oauth2",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.23.0"
},
{
"name": "golang.org/x/text",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.21.0"
}
],
"all_dependencies": {
"error": "GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository",
"source": null,
"packages": [],
"collected": false,
"truncated": false,
"total_count": null,
"direct_count": null,
"indirect_count": null
}
},
"maintainership": {
"issues": {
"open_prs": 0,
"merged_prs": 0,
"open_issues": 0,
"closed_ratio": null,
"closed_issues": 0,
"closed_unmerged_prs": 0
},
"bus_factor": 2,
"bot_contributors": 2,
"top_contributors": [
{
"type": "User",
"login": "aeneasr",
"commits": 266,
"avatar_url": "https://avatars.githubusercontent.com/u/3372410?v=4"
},
{
"type": "User",
"login": "arekkas",
"commits": 56,
"avatar_url": "https://avatars.githubusercontent.com/u/45354970?v=4"
},
{
"type": "User",
"login": "mitar",
"commits": 45,
"avatar_url": "https://avatars.githubusercontent.com/u/585279?v=4"
},
{
"type": "User",
"login": "leetal",
"commits": 14,
"avatar_url": "https://avatars.githubusercontent.com/u/1221839?v=4"
},
{
"type": "User",
"login": "aaslamin",
"commits": 12,
"avatar_url": "https://avatars.githubusercontent.com/u/1800781?v=4"
},
{
"type": "User",
"login": "ory-bot",
"commits": 10,
"avatar_url": "https://avatars.githubusercontent.com/u/60093411?v=4"
},
{
"type": "User",
"login": "kevgo",
"commits": 9,
"avatar_url": "https://avatars.githubusercontent.com/u/268934?v=4"
},
{
"type": "User",
"login": "zepatrik",
"commits": 9,
"avatar_url": "https://avatars.githubusercontent.com/u/5354445?v=4"
},
{
"type": "User",
"login": "narg95",
"commits": 8,
"avatar_url": "https://avatars.githubusercontent.com/u/6938606?v=4"
},
{
"type": "User",
"login": "michaelboke",
"commits": 6,
"avatar_url": "https://avatars.githubusercontent.com/u/2121940?v=4"
}
],
"contributors_sampled": 98,
"top_contributor_share": 0.462
},
"quality_signals": {
"has_ci": true,
"has_tests": true,
"ci_workflows": [
"closed_references.yml",
"conventional_commits.yml",
"format.yml",
"labels.yml",
"licenses.yml",
"oidc-conformity-master.yml",
"oidc-conformity.yml",
"stale.yml",
"test.yml"
],
"has_docs_dir": true,
"linter_configs": [
".golangci.yml"
],
"has_editorconfig": false,
"has_linter_config": true,
"has_precommit_config": false
},
"security_signals": {
"lockfiles": [
"go.sum",
"package-lock.json"
],
"scorecard": {
"checks": [
{
"name": "Binary-Artifacts",
"score": 10,
"reason": "no binaries found in the repo",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#binary-artifacts"
},
{
"name": "Branch-Protection",
"score": 0,
"reason": "branch protection not enabled on development/release branches",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#branch-protection"
},
{
"name": "CI-Tests",
"score": null,
"reason": "no pull request found",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#ci-tests"
},
{
"name": "CII-Best-Practices",
"score": 0,
"reason": "no effort to earn an OpenSSF best practices badge detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#cii-best-practices"
},
{
"name": "Code-Review",
"score": 0,
"reason": "Found 0/30 approved changesets -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#code-review"
},
{
"name": "Contributors",
"score": 10,
"reason": "project has 44 contributing companies or organizations",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#contributors"
},
{
"name": "Dangerous-Workflow",
"score": 10,
"reason": "no dangerous workflow patterns detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dangerous-workflow"
},
{
"name": "Dependency-Update-Tool",
"score": 10,
"reason": "update tool detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dependency-update-tool"
},
{
"name": "Fuzzing",
"score": 0,
"reason": "project is not fuzzed",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#fuzzing"
},
{
"name": "License",
"score": 10,
"reason": "license file detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#license"
},
{
"name": "Maintained",
"score": 0,
"reason": "project was created within the last 90 days. Please review its contents carefully",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#maintained"
},
{
"name": "Packaging",
"score": null,
"reason": "packaging workflow not detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#packaging"
},
{
"name": "Pinned-Dependencies",
"score": 0,
"reason": "dependency not pinned by hash detected -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#pinned-dependencies"
},
{
"name": "SAST",
"score": 0,
"reason": "no SAST tool detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#sast"
},
{
"name": "Security-Policy",
"score": 10,
"reason": "security policy file detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#security-policy"
},
{
"name": "Signed-Releases",
"score": null,
"reason": "no releases found",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#signed-releases"
},
{
"name": "Token-Permissions",
"score": 0,
"reason": "detected GitHub workflow tokens with excessive permissions",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#token-permissions"
},
{
"name": "Vulnerabilities",
"score": 0,
"reason": "51 existing vulnerabilities detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#vulnerabilities"
}
],
"commit": "a5f0b09bf31c17297b25637bb3fec2ff7a55b159",
"ran_at": "2026-08-01T02:22:02Z",
"aggregate_score": 3.9,
"scorecard_version": "v5.5.0"
},
"has_codeql_workflow": false,
"has_security_policy": true,
"has_dependabot_config": false
},
"contribution_flow": {
"collected": true,
"ci_last_run_at": "2026-07-21T07:16:59Z",
"oldest_open_prs": [],
"last_merged_pr_at": null,
"ci_last_conclusion": null,
"oldest_open_issues": []
}
},
"config": {
"disabled_metrics": [],
"disabled_categories": [],
"disabled_components": {}
},
"source": {
"url": "https://github.com/vincentluan/fosite",
"host": "github.com",
"name": "fosite",
"owner": "vincentluan"
},
"metrics": {
"overall": {
"key": "overall",
"band": "at_risk",
"name": "Overall health",
"note": "The weighted overall 39 is calibrated to 34 on the published index scale (record calibration 2026-08-02).",
"notes": [
{
"code": "overall_calibration",
"params": {
"raw": 39,
"calibrated": 34,
"calibration": "2026-08-02"
}
}
],
"value": 34,
"inputs": {
"security": 39,
"vitality": 37,
"community": 12,
"governance": 33,
"calibration": "2026-08-02",
"engineering": 64,
"ai_readiness": 69,
"weighted_overall_raw": 39
},
"components": []
},
"categories": [
{
"key": "vitality",
"band": "weak",
"name": "Vitality",
"value": 37,
"weight": 0.21,
"metrics": [
{
"key": "development_activity",
"band": "at_risk",
"name": "Development activity",
"note": null,
"notes": [],
"value": 29,
"inputs": {
"commits_last_year": 0,
"human_commit_share": 0.91,
"days_since_last_push": 10,
"active_weeks_last_year": 0
},
"components": [
{
"key": "push_recency",
"name": "Push recency",
"detail": "last push 10 days ago",
"points": 28.8,
"status": "partial",
"details": [
{
"code": "push_recency",
"params": {
"days": 10
}
}
],
"max_points": 36
},
{
"key": "commit_cadence",
"name": "Commit cadence",
"detail": "0/52 weeks with commits",
"points": 0,
"status": "missed",
"details": [
{
"code": "commit_cadence_weeks",
"params": {
"weeks": 0
}
}
],
"max_points": 36
},
{
"key": "commit_volume",
"name": "Commit volume",
"detail": "0 commits in the last year",
"points": 0,
"status": "missed",
"details": [
{
"code": "commits_last_year",
"params": {
"count": 0
}
}
],
"max_points": 18
},
{
"key": "openssf_scorecard_maintained",
"name": "OpenSSF Scorecard: Maintained",
"detail": "project was created within the last 90 days. Please review its contents carefully",
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
},
{
"key": "release_discipline",
"band": "weak",
"name": "Release discipline",
"note": "Excluded from scoring (no data or not applicable): OpenSSF Scorecard: Signed-Releases. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"openssf_scorecard_signed_releases"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 48,
"inputs": {
"releases_count": 100,
"latest_release_tag": "v0.49.0",
"releases_from_tags": true,
"days_since_latest_release": 596,
"mean_days_between_releases": 115.9
},
"components": [
{
"key": "ships_releases",
"name": "Ships releases",
"detail": "100 version tags (no GitHub releases)",
"points": 16.2,
"status": "partial",
"details": [
{
"code": "version_tags_no_releases",
"params": {
"count": 100
}
}
],
"max_points": 27
},
{
"key": "release_recency",
"name": "Release recency",
"detail": "latest release 596 days ago",
"points": 7.2,
"status": "partial",
"details": [
{
"code": "release_recency",
"params": {
"days": 596
}
}
],
"max_points": 36
},
{
"key": "release_cadence",
"name": "Release cadence",
"detail": "a release every ~115.9 days",
"points": 19.8,
"status": "partial",
"details": [
{
"code": "release_cadence",
"params": {
"gap": 115.9
}
}
],
"max_points": 27
},
{
"key": "openssf_scorecard_signed_releases",
"name": "OpenSSF Scorecard: Signed-Releases",
"detail": "no releases found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 10
}
]
},
{
"key": "abandonment",
"band": "exceptional",
"name": "Abandonment",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"cap": null,
"state": "unverified",
"guards": [],
"signals": [],
"red_flag": false,
"multiplier_pct": 100,
"declared_reason": null,
"unverified_reason": "repository_too_young",
"unanswered_open_prs": null,
"unanswered_open_issues": null,
"days_since_last_merged_pr": null,
"days_since_last_human_commit": null,
"days_since_last_human_commit_is_floor": false
},
"components": [
{
"key": "project_is_still_maintained",
"name": "Project is still maintained",
"detail": "maintenance record not established from the collected data",
"points": 100,
"status": "met",
"details": [
{
"code": "abandonment_unverified",
"params": {}
}
],
"max_points": 100
}
]
}
],
"description": "Is the project alive — is code being written and are releases shipping?"
},
{
"key": "community",
"band": "critical",
"name": "Community & Adoption",
"value": 12,
"weight": 0.17,
"metrics": [
{
"key": "popularity",
"band": "critical",
"name": "Popularity & adoption",
"note": null,
"notes": [],
"value": 1,
"inputs": {
"forks": 0,
"stars": 0,
"watchers": 0,
"growth_state": "unverified",
"growth_factor_pct": 100,
"growth_unverified_reason": "no_history"
},
"components": [
{
"key": "stars",
"name": "Stars",
"detail": "0 stars",
"points": 0,
"status": "missed",
"details": [
{
"code": "stars",
"params": {
"count": 0
}
}
],
"max_points": 60
},
{
"key": "forks",
"name": "Forks",
"detail": "0 forks",
"points": 0,
"status": "missed",
"details": [
{
"code": "forks",
"params": {
"count": 0
}
}
],
"max_points": 25
},
{
"key": "watchers",
"name": "Watchers",
"detail": "0 watchers",
"points": 0,
"status": "missed",
"details": [
{
"code": "watchers",
"params": {
"count": 0
}
}
],
"max_points": 15
}
]
},
{
"key": "community_health",
"band": "at_risk",
"name": "Community health",
"note": null,
"notes": [],
"value": 25,
"inputs": {
"has_readme": false,
"has_license": false,
"readme_badges": null,
"has_contributing": false,
"has_issue_template": false,
"has_code_of_conduct": false,
"readme_badge_services": [],
"has_pull_request_template": false
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 22.5
},
{
"key": "license",
"name": "License",
"detail": "recognized license (Apache-2.0)",
"points": 22.5,
"status": "met",
"details": [
{
"code": "license_standard",
"params": {}
},
{
"code": "license_spdx",
"params": {
"spdx": "Apache-2.0"
}
}
],
"max_points": 22.5
},
{
"key": "contributing_guide",
"name": "CONTRIBUTING guide",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 18
},
{
"key": "code_of_conduct",
"name": "Code of conduct",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 13.5
},
{
"key": "issue_template",
"name": "Issue template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.2
},
{
"key": "pr_template",
"name": "PR template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 6.3
}
]
}
],
"description": "Does the project have users, downloads, attention, and a welcoming setup for contributors?"
},
{
"key": "governance",
"band": "at_risk",
"name": "Sustainability & Governance",
"value": 33,
"weight": 0.23,
"metrics": [
{
"key": "maintainer_resilience",
"band": "moderate",
"name": "Maintainer resilience (bus factor)",
"note": null,
"notes": [],
"value": 61,
"inputs": {
"bus_factor": 2,
"contributors_sampled": 98,
"top_contributor_share": 0.462
},
"components": [
{
"key": "bus_factor",
"name": "Bus factor",
"detail": "2 contributor(s) cover half of all commits",
"points": 25.2,
"status": "partial",
"details": [
{
"code": "bus_factor",
"params": {
"count": 2
}
}
],
"max_points": 54
},
{
"key": "commit_distribution",
"name": "Commit distribution",
"detail": "top contributor authored 46% of commits",
"points": 12.1,
"status": "partial",
"details": [
{
"code": "top_contributor_share",
"params": {
"share": 46
}
}
],
"max_points": 22.5
},
{
"key": "contributor_breadth",
"name": "Contributor breadth",
"detail": "98 contributors",
"points": 13.5,
"status": "met",
"details": [
{
"code": "contributors_sampled",
"params": {
"count": 98
}
}
],
"max_points": 13.5
},
{
"key": "openssf_scorecard_contributors",
"name": "OpenSSF Scorecard: Contributors",
"detail": "project has 44 contributing companies or organizations",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
}
]
},
{
"key": "responsiveness",
"band": "critical",
"name": "Issue & PR responsiveness",
"note": "Excluded from scoring (no data or not applicable): Issue resolution, PR acceptance, Newcomer PR acceptance. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"issue_resolution",
"pr_acceptance",
"newcomer_pr_acceptance"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 1,
"inputs": {
"merged_prs": 0,
"open_issues": 0,
"closed_issues": 0,
"prs_merged_7d": null,
"prs_decided_7d": null,
"prs_merged_30d": null,
"prs_decided_30d": null,
"issue_closed_ratio": null,
"closed_unmerged_prs": 0,
"first_time_authors_30d": null,
"first_time_prs_merged_30d": null,
"first_time_prs_decided_30d": null
},
"components": [
{
"key": "issue_resolution",
"name": "Issue resolution",
"detail": "no issues or no data",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_issues_or_data",
"params": {}
}
],
"max_points": 42
},
{
"key": "pr_acceptance",
"name": "PR acceptance",
"detail": "no decided pull requests or no data",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_decided_prs_or_data",
"params": {}
}
],
"max_points": 30
},
{
"key": "newcomer_pr_acceptance",
"name": "Newcomer PR acceptance",
"detail": "no first-time contributor's PR decided in 30d",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_newcomer_prs",
"params": {
"days": 30
}
}
],
"max_points": 13
},
{
"key": "openssf_scorecard_code_review",
"name": "OpenSSF Scorecard: Code-Review",
"detail": "Found 0/30 approved changesets -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
}
]
},
{
"key": "stewardship",
"band": "at_risk",
"name": "Ownership & stewardship",
"note": "Excluded from scoring (no data or not applicable): Verified domain. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"verified_domain"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 32,
"inputs": {
"followers": 0,
"owner_type": "User",
"is_verified": null,
"owner_login": "vincentluan",
"public_repos": 4,
"account_age_days": 1901
},
"components": [
{
"key": "ownership_backing",
"name": "Ownership backing",
"detail": "personal (user) account",
"points": 10,
"status": "partial",
"details": [
{
"code": "owner_personal",
"params": {}
}
],
"max_points": 30
},
{
"key": "verified_domain",
"name": "Verified domain",
"detail": "not applicable to user accounts",
"points": 0,
"status": "excluded",
"details": [
{
"code": "not_applicable_to_user_accounts",
"params": {}
}
],
"max_points": 20
},
{
"key": "owner_reach",
"name": "Owner reach",
"detail": "0 followers of vincentluan",
"points": 0,
"status": "missed",
"details": [
{
"code": "owner_followers",
"params": {
"count": 0,
"login": "vincentluan"
}
}
],
"max_points": 25
},
{
"key": "track_record",
"name": "Track record",
"detail": "4 public repos, account ~5 yr old",
"points": 15.5,
"status": "partial",
"details": [
{
"code": "public_repos",
"params": {
"count": 4
}
},
{
"code": "account_age_years",
"params": {
"years": 5
}
}
],
"max_points": 25
}
]
}
],
"description": "Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?"
},
{
"key": "engineering",
"band": "moderate",
"name": "Engineering Quality",
"value": 64,
"weight": 0.19,
"metrics": [
{
"key": "engineering_practices",
"band": "excellent",
"name": "Engineering practices",
"note": "Excluded from scoring (no data or not applicable): OpenSSF Scorecard: CI-Tests. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"openssf_scorecard_ci_tests"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 80,
"inputs": {
"has_ci": true,
"has_tests": true,
"has_editorconfig": false,
"has_linter_config": true,
"has_precommit_config": false
},
"components": [
{
"key": "ci_workflows",
"name": "CI workflows",
"detail": "9 workflow(s)",
"points": 24,
"status": "met",
"details": [
{
"code": "ci_workflows",
"params": {
"count": 9
}
}
],
"max_points": 24
},
{
"key": "tests_present",
"name": "Tests present",
"detail": null,
"points": 24,
"status": "met",
"details": [],
"max_points": 24
},
{
"key": "linter_config",
"name": "Linter config",
"detail": ".golangci.yml",
"points": 16,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": ".golangci.yml"
}
}
],
"max_points": 16
},
{
"key": "pre_commit_hooks",
"name": "Pre-commit hooks",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 9.6
},
{
"key": "editorconfig",
"name": ".editorconfig",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 6.4
},
{
"key": "openssf_scorecard_ci_tests",
"name": "OpenSSF Scorecard: CI-Tests",
"detail": "no pull request found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 20
}
]
},
{
"key": "documentation",
"band": "weak",
"name": "Documentation",
"note": null,
"notes": [],
"value": 40,
"inputs": {
"topics": [],
"has_wiki": false,
"homepage": "https://www.ory.com/?utm_source=github&utm_medium=banner&utm_campaign=fosite",
"has_readme": false,
"has_docs_dir": true,
"has_description": false
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 30
},
{
"key": "documentation_directory",
"name": "Documentation directory",
"detail": null,
"points": 25,
"status": "met",
"details": [],
"max_points": 25
},
{
"key": "documentation_homepage_site",
"name": "Documentation / homepage site",
"detail": "https://www.ory.com/?utm_source=github&utm_medium=banner&utm_campaign=fosite",
"points": 15,
"status": "met",
"details": [],
"max_points": 15
},
{
"key": "repository_description",
"name": "Repository description",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
},
{
"key": "topics",
"name": "Topics",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
},
{
"key": "wiki",
"name": "Wiki",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
}
],
"description": "Are baseline engineering and documentation practices in place?"
},
{
"key": "security",
"band": "weak",
"name": "Security",
"value": 39,
"weight": 0.16,
"metrics": [
{
"key": "security_posture",
"band": "weak",
"name": "Security posture",
"note": "Excluded from scoring (no data or not applicable): CI-Tests, Packaging, Signed-Releases. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"ci_tests",
"packaging",
"signed_releases"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 39,
"inputs": {
"source": "openssf_scorecard",
"checks_evaluated": 15,
"scorecard_version": "v5.5.0",
"checks_inconclusive": 3,
"scorecard_aggregate": 3.9
},
"components": [
{
"key": "binary_artifacts",
"name": "Binary-Artifacts",
"detail": "no binaries found in the repo",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "branch_protection",
"name": "Branch-Protection",
"detail": "branch protection not enabled on development/release branches",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "ci_tests",
"name": "CI-Tests",
"detail": "no pull request found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 2.5
},
{
"key": "cii_best_practices",
"name": "CII-Best-Practices",
"detail": "no effort to earn an OpenSSF best practices badge detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 2.5
},
{
"key": "code_review",
"name": "Code-Review",
"detail": "Found 0/30 approved changesets -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "contributors",
"name": "Contributors",
"detail": "project has 44 contributing companies or organizations",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "dangerous_workflow",
"name": "Dangerous-Workflow",
"detail": "no dangerous workflow patterns detected",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
},
{
"key": "dependency_update_tool",
"name": "Dependency-Update-Tool",
"detail": "update tool detected",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "fuzzing",
"name": "Fuzzing",
"detail": "project is not fuzzed",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "license",
"name": "License",
"detail": "license file detected",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "maintained",
"name": "Maintained",
"detail": "project was created within the last 90 days. Please review its contents carefully",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "packaging",
"name": "Packaging",
"detail": "packaging workflow not detected",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 5
},
{
"key": "pinned_dependencies",
"name": "Pinned-Dependencies",
"detail": "dependency not pinned by hash detected -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "sast",
"name": "SAST",
"detail": "no SAST tool detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "security_policy",
"name": "Security-Policy",
"detail": "security policy file detected",
"points": 5,
"status": "met",
"details": [],
"max_points": 5
},
{
"key": "signed_releases",
"name": "Signed-Releases",
"detail": "no releases found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 7.5
},
{
"key": "token_permissions",
"name": "Token-Permissions",
"detail": "detected GitHub workflow tokens with excessive permissions",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "vulnerabilities",
"name": "Vulnerabilities",
"detail": "51 existing vulnerabilities detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
}
]
},
{
"key": "high_risk_jurisdiction_exposure",
"band": "exceptional",
"name": "High-Risk Jurisdiction Exposure",
"note": "Only high-confidence self-published location evidence affects this multiplier. Ambiguous matches are review-only; country evidence is not proof of nationality, citizenship, legal registration, malicious intent, or sanctions status.",
"notes": [
{
"code": "jurisdiction_evidence_limits",
"params": {}
}
],
"value": 100,
"inputs": {
"meaning": "self-published location evidence; not nationality or citizenship",
"red_flag": false,
"exposures": [],
"policy_countries": [
"Russia",
"Iran",
"North Korea"
],
"commit_weight_rule": {
"min_commits": 50,
"min_commit_share": 0.1
},
"review_only_matches": 0,
"below_threshold_exposures": [],
"assessed_self_published_locations": 21
},
"components": [
{
"key": "policy_exposure_multiplier",
"name": "Policy exposure multiplier",
"detail": "no confirmed policy-scope location match",
"points": 100,
"status": "met",
"details": [
{
"code": "jurisdiction_no_match",
"params": {}
}
],
"max_points": 100
}
]
}
],
"description": "Are visible security and supply-chain practices strong, with no malicious dependency and no unresolved high-risk jurisdiction exposure?"
},
{
"key": "ai_readiness",
"band": "good",
"name": "AI Readiness",
"value": 69,
"weight": 0.04,
"metrics": [
{
"key": "ai_agent_context",
"band": "weak",
"name": "Agent context & guidance",
"note": null,
"notes": [],
"value": 40,
"inputs": {
"has_llms_txt": false,
"legible_history_share": 1,
"agent_instruction_files": [],
"agent_instruction_max_bytes": null
},
"components": [
{
"key": "agent_instructions",
"name": "Agent instructions",
"detail": "no CLAUDE.md / AGENTS.md / editor rules",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_agent_instructions",
"params": {}
}
],
"max_points": 45
},
{
"key": "machine_readable_docs_llms_txt",
"name": "Machine-readable docs (llms.txt)",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
},
{
"key": "legible_commit_history",
"name": "Legible commit history",
"detail": "91 of 91 human commits state their intent (structured subject or explanatory body)",
"points": 40,
"status": "met",
"details": [
{
"code": "legible_history",
"params": {
"legible": 91,
"sampled": 91
}
}
],
"max_points": 40
}
]
},
{
"key": "ai_verify_loop",
"band": "excellent",
"name": "Verify loop (build / test / typecheck)",
"note": null,
"notes": [],
"value": 80,
"inputs": {
"has_nix": false,
"has_tests": true,
"lockfiles": [
"go.sum",
"package-lock.json"
],
"has_dockerfile": false,
"typed_language": true,
"bootstrap_files": [
"Makefile"
],
"has_devcontainer": false,
"has_linter_config": true,
"typecheck_configs": [],
"agent_commit_share": 0,
"toolchain_manifests": [
"go.mod"
],
"dependency_bot_commit_share": 0.09
},
"components": [
{
"key": "one_command_bootstrap",
"name": "One-command bootstrap",
"detail": "Makefile",
"points": 18,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "Makefile"
}
}
],
"max_points": 18
},
{
"key": "automated_tests",
"name": "Automated tests",
"detail": null,
"points": 22,
"status": "met",
"details": [],
"max_points": 22
},
{
"key": "lint_format_config",
"name": "Lint / format config",
"detail": ".golangci.yml",
"points": 11,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": ".golangci.yml"
}
}
],
"max_points": 11
},
{
"key": "static_type_checking",
"name": "Static type checking",
"detail": "Go (statically typed)",
"points": 11,
"status": "met",
"details": [
{
"code": "statically_typed_language",
"params": {
"language": "Go"
}
}
],
"max_points": 11
},
{
"key": "reproducible_environment",
"name": "Reproducible environment",
"detail": "lockfile",
"points": 10,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "lockfile"
}
}
],
"max_points": 10
},
{
"key": "demonstrated_agent_practice",
"name": "Demonstrated agent practice",
"detail": "no agent-authored commits among the last 100",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_agent_authored_commits",
"params": {
"sampled": 100
}
}
],
"max_points": 10
},
{
"key": "automated_maintenance",
"name": "Automated maintenance",
"detail": "9 of the last 100 commits are automated dependency updates",
"points": 8,
"status": "met",
"details": [
{
"code": "dependency_bot_commits",
"params": {
"count": 9,
"sampled": 100
}
}
],
"max_points": 8
},
{
"key": "openssf_scorecard_pinned_dependencies",
"name": "OpenSSF Scorecard: Pinned-Dependencies",
"detail": "dependency not pinned by hash detected -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
},
{
"key": "ai_code_legibility",
"band": "exceptional",
"name": "Code legibility for models",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"primary_language": "Go",
"largest_source_bytes": 38973,
"source_files_sampled": 262,
"oversized_source_files": 0
},
"components": [
{
"key": "type_checkable_code",
"name": "Type-checkable code",
"detail": "Go (statically typed)",
"points": 45,
"status": "met",
"details": [
{
"code": "statically_typed_language",
"params": {
"language": "Go"
}
}
],
"max_points": 45
},
{
"key": "manageable_file_sizes",
"name": "Manageable file sizes",
"detail": "0/262 source files over 60KB",
"points": 55,
"status": "met",
"details": [
{
"code": "oversized_source_files",
"params": {
"kb": 60,
"sampled": 262,
"oversized": 0
}
}
],
"max_points": 55
}
]
}
],
"description": "How well is the repo equipped to be developed and maintained with AI coding agents? Carries a deliberately small weight: agent tooling is a real maintenance signal, but its absence must never gate the top of the scale (calibration saturates at raw 91, so 100/100 remains reachable with AI Readiness at zero)."
}
],
"classification": {
"labels": [],
"scores": {
"sdk": 2
},
"primary": null,
"evidence": [
{
"tier": "description",
"label": "sdk",
"source": "description:sdk",
"weight": 2
}
],
"artifacts": [],
"confidence": "none",
"host_extension": false,
"runs_as_process": false,
"consumed_by_code": false
},
"metrics_version": "2.3.1"
},
"warnings": [
"Community profile unavailable",
"go package 'github.com/ory/fosite' points at a different repository (https://github.com/ory/fosite); excluded from ecosystem scoring",
"GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository"
],
"report_type": "repository",
"generated_at": "2026-08-01T02:22:17.649331Z",
"schema_version": "0.27.0",
"badge_url": "https://raw.githubusercontent.com/inspect-software/badges/main/v1/v/vincentluan/fosite.svg",
"full_name": "vincentluan/fosite",
"license_state": "standard",
"license_spdx": "Apache-2.0"
}Bewertungen sind Signale, keine Garantien. Sie spiegeln öffentlich sichtbare Praxis auf GitHub wider — kein Code-Audit und keine Sicherheitsgarantie.
Fehlende Daten werden ausgeschlossen und die Gewichte neu normiert, nie als null bewertet. Die Methodik ist versioniert und offen: Metriken v2.3.1, Schema v0.27.0 — vollständige Methodik · Metriken-Wiki.
Wie ein einzelnes Ergebnis im Gesamtregister steht: aggregierte Statistiken — Go.